{ "analysis_id": "8f0da1cd-9998-4d41-9fc7-683302a6ee24", "session_id": "2b5677d6-f466-4831-89aa-be3126dddaef", "status": "completed", "filename": "2021-10-22-ISC-forensic-challenge-traffic.pcap", "source_sha256": "95074aea864749524df5b0a6c9fd58a3111038157b3400902486b96d902b3455", "source_size_bytes": 49007428, "schema_version": "pcap-analysis-v1", "semantic_sha256": "e2a781b6839946af3b4581e8fbaa850bc68bbe393fce12f786178323e0ccd04d", "analyzer_manifest": { "schema_version": "pcap-analyzer-manifest-v1", "profile_id": "tshark-evidence-v3", "rulepack_version": "pcap-rules-v3", "tshark_version": "TShark (Wireshark) 4.4.18.", "implementation_sha256": "9e8d2397c92213d4143ee2e4e2f86f0c1606d085cc7a81fd3ab98e687a5a9388", "capinfos_version": "Capinfos (Wireshark) 4.4.18.", "limits": { "max_upload_bytes": 536870912, "tool_timeout_seconds": 300, "max_tool_output_bytes": 268435456, "max_events_per_kind": 50000, "max_flows": 50000, "max_endpoints": 20000, "max_exported_objects": 500, "max_object_hash_index": 50000, "max_exported_object_bytes": 52428800, "max_exported_total_bytes": 268435456 }, "requested_fields_sha256": "fb9865915ed277886a75f522c6f27708f67e4e28e7a9d4a051ed816dd6783b15", "supported_profile_fields_sha256": "917cc2ac17024ecb151d0baaf8ddfb0767624db4f29d127ec668d6ebb5d80604", "profile_sha256": "7bdd5b06266e645efbbef1674e9934e21a27fcb37b084c18bcfe6abd8192ade3", "manifest_sha256": "ee952aeb7cdc6958f4ae5178c54c274a1e4f0aec4d42f3bdb95baaff063b3dde" }, "summary": "Decoded 84542 packets across 216 IP endpoints and 2746 transport flows. Observed 2061 DNS events, 120 HTTP requests, 409 TLS ClientHello events, and 4 exported HTTP object(s). Deterministic rules produced 37 finding(s): 0 high, 13 medium, and 24 low. Findings are evidence-bound candidates and require analyst review; encrypted payload contents remain unavailable.", "report": "# AdversaryGraph Deterministic PCAP Analysis\n\nSource: 2021-10-22-ISC-forensic-challenge-traffic.pcap\nCapture SHA-256: `95074aea864749524df5b0a6c9fd58a3111038157b3400902486b96d902b3455`\nSemantic result SHA-256: `e2a781b6839946af3b4581e8fbaa850bc68bbe393fce12f786178323e0ccd04d`\nAnalyzer manifest SHA-256: `ee952aeb7cdc6958f4ae5178c54c274a1e4f0aec4d42f3bdb95baaff063b3dde`\n\n## Executive summary\n\nDecoded 84542 packets across 216 IP endpoints and 2746 transport flows. Observed 2061 DNS events, 120 HTTP requests, 409 TLS ClientHello events, and 4 exported HTTP object(s). Deterministic rules produced 37 finding(s): 0 high, 13 medium, and 24 low. Findings are evidence-bound candidates and require analyst review; encrypted payload contents remain unavailable.\n\n## Capture facts\n\n- Packets: 84542\n- Duration: 5547.683987 seconds\n- Captured bytes: 47654732\n- Endpoints: 216\n- Flows: 2746\n\n## Deterministic findings\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 825, frame 1639, frame 2954, frame 15029, frame 17432.\n\nMetrics: `{\"domain\":\"wpad.enemywatch.net\",\"response_count\":42,\"source\":\"10.10.22.156\"}`\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 827, frame 1641, frame 2956, frame 15031, frame 17435.\n\nMetrics: `{\"domain\":\"wpad.localdomain\",\"response_count\":42,\"source\":\"10.10.22.156\"}`\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 39, frame 752, frame 1643, frame 11964, frame 22840.\n\nMetrics: `{\"domain\":\"wpad.enemywatch.net\",\"response_count\":12,\"source\":\"10.10.22.157\"}`\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 41, frame 754, frame 1645, frame 11966, frame 22842.\n\nMetrics: `{\"domain\":\"wpad.localdomain\",\"response_count\":12,\"source\":\"10.10.22.157\"}`\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 1719, frame 2522, frame 3813, frame 6217, frame 6501.\n\nMetrics: `{\"domain\":\"wpad.enemywatch.net\",\"response_count\":16,\"source\":\"10.10.22.158\"}`\n\n### LOW — Repeated unsuccessful DNS resolution\n\nRepeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.\n\nRule: `repeated-nxdomain@pcap-rules-v3`; confidence: 0.5; evidence: frame 1721, frame 2524, frame 3815, frame 6219, frame 6503.\n\nMetrics: `{\"domain\":\"wpad.localdomain\",\"response_count\":16,\"source\":\"10.10.22.158\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 999 / TCP stream 46, frame 1001 / TCP stream 46, frame 1003 / TCP stream 46, frame 1013 / TCP stream 46, frame 1015 / TCP stream 46.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":59,\"operation_numbers\":[\"0\",\"1\",\"12\",\"13\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.156\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 804 / TCP stream 37, frame 965 / TCP stream 37, frame 994 / TCP stream 37, frame 1062 / TCP stream 55, frame 1069 / TCP stream 55.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":102,\"operation_numbers\":[\"\",\"0\",\"2\",\"3\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.156\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 4249 / TCP stream 187, frame 4251 / TCP stream 187, frame 4253 / TCP stream 187, frame 4255 / TCP stream 187, frame 4257 / TCP stream 187.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":15,\"operation_numbers\":[\"1\",\"16\",\"17\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.156\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 127 / TCP stream 3, frame 131 / TCP stream 3, frame 134 / TCP stream 3, frame 145 / TCP stream 3, frame 147 / TCP stream 3.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":49,\"operation_numbers\":[\"0\",\"1\",\"12\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.157\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 27 / TCP stream 0, frame 91 / TCP stream 5, frame 120 / TCP stream 5, frame 129 / TCP stream 5, frame 133 / TCP stream 5.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":92,\"operation_numbers\":[\"\",\"0\",\"2\",\"3\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.157\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 3468 / TCP stream 157, frame 3470 / TCP stream 157, frame 3472 / TCP stream 157, frame 3474 / TCP stream 157, frame 3476 / TCP stream 157.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":15,\"operation_numbers\":[\"1\",\"16\",\"17\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.157\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 1951 / TCP stream 93, frame 1959 / TCP stream 93, frame 1963 / TCP stream 93, frame 1964 / TCP stream 86, frame 1968 / TCP stream 86.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":53,\"operation_numbers\":[\"0\",\"1\",\"12\",\"13\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.158\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 1696 / TCP stream 79, frame 1776 / TCP stream 84, frame 1907 / TCP stream 79, frame 1938 / TCP stream 84, frame 1960 / TCP stream 84.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":88,\"operation_numbers\":[\"\",\"0\",\"2\",\"3\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.158\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 2699 / TCP stream 126, frame 2701 / TCP stream 126, frame 2703 / TCP stream 126, frame 2705 / TCP stream 126, frame 2708 / TCP stream 126.\n\nMetrics: `{\"destination\":\"10.10.22.22\",\"event_count\":43,\"operation_numbers\":[\"1\",\"16\",\"17\",\"18\",\"19\",\"20\",\"25\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.158\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 1000 / TCP stream 46, frame 1002 / TCP stream 46, frame 1004 / TCP stream 46, frame 1014 / TCP stream 46, frame 1016 / TCP stream 46.\n\nMetrics: `{\"destination\":\"10.10.22.156\",\"event_count\":59,\"operation_numbers\":[\"0\",\"1\",\"12\",\"13\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 806 / TCP stream 37, frame 968 / TCP stream 37, frame 1064 / TCP stream 55, frame 1071 / TCP stream 55, frame 1073 / TCP stream 55.\n\nMetrics: `{\"destination\":\"10.10.22.156\",\"event_count\":82,\"operation_numbers\":[\"\",\"1\",\"4,19,19,19,5\",\"4,5\",\"5\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 4250 / TCP stream 187, frame 4252 / TCP stream 187, frame 4254 / TCP stream 187, frame 4256 / TCP stream 187, frame 4258 / TCP stream 187.\n\nMetrics: `{\"destination\":\"10.10.22.156\",\"event_count\":15,\"operation_numbers\":[\"1\",\"16\",\"17\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 128 / TCP stream 3, frame 132 / TCP stream 3, frame 135 / TCP stream 3, frame 146 / TCP stream 3, frame 150 / TCP stream 3.\n\nMetrics: `{\"destination\":\"10.10.22.157\",\"event_count\":49,\"operation_numbers\":[\"0\",\"1\",\"12\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 29 / TCP stream 0, frame 93 / TCP stream 5, frame 124 / TCP stream 5, frame 130 / TCP stream 5, frame 136 / TCP stream 5.\n\nMetrics: `{\"destination\":\"10.10.22.157\",\"event_count\":74,\"operation_numbers\":[\"\",\"1\",\"4,19,19,19,5\",\"4,5\",\"5\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 3469 / TCP stream 157, frame 3471 / TCP stream 157, frame 3473 / TCP stream 157, frame 3475 / TCP stream 157, frame 3477 / TCP stream 157.\n\nMetrics: `{\"destination\":\"10.10.22.157\",\"event_count\":15,\"operation_numbers\":[\"1\",\"16\",\"17\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 1954 / TCP stream 93, frame 1961 / TCP stream 93, frame 1965 / TCP stream 93, frame 1966 / TCP stream 86, frame 1972 / TCP stream 86.\n\nMetrics: `{\"destination\":\"10.10.22.158\",\"event_count\":53,\"operation_numbers\":[\"0\",\"1\",\"12\",\"13\",\"30\"],\"protocol\":\"drsuapi\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 1698 / TCP stream 79, frame 1779 / TCP stream 84, frame 1925 / TCP stream 79, frame 1947 / TCP stream 84, frame 1962 / TCP stream 84.\n\nMetrics: `{\"destination\":\"10.10.22.158\",\"event_count\":71,\"operation_numbers\":[\"\",\"1\",\"4,19,19,19,5\",\"4,5\",\"5\"],\"protocol\":\"ldap\",\"source\":\"10.10.22.22\"}`\n\n### LOW — Directory-service protocol activity\n\nDirectory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.\n\nRule: `directory-service-activity@pcap-rules-v3`; confidence: 0.95; evidence: frame 2700 / TCP stream 126, frame 2702 / TCP stream 126, frame 2704 / TCP stream 126, frame 2706 / TCP stream 126, frame 2709 / TCP stream 126.\n\nMetrics: `{\"destination\":\"10.10.22.158\",\"event_count\":43,\"operation_numbers\":[\"1\",\"16\",\"17\",\"18\",\"19\",\"20\",\"25\",\"3\",\"34\",\"36\",\"39\",\"5\",\"6\",\"64\",\"7\"],\"protocol\":\"samr\",\"source\":\"10.10.22.22\"}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 5644 / TCP stream 232.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":336.595,\"packets\":514,\"source\":\"10.10.22.157\",\"wire_bytes\":376928}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 17795 / TCP stream 391.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":171.549,\"packets\":72,\"source\":\"10.10.22.157\",\"wire_bytes\":4376}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 24560 / TCP stream 691.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":330.753,\"packets\":134,\"source\":\"10.10.22.157\",\"wire_bytes\":8096}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 42858 / TCP stream 810.\n\nMetrics: `{\"destination\":\"23.111.114.52\",\"destination_port\":65400,\"duration_seconds\":3322.704,\"packets\":9622,\"source\":\"10.10.22.156\",\"wire_bytes\":1586196}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 51877 / TCP stream 968.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":334.618,\"packets\":136,\"source\":\"10.10.22.157\",\"wire_bytes\":8216}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 61387 / TCP stream 1254.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":330.634,\"packets\":134,\"source\":\"10.10.22.157\",\"wire_bytes\":8096}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 67512 / TCP stream 1346.\n\nMetrics: `{\"destination\":\"45.153.241.142\",\"destination_port\":443,\"duration_seconds\":699.347,\"packets\":52,\"source\":\"10.10.22.156\",\"wire_bytes\":3186}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 67513 / TCP stream 1347.\n\nMetrics: `{\"destination\":\"45.153.241.142\",\"destination_port\":443,\"duration_seconds\":699.318,\"packets\":54,\"source\":\"10.10.22.156\",\"wire_bytes\":3306}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 69549 / TCP stream 1450.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":331.166,\"packets\":132,\"source\":\"10.10.22.157\",\"wire_bytes\":7976}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 74529 / TCP stream 1485.\n\nMetrics: `{\"destination\":\"45.153.241.142\",\"destination_port\":443,\"duration_seconds\":30.11,\"packets\":19,\"source\":\"10.10.22.156\",\"wire_bytes\":1120}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 76852 / TCP stream 1559.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":333.255,\"packets\":132,\"source\":\"10.10.22.157\",\"wire_bytes\":7976}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 81050 / TCP stream 1607.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":331.75,\"packets\":134,\"source\":\"10.10.22.157\",\"wire_bytes\":8096}`\n\n### MEDIUM — Sustained external TCP conversation outside decoded application coverage\n\nThe flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.\n\nRule: `unclassified-external-tcp@pcap-rules-v3`; confidence: 0.7; evidence: frame 83774 / TCP stream 1645.\n\nMetrics: `{\"destination\":\"37.0.10.22\",\"destination_port\":1187,\"duration_seconds\":91.986,\"packets\":41,\"source\":\"10.10.22.157\",\"wire_bytes\":2522}`\n\n## ATT&CK candidates\n\n- No deterministic ATT&CK candidates.\n\n## Identities\n\n- account: `agnes.warren`; client IPs: 10.10.22.156; frames: 4153, 4161, 4163, 4175, 4208\n- account: `desktop-87wce26$`; client IPs: 10.10.22.158; frames: 1764, 1791, 1796, 1798, 1809\n- account: `desktop-cfa3367$`; client IPs: 10.10.22.156; frames: 848, 856, 858, 883, 896\n- account: `desktop-nz875r4$`; client IPs: 10.10.22.157; frames: 80, 98, 100, 112, 197\n- account: `kevin.henderson`; client IPs: 10.10.22.158; frames: 2596, 2604, 2606, 2618, 2659\n- account: `marcus.cobb`; client IPs: 10.10.22.157; frames: 3366, 3374, 3376, 3388, 3431\n- domain: `ENEMYWATCH`; client IPs: 10.10.22.156, 10.10.22.157, 10.10.22.158; frames: 2682, 3454, 4233, 56437, 56472\n- full-name: `Agnes Warren`; client IPs: 10.10.22.156; frames: 4264\n- full-name: `Kevin Henderson`; client IPs: 10.10.22.158; frames: 2715\n- full-name: `Marcus Cobb`; client IPs: 10.10.22.157; frames: 3483\n- hostname: `DESKTOP-87WCE26`; client IPs: 10.10.22.158; frames: 1667, 1691, 1726, 2106, 2107\n- hostname: `DESKTOP-CFA3367`; client IPs: 10.10.22.156; frames: 776, 797, 871, 1183, 1197\n- hostname: `DESKTOP-NZ875R4`; client IPs: 10.10.22.157; frames: 1, 42, 333, 343, 545\n- netbios-group: `ENEMYWATCH`; client IPs: unbound subject; frames: 43, 342, 546, 625, 626\n\n## IOC and artifact candidates\n\n- domain: `112.146.66.173.in-addr.arpa`; roles: dns-query\n- domain: `22.22.10.10.in-addr.arpa`; roles: dns-query\n- domain: `a-9999.dc-msedge.net`; roles: dns-cname\n- domain: `a-ring-fallback.msedge.net`; roles: dns-query, tls-sni\n- domain: `a-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `a.nel.cloudflare.com`; roles: dns-query, tls-sni\n- domain: `a1449.dscg2.akamai.net`; roles: dns-cname\n- domain: `activity-geo.trafficmanager.net`; roles: dns-cname\n- domain: `activity.windows.com`; roles: dns-query, tls-sni\n- domain: `api.ipify.org`; roles: dns-query, tls-sni\n- domain: `api.msn.com`; roles: dns-query, tls-sni\n- domain: `aqsouhyw.bazar`; roles: dns-query\n- domain: `av.dial-up.net`; roles: dns-query\n- domain: `b-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `bing.com`; roles: dns-query, tls-sni\n- domain: `bluehail.bazar`; roles: dns-query\n- domain: `c-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `calacatta.com`; roles: dns-cname\n- domain: `cj.dotomi.com`; roles: dns-query, tls-sni\n- domain: `client.wns.windows.com`; roles: dns-query, tls-sni\n- domain: `config.edge.skype.com`; roles: dns-query, tls-sni\n- domain: `continuum.dds.microsoft.com`; roles: dns-query, tls-sni\n- domain: `cs-geo-dds.trafficmanager.net`; roles: dns-cname\n- domain: `ctldl.windowsupdate.com`; roles: dns-query, http-host\n- domain: `desktop-87wce26.enemywatch.net`; roles: dns-query\n- domain: `desktop-cfa3367.enemywatch.net`; roles: dns-query\n- domain: `desktop-nz875r4.enemywatch.net`; roles: dns-query\n- domain: `dns.msftncsi.com`; roles: dns-query\n- domain: `eafddirect.msedge.net`; roles: dns-query\n- domain: `edge.activity.windows.com`; roles: dns-query, tls-sni\n- domain: `edge.microsoft.com`; roles: dns-query, tls-sni\n- domain: `enemywatch-dc.enemywatch.net`; roles: dns-query\n- domain: `enemywatch.net`; roles: dns-query\n- domain: `fe2cr.update.microsoft.com`; roles: dns-query, tls-sni\n- domain: `fe2cr.update.microsoft.com.akadns.net`; roles: dns-cname\n- domain: `fe3cr.delivery.mp.microsoft.com`; roles: dns-query, tls-sni\n- domain: `fp-afd.azurefd.us`; roles: dns-query, tls-sni\n- domain: `fp-as.azureedge.net`; roles: dns-query, tls-sni\n- domain: `fp-vs-nocache.azureedge.net`; roles: dns-query, tls-sni\n- domain: `grtovxn.enemywatch.net`; roles: dns-query\n- domain: `grtovxn.localdomain`; roles: dns-query\n- domain: `hzmx01.mxmail.netease.com`; roles: dns-query, tls-sni\n- domain: `imap.gmail.com`; roles: dns-query\n- domain: `img-prod-cms-rt-microsoft-com.akamaized.net`; roles: dns-query, tls-sni\n- domain: `inbound.att.net`; roles: dns-query\n- domain: `k-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `kamuchehddhgfgf.ddns.net`; roles: dns-query\n- domain: `l-0005.dc-msedge.net`; roles: dns-cname\n- domain: `l-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `login.live.com`; roles: dns-query, tls-sni\n- domain: `login.microsoftonline.com`; roles: dns-query, tls-sni\n- domain: `mail.abchk.net`; roles: dns-query, tls-sni\n- domain: `mail.ajeel.fr`; roles: dns-query, tls-sni\n- domain: `mail.akinao-lab.com`; roles: dns-query, tls-sni\n- domain: `mail.anberman.es`; roles: dns-query, tls-sni\n- domain: `mail.atelierscalin.fr`; roles: dns-query, tls-sni\n- domain: `mail.austinjournls.com`; roles: dns-query\n- domain: `mail.be-daventure.fr`; roles: dns-query, tls-sni\n- domain: `mail.bethnet.co.za`; roles: dns-query, tls-sni\n- domain: `mail.brins-d-eveil.fr`; roles: dns-query, tls-sni\n- domain: `mail.burgers.cc`; roles: dns-query\n- domain: `mail.chokshiandchokshi.in`; roles: dns-query\n- domain: `mail.come-paris.fr`; roles: dns-query, tls-sni\n- domain: `mail.corteo.fr`; roles: dns-query, tls-sni\n- domain: `mail.csnert.fr`; roles: dns-query, tls-sni\n- domain: `mail.debtmend.co.za`; roles: dns-query, tls-sni\n- domain: `mail.doctor-healthcare.com`; roles: dns-query, tls-sni\n- domain: `mail.eolas.fr`; roles: dns-query, tls-sni\n- domain: `mail.goldmarkconsultants.com`; roles: dns-query\n- domain: `mail.hrctunisia.com`; roles: dns-query, tls-sni\n- domain: `mail.ipage.com`; roles: dns-query, tls-sni\n- domain: `mail.isoldry.com`; roles: dns-query, tls-sni\n- domain: `mail.kalivet.com`; roles: dns-query, tls-sni\n- domain: `mail.kbcrawl.net`; roles: dns-query, tls-sni\n- domain: `mail.lecmg.fr`; roles: dns-query, tls-sni\n- domain: `mail.loosefoot.com`; roles: dns-query\n- domain: `mail.ma-communication.com`; roles: dns-query, tls-sni\n- domain: `mail.maclen.fr`; roles: dns-query, tls-sni\n- domain: `mail.microvistatech.com`; roles: dns-query, tls-sni\n- domain: `mail.monquartier.com.br`; roles: dns-query\n- domain: `mail.myfairpoint.net`; roles: dns-query\n- domain: `mail.nazarioconstruction.com`; roles: dns-query, tls-sni\n- domain: `mail.otenet.gr`; roles: dns-query, tls-sni\n- domain: `mail.pangia.biz`; roles: dns-query, tls-sni\n- domain: `mail.perpetualplaques.com`; roles: dns-query, tls-sni\n- domain: `mail.ptolemee.com`; roles: dns-query, tls-sni\n- domain: `mail.qualityms.com.mx`; roles: dns-query, tls-sni\n- domain: `mail.smtp2go.com`; roles: dns-query\n- domain: `mail.songazine.fr`; roles: dns-query, tls-sni\n- domain: `mail.tcgasociados.com`; roles: dns-query, tls-sni\n- domain: `mail.tecsindia.com`; roles: dns-query\n- domain: `mail.tetranergy.com`; roles: dns-query, tls-sni\n- domain: `mail.tiretracksusa.com`; roles: dns-query\n- domain: `mail.verificalitas.es`; roles: dns-query, tls-sni\n- domain: `mail.verificalitasoca.es`; roles: dns-query, tls-sni\n- domain: `mail.xenium-partners.fr`; roles: dns-query, tls-sni\n- domain: `mail.yourwebsitemail.com`; roles: dns-query, tls-sni\n- domain: `mail04.l4email.com`; roles: dns-query, tls-sni\n- domain: `microsoft.com`; roles: dns-query, tls-sni\n- domain: `moiazureorigin.clo.footprintdns.com`; roles: dns-query\n- domain: `mta-01.webnode.com`; roles: dns-query, tls-sni\n- domain: `mta.21cn.com`; roles: dns-query, tls-sni\n- domain: `mx.celleno.it`; roles: dns-query\n- domain: `mx02.colt-engine.it`; roles: dns-query\n- domain: `mx1.mail.139.com`; roles: dns-query, tls-sni\n- domain: `myexternalip.com`; roles: dns-query, tls-sni\n- domain: `nexusrules.officeapps.live.com`; roles: dns-query, tls-sni\n- domain: `ns0.ovh.net`; roles: dns-cname\n- domain: `odc.officeapps.live.com`; roles: dns-query, tls-sni\n- domain: `oftheearth.ca`; roles: dns-cname\n- domain: `outlook.office365.com`; roles: dns-query, tls-sni\n- domain: `pingosip.top`; roles: dns-query, tls-sni\n- domain: `prod.nexusrules.live.com.akadns.net`; roles: dns-cname\n- domain: `pti.store.microsoft.com`; roles: dns-query, tls-sni\n- domain: `reddew28c.bazar`; roles: dns-query\n- domain: `redinnovations.co.uk`; roles: dns-query, tls-sni\n- domain: `rum18.perf.linkedin.com`; roles: dns-query, tls-sni\n- domain: `self.events.data.microsoft.com`; roles: dns-query, tls-sni\n- domain: `settings-win.data.microsoft.com`; roles: dns-query, tls-sni\n- domain: `settingsfd-geo.trafficmanager.net`; roles: dns-cname\n- domain: `slickdeals.net`; roles: dns-query, tls-sni\n- domain: `smtp-com.netzero.net`; roles: dns-cname\n- domain: `smtp-relay.gmail.com`; roles: dns-query\n- domain: `smtp.forpsi.com`; roles: dns-query, tls-sni\n- domain: `smtp.juno.com`; roles: dns-query\n- domain: `smtp.medicinafutura.it`; roles: dns-query, tls-sni\n- domain: `smtp.netzero.com`; roles: dns-query\n- domain: `smtp.outlook.com`; roles: dns-query, tls-sni\n- domain: `smtp.sina.com.cn`; roles: dns-query, tls-sni\n- domain: `smtp.suddenlink.net`; roles: dns-query, tls-sni\n- domain: `smtp.ulpianocarrasco.com`; roles: dns-query, tls-sni\n- domain: `smtp.unisanraffaele.gov.it`; roles: dns-query, tls-sni\n- domain: `smtp.vox.co.za`; roles: dns-query\n- domain: `smtpa.forpsi.com`; roles: dns-cname\n- domain: `sobolpand.top`; roles: dns-query, http-host\n- domain: `spo-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `ssl0.ovh.net`; roles: dns-cname\n- domain: `storeedgefd.dsx.mp.microsoft.com`; roles: dns-query, tls-sni\n- domain: `t-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `tackleadvisors.com`; roles: dns-query, tls-sni\n- domain: `teams-ring.msedge.net`; roles: dns-query, tls-sni\n- domain: `track.cj.akadns.net`; roles: dns-cname\n- domain: `ultimatecuisinecatering.com`; roles: dns-query, tls-sni\n- domain: `umwatson.events.data.microsoft.com`; roles: dns-query, tls-sni\n- domain: `v10.events.data.microsoft.com`; roles: dns-query, tls-sni\n- domain: `v20.events.data.microsoft.com`; roles: dns-query, tls-sni\n- domain: `vchbbq.com`; roles: dns-query, tls-sni\n- domain: `vmail.dial-up.net`; roles: dns-cname\n- domain: `w00d8b4e.kasserver.com`; roles: dns-query, tls-sni\n- domain: `whitestorm9p.bazar`; roles: dns-query\n- domain: `wns.notify.trafficmanager.net`; roles: dns-cname\n- domain: `wpad.enemywatch.net`; roles: dns-query\n- domain: `wpad.localdomain`; roles: dns-query\n- domain: `www.backmarket.com`; roles: dns-query, tls-sni\n- domain: `www.bing.com`; roles: dns-query, tls-sni\n- domain: `www.calacatta.com`; roles: dns-query, tls-sni\n- domain: `www.dellrefurbished.com`; roles: dns-query, tls-sni\n- domain: `www.emjcd.com`; roles: dns-query, tls-sni\n- domain: `www.kqzyfj.com`; roles: dns-query, http-host\n- domain: `www.microsoft.com`; roles: dns-query, tls-sni\n- domain: `www.oftheearth.ca`; roles: dns-query, tls-sni\n- domain: `www.openssl.org`; roles: dns-query, tls-sni\n- domain: `x1.c.lencr.org`; roles: dns-query, http-host\n- domain: `yeahmx01.mxmail.netease.com`; roles: dns-query, tls-sni\n- domain: `znkbmknmqyvbxi.enemywatch.net`; roles: dns-query\n- domain: `znkbmknmqyvbxi.localdomain`; roles: dns-query\n- domain: `zuczbdyvfzio.enemywatch.net`; roles: dns-query\n- domain: `zuczbdyvfzio.localdomain`; roles: dns-query\n- ipv4: `0.0.0.0`; roles: network-endpoint\n- ipv4: `10.10.22.1`; roles: network-endpoint\n- ipv4: `10.10.22.156`; roles: dns-answer, network-endpoint\n- ipv4: `10.10.22.157`; roles: dns-answer, network-endpoint\n- ipv4: `10.10.22.158`; roles: dns-answer, network-endpoint\n- ipv4: `10.10.22.22`; roles: dns-answer, network-endpoint\n- ipv4: `10.10.22.255`; roles: network-endpoint\n- ipv4: `103.129.255.250`; roles: dns-answer, network-endpoint\n- ipv4: `103.129.255.251`; roles: dns-answer\n- ipv4: `103.143.8.71`; roles: network-endpoint\n- ipv4: `104.16.10.88`; roles: dns-answer, network-endpoint\n- ipv4: `104.17.201.57`; roles: dns-answer\n- ipv4: `104.208.16.88`; roles: dns-answer, network-endpoint\n- ipv4: `104.208.16.94`; roles: dns-answer, network-endpoint\n- ipv4: `104.21.32.95`; roles: dns-answer, network-endpoint\n- ipv4: `104.21.65.22`; roles: dns-answer\n- ipv4: `104.215.148.63`; roles: dns-answer, network-endpoint\n- ipv4: `104.46.162.226`; roles: dns-answer, network-endpoint\n- ipv4: `104.94.77.31`; roles: dns-answer, network-endpoint\n- ipv4: `107.161.180.34`; roles: dns-answer, network-endpoint\n- ipv4: `108.168.133.76`; roles: dns-answer, network-endpoint\n- ipv4: `111.223.52.28`; roles: dns-answer, network-endpoint\n- ipv4: `115.112.78.166`; roles: dns-answer, network-endpoint\n- ipv4: `122.179.158.212`; roles: network-endpoint\n- ipv4: `123.126.45.161`; roles: dns-answer, network-endpoint\n- ipv4: `123.58.177.213`; roles: dns-answer, network-endpoint\n- ipv4: `123.58.177.214`; roles: dns-answer\n- ipv4: `123.58.177.220`; roles: dns-answer\n- ipv4: `129.246.14.238`; roles: dns-answer\n- ipv4: `13.107.136.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.18.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.21.200`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.246.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.4.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.4.50`; roles: dns-answer\n- ipv4: `13.107.42.16`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.42.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.43.14`; roles: dns-answer, network-endpoint\n- ipv4: `13.107.6.254`; roles: dns-answer, network-endpoint\n- ipv4: `13.64.180.106`; roles: dns-answer, network-endpoint\n- ipv4: `13.69.239.72`; roles: dns-answer, network-endpoint\n- ipv4: `13.77.161.179`; roles: dns-answer\n- ipv4: `13.86.61.82`; roles: dns-answer, network-endpoint\n- ipv4: `13.89.178.27`; roles: dns-answer, network-endpoint\n- ipv4: `13.89.179.10`; roles: dns-answer, network-endpoint\n- ipv4: `13.89.179.9`; roles: dns-answer, network-endpoint\n- ipv4: `130.61.64.122`; roles: network-endpoint\n- ipv4: `131.107.255.255`; roles: dns-answer\n- ipv4: `131.253.33.254`; roles: dns-answer, network-endpoint\n- ipv4: `140.82.49.12`; roles: network-endpoint\n- ipv4: `142.250.114.108`; roles: dns-answer\n- ipv4: `142.250.114.109`; roles: dns-answer, network-endpoint\n- ipv4: `142.250.114.28`; roles: dns-answer, network-endpoint\n- ipv4: `159.127.40.144`; roles: dns-answer, network-endpoint\n- ipv4: `162.210.220.137`; roles: network-endpoint\n- ipv4: `167.248.117.81`; roles: network-endpoint\n- ipv4: `168.196.133.84`; roles: dns-answer, network-endpoint\n- ipv4: `172.67.139.101`; roles: dns-answer, network-endpoint\n- ipv4: `172.67.150.172`; roles: dns-answer\n- ipv4: `173.223.109.212`; roles: dns-answer, network-endpoint\n- ipv4: `173.249.53.15`; roles: dns-answer, network-endpoint\n- ipv4: `173.255.233.87`; roles: dns-answer\n- ipv4: `178.23.190.8`; roles: http-host, network-endpoint\n- ipv4: `180.149.244.81`; roles: dns-answer, network-endpoint\n- ipv4: `183.61.185.83`; roles: dns-answer, network-endpoint\n- ipv4: `187.250.109.250`; roles: network-endpoint\n- ipv4: `189.210.115.207`; roles: network-endpoint\n- ipv4: `190.117.91.214`; roles: network-endpoint\n- ipv4: `190.14.37.244`; roles: http-host, network-endpoint\n- ipv4: `192.185.57.27`; roles: dns-answer, network-endpoint\n- ipv4: `193.70.18.144`; roles: dns-answer, network-endpoint\n- ipv4: `194.15.112.173`; roles: network-endpoint\n- ipv4: `194.36.191.35`; roles: http-host, network-endpoint\n- ipv4: `197.221.10.57`; roles: dns-answer, network-endpoint\n- ipv4: `197.242.67.121`; roles: dns-answer, network-endpoint\n- ipv4: `197.97.195.226`; roles: dns-answer, network-endpoint\n- ipv4: `198.136.61.225`; roles: dns-answer, network-endpoint\n- ipv4: `198.50.182.64`; roles: dns-answer, network-endpoint\n- ipv4: `2.222.167.138`; roles: network-endpoint\n- ipv4: `20.140.56.70`; roles: dns-answer, network-endpoint\n- ipv4: `20.189.173.12`; roles: dns-answer, network-endpoint\n- ipv4: `20.189.173.7`; roles: dns-answer, network-endpoint\n- ipv4: `20.190.157.11`; roles: dns-answer, network-endpoint\n- ipv4: `20.190.4.251`; roles: dns-answer, network-endpoint\n- ipv4: `20.42.4.116`; roles: dns-answer\n- ipv4: `20.44.10.123`; roles: dns-answer, network-endpoint\n- ipv4: `20.50.80.210`; roles: dns-answer, network-endpoint\n- ipv4: `20.69.137.228`; roles: dns-answer, network-endpoint\n- ipv4: `20.83.81.162`; roles: dns-answer, network-endpoint\n- ipv4: `201.111.144.72`; roles: network-endpoint\n- ipv4: `201.137.10.225`; roles: network-endpoint\n- ipv4: `204.79.197.200`; roles: dns-answer, network-endpoint\n- ipv4: `204.79.197.203`; roles: dns-answer, network-endpoint\n- ipv4: `204.79.197.219`; roles: dns-answer, network-endpoint\n- ipv4: `204.79.197.254`; roles: dns-answer, network-endpoint\n- ipv4: `207.246.112.221`; roles: network-endpoint\n- ipv4: `208.180.40.68`; roles: dns-answer, network-endpoint\n- ipv4: `208.68.106.6`; roles: dns-answer, network-endpoint\n- ipv4: `209.203.34.199`; roles: dns-answer, network-endpoint\n- ipv4: `209.210.95.228`; roles: network-endpoint\n- ipv4: `217.11.242.15`; roles: dns-answer, network-endpoint\n- ipv4: `217.11.242.6`; roles: dns-answer\n- ipv4: `217.11.242.81`; roles: dns-answer\n- ipv4: `217.116.0.228`; roles: dns-answer, network-endpoint\n- ipv4: `221.176.66.188`; roles: dns-answer, network-endpoint\n- ipv4: `223.29.248.111`; roles: dns-answer, network-endpoint\n- ipv4: `224.0.0.22`; roles: network-endpoint\n- ipv4: `224.0.0.251`; roles: network-endpoint\n- ipv4: `224.0.0.252`; roles: network-endpoint\n- ipv4: `23.111.114.52`; roles: network-endpoint\n- ipv4: `23.21.76.7`; roles: dns-answer, network-endpoint\n- ipv4: `23.222.241.43`; roles: dns-answer, network-endpoint\n- ipv4: `23.222.241.55`; roles: dns-answer\n- ipv4: `23.23.138.107`; roles: dns-answer\n- ipv4: `23.23.229.175`; roles: dns-answer\n- ipv4: `23.47.169.181`; roles: dns-answer, network-endpoint\n- ipv4: `23.47.50.172`; roles: dns-answer\n- ipv4: `23.47.50.180`; roles: dns-answer, network-endpoint\n- ipv4: `23.47.52.13`; roles: dns-answer, network-endpoint\n- ipv4: `23.47.52.19`; roles: dns-answer\n- ipv4: `239.255.255.250`; roles: http-host, network-endpoint\n- ipv4: `24.231.209.2`; roles: network-endpoint\n- ipv4: `255.255.255.255`; roles: dns-answer, network-endpoint\n- ipv4: `26.85.198.164`; roles: dns-answer\n- ipv4: `31.193.50.122`; roles: dns-answer, network-endpoint\n- ipv4: `31.193.50.2`; roles: dns-answer\n- ipv4: `34.117.59.81`; roles: dns-answer, network-endpoint\n- ipv4: `34.120.119.232`; roles: dns-answer, network-endpoint\n- ipv4: `34.149.19.242`; roles: network-endpoint\n- ipv4: `34.193.71.224`; roles: dns-answer, network-endpoint\n- ipv4: `35.190.80.1`; roles: dns-answer, network-endpoint\n- ipv4: `37.0.10.22`; roles: dns-answer, network-endpoint\n- ipv4: `37.208.181.198`; roles: network-endpoint\n- ipv4: `37.252.0.102`; roles: network-endpoint\n- ipv4: `39.40.37.70`; roles: network-endpoint\n- ipv4: `40.112.72.205`; roles: dns-answer\n- ipv4: `40.113.200.201`; roles: dns-answer\n- ipv4: `40.126.28.11`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.28.12`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.28.13`; roles: dns-answer\n- ipv4: `40.126.28.14`; roles: dns-answer\n- ipv4: `40.126.28.18`; roles: dns-answer\n- ipv4: `40.126.28.19`; roles: dns-answer\n- ipv4: `40.126.28.20`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.28.21`; roles: dns-answer\n- ipv4: `40.126.28.22`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.28.23`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.10`; roles: dns-answer\n- ipv4: `40.126.29.11`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.12`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.13`; roles: dns-answer\n- ipv4: `40.126.29.14`; roles: dns-answer\n- ipv4: `40.126.29.15`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.5`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.7`; roles: dns-answer\n- ipv4: `40.126.29.8`; roles: dns-answer, network-endpoint\n- ipv4: `40.126.29.9`; roles: dns-answer\n- ipv4: `40.126.7.32`; roles: dns-answer\n- ipv4: `40.126.7.35`; roles: dns-answer\n- ipv4: `40.76.4.15`; roles: dns-answer\n- ipv4: `40.90.64.59`; roles: dns-answer, network-endpoint\n- ipv4: `40.90.64.61`; roles: dns-answer, network-endpoint\n- ipv4: `40.90.64.98`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.120.130`; roles: dns-answer\n- ipv4: `40.97.120.146`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.120.178`; roles: dns-answer\n- ipv4: `40.97.120.194`; roles: dns-answer\n- ipv4: `40.97.120.210`; roles: dns-answer\n- ipv4: `40.97.120.226`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.120.242`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.120.50`; roles: dns-answer\n- ipv4: `40.97.120.66`; roles: dns-answer\n- ipv4: `40.97.121.18`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.121.2`; roles: dns-answer\n- ipv4: `40.97.121.34`; roles: dns-answer\n- ipv4: `40.97.199.114`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.212.18`; roles: dns-answer\n- ipv4: `40.97.212.2`; roles: dns-answer, network-endpoint\n- ipv4: `40.97.92.34`; roles: dns-answer\n- ipv4: `40.97.96.2`; roles: dns-answer\n- ipv4: `41.86.105.101`; roles: dns-answer, network-endpoint\n- ipv4: `45.153.241.142`; roles: network-endpoint\n- ipv4: `45.33.53.153`; roles: dns-answer\n- ipv4: `45.46.53.140`; roles: network-endpoint\n- ipv4: `45.79.114.202`; roles: dns-answer\n- ipv4: `45.79.170.99`; roles: dns-answer\n- ipv4: `45.79.71.155`; roles: dns-answer\n- ipv4: `47.151.181.188`; roles: network-endpoint\n- ipv4: `47.22.148.6`; roles: network-endpoint\n- ipv4: `47.40.196.233`; roles: network-endpoint\n- ipv4: `50.16.216.118`; roles: dns-answer\n- ipv4: `50.16.235.219`; roles: dns-answer\n- ipv4: `50.16.239.65`; roles: dns-answer\n- ipv4: `50.17.218.95`; roles: dns-answer, network-endpoint\n- ipv4: `50.17.226.156`; roles: dns-answer\n- ipv4: `50.19.104.221`; roles: dns-answer\n- ipv4: `50.19.250.64`; roles: dns-answer\n- ipv4: `50.19.81.52`; roles: dns-answer\n- ipv4: `50.19.92.180`; roles: dns-answer\n- ipv4: `50.194.160.233`; roles: network-endpoint\n- ipv4: `50.77.156.245`; roles: dns-answer, network-endpoint\n- ipv4: `51.132.193.105`; roles: dns-answer, network-endpoint\n- ipv4: `51.158.108.203`; roles: network-endpoint\n- ipv4: `52.109.2.1`; roles: dns-answer, network-endpoint\n- ipv4: `52.109.76.31`; roles: dns-answer, network-endpoint\n- ipv4: `52.109.76.32`; roles: dns-answer, network-endpoint\n- ipv4: `52.109.8.20`; roles: dns-answer, network-endpoint\n- ipv4: `52.113.196.254`; roles: dns-answer, network-endpoint\n- ipv4: `52.152.108.96`; roles: dns-answer, network-endpoint\n- ipv4: `52.178.17.3`; roles: dns-answer, network-endpoint\n- ipv4: `52.182.143.210`; roles: dns-answer, network-endpoint\n- ipv4: `52.183.220.149`; roles: dns-answer, network-endpoint\n- ipv4: `52.185.211.133`; roles: dns-answer, network-endpoint\n- ipv4: `52.232.226.150`; roles: dns-answer, network-endpoint\n- ipv4: `52.242.97.97`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.10.242`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.103.18`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.103.2`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.103.34`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.121.114`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.121.130`; roles: dns-answer\n- ipv4: `52.96.121.146`; roles: dns-answer\n- ipv4: `52.96.121.162`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.121.178`; roles: dns-answer\n- ipv4: `52.96.121.194`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.121.210`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.121.242`; roles: dns-answer\n- ipv4: `52.96.121.98`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.122.226`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.122.242`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.122.98`; roles: dns-answer\n- ipv4: `52.96.16.162`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.191.114`; roles: dns-answer\n- ipv4: `52.96.191.98`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.22.178`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.22.2`; roles: dns-answer\n- ipv4: `52.96.55.242`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.57.18`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.57.2`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.57.34`; roles: dns-answer\n- ipv4: `52.96.57.50`; roles: dns-answer\n- ipv4: `52.96.57.66`; roles: dns-answer\n- ipv4: `52.96.57.82`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.57.98`; roles: dns-answer\n- ipv4: `52.96.8.130`; roles: dns-answer\n- ipv4: `52.96.90.18`; roles: dns-answer, network-endpoint\n- ipv4: `52.96.91.66`; roles: dns-answer, network-endpoint\n- ipv4: `54.243.250.193`; roles: dns-answer, network-endpoint\n- ipv4: `54.243.253.71`; roles: dns-answer\n- ipv4: `54.243.29.214`; roles: dns-answer, network-endpoint\n- ipv4: `54.243.41.12`; roles: dns-answer\n- ipv4: `54.243.51.135`; roles: dns-answer\n- ipv4: `60.241.142.83`; roles: dns-answer\n- ipv4: `62.103.147.201`; roles: dns-answer, network-endpoint\n- ipv4: `62.149.128.200`; roles: dns-answer\n- ipv4: `62.149.128.201`; roles: dns-answer\n- ipv4: `62.149.128.202`; roles: dns-answer\n- ipv4: `62.149.128.203`; roles: dns-answer, network-endpoint\n- ipv4: `64.136.44.45`; roles: dns-answer\n- ipv4: `64.136.44.50`; roles: dns-answer\n- ipv4: `64.136.52.45`; roles: dns-answer, network-endpoint\n- ipv4: `64.136.52.50`; roles: dns-answer, network-endpoint\n- ipv4: `64.29.151.102`; roles: dns-answer, network-endpoint\n- ipv4: `64.87.23.16`; roles: dns-answer, network-endpoint\n- ipv4: `64.98.36.176`; roles: dns-answer, network-endpoint\n- ipv4: `65.111.191.196`; roles: dns-answer, network-endpoint\n- ipv4: `65.254.248.195`; roles: dns-answer, network-endpoint\n- ipv4: `66.163.170.35`; roles: dns-answer\n- ipv4: `66.218.88.149`; roles: dns-answer, network-endpoint\n- ipv4: `66.218.88.150`; roles: dns-answer\n- ipv4: `66.218.88.152`; roles: dns-answer\n- ipv4: `66.218.88.154`; roles: dns-answer\n- ipv4: `66.218.88.155`; roles: dns-answer\n- ipv4: `66.218.88.157`; roles: dns-answer\n- ipv4: `66.218.88.158`; roles: dns-answer\n- ipv4: `66.228.43.14`; roles: dns-answer, network-endpoint\n- ipv4: `66.96.147.96`; roles: dns-answer, network-endpoint\n- ipv4: `66.96.162.198`; roles: dns-answer, network-endpoint\n- ipv4: `68.186.192.69`; roles: network-endpoint\n- ipv4: `68.204.7.158`; roles: network-endpoint\n- ipv4: `70.39.150.220`; roles: dns-answer, network-endpoint\n- ipv4: `72.21.81.200`; roles: dns-answer, network-endpoint\n- ipv4: `72.247.207.22`; roles: dns-answer, network-endpoint\n- ipv4: `72.252.201.69`; roles: network-endpoint\n- ipv4: `73.230.205.91`; roles: network-endpoint\n- ipv4: `73.52.50.32`; roles: network-endpoint\n- ipv4: `73.77.87.137`; roles: network-endpoint\n- ipv4: `74.202.142.20`; roles: dns-answer, network-endpoint\n- ipv4: `8.248.163.254`; roles: dns-answer, network-endpoint\n- ipv4: `8.249.123.254`; roles: dns-answer\n- ipv4: `8.249.219.254`; roles: dns-answer\n- ipv4: `8.249.239.254`; roles: dns-answer\n- ipv4: `8.249.245.254`; roles: dns-answer, network-endpoint\n- ipv4: `8.253.131.120`; roles: dns-answer\n- ipv4: `8.253.156.120`; roles: dns-answer, network-endpoint\n- ipv4: `8.253.45.214`; roles: dns-answer\n- ipv4: `8.8.8.8`; roles: network-endpoint\n- ipv4: `80.6.192.58`; roles: network-endpoint\n- ipv4: `81.2.195.204`; roles: dns-answer, network-endpoint\n- ipv4: `81.241.252.59`; roles: network-endpoint\n- ipv4: `81.31.145.212`; roles: dns-answer\n- ipv4: `81.31.145.216`; roles: dns-answer, network-endpoint\n- ipv4: `82.98.154.100`; roles: dns-answer, network-endpoint\n- ipv4: `83.223.99.191`; roles: dns-answer, network-endpoint\n- ipv4: `83.243.251.46`; roles: network-endpoint\n- ipv4: `85.13.132.2`; roles: dns-answer, network-endpoint\n- ipv4: `86.8.177.143`; roles: network-endpoint\n- ipv4: `89.137.52.44`; roles: network-endpoint\n- ipv4: `9.241.189.20`; roles: dns-answer\n- ipv4: `94.143.155.83`; roles: dns-answer, network-endpoint\n- ipv4: `94.200.181.154`; roles: network-endpoint\n- ja3: `28a2c9bd18a11de089ef85a160da29e4`; roles: tls-client-fingerprint\n- ja3: `29a54baac595d45c6a62225f7cde467b`; roles: tls-client-fingerprint\n- ja3: `37f463bf4616ecd445d4a1937da06e19`; roles: tls-client-fingerprint\n- ja3: `3b5074b1b5d032e5620f69f9f700ff0e`; roles: tls-client-fingerprint\n- ja3: `51c64c77e60f3980eea90869b68c58a8`; roles: tls-client-fingerprint\n- ja3: `6271f898ce5be7dd52b0fc260d0662b3`; roles: tls-client-fingerprint\n- ja3: `89be98bbd4f065fe510fca4893cf8d9b`; roles: tls-client-fingerprint\n- ja3: `a0e9f5d64349fb13191bc781f81f42e1`; roles: tls-client-fingerprint\n- ja3: `cd08e31494f9531f560d64c695473da9`; roles: tls-client-fingerprint\n- ja3: `df669e7ea913f1ac0c0cce9a201a2ec1`; roles: tls-client-fingerprint\n- sha256: `11f3d84aad7131fe124155c9edfceb594649e87de1ee03383f470442d6ed69a1`; roles: exported-object\n- sha256: `17c18c10640debcfd5b5f61f07b12d7327809410c3a90f7cd69f21fb869554ea`; roles: exported-object\n- sha256: `95928b331e9942e4709b41ec8b59eb6f9e068f53ef2eeb15009feafd4ff5138d`; roles: exported-object\n- sha256: `c8da41ae6e70a1997020d6c903d2627a3ee35383159cd04de53e73ff3f5acd82`; roles: exported-object\n- url: `http://178.23.190.8/44491.6090605324.dat`; roles: http-request\n- url: `http://190.14.37.244/44491.6090605324.dat`; roles: http-request\n- url: `http://194.36.191.35/44491.6090605324.dat`; roles: http-request\n- url: `http://239.255.255.250:1900*`; roles: http-request\n- url: `http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?29290d2fe073e937`; roles: http-request\n- url: `http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?c6f9855cb9e658e6`; roles: http-request\n- url: `http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?069916a09ccd9a98`; roles: http-request\n- exported object `44491.6090605324(1).dat`; SHA-256 `95928b331e9942e4709b41ec8b59eb6f9e068f53ef2eeb15009feafd4ff5138d`; size 911360 bytes\n Static content: `{\"content_kind\":\"pe\",\"features\":[],\"inspected_bytes\":262144,\"inspection_truncated\":true,\"interpretation\":\"Static content only; not proof of execution, intent, or malware family\"}`. Not execution proof.\n- exported object `main.php`; SHA-256 `11f3d84aad7131fe124155c9edfceb594649e87de1ee03383f470442d6ed69a1`; size 337420 bytes\n Static content: `{\"content_kind\":\"pe\",\"features\":[],\"inspected_bytes\":262144,\"inspection_truncated\":true,\"interpretation\":\"Static content only; not proof of execution, intent, or malware family\"}`. Not execution proof.\n- exported object `index.php`; SHA-256 `c8da41ae6e70a1997020d6c903d2627a3ee35383159cd04de53e73ff3f5acd82`; size 183 bytes\n Static content: `{\"content_kind\":\"script-like-text\",\"features\":[{\"excerpt\":\"downloadfile\",\"feature\":\"powershell-download\",\"offset\":83}],\"inspected_bytes\":183,\"inspection_truncated\":false,\"interpretation\":\"Static content only; not proof of execution, intent, or malware family\"}`. Not execution proof.\n- exported object `click-1225267-10537174-1463076242000%3fsid=552795f4335011ec81850e774cf9d6690INT`; SHA-256 `17c18c10640debcfd5b5f61f07b12d7327809410c3a90f7cd69f21fb869554ea`; size 577 bytes\n\n## Actor similarity leads\n\n- No actor lead was calculated.\n\n## Local enrichment and correlations\n\nNo match means unknown in this corpus. Local CTI may postdate the capture. Matches and shared infrastructure require review; no automatic promotion or attribution.\nSnapshot: `5222f776b8c48e86a0c8622f8a6c5757c219009df704244b52c91467fdafc237`; recorded 2026-09-19T12:10:24.874416+00:00; mode: local-only.\nCoverage: `{\"matched_observables\":0,\"no_exact_match\":512,\"observable_limit\":5000,\"observables_checked\":512,\"observables_total\":512,\"prior_case_limit_reached\":false,\"prior_cases_checked\":14,\"truncated\":false}`\n\n- Prior analysis `96e0e828-93ae-49d5-8104-9f14cb584c3e` shares 31 observations. This does not establish a common campaign.\n- Prior analysis `6e50c68f-5552-400c-9835-15867ddb022d` shares 25 observations. This does not establish a common campaign.\n- Prior analysis `43bc93eb-d6db-4400-b983-b0dd404c8ca4` shares 69 observations. This does not establish a common campaign.\n- Prior analysis `6df36b51-4b44-4660-b534-2fa89705e807` shares 37 observations. This does not establish a common campaign.\n- Prior analysis `29aa3ef8-47c9-4c47-b4cc-1ff3e0708142` shares 27 observations. This does not establish a common campaign.\n- Prior analysis `b79032a8-d69e-4ac1-bdd4-542473fa8e3b` shares 30 observations. This does not establish a common campaign.\n- Prior analysis `faf041c3-70e0-4a01-8780-10917e5e187c` shares 27 observations. This does not establish a common campaign.\n- Prior analysis `08324647-35af-4af2-8d82-4387eec03918` shares 22 observations. This does not establish a common campaign.\n- Prior analysis `616a90fa-f15e-4fcb-8d56-7b8e0eff5785` shares 16 observations. This does not establish a common campaign.\n- Prior analysis `459e119d-191f-49e8-85ea-c78f9de41826` shares 22 observations. This does not establish a common campaign.\n- Prior analysis `7a2cfe72-f48d-4894-8a2d-8889cb3b11b2` shares 43 observations. This does not establish a common campaign.\n- Prior analysis `81373b30-6a59-49d1-89b0-bad73ed19eaa` shares 24 observations. This does not establish a common campaign.\n- Prior analysis `38851ad7-b3a0-423d-ae89-3b7be4e4b908` shares 34 observations. This does not establish a common campaign.\n- Prior analysis `bfccc426-aa9b-4007-8558-a66d37ecb90c` shares 43 observations. This does not establish a common campaign.\n- External provider queries: 0. Not requested; no unknown indicator is classified as benign.\n\n## Coverage and limitations\n\n- Packet and protocol facts are deterministic for the recorded analyzer manifest.\n- Encrypted application payloads are not decrypted; only available metadata is reported.\n- ATT&CK mappings and actor overlaps are candidates until analyst review and promotion.\n- HTTP object inventory: `{\"compact_objects\":0,\"complete\":true,\"detailed_objects\":4,\"exported_objects\":6,\"hashed_bytes\":3072260,\"hashed_objects\":6,\"omitted_unique_hashes\":0,\"returned_unique_hashes\":4,\"selection\":\"content-classified first, then size descending, SHA256 tie-break; deduplicated by full hash; overflow retains a compact hash index\",\"unhashed_objects\":0,\"unique_hashes\":4}`. Compact overflow hashes are retained in JSON coverage and observables.\n- A directory subject is not necessarily a logged-in user; consult identity bindings in the JSON evidence.\n- Rendered / available: findings 37/37, identities 14/14, observables 500/512, artifacts 4/4. Full returned inventory is in the JSON result.\n", "result": { "schema_version": "pcap-analysis-v1", "analysis_key_material": { "source_sha256": "95074aea864749524df5b0a6c9fd58a3111038157b3400902486b96d902b3455", "analyzer_manifest_sha256": "ee952aeb7cdc6958f4ae5178c54c274a1e4f0aec4d42f3bdb95baaff063b3dde", "rulepack_version": "pcap-rules-v3" }, "analyzer_manifest": { "schema_version": "pcap-analyzer-manifest-v1", "profile_id": "tshark-evidence-v3", "rulepack_version": "pcap-rules-v3", "tshark_version": "TShark (Wireshark) 4.4.18.", "implementation_sha256": "9e8d2397c92213d4143ee2e4e2f86f0c1606d085cc7a81fd3ab98e687a5a9388", "capinfos_version": "Capinfos (Wireshark) 4.4.18.", "limits": { "max_upload_bytes": 536870912, "tool_timeout_seconds": 300, "max_tool_output_bytes": 268435456, "max_events_per_kind": 50000, "max_flows": 50000, "max_endpoints": 20000, "max_exported_objects": 500, "max_object_hash_index": 50000, "max_exported_object_bytes": 52428800, "max_exported_total_bytes": 268435456 }, "requested_fields_sha256": "fb9865915ed277886a75f522c6f27708f67e4e28e7a9d4a051ed816dd6783b15", "supported_profile_fields_sha256": "917cc2ac17024ecb151d0baaf8ddfb0767624db4f29d127ec668d6ebb5d80604", "profile_sha256": "7bdd5b06266e645efbbef1674e9934e21a27fcb37b084c18bcfe6abd8192ade3", "manifest_sha256": "ee952aeb7cdc6958f4ae5178c54c274a1e4f0aec4d42f3bdb95baaff063b3dde" }, "capture": { "packet_count": 84542, "captured_bytes": 47654732, "first_packet_epoch": "1634913051.987411", "last_packet_epoch": "1634918599.671398", "duration_seconds": 5547.683987, "interface_ids": [], "encapsulation_types": [ 1 ], "format": "pcap-le-microsecond", "source_sha256": "95074aea864749524df5b0a6c9fd58a3111038157b3400902486b96d902b3455", "source_size_bytes": 49007428, "protocol_counts": { "eth": 84542, "ethertype": 84542, "ip": 82058, "tcp": 78715, "tls": 10238, "data": 6770, "x509sat": 6450, "x509ce": 5343, "udp": 3155, "arp": 2550, "dns": 2061, "spnego-krb5": 1318, "nbss": 1176, "smb2": 1148, "dcerpc": 901, "smtp": 868, "pkix1implicit": 705, "nbns": 550, "gss-api": 537, "ldap": 537, "spnego": 381, "pkix1explicit": 320, "cldap": 236, "igmp": 228, "kerberos": 152, "ocsp": 135, "ssdp": 104, "icmp": 74, "smb": 73, "mdns": 54, "browser": 45, "nbdgm": 45, "ntp": 36, "http": 32, "llmnr": 32, "quic": 31, "ntlmssp": 30, "pkcs-1": 15, "data-text-lines": 6, "dhcp": 6, "imf": 4, "pop": 4, "cms": 3, "imap": 1 } }, "endpoints": [ { "endpoint_id": "endpoint-1f6adc642b8cc2810ef60311", "ip": "0.0.0.0", "ip_version": 4, "is_private": true, "mac_addresses": [ "00:0e:35:30:b7:21", "00:18:71:3b:a8:69", "00:23:ae:fd:02:01" ], "packets_sent": 3, "packets_received": 0, "bytes_sent": 1137, "bytes_received": 0, "first_seen_epoch": "1634913051.987411", "last_seen_epoch": "1634913143.408229", "evidence_frames": [ 1, 776, 1667 ] }, { "endpoint_id": "endpoint-852646a437fb5f37f4160b4c", "ip": "10.10.22.1", "ip_version": 4, "is_private": true, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 499, "bytes_sent": 884, "bytes_received": 53816, "first_seen_epoch": "1634913053.870688", "last_seen_epoch": "1634918574.312579", "evidence_frames": [ 42, 43, 333, 342, 343 ] }, { "endpoint_id": "endpoint-770f69753086a450fda303f6", "ip": "10.10.22.156", "ip_version": 4, "is_private": true, "mac_addresses": [ "00:23:ae:fd:02:01" ], "packets_sent": 22577, "packets_received": 29378, "bytes_sent": 3380034, "bytes_received": 26330493, "first_seen_epoch": "1634913112.801272", "last_seen_epoch": "1634918599.611491", "evidence_frames": [ 779, 780, 781, 782, 783 ] }, { "endpoint_id": "endpoint-11baf92ff7c29bea833752d4", "ip": "10.10.22.157", "ip_version": 4, "is_private": true, "mac_addresses": [ "00:18:71:3b:a8:69" ], "packets_sent": 4558, "packets_received": 4416, "bytes_sent": 625985, "bytes_received": 1007092, "first_seen_epoch": "1634913052.071984", "last_seen_epoch": "1634918599.671398", "evidence_frames": [ 4, 5, 6, 7, 8 ] }, { "endpoint_id": "endpoint-4f50573cc343da4284f72113", "ip": "10.10.22.158", "ip_version": 4, "is_private": true, "mac_addresses": [ "00:0e:35:30:b7:21" ], "packets_sent": 8530, "packets_received": 12627, "bytes_sent": 986878, "bytes_received": 15230515, "first_seen_epoch": "1634913065.597694", "last_seen_epoch": "1634918577.213212", "evidence_frames": [ 750, 755, 756, 757, 760 ] }, { "endpoint_id": "endpoint-efd216cced29a7f760d385b6", "ip": "10.10.22.22", "ip_version": 4, "is_private": true, "mac_addresses": [ "a4:1f:72:c2:09:6a" ], "packets_sent": 3240, "packets_received": 3706, "bytes_sent": 766735, "bytes_received": 816333, "first_seen_epoch": "1634913051.988002", "last_seen_epoch": "1634918586.460066", "evidence_frames": [ 2, 15, 16, 17, 18 ] }, { "endpoint_id": "endpoint-a7b5ee8b2ab2bc1d0064bcb4", "ip": "10.10.22.255", "ip_version": 4, "is_private": true, "mac_addresses": [ "ff:ff:ff:ff:ff:ff" ], "packets_sent": 0, "packets_received": 101, "bytes_sent": 0, "bytes_received": 15133, "first_seen_epoch": "1634913058.411946", "last_seen_epoch": "1634918196.675331", "evidence_frames": [ 624, 625, 626, 627, 628 ] }, { "endpoint_id": "endpoint-f9ebffd342fe5f38ee89efa5", "ip": "103.129.255.250", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 24, "bytes_sent": 5452, "bytes_received": 2041, "first_seen_epoch": "1634917480.998851", "last_seen_epoch": "1634917488.717699", "evidence_frames": [ 74771, 74772, 74773, 74776, 74779 ] }, { "endpoint_id": "endpoint-64ccfa26b70245481b52d2b2", "ip": "103.143.8.71", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 20, "packets_received": 20, "bytes_sent": 1080, "bytes_received": 1320, "first_seen_epoch": "1634914888.126812", "last_seen_epoch": "1634914906.362804", "evidence_frames": [ 24719, 24720, 24721, 24722, 24724 ] }, { "endpoint_id": "endpoint-64951d189e1579060b8871ea", "ip": "104.16.10.88", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 460, "packets_received": 176, "bytes_sent": 656454, "bytes_received": 10318, "first_seen_epoch": "1634917379.488993", "last_seen_epoch": "1634917523.014353", "evidence_frames": [ 72778, 72779, 72780, 72781, 72782 ] }, { "endpoint_id": "endpoint-827cf08c3f8006f5a4cc4db6", "ip": "104.208.16.88", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 41, "packets_received": 32, "bytes_sent": 16656, "bytes_received": 10071, "first_seen_epoch": "1634913722.854704", "last_seen_epoch": "1634913732.933806", "evidence_frames": [ 11629, 11635, 11636, 11637, 11638 ] }, { "endpoint_id": "endpoint-078812c4cd1e3f93c66dc4d9", "ip": "104.208.16.94", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 32, "packets_received": 25, "bytes_sent": 12299, "bytes_received": 15047, "first_seen_epoch": "1634917472.444169", "last_seen_epoch": "1634917508.871128", "evidence_frames": [ 74688, 74689, 74690, 74691, 74692 ] }, { "endpoint_id": "endpoint-7da08f781f4bdeafedf9a654", "ip": "104.21.32.95", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 15, "bytes_sent": 6884, "bytes_received": 4411, "first_seen_epoch": "1634913346.593116", "last_seen_epoch": "1634913375.051844", "evidence_frames": [ 6326, 6328, 6329, 6330, 6331 ] }, { "endpoint_id": "endpoint-0974349ffee521bc9756ddbb", "ip": "104.215.148.63", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 12, "bytes_sent": 8162, "bytes_received": 1171, "first_seen_epoch": "1634913889.019217", "last_seen_epoch": "1634913999.328225", "evidence_frames": [ 17275, 17276, 17277, 17278, 17279 ] }, { "endpoint_id": "endpoint-2af5adc18ec6bc0cb3f6dc15", "ip": "104.46.162.226", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 39, "packets_received": 28, "bytes_sent": 16699, "bytes_received": 9259, "first_seen_epoch": "1634913662.073772", "last_seen_epoch": "1634913672.966147", "evidence_frames": [ 11177, 11189, 11190, 11191, 11192 ] }, { "endpoint_id": "endpoint-aade34d392c2509ed8d94157", "ip": "104.94.77.31", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 15, "packets_received": 18, "bytes_sent": 1611, "bytes_received": 1689, "first_seen_epoch": "1634913305.975849", "last_seen_epoch": "1634917611.886391", "evidence_frames": [ 6128, 6129, 6130, 6131, 6132 ] }, { "endpoint_id": "endpoint-48fc6782ee6b7126c5ffae0a", "ip": "107.161.180.34", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 79, "packets_received": 89, "bytes_sent": 25161, "bytes_received": 18869, "first_seen_epoch": "1634913641.323185", "last_seen_epoch": "1634914324.43162", "evidence_frames": [ 11094, 11096, 11097, 11098, 11099 ] }, { "endpoint_id": "endpoint-2ce13ce540ba3221a201e503", "ip": "108.168.133.76", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 27, "bytes_sent": 6833, "bytes_received": 2275, "first_seen_epoch": "1634915543.739829", "last_seen_epoch": "1634915550.888118", "evidence_frames": [ 51121, 51122, 51123, 51135, 51147 ] }, { "endpoint_id": "endpoint-f9e7a4529ac12e4213afb7c7", "ip": "111.223.52.28", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 54, "packets_received": 52, "bytes_sent": 17974, "bytes_received": 4234, "first_seen_epoch": "1634918422.879261", "last_seen_epoch": "1634918485.339559", "evidence_frames": [ 82999, 83011, 83012, 83033, 83036 ] }, { "endpoint_id": "endpoint-008c4c23ded9f232d1a36bf7", "ip": "115.112.78.166", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 3, "packets_received": 4, "bytes_sent": 239, "bytes_received": 228, "first_seen_epoch": "1634916593.109709", "last_seen_epoch": "1634916594.950293", "evidence_frames": [ 65458, 65460, 65461, 65466, 65467 ] }, { "endpoint_id": "endpoint-0a092bffa81f6668bf5ed906", "ip": "122.179.158.212", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634913904.040115", "last_seen_epoch": "1634914029.369605", "evidence_frames": [ 17378, 17379, 17380, 17394, 17410 ] }, { "endpoint_id": "endpoint-f749c6214355018b9f6c05bd", "ip": "123.126.45.161", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 283, "packets_received": 277, "bytes_sent": 66846, "bytes_received": 25533, "first_seen_epoch": "1634915355.504919", "last_seen_epoch": "1634917340.542566", "evidence_frames": [ 44927, 44929, 44937, 44938, 45043 ] }, { "endpoint_id": "endpoint-8ccdd7abda8c822bbfd81882", "ip": "123.58.177.213", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 46, "packets_received": 45, "bytes_sent": 12155, "bytes_received": 3718, "first_seen_epoch": "1634916654.034323", "last_seen_epoch": "1634918570.949791", "evidence_frames": [ 65650, 65653, 65654, 65687, 65694 ] }, { "endpoint_id": "endpoint-063b067db32df3e0f0fc8eca", "ip": "13.107.136.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 10, "bytes_sent": 5659, "bytes_received": 1030, "first_seen_epoch": "1634913244.071879", "last_seen_epoch": "1634913371.424697", "evidence_frames": [ 4589, 4635, 4636, 4645, 4646 ] }, { "endpoint_id": "endpoint-9a2294ed1daaf32ce525157e", "ip": "13.107.18.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 24, "packets_received": 22, "bytes_sent": 11318, "bytes_received": 2164, "first_seen_epoch": "1634913189.986367", "last_seen_epoch": "1634913313.843868", "evidence_frames": [ 2974, 2988, 2989, 2996, 2997 ] }, { "endpoint_id": "endpoint-f4c10aa240d721e078669fa7", "ip": "13.107.21.200", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 700, "packets_received": 387, "bytes_sent": 867333, "bytes_received": 51596, "first_seen_epoch": "1634913218.776034", "last_seen_epoch": "1634918132.786007", "evidence_frames": [ 3678, 3683, 3684, 3685, 3686 ] }, { "endpoint_id": "endpoint-00ea1c6b968090044958594d", "ip": "13.107.246.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 11, "packets_received": 9, "bytes_sent": 5605, "bytes_received": 974, "first_seen_epoch": "1634913244.189409", "last_seen_epoch": "1634913244.501579", "evidence_frames": [ 4666, 4702, 4704, 4747, 4748 ] }, { "endpoint_id": "endpoint-1be9bf76702d70a23bf7be76", "ip": "13.107.4.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 12, "bytes_sent": 5390, "bytes_received": 1136, "first_seen_epoch": "1634913189.8998", "last_seen_epoch": "1634913314.458439", "evidence_frames": [ 2958, 2966, 2967, 2968, 2969 ] }, { "endpoint_id": "endpoint-7acd422edd73ed103c1f89e1", "ip": "13.107.42.16", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 13, "bytes_sent": 7346, "bytes_received": 2025, "first_seen_epoch": "1634913346.097743", "last_seen_epoch": "1634913375.106144", "evidence_frames": [ 6225, 6228, 6230, 6231, 6232 ] }, { "endpoint_id": "endpoint-b8ba8879affa117b9b5b4cdf", "ip": "13.107.42.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 11, "bytes_sent": 5659, "bytes_received": 1082, "first_seen_epoch": "1634913243.977918", "last_seen_epoch": "1634913369.751143", "evidence_frames": [ 4484, 4539, 4542, 4543, 4544 ] }, { "endpoint_id": "endpoint-f25931ee2b307d407ab7f986", "ip": "13.107.43.14", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 11, "bytes_sent": 4980, "bytes_received": 1088, "first_seen_epoch": "1634913244.074024", "last_seen_epoch": "1634913369.784802", "evidence_frames": [ 4592, 4637, 4639, 4641, 4642 ] }, { "endpoint_id": "endpoint-56e4eecba6abb00856fb3999", "ip": "13.107.6.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 10, "bytes_sent": 5659, "bytes_received": 1028, "first_seen_epoch": "1634913243.908901", "last_seen_epoch": "1634913371.626687", "evidence_frames": [ 4463, 4480, 4481, 4487, 4488 ] }, { "endpoint_id": "endpoint-dfdbe106b1e0cbf825c1b63c", "ip": "13.64.180.106", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 71, "packets_received": 62, "bytes_sent": 19763, "bytes_received": 11796, "first_seen_epoch": "1634913186.080282", "last_seen_epoch": "1634917810.536441", "evidence_frames": [ 2852, 2857, 2858, 2859, 2860 ] }, { "endpoint_id": "endpoint-3c40232b9bcfdfbe753d5cde", "ip": "13.69.239.72", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 18, "packets_received": 14, "bytes_sent": 6142, "bytes_received": 7572, "first_seen_epoch": "1634913382.69134", "last_seen_epoch": "1634913384.222424", "evidence_frames": [ 6669, 6670, 6671, 6672, 6673 ] }, { "endpoint_id": "endpoint-98e17894f0e35ce1cd2fcad7", "ip": "13.86.61.82", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 36, "packets_received": 29, "bytes_sent": 19338, "bytes_received": 4838, "first_seen_epoch": "1634913065.597694", "last_seen_epoch": "1634913328.459212", "evidence_frames": [ 750, 3057, 3062, 3063, 3064 ] }, { "endpoint_id": "endpoint-74326b0028c4c8147b6d8800", "ip": "13.89.178.27", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 13, "packets_received": 10, "bytes_sent": 5516, "bytes_received": 2811, "first_seen_epoch": "1634915757.418438", "last_seen_epoch": "1634915758.205986", "evidence_frames": [ 55723, 55724, 55725, 55726, 55727 ] }, { "endpoint_id": "endpoint-c571f37237949776998a0c68", "ip": "13.89.179.10", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 39, "packets_received": 29, "bytes_sent": 16547, "bytes_received": 9612, "first_seen_epoch": "1634913754.255346", "last_seen_epoch": "1634913760.523231", "evidence_frames": [ 13367, 13369, 13370, 13371, 13372 ] }, { "endpoint_id": "endpoint-d47d7b700ba872314ec3a3a2", "ip": "13.89.179.9", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 13, "packets_received": 10, "bytes_sent": 5516, "bytes_received": 2367, "first_seen_epoch": "1634913212.921021", "last_seen_epoch": "1634913213.853027", "evidence_frames": [ 3599, 3602, 3603, 3604, 3605 ] }, { "endpoint_id": "endpoint-26c54220722af77048253f26", "ip": "130.61.64.122", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 14, "packets_received": 15, "bytes_sent": 1280, "bytes_received": 1175, "first_seen_epoch": "1634913706.74997", "last_seen_epoch": "1634914471.872828", "evidence_frames": [ 11566, 11567, 11568, 11569, 11570 ] }, { "endpoint_id": "endpoint-3c441a9b9857fdcef4959c15", "ip": "131.253.33.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 10, "bytes_sent": 5659, "bytes_received": 1037, "first_seen_epoch": "1634913190.032815", "last_seen_epoch": "1634913313.962859", "evidence_frames": [ 2987, 2994, 2995, 3002, 3003 ] }, { "endpoint_id": "endpoint-50d260e01c2a5cca109b1182", "ip": "140.82.49.12", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 10, "packets_received": 13, "bytes_sent": 2257, "bytes_received": 1442, "first_seen_epoch": "1634914046.461964", "last_seen_epoch": "1634914162.917683", "evidence_frames": [ 17969, 17971, 17972, 17973, 17974 ] }, { "endpoint_id": "endpoint-d37e8ca6c8473317ee618a4a", "ip": "142.250.114.109", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 17, "bytes_sent": 664, "bytes_received": 978, "first_seen_epoch": "1634915335.348918", "last_seen_epoch": "1634915547.687078", "evidence_frames": [ 44501, 44535, 44536, 44537, 44558 ] }, { "endpoint_id": "endpoint-4e47825249fc3f2d8a5330d4", "ip": "142.250.114.28", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 34, "packets_received": 43, "bytes_sent": 2277, "bytes_received": 2430, "first_seen_epoch": "1634915301.537037", "last_seen_epoch": "1634916242.986419", "evidence_frames": [ 43090, 43094, 43095, 43109, 43110 ] }, { "endpoint_id": "endpoint-a49d39cbe2ae13bfbff01db8", "ip": "159.127.40.144", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 30, "bytes_sent": 13339, "bytes_received": 4075, "first_seen_epoch": "1634918066.251667", "last_seen_epoch": "1634918067.204728", "evidence_frames": [ 80440, 80441, 80442, 80443, 80444 ] }, { "endpoint_id": "endpoint-4efe260676a36df00d0d1607", "ip": "162.210.220.137", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 20, "packets_received": 24, "bytes_sent": 6028, "bytes_received": 1940, "first_seen_epoch": "1634916205.317293", "last_seen_epoch": "1634916208.025096", "evidence_frames": [ 60533, 60534, 60535, 60536, 60537 ] }, { "endpoint_id": "endpoint-099ad521f51ef27bb5cfdb81", "ip": "167.248.117.81", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634913832.934975", "last_seen_epoch": "1634913958.2419", "evidence_frames": [ 16188, 16197, 16200, 16213, 16229 ] }, { "endpoint_id": "endpoint-148bebd6927448dd7d9ebd8c", "ip": "168.196.133.84", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 3, "packets_received": 23, "bytes_sent": 162, "bytes_received": 1518, "first_seen_epoch": "1634917014.999595", "last_seen_epoch": "1634918599.609088", "evidence_frames": [ 68539, 68571, 68603, 68663, 69134 ] }, { "endpoint_id": "endpoint-760627c014b230506392a849", "ip": "172.67.139.101", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 250, "packets_received": 122, "bytes_sent": 352441, "bytes_received": 6735, "first_seen_epoch": "1634913395.650131", "last_seen_epoch": "1634913399.440283", "evidence_frames": [ 6748, 6749, 6750, 6751, 6752 ] }, { "endpoint_id": "endpoint-f70897018f1186f6f5fa12d4", "ip": "173.223.109.212", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 54, "packets_received": 48, "bytes_sent": 42524, "bytes_received": 9610, "first_seen_epoch": "1634913224.790865", "last_seen_epoch": "1634913785.046146", "evidence_frames": [ 3880, 3882, 3883, 3884, 3885 ] }, { "endpoint_id": "endpoint-8c87a8662dcbdc465c7d511c", "ip": "173.249.53.15", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 27, "bytes_sent": 5811, "bytes_received": 2158, "first_seen_epoch": "1634916461.696492", "last_seen_epoch": "1634916467.934889", "evidence_frames": [ 64422, 64423, 64424, 64427, 64430 ] }, { "endpoint_id": "endpoint-f919eb24e5c3aecf26b70ff3", "ip": "178.23.190.8", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 659, "packets_received": 398, "bytes_sent": 947287, "bytes_received": 21796, "first_seen_epoch": "1634913428.616092", "last_seen_epoch": "1634913531.509164", "evidence_frames": [ 9648, 9649, 9650, 9651, 9652 ] }, { "endpoint_id": "endpoint-2bb31c516809925d8f4bf87a", "ip": "180.149.244.81", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 17, "bytes_sent": 1203, "bytes_received": 1015, "first_seen_epoch": "1634917217.51764", "last_seen_epoch": "1634917223.553909", "evidence_frames": [ 69989, 69990, 69991, 69994, 69997 ] }, { "endpoint_id": "endpoint-293dfc70d54d9f765f03ab66", "ip": "183.61.185.83", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 96, "packets_received": 96, "bytes_sent": 20883, "bytes_received": 8193, "first_seen_epoch": "1634917054.537637", "last_seen_epoch": "1634917341.608144", "evidence_frames": [ 68864, 68868, 68869, 68876, 68880 ] }, { "endpoint_id": "endpoint-0f7f2b0a496edb56b978e897", "ip": "187.250.109.250", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 17, "packets_received": 20, "bytes_sent": 966, "bytes_received": 1320, "first_seen_epoch": "1634915682.147153", "last_seen_epoch": "1634915728.030879", "evidence_frames": [ 54902, 54904, 54917, 54918, 54925 ] }, { "endpoint_id": "endpoint-b85c647d8d6797c5a8b05448", "ip": "189.210.115.207", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634915733.037953", "last_seen_epoch": "1634915858.400418", "evidence_frames": [ 55496, 55505, 55518, 55531, 55616 ] }, { "endpoint_id": "endpoint-f5969b497b6d8873bd83b114", "ip": "190.117.91.214", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634914534.852273", "last_seen_epoch": "1634914660.104882", "evidence_frames": [ 23682, 23683, 23690, 23700, 23715 ] }, { "endpoint_id": "endpoint-7de3944cdabfc4d0162d912f", "ip": "190.14.37.244", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 667, "packets_received": 494, "bytes_sent": 947719, "bytes_received": 26981, "first_seen_epoch": "1634913421.528002", "last_seen_epoch": "1634913531.510201", "evidence_frames": [ 7247, 7248, 7249, 7250, 7251 ] }, { "endpoint_id": "endpoint-3c9a996a491b7641cddd4a42", "ip": "192.185.57.27", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 24, "bytes_sent": 5434, "bytes_received": 1969, "first_seen_epoch": "1634916150.783906", "last_seen_epoch": "1634916163.822268", "evidence_frames": [ 59877, 59878, 59879, 59977, 59980 ] }, { "endpoint_id": "endpoint-5c4081ed1769cb0b532cb949", "ip": "193.70.18.144", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 980, "packets_received": 898, "bytes_sent": 261117, "bytes_received": 81705, "first_seen_epoch": "1634915374.224659", "last_seen_epoch": "1634918551.151399", "evidence_frames": [ 45332, 45338, 45340, 45375, 45378 ] }, { "endpoint_id": "endpoint-4b5c9fc230f17cd275a0262b", "ip": "194.15.112.173", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 2567, "packets_received": 1627, "bytes_sent": 3474852, "bytes_received": 117076, "first_seen_epoch": "1634913708.447086", "last_seen_epoch": "1634918564.611526", "evidence_frames": [ 11574, 11575, 11576, 11577, 11578 ] }, { "endpoint_id": "endpoint-b5387d89337222769a4b26f3", "ip": "194.36.191.35", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 667, "packets_received": 538, "bytes_sent": 947719, "bytes_received": 29357, "first_seen_epoch": "1634913426.648891", "last_seen_epoch": "1634913531.509484", "evidence_frames": [ 8445, 8448, 8449, 8450, 8451 ] }, { "endpoint_id": "endpoint-5fbc2cc2d9a1307a83df0e07", "ip": "197.221.10.57", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 25, "bytes_sent": 6869, "bytes_received": 2052, "first_seen_epoch": "1634915616.072189", "last_seen_epoch": "1634915628.938166", "evidence_frames": [ 53957, 53959, 53960, 53972, 53975 ] }, { "endpoint_id": "endpoint-7e82bcd3af57a5073061162f", "ip": "197.242.67.121", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 162, "packets_received": 151, "bytes_sent": 41145, "bytes_received": 12372, "first_seen_epoch": "1634915872.520196", "last_seen_epoch": "1634917796.9092", "evidence_frames": [ 56656, 56658, 56659, 56688, 56689 ] }, { "endpoint_id": "endpoint-a7cc4fd2314d4c9945b2581e", "ip": "197.97.195.226", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 33, "packets_received": 35, "bytes_sent": 2710, "bytes_received": 2228, "first_seen_epoch": "1634916530.967614", "last_seen_epoch": "1634918472.438354", "evidence_frames": [ 65029, 65031, 65032, 65050, 65053 ] }, { "endpoint_id": "endpoint-3438456a4cc3491c676ab862", "ip": "198.136.61.225", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 68, "packets_received": 79, "bytes_sent": 24421, "bytes_received": 16651, "first_seen_epoch": "1634913576.019874", "last_seen_epoch": "1634914402.93218", "evidence_frames": [ 10933, 10935, 10936, 10937, 10938 ] }, { "endpoint_id": "endpoint-a6d2bee24ebb91698bd2d24e", "ip": "198.50.182.64", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 69, "packets_received": 84, "bytes_sent": 24024, "bytes_received": 18305, "first_seen_epoch": "1634913608.681335", "last_seen_epoch": "1634914467.933818", "evidence_frames": [ 11039, 11040, 11041, 11042, 11043 ] }, { "endpoint_id": "endpoint-23bd4be55d1ec4514edff439", "ip": "2.222.167.138", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 15, "packets_received": 20, "bytes_sent": 842, "bytes_received": 1320, "first_seen_epoch": "1634916261.03861", "last_seen_epoch": "1634916301.698192", "evidence_frames": [ 61023, 61025, 61034, 61035, 61037 ] }, { "endpoint_id": "endpoint-61d9a4eb9ee3788384ebacf0", "ip": "20.140.56.70", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 11, "packets_received": 10, "bytes_sent": 4224, "bytes_received": 1028, "first_seen_epoch": "1634913244.203474", "last_seen_epoch": "1634913366.47366", "evidence_frames": [ 4670, 4716, 4717, 4718, 4719 ] }, { "endpoint_id": "endpoint-e6c50359c024320174247151", "ip": "20.189.173.12", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 31, "packets_received": 24, "bytes_sent": 11662, "bytes_received": 10411, "first_seen_epoch": "1634913184.625072", "last_seen_epoch": "1634913187.459072", "evidence_frames": [ 2707, 2736, 2737, 2738, 2739 ] }, { "endpoint_id": "endpoint-8f33c3fd19fa7002a3320643", "ip": "20.189.173.7", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 34, "packets_received": 34, "bytes_sent": 15286, "bytes_received": 11568, "first_seen_epoch": "1634913064.818632", "last_seen_epoch": "1634913495.206899", "evidence_frames": [ 717, 718, 719, 720, 721 ] }, { "endpoint_id": "endpoint-f302ae65b0aa251e1b9dc187", "ip": "20.190.157.11", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 30, "packets_received": 21, "bytes_sent": 25392, "bytes_received": 8380, "first_seen_epoch": "1634915205.492759", "last_seen_epoch": "1634915206.078331", "evidence_frames": [ 30183, 30184, 30185, 30186, 30187 ] }, { "endpoint_id": "endpoint-dce10ac7587deb8177412f0d", "ip": "20.190.4.251", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 18, "packets_received": 13, "bytes_sent": 9803, "bytes_received": 2309, "first_seen_epoch": "1634913244.908223", "last_seen_epoch": "1634913354.902431", "evidence_frames": [ 4818, 4826, 4827, 4828, 4829 ] }, { "endpoint_id": "endpoint-7bb488e7f139d09f86cf9437", "ip": "20.44.10.123", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 109, "packets_received": 100, "bytes_sent": 44328, "bytes_received": 39782, "first_seen_epoch": "1634913125.918666", "last_seen_epoch": "1634917649.820815", "evidence_frames": [ 1609, 1610, 1611, 1612, 1613 ] }, { "endpoint_id": "endpoint-a5f5dbb2a8b9ce3abc04972a", "ip": "20.50.80.210", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 20, "bytes_sent": 11132, "bytes_received": 5914, "first_seen_epoch": "1634915818.133813", "last_seen_epoch": "1634915850.206996", "evidence_frames": [ 56079, 56084, 56085, 56086, 56087 ] }, { "endpoint_id": "endpoint-29e4dbce4075222fd002d677", "ip": "20.69.137.228", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 60, "packets_received": 49, "bytes_sent": 32949, "bytes_received": 13057, "first_seen_epoch": "1634913191.733138", "last_seen_epoch": "1634913355.73676", "evidence_frames": [ 3186, 3187, 3188, 3189, 3190 ] }, { "endpoint_id": "endpoint-6057cede81900de5f149270d", "ip": "20.83.81.162", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 211, "packets_received": 149, "bytes_sent": 144170, "bytes_received": 82671, "first_seen_epoch": "1634913661.729376", "last_seen_epoch": "1634913756.25534", "evidence_frames": [ 11165, 11166, 11167, 11168, 11169 ] }, { "endpoint_id": "endpoint-d0d82bba430a1d120ed78e9b", "ip": "201.111.144.72", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634914606.0413", "last_seen_epoch": "1634914731.36608", "evidence_frames": [ 23865, 23871, 23873, 23884, 23907 ] }, { "endpoint_id": "endpoint-be04c88405c53b30a03d32db", "ip": "201.137.10.225", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 5729, "packets_received": 3923, "bytes_sent": 7542255, "bytes_received": 627435, "first_seen_epoch": "1634914982.596595", "last_seen_epoch": "1634915687.331933", "evidence_frames": [ 26004, 26005, 26006, 26007, 26008 ] }, { "endpoint_id": "endpoint-702541f0c98398e28b1ae6d0", "ip": "204.79.197.200", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 6563, "packets_received": 3789, "bytes_sent": 9181645, "bytes_received": 257730, "first_seen_epoch": "1634913189.668559", "last_seen_epoch": "1634918131.875233", "evidence_frames": [ 2930, 2931, 2932, 2933, 2934 ] }, { "endpoint_id": "endpoint-fdaa7fc80989bc6040022ba2", "ip": "204.79.197.203", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 103, "packets_received": 95, "bytes_sent": 78240, "bytes_received": 12837, "first_seen_epoch": "1634913187.44748", "last_seen_epoch": "1634913347.475849", "evidence_frames": [ 2903, 2906, 2907, 2908, 2909 ] }, { "endpoint_id": "endpoint-2af4799c121ccf1cf53ef6f4", "ip": "204.79.197.219", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 34, "packets_received": 27, "bytes_sent": 14574, "bytes_received": 4781, "first_seen_epoch": "1634913346.100623", "last_seen_epoch": "1634913375.112707", "evidence_frames": [ 6226, 6227, 6229, 6233, 6234 ] }, { "endpoint_id": "endpoint-4e94133f07afdda8e9fa2ffb", "ip": "204.79.197.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 13, "packets_received": 12, "bytes_sent": 5713, "bytes_received": 1136, "first_seen_epoch": "1634913244.187843", "last_seen_epoch": "1634913372.308536", "evidence_frames": [ 4663, 4703, 4705, 4707, 4709 ] }, { "endpoint_id": "endpoint-769956dbca53dceb1c136029", "ip": "207.246.112.221", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 2065, "packets_received": 760, "bytes_sent": 2899401, "bytes_received": 51385, "first_seen_epoch": "1634916393.15043", "last_seen_epoch": "1634918430.260516", "evidence_frames": [ 62305, 62306, 62307, 62308, 62309 ] }, { "endpoint_id": "endpoint-826355189c0fe2988b7fa39e", "ip": "208.180.40.68", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 53, "packets_received": 48, "bytes_sent": 11597, "bytes_received": 3980, "first_seen_epoch": "1634918076.969843", "last_seen_epoch": "1634918204.183175", "evidence_frames": [ 80689, 80690, 80691, 80694, 80697 ] }, { "endpoint_id": "endpoint-4df755be9df731fb9f038e1f", "ip": "208.68.106.6", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 30, "bytes_sent": 2714, "bytes_received": 1906, "first_seen_epoch": "1634915558.28933", "last_seen_epoch": "1634917489.969056", "evidence_frames": [ 51640, 51641, 51642, 51652, 51655 ] }, { "endpoint_id": "endpoint-0c530ef038e9c8591ae42405", "ip": "209.203.34.199", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 2, "packets_received": 2, "bytes_sent": 112, "bytes_received": 120, "first_seen_epoch": "1634916698.560501", "last_seen_epoch": "1634916698.856907", "evidence_frames": [ 66177, 66178, 66179, 66182 ] }, { "endpoint_id": "endpoint-2ee590c0839597bc1390e795", "ip": "209.210.95.228", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 8, "packets_received": 40, "bytes_sent": 432, "bytes_received": 2640, "first_seen_epoch": "1634913975.259374", "last_seen_epoch": "1634916432.052121", "evidence_frames": [ 17654, 17655, 17683, 17692, 17713 ] }, { "endpoint_id": "endpoint-51aa80a90e6a392e7398dbe2", "ip": "217.11.242.15", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 9792, "bytes_received": 1997, "first_seen_epoch": "1634915643.831915", "last_seen_epoch": "1634915650.723787", "evidence_frames": [ 54362, 54363, 54364, 54369, 54373 ] }, { "endpoint_id": "endpoint-4e5870983a47ea47fb29a4dc", "ip": "217.116.0.228", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 24, "bytes_sent": 5568, "bytes_received": 1995, "first_seen_epoch": "1634917190.197616", "last_seen_epoch": "1634917199.636635", "evidence_frames": [ 69727, 69728, 69729, 69733, 69736 ] }, { "endpoint_id": "endpoint-06ba669326e4293465567bce", "ip": "221.176.66.188", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 24, "bytes_sent": 6751, "bytes_received": 2175, "first_seen_epoch": "1634916483.853137", "last_seen_epoch": "1634916492.666266", "evidence_frames": [ 64699, 64701, 64702, 64706, 64709 ] }, { "endpoint_id": "endpoint-d9ed38bd959c535748aa1111", "ip": "223.29.248.111", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 7065, "bytes_received": 2047, "first_seen_epoch": "1634918112.497056", "last_seen_epoch": "1634918126.039595", "evidence_frames": [ 80886, 80887, 80888, 80891, 80894 ] }, { "endpoint_id": "endpoint-492127a2304efb37c8a944d9", "ip": "224.0.0.22", "ip_version": 4, "is_private": false, "mac_addresses": [ "01:00:5e:00:00:16" ], "packets_sent": 0, "packets_received": 114, "bytes_sent": 0, "bytes_received": 6188, "first_seen_epoch": "1634913052.071984", "last_seen_epoch": "1634918544.00657", "evidence_frames": [ 4, 5, 6, 7, 21 ] }, { "endpoint_id": "endpoint-8a4b28b239ae5f1d8173a9d6", "ip": "224.0.0.251", "ip_version": 4, "is_private": false, "mac_addresses": [ "01:00:5e:00:00:fb" ], "packets_sent": 0, "packets_received": 54, "bytes_sent": 0, "bytes_received": 4551, "first_seen_epoch": "1634913052.109869", "last_seen_epoch": "1634918543.667235", "evidence_frames": [ 8, 9, 783, 784, 1677 ] }, { "endpoint_id": "endpoint-aa46f4eec83e8c6391727a29", "ip": "224.0.0.252", "ip_version": 4, "is_private": false, "mac_addresses": [ "01:00:5e:00:00:fc" ], "packets_sent": 0, "packets_received": 32, "bytes_sent": 0, "bytes_received": 2352, "first_seen_epoch": "1634913052.113364", "last_seen_epoch": "1634918543.667774", "evidence_frames": [ 10, 785, 1679, 6493, 6496 ] }, { "endpoint_id": "endpoint-bcac1b03891425293b93ce53", "ip": "23.111.114.52", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 5062, "packets_received": 4560, "bytes_sent": 436595, "bytes_received": 1149601, "first_seen_epoch": "1634915276.907685", "last_seen_epoch": "1634918599.611491", "evidence_frames": [ 42858, 42859, 42860, 42861, 42862 ] }, { "endpoint_id": "endpoint-35a7e5a4e8e6b9b31a099c1e", "ip": "23.21.76.7", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 51, "packets_received": 40, "bytes_sent": 26994, "bytes_received": 3896, "first_seen_epoch": "1634915375.023986", "last_seen_epoch": "1634915377.019897", "evidence_frames": [ 45364, 45365, 45367, 45368, 45369 ] }, { "endpoint_id": "endpoint-676613963235ebfc6ef72a56", "ip": "23.222.241.43", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 14, "packets_received": 12, "bytes_sent": 8903, "bytes_received": 1351, "first_seen_epoch": "1634918065.85483", "last_seen_epoch": "1634918170.492584", "evidence_frames": [ 80415, 80416, 80417, 80418, 80419 ] }, { "endpoint_id": "endpoint-6411fcdf9a0ddcdfa44177e1", "ip": "23.47.169.181", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 12, "bytes_sent": 8030, "bytes_received": 1212, "first_seen_epoch": "1634913890.482569", "last_seen_epoch": "1634913911.049476", "evidence_frames": [ 17309, 17311, 17312, 17313, 17314 ] }, { "endpoint_id": "endpoint-62721cdc94588165c4a4d5e2", "ip": "23.47.50.180", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 40, "packets_received": 36, "bytes_sent": 45332, "bytes_received": 2661, "first_seen_epoch": "1634913274.533863", "last_seen_epoch": "1634913294.998125", "evidence_frames": [ 5440, 5441, 5442, 5443, 5444 ] }, { "endpoint_id": "endpoint-6dde1afd22a8a7b93ea47bd6", "ip": "23.47.52.13", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 14, "packets_received": 14, "bytes_sent": 5524, "bytes_received": 1214, "first_seen_epoch": "1634913243.878902", "last_seen_epoch": "1634915039.83449", "evidence_frames": [ 4461, 4467, 4469, 4470, 4471 ] }, { "endpoint_id": "endpoint-7f1c22fcff68936a156772db", "ip": "239.255.255.250", "ip_version": 4, "is_private": false, "mac_addresses": [ "01:00:5e:7f:ff:fa" ], "packets_sent": 0, "packets_received": 104, "bytes_sent": 0, "bytes_received": 18669, "first_seen_epoch": "1634913117.13205", "last_seen_epoch": "1634918558.727872", "evidence_frames": [ 1387, 1388, 1406, 1407, 1422 ] }, { "endpoint_id": "endpoint-a2253bc1bd57e900976ce19b", "ip": "24.231.209.2", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 40, "packets_received": 40, "bytes_sent": 2160, "bytes_received": 2640, "first_seen_epoch": "1634914677.262419", "last_seen_epoch": "1634914883.116314", "evidence_frames": [ 24065, 24066, 24067, 24068, 24069 ] }, { "endpoint_id": "endpoint-a62982114b830ab3c27dddc9", "ip": "255.255.255.255", "ip_version": 4, "is_private": true, "mac_addresses": [ "ff:ff:ff:ff:ff:ff" ], "packets_sent": 0, "packets_received": 6, "bytes_sent": 0, "bytes_received": 2199, "first_seen_epoch": "1634913051.987411", "last_seen_epoch": "1634913143.408993", "evidence_frames": [ 1, 2, 776, 777, 1667 ] }, { "endpoint_id": "endpoint-911de0a7b173e6158ab9f471", "ip": "31.193.50.122", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 125, "packets_received": 122, "bytes_sent": 29520, "bytes_received": 12193, "first_seen_epoch": "1634916001.177618", "last_seen_epoch": "1634917987.54188", "evidence_frames": [ 58165, 58167, 58168, 58195, 58198 ] }, { "endpoint_id": "endpoint-29b0bf8a473ff5b4403abbca", "ip": "34.117.59.81", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 12, "packets_received": 11, "bytes_sent": 5827, "bytes_received": 1117, "first_seen_epoch": "1634914507.545772", "last_seen_epoch": "1634914654.469325", "evidence_frames": [ 23557, 23558, 23559, 23560, 23561 ] }, { "endpoint_id": "endpoint-dda59ddff172de3a90a9e1ae", "ip": "34.120.119.232", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 100, "packets_received": 53, "bytes_sent": 131430, "bytes_received": 3601, "first_seen_epoch": "1634918067.296631", "last_seen_epoch": "1634918170.492328", "evidence_frames": [ 80509, 80510, 80511, 80512, 80513 ] }, { "endpoint_id": "endpoint-7c2ecf367f7d758d57c777d8", "ip": "34.149.19.242", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 24, "bytes_sent": 7747, "bytes_received": 1928, "first_seen_epoch": "1634916244.239168", "last_seen_epoch": "1634916256.56762", "evidence_frames": [ 60859, 60862, 60863, 60866, 60869 ] }, { "endpoint_id": "endpoint-a007b716ba32d01330bf3296", "ip": "34.193.71.224", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 7, "packets_received": 9, "bytes_sent": 822, "bytes_received": 510, "first_seen_epoch": "1634915790.950017", "last_seen_epoch": "1634916000.459063", "evidence_frames": [ 55895, 55896, 55898, 55987, 55988 ] }, { "endpoint_id": "endpoint-dd1171e66ff35cd3f6c7d500", "ip": "35.190.80.1", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 22, "packets_received": 18, "bytes_sent": 6645, "bytes_received": 2870, "first_seen_epoch": "1634913347.647098", "last_seen_epoch": "1634913375.10226", "evidence_frames": [ 6396, 6398, 6399, 6400, 6401 ] }, { "endpoint_id": "endpoint-49b57ff1be2f5073bfcc9b09", "ip": "37.0.10.22", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 2677, "packets_received": 2578, "bytes_sent": 495018, "bytes_received": 200636, "first_seen_epoch": "1634913296.323615", "last_seen_epoch": "1634918599.671398", "evidence_frames": [ 5644, 5645, 5653, 5654, 5655 ] }, { "endpoint_id": "endpoint-53d1c05c63be77fc07f38d40", "ip": "37.208.181.198", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 8, "packets_received": 41, "bytes_sent": 436, "bytes_received": 2694, "first_seen_epoch": "1634914463.66204", "last_seen_epoch": "1634914923.897482", "evidence_frames": [ 23238, 23244, 23246, 23263, 23295 ] }, { "endpoint_id": "endpoint-5765ca8cccc0617fcd3685cd", "ip": "37.252.0.102", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 208, "packets_received": 199, "bytes_sent": 13156, "bytes_received": 267703, "first_seen_epoch": "1634915207.01529", "last_seen_epoch": "1634915211.298095", "evidence_frames": [ 30260, 30261, 30262, 30263, 30264 ] }, { "endpoint_id": "endpoint-6c91bdc7624cf2c291168658", "ip": "39.40.37.70", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634914392.520553", "last_seen_epoch": "1634914517.783158", "evidence_frames": [ 23026, 23027, 23034, 23041, 23080 ] }, { "endpoint_id": "endpoint-56000c63a5ff0b6134b1ffaa", "ip": "40.126.28.11", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 10, "bytes_sent": 5267, "bytes_received": 1512, "first_seen_epoch": "1634915472.314548", "last_seen_epoch": "1634915472.872614", "evidence_frames": [ 48404, 48405, 48406, 48407, 48408 ] }, { "endpoint_id": "endpoint-321819f11231c32a18875c9c", "ip": "40.126.28.12", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 11, "bytes_sent": 5267, "bytes_received": 1566, "first_seen_epoch": "1634915359.721768", "last_seen_epoch": "1634915360.221062", "evidence_frames": [ 45134, 45138, 45139, 45140, 45141 ] }, { "endpoint_id": "endpoint-4f12af3b8360ed7f3f50b2ee", "ip": "40.126.28.20", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 23, "packets_received": 17, "bytes_sent": 15445, "bytes_received": 8198, "first_seen_epoch": "1634913244.947375", "last_seen_epoch": "1634913245.496379", "evidence_frames": [ 4820, 4830, 4831, 4832, 4833 ] }, { "endpoint_id": "endpoint-061ce9a297522b2ff4b0caf5", "ip": "40.126.28.22", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 32, "packets_received": 28, "bytes_sent": 20712, "bytes_received": 9763, "first_seen_epoch": "1634913218.679715", "last_seen_epoch": "1634915358.215129", "evidence_frames": [ 3672, 3679, 3680, 3681, 3682 ] }, { "endpoint_id": "endpoint-d6fde17086a3581c4ca5925a", "ip": "40.126.28.23", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 52, "packets_received": 37, "bytes_sent": 40059, "bytes_received": 16875, "first_seen_epoch": "1634913190.966542", "last_seen_epoch": "1634913346.838726", "evidence_frames": [ 3071, 3091, 3092, 3093, 3094 ] }, { "endpoint_id": "endpoint-7ff3aa6c53cb0f2846f5a074", "ip": "40.126.29.11", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 11, "bytes_sent": 5266, "bytes_received": 1566, "first_seen_epoch": "1634914986.245594", "last_seen_epoch": "1634914986.759797", "evidence_frames": [ 26152, 26153, 26154, 26155, 26156 ] }, { "endpoint_id": "endpoint-7afa1f98583692fe15ec722e", "ip": "40.126.29.12", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 9, "bytes_sent": 5266, "bytes_received": 1458, "first_seen_epoch": "1634915040.621759", "last_seen_epoch": "1634915041.333787", "evidence_frames": [ 29344, 29345, 29346, 29347, 29348 ] }, { "endpoint_id": "endpoint-b6e0b850e4fb4df21aa49ed1", "ip": "40.126.29.15", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 11, "bytes_sent": 5266, "bytes_received": 1566, "first_seen_epoch": "1634915013.198808", "last_seen_epoch": "1634915013.704571", "evidence_frames": [ 29181, 29182, 29183, 29184, 29185 ] }, { "endpoint_id": "endpoint-0e8ebf6605a1440501caaa68", "ip": "40.126.29.5", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 9, "packets_received": 11, "bytes_sent": 5266, "bytes_received": 1566, "first_seen_epoch": "1634913413.004462", "last_seen_epoch": "1634913413.534151", "evidence_frames": [ 7218, 7219, 7220, 7221, 7222 ] }, { "endpoint_id": "endpoint-43f08d48ab8fb5e0b6b64b84", "ip": "40.126.29.8", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 17, "bytes_sent": 19337, "bytes_received": 6434, "first_seen_epoch": "1634917491.09622", "last_seen_epoch": "1634917491.490003", "evidence_frames": [ 74947, 74948, 74949, 74950, 74951 ] }, { "endpoint_id": "endpoint-5ead06a1e603d722800c17bd", "ip": "40.90.64.59", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 13, "bytes_sent": 7396, "bytes_received": 2858, "first_seen_epoch": "1634913293.359574", "last_seen_epoch": "1634913294.639376", "evidence_frames": [ 5606, 5607, 5608, 5609, 5610 ] }, { "endpoint_id": "endpoint-bd203cc5a2f96aee43bea455", "ip": "40.90.64.61", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 17, "packets_received": 13, "bytes_sent": 7449, "bytes_received": 2857, "first_seen_epoch": "1634913684.195289", "last_seen_epoch": "1634913684.83974", "evidence_frames": [ 11489, 11490, 11491, 11492, 11493 ] }, { "endpoint_id": "endpoint-4f0d8fecf1528ef9ec60ae92", "ip": "40.90.64.98", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 17, "packets_received": 13, "bytes_sent": 7166, "bytes_received": 2855, "first_seen_epoch": "1634913232.724712", "last_seen_epoch": "1634913233.478939", "evidence_frames": [ 4027, 4034, 4035, 4036, 4037 ] }, { "endpoint_id": "endpoint-824299dc58b0d6cb8d93a999", "ip": "40.97.120.146", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 29, "packets_received": 27, "bytes_sent": 6945, "bytes_received": 2185, "first_seen_epoch": "1634917828.661645", "last_seen_epoch": "1634917845.363466", "evidence_frames": [ 78077, 78078, 78079, 78082, 78085 ] }, { "endpoint_id": "endpoint-a84bbbecbfb133af543ddfa6", "ip": "40.97.120.226", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 26, "bytes_sent": 6931, "bytes_received": 2151, "first_seen_epoch": "1634916147.533227", "last_seen_epoch": "1634916166.16316", "evidence_frames": [ 59770, 59772, 59773, 59776, 59779 ] }, { "endpoint_id": "endpoint-b5cdfc7732ca7494194b4464", "ip": "40.97.120.242", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6877, "bytes_received": 2151, "first_seen_epoch": "1634916776.539281", "last_seen_epoch": "1634916792.876", "evidence_frames": [ 66582, 66584, 66585, 66588, 66591 ] }, { "endpoint_id": "endpoint-a0f209a02cad1e6a949c68a5", "ip": "40.97.121.18", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 6829, "bytes_received": 2097, "first_seen_epoch": "1634915685.544857", "last_seen_epoch": "1634915703.523052", "evidence_frames": [ 54923, 54926, 54927, 54930, 54933 ] }, { "endpoint_id": "endpoint-56c214f199dc9cdb5db3d6c1", "ip": "40.97.199.114", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 52, "packets_received": 49, "bytes_sent": 13638, "bytes_received": 4120, "first_seen_epoch": "1634916015.151582", "last_seen_epoch": "1634918271.797548", "evidence_frames": [ 58330, 58332, 58333, 58336, 58340 ] }, { "endpoint_id": "endpoint-bd1f9742b2ca4d4c4208c49e", "ip": "40.97.212.2", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 22, "packets_received": 20, "bytes_sent": 6263, "bytes_received": 1752, "first_seen_epoch": "1634918586.461073", "last_seen_epoch": "1634918590.732518", "evidence_frames": [ 84428, 84429, 84430, 84435, 84438 ] }, { "endpoint_id": "endpoint-a83d18f6825a6213fc8a411d", "ip": "41.86.105.101", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 17, "bytes_sent": 1250, "bytes_received": 1011, "first_seen_epoch": "1634917433.087674", "last_seen_epoch": "1634917439.459977", "evidence_frames": [ 73622, 73633, 73634, 73639, 73642 ] }, { "endpoint_id": "endpoint-e9b9bc8d9b1ba480eb9a0ffc", "ip": "45.153.241.142", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 61, "packets_received": 64, "bytes_sent": 3644, "bytes_received": 3968, "first_seen_epoch": "1634916791.498014", "last_seen_epoch": "1634917490.845161", "evidence_frames": [ 67512, 67513, 67514, 67515, 67516 ] }, { "endpoint_id": "endpoint-c4ea152c84da37bfc50ca3ab", "ip": "45.46.53.140", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 24, "packets_received": 20, "bytes_sent": 1456, "bytes_received": 1320, "first_seen_epoch": "1634916212.954772", "last_seen_epoch": "1634916256.020328", "evidence_frames": [ 60622, 60624, 60633, 60634, 60636 ] }, { "endpoint_id": "endpoint-68078b9ca3ebcb8a939b9db0", "ip": "47.151.181.188", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 18, "packets_received": 20, "bytes_sent": 1020, "bytes_received": 1320, "first_seen_epoch": "1634914695.013201", "last_seen_epoch": "1634914740.792188", "evidence_frames": [ 24138, 24141, 24143, 24144, 24146 ] }, { "endpoint_id": "endpoint-369a8ae0ce163b0454457f27", "ip": "47.22.148.6", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 20, "bytes_sent": 1516, "bytes_received": 1320, "first_seen_epoch": "1634916179.457069", "last_seen_epoch": "1634916193.271719", "evidence_frames": [ 60387, 60389, 60390, 60391, 60395 ] }, { "endpoint_id": "endpoint-ff755bdd35705dd815557a1b", "ip": "47.40.196.233", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 17, "packets_received": 20, "bytes_sent": 950, "bytes_received": 1320, "first_seen_epoch": "1634914320.66052", "last_seen_epoch": "1634914366.42913", "evidence_frames": [ 22776, 22790, 22792, 22793, 22794 ] }, { "endpoint_id": "endpoint-17a8a5cdd17beb86d50615dc", "ip": "50.17.218.95", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 79, "packets_received": 65, "bytes_sent": 41976, "bytes_received": 6852, "first_seen_epoch": "1634915543.52398", "last_seen_epoch": "1634915545.346411", "evidence_frames": [ 51086, 51087, 51088, 51089, 51090 ] }, { "endpoint_id": "endpoint-ffcc2535d4c498e3a3605aca", "ip": "50.194.160.233", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634914249.454171", "last_seen_epoch": "1634914374.753428", "evidence_frames": [ 22532, 22533, 22548, 22581, 22593 ] }, { "endpoint_id": "endpoint-936de36e44c5770cd9b08a8f", "ip": "50.77.156.245", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 5, "packets_received": 5, "bytes_sent": 270, "bytes_received": 330, "first_seen_epoch": "1634918206.877963", "last_seen_epoch": "1634918209.41478", "evidence_frames": [ 81372, 81373, 81374, 81375, 81376 ] }, { "endpoint_id": "endpoint-c58c5bd567b9042f515cfdcc", "ip": "51.132.193.105", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 41, "packets_received": 31, "bytes_sent": 13578, "bytes_received": 18849, "first_seen_epoch": "1634913230.665956", "last_seen_epoch": "1634913242.435187", "evidence_frames": [ 3944, 3954, 3955, 3956, 3957 ] }, { "endpoint_id": "endpoint-57c200cdb93dfc4f8191b87e", "ip": "51.158.108.203", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 1, "packets_received": 1, "bytes_sent": 91, "bytes_received": 75, "first_seen_epoch": "1634914069.970793", "last_seen_epoch": "1634914070.383727", "evidence_frames": [ 19683, 19686 ] }, { "endpoint_id": "endpoint-9db7e37229f86f1767c9ffe7", "ip": "52.109.2.1", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 11, "packets_received": 10, "bytes_sent": 7787, "bytes_received": 1123, "first_seen_epoch": "1634915197.738393", "last_seen_epoch": "1634915211.297764", "evidence_frames": [ 30062, 30067, 30068, 30069, 30070 ] }, { "endpoint_id": "endpoint-92fed258a4ce9ed91d08235c", "ip": "52.109.76.31", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 11, "packets_received": 9, "bytes_sent": 6884, "bytes_received": 1437, "first_seen_epoch": "1634915197.563372", "last_seen_epoch": "1634915211.297501", "evidence_frames": [ 30058, 30063, 30064, 30065, 30066 ] }, { "endpoint_id": "endpoint-d4b33430102a737cbd9c6434", "ip": "52.109.76.32", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 49, "packets_received": 40, "bytes_sent": 21324, "bytes_received": 4976, "first_seen_epoch": "1634913116.835541", "last_seen_epoch": "1634913317.363031", "evidence_frames": [ 1379, 1382, 1383, 1384, 1385 ] }, { "endpoint_id": "endpoint-cb151e7c7f898c1cb0547f90", "ip": "52.109.8.20", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 11, "packets_received": 9, "bytes_sent": 6839, "bytes_received": 1506, "first_seen_epoch": "1634913479.016444", "last_seen_epoch": "1634913584.327027", "evidence_frames": [ 10818, 10819, 10820, 10821, 10822 ] }, { "endpoint_id": "endpoint-0c04ee4bc256a1271c128001", "ip": "52.113.196.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 23, "bytes_sent": 11372, "bytes_received": 2226, "first_seen_epoch": "1634913189.938393", "last_seen_epoch": "1634913371.529731", "evidence_frames": [ 2965, 2983, 2984, 2990, 2991 ] }, { "endpoint_id": "endpoint-a844705ab1749eba36426f8c", "ip": "52.152.108.96", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 29, "packets_received": 27, "bytes_sent": 6435, "bytes_received": 17246, "first_seen_epoch": "1634913725.148589", "last_seen_epoch": "1634913726.282478", "evidence_frames": [ 11778, 11779, 11780, 11781, 11782 ] }, { "endpoint_id": "endpoint-074017bf849de308258d14af", "ip": "52.178.17.3", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 13, "packets_received": 9, "bytes_sent": 5566, "bytes_received": 2753, "first_seen_epoch": "1634917557.393341", "last_seen_epoch": "1634917558.524409", "evidence_frames": [ 75925, 75998, 76000, 76002, 76003 ] }, { "endpoint_id": "endpoint-eaf3b9be459abfa2455b6db8", "ip": "52.182.143.210", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 41, "packets_received": 39, "bytes_sent": 15979, "bytes_received": 18410, "first_seen_epoch": "1634913160.531545", "last_seen_epoch": "1634913596.718689", "evidence_frames": [ 2485, 2486, 2487, 2488, 2489 ] }, { "endpoint_id": "endpoint-1c3ba1bf204ac0da0ae4e7ae", "ip": "52.183.220.149", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 60, "packets_received": 46, "bytes_sent": 19723, "bytes_received": 10060, "first_seen_epoch": "1634915989.503911", "last_seen_epoch": "1634917861.209203", "evidence_frames": [ 58027, 58029, 58030, 58031, 58032 ] }, { "endpoint_id": "endpoint-a1e157ef543e3d61acc122f7", "ip": "52.185.211.133", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 153, "packets_received": 118, "bytes_sent": 64194, "bytes_received": 20217, "first_seen_epoch": "1634913193.335997", "last_seen_epoch": "1634916960.768464", "evidence_frames": [ 3214, 3215, 3216, 3217, 3218 ] }, { "endpoint_id": "endpoint-b4afd1500ed074fd37a6be9e", "ip": "52.232.226.150", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 29, "packets_received": 22, "bytes_sent": 12350, "bytes_received": 5119, "first_seen_epoch": "1634913346.415138", "last_seen_epoch": "1634913375.136031", "evidence_frames": [ 6284, 6292, 6293, 6294, 6295 ] }, { "endpoint_id": "endpoint-4cb196270e2c37950e067a80", "ip": "52.242.97.97", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 60, "packets_received": 55, "bytes_sent": 12315, "bytes_received": 34208, "first_seen_epoch": "1634913667.883325", "last_seen_epoch": "1634913758.064746", "evidence_frames": [ 11351, 11352, 11353, 11354, 11355 ] }, { "endpoint_id": "endpoint-a2391788503515c61451bbf7", "ip": "52.96.10.242", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 78, "packets_received": 74, "bytes_sent": 20457, "bytes_received": 6217, "first_seen_epoch": "1634917221.492681", "last_seen_epoch": "1634917973.803565", "evidence_frames": [ 70035, 70039, 70040, 70043, 70049 ] }, { "endpoint_id": "endpoint-39fe636c730f77c96b908cd2", "ip": "52.96.103.18", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 6819, "bytes_received": 2089, "first_seen_epoch": "1634918357.614376", "last_seen_epoch": "1634918379.271045", "evidence_frames": [ 82400, 82404, 82405, 82408, 82411 ] }, { "endpoint_id": "endpoint-d490eb2af582eb9697c1ce2d", "ip": "52.96.103.2", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6867, "bytes_received": 2135, "first_seen_epoch": "1634917455.721148", "last_seen_epoch": "1634917475.893715", "evidence_frames": [ 74445, 74446, 74447, 74450, 74453 ] }, { "endpoint_id": "endpoint-953f8812a3b62ec8bcbb0edf", "ip": "52.96.103.34", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 27, "bytes_sent": 6873, "bytes_received": 2197, "first_seen_epoch": "1634916539.282869", "last_seen_epoch": "1634916561.094387", "evidence_frames": [ 65075, 65076, 65077, 65080, 65083 ] }, { "endpoint_id": "endpoint-57110a5532202a8df3996f12", "ip": "52.96.121.114", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 29, "packets_received": 26, "bytes_sent": 6975, "bytes_received": 2151, "first_seen_epoch": "1634917928.100708", "last_seen_epoch": "1634917944.012389", "evidence_frames": [ 78340, 78342, 78343, 78346, 78349 ] }, { "endpoint_id": "endpoint-508bde8b73d5dafcb21a1f9b", "ip": "52.96.121.162", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 27, "bytes_sent": 6921, "bytes_received": 2205, "first_seen_epoch": "1634918020.368212", "last_seen_epoch": "1634918040.582884", "evidence_frames": [ 78999, 79001, 79002, 79005, 79008 ] }, { "endpoint_id": "endpoint-9b631ddb5ec24689086513df", "ip": "52.96.121.194", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 79, "packets_received": 77, "bytes_sent": 20499, "bytes_received": 6379, "first_seen_epoch": "1634915744.599786", "last_seen_epoch": "1634918349.914495", "evidence_frames": [ 55552, 55555, 55556, 55559, 55562 ] }, { "endpoint_id": "endpoint-f127cbd19ff342ab6f6503f6", "ip": "52.96.121.210", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6867, "bytes_received": 2135, "first_seen_epoch": "1634915427.307015", "last_seen_epoch": "1634915446.806487", "evidence_frames": [ 46994, 46997, 46998, 47001, 47004 ] }, { "endpoint_id": "endpoint-6cbe6fc2b4266d68b649696a", "ip": "52.96.121.98", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 6819, "bytes_received": 2085, "first_seen_epoch": "1634916828.066775", "last_seen_epoch": "1634916845.099492", "evidence_frames": [ 67783, 67785, 67786, 67789, 67792 ] }, { "endpoint_id": "endpoint-a753dc54fc94dcd003e2db5f", "ip": "52.96.122.226", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6873, "bytes_received": 2131, "first_seen_epoch": "1634918343.21354", "last_seen_epoch": "1634918363.488203", "evidence_frames": [ 82251, 82252, 82253, 82256, 82262 ] }, { "endpoint_id": "endpoint-1d4df0e71b8898510e8b1394", "ip": "52.96.122.242", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 6819, "bytes_received": 2081, "first_seen_epoch": "1634917417.581281", "last_seen_epoch": "1634917434.444851", "evidence_frames": [ 73508, 73510, 73511, 73514, 73517 ] }, { "endpoint_id": "endpoint-9ffd266c3acb99d47e4a5c34", "ip": "52.96.16.162", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 59, "packets_received": 58, "bytes_sent": 14101, "bytes_received": 5074, "first_seen_epoch": "1634916328.863131", "last_seen_epoch": "1634917020.652199", "evidence_frames": [ 61642, 61644, 61645, 61648, 61651 ] }, { "endpoint_id": "endpoint-41883d8b96aab4a1800d63b4", "ip": "52.96.191.98", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 52, "packets_received": 50, "bytes_sent": 13598, "bytes_received": 4162, "first_seen_epoch": "1634917122.262093", "last_seen_epoch": "1634918353.698127", "evidence_frames": [ 69335, 69337, 69338, 69341, 69344 ] }, { "endpoint_id": "endpoint-62c74f9a864363b8775d1167", "ip": "52.96.22.178", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 54, "packets_received": 53, "bytes_sent": 13754, "bytes_received": 4336, "first_seen_epoch": "1634915655.896042", "last_seen_epoch": "1634915675.712082", "evidence_frames": [ 54597, 54599, 54600, 54603, 54609 ] }, { "endpoint_id": "endpoint-d9db2d04488080e62988e02c", "ip": "52.96.55.242", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 52, "packets_received": 47, "bytes_sent": 18039, "bytes_received": 10822, "first_seen_epoch": "1634915204.388174", "last_seen_epoch": "1634915992.450611", "evidence_frames": [ 30156, 30159, 30160, 30161, 30162 ] }, { "endpoint_id": "endpoint-231cfaf1cfd63fe51b521dca", "ip": "52.96.57.18", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6867, "bytes_received": 2135, "first_seen_epoch": "1634916472.862574", "last_seen_epoch": "1634916489.056963", "evidence_frames": [ 64578, 64580, 64581, 64584, 64587 ] }, { "endpoint_id": "endpoint-fbf0961e8afdf34d6b682577", "ip": "52.96.57.2", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 80, "packets_received": 73, "bytes_sent": 20485, "bytes_received": 6147, "first_seen_epoch": "1634917432.452355", "last_seen_epoch": "1634918315.919198", "evidence_frames": [ 73613, 73616, 73617, 73618, 73620 ] }, { "endpoint_id": "endpoint-a6e899893eda0978314602a5", "ip": "52.96.57.82", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 26, "bytes_sent": 6919, "bytes_received": 2155, "first_seen_epoch": "1634918143.899609", "last_seen_epoch": "1634918160.247809", "evidence_frames": [ 81068, 81070, 81071, 81074, 81077 ] }, { "endpoint_id": "endpoint-5b28e7466cddba4dde3f20fe", "ip": "52.96.90.18", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 26, "bytes_sent": 6813, "bytes_received": 2135, "first_seen_epoch": "1634918382.818444", "last_seen_epoch": "1634918401.521422", "evidence_frames": [ 82650, 82651, 82652, 82655, 82658 ] }, { "endpoint_id": "endpoint-bba8aacb35682f2884e35a92", "ip": "52.96.91.66", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 6867, "bytes_received": 2135, "first_seen_epoch": "1634918375.218519", "last_seen_epoch": "1634918394.507597", "evidence_frames": [ 82537, 82538, 82539, 82542, 82545 ] }, { "endpoint_id": "endpoint-8df3924fd2c0383793f2046a", "ip": "54.243.250.193", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 90, "packets_received": 74, "bytes_sent": 48855, "bytes_received": 7895, "first_seen_epoch": "1634915332.123075", "last_seen_epoch": "1634915348.912567", "evidence_frames": [ 44313, 44314, 44315, 44317, 44318 ] }, { "endpoint_id": "endpoint-592b268618bd7e3a68fac2bd", "ip": "54.243.29.214", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 127, "packets_received": 103, "bytes_sent": 69708, "bytes_received": 11132, "first_seen_epoch": "1634915298.392832", "last_seen_epoch": "1634915490.127561", "evidence_frames": [ 42930, 42931, 42932, 42934, 42935 ] }, { "endpoint_id": "endpoint-c7815d41a643109a1f23c79e", "ip": "62.103.147.201", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 26, "bytes_sent": 5685, "bytes_received": 2124, "first_seen_epoch": "1634918548.530585", "last_seen_epoch": "1634918558.237835", "evidence_frames": [ 84141, 84143, 84144, 84152, 84155 ] }, { "endpoint_id": "endpoint-967548f562837cd7a44e2acb", "ip": "62.149.128.203", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 53, "packets_received": 49, "bytes_sent": 13269, "bytes_received": 4205, "first_seen_epoch": "1634917035.161249", "last_seen_epoch": "1634917232.565401", "evidence_frames": [ 68715, 68716, 68717, 68720, 68723 ] }, { "endpoint_id": "endpoint-7ced989029e2136fdf12a153", "ip": "64.136.52.45", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 58, "packets_received": 60, "bytes_sent": 4710, "bytes_received": 4573, "first_seen_epoch": "1634917209.674118", "last_seen_epoch": "1634918526.595541", "evidence_frames": [ 69887, 69889, 69890, 69893, 69896 ] }, { "endpoint_id": "endpoint-ba5ec91b1eabbc398bfb5601", "ip": "64.136.52.50", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 19, "packets_received": 20, "bytes_sent": 1554, "bytes_received": 1502, "first_seen_epoch": "1634917335.54701", "last_seen_epoch": "1634917339.842323", "evidence_frames": [ 71706, 71709, 71710, 71714, 71719 ] }, { "endpoint_id": "endpoint-280ec55cac061927fd7d5ebd", "ip": "64.29.151.102", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 21, "packets_received": 31, "bytes_sent": 1598, "bytes_received": 1794, "first_seen_epoch": "1634915301.575783", "last_seen_epoch": "1634915549.570828", "evidence_frames": [ 43097, 43100, 43101, 43104, 43107 ] }, { "endpoint_id": "endpoint-bb11c7ecfb8d4ab37afba544", "ip": "64.87.23.16", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 25, "bytes_sent": 6195, "bytes_received": 2213, "first_seen_epoch": "1634916905.56808", "last_seen_epoch": "1634916910.790844", "evidence_frames": [ 68099, 68100, 68101, 68104, 68107 ] }, { "endpoint_id": "endpoint-1f829d9d2dd446c6ed44c94c", "ip": "64.98.36.176", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 25, "bytes_sent": 5895, "bytes_received": 2065, "first_seen_epoch": "1634918051.169079", "last_seen_epoch": "1634918058.146863", "evidence_frames": [ 79144, 79145, 79146, 79149, 79152 ] }, { "endpoint_id": "endpoint-702a122889845d9524952bfd", "ip": "65.111.191.196", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 29, "packets_received": 28, "bytes_sent": 6831, "bytes_received": 2252, "first_seen_epoch": "1634915825.622021", "last_seen_epoch": "1634915833.435686", "evidence_frames": [ 56148, 56150, 56151, 56154, 56162 ] }, { "endpoint_id": "endpoint-1d91395263f83e3b619d25c2", "ip": "65.254.248.195", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 24, "bytes_sent": 5936, "bytes_received": 2011, "first_seen_epoch": "1634915629.327572", "last_seen_epoch": "1634915637.31354", "evidence_frames": [ 54182, 54183, 54184, 54187, 54190 ] }, { "endpoint_id": "endpoint-b38dfd807638ee060a303ab6", "ip": "66.218.88.149", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 6, "packets_received": 8, "bytes_sent": 332, "bytes_received": 456, "first_seen_epoch": "1634915490.921887", "last_seen_epoch": "1634915547.720119", "evidence_frames": [ 49370, 49371, 49372, 49379, 49380 ] }, { "endpoint_id": "endpoint-a26b658566a25411f0331fb1", "ip": "66.228.43.14", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 15, "packets_received": 18, "bytes_sent": 1182, "bytes_received": 1008, "first_seen_epoch": "1634915335.283715", "last_seen_epoch": "1634915549.574048", "evidence_frames": [ 44497, 44502, 44503, 44506, 44512 ] }, { "endpoint_id": "endpoint-ba29ecfca0d81da894283a2d", "ip": "66.96.147.96", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 24, "bytes_sent": 7321, "bytes_received": 1989, "first_seen_epoch": "1634916507.708976", "last_seen_epoch": "1634916514.289642", "evidence_frames": [ 64871, 64872, 64873, 64876, 64879 ] }, { "endpoint_id": "endpoint-bb23bddcd7d63a13300b3068", "ip": "66.96.162.198", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 26, "packets_received": 24, "bytes_sent": 5966, "bytes_received": 1996, "first_seen_epoch": "1634917463.04588", "last_seen_epoch": "1634917470.369769", "evidence_frames": [ 74556, 74557, 74558, 74561, 74564 ] }, { "endpoint_id": "endpoint-c4c48861fe7c307aeb5becb3", "ip": "68.186.192.69", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 221, "packets_received": 144, "bytes_sent": 308485, "bytes_received": 8967, "first_seen_epoch": "1634915600.552322", "last_seen_epoch": "1634915605.885421", "evidence_frames": [ 53109, 53110, 53111, 53112, 53113 ] }, { "endpoint_id": "endpoint-43872f324129bf0f6ca88a4d", "ip": "68.204.7.158", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 20, "bytes_sent": 896, "bytes_received": 1320, "first_seen_epoch": "1634916126.737113", "last_seen_epoch": "1634916167.420231", "evidence_frames": [ 59634, 59636, 59642, 59668, 59674 ] }, { "endpoint_id": "endpoint-ea0c2e8557ac1ce25cdb7790", "ip": "70.39.150.220", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 78, "packets_received": 75, "bytes_sent": 22983, "bytes_received": 6204, "first_seen_epoch": "1634915711.821687", "last_seen_epoch": "1634917642.844391", "evidence_frames": [ 55213, 55214, 55215, 55219, 55222 ] }, { "endpoint_id": "endpoint-9640953e6c1624f9c58ff431", "ip": "72.21.81.200", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 14, "packets_received": 14, "bytes_sent": 8030, "bytes_received": 1222, "first_seen_epoch": "1634913243.958401", "last_seen_epoch": "1634915039.834332", "evidence_frames": [ 4479, 4538, 4541, 4545, 4546 ] }, { "endpoint_id": "endpoint-b211b6545d736b0034a9e7bb", "ip": "72.247.207.22", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 7078, "packets_received": 4012, "bytes_sent": 10219197, "bytes_received": 217327, "first_seen_epoch": "1634915266.697922", "last_seen_epoch": "1634915376.521602", "evidence_frames": [ 31732, 31733, 31734, 31735, 31736 ] }, { "endpoint_id": "endpoint-1a27e5b8c9d668c072270f46", "ip": "72.252.201.69", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 18, "packets_received": 20, "bytes_sent": 4216, "bytes_received": 3568, "first_seen_epoch": "1634916384.945221", "last_seen_epoch": "1634916457.334981", "evidence_frames": [ 62259, 62260, 62261, 62262, 62263 ] }, { "endpoint_id": "endpoint-22bef219f45c76da6ec005cc", "ip": "73.230.205.91", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634914164.18562", "last_seen_epoch": "1634914289.507001", "evidence_frames": [ 20772, 20774, 20776, 20867, 22272 ] }, { "endpoint_id": "endpoint-d7ea8452df6cfedc445c1a63", "ip": "73.52.50.32", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 8, "packets_received": 40, "bytes_sent": 432, "bytes_received": 2640, "first_seen_epoch": "1634914911.376253", "last_seen_epoch": "1634916131.91676", "evidence_frames": [ 24781, 24798, 24802, 24835, 24854 ] }, { "endpoint_id": "endpoint-8b331cc00cdb01c29e6a8e56", "ip": "73.77.87.137", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634915928.261449", "last_seen_epoch": "1634916053.708567", "evidence_frames": [ 57583, 57608, 57626, 57662, 57690 ] }, { "endpoint_id": "endpoint-dc6f64779fe4a7ab96f7cc95", "ip": "74.202.142.20", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 25, "packets_received": 24, "bytes_sent": 5566, "bytes_received": 2117, "first_seen_epoch": "1634917079.780953", "last_seen_epoch": "1634917085.23885", "evidence_frames": [ 68960, 68961, 68962, 68965, 68968 ] }, { "endpoint_id": "endpoint-20be9e516138bad32087ef01", "ip": "8.248.163.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 5, "packets_received": 6, "bytes_sent": 607, "bytes_received": 616, "first_seen_epoch": "1634913814.79304", "last_seen_epoch": "1634913875.035231", "evidence_frames": [ 15951, 15952, 15953, 15954, 15955 ] }, { "endpoint_id": "endpoint-1fe34f1487cd98cd4b54d655", "ip": "8.249.245.254", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 5, "packets_received": 6, "bytes_sent": 608, "bytes_received": 623, "first_seen_epoch": "1634913273.883693", "last_seen_epoch": "1634913334.127267", "evidence_frames": [ 5390, 5391, 5392, 5393, 5394 ] }, { "endpoint_id": "endpoint-69dd31288ff88ea5a77e9aa8", "ip": "8.253.156.120", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 17, "packets_received": 17, "bytes_sent": 2926, "bytes_received": 2372, "first_seen_epoch": "1634913245.418277", "last_seen_epoch": "1634913367.525785", "evidence_frames": [ 4992, 5032, 5033, 5034, 5035 ] }, { "endpoint_id": "endpoint-2395c3abec9ddf231b58054c", "ip": "8.8.8.8", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 306, "packets_received": 308, "bytes_sent": 30600, "bytes_received": 25872, "first_seen_epoch": "1634913296.194174", "last_seen_epoch": "1634918503.387693", "evidence_frames": [ 5642, 5643, 11082, 11083, 11095 ] }, { "endpoint_id": "endpoint-b999cc142114fdc15abe56e1", "ip": "80.6.192.58", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 19, "packets_received": 20, "bytes_sent": 1106, "bytes_received": 1320, "first_seen_epoch": "1634914058.915383", "last_seen_epoch": "1634914103.257594", "evidence_frames": [ 19593, 19659, 19660, 19661, 19662 ] }, { "endpoint_id": "endpoint-af5a0db7e53e3d5be7ced439", "ip": "81.2.195.204", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 27, "packets_received": 24, "bytes_sent": 6672, "bytes_received": 1990, "first_seen_epoch": "1634918396.036869", "last_seen_epoch": "1634918403.389561", "evidence_frames": [ 82782, 82787, 82788, 82791, 82794 ] }, { "endpoint_id": "endpoint-c7bb75bfa8e57c5fd1caf46e", "ip": "81.241.252.59", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 20, "bytes_sent": 896, "bytes_received": 1320, "first_seen_epoch": "1634916077.719751", "last_seen_epoch": "1634916121.718642", "evidence_frames": [ 58921, 58923, 58948, 58960, 59229 ] }, { "endpoint_id": "endpoint-d0f1415caa7b67a5b5c87b3e", "ip": "81.31.145.216", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 16, "packets_received": 17, "bytes_sent": 1235, "bytes_received": 1106, "first_seen_epoch": "1634916236.76048", "last_seen_epoch": "1634916241.449248", "evidence_frames": [ 60738, 60739, 60740, 60744, 60747 ] }, { "endpoint_id": "endpoint-1a91fac77315a4b7b98e7885", "ip": "82.98.154.100", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 54, "packets_received": 52, "bytes_sent": 12754, "bytes_received": 4235, "first_seen_epoch": "1634916810.053679", "last_seen_epoch": "1634918432.471906", "evidence_frames": [ 67627, 67628, 67629, 67632, 67635 ] }, { "endpoint_id": "endpoint-72d3f4fb369f484c6c80dcaa", "ip": "83.223.99.191", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 70, "packets_received": 87, "bytes_sent": 22214, "bytes_received": 18706, "first_seen_epoch": "1634913674.048853", "last_seen_epoch": "1634914324.431242", "evidence_frames": [ 11446, 11447, 11448, 11449, 11450 ] }, { "endpoint_id": "endpoint-2a5b4f9e4bc8b44d24b1bdc8", "ip": "83.243.251.46", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634915610.910877", "last_seen_epoch": "1634915736.285185", "evidence_frames": [ 53930, 53944, 53952, 53968, 54094 ] }, { "endpoint_id": "endpoint-9c36597f599b2e2b7c59bb83", "ip": "85.13.132.2", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 27, "bytes_sent": 5562, "bytes_received": 2182, "first_seen_epoch": "1634916559.205412", "last_seen_epoch": "1634916572.268397", "evidence_frames": [ 65257, 65259, 65260, 65263, 65266 ] }, { "endpoint_id": "endpoint-ad748852fd19042eba994e8e", "ip": "86.8.177.143", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 40, "packets_received": 40, "bytes_sent": 2384, "bytes_received": 2640, "first_seen_epoch": "1634914752.827142", "last_seen_epoch": "1634915852.039506", "evidence_frames": [ 24310, 24311, 24320, 24321, 24322 ] }, { "endpoint_id": "endpoint-830286e00499535ff76a6700", "ip": "89.137.52.44", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 28, "packets_received": 20, "bytes_sent": 1736, "bytes_received": 1320, "first_seen_epoch": "1634914108.26422", "last_seen_epoch": "1634914152.158674", "evidence_frames": [ 20601, 20604, 20607, 20608, 20609 ] }, { "endpoint_id": "endpoint-8f41d62657d536652b4d9d7c", "ip": "94.143.155.83", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 14, "packets_received": 15, "bytes_sent": 1212, "bytes_received": 955, "first_seen_epoch": "1634917264.767525", "last_seen_epoch": "1634917268.48572", "evidence_frames": [ 70858, 70866, 70867, 70870, 70876 ] }, { "endpoint_id": "endpoint-35cd1a14a901606abafbe172", "ip": "94.200.181.154", "ip_version": 4, "is_private": false, "mac_addresses": [ "20:e5:2a:b6:93:f1" ], "packets_sent": 4, "packets_received": 20, "bytes_sent": 216, "bytes_received": 1320, "first_seen_epoch": "1634915857.05775", "last_seen_epoch": "1634915982.457296", "evidence_frames": [ 56560, 56562, 56567, 56596, 56649 ] } ], "identities": [ { "identity_id": "identity-5e4de9a1d77e753b27b1a305", "type": "account", "value": "agnes.warren", "ip_addresses": [ "10.10.22.156" ], "mac_addresses": [ "00:23:ae:fd:02:01" ], "evidence": [ { "frame_number": 4153, "timestamp_epoch": "1634913238.912446000", "display_filter": "frame.number == 4153", "tcp_stream": 184 }, { "frame_number": 4161, "timestamp_epoch": "1634913238.920172000", "display_filter": "frame.number == 4161", "tcp_stream": 185 }, { "frame_number": 4163, "timestamp_epoch": "1634913238.920739000", "display_filter": "frame.number == 4163", "tcp_stream": 185 }, { "frame_number": 4175, "timestamp_epoch": "1634913238.922317000", "display_filter": "frame.number == 4175", "tcp_stream": 186 }, { "frame_number": 4208, "timestamp_epoch": "1634913239.061306000", "display_filter": "frame.number == 4208", "tcp_stream": 189 }, { "frame_number": 4233, "timestamp_epoch": "1634913239.078398000", "display_filter": "frame.number == 4233", "tcp_stream": 187 }, { "frame_number": 4264, "timestamp_epoch": "1634913239.088685000", "display_filter": "frame.number == 4264", "tcp_stream": 187 }, { "frame_number": 4297, "timestamp_epoch": "1634913239.277211000", "display_filter": "frame.number == 4297", "tcp_stream": 191 }, { "frame_number": 4309, "timestamp_epoch": "1634913239.278574000", "display_filter": "frame.number == 4309", "tcp_stream": 192 }, { "frame_number": 56437, "timestamp_epoch": "1634915852.298353000", "display_filter": "frame.number == 56437", "tcp_stream": 1032 }, { "frame_number": 56472, "timestamp_epoch": "1634915852.437817000", "display_filter": "frame.number == 56472", "tcp_stream": 1036 }, { "frame_number": 56493, "timestamp_epoch": "1634915852.466347000", "display_filter": "frame.number == 56493", "tcp_stream": 1037 }, { "frame_number": 56531, "timestamp_epoch": "1634915852.585078000", "display_filter": "frame.number == 56531", "tcp_stream": 1041 }, { "frame_number": 65581, "timestamp_epoch": "1634916650.252976000", "display_filter": "frame.number == 65581", "tcp_stream": 1284 }, { "frame_number": 65599, "timestamp_epoch": "1634916650.261430000", "display_filter": "frame.number == 65599", "tcp_stream": 1286 } ], "bindings": [ { "frame_number": 4153, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4161, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4163, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4175, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4208, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4233, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 4264, "relationship": "directory-subject-returned-to-client", "owner_ip": null, "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "agnes.warren", "source_field": "samr.samr_UserInfo21.account_name" }, { "frame_number": 4297, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 4309, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 56437, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.158", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 56472, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.158", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 56493, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.157", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 56531, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.157", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 65581, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 65599, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.username" } ], "raw_values": [ "agnes.warren" ] }, { "identity_id": "identity-d3ebf82e9523b0e7487b2a3c", "type": "account", "value": "desktop-87wce26$", "ip_addresses": [ "10.10.22.158" ], "mac_addresses": [ "00:0e:35:30:b7:21" ], "evidence": [ { "frame_number": 1764, "timestamp_epoch": "1634913145.831706000", "display_filter": "frame.number == 1764", "tcp_stream": 83 }, { "frame_number": 1791, "timestamp_epoch": "1634913145.848618000", "display_filter": "frame.number == 1791", "tcp_stream": 87 }, { "frame_number": 1796, "timestamp_epoch": "1634913145.852967000", "display_filter": "frame.number == 1796", "tcp_stream": 85 }, { "frame_number": 1798, "timestamp_epoch": "1634913145.853587000", "display_filter": "frame.number == 1798", "tcp_stream": 85 }, { "frame_number": 1809, "timestamp_epoch": "1634913145.859061000", "display_filter": "frame.number == 1809", "tcp_stream": 88 }, { "frame_number": 1810, "timestamp_epoch": "1634913145.859091000", "display_filter": "frame.number == 1810", "tcp_stream": 89 }, { "frame_number": 1814, "timestamp_epoch": "1634913145.859840000", "display_filter": "frame.number == 1814", "tcp_stream": 88 }, { "frame_number": 1826, "timestamp_epoch": "1634913145.865255000", "display_filter": "frame.number == 1826", "tcp_stream": 90 }, { "frame_number": 1834, "timestamp_epoch": "1634913145.868768000", "display_filter": "frame.number == 1834", "tcp_stream": 91 }, { "frame_number": 1840, "timestamp_epoch": "1634913145.869642000", "display_filter": "frame.number == 1840", "tcp_stream": 91 }, { "frame_number": 1844, "timestamp_epoch": "1634913145.870168000", "display_filter": "frame.number == 1844", "tcp_stream": 92 }, { "frame_number": 1846, "timestamp_epoch": "1634913145.870622000", "display_filter": "frame.number == 1846", "tcp_stream": 92 }, { "frame_number": 1868, "timestamp_epoch": "1634913145.876752000", "display_filter": "frame.number == 1868", "tcp_stream": 94 }, { "frame_number": 1875, "timestamp_epoch": "1634913145.877659000", "display_filter": "frame.number == 1875", "tcp_stream": 95 }, { "frame_number": 1888, "timestamp_epoch": "1634913145.879102000", "display_filter": "frame.number == 1888", "tcp_stream": 96 }, { "frame_number": 1910, "timestamp_epoch": "1634913145.880667000", "display_filter": "frame.number == 1910", "tcp_stream": 97 }, { "frame_number": 1927, "timestamp_epoch": "1634913145.881980000", "display_filter": "frame.number == 1927", "tcp_stream": 98 }, { "frame_number": 1935, "timestamp_epoch": "1634913145.882910000", "display_filter": "frame.number == 1935", "tcp_stream": 99 }, { "frame_number": 2028, "timestamp_epoch": "1634913145.967311000", "display_filter": "frame.number == 2028", "tcp_stream": 102 }, { "frame_number": 2129, "timestamp_epoch": "1634913147.397698000", "display_filter": "frame.number == 2129", "tcp_stream": 108 } ], "bindings": [ { "frame_number": 1764, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1791, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1796, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1798, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1809, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1810, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1814, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1826, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1834, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1840, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1844, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1846, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1868, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1875, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1888, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1910, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1927, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1935, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2028, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2129, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" } ], "raw_values": [ "DESKTOP-87WCE26$", "desktop-87wce26$" ] }, { "identity_id": "identity-83f4d817dbabecf372b8243a", "type": "account", "value": "desktop-cfa3367$", "ip_addresses": [ "10.10.22.156" ], "mac_addresses": [ "00:23:ae:fd:02:01" ], "evidence": [ { "frame_number": 848, "timestamp_epoch": "1634913114.876916000", "display_filter": "frame.number == 848", "tcp_stream": 39 }, { "frame_number": 856, "timestamp_epoch": "1634913114.887524000", "display_filter": "frame.number == 856", "tcp_stream": 40 }, { "frame_number": 858, "timestamp_epoch": "1634913114.888225000", "display_filter": "frame.number == 858", "tcp_stream": 40 }, { "frame_number": 883, "timestamp_epoch": "1634913114.893968000", "display_filter": "frame.number == 883", "tcp_stream": 43 }, { "frame_number": 896, "timestamp_epoch": "1634913114.898720000", "display_filter": "frame.number == 896", "tcp_stream": 45 }, { "frame_number": 899, "timestamp_epoch": "1634913114.899293000", "display_filter": "frame.number == 899", "tcp_stream": 45 }, { "frame_number": 910, "timestamp_epoch": "1634913114.901972000", "display_filter": "frame.number == 910", "tcp_stream": 47 }, { "frame_number": 927, "timestamp_epoch": "1634913114.903831000", "display_filter": "frame.number == 927", "tcp_stream": 49 }, { "frame_number": 929, "timestamp_epoch": "1634913114.903912000", "display_filter": "frame.number == 929", "tcp_stream": 48 }, { "frame_number": 947, "timestamp_epoch": "1634913114.912442000", "display_filter": "frame.number == 947", "tcp_stream": 50 }, { "frame_number": 949, "timestamp_epoch": "1634913114.913042000", "display_filter": "frame.number == 949", "tcp_stream": 51 }, { "frame_number": 953, "timestamp_epoch": "1634913114.913384000", "display_filter": "frame.number == 953", "tcp_stream": 50 }, { "frame_number": 980, "timestamp_epoch": "1634913114.918262000", "display_filter": "frame.number == 980", "tcp_stream": 52 }, { "frame_number": 1109, "timestamp_epoch": "1634913115.051423000", "display_filter": "frame.number == 1109", "tcp_stream": 58 }, { "frame_number": 1206, "timestamp_epoch": "1634913116.464149000", "display_filter": "frame.number == 1206", "tcp_stream": 64 }, { "frame_number": 1239, "timestamp_epoch": "1634913116.747935000", "display_filter": "frame.number == 1239", "tcp_stream": 66 }, { "frame_number": 1251, "timestamp_epoch": "1634913116.749617000", "display_filter": "frame.number == 1251", "tcp_stream": 67 }, { "frame_number": 1564, "timestamp_epoch": "1634913124.236684000", "display_filter": "frame.number == 1564", "tcp_stream": 75 }, { "frame_number": 1572, "timestamp_epoch": "1634913124.237776000", "display_filter": "frame.number == 1572", "tcp_stream": 76 }, { "frame_number": 1574, "timestamp_epoch": "1634913124.238388000", "display_filter": "frame.number == 1574", "tcp_stream": 76 } ], "bindings": [ { "frame_number": 848, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 856, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 858, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 883, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 896, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 899, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 910, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 927, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 929, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 947, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 949, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 953, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 980, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1109, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1206, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1239, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1251, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1564, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1572, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 1574, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "", "source_field": "kerberos.CNameString" } ], "raw_values": [ "DESKTOP-CFA3367$", "desktop-cfa3367$" ] }, { "identity_id": "identity-0411f0ddeb8e63883f9ba06d", "type": "account", "value": "desktop-nz875r4$", "ip_addresses": [ "10.10.22.157" ], "mac_addresses": [ "00:18:71:3b:a8:69" ], "evidence": [ { "frame_number": 80, "timestamp_epoch": "1634913054.060291000", "display_filter": "frame.number == 80", "tcp_stream": 4 }, { "frame_number": 98, "timestamp_epoch": "1634913054.070767000", "display_filter": "frame.number == 98", "tcp_stream": 6 }, { "frame_number": 100, "timestamp_epoch": "1634913054.071481000", "display_filter": "frame.number == 100", "tcp_stream": 6 }, { "frame_number": 112, "timestamp_epoch": "1634913054.075197000", "display_filter": "frame.number == 112", "tcp_stream": 7 }, { "frame_number": 197, "timestamp_epoch": "1634913054.364095000", "display_filter": "frame.number == 197", "tcp_stream": 11 }, { "frame_number": 207, "timestamp_epoch": "1634913054.373964000", "display_filter": "frame.number == 207", "tcp_stream": 12 }, { "frame_number": 209, "timestamp_epoch": "1634913054.374917000", "display_filter": "frame.number == 209", "tcp_stream": 12 }, { "frame_number": 221, "timestamp_epoch": "1634913054.389337000", "display_filter": "frame.number == 221", "tcp_stream": 13 }, { "frame_number": 233, "timestamp_epoch": "1634913054.390879000", "display_filter": "frame.number == 233", "tcp_stream": 14 }, { "frame_number": 280, "timestamp_epoch": "1634913054.707829000", "display_filter": "frame.number == 280", "tcp_stream": 17 }, { "frame_number": 288, "timestamp_epoch": "1634913054.709117000", "display_filter": "frame.number == 288", "tcp_stream": 18 }, { "frame_number": 290, "timestamp_epoch": "1634913054.709731000", "display_filter": "frame.number == 290", "tcp_stream": 18 }, { "frame_number": 302, "timestamp_epoch": "1634913054.711963000", "display_filter": "frame.number == 302", "tcp_stream": 19 }, { "frame_number": 364, "timestamp_epoch": "1634913055.675094000", "display_filter": "frame.number == 364", "tcp_stream": 21 }, { "frame_number": 395, "timestamp_epoch": "1634913055.741180000", "display_filter": "frame.number == 395", "tcp_stream": 23 }, { "frame_number": 407, "timestamp_epoch": "1634913055.743870000", "display_filter": "frame.number == 407", "tcp_stream": 24 }, { "frame_number": 674, "timestamp_epoch": "1634913063.084470000", "display_filter": "frame.number == 674", "tcp_stream": 31 }, { "frame_number": 682, "timestamp_epoch": "1634913063.085568000", "display_filter": "frame.number == 682", "tcp_stream": 32 }, { "frame_number": 684, "timestamp_epoch": "1634913063.086125000", "display_filter": "frame.number == 684", "tcp_stream": 32 }, { "frame_number": 696, "timestamp_epoch": "1634913063.087678000", "display_filter": "frame.number == 696", "tcp_stream": 33 } ], "bindings": [ { "frame_number": 80, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 98, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 100, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 112, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 197, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 207, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 209, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 221, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 233, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 280, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 288, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 290, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 302, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 364, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 395, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 407, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 674, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 682, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 684, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 696, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" } ], "raw_values": [ "DESKTOP-NZ875R4$", "desktop-nz875r4$" ] }, { "identity_id": "identity-dacecb528cc0ac5cc25a716b", "type": "account", "value": "kevin.henderson", "ip_addresses": [ "10.10.22.158" ], "mac_addresses": [ "00:0e:35:30:b7:21" ], "evidence": [ { "frame_number": 2596, "timestamp_epoch": "1634913184.474804000", "display_filter": "frame.number == 2596", "tcp_stream": 122 }, { "frame_number": 2604, "timestamp_epoch": "1634913184.482254000", "display_filter": "frame.number == 2604", "tcp_stream": 123 }, { "frame_number": 2606, "timestamp_epoch": "1634913184.482917000", "display_filter": "frame.number == 2606", "tcp_stream": 123 }, { "frame_number": 2618, "timestamp_epoch": "1634913184.484847000", "display_filter": "frame.number == 2618", "tcp_stream": 124 }, { "frame_number": 2659, "timestamp_epoch": "1634913184.594595000", "display_filter": "frame.number == 2659", "tcp_stream": 128 }, { "frame_number": 2682, "timestamp_epoch": "1634913184.615582000", "display_filter": "frame.number == 2682", "tcp_stream": 126 }, { "frame_number": 2715, "timestamp_epoch": "1634913184.629836000", "display_filter": "frame.number == 2715", "tcp_stream": 126 }, { "frame_number": 2760, "timestamp_epoch": "1634913184.836361000", "display_filter": "frame.number == 2760", "tcp_stream": 131 }, { "frame_number": 2772, "timestamp_epoch": "1634913184.837806000", "display_filter": "frame.number == 2772", "tcp_stream": 132 }, { "frame_number": 23434, "timestamp_epoch": "1634914507.243041000", "display_filter": "frame.number == 23434", "tcp_stream": 551 } ], "bindings": [ { "frame_number": 2596, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2604, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2606, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2618, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2659, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2682, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 2715, "relationship": "directory-subject-returned-to-client", "owner_ip": null, "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "kevin.henderson", "source_field": "samr.samr_UserInfo21.account_name" }, { "frame_number": 2760, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 2772, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 23434, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "", "source_field": "kerberos.CNameString" } ], "raw_values": [ "kevin.henderson" ] }, { "identity_id": "identity-249e5ec8c500b999486e0e6a", "type": "account", "value": "marcus.cobb", "ip_addresses": [ "10.10.22.157" ], "mac_addresses": [ "00:18:71:3b:a8:69" ], "evidence": [ { "frame_number": 3366, "timestamp_epoch": "1634913211.323482000", "display_filter": "frame.number == 3366", "tcp_stream": 152 }, { "frame_number": 3374, "timestamp_epoch": "1634913211.333574000", "display_filter": "frame.number == 3374", "tcp_stream": 153 }, { "frame_number": 3376, "timestamp_epoch": "1634913211.334373000", "display_filter": "frame.number == 3376", "tcp_stream": 153 }, { "frame_number": 3388, "timestamp_epoch": "1634913211.336377000", "display_filter": "frame.number == 3388", "tcp_stream": 154 }, { "frame_number": 3431, "timestamp_epoch": "1634913211.570097000", "display_filter": "frame.number == 3431", "tcp_stream": 158 }, { "frame_number": 3454, "timestamp_epoch": "1634913211.587306000", "display_filter": "frame.number == 3454", "tcp_stream": 157 }, { "frame_number": 3483, "timestamp_epoch": "1634913211.599905000", "display_filter": "frame.number == 3483", "tcp_stream": 157 }, { "frame_number": 3515, "timestamp_epoch": "1634913211.657164000", "display_filter": "frame.number == 3515", "tcp_stream": 161 }, { "frame_number": 3525, "timestamp_epoch": "1634913211.658852000", "display_filter": "frame.number == 3525", "tcp_stream": 162 } ], "bindings": [ { "frame_number": 3366, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3374, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3376, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3388, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3431, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3454, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.username" }, { "frame_number": 3483, "relationship": "directory-subject-returned-to-client", "owner_ip": null, "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "marcus.cobb", "source_field": "samr.samr_UserInfo21.account_name" }, { "frame_number": 3515, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" }, { "frame_number": 3525, "relationship": "kerberos-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "", "source_field": "kerberos.CNameString" } ], "raw_values": [ "marcus.cobb" ] }, { "identity_id": "identity-83fdf0c6338307b2f2d78104", "type": "domain", "value": "ENEMYWATCH", "ip_addresses": [ "10.10.22.156", "10.10.22.157", "10.10.22.158" ], "mac_addresses": [ "00:0e:35:30:b7:21", "00:18:71:3b:a8:69", "00:23:ae:fd:02:01" ], "evidence": [ { "frame_number": 2682, "timestamp_epoch": "1634913184.615582000", "display_filter": "frame.number == 2682", "tcp_stream": 126 }, { "frame_number": 3454, "timestamp_epoch": "1634913211.587306000", "display_filter": "frame.number == 3454", "tcp_stream": 157 }, { "frame_number": 4233, "timestamp_epoch": "1634913239.078398000", "display_filter": "frame.number == 4233", "tcp_stream": 187 }, { "frame_number": 56437, "timestamp_epoch": "1634915852.298353000", "display_filter": "frame.number == 56437", "tcp_stream": 1032 }, { "frame_number": 56472, "timestamp_epoch": "1634915852.437817000", "display_filter": "frame.number == 56472", "tcp_stream": 1036 }, { "frame_number": 56493, "timestamp_epoch": "1634915852.466347000", "display_filter": "frame.number == 56493", "tcp_stream": 1037 }, { "frame_number": 56531, "timestamp_epoch": "1634915852.585078000", "display_filter": "frame.number == 56531", "tcp_stream": 1041 }, { "frame_number": 65581, "timestamp_epoch": "1634916650.252976000", "display_filter": "frame.number == 65581", "tcp_stream": 1284 }, { "frame_number": 65599, "timestamp_epoch": "1634916650.261430000", "display_filter": "frame.number == 65599", "tcp_stream": 1286 } ], "bindings": [ { "frame_number": 2682, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 3454, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 4233, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 56437, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.158", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 56472, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.158", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 56493, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.157", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 56531, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.157", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 65581, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.domain" }, { "frame_number": 65599, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.domain" } ], "raw_values": [ "ENEMYWATCH" ] }, { "identity_id": "identity-d2c45be8891f1e195bbfe21d", "type": "full-name", "value": "Agnes Warren", "ip_addresses": [ "10.10.22.156" ], "mac_addresses": [], "evidence": [ { "frame_number": 4264, "timestamp_epoch": "1634913239.088685000", "display_filter": "frame.number == 4264", "tcp_stream": 187 } ], "bindings": [ { "frame_number": 4264, "relationship": "directory-name-correlated-with-client-principal", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.156", "account": "agnes.warren", "source_field": "samr.samr_UserInfo21.full_name" } ], "raw_values": [ "Agnes Warren" ] }, { "identity_id": "identity-2edf965c4a800c1b042af247", "type": "full-name", "value": "Kevin Henderson", "ip_addresses": [ "10.10.22.158" ], "mac_addresses": [], "evidence": [ { "frame_number": 2715, "timestamp_epoch": "1634913184.629836000", "display_filter": "frame.number == 2715", "tcp_stream": 126 } ], "bindings": [ { "frame_number": 2715, "relationship": "directory-name-correlated-with-client-principal", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.158", "account": "kevin.henderson", "source_field": "samr.samr_UserInfo21.full_name" } ], "raw_values": [ "Kevin Henderson" ] }, { "identity_id": "identity-d01711a1c8eb585fff7545c6", "type": "full-name", "value": "Marcus Cobb", "ip_addresses": [ "10.10.22.157" ], "mac_addresses": [], "evidence": [ { "frame_number": 3483, "timestamp_epoch": "1634913211.599905000", "display_filter": "frame.number == 3483", "tcp_stream": 157 } ], "bindings": [ { "frame_number": 3483, "relationship": "directory-name-correlated-with-client-principal", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.22", "conversation_dst": "10.10.22.157", "account": "marcus.cobb", "source_field": "samr.samr_UserInfo21.full_name" } ], "raw_values": [ "Marcus Cobb" ] }, { "identity_id": "identity-8450b12deedacd9d1a3a4d36", "type": "hostname", "value": "DESKTOP-87WCE26", "ip_addresses": [ "10.10.22.158" ], "mac_addresses": [ "00:0e:35:30:b7:21", "00:0e:35:30:b7:21,00:0e:35:30:b7:21" ], "evidence": [ { "frame_number": 1667, "timestamp_epoch": "1634913143.408229000", "display_filter": "frame.number == 1667", "udp_stream": 0 }, { "frame_number": 1691, "timestamp_epoch": "1634913144.032979000", "display_filter": "frame.number == 1691", "udp_stream": 79 }, { "frame_number": 1726, "timestamp_epoch": "1634913145.533441000", "display_filter": "frame.number == 1726", "udp_stream": 79 }, { "frame_number": 2106, "timestamp_epoch": "1634913146.785136000", "display_filter": "frame.number == 2106", "udp_stream": 79 }, { "frame_number": 2107, "timestamp_epoch": "1634913147.049038000", "display_filter": "frame.number == 2107", "udp_stream": 79 }, { "frame_number": 2310, "timestamp_epoch": "1634913148.283485000", "display_filter": "frame.number == 2310", "udp_stream": 79 }, { "frame_number": 2315, "timestamp_epoch": "1634913148.596077000", "display_filter": "frame.number == 2315", "udp_stream": 102 }, { "frame_number": 2321, "timestamp_epoch": "1634913149.346507000", "display_filter": "frame.number == 2321", "udp_stream": 102 }, { "frame_number": 2398, "timestamp_epoch": "1634913149.814810000", "display_filter": "frame.number == 2398", "udp_stream": 79 }, { "frame_number": 2399, "timestamp_epoch": "1634913150.143269000", "display_filter": "frame.number == 2399", "udp_stream": 102 }, { "frame_number": 2402, "timestamp_epoch": "1634913150.939982000", "display_filter": "frame.number == 2402", "udp_stream": 102 }, { "frame_number": 2403, "timestamp_epoch": "1634913151.361974000", "display_filter": "frame.number == 2403", "udp_stream": 102 }, { "frame_number": 2404, "timestamp_epoch": "1634913152.158689000", "display_filter": "frame.number == 2404", "udp_stream": 102 }, { "frame_number": 2405, "timestamp_epoch": "1634913152.956431000", "display_filter": "frame.number == 2405", "udp_stream": 102 }, { "frame_number": 2406, "timestamp_epoch": "1634913153.768683000", "display_filter": "frame.number == 2406", "udp_stream": 102 }, { "frame_number": 2422, "timestamp_epoch": "1634913154.545976000", "display_filter": "frame.number == 2422", "udp_stream": 107 }, { "frame_number": 2682, "timestamp_epoch": "1634913184.615582000", "display_filter": "frame.number == 2682", "tcp_stream": 126 }, { "frame_number": 6745, "timestamp_epoch": "1634913391.991249000", "display_filter": "frame.number == 6745", "udp_stream": 107 }, { "frame_number": 16289, "timestamp_epoch": "1634913871.528482000", "display_filter": "frame.number == 16289", "udp_stream": 107 }, { "frame_number": 23833, "timestamp_epoch": "1634914589.589976000", "display_filter": "frame.number == 23833", "udp_stream": 107 } ], "bindings": [ { "frame_number": 1667, "relationship": "dhcp-client-assertion", "owner_ip": "0.0.0.0", "conversation_src": "0.0.0.0", "conversation_dst": "255.255.255.255", "account": "", "source_field": "dhcp.option.hostname" }, { "frame_number": 1691, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1726, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2106, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2107, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2310, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2315, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2321, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2398, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2399, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2402, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2403, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2404, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2405, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2406, "relationship": "netbios-registration", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2422, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 2682, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.hostname" }, { "frame_number": 6745, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 16289, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 23833, "relationship": "client-asserted", "owner_ip": "10.10.22.158", "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" } ], "raw_values": [ "DESKTOP-87WCE26", "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)" ] }, { "identity_id": "identity-ae1caf01f8d0ff5ac951deb5", "type": "hostname", "value": "DESKTOP-CFA3367", "ip_addresses": [ "10.10.22.156" ], "mac_addresses": [ "00:23:ae:fd:02:01", "00:23:ae:fd:02:01,00:23:ae:fd:02:01" ], "evidence": [ { "frame_number": 776, "timestamp_epoch": "1634913112.606848000", "display_filter": "frame.number == 776", "udp_stream": 0 }, { "frame_number": 797, "timestamp_epoch": "1634913113.386438000", "display_filter": "frame.number == 797", "udp_stream": 39 }, { "frame_number": 871, "timestamp_epoch": "1634913114.891550000", "display_filter": "frame.number == 871", "udp_stream": 39 }, { "frame_number": 1183, "timestamp_epoch": "1634913116.001875000", "display_filter": "frame.number == 1183", "udp_stream": 39 }, { "frame_number": 1197, "timestamp_epoch": "1634913116.438441000", "display_filter": "frame.number == 1197", "udp_stream": 39 }, { "frame_number": 1419, "timestamp_epoch": "1634913117.516621000", "display_filter": "frame.number == 1419", "udp_stream": 39 }, { "frame_number": 1426, "timestamp_epoch": "1634913117.969840000", "display_filter": "frame.number == 1426", "udp_stream": 62 }, { "frame_number": 1504, "timestamp_epoch": "1634913118.735645000", "display_filter": "frame.number == 1504", "udp_stream": 62 }, { "frame_number": 1505, "timestamp_epoch": "1634913119.033900000", "display_filter": "frame.number == 1505", "udp_stream": 39 }, { "frame_number": 1506, "timestamp_epoch": "1634913119.503076000", "display_filter": "frame.number == 1506", "udp_stream": 62 }, { "frame_number": 1510, "timestamp_epoch": "1634913120.298084000", "display_filter": "frame.number == 1510", "udp_stream": 62 }, { "frame_number": 1515, "timestamp_epoch": "1634913120.594845000", "display_filter": "frame.number == 1515", "udp_stream": 62 }, { "frame_number": 1516, "timestamp_epoch": "1634913121.344879000", "display_filter": "frame.number == 1516", "udp_stream": 62 }, { "frame_number": 1517, "timestamp_epoch": "1634913122.157959000", "display_filter": "frame.number == 1517", "udp_stream": 62 }, { "frame_number": 1518, "timestamp_epoch": "1634913122.939445000", "display_filter": "frame.number == 1518", "udp_stream": 62 }, { "frame_number": 1526, "timestamp_epoch": "1634913123.722599000", "display_filter": "frame.number == 1526", "udp_stream": 67 }, { "frame_number": 4233, "timestamp_epoch": "1634913239.078398000", "display_filter": "frame.number == 4233", "tcp_stream": 187 }, { "frame_number": 6607, "timestamp_epoch": "1634913361.217367000", "display_filter": "frame.number == 6607", "udp_stream": 67 }, { "frame_number": 16214, "timestamp_epoch": "1634913841.007291000", "display_filter": "frame.number == 16214", "udp_stream": 67 }, { "frame_number": 23753, "timestamp_epoch": "1634914561.173186000", "display_filter": "frame.number == 23753", "udp_stream": 67 } ], "bindings": [ { "frame_number": 776, "relationship": "dhcp-client-assertion", "owner_ip": "0.0.0.0", "conversation_src": "0.0.0.0", "conversation_dst": "255.255.255.255", "account": "", "source_field": "dhcp.option.hostname" }, { "frame_number": 797, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 871, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1183, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1197, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1419, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1426, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1504, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1505, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1506, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1510, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1515, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1516, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1517, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1518, "relationship": "netbios-registration", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1526, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 4233, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.hostname" }, { "frame_number": 6607, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 16214, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 23753, "relationship": "client-asserted", "owner_ip": "10.10.22.156", "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" } ], "raw_values": [ "DESKTOP-CFA3367", "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)" ] }, { "identity_id": "identity-e652c96d5285d4224b8c4b0d", "type": "hostname", "value": "DESKTOP-NZ875R4", "ip_addresses": [ "10.10.22.157" ], "mac_addresses": [ "00:18:71:3b:a8:69", "00:18:71:3b:a8:69,00:18:71:3b:a8:69" ], "evidence": [ { "frame_number": 1, "timestamp_epoch": "1634913051.987411000", "display_filter": "frame.number == 1", "udp_stream": 0 }, { "frame_number": 42, "timestamp_epoch": "1634913053.870688000", "display_filter": "frame.number == 42", "udp_stream": 12 }, { "frame_number": 333, "timestamp_epoch": "1634913054.958211000", "display_filter": "frame.number == 333", "udp_stream": 12 }, { "frame_number": 343, "timestamp_epoch": "1634913055.363162000", "display_filter": "frame.number == 343", "udp_stream": 12 }, { "frame_number": 545, "timestamp_epoch": "1634913056.488079000", "display_filter": "frame.number == 545", "udp_stream": 12 }, { "frame_number": 547, "timestamp_epoch": "1634913056.878752000", "display_filter": "frame.number == 547", "udp_stream": 12 }, { "frame_number": 623, "timestamp_epoch": "1634913057.988133000", "display_filter": "frame.number == 623", "udp_stream": 12 }, { "frame_number": 624, "timestamp_epoch": "1634913058.411946000", "display_filter": "frame.number == 624", "udp_stream": 26 }, { "frame_number": 627, "timestamp_epoch": "1634913059.175815000", "display_filter": "frame.number == 627", "udp_stream": 26 }, { "frame_number": 628, "timestamp_epoch": "1634913059.566278000", "display_filter": "frame.number == 628", "udp_stream": 26 }, { "frame_number": 629, "timestamp_epoch": "1634913059.956931000", "display_filter": "frame.number == 629", "udp_stream": 26 }, { "frame_number": 631, "timestamp_epoch": "1634913060.378814000", "display_filter": "frame.number == 631", "udp_stream": 26 }, { "frame_number": 632, "timestamp_epoch": "1634913060.770870000", "display_filter": "frame.number == 632", "udp_stream": 26 }, { "frame_number": 634, "timestamp_epoch": "1634913061.177107000", "display_filter": "frame.number == 634", "udp_stream": 26 }, { "frame_number": 635, "timestamp_epoch": "1634913061.973600000", "display_filter": "frame.number == 635", "udp_stream": 26 }, { "frame_number": 638, "timestamp_epoch": "1634913062.813903000", "display_filter": "frame.number == 638", "udp_stream": 28 }, { "frame_number": 3454, "timestamp_epoch": "1634913211.587306000", "display_filter": "frame.number == 3454", "tcp_stream": 157 }, { "frame_number": 5741, "timestamp_epoch": "1634913300.309105000", "display_filter": "frame.number == 5741", "udp_stream": 28 }, { "frame_number": 14544, "timestamp_epoch": "1634913778.963684000", "display_filter": "frame.number == 14544", "udp_stream": 28 }, { "frame_number": 23372, "timestamp_epoch": "1634914496.868629000", "display_filter": "frame.number == 23372", "udp_stream": 28 } ], "bindings": [ { "frame_number": 1, "relationship": "dhcp-client-assertion", "owner_ip": "0.0.0.0", "conversation_src": "0.0.0.0", "conversation_dst": "255.255.255.255", "account": "", "source_field": "dhcp.option.hostname" }, { "frame_number": 42, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 333, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 343, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 545, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 547, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 623, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 624, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 627, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 628, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 629, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 631, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 632, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 634, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 635, "relationship": "netbios-registration", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 638, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 3454, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.22", "account": "", "source_field": "ntlmssp.auth.hostname" }, { "frame_number": 5741, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 14544, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" }, { "frame_number": 23372, "relationship": "client-asserted", "owner_ip": "10.10.22.157", "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "browser.server" } ], "raw_values": [ "DESKTOP-NZ875R4", "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)" ] }, { "identity_id": "identity-6149a59e1909d2ffe4528ed7", "type": "netbios-group", "value": "ENEMYWATCH", "ip_addresses": [], "mac_addresses": [], "evidence": [ { "frame_number": 43, "timestamp_epoch": "1634913053.870984000", "display_filter": "frame.number == 43", "udp_stream": 12 }, { "frame_number": 342, "timestamp_epoch": "1634913055.363048000", "display_filter": "frame.number == 342", "udp_stream": 12 }, { "frame_number": 546, "timestamp_epoch": "1634913056.878694000", "display_filter": "frame.number == 546", "udp_stream": 12 }, { "frame_number": 625, "timestamp_epoch": "1634913058.412198000", "display_filter": "frame.number == 625", "udp_stream": 26 }, { "frame_number": 626, "timestamp_epoch": "1634913059.175670000", "display_filter": "frame.number == 626", "udp_stream": 26 }, { "frame_number": 630, "timestamp_epoch": "1634913059.957115000", "display_filter": "frame.number == 630", "udp_stream": 26 }, { "frame_number": 633, "timestamp_epoch": "1634913060.771156000", "display_filter": "frame.number == 633", "udp_stream": 26 }, { "frame_number": 798, "timestamp_epoch": "1634913113.386499000", "display_filter": "frame.number == 798", "udp_stream": 39 }, { "frame_number": 870, "timestamp_epoch": "1634913114.891502000", "display_filter": "frame.number == 870", "udp_stream": 39 }, { "frame_number": 1198, "timestamp_epoch": "1634913116.438503000", "display_filter": "frame.number == 1198", "udp_stream": 39 }, { "frame_number": 1427, "timestamp_epoch": "1634913117.969941000", "display_filter": "frame.number == 1427", "udp_stream": 62 }, { "frame_number": 1503, "timestamp_epoch": "1634913118.735434000", "display_filter": "frame.number == 1503", "udp_stream": 62 }, { "frame_number": 1507, "timestamp_epoch": "1634913119.503246000", "display_filter": "frame.number == 1507", "udp_stream": 62 }, { "frame_number": 1511, "timestamp_epoch": "1634913120.298200000", "display_filter": "frame.number == 1511", "udp_stream": 62 }, { "frame_number": 1692, "timestamp_epoch": "1634913144.033073000", "display_filter": "frame.number == 1692", "udp_stream": 79 }, { "frame_number": 1725, "timestamp_epoch": "1634913145.533372000", "display_filter": "frame.number == 1725", "udp_stream": 79 }, { "frame_number": 2108, "timestamp_epoch": "1634913147.049101000", "display_filter": "frame.number == 2108", "udp_stream": 79 }, { "frame_number": 2316, "timestamp_epoch": "1634913148.596271000", "display_filter": "frame.number == 2316", "udp_stream": 102 }, { "frame_number": 2322, "timestamp_epoch": "1634913149.346678000", "display_filter": "frame.number == 2322", "udp_stream": 102 }, { "frame_number": 2400, "timestamp_epoch": "1634913150.143449000", "display_filter": "frame.number == 2400", "udp_stream": 102 } ], "bindings": [ { "frame_number": 43, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 342, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 546, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 625, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 626, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 630, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 633, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.157", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 798, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 870, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1198, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1427, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1503, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1507, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1511, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.156", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 1692, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 1725, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2108, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.1", "account": "", "source_field": "nbns.name" }, { "frame_number": 2316, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2322, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" }, { "frame_number": 2400, "relationship": "group-membership-not-hostname", "owner_ip": null, "conversation_src": "10.10.22.158", "conversation_dst": "10.10.22.255", "account": "", "source_field": "nbns.name" } ], "raw_values": [ "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)" ] } ], "flows": [ { "flow_id": "flow-9bf58b4037f759b4d2985616", "transport": "udp", "stream": 0, "initiator_ip": "0.0.0.0", "initiator_port": 68, "responder_ip": "255.255.255.255", "responder_port": 67, "first_frame": 1, "last_frame": 1667, "first_seen_epoch": "1634913051.987411", "last_seen_epoch": "1634913143.408229", "packets": 3, "bytes": 1137, "initiator_bytes": 1137, "responder_bytes": 0 }, { "flow_id": "flow-c1e4c6df4a3fc824fcb8833b", "transport": "udp", "stream": 1, "initiator_ip": "10.10.22.22", "initiator_port": 67, "responder_ip": "255.255.255.255", "responder_port": 68, "first_frame": 2, "last_frame": 1668, "first_seen_epoch": "1634913051.988002", "last_seen_epoch": "1634913143.408993", "packets": 3, "bytes": 1062, "initiator_bytes": 1062, "responder_bytes": 0 }, { "flow_id": "flow-6e7f711a12665a4ecc0ced04", "transport": "udp", "stream": 2, "initiator_ip": "10.10.22.157", "initiator_port": 5353, "responder_ip": "224.0.0.251", "responder_port": 5353, "first_frame": 8, "last_frame": 83308, "first_seen_epoch": "1634913052.109869", "last_seen_epoch": "1634918451.278039", "packets": 14, "bytes": 1204, "initiator_bytes": 1204, "responder_bytes": 0 }, { "flow_id": "flow-7d5a4bbc120c14280aa733c2", "transport": "udp", "stream": 3, "initiator_ip": "10.10.22.157", "initiator_port": 57130, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 10, "last_frame": 10, "first_seen_epoch": "1634913052.113364", "last_seen_epoch": "1634913052.113364", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-411ef07ae37e582d0f04b52f", "transport": "udp", "stream": 4, "initiator_ip": "10.10.22.157", "initiator_port": 55837, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 15, "last_frame": 16, "first_seen_epoch": "1634913052.528738", "last_seen_epoch": "1634913052.528989", "packets": 2, "bytes": 254, "initiator_bytes": 95, "responder_bytes": 159 }, { "flow_id": "flow-f66aad3078b9d6d2c7762bca", "transport": "udp", "stream": 5, "initiator_ip": "10.10.22.157", "initiator_port": 58843, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17, "last_frame": 18, "first_seen_epoch": "1634913052.531003", "last_seen_epoch": "1634913052.53119", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-9eb26b01550b0fc30a956ead", "transport": "udp", "stream": 6, "initiator_ip": "10.10.22.157", "initiator_port": 58845, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 19, "last_frame": 20, "first_seen_epoch": "1634913052.536981", "last_seen_epoch": "1634913052.537235", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-9598f1732becaae55f38a78a", "transport": "udp", "stream": 7, "initiator_ip": "10.10.22.157", "initiator_port": 55306, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22, "last_frame": 23, "first_seen_epoch": "1634913052.666195", "last_seen_epoch": "1634913052.666434", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-9145af5a9207c38b4607c54d", "transport": "tcp", "stream": 0, "initiator_ip": "10.10.22.157", "initiator_port": 49668, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 24, "last_frame": 314, "first_seen_epoch": "1634913052.670497", "last_seen_epoch": "1634913054.717365", "packets": 15, "bytes": 6195, "initiator_bytes": 2822, "responder_bytes": 3373 }, { "flow_id": "flow-7d82c1cc7838baf54e08e846", "transport": "udp", "stream": 8, "initiator_ip": "10.10.22.157", "initiator_port": 58047, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 31, "last_frame": 32, "first_seen_epoch": "1634913052.672583", "last_seen_epoch": "1634913052.672733", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-3a7cb8b250d99ea1c628ca15", "transport": "udp", "stream": 9, "initiator_ip": "10.10.22.157", "initiator_port": 55369, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 36, "last_frame": 37, "first_seen_epoch": "1634913053.483974", "last_seen_epoch": "1634913053.539379", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-1e6b8fe972eeba1f886e74c9", "transport": "udp", "stream": 10, "initiator_ip": "10.10.22.157", "initiator_port": 59204, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 38, "last_frame": 39, "first_seen_epoch": "1634913053.598967", "last_seen_epoch": "1634913053.599183", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-9c75b075de0fb8e55e31fcc2", "transport": "udp", "stream": 11, "initiator_ip": "10.10.22.157", "initiator_port": 54982, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 40, "last_frame": 41, "first_seen_epoch": "1634913053.600065", "last_seen_epoch": "1634913053.600187", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-78680f16856430e29d88ae60", "transport": "udp", "stream": 12, "initiator_ip": "10.10.22.157", "initiator_port": 137, "responder_ip": "10.10.22.1", "responder_port": 137, "first_frame": 42, "last_frame": 84399, "first_seen_epoch": "1634913053.870688", "last_seen_epoch": "1634918574.312579", "packets": 156, "bytes": 17160, "initiator_bytes": 17160, "responder_bytes": 0 }, { "flow_id": "flow-3545d183a24b21767ba43d47", "transport": "udp", "stream": 13, "initiator_ip": "10.10.22.157", "initiator_port": 61219, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44, "last_frame": 45, "first_seen_epoch": "1634913053.906979", "last_seen_epoch": "1634913053.907345", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-8d3aea66c5e0a0c1f9a2e94e", "transport": "udp", "stream": 14, "initiator_ip": "10.10.22.157", "initiator_port": 61222, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46, "last_frame": 48, "first_seen_epoch": "1634913053.944165", "last_seen_epoch": "1634913053.944475", "packets": 2, "bytes": 540, "initiator_bytes": 308, "responder_bytes": 232 }, { "flow_id": "flow-468347ed8504574742940c95", "transport": "udp", "stream": 15, "initiator_ip": "10.10.22.157", "initiator_port": 61221, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 47, "last_frame": 49, "first_seen_epoch": "1634913053.944203", "last_seen_epoch": "1634913053.944538", "packets": 2, "bytes": 564, "initiator_bytes": 311, "responder_bytes": 253 }, { "flow_id": "flow-d9e4aceef8cd4639fbb007a6", "transport": "udp", "stream": 16, "initiator_ip": "10.10.22.157", "initiator_port": 61223, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 50, "last_frame": 51, "first_seen_epoch": "1634913053.966207", "last_seen_epoch": "1634913053.966478", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-79dca936b2823abcb83c93d6", "transport": "tcp", "stream": 1, "initiator_ip": "10.10.22.157", "initiator_port": 49671, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 52, "last_frame": 768, "first_seen_epoch": "1634913054.050003", "last_seen_epoch": "1634913081.195481", "packets": 20, "bytes": 3012, "initiator_bytes": 1450, "responder_bytes": 1562 }, { "flow_id": "flow-db236d715c8fc2effc4c58c7", "transport": "tcp", "stream": 2, "initiator_ip": "10.10.22.157", "initiator_port": 49672, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 59, "last_frame": 769, "first_seen_epoch": "1634913054.052777", "last_seen_epoch": "1634913081.195593", "packets": 21, "bytes": 5546, "initiator_bytes": 2610, "responder_bytes": 2936 }, { "flow_id": "flow-38b74a31be89a135d81e8a11", "transport": "tcp", "stream": 3, "initiator_ip": "10.10.22.157", "initiator_port": 49673, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 74, "last_frame": 775, "first_seen_epoch": "1634913054.057615", "last_seen_epoch": "1634913111.209112", "packets": 49, "bytes": 15319, "initiator_bytes": 10372, "responder_bytes": 4947 }, { "flow_id": "flow-ec8eb5f22cefe2985bed9fcc", "transport": "tcp", "stream": 4, "initiator_ip": "10.10.22.157", "initiator_port": 49674, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 77, "last_frame": 84, "first_seen_epoch": "1634913054.059956", "last_seen_epoch": "1634913054.061178", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-6f60e199cb7919549158e6de", "transport": "tcp", "stream": 5, "initiator_ip": "10.10.22.157", "initiator_port": 49675, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 88, "last_frame": 276, "first_seen_epoch": "1634913054.066421", "last_seen_epoch": "1634913054.58567", "packets": 33, "bytes": 10751, "initiator_bytes": 4779, "responder_bytes": 5972 }, { "flow_id": "flow-4f7ac623c916a1b03f177689", "transport": "tcp", "stream": 6, "initiator_ip": "10.10.22.157", "initiator_port": 49676, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 95, "last_frame": 104, "first_seen_epoch": "1634913054.070582", "last_seen_epoch": "1634913054.071807", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-18aeeffa40fa708632927008", "transport": "tcp", "stream": 7, "initiator_ip": "10.10.22.157", "initiator_port": 49677, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 105, "last_frame": 116, "first_seen_epoch": "1634913054.07416", "last_seen_epoch": "1634913054.076866", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-ef37fcff99ebeaa86bf2f445", "transport": "udp", "stream": 17, "initiator_ip": "10.10.22.157", "initiator_port": 50376, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 153, "last_frame": 154, "first_seen_epoch": "1634913054.102537", "last_seen_epoch": "1634913054.102768", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-41432da55e4420df552617b3", "transport": "udp", "stream": 18, "initiator_ip": "10.10.22.157", "initiator_port": 50377, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 155, "last_frame": 156, "first_seen_epoch": "1634913054.115206", "last_seen_epoch": "1634913054.115461", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-7b4275dd87c37b9a23441842", "transport": "tcp", "stream": 8, "initiator_ip": "10.10.22.157", "initiator_port": 49678, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 163, "last_frame": 169, "first_seen_epoch": "1634913054.222575", "last_seen_epoch": "1634913054.223364", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-0b736d7ceb28bf4debffa699", "transport": "udp", "stream": 19, "initiator_ip": "10.10.22.157", "initiator_port": 51085, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 171, "last_frame": 172, "first_seen_epoch": "1634913054.223915", "last_seen_epoch": "1634913054.224061", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-cdad88fd9d867a05a218ddd8", "transport": "udp", "stream": 20, "initiator_ip": "10.10.22.157", "initiator_port": 51086, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 173, "last_frame": 174, "first_seen_epoch": "1634913054.241528", "last_seen_epoch": "1634913054.241808", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-c48d8e94f1ccce3897abf5fe", "transport": "tcp", "stream": 9, "initiator_ip": "10.10.22.157", "initiator_port": 49679, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 177, "last_frame": 4129, "first_seen_epoch": "1634913054.301913", "last_seen_epoch": "1634913238.549626", "packets": 185, "bytes": 47425, "initiator_bytes": 23848, "responder_bytes": 23577 }, { "flow_id": "flow-837c2df495c1ba5a97d32b25", "transport": "tcp", "stream": 10, "initiator_ip": "10.10.22.157", "initiator_port": 49680, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 186, "last_frame": 192, "first_seen_epoch": "1634913054.349198", "last_seen_epoch": "1634913054.351345", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-fd9dfa3dcaf5fec0fbf1f9c4", "transport": "tcp", "stream": 11, "initiator_ip": "10.10.22.157", "initiator_port": 49681, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 194, "last_frame": 201, "first_seen_epoch": "1634913054.363477", "last_seen_epoch": "1634913054.36544", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-727fe16ed0adb23824afcf1f", "transport": "tcp", "stream": 12, "initiator_ip": "10.10.22.157", "initiator_port": 49682, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 204, "last_frame": 213, "first_seen_epoch": "1634913054.373541", "last_seen_epoch": "1634913054.375409", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-9ca347b3f714e79792f5f36e", "transport": "tcp", "stream": 13, "initiator_ip": "10.10.22.157", "initiator_port": 49683, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 214, "last_frame": 225, "first_seen_epoch": "1634913054.38761", "last_seen_epoch": "1634913054.389781", "packets": 12, "bytes": 4103, "initiator_bytes": 2046, "responder_bytes": 2057 }, { "flow_id": "flow-81ce7b48f575ec00ac8a773e", "transport": "tcp", "stream": 14, "initiator_ip": "10.10.22.157", "initiator_port": 49684, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 226, "last_frame": 237, "first_seen_epoch": "1634913054.389919", "last_seen_epoch": "1634913054.391326", "packets": 12, "bytes": 3711, "initiator_bytes": 1841, "responder_bytes": 1870 }, { "flow_id": "flow-fd5dc2da34f2c1e41e1f5f33", "transport": "udp", "stream": 21, "initiator_ip": "10.10.22.157", "initiator_port": 62135, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 242, "last_frame": 243, "first_seen_epoch": "1634913054.392061", "last_seen_epoch": "1634913054.392241", "packets": 2, "bytes": 296, "initiator_bytes": 116, "responder_bytes": 180 }, { "flow_id": "flow-e626f9ec4bc1cde0a2326db0", "transport": "udp", "stream": 22, "initiator_ip": "10.10.22.157", "initiator_port": 62136, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 255, "last_frame": 256, "first_seen_epoch": "1634913054.479133", "last_seen_epoch": "1634913054.479489", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-cd3e1a05518fe5d93b6a4739", "transport": "tcp", "stream": 15, "initiator_ip": "10.10.22.157", "initiator_port": 49685, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 257, "last_frame": 263, "first_seen_epoch": "1634913054.581946", "last_seen_epoch": "1634913054.582831", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-cb833ca633ec26136f558972", "transport": "tcp", "stream": 16, "initiator_ip": "10.10.22.157", "initiator_port": 49686, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 265, "last_frame": 270, "first_seen_epoch": "1634913054.583551", "last_seen_epoch": "1634913054.584348", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-799fd6b18630aa86a0b3d2b7", "transport": "tcp", "stream": 17, "initiator_ip": "10.10.22.157", "initiator_port": 49687, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 277, "last_frame": 285, "first_seen_epoch": "1634913054.70746", "last_seen_epoch": "1634913054.708857", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-c04558a649862fb7e78c3de6", "transport": "tcp", "stream": 18, "initiator_ip": "10.10.22.157", "initiator_port": 49688, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 284, "last_frame": 294, "first_seen_epoch": "1634913054.708788", "last_seen_epoch": "1634913054.710317", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-98a915a1f1bd73592250568d", "transport": "tcp", "stream": 19, "initiator_ip": "10.10.22.157", "initiator_port": 49689, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 295, "last_frame": 306, "first_seen_epoch": "1634913054.710693", "last_seen_epoch": "1634913054.712736", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-8ee67b1c98223ce19729eb3a", "transport": "udp", "stream": 23, "initiator_ip": "10.10.22.157", "initiator_port": 49334, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 340, "last_frame": 341, "first_seen_epoch": "1634913055.074816", "last_seen_epoch": "1634913055.075067", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-e145e4a8bc66ff1b23db7ce4", "transport": "tcp", "stream": 20, "initiator_ip": "10.10.22.157", "initiator_port": 49691, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 344, "last_frame": 542, "first_seen_epoch": "1634913055.631377", "last_seen_epoch": "1634913055.820378", "packets": 23, "bytes": 10553, "initiator_bytes": 3804, "responder_bytes": 6749 }, { "flow_id": "flow-de5c7bddbef0ebe8a5fea18a", "transport": "tcp", "stream": 21, "initiator_ip": "10.10.22.157", "initiator_port": 49692, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 357, "last_frame": 368, "first_seen_epoch": "1634913055.673846", "last_seen_epoch": "1634913055.67577", "packets": 12, "bytes": 4049, "initiator_bytes": 2028, "responder_bytes": 2021 }, { "flow_id": "flow-94f5212f9502bdd7e1445ac8", "transport": "tcp", "stream": 22, "initiator_ip": "10.10.22.157", "initiator_port": 49693, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 371, "last_frame": 538, "first_seen_epoch": "1634913055.682182", "last_seen_epoch": "1634913055.809113", "packets": 17, "bytes": 3988, "initiator_bytes": 2878, "responder_bytes": 1110 }, { "flow_id": "flow-c33072225245b097c4f5cb95", "transport": "tcp", "stream": 23, "initiator_ip": "10.10.22.157", "initiator_port": 49694, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 388, "last_frame": 399, "first_seen_epoch": "1634913055.739744", "last_seen_epoch": "1634913055.74162", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-bc63904edef13feb04eb8122", "transport": "tcp", "stream": 24, "initiator_ip": "10.10.22.157", "initiator_port": 49695, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 400, "last_frame": 411, "first_seen_epoch": "1634913055.741813", "last_seen_epoch": "1634913055.746407", "packets": 12, "bytes": 3711, "initiator_bytes": 1841, "responder_bytes": 1870 }, { "flow_id": "flow-a5cb9fd85c1bde1b15fc400a", "transport": "udp", "stream": 24, "initiator_ip": "10.10.22.157", "initiator_port": 58505, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 548, "last_frame": 549, "first_seen_epoch": "1634913057.533432", "last_seen_epoch": "1634913057.533706", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-984a8a488db05bf56e49565a", "transport": "udp", "stream": 25, "initiator_ip": "10.10.22.157", "initiator_port": 58506, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 550, "last_frame": 551, "first_seen_epoch": "1634913057.534282", "last_seen_epoch": "1634913057.534522", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-08ac08a01756b8f0dcb84aaa", "transport": "tcp", "stream": 25, "initiator_ip": "10.10.22.157", "initiator_port": 49697, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 552, "last_frame": 621, "first_seen_epoch": "1634913057.659088", "last_seen_epoch": "1634913057.684874", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-e305d56c63815c7d3124de45", "transport": "tcp", "stream": 26, "initiator_ip": "10.10.22.157", "initiator_port": 49698, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 559, "last_frame": 622, "first_seen_epoch": "1634913057.664014", "last_seen_epoch": "1634913057.685006", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-dc470a6579344775fc684b8c", "transport": "tcp", "stream": 27, "initiator_ip": "10.10.22.157", "initiator_port": 49699, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 582, "last_frame": 620, "first_seen_epoch": "1634913057.673816", "last_seen_epoch": "1634913057.682195", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-07df3a247884752f6b87846f", "transport": "tcp", "stream": 28, "initiator_ip": "10.10.22.157", "initiator_port": 49700, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 599, "last_frame": 616, "first_seen_epoch": "1634913057.678889", "last_seen_epoch": "1634913057.681875", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-fbf323650faa9b60603d184e", "transport": "udp", "stream": 26, "initiator_ip": "10.10.22.157", "initiator_port": 137, "responder_ip": "10.10.22.255", "responder_port": 137, "first_frame": 624, "last_frame": 635, "first_seen_epoch": "1634913058.411946", "last_seen_epoch": "1634913061.9736", "packets": 12, "bytes": 1320, "initiator_bytes": 1320, "responder_bytes": 0 }, { "flow_id": "flow-afeeedd5e14b417b9e0e75eb", "transport": "udp", "stream": 27, "initiator_ip": "10.10.22.157", "initiator_port": 58508, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 636, "last_frame": 637, "first_seen_epoch": "1634913062.801032", "last_seen_epoch": "1634913062.801385", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-eb74a98359518b381850c7b1", "transport": "udp", "stream": 28, "initiator_ip": "10.10.22.157", "initiator_port": 138, "responder_ip": "10.10.22.255", "responder_port": 138, "first_frame": 638, "last_frame": 80826, "first_seen_epoch": "1634913062.813903", "last_seen_epoch": "1634918094.134617", "packets": 9, "bytes": 2187, "initiator_bytes": 2187, "responder_bytes": 0 }, { "flow_id": "flow-a1a9151fcb63181cec71d9e3", "transport": "udp", "stream": 29, "initiator_ip": "10.10.22.157", "initiator_port": 58510, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 639, "last_frame": 640, "first_seen_epoch": "1634913062.940685", "last_seen_epoch": "1634913062.941014", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-31dd5f76df410cbb57d27849", "transport": "tcp", "stream": 29, "initiator_ip": "10.10.22.157", "initiator_port": 49701, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 641, "last_frame": 712, "first_seen_epoch": "1634913063.054215", "last_seen_epoch": "1634913063.095684", "packets": 27, "bytes": 8461, "initiator_bytes": 3983, "responder_bytes": 4478 }, { "flow_id": "flow-fa6858e985b65ac02888feff", "transport": "tcp", "stream": 30, "initiator_ip": "10.10.22.157", "initiator_port": 49702, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 662, "last_frame": 708, "first_seen_epoch": "1634913063.075794", "last_seen_epoch": "1634913063.090784", "packets": 15, "bytes": 4503, "initiator_bytes": 3637, "responder_bytes": 866 }, { "flow_id": "flow-d9d21450f7ddc632f76141e7", "transport": "tcp", "stream": 31, "initiator_ip": "10.10.22.157", "initiator_port": 49703, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 671, "last_frame": 679, "first_seen_epoch": "1634913063.084094", "last_seen_epoch": "1634913063.085264", "packets": 8, "bytes": 942, "initiator_bytes": 473, "responder_bytes": 469 }, { "flow_id": "flow-e1d890443a53c7691589b066", "transport": "tcp", "stream": 32, "initiator_ip": "10.10.22.157", "initiator_port": 49704, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 678, "last_frame": 688, "first_seen_epoch": "1634913063.085261", "last_seen_epoch": "1634913063.086524", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-e464369ee0ec3c43d2557f43", "transport": "tcp", "stream": 33, "initiator_ip": "10.10.22.157", "initiator_port": 49705, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 689, "last_frame": 700, "first_seen_epoch": "1634913063.086629", "last_seen_epoch": "1634913063.088039", "packets": 12, "bytes": 3987, "initiator_bytes": 1994, "responder_bytes": 1993 }, { "flow_id": "flow-027e5816e3d47535a7a0d901", "transport": "udp", "stream": 30, "initiator_ip": "10.10.22.157", "initiator_port": 123, "responder_ip": "10.10.22.22", "responder_port": 123, "first_frame": 713, "last_frame": 81225, "first_seen_epoch": "1634913064.42995", "last_seen_epoch": "1634918184.577032", "packets": 12, "bytes": 1944, "initiator_bytes": 972, "responder_bytes": 972 }, { "flow_id": "flow-53d6308f7a3df50e088644c8", "transport": "udp", "stream": 31, "initiator_ip": "10.10.22.157", "initiator_port": 50209, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 715, "last_frame": 716, "first_seen_epoch": "1634913064.74677", "last_seen_epoch": "1634913064.812497", "packets": 2, "bytes": 298, "initiator_bytes": 90, "responder_bytes": 208 }, { "flow_id": "flow-822fc541e737e04dfdb2439a", "transport": "tcp", "stream": 34, "initiator_ip": "10.10.22.157", "initiator_port": 49706, "responder_ip": "20.189.173.7", "responder_port": 443, "first_frame": 717, "last_frame": 2558, "first_seen_epoch": "1634913064.818632", "last_seen_epoch": "1634913174.763837", "packets": 31, "bytes": 11153, "initiator_bytes": 3564, "responder_bytes": 7589 }, { "flow_id": "flow-a8414e2a211bbd9f705da4e3", "transport": "tcp", "stream": 35, "initiator_ip": "13.86.61.82", "initiator_port": 443, "responder_ip": "10.10.22.158", "responder_port": 58399, "first_frame": 750, "last_frame": 750, "first_seen_epoch": "1634913065.597694", "last_seen_epoch": "1634913065.597694", "packets": 1, "bytes": 54, "initiator_bytes": 54, "responder_bytes": 0 }, { "flow_id": "flow-eece23fd02b606828de40ba2", "transport": "udp", "stream": 32, "initiator_ip": "10.10.22.157", "initiator_port": 50953, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 751, "last_frame": 752, "first_seen_epoch": "1634913070.790528", "last_seen_epoch": "1634913070.79086", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-f4e44b23574543bd2580d173", "transport": "udp", "stream": 33, "initiator_ip": "10.10.22.157", "initiator_port": 52394, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 753, "last_frame": 754, "first_seen_epoch": "1634913070.791341", "last_seen_epoch": "1634913070.791562", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-2962cdb2f571035d96d71871", "transport": "tcp", "stream": 36, "initiator_ip": "10.10.22.22", "initiator_port": 445, "responder_ip": "10.10.22.158", "responder_port": 58382, "first_frame": 755, "last_frame": 760, "first_seen_epoch": "1634913071.918503", "last_seen_epoch": "1634913077.950549", "packets": 4, "bytes": 220, "initiator_bytes": 220, "responder_bytes": 0 }, { "flow_id": "flow-953c79db843a3837b02c52ea", "transport": "udp", "stream": 34, "initiator_ip": "10.10.22.156", "initiator_port": 5353, "responder_ip": "224.0.0.251", "responder_port": 5353, "first_frame": 783, "last_frame": 83832, "first_seen_epoch": "1634913112.821779", "last_seen_epoch": "1634918511.968737", "packets": 14, "bytes": 1204, "initiator_bytes": 1204, "responder_bytes": 0 }, { "flow_id": "flow-e27d3f91dd4f12524b6cd809", "transport": "udp", "stream": 35, "initiator_ip": "10.10.22.156", "initiator_port": 64422, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 785, "last_frame": 785, "first_seen_epoch": "1634913112.848322", "last_seen_epoch": "1634913112.848322", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-2fdbed9afc4485a587c33338", "transport": "udp", "stream": 36, "initiator_ip": "10.10.22.156", "initiator_port": 62346, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 791, "last_frame": 792, "first_seen_epoch": "1634913113.335313", "last_seen_epoch": "1634913113.335549", "packets": 2, "bytes": 254, "initiator_bytes": 95, "responder_bytes": 159 }, { "flow_id": "flow-818bfbc2512b0b1530be6d24", "transport": "udp", "stream": 37, "initiator_ip": "10.10.22.156", "initiator_port": 64125, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 793, "last_frame": 794, "first_seen_epoch": "1634913113.344659", "last_seen_epoch": "1634913113.344886", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-31ad3095fb91f8141a05497e", "transport": "udp", "stream": 38, "initiator_ip": "10.10.22.156", "initiator_port": 64127, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 795, "last_frame": 796, "first_seen_epoch": "1634913113.353496", "last_seen_epoch": "1634913113.353794", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-d1c68d2f666e2ecb3ecb8466", "transport": "udp", "stream": 39, "initiator_ip": "10.10.22.156", "initiator_port": 137, "responder_ip": "10.10.22.1", "responder_port": 137, "first_frame": 797, "last_frame": 83894, "first_seen_epoch": "1634913113.386438", "last_seen_epoch": "1634918514.966071", "packets": 162, "bytes": 17658, "initiator_bytes": 17658, "responder_bytes": 0 }, { "flow_id": "flow-1a41c346c6bac0f3c9c0f9b6", "transport": "udp", "stream": 40, "initiator_ip": "10.10.22.156", "initiator_port": 63464, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 799, "last_frame": 800, "first_seen_epoch": "1634913113.442459", "last_seen_epoch": "1634913113.442679", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-b43147b28678f38754bcb004", "transport": "tcp", "stream": 37, "initiator_ip": "10.10.22.156", "initiator_port": 49668, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 801, "last_frame": 998, "first_seen_epoch": "1634913113.471493", "last_seen_epoch": "1634913114.920779", "packets": 15, "bytes": 6195, "initiator_bytes": 2822, "responder_bytes": 3373 }, { "flow_id": "flow-7404c726a45f7e089d4b9730", "transport": "udp", "stream": 41, "initiator_ip": "10.10.22.156", "initiator_port": 63466, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 808, "last_frame": 809, "first_seen_epoch": "1634913113.491367", "last_seen_epoch": "1634913113.491663", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-c33c0671c53ef37454c718f1", "transport": "udp", "stream": 42, "initiator_ip": "10.10.22.156", "initiator_port": 56598, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 810, "last_frame": 811, "first_seen_epoch": "1634913113.503289", "last_seen_epoch": "1634913113.50355", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-2a9ce815dae548d4b2ed4d07", "transport": "tcp", "stream": 38, "initiator_ip": "10.10.22.156", "initiator_port": 49670, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 813, "last_frame": 5650, "first_seen_epoch": "1634913113.762926", "last_seen_epoch": "1634913298.940028", "packets": 188, "bytes": 47845, "initiator_bytes": 23926, "responder_bytes": 23919 }, { "flow_id": "flow-1649765a7e4fc3cc0382140d", "transport": "udp", "stream": 43, "initiator_ip": "10.10.22.156", "initiator_port": 56195, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 824, "last_frame": 825, "first_seen_epoch": "1634913113.850284", "last_seen_epoch": "1634913113.850586", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-faa1fede1fbec518c103c4ad", "transport": "udp", "stream": 44, "initiator_ip": "10.10.22.156", "initiator_port": 55524, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 826, "last_frame": 827, "first_seen_epoch": "1634913113.850879", "last_seen_epoch": "1634913113.851046", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-e2505363f53170a7e9793284", "transport": "udp", "stream": 45, "initiator_ip": "10.10.22.156", "initiator_port": 55175, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 828, "last_frame": 829, "first_seen_epoch": "1634913114.321568", "last_seen_epoch": "1634913114.390652", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-b207208756ab1522470bfe04", "transport": "udp", "stream": 46, "initiator_ip": "10.10.22.156", "initiator_port": 56856, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 830, "last_frame": 831, "first_seen_epoch": "1634913114.716833", "last_seen_epoch": "1634913114.717046", "packets": 2, "bytes": 324, "initiator_bytes": 130, "responder_bytes": 194 }, { "flow_id": "flow-132bb65d62ebc98dd12392b7", "transport": "udp", "stream": 47, "initiator_ip": "10.10.22.156", "initiator_port": 63607, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 833, "last_frame": 834, "first_seen_epoch": "1634913114.745933", "last_seen_epoch": "1634913114.746216", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-6af324b15782d95aae74fb73", "transport": "udp", "stream": 48, "initiator_ip": "10.10.22.156", "initiator_port": 63609, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 835, "last_frame": 836, "first_seen_epoch": "1634913114.765691", "last_seen_epoch": "1634913114.766057", "packets": 2, "bytes": 564, "initiator_bytes": 311, "responder_bytes": 253 }, { "flow_id": "flow-cf5cfad2bbfc1edef15ee6f0", "transport": "udp", "stream": 49, "initiator_ip": "10.10.22.156", "initiator_port": 63610, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 837, "last_frame": 838, "first_seen_epoch": "1634913114.768636", "last_seen_epoch": "1634913114.768837", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-6440e6ae735e25e64784a4f6", "transport": "udp", "stream": 50, "initiator_ip": "10.10.22.156", "initiator_port": 63611, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 839, "last_frame": 841, "first_seen_epoch": "1634913114.77018", "last_seen_epoch": "1634913114.770354", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-1a7a8faf756a874764b95b1b", "transport": "udp", "stream": 51, "initiator_ip": "10.10.22.156", "initiator_port": 63612, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 840, "last_frame": 842, "first_seen_epoch": "1634913114.770302", "last_seen_epoch": "1634913114.770576", "packets": 2, "bytes": 540, "initiator_bytes": 308, "responder_bytes": 232 }, { "flow_id": "flow-ea2439ac0ee40c4eab97a123", "transport": "udp", "stream": 52, "initiator_ip": "10.10.22.156", "initiator_port": 63613, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 843, "last_frame": 844, "first_seen_epoch": "1634913114.780945", "last_seen_epoch": "1634913114.781243", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-e0a0e2c8a31934d47beeb60d", "transport": "tcp", "stream": 39, "initiator_ip": "10.10.22.156", "initiator_port": 49673, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 845, "last_frame": 852, "first_seen_epoch": "1634913114.876376", "last_seen_epoch": "1634913114.877705", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-023122730133d8ee9cae4abe", "transport": "tcp", "stream": 40, "initiator_ip": "10.10.22.156", "initiator_port": 49674, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 853, "last_frame": 863, "first_seen_epoch": "1634913114.887065", "last_seen_epoch": "1634913114.888731", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-6b2b07820000e0ccc2abb4dd", "transport": "tcp", "stream": 41, "initiator_ip": "10.10.22.156", "initiator_port": 49675, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 862, "last_frame": 1662, "first_seen_epoch": "1634913114.88872", "last_seen_epoch": "1634913141.690455", "packets": 17, "bytes": 2258, "initiator_bytes": 1018, "responder_bytes": 1240 }, { "flow_id": "flow-49e1d8304e4888cd91df1ddf", "transport": "tcp", "stream": 42, "initiator_ip": "10.10.22.156", "initiator_port": 49676, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 867, "last_frame": 1664, "first_seen_epoch": "1634913114.890903", "last_seen_epoch": "1634913141.690543", "packets": 13, "bytes": 1494, "initiator_bytes": 730, "responder_bytes": 764 }, { "flow_id": "flow-0d51c8df586aecac7ed31b70", "transport": "tcp", "stream": 43, "initiator_ip": "10.10.22.156", "initiator_port": 49677, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 879, "last_frame": 892, "first_seen_epoch": "1634913114.893149", "last_seen_epoch": "1634913114.898356", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-43248db5e349395d4a8ef29d", "transport": "tcp", "stream": 44, "initiator_ip": "10.10.22.156", "initiator_port": 49678, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 882, "last_frame": 1656, "first_seen_epoch": "1634913114.893854", "last_seen_epoch": "1634913141.690209", "packets": 13, "bytes": 1642, "initiator_bytes": 686, "responder_bytes": 956 }, { "flow_id": "flow-e326d1f9ae0b1b53bc4816ab", "transport": "tcp", "stream": 45, "initiator_ip": "10.10.22.156", "initiator_port": 49679, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 891, "last_frame": 906, "first_seen_epoch": "1634913114.898288", "last_seen_epoch": "1634913114.900396", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-bd2888d1ba7fb9f288174539", "transport": "tcp", "stream": 46, "initiator_ip": "10.10.22.156", "initiator_port": 49680, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 900, "last_frame": 1665, "first_seen_epoch": "1634913114.899469", "last_seen_epoch": "1634913141.690595", "packets": 33, "bytes": 9776, "initiator_bytes": 6810, "responder_bytes": 2966 }, { "flow_id": "flow-de7714ae6d0cf06e4ed2bc7d", "transport": "tcp", "stream": 47, "initiator_ip": "10.10.22.156", "initiator_port": 49681, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 907, "last_frame": 930, "first_seen_epoch": "1634913114.901658", "last_seen_epoch": "1634913114.903991", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-4bebff1491f5994be325a81f", "transport": "tcp", "stream": 48, "initiator_ip": "10.10.22.156", "initiator_port": 49682, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 911, "last_frame": 938, "first_seen_epoch": "1634913114.902307", "last_seen_epoch": "1634913114.908712", "packets": 12, "bytes": 4103, "initiator_bytes": 2046, "responder_bytes": 2057 }, { "flow_id": "flow-b75f6811c664a9909cb29c58", "transport": "tcp", "stream": 49, "initiator_ip": "10.10.22.156", "initiator_port": 49683, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 912, "last_frame": 935, "first_seen_epoch": "1634913114.902364", "last_seen_epoch": "1634913114.904725", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-83d239720e7e2480cb581925", "transport": "tcp", "stream": 50, "initiator_ip": "10.10.22.156", "initiator_port": 49684, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 939, "last_frame": 959, "first_seen_epoch": "1634913114.911737", "last_seen_epoch": "1634913114.913976", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-ccb7d9a2d1ae039de1db8ff0", "transport": "tcp", "stream": 51, "initiator_ip": "10.10.22.156", "initiator_port": 49685, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 940, "last_frame": 956, "first_seen_epoch": "1634913114.911816", "last_seen_epoch": "1634913114.913627", "packets": 11, "bytes": 3657, "initiator_bytes": 1787, "responder_bytes": 1870 }, { "flow_id": "flow-5f37fa85b7a552e2d17beb79", "transport": "tcp", "stream": 52, "initiator_ip": "10.10.22.156", "initiator_port": 49686, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 973, "last_frame": 988, "first_seen_epoch": "1634913114.91686", "last_seen_epoch": "1634913114.919245", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-a6e3b1541ab624a960ab4471", "transport": "tcp", "stream": 53, "initiator_ip": "10.10.22.156", "initiator_port": 49687, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 1019, "last_frame": 2532, "first_seen_epoch": "1634913114.932826", "last_seen_epoch": "1634913171.692121", "packets": 23, "bytes": 6017, "initiator_bytes": 3834, "responder_bytes": 2183 }, { "flow_id": "flow-23979fc0e111cdb517eff8d1", "transport": "tcp", "stream": 54, "initiator_ip": "10.10.22.156", "initiator_port": 49688, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 1038, "last_frame": 1666, "first_seen_epoch": "1634913114.947268", "last_seen_epoch": "1634913141.690678", "packets": 21, "bytes": 5546, "initiator_bytes": 2610, "responder_bytes": 2936 }, { "flow_id": "flow-7ecb0614d934106338230dcb", "transport": "tcp", "stream": 55, "initiator_ip": "10.10.22.156", "initiator_port": 49689, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1059, "last_frame": 1181, "first_seen_epoch": "1634913114.964313", "last_seen_epoch": "1634913115.63052", "packets": 33, "bytes": 10751, "initiator_bytes": 4779, "responder_bytes": 5972 }, { "flow_id": "flow-e3d79350da477bd8ec90b0ba", "transport": "udp", "stream": 53, "initiator_ip": "10.10.22.156", "initiator_port": 51761, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1076, "last_frame": 1077, "first_seen_epoch": "1634913114.971426", "last_seen_epoch": "1634913114.971588", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-8cd03bf064a2c07aecabe315", "transport": "udp", "stream": 54, "initiator_ip": "10.10.22.156", "initiator_port": 51762, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1080, "last_frame": 1081, "first_seen_epoch": "1634913114.979282", "last_seen_epoch": "1634913114.979518", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-1239dc5000506164d18590f3", "transport": "tcp", "stream": 56, "initiator_ip": "10.10.22.156", "initiator_port": 49690, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 1084, "last_frame": 2553, "first_seen_epoch": "1634913114.986524", "last_seen_epoch": "1634913173.52091", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-5d1e0c0f7db176d1692172fe", "transport": "tcp", "stream": 57, "initiator_ip": "10.10.22.156", "initiator_port": 49691, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 1099, "last_frame": 2550, "first_seen_epoch": "1634913115.048318", "last_seen_epoch": "1634913173.520638", "packets": 23, "bytes": 5906, "initiator_bytes": 4179, "responder_bytes": 1727 }, { "flow_id": "flow-8b203f5242ea99c9a0a27550", "transport": "tcp", "stream": 58, "initiator_ip": "10.10.22.156", "initiator_port": 49692, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1102, "last_frame": 1113, "first_seen_epoch": "1634913115.049942", "last_seen_epoch": "1634913115.051728", "packets": 12, "bytes": 4103, "initiator_bytes": 2046, "responder_bytes": 2057 }, { "flow_id": "flow-e50649ecb48e02c21300765f", "transport": "tcp", "stream": 59, "initiator_ip": "10.10.22.156", "initiator_port": 49693, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1132, "last_frame": 1138, "first_seen_epoch": "1634913115.094916", "last_seen_epoch": "1634913115.095882", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-4b4e586e640f5c28cb8c3abf", "transport": "udp", "stream": 55, "initiator_ip": "10.10.22.156", "initiator_port": 53644, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1142, "last_frame": 1143, "first_seen_epoch": "1634913115.125315", "last_seen_epoch": "1634913115.12557", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-012de2e15155f7b04a1263db", "transport": "udp", "stream": 56, "initiator_ip": "10.10.22.156", "initiator_port": 53645, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1144, "last_frame": 1145, "first_seen_epoch": "1634913115.152141", "last_seen_epoch": "1634913115.1525", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-c8145e4eb1bf7c39fdf789e4", "transport": "tcp", "stream": 60, "initiator_ip": "10.10.22.156", "initiator_port": 49694, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1146, "last_frame": 1152, "first_seen_epoch": "1634913115.266723", "last_seen_epoch": "1634913115.457924", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-b0e218631c3558f7bb7aa95b", "transport": "udp", "stream": 57, "initiator_ip": "10.10.22.156", "initiator_port": 63732, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1154, "last_frame": 1155, "first_seen_epoch": "1634913115.458399", "last_seen_epoch": "1634913115.45877", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-0faad01e2625e55baf4afa46", "transport": "udp", "stream": 58, "initiator_ip": "10.10.22.156", "initiator_port": 54642, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1158, "last_frame": 1159, "first_seen_epoch": "1634913115.518951", "last_seen_epoch": "1634913115.519297", "packets": 2, "bytes": 296, "initiator_bytes": 116, "responder_bytes": 180 }, { "flow_id": "flow-cb87a0ef5ac2694467d4e2a5", "transport": "udp", "stream": 59, "initiator_ip": "10.10.22.156", "initiator_port": 54643, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1160, "last_frame": 1161, "first_seen_epoch": "1634913115.524384", "last_seen_epoch": "1634913115.524671", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-5131e4ac184b18deccd4e73e", "transport": "tcp", "stream": 61, "initiator_ip": "10.10.22.156", "initiator_port": 49695, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1162, "last_frame": 1168, "first_seen_epoch": "1634913115.626097", "last_seen_epoch": "1634913115.627105", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-3b6f3671731f60cc826f3302", "transport": "tcp", "stream": 62, "initiator_ip": "10.10.22.156", "initiator_port": 49696, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1170, "last_frame": 1176, "first_seen_epoch": "1634913115.627939", "last_seen_epoch": "1634913115.628606", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-61fc23da011bc936701aac1c", "transport": "tcp", "stream": 63, "initiator_ip": "10.10.22.156", "initiator_port": 49698, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1184, "last_frame": 1417, "first_seen_epoch": "1634913116.331893", "last_seen_epoch": "1634913117.49399", "packets": 25, "bytes": 11147, "initiator_bytes": 3870, "responder_bytes": 7277 }, { "flow_id": "flow-9efa96a3cb5a590bd960642d", "transport": "tcp", "stream": 64, "initiator_ip": "10.10.22.156", "initiator_port": 49699, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1199, "last_frame": 1210, "first_seen_epoch": "1634913116.462747", "last_seen_epoch": "1634913116.465067", "packets": 12, "bytes": 4049, "initiator_bytes": 2028, "responder_bytes": 2021 }, { "flow_id": "flow-9f937bd91a0b253901b96239", "transport": "tcp", "stream": 65, "initiator_ip": "10.10.22.156", "initiator_port": 49700, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1213, "last_frame": 1413, "first_seen_epoch": "1634913116.51903", "last_seen_epoch": "1634913117.486977", "packets": 17, "bytes": 3988, "initiator_bytes": 2878, "responder_bytes": 1110 }, { "flow_id": "flow-716ec26299ec28b5fe5bc66f", "transport": "tcp", "stream": 66, "initiator_ip": "10.10.22.156", "initiator_port": 49701, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1232, "last_frame": 1243, "first_seen_epoch": "1634913116.740485", "last_seen_epoch": "1634913116.748715", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-0bec891b8824965e9ece02aa", "transport": "tcp", "stream": 67, "initiator_ip": "10.10.22.156", "initiator_port": 49702, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1244, "last_frame": 1255, "first_seen_epoch": "1634913116.748824", "last_seen_epoch": "1634913116.74989", "packets": 12, "bytes": 3711, "initiator_bytes": 1841, "responder_bytes": 1870 }, { "flow_id": "flow-377673a83b77199f48676bb6", "transport": "udp", "stream": 60, "initiator_ip": "10.10.22.157", "initiator_port": 53469, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1275, "last_frame": 1378, "first_seen_epoch": "1634913116.77298", "last_seen_epoch": "1634913116.834876", "packets": 2, "bytes": 245, "initiator_bytes": 90, "responder_bytes": 155 }, { "flow_id": "flow-7dc5fed398df8f1901b08b46", "transport": "tcp", "stream": 68, "initiator_ip": "10.10.22.157", "initiator_port": 49707, "responder_ip": "52.109.76.32", "responder_port": 443, "first_frame": 1379, "last_frame": 3923, "first_seen_epoch": "1634913116.835541", "last_seen_epoch": "1634913226.968914", "packets": 29, "bytes": 8731, "initiator_bytes": 1641, "responder_bytes": 7090 }, { "flow_id": "flow-56af1f91b07ea8726b6b90de", "transport": "udp", "stream": 61, "initiator_ip": "10.10.22.156", "initiator_port": 54646, "responder_ip": "239.255.255.250", "responder_port": 1900, "first_frame": 1387, "last_frame": 84048, "first_seen_epoch": "1634913117.13205", "last_seen_epoch": "1634918527.03011", "packets": 52, "bytes": 9258, "initiator_bytes": 9258, "responder_bytes": 0 }, { "flow_id": "flow-ad353546f2787e4737920ada", "transport": "udp", "stream": 62, "initiator_ip": "10.10.22.156", "initiator_port": 137, "responder_ip": "10.10.22.255", "responder_port": 137, "first_frame": 1426, "last_frame": 40452, "first_seen_epoch": "1634913117.96984", "last_seen_epoch": "1634915275.567306", "packets": 19, "bytes": 1964, "initiator_bytes": 1964, "responder_bytes": 0 }, { "flow_id": "flow-6faa321d780f7f0d1419f78f", "transport": "udp", "stream": 63, "initiator_ip": "10.10.22.156", "initiator_port": 62908, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1428, "last_frame": 1429, "first_seen_epoch": "1634913118.374525", "last_seen_epoch": "1634913118.374783", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-9183b11900f8ccd9fda2fd60", "transport": "udp", "stream": 64, "initiator_ip": "10.10.22.156", "initiator_port": 62909, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1430, "last_frame": 1431, "first_seen_epoch": "1634913118.375234", "last_seen_epoch": "1634913118.37545", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-770bba78010305599758ac25", "transport": "tcp", "stream": 69, "initiator_ip": "10.10.22.156", "initiator_port": 49704, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 1432, "last_frame": 1502, "first_seen_epoch": "1634913118.508345", "last_seen_epoch": "1634913118.549777", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-6e6e1c4ae12446c477f6e6d8", "transport": "tcp", "stream": 70, "initiator_ip": "10.10.22.156", "initiator_port": 49705, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 1439, "last_frame": 1501, "first_seen_epoch": "1634913118.516531", "last_seen_epoch": "1634913118.549608", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-4773ecf18bdda67b1679e804", "transport": "tcp", "stream": 71, "initiator_ip": "10.10.22.156", "initiator_port": 49706, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1462, "last_frame": 1500, "first_seen_epoch": "1634913118.527707", "last_seen_epoch": "1634913118.540917", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-f0c2d1b3d55078d444e28b28", "transport": "tcp", "stream": 72, "initiator_ip": "10.10.22.156", "initiator_port": 49707, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1479, "last_frame": 1496, "first_seen_epoch": "1634913118.535612", "last_seen_epoch": "1634913118.540473", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-c1c2e09794af17f0af4ac918", "transport": "udp", "stream": 65, "initiator_ip": "10.10.22.156", "initiator_port": 62912, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1522, "last_frame": 1523, "first_seen_epoch": "1634913123.576494", "last_seen_epoch": "1634913123.576868", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-9c7fe4f19afadb980d90f2e8", "transport": "udp", "stream": 66, "initiator_ip": "10.10.22.156", "initiator_port": 62913, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1524, "last_frame": 1525, "first_seen_epoch": "1634913123.701681", "last_seen_epoch": "1634913123.701981", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-646154ea07388c3a2c7e7664", "transport": "udp", "stream": 67, "initiator_ip": "10.10.22.156", "initiator_port": 138, "responder_ip": "10.10.22.255", "responder_port": 138, "first_frame": 1526, "last_frame": 81190, "first_seen_epoch": "1634913123.722599", "last_seen_epoch": "1634918162.727334", "packets": 15, "bytes": 3483, "initiator_bytes": 3483, "responder_bytes": 0 }, { "flow_id": "flow-cefe5a837abe5d1d122fd626", "transport": "tcp", "stream": 73, "initiator_ip": "10.10.22.156", "initiator_port": 49708, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1527, "last_frame": 1596, "first_seen_epoch": "1634913123.72531", "last_seen_epoch": "1634913124.242876", "packets": 27, "bytes": 8629, "initiator_bytes": 3995, "responder_bytes": 4634 }, { "flow_id": "flow-82dd662d0013c11d5157fb65", "transport": "tcp", "stream": 74, "initiator_ip": "10.10.22.156", "initiator_port": 49709, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1552, "last_frame": 1594, "first_seen_epoch": "1634913124.228307", "last_seen_epoch": "1634913124.242197", "packets": 13, "bytes": 4395, "initiator_bytes": 3583, "responder_bytes": 812 }, { "flow_id": "flow-8d4587fea0df04823001b6c2", "transport": "tcp", "stream": 75, "initiator_ip": "10.10.22.156", "initiator_port": 49710, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1561, "last_frame": 1568, "first_seen_epoch": "1634913124.236189", "last_seen_epoch": "1634913124.237464", "packets": 8, "bytes": 942, "initiator_bytes": 473, "responder_bytes": 469 }, { "flow_id": "flow-4f6ff31505cbed4d2ae53c5b", "transport": "tcp", "stream": 76, "initiator_ip": "10.10.22.156", "initiator_port": 49711, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1569, "last_frame": 1578, "first_seen_epoch": "1634913124.237511", "last_seen_epoch": "1634913124.238799", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-0f58c5a2ba1726107f28b9fc", "transport": "tcp", "stream": 77, "initiator_ip": "10.10.22.156", "initiator_port": 49712, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1579, "last_frame": 1590, "first_seen_epoch": "1634913124.238927", "last_seen_epoch": "1634913124.240034", "packets": 12, "bytes": 3987, "initiator_bytes": 1994, "responder_bytes": 1993 }, { "flow_id": "flow-20ab7a96b116c4912dfc321b", "transport": "udp", "stream": 68, "initiator_ip": "10.10.22.156", "initiator_port": 123, "responder_ip": "10.10.22.22", "responder_port": 123, "first_frame": 1599, "last_frame": 81423, "first_seen_epoch": "1634913125.410877", "last_seen_epoch": "1634918246.549315", "packets": 12, "bytes": 1944, "initiator_bytes": 972, "responder_bytes": 972 }, { "flow_id": "flow-d4485e297840c9a596ba8a30", "transport": "udp", "stream": 69, "initiator_ip": "10.10.22.156", "initiator_port": 51886, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1607, "last_frame": 1608, "first_seen_epoch": "1634913125.864468", "last_seen_epoch": "1634913125.914432", "packets": 2, "bytes": 301, "initiator_bytes": 90, "responder_bytes": 211 }, { "flow_id": "flow-7d950efbfeb701ed2dc98c25", "transport": "tcp", "stream": 78, "initiator_ip": "10.10.22.156", "initiator_port": 49713, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 1609, "last_frame": 4124, "first_seen_epoch": "1634913125.918666", "last_seen_epoch": "1634913235.794105", "packets": 31, "bytes": 11150, "initiator_bytes": 3560, "responder_bytes": 7590 }, { "flow_id": "flow-9fa8bcdb280df0413aa28192", "transport": "udp", "stream": 70, "initiator_ip": "10.10.22.156", "initiator_port": 54457, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1638, "last_frame": 1639, "first_seen_epoch": "1634913129.895705", "last_seen_epoch": "1634913129.896164", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5141074f5770ae6d9f1eb489", "transport": "udp", "stream": 71, "initiator_ip": "10.10.22.156", "initiator_port": 57945, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1640, "last_frame": 1641, "first_seen_epoch": "1634913129.896748", "last_seen_epoch": "1634913129.896996", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-a88098b5da8cfa4156f14a89", "transport": "udp", "stream": 72, "initiator_ip": "10.10.22.157", "initiator_port": 52344, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1642, "last_frame": 1643, "first_seen_epoch": "1634913130.805014", "last_seen_epoch": "1634913130.805321", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-268e9d137a7cc047e8c1aec8", "transport": "udp", "stream": 73, "initiator_ip": "10.10.22.157", "initiator_port": 50490, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1644, "last_frame": 1645, "first_seen_epoch": "1634913130.805721", "last_seen_epoch": "1634913130.805902", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-b45ec07c3245c7e86a7981f6", "transport": "udp", "stream": 74, "initiator_ip": "10.10.22.158", "initiator_port": 5353, "responder_ip": "224.0.0.251", "responder_port": 5353, "first_frame": 1677, "last_frame": 84071, "first_seen_epoch": "1634913143.496627", "last_seen_epoch": "1634918543.667235", "packets": 26, "bytes": 2143, "initiator_bytes": 2143, "responder_bytes": 0 }, { "flow_id": "flow-5a9fd3f015e67c57dbcd9e4f", "transport": "udp", "stream": 75, "initiator_ip": "10.10.22.158", "initiator_port": 60273, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 1679, "last_frame": 1679, "first_seen_epoch": "1634913143.497315", "last_seen_epoch": "1634913143.497315", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-7471db6b2c8eb6c072e6f530", "transport": "udp", "stream": 76, "initiator_ip": "10.10.22.158", "initiator_port": 53494, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1685, "last_frame": 1686, "first_seen_epoch": "1634913143.96126", "last_seen_epoch": "1634913143.96152", "packets": 2, "bytes": 254, "initiator_bytes": 95, "responder_bytes": 159 }, { "flow_id": "flow-014371d599462a6a45b72e6f", "transport": "udp", "stream": 77, "initiator_ip": "10.10.22.158", "initiator_port": 61123, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1687, "last_frame": 1688, "first_seen_epoch": "1634913143.965608", "last_seen_epoch": "1634913143.965839", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-0399c1e83577f0cfb29661f2", "transport": "udp", "stream": 78, "initiator_ip": "10.10.22.158", "initiator_port": 61125, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1689, "last_frame": 1690, "first_seen_epoch": "1634913143.997583", "last_seen_epoch": "1634913143.997863", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-3d860b0de6441bd829370df9", "transport": "udp", "stream": 79, "initiator_ip": "10.10.22.158", "initiator_port": 137, "responder_ip": "10.10.22.1", "responder_port": 137, "first_frame": 1691, "last_frame": 84112, "first_seen_epoch": "1634913144.032979", "last_seen_epoch": "1634918546.835904", "packets": 165, "bytes": 17934, "initiator_bytes": 17934, "responder_bytes": 0 }, { "flow_id": "flow-25e83b356400b80886093b30", "transport": "tcp", "stream": 79, "initiator_ip": "10.10.22.158", "initiator_port": 49668, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1693, "last_frame": 1984, "first_seen_epoch": "1634913144.0988", "last_seen_epoch": "1634913145.888893", "packets": 15, "bytes": 6195, "initiator_bytes": 2822, "responder_bytes": 3373 }, { "flow_id": "flow-52d51c278c4b5bb7988bd5da", "transport": "udp", "stream": 80, "initiator_ip": "10.10.22.158", "initiator_port": 50888, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1699, "last_frame": 1701, "first_seen_epoch": "1634913144.099978", "last_seen_epoch": "1634913144.10024", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-86ac3130bfd9f143676fb288", "transport": "udp", "stream": 81, "initiator_ip": "10.10.22.158", "initiator_port": 56232, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1702, "last_frame": 1703, "first_seen_epoch": "1634913144.116616", "last_seen_epoch": "1634913144.116955", "packets": 2, "bytes": 289, "initiator_bytes": 107, "responder_bytes": 182 }, { "flow_id": "flow-c6eecc0c0b8e272d8a7c9e78", "transport": "udp", "stream": 82, "initiator_ip": "10.10.22.158", "initiator_port": 56234, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1704, "last_frame": 1705, "first_seen_epoch": "1634913144.183118", "last_seen_epoch": "1634913144.183472", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-e4cdf19366a88b08738e6c88", "transport": "tcp", "stream": 80, "initiator_ip": "10.10.22.158", "initiator_port": 49669, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 1706, "last_frame": 6196, "first_seen_epoch": "1634913144.377517", "last_seen_epoch": "1634913329.179949", "packets": 182, "bytes": 46951, "initiator_bytes": 23770, "responder_bytes": 23181 }, { "flow_id": "flow-7c729b86f987ad0d71df7c55", "transport": "udp", "stream": 83, "initiator_ip": "10.10.22.158", "initiator_port": 53747, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1718, "last_frame": 1719, "first_seen_epoch": "1634913144.72217", "last_seen_epoch": "1634913144.72242", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-e9370219607cf6fb82b63745", "transport": "udp", "stream": 84, "initiator_ip": "10.10.22.158", "initiator_port": 54297, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1720, "last_frame": 1721, "first_seen_epoch": "1634913144.722619", "last_seen_epoch": "1634913144.722778", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-f4f7daddb79b80daecfe8410", "transport": "udp", "stream": 85, "initiator_ip": "10.10.22.158", "initiator_port": 49898, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1722, "last_frame": 1723, "first_seen_epoch": "1634913145.245893", "last_seen_epoch": "1634913145.318048", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-4c51eb263e362071ab64d76a", "transport": "udp", "stream": 86, "initiator_ip": "10.10.22.158", "initiator_port": 61902, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1727, "last_frame": 1728, "first_seen_epoch": "1634913145.615237", "last_seen_epoch": "1634913145.615477", "packets": 2, "bytes": 324, "initiator_bytes": 130, "responder_bytes": 194 }, { "flow_id": "flow-75b809b5fb2528e742a7aa6d", "transport": "udp", "stream": 87, "initiator_ip": "10.10.22.158", "initiator_port": 59912, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1729, "last_frame": 1730, "first_seen_epoch": "1634913145.615525", "last_seen_epoch": "1634913145.615705", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-251732edf22ffabadc517363", "transport": "udp", "stream": 88, "initiator_ip": "10.10.22.158", "initiator_port": 59914, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1731, "last_frame": 1732, "first_seen_epoch": "1634913145.712229", "last_seen_epoch": "1634913145.712497", "packets": 2, "bytes": 540, "initiator_bytes": 308, "responder_bytes": 232 }, { "flow_id": "flow-4a7ccff0714444809e2552b4", "transport": "udp", "stream": 89, "initiator_ip": "10.10.22.158", "initiator_port": 59915, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1733, "last_frame": 1734, "first_seen_epoch": "1634913145.720211", "last_seen_epoch": "1634913145.720467", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-f3916f25c9276a1d7473b72c", "transport": "udp", "stream": 90, "initiator_ip": "10.10.22.158", "initiator_port": 59916, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1735, "last_frame": 1736, "first_seen_epoch": "1634913145.731372", "last_seen_epoch": "1634913145.731779", "packets": 2, "bytes": 564, "initiator_bytes": 311, "responder_bytes": 253 }, { "flow_id": "flow-7da03c5c7942660d66c368f6", "transport": "udp", "stream": 91, "initiator_ip": "10.10.22.158", "initiator_port": 59917, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1737, "last_frame": 1738, "first_seen_epoch": "1634913145.735549", "last_seen_epoch": "1634913145.735818", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4c6ae54f55ab50eab4d60059", "transport": "udp", "stream": 92, "initiator_ip": "10.10.22.158", "initiator_port": 59918, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1739, "last_frame": 1740, "first_seen_epoch": "1634913145.746827", "last_seen_epoch": "1634913145.747335", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-28a5409462d87375792207aa", "transport": "tcp", "stream": 81, "initiator_ip": "10.10.22.158", "initiator_port": 49673, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 1741, "last_frame": 2544, "first_seen_epoch": "1634913145.819524", "last_seen_epoch": "1634913172.30262", "packets": 21, "bytes": 3346, "initiator_bytes": 1462, "responder_bytes": 1884 }, { "flow_id": "flow-229deb45da8eee132ee81a18", "transport": "tcp", "stream": 82, "initiator_ip": "10.10.22.158", "initiator_port": 49674, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 1748, "last_frame": 2542, "first_seen_epoch": "1634913145.822187", "last_seen_epoch": "1634913172.302497", "packets": 21, "bytes": 5546, "initiator_bytes": 2610, "responder_bytes": 2936 }, { "flow_id": "flow-20398503ae9bce66e4dd3a0e", "transport": "tcp", "stream": 83, "initiator_ip": "10.10.22.158", "initiator_port": 49675, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1761, "last_frame": 1768, "first_seen_epoch": "1634913145.831287", "last_seen_epoch": "1634913145.832755", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-f8a5e0422fa64ab7a8d31934", "transport": "tcp", "stream": 84, "initiator_ip": "10.10.22.158", "initiator_port": 49676, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1773, "last_frame": 2102, "first_seen_epoch": "1634913145.844776", "last_seen_epoch": "1634913146.351184", "packets": 35, "bytes": 10859, "initiator_bytes": 4833, "responder_bytes": 6026 }, { "flow_id": "flow-e7bfc0033d994f6e5034c4f8", "transport": "tcp", "stream": 85, "initiator_ip": "10.10.22.158", "initiator_port": 49677, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1777, "last_frame": 1802, "first_seen_epoch": "1634913145.845557", "last_seen_epoch": "1634913145.854038", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-8d1fac8da083964ed58a2f51", "transport": "tcp", "stream": 86, "initiator_ip": "10.10.22.158", "initiator_port": 49678, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 1785, "last_frame": 2545, "first_seen_epoch": "1634913145.847864", "last_seen_epoch": "1634913172.302784", "packets": 23, "bytes": 6061, "initiator_bytes": 3878, "responder_bytes": 2183 }, { "flow_id": "flow-a700a3e9d44d3832c0176b68", "transport": "tcp", "stream": 87, "initiator_ip": "10.10.22.158", "initiator_port": 49679, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1788, "last_frame": 1795, "first_seen_epoch": "1634913145.848162", "last_seen_epoch": "1634913145.849464", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-07d7c45b0fd3b6f5bf163c23", "transport": "tcp", "stream": 88, "initiator_ip": "10.10.22.158", "initiator_port": 49680, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1803, "last_frame": 1822, "first_seen_epoch": "1634913145.85839", "last_seen_epoch": "1634913145.861783", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-b08f8e3abf01ee570600f817", "transport": "tcp", "stream": 89, "initiator_ip": "10.10.22.158", "initiator_port": 49681, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1804, "last_frame": 1817, "first_seen_epoch": "1634913145.858475", "last_seen_epoch": "1634913145.860014", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-db4250d3c56641c3a6b1642c", "transport": "tcp", "stream": 90, "initiator_ip": "10.10.22.158", "initiator_port": 49682, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1823, "last_frame": 1831, "first_seen_epoch": "1634913145.862021", "last_seen_epoch": "1634913145.868438", "packets": 8, "bytes": 924, "initiator_bytes": 472, "responder_bytes": 452 }, { "flow_id": "flow-6a6415e6b4d040107023a352", "transport": "tcp", "stream": 91, "initiator_ip": "10.10.22.158", "initiator_port": 49683, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1830, "last_frame": 1853, "first_seen_epoch": "1634913145.868434", "last_seen_epoch": "1634913145.872059", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-3aeda4007597f0b41cf15568", "transport": "tcp", "stream": 92, "initiator_ip": "10.10.22.158", "initiator_port": 49684, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1835, "last_frame": 1850, "first_seen_epoch": "1634913145.86922", "last_seen_epoch": "1634913145.871561", "packets": 10, "bytes": 2555, "initiator_bytes": 606, "responder_bytes": 1949 }, { "flow_id": "flow-e9e128c7f26273a36e2c84ed", "transport": "tcp", "stream": 93, "initiator_ip": "10.10.22.158", "initiator_port": 49685, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 1837, "last_frame": 3994, "first_seen_epoch": "1634913145.86946", "last_seen_epoch": "1634913232.298608", "packets": 49, "bytes": 15292, "initiator_bytes": 10361, "responder_bytes": 4931 }, { "flow_id": "flow-a5cd48cf89d9e61f49b09dea", "transport": "tcp", "stream": 94, "initiator_ip": "10.10.22.158", "initiator_port": 49686, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1856, "last_frame": 1873, "first_seen_epoch": "1634913145.87538", "last_seen_epoch": "1634913145.877338", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-4dedc6049080ae7211a96778", "transport": "tcp", "stream": 95, "initiator_ip": "10.10.22.158", "initiator_port": 49687, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1862, "last_frame": 1879, "first_seen_epoch": "1634913145.876035", "last_seen_epoch": "1634913145.878054", "packets": 12, "bytes": 4103, "initiator_bytes": 2046, "responder_bytes": 2057 }, { "flow_id": "flow-116ae4879837881d7af0dabe", "transport": "tcp", "stream": 96, "initiator_ip": "10.10.22.158", "initiator_port": 49688, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1880, "last_frame": 1897, "first_seen_epoch": "1634913145.878307", "last_seen_epoch": "1634913145.879779", "packets": 12, "bytes": 3711, "initiator_bytes": 1841, "responder_bytes": 1870 }, { "flow_id": "flow-b93635c23b9bf0730138ab87", "transport": "tcp", "stream": 97, "initiator_ip": "10.10.22.158", "initiator_port": 49689, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1887, "last_frame": 1928, "first_seen_epoch": "1634913145.879095", "last_seen_epoch": "1634913145.882015", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-5f62ef52098003a23a0eaf35", "transport": "tcp", "stream": 98, "initiator_ip": "10.10.22.158", "initiator_port": 49690, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1891, "last_frame": 1933, "first_seen_epoch": "1634913145.879444", "last_seen_epoch": "1634913145.882712", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-fba604084a1a40ed62d77692", "transport": "tcp", "stream": 99, "initiator_ip": "10.10.22.158", "initiator_port": 49691, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 1908, "last_frame": 1942, "first_seen_epoch": "1634913145.880459", "last_seen_epoch": "1634913145.883491", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-94ab510257060dd75d6e6bc4", "transport": "udp", "stream": 93, "initiator_ip": "10.10.22.158", "initiator_port": 62340, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 1995, "last_frame": 1996, "first_seen_epoch": "1634913145.911965", "last_seen_epoch": "1634913145.912184", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-4ad19f60fbf9e67b6c89b006", "transport": "udp", "stream": 94, "initiator_ip": "10.10.22.158", "initiator_port": 62341, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 1997, "last_frame": 1998, "first_seen_epoch": "1634913145.913146", "last_seen_epoch": "1634913145.91333", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-3838d762d5da1df51dd2dd32", "transport": "tcp", "stream": 100, "initiator_ip": "10.10.22.158", "initiator_port": 49692, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 2011, "last_frame": 3335, "first_seen_epoch": "1634913145.958343", "last_seen_epoch": "1634913204.252035", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-5f3a93f7196598a8c70bb603", "transport": "tcp", "stream": 101, "initiator_ip": "10.10.22.158", "initiator_port": 49693, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 2018, "last_frame": 3332, "first_seen_epoch": "1634913145.964636", "last_seen_epoch": "1634913204.251618", "packets": 23, "bytes": 5906, "initiator_bytes": 4179, "responder_bytes": 1727 }, { "flow_id": "flow-03d9dc1bf24a6e5165aa62eb", "transport": "tcp", "stream": 102, "initiator_ip": "10.10.22.158", "initiator_port": 49694, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2021, "last_frame": 2032, "first_seen_epoch": "1634913145.966103", "last_seen_epoch": "1634913145.967664", "packets": 12, "bytes": 4103, "initiator_bytes": 2046, "responder_bytes": 2057 }, { "flow_id": "flow-51f69709259815d4bbc9a858", "transport": "tcp", "stream": 103, "initiator_ip": "10.10.22.158", "initiator_port": 49695, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2053, "last_frame": 2059, "first_seen_epoch": "1634913146.01795", "last_seen_epoch": "1634913146.035361", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-f401f91bae9d3175f3d25872", "transport": "udp", "stream": 95, "initiator_ip": "10.10.22.158", "initiator_port": 52106, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2061, "last_frame": 2062, "first_seen_epoch": "1634913146.04789", "last_seen_epoch": "1634913146.048142", "packets": 2, "bytes": 326, "initiator_bytes": 131, "responder_bytes": 195 }, { "flow_id": "flow-fd20ae96f9f34f0a03a69454", "transport": "udp", "stream": 96, "initiator_ip": "10.10.22.158", "initiator_port": 52107, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2063, "last_frame": 2064, "first_seen_epoch": "1634913146.050317", "last_seen_epoch": "1634913146.050627", "packets": 2, "bytes": 479, "initiator_bytes": 243, "responder_bytes": 236 }, { "flow_id": "flow-e629642be0221cdce1446d84", "transport": "tcp", "stream": 104, "initiator_ip": "10.10.22.158", "initiator_port": 49696, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2067, "last_frame": 2072, "first_seen_epoch": "1634913146.158796", "last_seen_epoch": "1634913146.159651", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-9792c4dfb50294e99363e517", "transport": "udp", "stream": 97, "initiator_ip": "10.10.22.158", "initiator_port": 64184, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2075, "last_frame": 2076, "first_seen_epoch": "1634913146.186606", "last_seen_epoch": "1634913146.186851", "packets": 2, "bytes": 296, "initiator_bytes": 116, "responder_bytes": 180 }, { "flow_id": "flow-cf4f110121709dfac8a7c83b", "transport": "udp", "stream": 98, "initiator_ip": "10.10.22.158", "initiator_port": 64185, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2079, "last_frame": 2080, "first_seen_epoch": "1634913146.231049", "last_seen_epoch": "1634913146.231344", "packets": 2, "bytes": 496, "initiator_bytes": 264, "responder_bytes": 232 }, { "flow_id": "flow-5aeb391bfef0a9378282a751", "transport": "tcp", "stream": 105, "initiator_ip": "10.10.22.158", "initiator_port": 49697, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2081, "last_frame": 2087, "first_seen_epoch": "1634913146.346222", "last_seen_epoch": "1634913146.347352", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-c852c3cf71188524c43b1021", "transport": "tcp", "stream": 106, "initiator_ip": "10.10.22.158", "initiator_port": 49698, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2089, "last_frame": 2095, "first_seen_epoch": "1634913146.348184", "last_seen_epoch": "1634913146.349334", "packets": 6, "bytes": 348, "initiator_bytes": 174, "responder_bytes": 174 }, { "flow_id": "flow-f0855e363c4655e85b0cc13d", "transport": "udp", "stream": 99, "initiator_ip": "10.10.22.158", "initiator_port": 59393, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2103, "last_frame": 2104, "first_seen_epoch": "1634913146.406926", "last_seen_epoch": "1634913146.40718", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-9cac92107147dcebc9830d78", "transport": "tcp", "stream": 107, "initiator_ip": "10.10.22.158", "initiator_port": 49701, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2109, "last_frame": 2307, "first_seen_epoch": "1634913147.178568", "last_seen_epoch": "1634913147.737414", "packets": 23, "bytes": 10553, "initiator_bytes": 3804, "responder_bytes": 6749 }, { "flow_id": "flow-32ead75b81822e435289e84d", "transport": "tcp", "stream": 108, "initiator_ip": "10.10.22.158", "initiator_port": 49702, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2122, "last_frame": 2133, "first_seen_epoch": "1634913147.396196", "last_seen_epoch": "1634913147.398173", "packets": 12, "bytes": 4049, "initiator_bytes": 2028, "responder_bytes": 2021 }, { "flow_id": "flow-a657c2b098e2a0ff364ec58c", "transport": "tcp", "stream": 109, "initiator_ip": "10.10.22.158", "initiator_port": 49703, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2136, "last_frame": 2303, "first_seen_epoch": "1634913147.417949", "last_seen_epoch": "1634913147.71142", "packets": 17, "bytes": 3988, "initiator_bytes": 2878, "responder_bytes": 1110 }, { "flow_id": "flow-53746cd12f9af9fa1d7117fa", "transport": "tcp", "stream": 110, "initiator_ip": "10.10.22.158", "initiator_port": 49704, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2153, "last_frame": 2164, "first_seen_epoch": "1634913147.56607", "last_seen_epoch": "1634913147.568548", "packets": 12, "bytes": 4135, "initiator_bytes": 2062, "responder_bytes": 2073 }, { "flow_id": "flow-b188d243d4d5d116c0d47ada", "transport": "tcp", "stream": 111, "initiator_ip": "10.10.22.158", "initiator_port": 49705, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2165, "last_frame": 2176, "first_seen_epoch": "1634913147.568843", "last_seen_epoch": "1634913147.570327", "packets": 12, "bytes": 3711, "initiator_bytes": 1841, "responder_bytes": 1870 }, { "flow_id": "flow-60bb78abdde5c814963e14b0", "transport": "udp", "stream": 100, "initiator_ip": "10.10.22.158", "initiator_port": 61195, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2311, "last_frame": 2312, "first_seen_epoch": "1634913148.520983", "last_seen_epoch": "1634913148.521332", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-884e0b9cda6658c46fb83147", "transport": "udp", "stream": 101, "initiator_ip": "10.10.22.158", "initiator_port": 63663, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2313, "last_frame": 2314, "first_seen_epoch": "1634913148.52896", "last_seen_epoch": "1634913148.530213", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-3cbf9ca0eb75d3d696d0bbbc", "transport": "udp", "stream": 102, "initiator_ip": "10.10.22.158", "initiator_port": 137, "responder_ip": "10.10.22.255", "responder_port": 137, "first_frame": 2315, "last_frame": 23409, "first_seen_epoch": "1634913148.596077", "last_seen_epoch": "1634914506.387933", "packets": 34, "bytes": 3344, "initiator_bytes": 3344, "responder_bytes": 0 }, { "flow_id": "flow-00d02cbff87905a1d0fb9104", "transport": "udp", "stream": 103, "initiator_ip": "10.10.22.158", "initiator_port": 62653, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2317, "last_frame": 2318, "first_seen_epoch": "1634913149.209418", "last_seen_epoch": "1634913149.209673", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-533cb729f60061b9bd464c63", "transport": "udp", "stream": 104, "initiator_ip": "10.10.22.158", "initiator_port": 62654, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2319, "last_frame": 2320, "first_seen_epoch": "1634913149.210411", "last_seen_epoch": "1634913149.210609", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-91181fdc502953f4bb310d64", "transport": "tcp", "stream": 112, "initiator_ip": "10.10.22.158", "initiator_port": 49706, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 2323, "last_frame": 2396, "first_seen_epoch": "1634913149.356097", "last_seen_epoch": "1634913149.419681", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-8de5a3029d056fc4f147a2ee", "transport": "tcp", "stream": 113, "initiator_ip": "10.10.22.158", "initiator_port": 49707, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 2330, "last_frame": 2397, "first_seen_epoch": "1634913149.360447", "last_seen_epoch": "1634913149.419935", "packets": 24, "bytes": 6923, "initiator_bytes": 4340, "responder_bytes": 2583 }, { "flow_id": "flow-1fba899c40a4fdda58f4f8c6", "transport": "tcp", "stream": 114, "initiator_ip": "10.10.22.158", "initiator_port": 49708, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2353, "last_frame": 2391, "first_seen_epoch": "1634913149.39755", "last_seen_epoch": "1634913149.415142", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-c5726e1407784288d06f12a8", "transport": "tcp", "stream": 115, "initiator_ip": "10.10.22.158", "initiator_port": 49709, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2370, "last_frame": 2387, "first_seen_epoch": "1634913149.408267", "last_seen_epoch": "1634913149.414871", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-cd49a5333bcdd288423ee859", "transport": "udp", "stream": 105, "initiator_ip": "10.10.22.158", "initiator_port": 62657, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2407, "last_frame": 2408, "first_seen_epoch": "1634913154.417866", "last_seen_epoch": "1634913154.418202", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4e988b76609f1a50882890d9", "transport": "tcp", "stream": 116, "initiator_ip": "10.10.22.158", "initiator_port": 49710, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2409, "last_frame": 2466, "first_seen_epoch": "1634913154.520391", "last_seen_epoch": "1634913154.575414", "packets": 25, "bytes": 8287, "initiator_bytes": 3917, "responder_bytes": 4370 }, { "flow_id": "flow-05bf9839607073f4db4e6b01", "transport": "udp", "stream": 106, "initiator_ip": "10.10.22.158", "initiator_port": 62658, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2412, "last_frame": 2413, "first_seen_epoch": "1634913154.53015", "last_seen_epoch": "1634913154.530479", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-e9c5276dbfd421da0adf7596", "transport": "udp", "stream": 107, "initiator_ip": "10.10.22.158", "initiator_port": 138, "responder_ip": "10.10.22.255", "responder_port": 138, "first_frame": 2422, "last_frame": 81241, "first_seen_epoch": "1634913154.545976", "last_seen_epoch": "1634918196.675331", "packets": 12, "bytes": 2835, "initiator_bytes": 2835, "responder_bytes": 0 }, { "flow_id": "flow-4a7f58d1d555de5b542d6d9b", "transport": "tcp", "stream": 117, "initiator_ip": "10.10.22.158", "initiator_port": 49711, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2433, "last_frame": 2440, "first_seen_epoch": "1634913154.568598", "last_seen_epoch": "1634913154.570429", "packets": 8, "bytes": 942, "initiator_bytes": 473, "responder_bytes": 469 }, { "flow_id": "flow-aef31e1a5f5875782e475da2", "transport": "tcp", "stream": 118, "initiator_ip": "10.10.22.158", "initiator_port": 49712, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2441, "last_frame": 2450, "first_seen_epoch": "1634913154.570442", "last_seen_epoch": "1634913154.571905", "packets": 10, "bytes": 2556, "initiator_bytes": 607, "responder_bytes": 1949 }, { "flow_id": "flow-730fb3ff1b26d8fa4c8ddac7", "transport": "tcp", "stream": 119, "initiator_ip": "10.10.22.158", "initiator_port": 49713, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2451, "last_frame": 2462, "first_seen_epoch": "1634913154.571979", "last_seen_epoch": "1634913154.573636", "packets": 12, "bytes": 3987, "initiator_bytes": 1994, "responder_bytes": 1993 }, { "flow_id": "flow-29c22f8de797cbdcb2f70815", "transport": "udp", "stream": 108, "initiator_ip": "10.10.22.158", "initiator_port": 123, "responder_ip": "10.10.22.22", "responder_port": 123, "first_frame": 2471, "last_frame": 81740, "first_seen_epoch": "1634913156.177983", "last_seen_epoch": "1634918277.072953", "packets": 12, "bytes": 1944, "initiator_bytes": 972, "responder_bytes": 972 }, { "flow_id": "flow-ede736a6dd959246b159c9ea", "transport": "udp", "stream": 109, "initiator_ip": "10.10.22.158", "initiator_port": 64110, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2473, "last_frame": 2484, "first_seen_epoch": "1634913156.429653", "last_seen_epoch": "1634913160.525696", "packets": 5, "bytes": 571, "initiator_bytes": 360, "responder_bytes": 211 }, { "flow_id": "flow-55009998173b02caa5adf1b2", "transport": "tcp", "stream": 120, "initiator_ip": "10.10.22.158", "initiator_port": 49714, "responder_ip": "52.182.143.210", "responder_port": 443, "first_frame": 2485, "last_frame": 5281, "first_seen_epoch": "1634913160.531545", "last_seen_epoch": "1634913266.779805", "packets": 44, "bytes": 18796, "initiator_bytes": 10465, "responder_bytes": 8331 }, { "flow_id": "flow-51712af2eb0fed2426e9d867", "transport": "udp", "stream": 110, "initiator_ip": "10.10.22.158", "initiator_port": 60042, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2521, "last_frame": 2522, "first_seen_epoch": "1634913161.020398", "last_seen_epoch": "1634913161.020747", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-09136e4d11faa16c4887474e", "transport": "udp", "stream": 111, "initiator_ip": "10.10.22.158", "initiator_port": 54307, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2523, "last_frame": 2524, "first_seen_epoch": "1634913161.021205", "last_seen_epoch": "1634913161.02142", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-ac299b54cb14ca8eaf7600e7", "transport": "udp", "stream": 112, "initiator_ip": "10.10.22.156", "initiator_port": 51130, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2561, "last_frame": 2562, "first_seen_epoch": "1634913176.519414", "last_seen_epoch": "1634913176.519727", "packets": 2, "bytes": 245, "initiator_bytes": 90, "responder_bytes": 155 }, { "flow_id": "flow-d0b5370e4a73216f116cc965", "transport": "tcp", "stream": 121, "initiator_ip": "10.10.22.156", "initiator_port": 49714, "responder_ip": "52.109.76.32", "responder_port": 443, "first_frame": 2563, "last_frame": 5532, "first_seen_epoch": "1634913176.520431", "last_seen_epoch": "1634913286.697411", "packets": 31, "bytes": 8838, "initiator_bytes": 1694, "responder_bytes": 7144 }, { "flow_id": "flow-470d47d1fc46edeb558e50a1", "transport": "udp", "stream": 113, "initiator_ip": "10.10.22.158", "initiator_port": 54308, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2591, "last_frame": 2592, "first_seen_epoch": "1634913184.36668", "last_seen_epoch": "1634913184.367008", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-62a968129fa76a650a72eace", "transport": "tcp", "stream": 122, "initiator_ip": "10.10.22.158", "initiator_port": 49715, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2593, "last_frame": 2600, "first_seen_epoch": "1634913184.473338", "last_seen_epoch": "1634913184.475822", "packets": 8, "bytes": 888, "initiator_bytes": 463, "responder_bytes": 425 }, { "flow_id": "flow-f5fe6d473b25245ce78cbf63", "transport": "tcp", "stream": 123, "initiator_ip": "10.10.22.158", "initiator_port": 49716, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2601, "last_frame": 2610, "first_seen_epoch": "1634913184.481775", "last_seen_epoch": "1634913184.483324", "packets": 10, "bytes": 2517, "initiator_bytes": 597, "responder_bytes": 1920 }, { "flow_id": "flow-fc2861067f634e127a01b2f7", "transport": "tcp", "stream": 124, "initiator_ip": "10.10.22.158", "initiator_port": 49717, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2611, "last_frame": 2622, "first_seen_epoch": "1634913184.483497", "last_seen_epoch": "1634913184.485379", "packets": 12, "bytes": 3826, "initiator_bytes": 1881, "responder_bytes": 1945 }, { "flow_id": "flow-d1baccbf118c025ff1ec7cb7", "transport": "tcp", "stream": 125, "initiator_ip": "10.10.22.158", "initiator_port": 49718, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 2623, "last_frame": 3263, "first_seen_epoch": "1634913184.566135", "last_seen_epoch": "1634913202.298041", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-d6745d051e34ed73e34b4869", "transport": "udp", "stream": 114, "initiator_ip": "10.10.22.158", "initiator_port": 63173, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2630, "last_frame": 2631, "first_seen_epoch": "1634913184.572748", "last_seen_epoch": "1634913184.573027", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-d6d12df611ecd89a36b71cec", "transport": "tcp", "stream": 126, "initiator_ip": "10.10.22.158", "initiator_port": 49719, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 2632, "last_frame": 3259, "first_seen_epoch": "1634913184.575393", "last_seen_epoch": "1634913199.875625", "packets": 66, "bytes": 15103, "initiator_bytes": 7117, "responder_bytes": 7986 }, { "flow_id": "flow-bcd8e7efbeb85fc9df576684", "transport": "udp", "stream": 115, "initiator_ip": "10.10.22.156", "initiator_port": 57213, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2635, "last_frame": 2697, "first_seen_epoch": "1634913184.576256", "last_seen_epoch": "1634913184.621165", "packets": 2, "bytes": 305, "initiator_bytes": 89, "responder_bytes": 216 }, { "flow_id": "flow-83094791bea0fe03a26cf9f6", "transport": "tcp", "stream": 127, "initiator_ip": "10.10.22.158", "initiator_port": 49720, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2640, "last_frame": 2649, "first_seen_epoch": "1634913184.589294", "last_seen_epoch": "1634913184.590795", "packets": 10, "bytes": 2352, "initiator_bytes": 1968, "responder_bytes": 384 }, { "flow_id": "flow-5a0acdbfe351d9257993a12e", "transport": "tcp", "stream": 128, "initiator_ip": "10.10.22.158", "initiator_port": 49721, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2652, "last_frame": 2663, "first_seen_epoch": "1634913184.592881", "last_seen_epoch": "1634913184.59497", "packets": 12, "bytes": 4115, "initiator_bytes": 2052, "responder_bytes": 2063 }, { "flow_id": "flow-e03c8cdea9d65d4f155cae61", "transport": "tcp", "stream": 129, "initiator_ip": "10.10.22.156", "initiator_port": 49715, "responder_ip": "20.189.173.12", "responder_port": 443, "first_frame": 2707, "last_frame": 2840, "first_seen_epoch": "1634913184.625072", "last_seen_epoch": "1634913185.42374", "packets": 32, "bytes": 14100, "initiator_bytes": 7953, "responder_bytes": 6147 }, { "flow_id": "flow-4b78d585485ddac3e5a6eb34", "transport": "tcp", "stream": 130, "initiator_ip": "10.10.22.158", "initiator_port": 49722, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 2748, "last_frame": 84405, "first_seen_epoch": "1634913184.831382", "last_seen_epoch": "1634918577.213212", "packets": 216, "bytes": 27787, "initiator_bytes": 13891, "responder_bytes": 13896 }, { "flow_id": "flow-40014ca5ca79eff216766bc9", "transport": "tcp", "stream": 131, "initiator_ip": "10.10.22.158", "initiator_port": 49723, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2753, "last_frame": 2764, "first_seen_epoch": "1634913184.834978", "last_seen_epoch": "1634913184.837011", "packets": 12, "bytes": 4038, "initiator_bytes": 2021, "responder_bytes": 2017 }, { "flow_id": "flow-d1adb2e6b1aa729caf52345b", "transport": "tcp", "stream": 132, "initiator_ip": "10.10.22.158", "initiator_port": 49724, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 2765, "last_frame": 2776, "first_seen_epoch": "1634913184.837112", "last_seen_epoch": "1634913184.838809", "packets": 12, "bytes": 3691, "initiator_bytes": 1831, "responder_bytes": 1860 }, { "flow_id": "flow-2ab543c978f0c6dd1ea4e77c", "transport": "tcp", "stream": 133, "initiator_ip": "10.10.22.158", "initiator_port": 49725, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2795, "last_frame": 2842, "first_seen_epoch": "1634913184.960013", "last_seen_epoch": "1634913185.486601", "packets": 15, "bytes": 4405, "initiator_bytes": 3223, "responder_bytes": 1182 }, { "flow_id": "flow-750dc6d4128a8855605ac483", "transport": "tcp", "stream": 134, "initiator_ip": "10.10.22.158", "initiator_port": 49726, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 2804, "last_frame": 2835, "first_seen_epoch": "1634913184.968521", "last_seen_epoch": "1634913185.297193", "packets": 17, "bytes": 4002, "initiator_bytes": 2892, "responder_bytes": 1110 }, { "flow_id": "flow-f810176c8b12a689dd74a97c", "transport": "udp", "stream": 116, "initiator_ip": "10.10.22.158", "initiator_port": 52468, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2847, "last_frame": 2851, "first_seen_epoch": "1634913185.960794", "last_seen_epoch": "1634913186.07216", "packets": 2, "bytes": 223, "initiator_bytes": 82, "responder_bytes": 141 }, { "flow_id": "flow-c50222835077a5ad734dd53f", "transport": "udp", "stream": 117, "initiator_ip": "10.10.22.158", "initiator_port": 54381, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2848, "last_frame": 2849, "first_seen_epoch": "1634913186.043325", "last_seen_epoch": "1634913186.043617", "packets": 2, "bytes": 305, "initiator_bytes": 89, "responder_bytes": 216 }, { "flow_id": "flow-a3dc1b09fb8e32255c66ae9c", "transport": "tcp", "stream": 135, "initiator_ip": "10.10.22.158", "initiator_port": 49727, "responder_ip": "20.189.173.12", "responder_port": 443, "first_frame": 2850, "last_frame": 2905, "first_seen_epoch": "1634913186.052515", "last_seen_epoch": "1634913187.459072", "packets": 23, "bytes": 7973, "initiator_bytes": 2458, "responder_bytes": 5515 }, { "flow_id": "flow-32ebeb14e7edb64fbcd32632", "transport": "tcp", "stream": 136, "initiator_ip": "10.10.22.158", "initiator_port": 49728, "responder_ip": "13.64.180.106", "responder_port": 443, "first_frame": 2852, "last_frame": 77058, "first_seen_epoch": "1634913186.080282", "last_seen_epoch": "1634917743.496065", "packets": 43, "bytes": 10446, "initiator_bytes": 3896, "responder_bytes": 6550 }, { "flow_id": "flow-f7177e0c0f585208a46b6eda", "transport": "udp", "stream": 118, "initiator_ip": "10.10.22.158", "initiator_port": 64983, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2901, "last_frame": 2902, "first_seen_epoch": "1634913187.407198", "last_seen_epoch": "1634913187.444782", "packets": 2, "bytes": 217, "initiator_bytes": 71, "responder_bytes": 146 }, { "flow_id": "flow-c7ed52d65a688b1772f7ef5b", "transport": "tcp", "stream": 137, "initiator_ip": "10.10.22.158", "initiator_port": 49729, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 2903, "last_frame": 5200, "first_seen_epoch": "1634913187.44748", "last_seen_epoch": "1634913251.688371", "packets": 22, "bytes": 9807, "initiator_bytes": 1621, "responder_bytes": 8186 }, { "flow_id": "flow-b315caa63e474993d10aa375", "transport": "udp", "stream": 119, "initiator_ip": "10.10.22.158", "initiator_port": 59183, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2926, "last_frame": 2928, "first_seen_epoch": "1634913189.570179", "last_seen_epoch": "1634913189.645501", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-63887b54cb36203afe638bd3", "transport": "udp", "stream": 120, "initiator_ip": "10.10.22.158", "initiator_port": 65060, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2927, "last_frame": 2929, "first_seen_epoch": "1634913189.590171", "last_seen_epoch": "1634913189.665089", "packets": 2, "bytes": 325, "initiator_bytes": 81, "responder_bytes": 244 }, { "flow_id": "flow-5b086cc53ff6198c98f9d83f", "transport": "tcp", "stream": 138, "initiator_ip": "10.10.22.158", "initiator_port": 49730, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 2930, "last_frame": 6177, "first_seen_epoch": "1634913189.668559", "last_seen_epoch": "1634913319.881111", "packets": 52, "bytes": 17937, "initiator_bytes": 8928, "responder_bytes": 9009 }, { "flow_id": "flow-2a8876de45dcd3bebfab47ec", "transport": "udp", "stream": 121, "initiator_ip": "10.10.22.158", "initiator_port": 62680, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2945, "last_frame": 2957, "first_seen_epoch": "1634913189.859187", "last_seen_epoch": "1634913189.898578", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-960ad0af7679e40153094d2c", "transport": "udp", "stream": 122, "initiator_ip": "10.10.22.158", "initiator_port": 60577, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2948, "last_frame": 2964, "first_seen_epoch": "1634913189.885516", "last_seen_epoch": "1634913189.93666", "packets": 2, "bytes": 241, "initiator_bytes": 81, "responder_bytes": 160 }, { "flow_id": "flow-f126777cda7b2a27b5afa002", "transport": "udp", "stream": 123, "initiator_ip": "10.10.22.156", "initiator_port": 54154, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2953, "last_frame": 2954, "first_seen_epoch": "1634913189.897161", "last_seen_epoch": "1634913189.897467", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1fec4f976ccdf638c60390dc", "transport": "udp", "stream": 124, "initiator_ip": "10.10.22.156", "initiator_port": 50125, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2955, "last_frame": 2956, "first_seen_epoch": "1634913189.89807", "last_seen_epoch": "1634913189.898363", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-fd6f0fd2a28cdc44955d4598", "transport": "tcp", "stream": 139, "initiator_ip": "10.10.22.158", "initiator_port": 49731, "responder_ip": "13.107.4.254", "responder_port": 443, "first_frame": 2958, "last_frame": 6157, "first_seen_epoch": "1634913189.8998", "last_seen_epoch": "1634913314.458439", "packets": 24, "bytes": 6526, "initiator_bytes": 1136, "responder_bytes": 5390 }, { "flow_id": "flow-2835a54401e3dcc94318fb8f", "transport": "udp", "stream": 125, "initiator_ip": "10.10.22.158", "initiator_port": 50556, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2959, "last_frame": 2971, "first_seen_epoch": "1634913189.913522", "last_seen_epoch": "1634913189.957387", "packets": 2, "bytes": 219, "initiator_bytes": 86, "responder_bytes": 133 }, { "flow_id": "flow-ea7ebb2be6119f91fa274915", "transport": "tcp", "stream": 140, "initiator_ip": "10.10.22.158", "initiator_port": 49732, "responder_ip": "52.113.196.254", "responder_port": 443, "first_frame": 2965, "last_frame": 6158, "first_seen_epoch": "1634913189.938393", "last_seen_epoch": "1634913314.965658", "packets": 23, "bytes": 6745, "initiator_bytes": 1086, "responder_bytes": 5659 }, { "flow_id": "flow-1666eaf5971c115351cc8b03", "transport": "udp", "stream": 126, "initiator_ip": "10.10.22.158", "initiator_port": 64306, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2970, "last_frame": 2973, "first_seen_epoch": "1634913189.942723", "last_seen_epoch": "1634913189.984101", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-b4f2386c22dd68fd98389874", "transport": "udp", "stream": 127, "initiator_ip": "10.10.22.158", "initiator_port": 64973, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 2972, "last_frame": 3242, "first_seen_epoch": "1634913189.980872", "last_seen_epoch": "1634913194.082079", "packets": 5, "bytes": 585, "initiator_bytes": 380, "responder_bytes": 205 }, { "flow_id": "flow-713b63c22c84e8100c91a032", "transport": "tcp", "stream": 141, "initiator_ip": "10.10.22.158", "initiator_port": 49733, "responder_ip": "13.107.18.254", "responder_port": 443, "first_frame": 2974, "last_frame": 6155, "first_seen_epoch": "1634913189.986367", "last_seen_epoch": "1634913313.843868", "packets": 24, "bytes": 6795, "initiator_bytes": 1082, "responder_bytes": 5713 }, { "flow_id": "flow-b60473e03adec0a8adf43d81", "transport": "tcp", "stream": 142, "initiator_ip": "10.10.22.158", "initiator_port": 49734, "responder_ip": "131.253.33.254", "responder_port": 443, "first_frame": 2987, "last_frame": 6156, "first_seen_epoch": "1634913190.032815", "last_seen_epoch": "1634913313.962859", "packets": 22, "bytes": 6696, "initiator_bytes": 1037, "responder_bytes": 5659 }, { "flow_id": "flow-c4c15080676639572c12b9a0", "transport": "udp", "stream": 128, "initiator_ip": "10.10.22.158", "initiator_port": 52241, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3051, "last_frame": 3052, "first_seen_epoch": "1634913190.761599", "last_seen_epoch": "1634913190.76192", "packets": 2, "bytes": 233, "initiator_bytes": 87, "responder_bytes": 146 }, { "flow_id": "flow-d1a5bafb5a1ba749dc28dc2c", "transport": "tcp", "stream": 143, "initiator_ip": "10.10.22.158", "initiator_port": 49735, "responder_ip": "13.86.61.82", "responder_port": 443, "first_frame": 3057, "last_frame": 5786, "first_seen_epoch": "1634913190.802635", "last_seen_epoch": "1634913300.840193", "packets": 31, "bytes": 11878, "initiator_bytes": 2317, "responder_bytes": 9561 }, { "flow_id": "flow-a7b1447806864b662ab0cf69", "transport": "udp", "stream": 129, "initiator_ip": "10.10.22.158", "initiator_port": 58866, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3060, "last_frame": 3070, "first_seen_epoch": "1634913190.875812", "last_seen_epoch": "1634913190.962666", "packets": 2, "bytes": 421, "initiator_bytes": 74, "responder_bytes": 347 }, { "flow_id": "flow-2d9de4846c9b3b62cb2b3357", "transport": "tcp", "stream": 144, "initiator_ip": "10.10.22.158", "initiator_port": 49736, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 3061, "last_frame": 6161, "first_seen_epoch": "1634913190.888469", "last_seen_epoch": "1634913316.811513", "packets": 42, "bytes": 20164, "initiator_bytes": 2559, "responder_bytes": 17605 }, { "flow_id": "flow-4933be948f8f85e6444d25c2", "transport": "tcp", "stream": 145, "initiator_ip": "10.10.22.158", "initiator_port": 49737, "responder_ip": "40.126.28.23", "responder_port": 443, "first_frame": 3071, "last_frame": 3163, "first_seen_epoch": "1634913190.966542", "last_seen_epoch": "1634913191.579704", "packets": 40, "bytes": 23646, "initiator_bytes": 8201, "responder_bytes": 15445 }, { "flow_id": "flow-84b1ac9f675ed26934d0cb1a", "transport": "udp", "stream": 130, "initiator_ip": "10.10.22.158", "initiator_port": 63396, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3164, "last_frame": 3185, "first_seen_epoch": "1634913191.654248", "last_seen_epoch": "1634913191.727556", "packets": 2, "bytes": 221, "initiator_bytes": 80, "responder_bytes": 141 }, { "flow_id": "flow-3119c6c87fd536b58ccf84c0", "transport": "tcp", "stream": 146, "initiator_ip": "10.10.22.158", "initiator_port": 49738, "responder_ip": "20.69.137.228", "responder_port": 443, "first_frame": 3186, "last_frame": 6113, "first_seen_epoch": "1634913191.733138", "last_seen_epoch": "1634913301.784376", "packets": 29, "bytes": 12925, "initiator_bytes": 3968, "responder_bytes": 8957 }, { "flow_id": "flow-785b3b8e3642e5c38c75091a", "transport": "udp", "stream": 131, "initiator_ip": "10.10.22.156", "initiator_port": 49564, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3212, "last_frame": 3213, "first_seen_epoch": "1634913193.24357", "last_seen_epoch": "1634913193.33541", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-0d9ce88956b3d5e6be269129", "transport": "tcp", "stream": 147, "initiator_ip": "10.10.22.156", "initiator_port": 49716, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3214, "last_frame": 3240, "first_seen_epoch": "1634913193.335997", "last_seen_epoch": "1634913193.645544", "packets": 27, "bytes": 6955, "initiator_bytes": 2116, "responder_bytes": 4839 }, { "flow_id": "flow-64b833efd60db1bcfcc8b0d7", "transport": "udp", "stream": 132, "initiator_ip": "10.10.22.158", "initiator_port": 59756, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3264, "last_frame": 3265, "first_seen_epoch": "1634913202.399124", "last_seen_epoch": "1634913202.399444", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-133b1889c6c98d58646e366d", "transport": "tcp", "stream": 148, "initiator_ip": "10.10.22.158", "initiator_port": 49740, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3266, "last_frame": 3574, "first_seen_epoch": "1634913202.405621", "last_seen_epoch": "1634913212.423848", "packets": 18, "bytes": 7701, "initiator_bytes": 1070, "responder_bytes": 6631 }, { "flow_id": "flow-a89ab7f8c918a67392444a86", "transport": "tcp", "stream": 149, "initiator_ip": "10.10.22.158", "initiator_port": 49741, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3281, "last_frame": 6187, "first_seen_epoch": "1634913202.654758", "last_seen_epoch": "1634913327.873299", "packets": 26, "bytes": 8305, "initiator_bytes": 1319, "responder_bytes": 6986 }, { "flow_id": "flow-a98b303944ed8941c80fa5f9", "transport": "tcp", "stream": 150, "initiator_ip": "10.10.22.158", "initiator_port": 49742, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3309, "last_frame": 3327, "first_seen_epoch": "1634913203.448174", "last_seen_epoch": "1634913204.112461", "packets": 19, "bytes": 6243, "initiator_bytes": 1038, "responder_bytes": 5205 }, { "flow_id": "flow-cd6cb255dd7d6af0fbc1d1b2", "transport": "udp", "stream": 133, "initiator_ip": "10.10.22.158", "initiator_port": 62748, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3336, "last_frame": 3337, "first_seen_epoch": "1634913207.157887", "last_seen_epoch": "1634913207.158388", "packets": 2, "bytes": 245, "initiator_bytes": 90, "responder_bytes": 155 }, { "flow_id": "flow-60f6f8cf7d3038eb5fa85b25", "transport": "tcp", "stream": 151, "initiator_ip": "10.10.22.158", "initiator_port": 49743, "responder_ip": "52.109.76.32", "responder_port": 443, "first_frame": 3338, "last_frame": 6165, "first_seen_epoch": "1634913207.159098", "last_seen_epoch": "1634913317.363031", "packets": 29, "bytes": 8731, "initiator_bytes": 1641, "responder_bytes": 7090 }, { "flow_id": "flow-f59efd01bfa57b7a9358310a", "transport": "tcp", "stream": 152, "initiator_ip": "10.10.22.157", "initiator_port": 49708, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3363, "last_frame": 3370, "first_seen_epoch": "1634913211.323044", "last_seen_epoch": "1634913211.324629", "packets": 8, "bytes": 880, "initiator_bytes": 459, "responder_bytes": 421 }, { "flow_id": "flow-59c7459688e2a39582ca4c4f", "transport": "tcp", "stream": 153, "initiator_ip": "10.10.22.157", "initiator_port": 49709, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3371, "last_frame": 3380, "first_seen_epoch": "1634913211.33314", "last_seen_epoch": "1634913211.334894", "packets": 10, "bytes": 2469, "initiator_bytes": 593, "responder_bytes": 1876 }, { "flow_id": "flow-cebbf9b0d673a91de7342c68", "transport": "tcp", "stream": 154, "initiator_ip": "10.10.22.157", "initiator_port": 49710, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3381, "last_frame": 3392, "first_seen_epoch": "1634913211.335269", "last_seen_epoch": "1634913211.337422", "packets": 12, "bytes": 3746, "initiator_bytes": 1841, "responder_bytes": 1905 }, { "flow_id": "flow-8f4fb1167ddd51017885691a", "transport": "tcp", "stream": 155, "initiator_ip": "10.10.22.157", "initiator_port": 49711, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 3393, "last_frame": 3912, "first_seen_epoch": "1634913211.536311", "last_seen_epoch": "1634913226.297131", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-28ae3bca4f0a02ed4d030aeb", "transport": "udp", "stream": 134, "initiator_ip": "10.10.22.157", "initiator_port": 65104, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3398, "last_frame": 3400, "first_seen_epoch": "1634913211.537384", "last_seen_epoch": "1634913211.537593", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-cb961739dea5d8f54133abe6", "transport": "tcp", "stream": 156, "initiator_ip": "10.10.22.157", "initiator_port": 49712, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 3402, "last_frame": 5276, "first_seen_epoch": "1634913211.538602", "last_seen_epoch": "1634913266.298157", "packets": 29, "bytes": 7679, "initiator_bytes": 4506, "responder_bytes": 3173 }, { "flow_id": "flow-a49c7af063bec1579b29b491", "transport": "tcp", "stream": 157, "initiator_ip": "10.10.22.157", "initiator_port": 49713, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 3405, "last_frame": 3841, "first_seen_epoch": "1634913211.539812", "last_seen_epoch": "1634913222.393425", "packets": 63, "bytes": 14769, "initiator_bytes": 7035, "responder_bytes": 7734 }, { "flow_id": "flow-e79b32561b0aa32badf07774", "transport": "tcp", "stream": 158, "initiator_ip": "10.10.22.157", "initiator_port": 49714, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3416, "last_frame": 3437, "first_seen_epoch": "1634913211.567703", "last_seen_epoch": "1634913211.570662", "packets": 12, "bytes": 4035, "initiator_bytes": 2012, "responder_bytes": 2023 }, { "flow_id": "flow-a0d55a54141bcf99c644a506", "transport": "tcp", "stream": 159, "initiator_ip": "10.10.22.157", "initiator_port": 49715, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3419, "last_frame": 3433, "first_seen_epoch": "1634913211.56916", "last_seen_epoch": "1634913211.570207", "packets": 10, "bytes": 2312, "initiator_bytes": 1928, "responder_bytes": 384 }, { "flow_id": "flow-d6c31ee3a814151a1119c428", "transport": "tcp", "stream": 160, "initiator_ip": "10.10.22.157", "initiator_port": 49716, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 3503, "last_frame": 84403, "first_seen_epoch": "1634913211.652866", "last_seen_epoch": "1634918577.187539", "packets": 199, "bytes": 24735, "initiator_bytes": 12239, "responder_bytes": 12496 }, { "flow_id": "flow-861ea3f60b43384bd1f5bcae", "transport": "tcp", "stream": 161, "initiator_ip": "10.10.22.157", "initiator_port": 49717, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3508, "last_frame": 3519, "first_seen_epoch": "1634913211.655726", "last_seen_epoch": "1634913211.657584", "packets": 12, "bytes": 3958, "initiator_bytes": 1981, "responder_bytes": 1977 }, { "flow_id": "flow-6a697e6293aef4f463702b37", "transport": "tcp", "stream": 162, "initiator_ip": "10.10.22.157", "initiator_port": 49718, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 3520, "last_frame": 3529, "first_seen_epoch": "1634913211.657648", "last_seen_epoch": "1634913211.659188", "packets": 10, "bytes": 3503, "initiator_bytes": 1737, "responder_bytes": 1766 }, { "flow_id": "flow-723827e35c08a3e6a614f767", "transport": "tcp", "stream": 163, "initiator_ip": "10.10.22.157", "initiator_port": 49719, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 3541, "last_frame": 3573, "first_seen_epoch": "1634913211.913141", "last_seen_epoch": "1634913212.260561", "packets": 16, "bytes": 4393, "initiator_bytes": 3265, "responder_bytes": 1128 }, { "flow_id": "flow-ec338b13809222e92080088b", "transport": "tcp", "stream": 164, "initiator_ip": "10.10.22.157", "initiator_port": 49720, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 3550, "last_frame": 3569, "first_seen_epoch": "1634913211.923899", "last_seen_epoch": "1634913212.254921", "packets": 17, "bytes": 3962, "initiator_bytes": 2852, "responder_bytes": 1110 }, { "flow_id": "flow-83a135ef4b175a4da13404a0", "transport": "udp", "stream": 135, "initiator_ip": "10.10.22.157", "initiator_port": 59719, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3575, "last_frame": 3576, "first_seen_epoch": "1634913212.560767", "last_seen_epoch": "1634913212.561085", "packets": 2, "bytes": 223, "initiator_bytes": 82, "responder_bytes": 141 }, { "flow_id": "flow-5b2a99cdd584dcb503e4becc", "transport": "tcp", "stream": 165, "initiator_ip": "10.10.22.157", "initiator_port": 49721, "responder_ip": "13.64.180.106", "responder_port": 443, "first_frame": 3577, "last_frame": 77236, "first_seen_epoch": "1634913212.563803", "last_seen_epoch": "1634917782.613216", "packets": 45, "bytes": 10558, "initiator_bytes": 3951, "responder_bytes": 6607 }, { "flow_id": "flow-704adf05863e4c0014aa1d25", "transport": "udp", "stream": 136, "initiator_ip": "10.10.22.157", "initiator_port": 50927, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3597, "last_frame": 3598, "first_seen_epoch": "1634913212.872362", "last_seen_epoch": "1634913212.913933", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-40e2e0a4ac507f027a9aaab3", "transport": "tcp", "stream": 166, "initiator_ip": "10.10.22.157", "initiator_port": 49722, "responder_ip": "13.89.179.9", "responder_port": 443, "first_frame": 3599, "last_frame": 3630, "first_seen_epoch": "1634913212.921021", "last_seen_epoch": "1634913213.853027", "packets": 23, "bytes": 7883, "initiator_bytes": 2367, "responder_bytes": 5516 }, { "flow_id": "flow-19fe1ce860818d49e6ddd51f", "transport": "udp", "stream": 137, "initiator_ip": "10.10.22.157", "initiator_port": 62525, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3631, "last_frame": 3632, "first_seen_epoch": "1634913213.982362", "last_seen_epoch": "1634913214.046853", "packets": 2, "bytes": 217, "initiator_bytes": 71, "responder_bytes": 146 }, { "flow_id": "flow-5ac89be3d86bcd197d3107a5", "transport": "tcp", "stream": 167, "initiator_ip": "10.10.22.157", "initiator_port": 49723, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 3633, "last_frame": 5524, "first_seen_epoch": "1634913214.051745", "last_seen_epoch": "1634913282.316974", "packets": 25, "bytes": 9907, "initiator_bytes": 1741, "responder_bytes": 8166 }, { "flow_id": "flow-4cb220b612d647e309b93f44", "transport": "udp", "stream": 138, "initiator_ip": "10.10.22.157", "initiator_port": 58951, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3665, "last_frame": 3666, "first_seen_epoch": "1634913217.546954", "last_seen_epoch": "1634913217.547326", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-98935f3023680501dccdcb75", "transport": "udp", "stream": 139, "initiator_ip": "10.10.22.157", "initiator_port": 54569, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3667, "last_frame": 3668, "first_seen_epoch": "1634913218.473259", "last_seen_epoch": "1634913218.473549", "packets": 2, "bytes": 233, "initiator_bytes": 87, "responder_bytes": 146 }, { "flow_id": "flow-0ef9208e502a68f1be8bfb87", "transport": "tcp", "stream": 168, "initiator_ip": "10.10.22.157", "initiator_port": 49724, "responder_ip": "13.86.61.82", "responder_port": 443, "first_frame": 3669, "last_frame": 6191, "first_seen_epoch": "1634913218.477223", "last_seen_epoch": "1634913328.459212", "packets": 33, "bytes": 12244, "initiator_bytes": 2521, "responder_bytes": 9723 }, { "flow_id": "flow-4e3c3a08be898268e54c7fc7", "transport": "udp", "stream": 140, "initiator_ip": "10.10.22.157", "initiator_port": 53438, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3670, "last_frame": 3671, "first_seen_epoch": "1634913218.672739", "last_seen_epoch": "1634913218.673067", "packets": 2, "bytes": 421, "initiator_bytes": 74, "responder_bytes": 347 }, { "flow_id": "flow-e86a48a23155755dce3add8e", "transport": "tcp", "stream": 169, "initiator_ip": "10.10.22.157", "initiator_port": 49725, "responder_ip": "40.126.28.22", "responder_port": 443, "first_frame": 3672, "last_frame": 3803, "first_seen_epoch": "1634913218.679715", "last_seen_epoch": "1634913219.880641", "packets": 41, "bytes": 23696, "initiator_bytes": 8251, "responder_bytes": 15445 }, { "flow_id": "flow-cc6838f0755bed7c5cddec90", "transport": "tcp", "stream": 170, "initiator_ip": "10.10.22.157", "initiator_port": 49726, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 3673, "last_frame": 6387, "first_seen_epoch": "1634913218.689199", "last_seen_epoch": "1634913347.475849", "packets": 43, "bytes": 20740, "initiator_bytes": 2614, "responder_bytes": 18126 }, { "flow_id": "flow-13ea5d2f8d614acddfadc697", "transport": "tcp", "stream": 171, "initiator_ip": "10.10.22.157", "initiator_port": 49727, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 3678, "last_frame": 6382, "first_seen_epoch": "1634913218.776034", "last_seen_epoch": "1634913347.116822", "packets": 49, "bytes": 17779, "initiator_bytes": 8820, "responder_bytes": 8959 }, { "flow_id": "flow-d8f097d09d42f521c615a005", "transport": "tcp", "stream": 172, "initiator_ip": "10.10.22.157", "initiator_port": 49728, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 3683, "last_frame": 6213, "first_seen_epoch": "1634913218.821597", "last_seen_epoch": "1634913343.433286", "packets": 25, "bytes": 7552, "initiator_bytes": 1131, "responder_bytes": 6421 }, { "flow_id": "flow-0843a72a815397b4c4fce183", "transport": "udp", "stream": 141, "initiator_ip": "10.10.22.157", "initiator_port": 65449, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3804, "last_frame": 3805, "first_seen_epoch": "1634913219.965376", "last_seen_epoch": "1634913219.96569", "packets": 2, "bytes": 221, "initiator_bytes": 80, "responder_bytes": 141 }, { "flow_id": "flow-331202c19de89e499fa52594", "transport": "tcp", "stream": 173, "initiator_ip": "10.10.22.157", "initiator_port": 49729, "responder_ip": "20.69.137.228", "responder_port": 443, "first_frame": 3806, "last_frame": 6200, "first_seen_epoch": "1634913219.969318", "last_seen_epoch": "1634913330.050809", "packets": 32, "bytes": 12621, "initiator_bytes": 4208, "responder_bytes": 8413 }, { "flow_id": "flow-8ba3cfc0ad72ab08616b24ba", "transport": "udp", "stream": 142, "initiator_ip": "10.10.22.158", "initiator_port": 60357, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3812, "last_frame": 3813, "first_seen_epoch": "1634913221.034974", "last_seen_epoch": "1634913221.035309", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-61c64b609dee9f3c2a9c879c", "transport": "udp", "stream": 143, "initiator_ip": "10.10.22.158", "initiator_port": 60980, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3814, "last_frame": 3815, "first_seen_epoch": "1634913221.035679", "last_seen_epoch": "1634913221.035924", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-997854e67c9175af0cc50e83", "transport": "udp", "stream": 144, "initiator_ip": "10.10.22.158", "initiator_port": 63603, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3877, "last_frame": 3879, "first_seen_epoch": "1634913224.579385", "last_seen_epoch": "1634913224.789705", "packets": 2, "bytes": 412, "initiator_bytes": 92, "responder_bytes": 320 }, { "flow_id": "flow-c31d599860b2133b4f5402da", "transport": "tcp", "stream": 174, "initiator_ip": "10.10.22.158", "initiator_port": 49744, "responder_ip": "173.223.109.212", "responder_port": 443, "first_frame": 3880, "last_frame": 11808, "first_seen_epoch": "1634913224.790865", "last_seen_epoch": "1634913725.802261", "packets": 22, "bytes": 7778, "initiator_bytes": 1858, "responder_bytes": 5920 }, { "flow_id": "flow-8ea5bb7d9564525661cc260b", "transport": "udp", "stream": 145, "initiator_ip": "10.10.22.157", "initiator_port": 49507, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3935, "last_frame": 3936, "first_seen_epoch": "1634913230.480309", "last_seen_epoch": "1634913230.480668", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-63b238b70857146a292d9c77", "transport": "tcp", "stream": 175, "initiator_ip": "10.10.22.157", "initiator_port": 49730, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3937, "last_frame": 4361, "first_seen_epoch": "1634913230.494001", "last_seen_epoch": "1634913240.546135", "packets": 18, "bytes": 7699, "initiator_bytes": 1070, "responder_bytes": 6629 }, { "flow_id": "flow-bcd835bdb623e0c0c69fc0bb", "transport": "udp", "stream": 146, "initiator_ip": "10.10.22.158", "initiator_port": 58280, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 3942, "last_frame": 3943, "first_seen_epoch": "1634913230.58849", "last_seen_epoch": "1634913230.665301", "packets": 2, "bytes": 306, "initiator_bytes": 89, "responder_bytes": 217 }, { "flow_id": "flow-070ce270b3b47df5f49af959", "transport": "tcp", "stream": 176, "initiator_ip": "10.10.22.158", "initiator_port": 49745, "responder_ip": "51.132.193.105", "responder_port": 443, "first_frame": 3944, "last_frame": 4099, "first_seen_epoch": "1634913230.665956", "last_seen_epoch": "1634913233.800075", "packets": 49, "bytes": 24312, "initiator_bytes": 16300, "responder_bytes": 8012 }, { "flow_id": "flow-73d72774f1e30cd513af4c5c", "transport": "tcp", "stream": 177, "initiator_ip": "10.10.22.157", "initiator_port": 49731, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3958, "last_frame": 6511, "first_seen_epoch": "1634913230.83959", "last_seen_epoch": "1634913355.210608", "packets": 10, "bytes": 4465, "initiator_bytes": 444, "responder_bytes": 4021 }, { "flow_id": "flow-501f965a0cb2a5aa63d7aeb3", "transport": "tcp", "stream": 178, "initiator_ip": "10.10.22.157", "initiator_port": 49732, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 3978, "last_frame": 4119, "first_seen_epoch": "1634913231.54183", "last_seen_epoch": "1634913235.022238", "packets": 21, "bytes": 6375, "initiator_bytes": 1170, "responder_bytes": 5205 }, { "flow_id": "flow-b810e1ee2076aac24b5f7c7e", "transport": "tcp", "stream": 179, "initiator_ip": "10.10.22.157", "initiator_port": 49733, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 4004, "last_frame": 5150, "first_seen_epoch": "1634913232.377211", "last_seen_epoch": "1634913246.297868", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-601104cc4eb725dda9f10a37", "transport": "udp", "stream": 147, "initiator_ip": "10.10.22.157", "initiator_port": 50974, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4022, "last_frame": 4026, "first_seen_epoch": "1634913232.617476", "last_seen_epoch": "1634913232.720993", "packets": 2, "bytes": 312, "initiator_bytes": 83, "responder_bytes": 229 }, { "flow_id": "flow-f1fe57af94014d325c9ef215", "transport": "tcp", "stream": 180, "initiator_ip": "10.10.22.157", "initiator_port": 49734, "responder_ip": "40.90.64.98", "responder_port": 443, "first_frame": 4027, "last_frame": 4075, "first_seen_epoch": "1634913232.724712", "last_seen_epoch": "1634913233.478939", "packets": 30, "bytes": 10021, "initiator_bytes": 2855, "responder_bytes": 7166 }, { "flow_id": "flow-c0feae8bc648ead204895719", "transport": "tcp", "stream": 181, "initiator_ip": "10.10.22.158", "initiator_port": 49746, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 4028, "last_frame": 5614, "first_seen_epoch": "1634913232.765949", "last_seen_epoch": "1634913293.821624", "packets": 29, "bytes": 11061, "initiator_bytes": 3257, "responder_bytes": 7804 }, { "flow_id": "flow-369b6a4a3268778c8236a6ec", "transport": "tcp", "stream": 182, "initiator_ip": "10.10.22.156", "initiator_port": 49717, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 4130, "last_frame": 5193, "first_seen_epoch": "1634913238.667909", "last_seen_epoch": "1634913251.016936", "packets": 17, "bytes": 2258, "initiator_bytes": 1018, "responder_bytes": 1240 }, { "flow_id": "flow-51e0c484fbcc5963b14c6850", "transport": "tcp", "stream": 183, "initiator_ip": "10.10.22.156", "initiator_port": 49718, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 4137, "last_frame": 5299, "first_seen_epoch": "1634913238.669818", "last_seen_epoch": "1634913271.018234", "packets": 29, "bytes": 7657, "initiator_bytes": 4516, "responder_bytes": 3141 }, { "flow_id": "flow-01dde483c3f027c3c6817492", "transport": "udp", "stream": 148, "initiator_ip": "10.10.22.156", "initiator_port": 49565, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 4148, "last_frame": 4149, "first_seen_epoch": "1634913238.805618", "last_seen_epoch": "1634913238.805981", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-2a95f468af43f0f8f5f92701", "transport": "tcp", "stream": 184, "initiator_ip": "10.10.22.156", "initiator_port": 49719, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4150, "last_frame": 4157, "first_seen_epoch": "1634913238.911977", "last_seen_epoch": "1634913238.913495", "packets": 8, "bytes": 882, "initiator_bytes": 460, "responder_bytes": 422 }, { "flow_id": "flow-4f382bc9a092fb42be8c3080", "transport": "tcp", "stream": 185, "initiator_ip": "10.10.22.156", "initiator_port": 49720, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4158, "last_frame": 4167, "first_seen_epoch": "1634913238.919748", "last_seen_epoch": "1634913238.921125", "packets": 10, "bytes": 2481, "initiator_bytes": 594, "responder_bytes": 1887 }, { "flow_id": "flow-1329daf2ed3c82d45ce9a2fd", "transport": "tcp", "stream": 186, "initiator_ip": "10.10.22.156", "initiator_port": 49721, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4168, "last_frame": 4179, "first_seen_epoch": "1634913238.921379", "last_seen_epoch": "1634913238.92266", "packets": 12, "bytes": 3766, "initiator_bytes": 1851, "responder_bytes": 1915 }, { "flow_id": "flow-13adf954a12eb3c33bb37a8c", "transport": "udp", "stream": 149, "initiator_ip": "10.10.22.156", "initiator_port": 62898, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4180, "last_frame": 4181, "first_seen_epoch": "1634913239.033435", "last_seen_epoch": "1634913239.033711", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-c879100f647c75c48b71dd37", "transport": "tcp", "stream": 187, "initiator_ip": "10.10.22.156", "initiator_port": 49722, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 4182, "last_frame": 5187, "first_seen_epoch": "1634913239.035023", "last_seen_epoch": "1634913250.377386", "packets": 66, "bytes": 15075, "initiator_bytes": 7105, "responder_bytes": 7970 }, { "flow_id": "flow-707c45a9101289d6b29c22dc", "transport": "tcp", "stream": 188, "initiator_ip": "10.10.22.156", "initiator_port": 49723, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4191, "last_frame": 4200, "first_seen_epoch": "1634913239.057408", "last_seen_epoch": "1634913239.058585", "packets": 10, "bytes": 2322, "initiator_bytes": 1938, "responder_bytes": 384 }, { "flow_id": "flow-58a474df2dc65d7ff8e6a603", "transport": "tcp", "stream": 189, "initiator_ip": "10.10.22.156", "initiator_port": 49724, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4201, "last_frame": 4212, "first_seen_epoch": "1634913239.059733", "last_seen_epoch": "1634913239.061755", "packets": 12, "bytes": 4055, "initiator_bytes": 2022, "responder_bytes": 2033 }, { "flow_id": "flow-2ffee6a7436fd92831c9ca8d", "transport": "tcp", "stream": 190, "initiator_ip": "10.10.22.156", "initiator_port": 49725, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 4285, "last_frame": 84401, "first_seen_epoch": "1634913239.269805", "last_seen_epoch": "1634918576.796168", "packets": 183, "bytes": 20651, "initiator_bytes": 11614, "responder_bytes": 9037 }, { "flow_id": "flow-66f502b7e4aa3e90d2f8a996", "transport": "tcp", "stream": 191, "initiator_ip": "10.10.22.156", "initiator_port": 49726, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4290, "last_frame": 4301, "first_seen_epoch": "1634913239.275539", "last_seen_epoch": "1634913239.27752", "packets": 12, "bytes": 3978, "initiator_bytes": 1991, "responder_bytes": 1987 }, { "flow_id": "flow-5d68acbc37b084efc1c7283b", "transport": "tcp", "stream": 192, "initiator_ip": "10.10.22.156", "initiator_port": 49727, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 4302, "last_frame": 4313, "first_seen_epoch": "1634913239.27776", "last_seen_epoch": "1634913239.278995", "packets": 12, "bytes": 3631, "initiator_bytes": 1801, "responder_bytes": 1830 }, { "flow_id": "flow-99ca9cb459307686f583620c", "transport": "tcp", "stream": 193, "initiator_ip": "10.10.22.156", "initiator_port": 49728, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 4325, "last_frame": 4354, "first_seen_epoch": "1634913239.400058", "last_seen_epoch": "1634913239.774889", "packets": 15, "bytes": 4405, "initiator_bytes": 3223, "responder_bytes": 1182 }, { "flow_id": "flow-55730bf4d1f012c929f5a42c", "transport": "tcp", "stream": 194, "initiator_ip": "10.10.22.156", "initiator_port": 49729, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 4334, "last_frame": 4352, "first_seen_epoch": "1634913239.411861", "last_seen_epoch": "1634913239.768873", "packets": 15, "bytes": 3864, "initiator_bytes": 2808, "responder_bytes": 1056 }, { "flow_id": "flow-a2549fa84ecd0d068d3af951", "transport": "udp", "stream": 150, "initiator_ip": "10.10.22.156", "initiator_port": 54845, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4355, "last_frame": 4359, "first_seen_epoch": "1634913240.431527", "last_seen_epoch": "1634913240.500255", "packets": 2, "bytes": 306, "initiator_bytes": 89, "responder_bytes": 217 }, { "flow_id": "flow-55fc929f4ee1b5765d9bc137", "transport": "udp", "stream": 151, "initiator_ip": "10.10.22.156", "initiator_port": 50448, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4356, "last_frame": 4357, "first_seen_epoch": "1634913240.483165", "last_seen_epoch": "1634913240.483552", "packets": 2, "bytes": 223, "initiator_bytes": 82, "responder_bytes": 141 }, { "flow_id": "flow-a3a6899d24663c792e118ab2", "transport": "tcp", "stream": 195, "initiator_ip": "10.10.22.156", "initiator_port": 49730, "responder_ip": "13.64.180.106", "responder_port": 443, "first_frame": 4358, "last_frame": 78033, "first_seen_epoch": "1634913240.486602", "last_seen_epoch": "1634917810.536441", "packets": 45, "bytes": 10555, "initiator_bytes": 3949, "responder_bytes": 6606 }, { "flow_id": "flow-40e76715fe69cf173994bff3", "transport": "tcp", "stream": 196, "initiator_ip": "10.10.22.156", "initiator_port": 49731, "responder_ip": "51.132.193.105", "responder_port": 443, "first_frame": 4360, "last_frame": 4437, "first_seen_epoch": "1634913240.518241", "last_seen_epoch": "1634913242.435187", "packets": 23, "bytes": 8115, "initiator_bytes": 2549, "responder_bytes": 5566 }, { "flow_id": "flow-825a7d3f55ae3dccd901725d", "transport": "udp", "stream": 152, "initiator_ip": "10.10.22.156", "initiator_port": 50585, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4399, "last_frame": 4400, "first_seen_epoch": "1634913241.439752", "last_seen_epoch": "1634913241.440038", "packets": 2, "bytes": 217, "initiator_bytes": 71, "responder_bytes": 146 }, { "flow_id": "flow-10687376f9d61236849da3d5", "transport": "tcp", "stream": 197, "initiator_ip": "10.10.22.156", "initiator_port": 49732, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 4401, "last_frame": 6154, "first_seen_epoch": "1634913241.445226", "last_seen_epoch": "1634913312.922282", "packets": 23, "bytes": 9834, "initiator_bytes": 1687, "responder_bytes": 8147 }, { "flow_id": "flow-e78b4460b95c35c06556c104", "transport": "udp", "stream": 153, "initiator_ip": "10.10.22.156", "initiator_port": 51588, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4438, "last_frame": 4439, "first_seen_epoch": "1634913243.673192", "last_seen_epoch": "1634913243.673512", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-f42d745174dbbdcee97d9e8b", "transport": "tcp", "stream": 198, "initiator_ip": "10.10.22.156", "initiator_port": 49733, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 4440, "last_frame": 6637, "first_seen_epoch": "1634913243.693533", "last_seen_epoch": "1634913374.256877", "packets": 218, "bytes": 158413, "initiator_bytes": 13997, "responder_bytes": 144416 }, { "flow_id": "flow-086db3474b97d4237f61c523", "transport": "udp", "stream": 154, "initiator_ip": "10.10.22.156", "initiator_port": 50050, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4445, "last_frame": 4460, "first_seen_epoch": "1634913243.81624", "last_seen_epoch": "1634913243.877808", "packets": 2, "bytes": 288, "initiator_bytes": 79, "responder_bytes": 209 }, { "flow_id": "flow-96728608f4389743e26b988f", "transport": "udp", "stream": 155, "initiator_ip": "10.10.22.156", "initiator_port": 64821, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4453, "last_frame": 4462, "first_seen_epoch": "1634913243.853823", "last_seen_epoch": "1634913243.907353", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-234e1e1b8c1300fd2639cbcb", "transport": "tcp", "stream": 199, "initiator_ip": "10.10.22.156", "initiator_port": 49734, "responder_ip": "23.47.52.13", "responder_port": 443, "first_frame": 4461, "last_frame": 29237, "first_seen_epoch": "1634913243.878902", "last_seen_epoch": "1634915039.83449", "packets": 28, "bytes": 6738, "initiator_bytes": 1214, "responder_bytes": 5524 }, { "flow_id": "flow-8787348476c299e6aef83c99", "transport": "tcp", "stream": 200, "initiator_ip": "10.10.22.156", "initiator_port": 49735, "responder_ip": "13.107.6.254", "responder_port": 443, "first_frame": 4463, "last_frame": 6635, "first_seen_epoch": "1634913243.908901", "last_seen_epoch": "1634913371.626687", "packets": 22, "bytes": 6687, "initiator_bytes": 1028, "responder_bytes": 5659 }, { "flow_id": "flow-d7cfaed66b52ed9909349f00", "transport": "udp", "stream": 156, "initiator_ip": "10.10.22.156", "initiator_port": 56575, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4474, "last_frame": 4483, "first_seen_epoch": "1634913243.925895", "last_seen_epoch": "1634913243.976966", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-5074770c2866985e862483a7", "transport": "udp", "stream": 157, "initiator_ip": "10.10.22.156", "initiator_port": 58923, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4475, "last_frame": 4482, "first_seen_epoch": "1634913243.932548", "last_seen_epoch": "1634913243.9769", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-3d3d899c1af2beea31b8a750", "transport": "udp", "stream": 158, "initiator_ip": "10.10.22.156", "initiator_port": 51947, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4476, "last_frame": 4540, "first_seen_epoch": "1634913243.935915", "last_seen_epoch": "1634913244.024012", "packets": 2, "bytes": 216, "initiator_bytes": 83, "responder_bytes": 133 }, { "flow_id": "flow-1aa72868839180bbec54a9dc", "transport": "udp", "stream": 159, "initiator_ip": "10.10.22.156", "initiator_port": 59301, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4477, "last_frame": 4478, "first_seen_epoch": "1634913243.956564", "last_seen_epoch": "1634913243.95686", "packets": 2, "bytes": 249, "initiator_bytes": 87, "responder_bytes": 162 }, { "flow_id": "flow-155427d0af44bbbb021495cf", "transport": "tcp", "stream": 201, "initiator_ip": "10.10.22.156", "initiator_port": 49736, "responder_ip": "72.21.81.200", "responder_port": 443, "first_frame": 4479, "last_frame": 29235, "first_seen_epoch": "1634913243.958401", "last_seen_epoch": "1634915039.834332", "packets": 28, "bytes": 9252, "initiator_bytes": 1222, "responder_bytes": 8030 }, { "flow_id": "flow-ee85a3c5616d7150bbdec73d", "transport": "tcp", "stream": 202, "initiator_ip": "10.10.22.156", "initiator_port": 49737, "responder_ip": "13.107.42.254", "responder_port": 443, "first_frame": 4484, "last_frame": 6629, "first_seen_epoch": "1634913243.977918", "last_seen_epoch": "1634913369.751143", "packets": 23, "bytes": 6741, "initiator_bytes": 1082, "responder_bytes": 5659 }, { "flow_id": "flow-c7bf42ac612197cccf43f6b8", "transport": "udp", "stream": 160, "initiator_ip": "10.10.22.156", "initiator_port": 50150, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4504, "last_frame": 17758, "first_seen_epoch": "1634913243.996774", "last_seen_epoch": "1634913995.165577", "packets": 4, "bytes": 458, "initiator_bytes": 155, "responder_bytes": 303 }, { "flow_id": "flow-58a1efb28361caddaa30687f", "transport": "tcp", "stream": 203, "initiator_ip": "10.10.22.156", "initiator_port": 49738, "responder_ip": "13.107.18.254", "responder_port": 443, "first_frame": 4505, "last_frame": 4777, "first_seen_epoch": "1634913243.997854", "last_seen_epoch": "1634913244.362129", "packets": 22, "bytes": 6687, "initiator_bytes": 1082, "responder_bytes": 5605 }, { "flow_id": "flow-720485e4d98614ac12116a25", "transport": "udp", "stream": 161, "initiator_ip": "10.10.22.156", "initiator_port": 56432, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4559, "last_frame": 4631, "first_seen_epoch": "1634913244.0509", "last_seen_epoch": "1634913244.108653", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-418969e49d5f25acfd777352", "transport": "udp", "stream": 162, "initiator_ip": "10.10.22.156", "initiator_port": 64288, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4560, "last_frame": 4632, "first_seen_epoch": "1634913244.053159", "last_seen_epoch": "1634913244.111711", "packets": 2, "bytes": 221, "initiator_bytes": 77, "responder_bytes": 144 }, { "flow_id": "flow-e6a959c0090886b1645c1d08", "transport": "udp", "stream": 163, "initiator_ip": "10.10.22.156", "initiator_port": 61445, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4567, "last_frame": 4568, "first_seen_epoch": "1634913244.055601", "last_seen_epoch": "1634913244.055822", "packets": 2, "bytes": 241, "initiator_bytes": 81, "responder_bytes": 160 }, { "flow_id": "flow-2833ad676f583f56dbba5746", "transport": "tcp", "stream": 204, "initiator_ip": "10.10.22.156", "initiator_port": 49739, "responder_ip": "52.113.196.254", "responder_port": 443, "first_frame": 4580, "last_frame": 6634, "first_seen_epoch": "1634913244.066536", "last_seen_epoch": "1634913371.529731", "packets": 25, "bytes": 6853, "initiator_bytes": 1140, "responder_bytes": 5713 }, { "flow_id": "flow-3094f8a34433eecae2fce71a", "transport": "udp", "stream": 164, "initiator_ip": "10.10.22.156", "initiator_port": 57225, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4585, "last_frame": 4651, "first_seen_epoch": "1634913244.069281", "last_seen_epoch": "1634913244.151253", "packets": 2, "bytes": 306, "initiator_bytes": 77, "responder_bytes": 229 }, { "flow_id": "flow-8706e39447ad5755c0b1e2a6", "transport": "tcp", "stream": 205, "initiator_ip": "10.10.22.156", "initiator_port": 49740, "responder_ip": "13.107.136.254", "responder_port": 443, "first_frame": 4589, "last_frame": 6633, "first_seen_epoch": "1634913244.071879", "last_seen_epoch": "1634913371.424697", "packets": 22, "bytes": 6689, "initiator_bytes": 1030, "responder_bytes": 5659 }, { "flow_id": "flow-0352fe429caba1eeb65d7d13", "transport": "tcp", "stream": 206, "initiator_ip": "10.10.22.156", "initiator_port": 49741, "responder_ip": "13.107.43.14", "responder_port": 443, "first_frame": 4592, "last_frame": 6630, "first_seen_epoch": "1634913244.074024", "last_seen_epoch": "1634913369.784802", "packets": 23, "bytes": 6068, "initiator_bytes": 1088, "responder_bytes": 4980 }, { "flow_id": "flow-d4fb518d1c58df5688617e5f", "transport": "tcp", "stream": 207, "initiator_ip": "10.10.22.156", "initiator_port": 49742, "responder_ip": "204.79.197.254", "responder_port": 443, "first_frame": 4663, "last_frame": 6636, "first_seen_epoch": "1634913244.187843", "last_seen_epoch": "1634913372.308536", "packets": 25, "bytes": 6849, "initiator_bytes": 1136, "responder_bytes": 5713 }, { "flow_id": "flow-4b661efd51aa6ef55412a200", "transport": "tcp", "stream": 208, "initiator_ip": "10.10.22.156", "initiator_port": 49743, "responder_ip": "13.107.246.254", "responder_port": 443, "first_frame": 4666, "last_frame": 4812, "first_seen_epoch": "1634913244.189409", "last_seen_epoch": "1634913244.501579", "packets": 20, "bytes": 6579, "initiator_bytes": 974, "responder_bytes": 5605 }, { "flow_id": "flow-a9962031a78cf6bd4e65131c", "transport": "tcp", "stream": 209, "initiator_ip": "10.10.22.156", "initiator_port": 49744, "responder_ip": "20.140.56.70", "responder_port": 443, "first_frame": 4670, "last_frame": 6620, "first_seen_epoch": "1634913244.203474", "last_seen_epoch": "1634913366.47366", "packets": 21, "bytes": 5252, "initiator_bytes": 1028, "responder_bytes": 4224 }, { "flow_id": "flow-d382d565baf20e96e2584dac", "transport": "udp", "stream": 165, "initiator_ip": "10.10.22.156", "initiator_port": 49466, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4813, "last_frame": 4817, "first_seen_epoch": "1634913244.827055", "last_seen_epoch": "1634913244.901806", "packets": 2, "bytes": 233, "initiator_bytes": 87, "responder_bytes": 146 }, { "flow_id": "flow-2d6ddb0f91488056be5f9f58", "transport": "udp", "stream": 166, "initiator_ip": "10.10.22.156", "initiator_port": 63248, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4816, "last_frame": 4819, "first_seen_epoch": "1634913244.864837", "last_seen_epoch": "1634913244.943476", "packets": 2, "bytes": 421, "initiator_bytes": 74, "responder_bytes": 347 }, { "flow_id": "flow-22a52f8de4212d40b6f2831b", "transport": "tcp", "stream": 210, "initiator_ip": "10.10.22.156", "initiator_port": 49745, "responder_ip": "20.190.4.251", "responder_port": 443, "first_frame": 4818, "last_frame": 6509, "first_seen_epoch": "1634913244.908223", "last_seen_epoch": "1634913354.902431", "packets": 31, "bytes": 12112, "initiator_bytes": 2309, "responder_bytes": 9803 }, { "flow_id": "flow-dbae9c3ef15cf70e52b3cddc", "transport": "tcp", "stream": 211, "initiator_ip": "10.10.22.156", "initiator_port": 49746, "responder_ip": "40.126.28.20", "responder_port": 443, "first_frame": 4820, "last_frame": 5030, "first_seen_epoch": "1634913244.947375", "last_seen_epoch": "1634913245.496379", "packets": 40, "bytes": 23643, "initiator_bytes": 8198, "responder_bytes": 15445 }, { "flow_id": "flow-63377812dc5e2d8c77ff54c9", "transport": "tcp", "stream": 212, "initiator_ip": "10.10.22.156", "initiator_port": 49747, "responder_ip": "204.79.197.203", "responder_port": 443, "first_frame": 4821, "last_frame": 5015, "first_seen_epoch": "1634913244.957999", "last_seen_epoch": "1634913245.449887", "packets": 43, "bytes": 20625, "initiator_bytes": 2615, "responder_bytes": 18010 }, { "flow_id": "flow-cf9325b60a8c28e0c0c42989", "transport": "udp", "stream": 167, "initiator_ip": "10.10.22.156", "initiator_port": 63412, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4878, "last_frame": 4991, "first_seen_epoch": "1634913245.185121", "last_seen_epoch": "1634913245.414159", "packets": 2, "bytes": 342, "initiator_bytes": 83, "responder_bytes": 259 }, { "flow_id": "flow-918e2f389ce8be4800fc59b5", "transport": "tcp", "stream": 213, "initiator_ip": "10.10.22.156", "initiator_port": 49748, "responder_ip": "8.253.156.120", "responder_port": 80, "first_frame": 4992, "last_frame": 6126, "first_seen_epoch": "1634913245.418277", "last_seen_epoch": "1634913305.905516", "packets": 19, "bytes": 3224, "initiator_bytes": 1347, "responder_bytes": 1877 }, { "flow_id": "flow-d1d784215208d4e51c55a734", "transport": "udp", "stream": 168, "initiator_ip": "10.10.22.158", "initiator_port": 52896, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 4993, "last_frame": 4994, "first_seen_epoch": "1634913245.426118", "last_seen_epoch": "1634913245.42644", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-5b3357833358a3c966138e5d", "transport": "udp", "stream": 169, "initiator_ip": "10.10.22.158", "initiator_port": 52897, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 4995, "last_frame": 4996, "first_seen_epoch": "1634913245.427313", "last_seen_epoch": "1634913245.427605", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-9ba99449965017f78fb28341", "transport": "tcp", "stream": 214, "initiator_ip": "10.10.22.158", "initiator_port": 49747, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 5036, "last_frame": 5105, "first_seen_epoch": "1634913245.543369", "last_seen_epoch": "1634913245.571238", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-b0151eb003458c504e66d5f9", "transport": "tcp", "stream": 215, "initiator_ip": "10.10.22.158", "initiator_port": 49748, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 5043, "last_frame": 5106, "first_seen_epoch": "1634913245.547795", "last_seen_epoch": "1634913245.571373", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-2558557ff47a50a48318a5e6", "transport": "tcp", "stream": 216, "initiator_ip": "10.10.22.158", "initiator_port": 49749, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5066, "last_frame": 5104, "first_seen_epoch": "1634913245.557767", "last_seen_epoch": "1634913245.569009", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-243b53b284ac51ab75f5449b", "transport": "tcp", "stream": 217, "initiator_ip": "10.10.22.158", "initiator_port": 49750, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5083, "last_frame": 5100, "first_seen_epoch": "1634913245.564269", "last_seen_epoch": "1634913245.568614", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-2b776707395416b644126638", "transport": "udp", "stream": 170, "initiator_ip": "10.10.22.156", "initiator_port": 65080, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5111, "last_frame": 5112, "first_seen_epoch": "1634913245.63491", "last_seen_epoch": "1634913245.635178", "packets": 2, "bytes": 221, "initiator_bytes": 80, "responder_bytes": 141 }, { "flow_id": "flow-1c9eb3852e952008f6ddd5a9", "transport": "tcp", "stream": 218, "initiator_ip": "10.10.22.156", "initiator_port": 49749, "responder_ip": "20.69.137.228", "responder_port": 443, "first_frame": 5113, "last_frame": 5145, "first_seen_epoch": "1634913245.641254", "last_seen_epoch": "1634913246.247192", "packets": 23, "bytes": 10124, "initiator_bytes": 2344, "responder_bytes": 7780 }, { "flow_id": "flow-1ef008b312fe213ad55adb66", "transport": "tcp", "stream": 219, "initiator_ip": "10.10.22.156", "initiator_port": 49750, "responder_ip": "20.69.137.228", "responder_port": 443, "first_frame": 5146, "last_frame": 6519, "first_seen_epoch": "1634913246.250399", "last_seen_epoch": "1634913355.73676", "packets": 25, "bytes": 10336, "initiator_bytes": 2537, "responder_bytes": 7799 }, { "flow_id": "flow-cd63a782a1ff4c7e4934ebc4", "transport": "udp", "stream": 171, "initiator_ip": "10.10.22.157", "initiator_port": 64783, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5211, "last_frame": 5212, "first_seen_epoch": "1634913261.753949", "last_seen_epoch": "1634913261.839505", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-adb9e6e4186efd759b434bf4", "transport": "tcp", "stream": 220, "initiator_ip": "10.10.22.157", "initiator_port": 49735, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 5213, "last_frame": 6180, "first_seen_epoch": "1634913261.841999", "last_seen_epoch": "1634913322.25564", "packets": 33, "bytes": 11290, "initiator_bytes": 3377, "responder_bytes": 7913 }, { "flow_id": "flow-86b099d7b5012e238a168cc0", "transport": "udp", "stream": 172, "initiator_ip": "10.10.22.157", "initiator_port": 63862, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5246, "last_frame": 5251, "first_seen_epoch": "1634913264.245413", "last_seen_epoch": "1634913264.33597", "packets": 2, "bytes": 412, "initiator_bytes": 92, "responder_bytes": 320 }, { "flow_id": "flow-8352b2cd67783c0a263d1c60", "transport": "tcp", "stream": 221, "initiator_ip": "10.10.22.157", "initiator_port": 49736, "responder_ip": "173.223.109.212", "responder_port": 443, "first_frame": 5252, "last_frame": 13969, "first_seen_epoch": "1634913264.338044", "last_seen_epoch": "1634913764.716936", "packets": 22, "bytes": 7798, "initiator_bytes": 1878, "responder_bytes": 5920 }, { "flow_id": "flow-cc0e738ad382975532544344", "transport": "udp", "stream": 173, "initiator_ip": "10.10.22.157", "initiator_port": 53018, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5300, "last_frame": 5301, "first_seen_epoch": "1634913272.337897", "last_seen_epoch": "1634913272.338257", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-ef14cc2a846d27dc3e530ca1", "transport": "udp", "stream": 174, "initiator_ip": "10.10.22.157", "initiator_port": 53019, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5302, "last_frame": 5303, "first_seen_epoch": "1634913272.339017", "last_seen_epoch": "1634913272.339289", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-22ce1183ff54d088109e861a", "transport": "tcp", "stream": 222, "initiator_ip": "10.10.22.157", "initiator_port": 49737, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 5304, "last_frame": 5373, "first_seen_epoch": "1634913272.467322", "last_seen_epoch": "1634913272.497954", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-3ab614a699c4089f37590f31", "transport": "tcp", "stream": 223, "initiator_ip": "10.10.22.157", "initiator_port": 49738, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 5311, "last_frame": 5374, "first_seen_epoch": "1634913272.472589", "last_seen_epoch": "1634913272.498051", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-a6ad027e6aa77f0d9cff0eff", "transport": "tcp", "stream": 224, "initiator_ip": "10.10.22.157", "initiator_port": 49739, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5334, "last_frame": 5372, "first_seen_epoch": "1634913272.483364", "last_seen_epoch": "1634913272.49568", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-ee2dbd40b5b191af7f03e1f6", "transport": "tcp", "stream": 225, "initiator_ip": "10.10.22.157", "initiator_port": 49740, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5351, "last_frame": 5369, "first_seen_epoch": "1634913272.490413", "last_seen_epoch": "1634913272.49533", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-8b2d1153c748073512443ab8", "transport": "udp", "stream": 175, "initiator_ip": "10.10.22.156", "initiator_port": 53193, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5375, "last_frame": 5376, "first_seen_epoch": "1634913273.648231", "last_seen_epoch": "1634913273.648646", "packets": 2, "bytes": 412, "initiator_bytes": 92, "responder_bytes": 320 }, { "flow_id": "flow-c55869dcfd38b2807b884cca", "transport": "tcp", "stream": 226, "initiator_ip": "10.10.22.156", "initiator_port": 49751, "responder_ip": "173.223.109.212", "responder_port": 443, "first_frame": 5377, "last_frame": 14799, "first_seen_epoch": "1634913273.651801", "last_seen_epoch": "1634913785.046146", "packets": 58, "bytes": 36558, "initiator_bytes": 5874, "responder_bytes": 30684 }, { "flow_id": "flow-0b2b2dd32455de777cbded31", "transport": "udp", "stream": 176, "initiator_ip": "10.10.22.157", "initiator_port": 60359, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5388, "last_frame": 5389, "first_seen_epoch": "1634913273.879123", "last_seen_epoch": "1634913273.879526", "packets": 2, "bytes": 342, "initiator_bytes": 83, "responder_bytes": 259 }, { "flow_id": "flow-5040d7574a822fe282af41f2", "transport": "tcp", "stream": 227, "initiator_ip": "10.10.22.157", "initiator_port": 49741, "responder_ip": "8.249.245.254", "responder_port": 80, "first_frame": 5390, "last_frame": 6206, "first_seen_epoch": "1634913273.883693", "last_seen_epoch": "1634913334.127267", "packets": 11, "bytes": 1231, "initiator_bytes": 623, "responder_bytes": 608 }, { "flow_id": "flow-34644716bf520a07e1aa86fd", "transport": "udp", "stream": 177, "initiator_ip": "10.10.22.156", "initiator_port": 60675, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5438, "last_frame": 5439, "first_seen_epoch": "1634913274.450842", "last_seen_epoch": "1634913274.533129", "packets": 2, "bytes": 271, "initiator_bytes": 103, "responder_bytes": 168 }, { "flow_id": "flow-b83f381b8fd054a3f7488174", "transport": "tcp", "stream": 228, "initiator_ip": "10.10.22.156", "initiator_port": 49752, "responder_ip": "23.47.50.180", "responder_port": 443, "first_frame": 5440, "last_frame": 5640, "first_seen_epoch": "1634913274.533863", "last_seen_epoch": "1634913294.998125", "packets": 76, "bytes": 47993, "initiator_bytes": 2661, "responder_bytes": 45332 }, { "flow_id": "flow-b3559d1444e55b9c3bc8b44d", "transport": "udp", "stream": 178, "initiator_ip": "10.10.22.157", "initiator_port": 52542, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5543, "last_frame": 5546, "first_seen_epoch": "1634913288.195693", "last_seen_epoch": "1634913288.266102", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-017adf4718fdb1e7ddd70a2e", "transport": "tcp", "stream": 229, "initiator_ip": "10.10.22.157", "initiator_port": 49742, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 5547, "last_frame": 5570, "first_seen_epoch": "1634913288.26685", "last_seen_epoch": "1634913289.379587", "packets": 24, "bytes": 6748, "initiator_bytes": 2005, "responder_bytes": 4743 }, { "flow_id": "flow-b8d005a31e78a3bd75b4d3e6", "transport": "udp", "stream": 179, "initiator_ip": "10.10.22.156", "initiator_port": 56119, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5572, "last_frame": 5573, "first_seen_epoch": "1634913292.208363", "last_seen_epoch": "1634913292.333084", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-a1dbaa7d325a58f4f53e2386", "transport": "tcp", "stream": 230, "initiator_ip": "10.10.22.156", "initiator_port": 49753, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 5574, "last_frame": 6495, "first_seen_epoch": "1634913292.334879", "last_seen_epoch": "1634913352.727559", "packets": 29, "bytes": 11090, "initiator_bytes": 3229, "responder_bytes": 7861 }, { "flow_id": "flow-10951fea83ce2e78b37f8151", "transport": "udp", "stream": 180, "initiator_ip": "10.10.22.156", "initiator_port": 50958, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5604, "last_frame": 5605, "first_seen_epoch": "1634913293.25523", "last_seen_epoch": "1634913293.357296", "packets": 2, "bytes": 314, "initiator_bytes": 83, "responder_bytes": 231 }, { "flow_id": "flow-0a9d001bb63ae717d71ee59e", "transport": "tcp", "stream": 231, "initiator_ip": "10.10.22.156", "initiator_port": 49754, "responder_ip": "40.90.64.59", "responder_port": 443, "first_frame": 5606, "last_frame": 5638, "first_seen_epoch": "1634913293.359574", "last_seen_epoch": "1634913294.639376", "packets": 29, "bytes": 10254, "initiator_bytes": 2858, "responder_bytes": 7396 }, { "flow_id": "flow-28aba0b870e17228f2f7d925", "transport": "udp", "stream": 181, "initiator_ip": "10.10.22.157", "initiator_port": 62318, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 5642, "last_frame": 5643, "first_seen_epoch": "1634913296.194174", "last_seen_epoch": "1634913296.292206", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0f16f1496399b85fa3677fa5", "transport": "tcp", "stream": 232, "initiator_ip": "10.10.22.157", "initiator_port": 49743, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 5644, "last_frame": 11081, "first_seen_epoch": "1634913296.323615", "last_seen_epoch": "1634913632.919085", "packets": 514, "bytes": 376928, "initiator_bytes": 11300, "responder_bytes": 365628 }, { "flow_id": "flow-0bc0ffe97ab9aba2010a2978", "transport": "udp", "stream": 182, "initiator_ip": "10.10.22.156", "initiator_port": 63477, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 5664, "last_frame": 5665, "first_seen_epoch": "1634913299.936637", "last_seen_epoch": "1634913299.937014", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-53f84f0a2624fa91830f52b6", "transport": "udp", "stream": 183, "initiator_ip": "10.10.22.156", "initiator_port": 63478, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5666, "last_frame": 5667, "first_seen_epoch": "1634913299.937761", "last_seen_epoch": "1634913299.93805", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-b258b015d6d622e686ffe851", "transport": "tcp", "stream": 233, "initiator_ip": "10.10.22.156", "initiator_port": 49755, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 5670, "last_frame": 5739, "first_seen_epoch": "1634913300.06058", "last_seen_epoch": "1634913300.094092", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-7b251d6a821526de729447f0", "transport": "tcp", "stream": 234, "initiator_ip": "10.10.22.156", "initiator_port": 49756, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 5677, "last_frame": 5740, "first_seen_epoch": "1634913300.065978", "last_seen_epoch": "1634913300.094259", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-36b25a002635e4e97df99b34", "transport": "tcp", "stream": 235, "initiator_ip": "10.10.22.156", "initiator_port": 49757, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5700, "last_frame": 5738, "first_seen_epoch": "1634913300.077582", "last_seen_epoch": "1634913300.091743", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-99f9301ef0e09e0a10085d97", "transport": "tcp", "stream": 236, "initiator_ip": "10.10.22.156", "initiator_port": 49758, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 5717, "last_frame": 5734, "first_seen_epoch": "1634913300.086441", "last_seen_epoch": "1634913300.091432", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-c23dd745e4f8abf8490c6175", "transport": "udp", "stream": 184, "initiator_ip": "10.10.22.156", "initiator_port": 63830, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6124, "last_frame": 6127, "first_seen_epoch": "1634913305.869014", "last_seen_epoch": "1634913305.970879", "packets": 2, "bytes": 253, "initiator_bytes": 74, "responder_bytes": 179 }, { "flow_id": "flow-3bf94adc8c978d18e71c9129", "transport": "tcp", "stream": 237, "initiator_ip": "10.10.22.156", "initiator_port": 49759, "responder_ip": "104.94.77.31", "responder_port": 80, "first_frame": 6128, "last_frame": 6626, "first_seen_epoch": "1634913305.975849", "last_seen_epoch": "1634913367.517545", "packets": 11, "bytes": 1100, "initiator_bytes": 563, "responder_bytes": 537 }, { "flow_id": "flow-a333461163c349513be4e9b7", "transport": "tcp", "stream": 238, "initiator_ip": "10.10.22.156", "initiator_port": 49760, "responder_ip": "8.253.156.120", "responder_port": 80, "first_frame": 6134, "last_frame": 6628, "first_seen_epoch": "1634913306.139721", "last_seen_epoch": "1634913367.525785", "packets": 15, "bytes": 2074, "initiator_bytes": 1025, "responder_bytes": 1049 }, { "flow_id": "flow-a64e46551319755eb6075664", "transport": "udp", "stream": 185, "initiator_ip": "10.10.22.158", "initiator_port": 50868, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6216, "last_frame": 6217, "first_seen_epoch": "1634913345.771037", "last_seen_epoch": "1634913345.77139", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-4c400055ef4ea70342edebf7", "transport": "udp", "stream": 186, "initiator_ip": "10.10.22.158", "initiator_port": 64801, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6218, "last_frame": 6219, "first_seen_epoch": "1634913345.80629", "last_seen_epoch": "1634913345.806553", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-a2b546833d4e34a7f16e6843", "transport": "udp", "stream": 187, "initiator_ip": "10.10.22.158", "initiator_port": 64283, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6220, "last_frame": 6221, "first_seen_epoch": "1634913345.833536", "last_seen_epoch": "1634913345.875498", "packets": 2, "bytes": 322, "initiator_bytes": 81, "responder_bytes": 241 }, { "flow_id": "flow-2b3d29192ede1f14ff2a98a7", "transport": "udp", "stream": 188, "initiator_ip": "10.10.22.158", "initiator_port": 64284, "responder_ip": "239.255.255.250", "responder_port": 1900, "first_frame": 6222, "last_frame": 6444, "first_seen_epoch": "1634913345.915901", "last_seen_epoch": "1634913348.938407", "packets": 4, "bytes": 864, "initiator_bytes": 864, "responder_bytes": 0 }, { "flow_id": "flow-246c01e860794dc02c2c8f1f", "transport": "udp", "stream": 189, "initiator_ip": "10.10.22.158", "initiator_port": 54289, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6223, "last_frame": 6224, "first_seen_epoch": "1634913345.933401", "last_seen_epoch": "1634913345.985706", "packets": 2, "bytes": 238, "initiator_bytes": 78, "responder_bytes": 160 }, { "flow_id": "flow-ac4590cfd2bc3669ce5e9c8b", "transport": "tcp", "stream": 239, "initiator_ip": "10.10.22.158", "initiator_port": 49751, "responder_ip": "13.107.42.16", "responder_port": 443, "first_frame": 6225, "last_frame": 6654, "first_seen_epoch": "1634913346.097743", "last_seen_epoch": "1634913375.106144", "packets": 29, "bytes": 9371, "initiator_bytes": 2025, "responder_bytes": 7346 }, { "flow_id": "flow-97b500e4438e8dcd7687d373", "transport": "tcp", "stream": 240, "initiator_ip": "10.10.22.158", "initiator_port": 49752, "responder_ip": "204.79.197.219", "responder_port": 443, "first_frame": 6226, "last_frame": 6653, "first_seen_epoch": "1634913346.100623", "last_seen_epoch": "1634913375.106079", "packets": 33, "bytes": 10164, "initiator_bytes": 2890, "responder_bytes": 7274 }, { "flow_id": "flow-beeb2703a5b2529c53d2ebda", "transport": "udp", "stream": 190, "initiator_ip": "10.10.22.158", "initiator_port": 63679, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6264, "last_frame": 6282, "first_seen_epoch": "1634913346.286105", "last_seen_epoch": "1634913346.409737", "packets": 2, "bytes": 317, "initiator_bytes": 85, "responder_bytes": 232 }, { "flow_id": "flow-3288e1db01f7f30794fa16ae", "transport": "tcp", "stream": 241, "initiator_ip": "10.10.22.158", "initiator_port": 49753, "responder_ip": "40.126.28.23", "responder_port": 443, "first_frame": 6265, "last_frame": 6373, "first_seen_epoch": "1634913346.309236", "last_seen_epoch": "1634913346.838726", "packets": 49, "bytes": 33288, "initiator_bytes": 8674, "responder_bytes": 24614 }, { "flow_id": "flow-61a3657ddb4c343a7c630d50", "transport": "tcp", "stream": 242, "initiator_ip": "10.10.22.158", "initiator_port": 49754, "responder_ip": "52.232.226.150", "responder_port": 443, "first_frame": 6284, "last_frame": 6658, "first_seen_epoch": "1634913346.415138", "last_seen_epoch": "1634913375.136031", "packets": 51, "bytes": 17469, "initiator_bytes": 5119, "responder_bytes": 12350 }, { "flow_id": "flow-3357391c41363664cb7e4cb2", "transport": "udp", "stream": 191, "initiator_ip": "10.10.22.158", "initiator_port": 58214, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6298, "last_frame": 6325, "first_seen_epoch": "1634913346.523396", "last_seen_epoch": "1634913346.586626", "packets": 2, "bytes": 176, "initiator_bytes": 72, "responder_bytes": 104 }, { "flow_id": "flow-ce80707cf5af92ef53704887", "transport": "udp", "stream": 192, "initiator_ip": "10.10.22.158", "initiator_port": 61132, "responder_ip": "104.21.32.95", "responder_port": 443, "first_frame": 6326, "last_frame": 6644, "first_seen_epoch": "1634913346.593116", "last_seen_epoch": "1634913375.051844", "packets": 31, "bytes": 11295, "initiator_bytes": 4411, "responder_bytes": 6884 }, { "flow_id": "flow-4806745fa48092412a1e9a1e", "transport": "udp", "stream": 193, "initiator_ip": "10.10.22.158", "initiator_port": 52629, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6394, "last_frame": 6395, "first_seen_epoch": "1634913347.646137", "last_seen_epoch": "1634913347.646483", "packets": 2, "bytes": 176, "initiator_bytes": 80, "responder_bytes": 96 }, { "flow_id": "flow-64aa2b1cfd1a5d26457d5d94", "transport": "tcp", "stream": 243, "initiator_ip": "10.10.22.158", "initiator_port": 49755, "responder_ip": "35.190.80.1", "responder_port": 443, "first_frame": 6396, "last_frame": 6650, "first_seen_epoch": "1634913347.647098", "last_seen_epoch": "1634913375.10226", "packets": 40, "bytes": 9515, "initiator_bytes": 2870, "responder_bytes": 6645 }, { "flow_id": "flow-1a54a96e5aec83f333c63de4", "transport": "tcp", "stream": 244, "initiator_ip": "10.10.22.158", "initiator_port": 49756, "responder_ip": "204.79.197.219", "responder_port": 443, "first_frame": 6445, "last_frame": 6656, "first_seen_epoch": "1634913349.045893", "last_seen_epoch": "1634913375.112707", "packets": 28, "bytes": 9191, "initiator_bytes": 1891, "responder_bytes": 7300 }, { "flow_id": "flow-c9d09cad8d077ade0a5a4172", "transport": "udp", "stream": 194, "initiator_ip": "10.10.22.158", "initiator_port": 64275, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6481, "last_frame": 6490, "first_seen_epoch": "1634913352.280027", "last_seen_epoch": "1634913352.38441", "packets": 4, "bytes": 496, "initiator_bytes": 173, "responder_bytes": 323 }, { "flow_id": "flow-e6993d11a7ae3b56d7fc8793", "transport": "udp", "stream": 195, "initiator_ip": "10.10.22.158", "initiator_port": 59176, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6483, "last_frame": 6485, "first_seen_epoch": "1634913352.280647", "last_seen_epoch": "1634913352.280857", "packets": 2, "bytes": 249, "initiator_bytes": 87, "responder_bytes": 162 }, { "flow_id": "flow-a06400b32db2902e855735ec", "transport": "udp", "stream": 196, "initiator_ip": "10.10.22.158", "initiator_port": 65519, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6484, "last_frame": 6486, "first_seen_epoch": "1634913352.280694", "last_seen_epoch": "1634913352.280907", "packets": 2, "bytes": 239, "initiator_bytes": 82, "responder_bytes": 157 }, { "flow_id": "flow-9e6032517de3326540fa53f4", "transport": "udp", "stream": 197, "initiator_ip": "10.10.22.158", "initiator_port": 56239, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6487, "last_frame": 6526, "first_seen_epoch": "1634913352.280991", "last_seen_epoch": "1634913356.514066", "packets": 4, "bytes": 419, "initiator_bytes": 258, "responder_bytes": 161 }, { "flow_id": "flow-e3ed78e898ba105158666732", "transport": "udp", "stream": 198, "initiator_ip": "10.10.22.158", "initiator_port": 60389, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6488, "last_frame": 6522, "first_seen_epoch": "1634913352.281218", "last_seen_epoch": "1634913356.501436", "packets": 4, "bytes": 391, "initiator_bytes": 237, "responder_bytes": 154 }, { "flow_id": "flow-c91e690b9c3243a22e67d685", "transport": "udp", "stream": 199, "initiator_ip": "10.10.22.158", "initiator_port": 61691, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6493, "last_frame": 6496, "first_seen_epoch": "1634913352.38586", "last_seen_epoch": "1634913352.809593", "packets": 2, "bytes": 144, "initiator_bytes": 144, "responder_bytes": 0 }, { "flow_id": "flow-c608c5fc83540cf75fab6a8b", "transport": "udp", "stream": 200, "initiator_ip": "10.10.22.158", "initiator_port": 57541, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6500, "last_frame": 6501, "first_seen_epoch": "1634913353.813416", "last_seen_epoch": "1634913353.813711", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1dbf5d1e0283181dae360b93", "transport": "udp", "stream": 201, "initiator_ip": "10.10.22.158", "initiator_port": 50787, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6502, "last_frame": 6503, "first_seen_epoch": "1634913353.814161", "last_seen_epoch": "1634913353.814338", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-24e71e028560f72c75cf776d", "transport": "udp", "stream": 202, "initiator_ip": "10.10.22.158", "initiator_port": 53097, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6525, "last_frame": 6530, "first_seen_epoch": "1634913356.503893", "last_seen_epoch": "1634913356.920664", "packets": 2, "bytes": 134, "initiator_bytes": 134, "responder_bytes": 0 }, { "flow_id": "flow-7052883fa6c5f2e2cdee345a", "transport": "udp", "stream": 203, "initiator_ip": "10.10.22.158", "initiator_port": 53912, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6529, "last_frame": 6531, "first_seen_epoch": "1634913356.515879", "last_seen_epoch": "1634913356.936116", "packets": 2, "bytes": 148, "initiator_bytes": 148, "responder_bytes": 0 }, { "flow_id": "flow-b3fd909c47e8870b759cad6d", "transport": "udp", "stream": 204, "initiator_ip": "10.10.22.158", "initiator_port": 63254, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6537, "last_frame": 6539, "first_seen_epoch": "1634913358.296018", "last_seen_epoch": "1634913358.296464", "packets": 2, "bytes": 253, "initiator_bytes": 89, "responder_bytes": 164 }, { "flow_id": "flow-94398d67ec42c7d6cd0c4299", "transport": "udp", "stream": 205, "initiator_ip": "10.10.22.158", "initiator_port": 57171, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6538, "last_frame": 6540, "first_seen_epoch": "1634913358.296122", "last_seen_epoch": "1634913358.296547", "packets": 2, "bytes": 249, "initiator_bytes": 87, "responder_bytes": 162 }, { "flow_id": "flow-f855898f93153a4f6212fa9d", "transport": "udp", "stream": 206, "initiator_ip": "10.10.22.158", "initiator_port": 54117, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6541, "last_frame": 6543, "first_seen_epoch": "1634913358.297022", "last_seen_epoch": "1634913358.297365", "packets": 2, "bytes": 243, "initiator_bytes": 84, "responder_bytes": 159 }, { "flow_id": "flow-4be6c4a8d95c337e77186481", "transport": "udp", "stream": 207, "initiator_ip": "10.10.22.158", "initiator_port": 61395, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6542, "last_frame": 6544, "first_seen_epoch": "1634913358.297103", "last_seen_epoch": "1634913358.297515", "packets": 2, "bytes": 247, "initiator_bytes": 86, "responder_bytes": 161 }, { "flow_id": "flow-2053d372e100f196e4739546", "transport": "udp", "stream": 208, "initiator_ip": "10.10.22.158", "initiator_port": 49205, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6545, "last_frame": 6546, "first_seen_epoch": "1634913358.29752", "last_seen_epoch": "1634913358.297833", "packets": 2, "bytes": 239, "initiator_bytes": 82, "responder_bytes": 157 }, { "flow_id": "flow-7bc6d06d053c0e6877aa978d", "transport": "udp", "stream": 209, "initiator_ip": "10.10.22.158", "initiator_port": 59932, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6550, "last_frame": 6551, "first_seen_epoch": "1634913358.298674", "last_seen_epoch": "1634913358.298836", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5f3460cbb1fd11dc943864b6", "transport": "udp", "stream": 210, "initiator_ip": "10.10.22.158", "initiator_port": 64432, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6553, "last_frame": 6561, "first_seen_epoch": "1634913358.299234", "last_seen_epoch": "1634913358.718894", "packets": 2, "bytes": 144, "initiator_bytes": 144, "responder_bytes": 0 }, { "flow_id": "flow-ee1d2a8a3035f03f01f69afe", "transport": "udp", "stream": 211, "initiator_ip": "10.10.22.158", "initiator_port": 63880, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6554, "last_frame": 6560, "first_seen_epoch": "1634913358.299478", "last_seen_epoch": "1634913358.718694", "packets": 2, "bytes": 148, "initiator_bytes": 148, "responder_bytes": 0 }, { "flow_id": "flow-15561dc6913fd2ba7f9b277b", "transport": "udp", "stream": 212, "initiator_ip": "10.10.22.158", "initiator_port": 56015, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 6557, "last_frame": 6559, "first_seen_epoch": "1634913358.300518", "last_seen_epoch": "1634913358.718327", "packets": 2, "bytes": 134, "initiator_bytes": 134, "responder_bytes": 0 }, { "flow_id": "flow-80567d6852f3d81c949d5e81", "transport": "udp", "stream": 213, "initiator_ip": "10.10.22.158", "initiator_port": 51839, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6568, "last_frame": 6569, "first_seen_epoch": "1634913359.408177", "last_seen_epoch": "1634913359.4813", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-cb3151c7e3769c409bd72e73", "transport": "tcp", "stream": 245, "initiator_ip": "10.10.22.158", "initiator_port": 49757, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 6570, "last_frame": 6602, "first_seen_epoch": "1634913359.482974", "last_seen_epoch": "1634913359.878987", "packets": 28, "bytes": 8268, "initiator_bytes": 3062, "responder_bytes": 5206 }, { "flow_id": "flow-cca7349d33e2c7054fd532ed", "transport": "udp", "stream": 214, "initiator_ip": "10.10.22.157", "initiator_port": 54381, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6667, "last_frame": 6668, "first_seen_epoch": "1634913382.644738", "last_seen_epoch": "1634913382.690456", "packets": 2, "bytes": 310, "initiator_bytes": 89, "responder_bytes": 221 }, { "flow_id": "flow-e1a076585b57b4f18dbd9fd6", "transport": "tcp", "stream": 246, "initiator_ip": "10.10.22.157", "initiator_port": 49744, "responder_ip": "13.69.239.72", "responder_port": 443, "first_frame": 6669, "last_frame": 6705, "first_seen_epoch": "1634913382.69134", "last_seen_epoch": "1634913384.222424", "packets": 32, "bytes": 13714, "initiator_bytes": 7572, "responder_bytes": 6142 }, { "flow_id": "flow-b9d4f0de9cb521bece5bec65", "transport": "tcp", "stream": 247, "initiator_ip": "10.10.22.157", "initiator_port": 49745, "responder_ip": "20.189.173.7", "responder_port": 443, "first_frame": 6707, "last_frame": 10860, "first_seen_epoch": "1634913385.115082", "last_seen_epoch": "1634913495.206899", "packets": 37, "bytes": 15701, "initiator_bytes": 8004, "responder_bytes": 7697 }, { "flow_id": "flow-51ed0dc365695a8733d839d6", "transport": "udp", "stream": 215, "initiator_ip": "10.10.22.158", "initiator_port": 52272, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 6746, "last_frame": 6747, "first_seen_epoch": "1634913395.5137", "last_seen_epoch": "1634913395.641241", "packets": 2, "bytes": 178, "initiator_bytes": 73, "responder_bytes": 105 }, { "flow_id": "flow-1af8e735a1be5939dfb872f6", "transport": "tcp", "stream": 248, "initiator_ip": "10.10.22.158", "initiator_port": 49758, "responder_ip": "172.67.139.101", "responder_port": 80, "first_frame": 6748, "last_frame": 7121, "first_seen_epoch": "1634913395.650131", "last_seen_epoch": "1634913399.440283", "packets": 372, "bytes": 359176, "initiator_bytes": 6735, "responder_bytes": 352441 }, { "flow_id": "flow-d34b55c3099fc1b7e41619ac", "transport": "tcp", "stream": 249, "initiator_ip": "10.10.22.156", "initiator_port": 49761, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 7141, "last_frame": 7238, "first_seen_epoch": "1634913412.837409", "last_seen_epoch": "1634913413.531974", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-f24104abee8814a035b7fa42", "transport": "tcp", "stream": 250, "initiator_ip": "10.10.22.156", "initiator_port": 49762, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 7148, "last_frame": 7239, "first_seen_epoch": "1634913412.84802", "last_seen_epoch": "1634913413.532192", "packets": 24, "bytes": 6882, "initiator_bytes": 4299, "responder_bytes": 2583 }, { "flow_id": "flow-dd28384736dbfd8ccf55fe19", "transport": "tcp", "stream": 251, "initiator_ip": "10.10.22.156", "initiator_port": 49763, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 7171, "last_frame": 7211, "first_seen_epoch": "1634913412.866285", "last_seen_epoch": "1634913412.883017", "packets": 21, "bytes": 7418, "initiator_bytes": 3401, "responder_bytes": 4017 }, { "flow_id": "flow-8c93b9f800a0787d2ff95e91", "transport": "tcp", "stream": 252, "initiator_ip": "10.10.22.156", "initiator_port": 49764, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 7188, "last_frame": 7207, "first_seen_epoch": "1634913412.875395", "last_seen_epoch": "1634913412.882442", "packets": 18, "bytes": 6836, "initiator_bytes": 2803, "responder_bytes": 4033 }, { "flow_id": "flow-b0b4a465900ee77414069a5c", "transport": "udp", "stream": 216, "initiator_ip": "10.10.22.156", "initiator_port": 59343, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 7216, "last_frame": 7217, "first_seen_epoch": "1634913412.948359", "last_seen_epoch": "1634913413.003824", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-a7cf49eb963da8f845814f72", "transport": "tcp", "stream": 253, "initiator_ip": "10.10.22.156", "initiator_port": 49765, "responder_ip": "40.126.29.5", "responder_port": 443, "first_frame": 7218, "last_frame": 7240, "first_seen_epoch": "1634913413.004462", "last_seen_epoch": "1634913413.534151", "packets": 20, "bytes": 6832, "initiator_bytes": 1566, "responder_bytes": 5266 }, { "flow_id": "flow-01011bb441a9e4bf610cc6ab", "transport": "tcp", "stream": 254, "initiator_ip": "10.10.22.156", "initiator_port": 49766, "responder_ip": "190.14.37.244", "responder_port": 80, "first_frame": 7247, "last_frame": 10899, "first_seen_epoch": "1634913421.528002", "last_seen_epoch": "1634913531.510201", "packets": 1161, "bytes": 974700, "initiator_bytes": 26981, "responder_bytes": 947719 }, { "flow_id": "flow-7d409cd54a976ad55c2d80a1", "transport": "udp", "stream": 217, "initiator_ip": "10.10.22.156", "initiator_port": 50237, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 7267, "last_frame": 7306, "first_seen_epoch": "1634913422.794467", "last_seen_epoch": "1634913422.85947", "packets": 2, "bytes": 301, "initiator_bytes": 90, "responder_bytes": 211 }, { "flow_id": "flow-59cdcdaf123a44b593efae9c", "transport": "tcp", "stream": 255, "initiator_ip": "10.10.22.156", "initiator_port": 49767, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 7307, "last_frame": 10901, "first_seen_epoch": "1634913422.864532", "last_seen_epoch": "1634913531.606859", "packets": 41, "bytes": 19174, "initiator_bytes": 13087, "responder_bytes": 6087 }, { "flow_id": "flow-81446bf7bd6c12093dd58ae3", "transport": "tcp", "stream": 256, "initiator_ip": "10.10.22.156", "initiator_port": 49768, "responder_ip": "194.36.191.35", "responder_port": 80, "first_frame": 8445, "last_frame": 10895, "first_seen_epoch": "1634913426.648891", "last_seen_epoch": "1634913531.509484", "packets": 1205, "bytes": 977076, "initiator_bytes": 29357, "responder_bytes": 947719 }, { "flow_id": "flow-b7d4270225648bb9bcd92a8d", "transport": "tcp", "stream": 257, "initiator_ip": "10.10.22.156", "initiator_port": 49769, "responder_ip": "178.23.190.8", "responder_port": 80, "first_frame": 9648, "last_frame": 10893, "first_seen_epoch": "1634913428.616092", "last_seen_epoch": "1634913531.509164", "packets": 1057, "bytes": 969083, "initiator_bytes": 21796, "responder_bytes": 947287 }, { "flow_id": "flow-5734a14e47f786ba23d82a36", "transport": "tcp", "stream": 258, "initiator_ip": "10.10.22.156", "initiator_port": 49770, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 10713, "last_frame": 10922, "first_seen_epoch": "1634913445.786878", "last_seen_epoch": "1634913555.878461", "packets": 36, "bytes": 15655, "initiator_bytes": 7956, "responder_bytes": 7699 }, { "flow_id": "flow-ef9f84580bac2c085a14838b", "transport": "udp", "stream": 218, "initiator_ip": "10.10.22.156", "initiator_port": 49429, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10747, "last_frame": 10748, "first_seen_epoch": "1634913448.675969", "last_seen_epoch": "1634913448.676309", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-6b261e712218a0965fa923e6", "transport": "udp", "stream": 219, "initiator_ip": "10.10.22.156", "initiator_port": 49430, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10749, "last_frame": 10750, "first_seen_epoch": "1634913448.677082", "last_seen_epoch": "1634913448.677431", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-2a8624c46109d51747e05b7a", "transport": "udp", "stream": 220, "initiator_ip": "10.10.22.156", "initiator_port": 57120, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10751, "last_frame": 10752, "first_seen_epoch": "1634913451.458664", "last_seen_epoch": "1634913451.458995", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-500fdb913a8953371e769195", "transport": "udp", "stream": 221, "initiator_ip": "10.10.22.156", "initiator_port": 57121, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10753, "last_frame": 10754, "first_seen_epoch": "1634913451.459628", "last_seen_epoch": "1634913451.459913", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-629613c7e94b0680c0851741", "transport": "udp", "stream": 222, "initiator_ip": "10.10.22.156", "initiator_port": 57514, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10767, "last_frame": 10768, "first_seen_epoch": "1634913469.590767", "last_seen_epoch": "1634913469.591097", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-354eb5ef9c4794053b2a5c8b", "transport": "udp", "stream": 223, "initiator_ip": "10.10.22.156", "initiator_port": 57515, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10769, "last_frame": 10770, "first_seen_epoch": "1634913469.593545", "last_seen_epoch": "1634913469.593874", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-5e45a1dfeb93fef4f6044d8d", "transport": "udp", "stream": 224, "initiator_ip": "10.10.22.156", "initiator_port": 64587, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10775, "last_frame": 10776, "first_seen_epoch": "1634913472.27623", "last_seen_epoch": "1634913472.276525", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-35927b5ef09193c5f2af16db", "transport": "udp", "stream": 225, "initiator_ip": "10.10.22.156", "initiator_port": 64588, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10777, "last_frame": 10778, "first_seen_epoch": "1634913472.277158", "last_seen_epoch": "1634913472.277424", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-cc574e1223bb3c000f72636b", "transport": "tcp", "stream": 259, "initiator_ip": "10.10.22.158", "initiator_port": 49759, "responder_ip": "52.182.143.210", "responder_port": 443, "first_frame": 10782, "last_frame": 11028, "first_seen_epoch": "1634913476.814641", "last_seen_epoch": "1634913596.718689", "packets": 36, "bytes": 15593, "initiator_bytes": 7945, "responder_bytes": 7648 }, { "flow_id": "flow-4d2cad0bfb58280b7f117465", "transport": "udp", "stream": 226, "initiator_ip": "10.10.22.156", "initiator_port": 53897, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10816, "last_frame": 10817, "first_seen_epoch": "1634913478.931063", "last_seen_epoch": "1634913479.015566", "packets": 2, "bytes": 245, "initiator_bytes": 90, "responder_bytes": 155 }, { "flow_id": "flow-22ba5ab90a40915a3c5dfb62", "transport": "tcp", "stream": 260, "initiator_ip": "10.10.22.156", "initiator_port": 49771, "responder_ip": "52.109.8.20", "responder_port": 443, "first_frame": 10818, "last_frame": 11017, "first_seen_epoch": "1634913479.016444", "last_seen_epoch": "1634913584.327027", "packets": 20, "bytes": 8345, "initiator_bytes": 1506, "responder_bytes": 6839 }, { "flow_id": "flow-5d9101ba4a7a12e56dd88c41", "transport": "udp", "stream": 227, "initiator_ip": "10.10.22.156", "initiator_port": 51581, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10841, "last_frame": 10842, "first_seen_epoch": "1634913489.528984", "last_seen_epoch": "1634913489.529491", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-f662c62f82007cd25f6cb9c4", "transport": "udp", "stream": 228, "initiator_ip": "10.10.22.156", "initiator_port": 51582, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10843, "last_frame": 10844, "first_seen_epoch": "1634913489.531294", "last_seen_epoch": "1634913489.531599", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4634e02687d731510ded17ce", "transport": "udp", "stream": 229, "initiator_ip": "10.10.22.156", "initiator_port": 58846, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10849, "last_frame": 10850, "first_seen_epoch": "1634913492.198005", "last_seen_epoch": "1634913492.198285", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-b0ba033e2ba91560eece4acb", "transport": "udp", "stream": 230, "initiator_ip": "10.10.22.156", "initiator_port": 58847, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 10851, "last_frame": 10852, "first_seen_epoch": "1634913492.198911", "last_seen_epoch": "1634913492.199175", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-31b2af74da127cfc7daabcc1", "transport": "udp", "stream": 231, "initiator_ip": "10.10.22.158", "initiator_port": 52844, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 10931, "last_frame": 10932, "first_seen_epoch": "1634913575.883637", "last_seen_epoch": "1634913576.014453", "packets": 2, "bytes": 172, "initiator_bytes": 78, "responder_bytes": 94 }, { "flow_id": "flow-e7131f2e96804c7761e062c9", "transport": "tcp", "stream": 261, "initiator_ip": "10.10.22.158", "initiator_port": 49760, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 10933, "last_frame": 11035, "first_seen_epoch": "1634913576.019874", "last_seen_epoch": "1634913608.411054", "packets": 24, "bytes": 8548, "initiator_bytes": 2090, "responder_bytes": 6458 }, { "flow_id": "flow-43d514fffb561c4a70abb0ac", "transport": "tcp", "stream": 262, "initiator_ip": "10.10.22.156", "initiator_port": 49772, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 10967, "last_frame": 11015, "first_seen_epoch": "1634913583.083664", "last_seen_epoch": "1634913584.325664", "packets": 25, "bytes": 8865, "initiator_bytes": 3267, "responder_bytes": 5598 }, { "flow_id": "flow-ff949f8d8d38c89c79e37ce4", "transport": "tcp", "stream": 263, "initiator_ip": "10.10.22.156", "initiator_port": 49773, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 10968, "last_frame": 11016, "first_seen_epoch": "1634913583.137676", "last_seen_epoch": "1634913584.325796", "packets": 25, "bytes": 9244, "initiator_bytes": 3591, "responder_bytes": 5653 }, { "flow_id": "flow-7c3b1a0813c42eb7a1fc4385", "transport": "udp", "stream": 232, "initiator_ip": "10.10.22.158", "initiator_port": 59309, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11036, "last_frame": 11038, "first_seen_epoch": "1634913608.448949", "last_seen_epoch": "1634913608.680143", "packets": 3, "bytes": 261, "initiator_bytes": 154, "responder_bytes": 107 }, { "flow_id": "flow-a5eea6c103acefa58dc18b25", "transport": "tcp", "stream": 264, "initiator_ip": "10.10.22.158", "initiator_port": 49761, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 11039, "last_frame": 11090, "first_seen_epoch": "1634913608.681335", "last_seen_epoch": "1634913641.161444", "packets": 22, "bytes": 9021, "initiator_bytes": 1977, "responder_bytes": 7044 }, { "flow_id": "flow-7ae10e3f165e13225488292c", "transport": "udp", "stream": 233, "initiator_ip": "10.10.22.157", "initiator_port": 62067, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11082, "last_frame": 11083, "first_seen_epoch": "1634913636.934027", "last_seen_epoch": "1634913637.017648", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6ac370290be16601f48b1db1", "transport": "tcp", "stream": 265, "initiator_ip": "10.10.22.157", "initiator_port": 49746, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11084, "last_frame": 11089, "first_seen_epoch": "1634913637.018518", "last_seen_epoch": "1634913637.356172", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c2b04eadc2ded6a05e003613", "transport": "udp", "stream": 234, "initiator_ip": "10.10.22.158", "initiator_port": 54700, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11091, "last_frame": 11093, "first_seen_epoch": "1634913641.199748", "last_seen_epoch": "1634913641.321964", "packets": 3, "bytes": 261, "initiator_bytes": 154, "responder_bytes": 107 }, { "flow_id": "flow-97e99cd0e34dc65b66e3c81a", "transport": "tcp", "stream": 266, "initiator_ip": "10.10.22.158", "initiator_port": 49762, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 11094, "last_frame": 11438, "first_seen_epoch": "1634913641.323185", "last_seen_epoch": "1634913673.834463", "packets": 23, "bytes": 8261, "initiator_bytes": 2043, "responder_bytes": 6218 }, { "flow_id": "flow-ee0680384809481124f14f6e", "transport": "udp", "stream": 235, "initiator_ip": "10.10.22.157", "initiator_port": 56274, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11095, "last_frame": 11100, "first_seen_epoch": "1634913641.388777", "last_seen_epoch": "1634913641.488218", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9ad5928187e2026902ec5b6e", "transport": "tcp", "stream": 267, "initiator_ip": "10.10.22.157", "initiator_port": 49747, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11101, "last_frame": 11123, "first_seen_epoch": "1634913641.489262", "last_seen_epoch": "1634913641.844358", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8219440c29e3a178ca81ae60", "transport": "tcp", "stream": 268, "initiator_ip": "10.10.22.157", "initiator_port": 49748, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11124, "last_frame": 11129, "first_seen_epoch": "1634913645.856069", "last_seen_epoch": "1634913646.158703", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e4efedef8b54043e5d781bce", "transport": "tcp", "stream": 269, "initiator_ip": "10.10.22.157", "initiator_port": 49749, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11132, "last_frame": 11137, "first_seen_epoch": "1634913650.17107", "last_seen_epoch": "1634913650.484299", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-17a32f212c78b87f3fd70daa", "transport": "tcp", "stream": 270, "initiator_ip": "10.10.22.157", "initiator_port": 49750, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11147, "last_frame": 11152, "first_seen_epoch": "1634913654.497844", "last_seen_epoch": "1634913654.875777", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cd67b0cb3f66677b39010007", "transport": "udp", "stream": 236, "initiator_ip": "10.10.22.157", "initiator_port": 65316, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11154, "last_frame": 11156, "first_seen_epoch": "1634913658.887387", "last_seen_epoch": "1634913658.94854", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-07ba2359df353cb3d5493753", "transport": "tcp", "stream": 271, "initiator_ip": "10.10.22.157", "initiator_port": 49751, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11157, "last_frame": 11162, "first_seen_epoch": "1634913658.949389", "last_seen_epoch": "1634913659.231624", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cbbb23dcd259d18cc4cf3981", "transport": "udp", "stream": 237, "initiator_ip": "10.10.22.157", "initiator_port": 62016, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11163, "last_frame": 11164, "first_seen_epoch": "1634913661.634897", "last_seen_epoch": "1634913661.723929", "packets": 2, "bytes": 239, "initiator_bytes": 86, "responder_bytes": 153 }, { "flow_id": "flow-fc95720b8825c9d2cbb78418", "transport": "tcp", "stream": 272, "initiator_ip": "10.10.22.157", "initiator_port": 49752, "responder_ip": "20.83.81.162", "responder_port": 443, "first_frame": 11165, "last_frame": 11305, "first_seen_epoch": "1634913661.729376", "last_seen_epoch": "1634913664.172676", "packets": 118, "bytes": 75501, "initiator_bytes": 27463, "responder_bytes": 48038 }, { "flow_id": "flow-2b63807ccf4203d640d2b19c", "transport": "udp", "stream": 238, "initiator_ip": "10.10.22.157", "initiator_port": 65121, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11175, "last_frame": 11176, "first_seen_epoch": "1634913661.990984", "last_seen_epoch": "1634913662.072508", "packets": 2, "bytes": 317, "initiator_bytes": 89, "responder_bytes": 228 }, { "flow_id": "flow-d82dbf4c303e7b7992c8985e", "transport": "tcp", "stream": 273, "initiator_ip": "10.10.22.157", "initiator_port": 49753, "responder_ip": "104.46.162.226", "responder_port": 443, "first_frame": 11177, "last_frame": 11320, "first_seen_epoch": "1634913662.073772", "last_seen_epoch": "1634913665.770121", "packets": 23, "bytes": 8429, "initiator_bytes": 2862, "responder_bytes": 5567 }, { "flow_id": "flow-22f6beda9292e13e7cef70cc", "transport": "udp", "stream": 239, "initiator_ip": "10.10.22.157", "initiator_port": 57389, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11239, "last_frame": 11240, "first_seen_epoch": "1634913663.245893", "last_seen_epoch": "1634913663.282614", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-df9191cd7051169e178f9999", "transport": "tcp", "stream": 274, "initiator_ip": "10.10.22.157", "initiator_port": 49754, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11241, "last_frame": 11267, "first_seen_epoch": "1634913663.283095", "last_seen_epoch": "1634913663.564984", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a6361837df88a38837f42eeb", "transport": "udp", "stream": 240, "initiator_ip": "10.10.22.157", "initiator_port": 64187, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11311, "last_frame": 11350, "first_seen_epoch": "1634913664.651895", "last_seen_epoch": "1634913667.882261", "packets": 4, "bytes": 471, "initiator_bytes": 273, "responder_bytes": 198 }, { "flow_id": "flow-181be7520d4918ae7978ea91", "transport": "udp", "stream": 241, "initiator_ip": "10.10.22.157", "initiator_port": 65106, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11316, "last_frame": 11317, "first_seen_epoch": "1634913665.708126", "last_seen_epoch": "1634913665.767347", "packets": 2, "bytes": 317, "initiator_bytes": 89, "responder_bytes": 228 }, { "flow_id": "flow-c8de2006bb897292bbeac82b", "transport": "tcp", "stream": 275, "initiator_ip": "10.10.22.157", "initiator_port": 49755, "responder_ip": "104.46.162.226", "responder_port": 443, "first_frame": 11318, "last_frame": 11345, "first_seen_epoch": "1634913665.768929", "last_seen_epoch": "1634913667.770416", "packets": 22, "bytes": 8764, "initiator_bytes": 3198, "responder_bytes": 5566 }, { "flow_id": "flow-2d4a681402fd55b82384ca06", "transport": "udp", "stream": 242, "initiator_ip": "10.10.22.157", "initiator_port": 53987, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11341, "last_frame": 11342, "first_seen_epoch": "1634913667.590924", "last_seen_epoch": "1634913667.660268", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7e15647648251ca40c6f4d81", "transport": "tcp", "stream": 276, "initiator_ip": "10.10.22.157", "initiator_port": 49756, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11343, "last_frame": 11356, "first_seen_epoch": "1634913667.661498", "last_seen_epoch": "1634913667.985451", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2b66a288533e1e6106cf495f", "transport": "tcp", "stream": 277, "initiator_ip": "10.10.22.157", "initiator_port": 49757, "responder_ip": "52.242.97.97", "responder_port": 443, "first_frame": 11351, "last_frame": 11407, "first_seen_epoch": "1634913667.883325", "last_seen_epoch": "1634913669.424107", "packets": 56, "bytes": 23157, "initiator_bytes": 17066, "responder_bytes": 6091 }, { "flow_id": "flow-980e3fe7fe3f2b7409e6a239", "transport": "udp", "stream": 243, "initiator_ip": "10.10.22.157", "initiator_port": 64932, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11408, "last_frame": 11409, "first_seen_epoch": "1634913670.960744", "last_seen_epoch": "1634913671.018396", "packets": 2, "bytes": 317, "initiator_bytes": 89, "responder_bytes": 228 }, { "flow_id": "flow-a8238d03a64a393764322500", "transport": "tcp", "stream": 278, "initiator_ip": "10.10.22.157", "initiator_port": 49758, "responder_ip": "104.46.162.226", "responder_port": 443, "first_frame": 11410, "last_frame": 11437, "first_seen_epoch": "1634913671.019802", "last_seen_epoch": "1634913672.966147", "packets": 22, "bytes": 8765, "initiator_bytes": 3199, "responder_bytes": 5566 }, { "flow_id": "flow-df566def06b01c55d6a94676", "transport": "tcp", "stream": 279, "initiator_ip": "10.10.22.157", "initiator_port": 49759, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11427, "last_frame": 11432, "first_seen_epoch": "1634913671.996812", "last_seen_epoch": "1634913672.309234", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7f5dbd88390188b627de4131", "transport": "udp", "stream": 244, "initiator_ip": "10.10.22.158", "initiator_port": 55413, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11439, "last_frame": 11440, "first_seen_epoch": "1634913673.840744", "last_seen_epoch": "1634913673.841064", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5b3184fbe030370930949ab5", "transport": "udp", "stream": 245, "initiator_ip": "10.10.22.158", "initiator_port": 52503, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11441, "last_frame": 11442, "first_seen_epoch": "1634913673.841854", "last_seen_epoch": "1634913673.842037", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-e466dc35c7ec20356585e702", "transport": "udp", "stream": 246, "initiator_ip": "10.10.22.158", "initiator_port": 57592, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11443, "last_frame": 11445, "first_seen_epoch": "1634913673.874468", "last_seen_epoch": "1634913674.048051", "packets": 3, "bytes": 256, "initiator_bytes": 160, "responder_bytes": 96 }, { "flow_id": "flow-1a57e1070b5f6669920684a0", "transport": "tcp", "stream": 280, "initiator_ip": "10.10.22.158", "initiator_port": 49763, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 11446, "last_frame": 11565, "first_seen_epoch": "1634913674.048853", "last_seen_epoch": "1634913706.740978", "packets": 20, "bytes": 7260, "initiator_bytes": 1926, "responder_bytes": 5334 }, { "flow_id": "flow-2205073f2cd57a77cfd6889a", "transport": "tcp", "stream": 281, "initiator_ip": "10.10.22.157", "initiator_port": 49760, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11465, "last_frame": 11470, "first_seen_epoch": "1634913676.324426", "last_seen_epoch": "1634913676.620494", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-127b656bf5a9a7bf9306d510", "transport": "tcp", "stream": 282, "initiator_ip": "10.10.22.157", "initiator_port": 49761, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11475, "last_frame": 11480, "first_seen_epoch": "1634913680.639261", "last_seen_epoch": "1634913680.94602", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9453062ca980afa96cf30f95", "transport": "udp", "stream": 247, "initiator_ip": "10.10.22.158", "initiator_port": 51820, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11486, "last_frame": 11488, "first_seen_epoch": "1634913684.126102", "last_seen_epoch": "1634913684.191184", "packets": 2, "bytes": 314, "initiator_bytes": 83, "responder_bytes": 231 }, { "flow_id": "flow-2805196e31f58cf41358144d", "transport": "tcp", "stream": 283, "initiator_ip": "10.10.22.158", "initiator_port": 49764, "responder_ip": "40.90.64.61", "responder_port": 443, "first_frame": 11489, "last_frame": 11518, "first_seen_epoch": "1634913684.195289", "last_seen_epoch": "1634913684.83974", "packets": 30, "bytes": 10306, "initiator_bytes": 2857, "responder_bytes": 7449 }, { "flow_id": "flow-099f25ba480496a1e412859d", "transport": "udp", "stream": 248, "initiator_ip": "10.10.22.157", "initiator_port": 61115, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11519, "last_frame": 11520, "first_seen_epoch": "1634913684.950783", "last_seen_epoch": "1634913685.005902", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a79ea0df7e9e5745bb58c698", "transport": "tcp", "stream": 284, "initiator_ip": "10.10.22.157", "initiator_port": 49762, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11521, "last_frame": 11528, "first_seen_epoch": "1634913685.00728", "last_seen_epoch": "1634913685.341037", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-864cd4eee6fd2804727b5c92", "transport": "udp", "stream": 249, "initiator_ip": "10.10.22.158", "initiator_port": 54302, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11529, "last_frame": 11530, "first_seen_epoch": "1634913688.838151", "last_seen_epoch": "1634913688.838516", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-7c96cba6779e7e2bce458c19", "transport": "udp", "stream": 250, "initiator_ip": "10.10.22.158", "initiator_port": 63953, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11531, "last_frame": 11532, "first_seen_epoch": "1634913688.838987", "last_seen_epoch": "1634913688.839222", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-73f886d8f8da279bbe88d425", "transport": "udp", "stream": 251, "initiator_ip": "10.10.22.157", "initiator_port": 65411, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11535, "last_frame": 11536, "first_seen_epoch": "1634913689.358333", "last_seen_epoch": "1634913689.413549", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-00b31131aef7e8180f450bd7", "transport": "tcp", "stream": 285, "initiator_ip": "10.10.22.157", "initiator_port": 49763, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11537, "last_frame": 11542, "first_seen_epoch": "1634913689.414554", "last_seen_epoch": "1634913689.730007", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e633fcef947ae7c63a0498d9", "transport": "udp", "stream": 252, "initiator_ip": "10.10.22.157", "initiator_port": 60352, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11543, "last_frame": 11544, "first_seen_epoch": "1634913693.749383", "last_seen_epoch": "1634913693.798224", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-79f39b105e3ebc73869f6bdb", "transport": "tcp", "stream": 286, "initiator_ip": "10.10.22.157", "initiator_port": 49764, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11545, "last_frame": 11550, "first_seen_epoch": "1634913693.799586", "last_seen_epoch": "1634913694.102342", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-892fa81f7e74b442acba110a", "transport": "tcp", "stream": 287, "initiator_ip": "10.10.22.157", "initiator_port": 49765, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11551, "last_frame": 11556, "first_seen_epoch": "1634913698.108064", "last_seen_epoch": "1634913698.560015", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6586c630d12de673fc96da7e", "transport": "tcp", "stream": 288, "initiator_ip": "10.10.22.157", "initiator_port": 49766, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11557, "last_frame": 11564, "first_seen_epoch": "1634913702.575845", "last_seen_epoch": "1634913705.882562", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-d8eda503cec0f829c8007828", "transport": "udp", "stream": 253, "initiator_ip": "10.10.22.158", "initiator_port": 63954, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 11566, "last_frame": 11567, "first_seen_epoch": "1634913706.74997", "last_seen_epoch": "1634913706.923733", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-680abaebaed48de4afcdf523", "transport": "udp", "stream": 254, "initiator_ip": "10.10.22.158", "initiator_port": 63955, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 11568, "last_frame": 11569, "first_seen_epoch": "1634913706.932848", "last_seen_epoch": "1634913707.082349", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-189ba778277106a572014f19", "transport": "udp", "stream": 255, "initiator_ip": "10.10.22.158", "initiator_port": 63956, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 11570, "last_frame": 11571, "first_seen_epoch": "1634913707.091618", "last_seen_epoch": "1634913707.25591", "packets": 2, "bytes": 172, "initiator_bytes": 78, "responder_bytes": 94 }, { "flow_id": "flow-8bfe5bf03bb91943ba011aa0", "transport": "udp", "stream": 256, "initiator_ip": "10.10.22.158", "initiator_port": 63957, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 11572, "last_frame": 11573, "first_seen_epoch": "1634913708.233781", "last_seen_epoch": "1634913708.406113", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-d9bab7f3152f91b4cf55032d", "transport": "tcp", "stream": 289, "initiator_ip": "10.10.22.158", "initiator_port": 49765, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 11574, "last_frame": 16186, "first_seen_epoch": "1634913708.447086", "last_seen_epoch": "1634913829.928358", "packets": 3816, "bytes": 3501200, "initiator_bytes": 77200, "responder_bytes": 3424000 }, { "flow_id": "flow-5ea1550deca3974bb9a52fc1", "transport": "tcp", "stream": 290, "initiator_ip": "10.10.22.157", "initiator_port": 49767, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11587, "last_frame": 11592, "first_seen_epoch": "1634913709.889133", "last_seen_epoch": "1634913710.233369", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-591d3bbba46e8004c63ec949", "transport": "udp", "stream": 257, "initiator_ip": "10.10.22.157", "initiator_port": 59849, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11600, "last_frame": 11601, "first_seen_epoch": "1634913714.249814", "last_seen_epoch": "1634913714.329369", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e08f13c7ffbe64c5f9461607", "transport": "tcp", "stream": 291, "initiator_ip": "10.10.22.157", "initiator_port": 49768, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11602, "last_frame": 11607, "first_seen_epoch": "1634913714.33044", "last_seen_epoch": "1634913714.69382", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-68a97cc7648370d834217a16", "transport": "udp", "stream": 258, "initiator_ip": "10.10.22.157", "initiator_port": 53141, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11611, "last_frame": 11612, "first_seen_epoch": "1634913718.701512", "last_seen_epoch": "1634913718.748556", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8f9ceaad165b76fdf59d3947", "transport": "tcp", "stream": 292, "initiator_ip": "10.10.22.157", "initiator_port": 49769, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11613, "last_frame": 11618, "first_seen_epoch": "1634913718.749511", "last_seen_epoch": "1634913719.053982", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0b06de93289b77ff9910d77d", "transport": "udp", "stream": 259, "initiator_ip": "10.10.22.156", "initiator_port": 51775, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11619, "last_frame": 11621, "first_seen_epoch": "1634913722.482391", "last_seen_epoch": "1634913722.624343", "packets": 3, "bytes": 325, "initiator_bytes": 172, "responder_bytes": 153 }, { "flow_id": "flow-797c1eba5121fc91cb9f3306", "transport": "tcp", "stream": 293, "initiator_ip": "10.10.22.156", "initiator_port": 49774, "responder_ip": "20.83.81.162", "responder_port": 443, "first_frame": 11622, "last_frame": 11775, "first_seen_epoch": "1634913722.628366", "last_seen_epoch": "1634913724.761967", "packets": 120, "bytes": 75608, "initiator_bytes": 27579, "responder_bytes": 48029 }, { "flow_id": "flow-e987f2a049a55df8140903e1", "transport": "udp", "stream": 260, "initiator_ip": "10.10.22.156", "initiator_port": 62177, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11627, "last_frame": 11628, "first_seen_epoch": "1634913722.814683", "last_seen_epoch": "1634913722.853539", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-bdff056e41c4c14b9ce1415c", "transport": "tcp", "stream": 294, "initiator_ip": "10.10.22.156", "initiator_port": 49775, "responder_ip": "104.208.16.88", "responder_port": 443, "first_frame": 11629, "last_frame": 11714, "first_seen_epoch": "1634913722.854704", "last_seen_epoch": "1634913723.8693", "packets": 23, "bytes": 8576, "initiator_bytes": 3061, "responder_bytes": 5515 }, { "flow_id": "flow-da406e498d6a59afb1ffc670", "transport": "udp", "stream": 261, "initiator_ip": "10.10.22.157", "initiator_port": 60155, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 11656, "last_frame": 11734, "first_seen_epoch": "1634913723.06198", "last_seen_epoch": "1634913724.136789", "packets": 3, "bytes": 268, "initiator_bytes": 168, "responder_bytes": 100 }, { "flow_id": "flow-1553779b8ba4b3d7be654152", "transport": "tcp", "stream": 295, "initiator_ip": "10.10.22.157", "initiator_port": 49770, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11735, "last_frame": 11750, "first_seen_epoch": "1634913724.138015", "last_seen_epoch": "1634913724.445758", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fb4c08ef5b0a6d8df16f6d0b", "transport": "udp", "stream": 262, "initiator_ip": "10.10.22.156", "initiator_port": 49308, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11776, "last_frame": 11777, "first_seen_epoch": "1634913725.147746", "last_seen_epoch": "1634913725.148011", "packets": 2, "bytes": 289, "initiator_bytes": 91, "responder_bytes": 198 }, { "flow_id": "flow-56ec8d88777fb7e63693704a", "transport": "tcp", "stream": 296, "initiator_ip": "10.10.22.156", "initiator_port": 49776, "responder_ip": "52.152.108.96", "responder_port": 443, "first_frame": 11778, "last_frame": 11835, "first_seen_epoch": "1634913725.148589", "last_seen_epoch": "1634913726.282478", "packets": 56, "bytes": 23681, "initiator_bytes": 17246, "responder_bytes": 6435 }, { "flow_id": "flow-4abc4f5be76a401594a03a1d", "transport": "tcp", "stream": 297, "initiator_ip": "10.10.22.156", "initiator_port": 49777, "responder_ip": "104.208.16.88", "responder_port": 443, "first_frame": 11836, "last_frame": 11860, "first_seen_epoch": "1634913726.304573", "last_seen_epoch": "1634913726.877467", "packets": 25, "bytes": 9074, "initiator_bytes": 3504, "responder_bytes": 5570 }, { "flow_id": "flow-5dcda2e960101fc07057256d", "transport": "udp", "stream": 263, "initiator_ip": "10.10.22.156", "initiator_port": 64767, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11884, "last_frame": 12075, "first_seen_epoch": "1634913727.898658", "last_seen_epoch": "1634913732.334475", "packets": 5, "bytes": 575, "initiator_bytes": 356, "responder_bytes": 219 }, { "flow_id": "flow-d97f38cdff5941b7a5637c1d", "transport": "tcp", "stream": 298, "initiator_ip": "10.10.22.157", "initiator_port": 49771, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 11905, "last_frame": 11910, "first_seen_epoch": "1634913728.451538", "last_seen_epoch": "1634913728.804811", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cb3a954b690163d453de10e0", "transport": "udp", "stream": 264, "initiator_ip": "10.10.22.157", "initiator_port": 49401, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11963, "last_frame": 11964, "first_seen_epoch": "1634913730.845381", "last_seen_epoch": "1634913730.845643", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-89cf4314a01bfe857a43f0ec", "transport": "udp", "stream": 265, "initiator_ip": "10.10.22.157", "initiator_port": 52181, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 11965, "last_frame": 11966, "first_seen_epoch": "1634913730.846078", "last_seen_epoch": "1634913730.846316", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-3d5684a9a4067f11cd1e9db7", "transport": "tcp", "stream": 299, "initiator_ip": "10.10.22.156", "initiator_port": 49778, "responder_ip": "104.208.16.88", "responder_port": 443, "first_frame": 12076, "last_frame": 12120, "first_seen_epoch": "1634913732.336098", "last_seen_epoch": "1634913732.933806", "packets": 25, "bytes": 9077, "initiator_bytes": 3506, "responder_bytes": 5571 }, { "flow_id": "flow-0a44880fdc809140fcd8f7a4", "transport": "tcp", "stream": 300, "initiator_ip": "10.10.22.157", "initiator_port": 49772, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 12113, "last_frame": 12146, "first_seen_epoch": "1634913732.812509", "last_seen_epoch": "1634913733.14233", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-046fdf8cbe95fd6faff49b89", "transport": "tcp", "stream": 301, "initiator_ip": "10.10.22.157", "initiator_port": 49773, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 12285, "last_frame": 12300, "first_seen_epoch": "1634913737.15483", "last_seen_epoch": "1634913737.437877", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e38234fe6db8bd9e2dc716a6", "transport": "udp", "stream": 266, "initiator_ip": "10.10.22.157", "initiator_port": 58281, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 12438, "last_frame": 12444, "first_seen_epoch": "1634913741.452396", "last_seen_epoch": "1634913741.546153", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6e4a753654be91c8994ddb15", "transport": "tcp", "stream": 302, "initiator_ip": "10.10.22.157", "initiator_port": 49774, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 12445, "last_frame": 12455, "first_seen_epoch": "1634913741.54741", "last_seen_epoch": "1634913741.894623", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f198738747e71f9a3aa7e773", "transport": "udp", "stream": 267, "initiator_ip": "10.10.22.157", "initiator_port": 52201, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 12719, "last_frame": 12724, "first_seen_epoch": "1634913745.906004", "last_seen_epoch": "1634913745.965159", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-73a15849294514b9d03ecb06", "transport": "tcp", "stream": 303, "initiator_ip": "10.10.22.157", "initiator_port": 49775, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 12725, "last_frame": 12756, "first_seen_epoch": "1634913745.966027", "last_seen_epoch": "1634913746.281501", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a27fe382ca2df3bd54709d11", "transport": "udp", "stream": 268, "initiator_ip": "10.10.22.158", "initiator_port": 61367, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 12934, "last_frame": 12935, "first_seen_epoch": "1634913748.852977", "last_seen_epoch": "1634913748.853338", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-007f50a4cde0577c75c70544", "transport": "udp", "stream": 269, "initiator_ip": "10.10.22.158", "initiator_port": 52054, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 12936, "last_frame": 12937, "first_seen_epoch": "1634913748.853803", "last_seen_epoch": "1634913748.854012", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-26d21793dc6e30851ac107ec", "transport": "udp", "stream": 270, "initiator_ip": "10.10.22.157", "initiator_port": 51919, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 13029, "last_frame": 13034, "first_seen_epoch": "1634913750.296884", "last_seen_epoch": "1634913750.511809", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-54fc6bf8bc8e935ddfd699d6", "transport": "tcp", "stream": 304, "initiator_ip": "10.10.22.157", "initiator_port": 49776, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 13035, "last_frame": 13065, "first_seen_epoch": "1634913750.51265", "last_seen_epoch": "1634913750.801981", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7c42ddcf7e50a7d13f5f2a96", "transport": "udp", "stream": 271, "initiator_ip": "10.10.22.158", "initiator_port": 58034, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 13321, "last_frame": 13322, "first_seen_epoch": "1634913753.568408", "last_seen_epoch": "1634913753.568654", "packets": 2, "bytes": 239, "initiator_bytes": 86, "responder_bytes": 153 }, { "flow_id": "flow-3c037722b25a22a54467f084", "transport": "tcp", "stream": 305, "initiator_ip": "10.10.22.158", "initiator_port": 49766, "responder_ip": "20.83.81.162", "responder_port": 443, "first_frame": 13323, "last_frame": 13631, "first_seen_epoch": "1634913753.571627", "last_seen_epoch": "1634913756.25534", "packets": 122, "bytes": 75732, "initiator_bytes": 27629, "responder_bytes": 48103 }, { "flow_id": "flow-c5c86ab1d6f7744a9237448a", "transport": "udp", "stream": 272, "initiator_ip": "10.10.22.158", "initiator_port": 57922, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 13364, "last_frame": 13366, "first_seen_epoch": "1634913754.184769", "last_seen_epoch": "1634913754.254531", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-fd54800b4fa5aaa4198ef693", "transport": "tcp", "stream": 306, "initiator_ip": "10.10.22.158", "initiator_port": 49767, "responder_ip": "13.89.179.10", "responder_port": 443, "first_frame": 13367, "last_frame": 13530, "first_seen_epoch": "1634913754.255346", "last_seen_epoch": "1634913755.568087", "packets": 23, "bytes": 8476, "initiator_bytes": 2962, "responder_bytes": 5514 }, { "flow_id": "flow-96b7c41cf08635c67ac15a7e", "transport": "tcp", "stream": 307, "initiator_ip": "10.10.22.157", "initiator_port": 49777, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 13419, "last_frame": 13475, "first_seen_epoch": "1634913754.812321", "last_seen_epoch": "1634913755.216836", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f75a69453412e17a221ae6f9", "transport": "udp", "stream": 273, "initiator_ip": "10.10.22.158", "initiator_port": 54574, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 13632, "last_frame": 13633, "first_seen_epoch": "1634913756.715872", "last_seen_epoch": "1634913756.716158", "packets": 2, "bytes": 289, "initiator_bytes": 91, "responder_bytes": 198 }, { "flow_id": "flow-ace75d6142738aea62190c61", "transport": "tcp", "stream": 308, "initiator_ip": "10.10.22.158", "initiator_port": 49768, "responder_ip": "52.242.97.97", "responder_port": 443, "first_frame": 13634, "last_frame": 13745, "first_seen_epoch": "1634913756.71668", "last_seen_epoch": "1634913758.064746", "packets": 59, "bytes": 23366, "initiator_bytes": 17142, "responder_bytes": 6224 }, { "flow_id": "flow-e6580794823cc04c39fabb3a", "transport": "tcp", "stream": 309, "initiator_ip": "10.10.22.158", "initiator_port": 49769, "responder_ip": "13.89.179.10", "responder_port": 443, "first_frame": 13702, "last_frame": 13753, "first_seen_epoch": "1634913757.783116", "last_seen_epoch": "1634913758.21695", "packets": 23, "bytes": 8870, "initiator_bytes": 3353, "responder_bytes": 5517 }, { "flow_id": "flow-c87c87e5a986d66cc11f727a", "transport": "tcp", "stream": 310, "initiator_ip": "10.10.22.157", "initiator_port": 49778, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 13757, "last_frame": 13764, "first_seen_epoch": "1634913759.23652", "last_seen_epoch": "1634913759.565585", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dd604fc8b7f65814f130f466", "transport": "udp", "stream": 274, "initiator_ip": "10.10.22.158", "initiator_port": 57645, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 13768, "last_frame": 13769, "first_seen_epoch": "1634913759.690822", "last_seen_epoch": "1634913759.691266", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-cdfa4538a303a63eb5c1e714", "transport": "tcp", "stream": 311, "initiator_ip": "10.10.22.158", "initiator_port": 49770, "responder_ip": "13.89.179.10", "responder_port": 443, "first_frame": 13770, "last_frame": 13859, "first_seen_epoch": "1634913759.692018", "last_seen_epoch": "1634913760.523231", "packets": 22, "bytes": 8813, "initiator_bytes": 3297, "responder_bytes": 5516 }, { "flow_id": "flow-30d3c1fb60dfbf529baeb001", "transport": "tcp", "stream": 312, "initiator_ip": "10.10.22.157", "initiator_port": 49779, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 13962, "last_frame": 13967, "first_seen_epoch": "1634913763.577394", "last_seen_epoch": "1634913763.894018", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6eb0fb1d294d340b37af7246", "transport": "udp", "stream": 275, "initiator_ip": "10.10.22.157", "initiator_port": 54789, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 14006, "last_frame": 68667, "first_seen_epoch": "1634913767.906578", "last_seen_epoch": "1634917024.39807", "packets": 4, "bytes": 368, "initiator_bytes": 168, "responder_bytes": 200 }, { "flow_id": "flow-7039727f875b8a8a332a8c6c", "transport": "tcp", "stream": 313, "initiator_ip": "10.10.22.157", "initiator_port": 49780, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 14008, "last_frame": 14024, "first_seen_epoch": "1634913767.973623", "last_seen_epoch": "1634913768.343426", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0234e1f2774cf0a87c5adb19", "transport": "udp", "stream": 276, "initiator_ip": "10.10.22.157", "initiator_port": 57169, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 14287, "last_frame": 14293, "first_seen_epoch": "1634913772.360461", "last_seen_epoch": "1634913772.439196", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6c3ff820e4feff8fd3c2d678", "transport": "tcp", "stream": 314, "initiator_ip": "10.10.22.157", "initiator_port": 49781, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 14294, "last_frame": 14340, "first_seen_epoch": "1634913772.440575", "last_seen_epoch": "1634913772.762", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-fd2aa2f232d982c372cea9bc", "transport": "udp", "stream": 277, "initiator_ip": "10.10.22.157", "initiator_port": 58257, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 14407, "last_frame": 14421, "first_seen_epoch": "1634913776.766388", "last_seen_epoch": "1634913776.842208", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9f113588b689497507d3da7c", "transport": "tcp", "stream": 315, "initiator_ip": "10.10.22.157", "initiator_port": 49782, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 14422, "last_frame": 14430, "first_seen_epoch": "1634913776.843469", "last_seen_epoch": "1634913777.12913", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-024a03c925f7c67e1b77b817", "transport": "tcp", "stream": 316, "initiator_ip": "10.10.22.157", "initiator_port": 49783, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 14620, "last_frame": 14630, "first_seen_epoch": "1634913781.140629", "last_seen_epoch": "1634913781.477108", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e46c38ad1dee996ad8deb067", "transport": "tcp", "stream": 317, "initiator_ip": "10.10.22.157", "initiator_port": 49784, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 14852, "last_frame": 14885, "first_seen_epoch": "1634913785.500736", "last_seen_epoch": "1634913785.813967", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-8a4daddefb1f560abf6dc5a3", "transport": "tcp", "stream": 318, "initiator_ip": "10.10.22.157", "initiator_port": 49785, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15009, "last_frame": 15054, "first_seen_epoch": "1634913789.828438", "last_seen_epoch": "1634913790.135281", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cbd8fe250173381887e219f0", "transport": "udp", "stream": 278, "initiator_ip": "10.10.22.156", "initiator_port": 57652, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 15028, "last_frame": 15029, "first_seen_epoch": "1634913789.924025", "last_seen_epoch": "1634913789.924426", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-7095b6d7650b40285d1948a8", "transport": "udp", "stream": 279, "initiator_ip": "10.10.22.156", "initiator_port": 62364, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 15030, "last_frame": 15031, "first_seen_epoch": "1634913789.925902", "last_seen_epoch": "1634913789.926143", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-fa8a42334d02728957a80707", "transport": "udp", "stream": 280, "initiator_ip": "10.10.22.157", "initiator_port": 54053, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 15277, "last_frame": 15278, "first_seen_epoch": "1634913794.141179", "last_seen_epoch": "1634913794.192362", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7463a5dd09bf907ee4eb22b5", "transport": "tcp", "stream": 319, "initiator_ip": "10.10.22.157", "initiator_port": 49786, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15279, "last_frame": 15284, "first_seen_epoch": "1634913794.193212", "last_seen_epoch": "1634913794.48836", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c27b6c4922be56aa54780fd6", "transport": "udp", "stream": 281, "initiator_ip": "10.10.22.157", "initiator_port": 58650, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 15361, "last_frame": 15373, "first_seen_epoch": "1634913798.501134", "last_seen_epoch": "1634913798.580555", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-25544844e56caed0b0278b65", "transport": "tcp", "stream": 320, "initiator_ip": "10.10.22.157", "initiator_port": 49787, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15374, "last_frame": 15404, "first_seen_epoch": "1634913798.581865", "last_seen_epoch": "1634913798.940638", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-ef838a9d9365db8c6ff6bccd", "transport": "udp", "stream": 282, "initiator_ip": "10.10.22.157", "initiator_port": 52560, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 15607, "last_frame": 15608, "first_seen_epoch": "1634913802.954061", "last_seen_epoch": "1634913803.002259", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-08610fec3e1b20d9f35e48c2", "transport": "tcp", "stream": 321, "initiator_ip": "10.10.22.157", "initiator_port": 49788, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15609, "last_frame": 15628, "first_seen_epoch": "1634913803.00314", "last_seen_epoch": "1634913803.29324", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-254a37496c4cb6b259659b04", "transport": "tcp", "stream": 322, "initiator_ip": "10.10.22.157", "initiator_port": 49789, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15757, "last_frame": 15762, "first_seen_epoch": "1634913807.297582", "last_seen_epoch": "1634913807.636003", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0b490127129f51ebf70501e8", "transport": "tcp", "stream": 323, "initiator_ip": "10.10.22.157", "initiator_port": 49790, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15815, "last_frame": 15820, "first_seen_epoch": "1634913811.640805", "last_seen_epoch": "1634913811.941558", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-51e264e10363b673c035bc70", "transport": "udp", "stream": 283, "initiator_ip": "10.10.22.158", "initiator_port": 53763, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 15933, "last_frame": 15950, "first_seen_epoch": "1634913814.719076", "last_seen_epoch": "1634913814.788359", "packets": 2, "bytes": 342, "initiator_bytes": 83, "responder_bytes": 259 }, { "flow_id": "flow-38bd2309d92c997b644f96e4", "transport": "tcp", "stream": 324, "initiator_ip": "10.10.22.158", "initiator_port": 49771, "responder_ip": "8.248.163.254", "responder_port": 80, "first_frame": 15951, "last_frame": 16304, "first_seen_epoch": "1634913814.79304", "last_seen_epoch": "1634913875.035231", "packets": 11, "bytes": 1223, "initiator_bytes": 616, "responder_bytes": 607 }, { "flow_id": "flow-d4bdaabe83131d6f0ee2813b", "transport": "tcp", "stream": 325, "initiator_ip": "10.10.22.157", "initiator_port": 49791, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 15993, "last_frame": 16017, "first_seen_epoch": "1634913815.954085", "last_seen_epoch": "1634913816.26236", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ac85bdab0e151528b1e21500", "transport": "udp", "stream": 284, "initiator_ip": "10.10.22.157", "initiator_port": 57471, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16162, "last_frame": 16163, "first_seen_epoch": "1634913820.282464", "last_seen_epoch": "1634913820.33668", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f34436b6da56164808c7c4a3", "transport": "tcp", "stream": 326, "initiator_ip": "10.10.22.157", "initiator_port": 49792, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16164, "last_frame": 16169, "first_seen_epoch": "1634913820.337071", "last_seen_epoch": "1634913820.633782", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9eaaf44c9e797354a13d2dbd", "transport": "udp", "stream": 285, "initiator_ip": "10.10.22.157", "initiator_port": 56351, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16170, "last_frame": 16171, "first_seen_epoch": "1634913824.641789", "last_seen_epoch": "1634913824.694829", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-de99fbd57e30ba6e2f03bd26", "transport": "tcp", "stream": 327, "initiator_ip": "10.10.22.157", "initiator_port": 49793, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16172, "last_frame": 16177, "first_seen_epoch": "1634913824.69527", "last_seen_epoch": "1634913825.026168", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a9a834a85d58d124ff8caf46", "transport": "udp", "stream": 286, "initiator_ip": "10.10.22.157", "initiator_port": 56137, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16178, "last_frame": 16179, "first_seen_epoch": "1634913829.032799", "last_seen_epoch": "1634913829.140072", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-de38b978fc686771da5a2aeb", "transport": "tcp", "stream": 328, "initiator_ip": "10.10.22.157", "initiator_port": 49794, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16180, "last_frame": 16185, "first_seen_epoch": "1634913829.140832", "last_seen_epoch": "1634913829.472549", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1da98ef5ee28168eb9a3271d", "transport": "tcp", "stream": 329, "initiator_ip": "10.10.22.156", "initiator_port": 49779, "responder_ip": "167.248.117.81", "responder_port": 443, "first_frame": 16188, "last_frame": 17389, "first_seen_epoch": "1634913832.934975", "last_seen_epoch": "1634913908.16951", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-d908acdd1b22d9ce2394c01f", "transport": "tcp", "stream": 330, "initiator_ip": "10.10.22.157", "initiator_port": 49795, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16189, "last_frame": 16196, "first_seen_epoch": "1634913833.50077", "last_seen_epoch": "1634913833.794656", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9e0ea4f7e23a9cf32276949a", "transport": "tcp", "stream": 331, "initiator_ip": "10.10.22.157", "initiator_port": 49796, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16203, "last_frame": 16210, "first_seen_epoch": "1634913837.797352", "last_seen_epoch": "1634913838.216118", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-b275cce22894e46f257fc85a", "transport": "tcp", "stream": 332, "initiator_ip": "10.10.22.157", "initiator_port": 49797, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16215, "last_frame": 16220, "first_seen_epoch": "1634913842.220905", "last_seen_epoch": "1634913842.521797", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9abb0db2e99eaca3d067edb6", "transport": "udp", "stream": 287, "initiator_ip": "10.10.22.157", "initiator_port": 64697, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16221, "last_frame": 16222, "first_seen_epoch": "1634913846.533211", "last_seen_epoch": "1634913846.6332", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-29be11c167bbf4bc97a287a2", "transport": "tcp", "stream": 333, "initiator_ip": "10.10.22.157", "initiator_port": 49798, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16223, "last_frame": 16228, "first_seen_epoch": "1634913846.633678", "last_seen_epoch": "1634913846.912968", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dfe800e5978060d469e7657d", "transport": "tcp", "stream": 334, "initiator_ip": "10.10.22.156", "initiator_port": 49780, "responder_ip": "167.248.117.81", "responder_port": 443, "first_frame": 16230, "last_frame": 17444, "first_seen_epoch": "1634913848.942227", "last_seen_epoch": "1634913924.16283", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-aecf70b85e82d353500adecd", "transport": "udp", "stream": 288, "initiator_ip": "10.10.22.157", "initiator_port": 61718, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16232, "last_frame": 16233, "first_seen_epoch": "1634913850.923735", "last_seen_epoch": "1634913850.989339", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3d1b59eb788f474f839b50cc", "transport": "tcp", "stream": 335, "initiator_ip": "10.10.22.157", "initiator_port": 49799, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16234, "last_frame": 16241, "first_seen_epoch": "1634913850.989744", "last_seen_epoch": "1634913851.308213", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-0528c6cced8e83f1dbca9ec2", "transport": "udp", "stream": 289, "initiator_ip": "10.10.22.156", "initiator_port": 56105, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 16243, "last_frame": 16244, "first_seen_epoch": "1634913855.034084", "last_seen_epoch": "1634913855.075475", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-ff3ec5ba3acd4e9fb0ecc518", "transport": "udp", "stream": 290, "initiator_ip": "10.10.22.157", "initiator_port": 49496, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16245, "last_frame": 16246, "first_seen_epoch": "1634913855.315162", "last_seen_epoch": "1634913855.37047", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5587755e3eba37f8daa461a0", "transport": "tcp", "stream": 336, "initiator_ip": "10.10.22.157", "initiator_port": 49800, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16247, "last_frame": 16252, "first_seen_epoch": "1634913855.370864", "last_seen_epoch": "1634913855.651852", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dbf85ffabcd7f4b94666fef7", "transport": "tcp", "stream": 337, "initiator_ip": "10.10.22.157", "initiator_port": 49801, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16256, "last_frame": 16261, "first_seen_epoch": "1634913859.657492", "last_seen_epoch": "1634913859.971546", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fc75baf604e18a2894b6272e", "transport": "tcp", "stream": 338, "initiator_ip": "10.10.22.157", "initiator_port": 49802, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16264, "last_frame": 16273, "first_seen_epoch": "1634913863.986937", "last_seen_epoch": "1634913864.303522", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-fdf12c3191ece37f1816b895", "transport": "tcp", "stream": 339, "initiator_ip": "10.10.22.156", "initiator_port": 49781, "responder_ip": "167.248.117.81", "responder_port": 443, "first_frame": 16276, "last_frame": 17513, "first_seen_epoch": "1634913866.970485", "last_seen_epoch": "1634913942.20197", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-dc7f73acc20416a811364aa2", "transport": "tcp", "stream": 340, "initiator_ip": "10.10.22.157", "initiator_port": 49803, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16278, "last_frame": 16285, "first_seen_epoch": "1634913868.314421", "last_seen_epoch": "1634913868.613561", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ddc90b37773ea7e549ca64be", "transport": "udp", "stream": 291, "initiator_ip": "10.10.22.157", "initiator_port": 65030, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16290, "last_frame": 16291, "first_seen_epoch": "1634913872.643764", "last_seen_epoch": "1634913872.712766", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e49365c7669bfb283c696252", "transport": "tcp", "stream": 341, "initiator_ip": "10.10.22.157", "initiator_port": 49804, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16292, "last_frame": 16297, "first_seen_epoch": "1634913872.713275", "last_seen_epoch": "1634913873.008853", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-498d388405dbb62e8dd64b9d", "transport": "udp", "stream": 292, "initiator_ip": "10.10.22.157", "initiator_port": 60694, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16305, "last_frame": 16306, "first_seen_epoch": "1634913877.017532", "last_seen_epoch": "1634913877.079643", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4a20a4ef83cababde0846098", "transport": "tcp", "stream": 342, "initiator_ip": "10.10.22.157", "initiator_port": 49805, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16307, "last_frame": 16314, "first_seen_epoch": "1634913877.080124", "last_seen_epoch": "1634913877.372203", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-75b17c09d27ac92f4c484b86", "transport": "udp", "stream": 293, "initiator_ip": "10.10.22.157", "initiator_port": 56165, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 16315, "last_frame": 16316, "first_seen_epoch": "1634913881.377234", "last_seen_epoch": "1634913881.435714", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8a3de3efd22ca6f269a4f64c", "transport": "tcp", "stream": 343, "initiator_ip": "10.10.22.157", "initiator_port": 49806, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16317, "last_frame": 16322, "first_seen_epoch": "1634913881.436166", "last_seen_epoch": "1634913881.723909", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-54b2b1de1e4d7d34e9f47b41", "transport": "tcp", "stream": 344, "initiator_ip": "10.10.22.156", "initiator_port": 49782, "responder_ip": "167.248.117.81", "responder_port": 443, "first_frame": 16324, "last_frame": 17617, "first_seen_epoch": "1634913883.00304", "last_seen_epoch": "1634913958.2419", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-0bf3a75f9b438002366e039e", "transport": "udp", "stream": 294, "initiator_ip": "10.10.22.158", "initiator_port": 59382, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 16326, "last_frame": 16328, "first_seen_epoch": "1634913884.427646", "last_seen_epoch": "1634913884.626038", "packets": 3, "bytes": 236, "initiator_bytes": 136, "responder_bytes": 100 }, { "flow_id": "flow-d9f8fcfa7467da26a61ccaec", "transport": "tcp", "stream": 345, "initiator_ip": "10.10.22.158", "initiator_port": 49772, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 16329, "last_frame": 17551, "first_seen_epoch": "1634913884.631272", "last_seen_epoch": "1634913953.954802", "packets": 781, "bytes": 794466, "initiator_bytes": 14585, "responder_bytes": 779881 }, { "flow_id": "flow-978c7875526874ffa7192763", "transport": "udp", "stream": 295, "initiator_ip": "10.10.22.158", "initiator_port": 59384, "responder_ip": "239.255.255.250", "responder_port": 1900, "first_frame": 16335, "last_frame": 84300, "first_seen_epoch": "1634913884.722579", "last_seen_epoch": "1634918558.727872", "packets": 44, "bytes": 7876, "initiator_bytes": 7876, "responder_bytes": 0 }, { "flow_id": "flow-ebfcdd646d2c0a6d9f61ce5f", "transport": "udp", "stream": 296, "initiator_ip": "10.10.22.158", "initiator_port": 50611, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 16352, "last_frame": 16355, "first_seen_epoch": "1634913884.925424", "last_seen_epoch": "1634913885.075636", "packets": 3, "bytes": 337, "initiator_bytes": 144, "responder_bytes": 193 }, { "flow_id": "flow-53bf94890bbaa0c4932a004d", "transport": "tcp", "stream": 346, "initiator_ip": "10.10.22.158", "initiator_port": 49775, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 16356, "last_frame": 17579, "first_seen_epoch": "1634913885.077284", "last_seen_epoch": "1634913955.874011", "packets": 126, "bytes": 102087, "initiator_bytes": 3717, "responder_bytes": 98370 }, { "flow_id": "flow-742a52f5a85c65f09aed9481", "transport": "tcp", "stream": 347, "initiator_ip": "10.10.22.157", "initiator_port": 49807, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 16554, "last_frame": 16684, "first_seen_epoch": "1634913885.753266", "last_seen_epoch": "1634913886.083516", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9b1828e9d284d197ded6d58e", "transport": "tcp", "stream": 348, "initiator_ip": "10.10.22.158", "initiator_port": 49777, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 17251, "last_frame": 17366, "first_seen_epoch": "1634913888.896574", "last_seen_epoch": "1634913899.405173", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-e7571e20108559c1b861c764", "transport": "tcp", "stream": 349, "initiator_ip": "10.10.22.158", "initiator_port": 49778, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 17258, "last_frame": 17367, "first_seen_epoch": "1634913888.898626", "last_seen_epoch": "1634913899.405297", "packets": 17, "bytes": 2638, "initiator_bytes": 1438, "responder_bytes": 1200 }, { "flow_id": "flow-2e646d0f9963c72b91ead55c", "transport": "udp", "stream": 297, "initiator_ip": "10.10.22.158", "initiator_port": 55816, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17273, "last_frame": 17274, "first_seen_epoch": "1634913888.971528", "last_seen_epoch": "1634913889.018084", "packets": 2, "bytes": 226, "initiator_bytes": 73, "responder_bytes": 153 }, { "flow_id": "flow-e8ec80c98f774890b1413406", "transport": "tcp", "stream": 350, "initiator_ip": "10.10.22.158", "initiator_port": 49779, "responder_ip": "104.215.148.63", "responder_port": 443, "first_frame": 17275, "last_frame": 17768, "first_seen_epoch": "1634913889.019217", "last_seen_epoch": "1634913999.328225", "packets": 28, "bytes": 9333, "initiator_bytes": 1171, "responder_bytes": 8162 }, { "flow_id": "flow-22dd0fd39404bc5afc44ab2d", "transport": "tcp", "stream": 351, "initiator_ip": "10.10.22.157", "initiator_port": 49808, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17295, "last_frame": 17305, "first_seen_epoch": "1634913890.096471", "last_seen_epoch": "1634913890.384059", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-0d5fc367213d7fc37a64a3b6", "transport": "udp", "stream": 298, "initiator_ip": "10.10.22.158", "initiator_port": 53887, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17307, "last_frame": 17308, "first_seen_epoch": "1634913890.447037", "last_seen_epoch": "1634913890.481288", "packets": 2, "bytes": 321, "initiator_bytes": 77, "responder_bytes": 244 }, { "flow_id": "flow-f8f6a44326b3d709d0a81ba7", "transport": "tcp", "stream": 352, "initiator_ip": "10.10.22.158", "initiator_port": 49780, "responder_ip": "23.47.169.181", "responder_port": 443, "first_frame": 17309, "last_frame": 17393, "first_seen_epoch": "1634913890.482569", "last_seen_epoch": "1634913911.049476", "packets": 28, "bytes": 9242, "initiator_bytes": 1212, "responder_bytes": 8030 }, { "flow_id": "flow-d076f0f039ac2653d427dd60", "transport": "tcp", "stream": 353, "initiator_ip": "10.10.22.157", "initiator_port": 49809, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17342, "last_frame": 17347, "first_seen_epoch": "1634913894.393095", "last_seen_epoch": "1634913894.686311", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a5a5c04ba007614957120b33", "transport": "udp", "stream": 299, "initiator_ip": "10.10.22.157", "initiator_port": 62359, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17350, "last_frame": 17351, "first_seen_epoch": "1634913898.691654", "last_seen_epoch": "1634913898.750784", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-021182c26af085666403c574", "transport": "tcp", "stream": 354, "initiator_ip": "10.10.22.157", "initiator_port": 49810, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17352, "last_frame": 17357, "first_seen_epoch": "1634913898.752101", "last_seen_epoch": "1634913899.079799", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7db3f350151e480f63917bda", "transport": "udp", "stream": 300, "initiator_ip": "10.10.22.157", "initiator_port": 56336, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17368, "last_frame": 17369, "first_seen_epoch": "1634913903.112922", "last_seen_epoch": "1634913903.178214", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0c56fdcb32a6d508247fb776", "transport": "tcp", "stream": 355, "initiator_ip": "10.10.22.157", "initiator_port": 49811, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17370, "last_frame": 17377, "first_seen_epoch": "1634913903.179559", "last_seen_epoch": "1634913903.526756", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-4addcf6dcc2f3c4bfb2eb48d", "transport": "tcp", "stream": 356, "initiator_ip": "10.10.22.156", "initiator_port": 49783, "responder_ip": "122.179.158.212", "responder_port": 443, "first_frame": 17378, "last_frame": 17684, "first_seen_epoch": "1634913904.040115", "last_seen_epoch": "1634913979.19334", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-37a1bd77ee68f19fd3b49d17", "transport": "udp", "stream": 301, "initiator_ip": "10.10.22.157", "initiator_port": 60934, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17381, "last_frame": 17382, "first_seen_epoch": "1634913907.536086", "last_seen_epoch": "1634913907.608531", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5c7a5a91d206a22e3f4e84c7", "transport": "tcp", "stream": 357, "initiator_ip": "10.10.22.157", "initiator_port": 49812, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17383, "last_frame": 17388, "first_seen_epoch": "1634913907.609902", "last_seen_epoch": "1634913907.89377", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-068b1260da46ac65aa68090e", "transport": "tcp", "stream": 358, "initiator_ip": "10.10.22.157", "initiator_port": 49813, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17397, "last_frame": 17402, "first_seen_epoch": "1634913911.909837", "last_seen_epoch": "1634913912.211735", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-743c6120dbe9271762823a39", "transport": "tcp", "stream": 359, "initiator_ip": "10.10.22.157", "initiator_port": 49814, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17403, "last_frame": 17408, "first_seen_epoch": "1634913916.2228", "last_seen_epoch": "1634913916.529796", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-61946c6036c18427e2a17010", "transport": "tcp", "stream": 360, "initiator_ip": "10.10.22.158", "initiator_port": 49781, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 17409, "last_frame": 17495, "first_seen_epoch": "1634913919.018242", "last_seen_epoch": "1634913938.840073", "packets": 27, "bytes": 9311, "initiator_bytes": 2666, "responder_bytes": 6645 }, { "flow_id": "flow-de31dd6df579945b7821e465", "transport": "udp", "stream": 302, "initiator_ip": "10.10.22.156", "initiator_port": 50892, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17431, "last_frame": 17432, "first_seen_epoch": "1634913920.085184", "last_seen_epoch": "1634913920.085523", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-844b1429925490090dc07d13", "transport": "udp", "stream": 303, "initiator_ip": "10.10.22.156", "initiator_port": 52135, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17433, "last_frame": 17435, "first_seen_epoch": "1634913920.08597", "last_seen_epoch": "1634913920.155227", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-7b43c0e49959b2c0e234fd85", "transport": "tcp", "stream": 361, "initiator_ip": "10.10.22.156", "initiator_port": 49784, "responder_ip": "122.179.158.212", "responder_port": 443, "first_frame": 17434, "last_frame": 17759, "first_seen_epoch": "1634913920.115115", "last_seen_epoch": "1634913995.296885", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-66aae6d0113a640cbe6fda27", "transport": "tcp", "stream": 362, "initiator_ip": "10.10.22.157", "initiator_port": 49815, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17436, "last_frame": 17441, "first_seen_epoch": "1634913920.535734", "last_seen_epoch": "1634913920.893866", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-615387b344f7ad62aafc9763", "transport": "udp", "stream": 304, "initiator_ip": "10.10.22.157", "initiator_port": 51959, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17447, "last_frame": 17448, "first_seen_epoch": "1634913924.926852", "last_seen_epoch": "1634913925.038051", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-943a9eab4485fecd28a2220a", "transport": "tcp", "stream": 363, "initiator_ip": "10.10.22.157", "initiator_port": 49816, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17449, "last_frame": 17456, "first_seen_epoch": "1634913925.039407", "last_seen_epoch": "1634913925.387815", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fd7add41a62d164bed3050d7", "transport": "udp", "stream": 305, "initiator_ip": "10.10.22.157", "initiator_port": 49780, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17460, "last_frame": 17461, "first_seen_epoch": "1634913929.394111", "last_seen_epoch": "1634913929.514233", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1710699a9a0592b100f03f5a", "transport": "tcp", "stream": 364, "initiator_ip": "10.10.22.157", "initiator_port": 49817, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17462, "last_frame": 17467, "first_seen_epoch": "1634913929.515581", "last_seen_epoch": "1634913929.88049", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-acc18add2ef706ed996e1178", "transport": "udp", "stream": 306, "initiator_ip": "10.10.22.156", "initiator_port": 53126, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17468, "last_frame": 17469, "first_seen_epoch": "1634913930.037393", "last_seen_epoch": "1634913930.122659", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-f8e51c4f6ed62dcd2e1fdc37", "transport": "udp", "stream": 307, "initiator_ip": "10.10.22.157", "initiator_port": 51447, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17470, "last_frame": 17471, "first_seen_epoch": "1634913933.895234", "last_seen_epoch": "1634913933.985148", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-515cc5edf8ac01ccbf8670b2", "transport": "tcp", "stream": 365, "initiator_ip": "10.10.22.157", "initiator_port": 49818, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17472, "last_frame": 17477, "first_seen_epoch": "1634913933.986492", "last_seen_epoch": "1634913934.361153", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f3a9a1bec4e70f11a9d21fe2", "transport": "udp", "stream": 308, "initiator_ip": "10.10.22.156", "initiator_port": 51426, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17479, "last_frame": 17480, "first_seen_epoch": "1634913935.162981", "last_seen_epoch": "1634913935.163297", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-a3b867c95c27605a967b915a", "transport": "udp", "stream": 309, "initiator_ip": "10.10.22.156", "initiator_port": 51771, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17481, "last_frame": 17482, "first_seen_epoch": "1634913935.163946", "last_seen_epoch": "1634913935.16418", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-57503d631c03e6789415c34b", "transport": "tcp", "stream": 366, "initiator_ip": "10.10.22.156", "initiator_port": 49785, "responder_ip": "122.179.158.212", "responder_port": 443, "first_frame": 17483, "last_frame": 17815, "first_seen_epoch": "1634913938.163039", "last_seen_epoch": "1634914013.351939", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-68612ecbb2888209ec433ad7", "transport": "tcp", "stream": 367, "initiator_ip": "10.10.22.157", "initiator_port": 49819, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17484, "last_frame": 17489, "first_seen_epoch": "1634913938.364412", "last_seen_epoch": "1634913938.654599", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-deb83b0d453d9a607d8d9d44", "transport": "tcp", "stream": 368, "initiator_ip": "10.10.22.158", "initiator_port": 49782, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 17496, "last_frame": 17589, "first_seen_epoch": "1634913938.853071", "last_seen_epoch": "1634913955.980354", "packets": 21, "bytes": 4112, "initiator_bytes": 2722, "responder_bytes": 1390 }, { "flow_id": "flow-825ee6a133a005cb2ee16e13", "transport": "tcp", "stream": 369, "initiator_ip": "10.10.22.157", "initiator_port": 49820, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17514, "last_frame": 17519, "first_seen_epoch": "1634913942.660773", "last_seen_epoch": "1634913942.968523", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-094c9fcdf417a16c16ddb248", "transport": "tcp", "stream": 370, "initiator_ip": "10.10.22.157", "initiator_port": 49821, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17523, "last_frame": 17528, "first_seen_epoch": "1634913946.974469", "last_seen_epoch": "1634913947.288513", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bb9fa385a11c398c79c1be44", "transport": "udp", "stream": 310, "initiator_ip": "10.10.22.157", "initiator_port": 51179, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 17536, "last_frame": 17536, "first_seen_epoch": "1634913951.147301", "last_seen_epoch": "1634913951.147301", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-6c5a3327b5ee0f45db1c1ec3", "transport": "udp", "stream": 311, "initiator_ip": "10.10.22.157", "initiator_port": 61766, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17537, "last_frame": 17538, "first_seen_epoch": "1634913951.302344", "last_seen_epoch": "1634913951.360308", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b4edac84b88499a6f7bd4264", "transport": "tcp", "stream": 371, "initiator_ip": "10.10.22.157", "initiator_port": 49822, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17539, "last_frame": 17545, "first_seen_epoch": "1634913951.36093", "last_seen_epoch": "1634913951.671332", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e4406ac81630def4e0262c71", "transport": "tcp", "stream": 372, "initiator_ip": "10.10.22.156", "initiator_port": 49786, "responder_ip": "122.179.158.212", "responder_port": 443, "first_frame": 17553, "last_frame": 17892, "first_seen_epoch": "1634913954.193799", "last_seen_epoch": "1634914029.369605", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-e3fd7e1c4e7017a66908a793", "transport": "tcp", "stream": 373, "initiator_ip": "10.10.22.157", "initiator_port": 49823, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 17555, "last_frame": 17640, "first_seen_epoch": "1634913954.994133", "last_seen_epoch": "1634913965.739995", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-38bd83d4190fc768683471b0", "transport": "udp", "stream": 312, "initiator_ip": "10.10.22.157", "initiator_port": 49722, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17575, "last_frame": 17576, "first_seen_epoch": "1634913955.677476", "last_seen_epoch": "1634913955.746543", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6d4048750c3c5f65b8641214", "transport": "tcp", "stream": 374, "initiator_ip": "10.10.22.157", "initiator_port": 49824, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17577, "last_frame": 17591, "first_seen_epoch": "1634913955.747901", "last_seen_epoch": "1634913956.054725", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-857f090f2c753649d42ae7fa", "transport": "tcp", "stream": 375, "initiator_ip": "10.10.22.158", "initiator_port": 49783, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 17590, "last_frame": 17749, "first_seen_epoch": "1634913956.015996", "last_seen_epoch": "1634913994.436884", "packets": 29, "bytes": 8751, "initiator_bytes": 2861, "responder_bytes": 5890 }, { "flow_id": "flow-136b1e8272c2c4ff23ab35e1", "transport": "udp", "stream": 313, "initiator_ip": "10.10.22.157", "initiator_port": 61156, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17592, "last_frame": 17593, "first_seen_epoch": "1634913956.149084", "last_seen_epoch": "1634913956.149484", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-5cc73c5ab8d73c7111df9b00", "transport": "udp", "stream": 314, "initiator_ip": "10.10.22.157", "initiator_port": 52322, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17594, "last_frame": 17595, "first_seen_epoch": "1634913956.151353", "last_seen_epoch": "1634913956.152393", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-3fb7281913425dae35a3aeea", "transport": "udp", "stream": 315, "initiator_ip": "10.10.22.157", "initiator_port": 55910, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17618, "last_frame": 17620, "first_seen_epoch": "1634913960.068526", "last_seen_epoch": "1634913960.122073", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7fb1a8195a40391542ec8dc7", "transport": "tcp", "stream": 376, "initiator_ip": "10.10.22.157", "initiator_port": 49825, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17621, "last_frame": 17626, "first_seen_epoch": "1634913960.123186", "last_seen_epoch": "1634913960.421837", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4dda34fe0657ed1fd1da8b7f", "transport": "tcp", "stream": 377, "initiator_ip": "10.10.22.157", "initiator_port": 49826, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17630, "last_frame": 17635, "first_seen_epoch": "1634913964.427307", "last_seen_epoch": "1634913964.757964", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-224d5526ba87c4b85fe27ffc", "transport": "tcp", "stream": 378, "initiator_ip": "10.10.22.157", "initiator_port": 49827, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17641, "last_frame": 17646, "first_seen_epoch": "1634913968.7732", "last_seen_epoch": "1634913969.153329", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-48016d45bc10b24d510f8655", "transport": "tcp", "stream": 379, "initiator_ip": "10.10.22.157", "initiator_port": 49828, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17648, "last_frame": 17653, "first_seen_epoch": "1634913973.160895", "last_seen_epoch": "1634913973.488137", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-15c821ed78e88f50e27dd79e", "transport": "tcp", "stream": 380, "initiator_ip": "10.10.22.156", "initiator_port": 49787, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 17654, "last_frame": 18482, "first_seen_epoch": "1634913975.259374", "last_seen_epoch": "1634914050.489595", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-5ce7e333c90b2ce7995e98e5", "transport": "tcp", "stream": 381, "initiator_ip": "10.10.22.158", "initiator_port": 49784, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 17658, "last_frame": 20600, "first_seen_epoch": "1634913977.213827", "last_seen_epoch": "1634914104.443474", "packets": 23, "bytes": 5090, "initiator_bytes": 2823, "responder_bytes": 2267 }, { "flow_id": "flow-15eeda1349dc762aa40a7ac0", "transport": "udp", "stream": 316, "initiator_ip": "10.10.22.157", "initiator_port": 55207, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17663, "last_frame": 17664, "first_seen_epoch": "1634913977.506098", "last_seen_epoch": "1634913977.592526", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6efaddcddcb5d24c30cb0535", "transport": "tcp", "stream": 382, "initiator_ip": "10.10.22.157", "initiator_port": 49829, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17665, "last_frame": 17678, "first_seen_epoch": "1634913977.59384", "last_seen_epoch": "1634913977.969102", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9a3b80392b25194d0940b605", "transport": "udp", "stream": 317, "initiator_ip": "10.10.22.157", "initiator_port": 64131, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17685, "last_frame": 17686, "first_seen_epoch": "1634913981.974176", "last_seen_epoch": "1634913982.036159", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ca774cfe2b6bd00ebef35e7e", "transport": "tcp", "stream": 383, "initiator_ip": "10.10.22.157", "initiator_port": 49830, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17687, "last_frame": 17693, "first_seen_epoch": "1634913982.037406", "last_seen_epoch": "1634913982.317258", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d48a3821e2557524ce2f6ba5", "transport": "udp", "stream": 318, "initiator_ip": "10.10.22.157", "initiator_port": 55431, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17700, "last_frame": 17701, "first_seen_epoch": "1634913986.333823", "last_seen_epoch": "1634913986.385488", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ca94aeea3a8212562971c488", "transport": "tcp", "stream": 384, "initiator_ip": "10.10.22.157", "initiator_port": 49831, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17702, "last_frame": 17707, "first_seen_epoch": "1634913986.386829", "last_seen_epoch": "1634913986.674787", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5034866807b3a0a24fc8566b", "transport": "tcp", "stream": 385, "initiator_ip": "10.10.22.157", "initiator_port": 49832, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17714, "last_frame": 17719, "first_seen_epoch": "1634913990.692779", "last_seen_epoch": "1634913990.979989", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-753cc1923f781c1e6f6e314f", "transport": "tcp", "stream": 386, "initiator_ip": "10.10.22.156", "initiator_port": 49788, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 17720, "last_frame": 19669, "first_seen_epoch": "1634913991.303216", "last_seen_epoch": "1634914066.651721", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-751f7c26d924956c3c4be219", "transport": "tcp", "stream": 387, "initiator_ip": "10.10.22.158", "initiator_port": 49785, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 17723, "last_frame": 20596, "first_seen_epoch": "1634913991.883791", "last_seen_epoch": "1634914104.442997", "packets": 29, "bytes": 9760, "initiator_bytes": 2809, "responder_bytes": 6951 }, { "flow_id": "flow-9879ef543868ba9ef709375b", "transport": "tcp", "stream": 388, "initiator_ip": "10.10.22.157", "initiator_port": 49833, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17750, "last_frame": 17760, "first_seen_epoch": "1634913994.990671", "last_seen_epoch": "1634913995.299261", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a4118a30299123404c95c3fa", "transport": "udp", "stream": 319, "initiator_ip": "10.10.22.156", "initiator_port": 64097, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17755, "last_frame": 17756, "first_seen_epoch": "1634913995.164237", "last_seen_epoch": "1634913995.164584", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1bad572bba1b4ed2fdb28518", "transport": "tcp", "stream": 389, "initiator_ip": "10.10.22.157", "initiator_port": 49834, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17766, "last_frame": 17773, "first_seen_epoch": "1634913999.319426", "last_seen_epoch": "1634913999.642483", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ec272406dbb0bce7c4496a71", "transport": "udp", "stream": 320, "initiator_ip": "10.10.22.157", "initiator_port": 54431, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17780, "last_frame": 17781, "first_seen_epoch": "1634914003.648641", "last_seen_epoch": "1634914003.71933", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-24d62a8b861e00e157f87b07", "transport": "tcp", "stream": 390, "initiator_ip": "10.10.22.157", "initiator_port": 49835, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17782, "last_frame": 17789, "first_seen_epoch": "1634914003.720652", "last_seen_epoch": "1634914004.007486", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9c98be03f4b9309ca0d906bc", "transport": "udp", "stream": 321, "initiator_ip": "10.10.22.156", "initiator_port": 49436, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17790, "last_frame": 17791, "first_seen_epoch": "1634914005.04097", "last_seen_epoch": "1634914005.091181", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-0f4a44aa8f50d8c921a609c9", "transport": "udp", "stream": 322, "initiator_ip": "10.10.22.157", "initiator_port": 63367, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 17793, "last_frame": 17794, "first_seen_epoch": "1634914008.039259", "last_seen_epoch": "1634914008.102752", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-99c19fdc009a526f22982ff2", "transport": "tcp", "stream": 391, "initiator_ip": "10.10.22.157", "initiator_port": 49836, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 17795, "last_frame": 22273, "first_seen_epoch": "1634914008.104086", "last_seen_epoch": "1634914179.652626", "packets": 72, "bytes": 4376, "initiator_bytes": 2428, "responder_bytes": 1948 }, { "flow_id": "flow-fd6295d49813ca93e4bb103a", "transport": "tcp", "stream": 392, "initiator_ip": "10.10.22.156", "initiator_port": 49789, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 17802, "last_frame": 19736, "first_seen_epoch": "1634914009.367054", "last_seen_epoch": "1634914084.695716", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7b6ba9f914965ccfcc4a4e7a", "transport": "udp", "stream": 323, "initiator_ip": "10.10.22.156", "initiator_port": 50460, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 17811, "last_frame": 17811, "first_seen_epoch": "1634914011.819741", "last_seen_epoch": "1634914011.819741", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-4cfa8b9066baa2114dbd54d1", "transport": "tcp", "stream": 393, "initiator_ip": "10.10.22.156", "initiator_port": 49790, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 17823, "last_frame": 17885, "first_seen_epoch": "1634914015.074878", "last_seen_epoch": "1634914025.961794", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-3eee8055d56e127cf2dc0386", "transport": "tcp", "stream": 394, "initiator_ip": "10.10.22.158", "initiator_port": 49786, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 17844, "last_frame": 20592, "first_seen_epoch": "1634914015.925722", "last_seen_epoch": "1634914104.442738", "packets": 23, "bytes": 4326, "initiator_bytes": 2835, "responder_bytes": 1491 }, { "flow_id": "flow-f5746d27277547699f7ad443", "transport": "udp", "stream": 324, "initiator_ip": "10.10.22.156", "initiator_port": 50183, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17862, "last_frame": 17863, "first_seen_epoch": "1634914016.820511", "last_seen_epoch": "1634914016.820832", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-644267165940f68659be7fe4", "transport": "udp", "stream": 325, "initiator_ip": "10.10.22.156", "initiator_port": 54366, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17864, "last_frame": 17865, "first_seen_epoch": "1634914016.822158", "last_seen_epoch": "1634914016.823164", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-6d9bca86fced3c9140eeac58", "transport": "udp", "stream": 326, "initiator_ip": "10.10.22.156", "initiator_port": 61470, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17876, "last_frame": 17877, "first_seen_epoch": "1634914025.414534", "last_seen_epoch": "1634914025.414938", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-68aec2e3e910645981b10e86", "transport": "tcp", "stream": 395, "initiator_ip": "10.10.22.156", "initiator_port": 49791, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 17878, "last_frame": 20571, "first_seen_epoch": "1634914025.415164", "last_seen_epoch": "1634914100.853929", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-61e60d3512a69b5c61e03f23", "transport": "udp", "stream": 327, "initiator_ip": "10.10.22.156", "initiator_port": 62573, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17879, "last_frame": 17880, "first_seen_epoch": "1634914025.4155", "last_seen_epoch": "1634914025.415749", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-7114849c313602ccaf14ac9d", "transport": "tcp", "stream": 396, "initiator_ip": "10.10.22.158", "initiator_port": 49787, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 17900, "last_frame": 20588, "first_seen_epoch": "1634914033.753287", "last_seen_epoch": "1634914104.442306", "packets": 30, "bytes": 10269, "initiator_bytes": 2812, "responder_bytes": 7457 }, { "flow_id": "flow-6344ac45a218fc3a34ea8549", "transport": "udp", "stream": 328, "initiator_ip": "10.10.22.156", "initiator_port": 59035, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17928, "last_frame": 17929, "first_seen_epoch": "1634914040.416102", "last_seen_epoch": "1634914040.416494", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-602f09cef67474afc6f2a6f4", "transport": "udp", "stream": 329, "initiator_ip": "10.10.22.156", "initiator_port": 58567, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17930, "last_frame": 17931, "first_seen_epoch": "1634914040.417328", "last_seen_epoch": "1634914040.417565", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-9b7dc70512b4c7143933edea", "transport": "udp", "stream": 330, "initiator_ip": "10.10.22.158", "initiator_port": 60997, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 17943, "last_frame": 17943, "first_seen_epoch": "1634914043.530947", "last_seen_epoch": "1634914043.530947", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-e79ecbf09e8c5c3d0cec8d47", "transport": "udp", "stream": 331, "initiator_ip": "10.10.22.158", "initiator_port": 61466, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17944, "last_frame": 17945, "first_seen_epoch": "1634914043.532544", "last_seen_epoch": "1634914043.532829", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-10bdeb118bdd37ef750a4e7b", "transport": "udp", "stream": 332, "initiator_ip": "10.10.22.158", "initiator_port": 56819, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 17946, "last_frame": 17947, "first_seen_epoch": "1634914043.534134", "last_seen_epoch": "1634914043.535101", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-8a4130c859f3d73308e12008", "transport": "tcp", "stream": 397, "initiator_ip": "10.10.22.158", "initiator_port": 49788, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 17950, "last_frame": 19057, "first_seen_epoch": "1634914045.976274", "last_seen_epoch": "1634914056.756023", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-560d1c11b24ecc40ba54bad9", "transport": "tcp", "stream": 398, "initiator_ip": "10.10.22.156", "initiator_port": 49792, "responder_ip": "140.82.49.12", "responder_port": 443, "first_frame": 17969, "last_frame": 20770, "first_seen_epoch": "1634914046.461964", "last_seen_epoch": "1634914162.917683", "packets": 23, "bytes": 3699, "initiator_bytes": 1442, "responder_bytes": 2257 }, { "flow_id": "flow-ec22241ed62d8514a20ebf12", "transport": "tcp", "stream": 399, "initiator_ip": "10.10.22.158", "initiator_port": 49789, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 17990, "last_frame": 20763, "first_seen_epoch": "1634914048.189968", "last_seen_epoch": "1634914159.567027", "packets": 30, "bytes": 11539, "initiator_bytes": 5944, "responder_bytes": 5595 }, { "flow_id": "flow-68701758dd18c077dbf58e61", "transport": "tcp", "stream": 400, "initiator_ip": "10.10.22.158", "initiator_port": 49790, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 18003, "last_frame": 20766, "first_seen_epoch": "1634914048.44062", "last_seen_epoch": "1634914162.45253", "packets": 2390, "bytes": 2249301, "initiator_bytes": 52319, "responder_bytes": 2196982 }, { "flow_id": "flow-b69a8cc1ce6056bfd7bfa066", "transport": "tcp", "stream": 401, "initiator_ip": "10.10.22.158", "initiator_port": 49791, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 19048, "last_frame": 20584, "first_seen_epoch": "1634914056.650042", "last_seen_epoch": "1634914104.441807", "packets": 23, "bytes": 4826, "initiator_bytes": 2792, "responder_bytes": 2034 }, { "flow_id": "flow-d9b8046bdc719389d4bce893", "transport": "tcp", "stream": 402, "initiator_ip": "10.10.22.156", "initiator_port": 49793, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19593, "last_frame": 19661, "first_seen_epoch": "1634914058.915383", "last_seen_epoch": "1634914062.109986", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-a8d3117305f6d005e7b21884", "transport": "tcp", "stream": 403, "initiator_ip": "10.10.22.156", "initiator_port": 49793, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19662, "last_frame": 19667, "first_seen_epoch": "1634914062.617302", "last_seen_epoch": "1634914065.265142", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f3141179e7cb357143a0436a", "transport": "tcp", "stream": 404, "initiator_ip": "10.10.22.156", "initiator_port": 49793, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19668, "last_frame": 19677, "first_seen_epoch": "1634914065.772997", "last_seen_epoch": "1634914068.544932", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f1e226ffb14d58008ff5de39", "transport": "tcp", "stream": 405, "initiator_ip": "10.10.22.156", "initiator_port": 49794, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19678, "last_frame": 19707, "first_seen_epoch": "1634914068.547719", "last_seen_epoch": "1634914071.577643", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-2ed16dc2f921cf19a53d0504", "transport": "udp", "stream": 333, "initiator_ip": "10.10.22.158", "initiator_port": 56820, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 19681, "last_frame": 19684, "first_seen_epoch": "1634914069.469918", "last_seen_epoch": "1634914070.054483", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-a17837b9881f032f095359b9", "transport": "udp", "stream": 334, "initiator_ip": "10.10.22.158", "initiator_port": 56821, "responder_ip": "51.158.108.203", "responder_port": 53, "first_frame": 19683, "last_frame": 19686, "first_seen_epoch": "1634914069.970793", "last_seen_epoch": "1634914070.383727", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-946d6117a68bddad53e1b8dc", "transport": "udp", "stream": 333, "initiator_ip": "10.10.22.158", "initiator_port": 53, "responder_ip": "130.61.64.122", "responder_port": 56820, "first_frame": 19685, "last_frame": 19685, "first_seen_epoch": "1634914070.054621", "last_seen_epoch": "1634914070.054621", "packets": 1, "bytes": 119, "initiator_bytes": 119, "responder_bytes": 0 }, { "flow_id": "flow-df8b00feda8ec41db1269705", "transport": "udp", "stream": 335, "initiator_ip": "10.10.22.158", "initiator_port": 56822, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 19687, "last_frame": 19688, "first_seen_epoch": "1634914070.388946", "last_seen_epoch": "1634914070.63852", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-8407b1c89e992bc8983ccda3", "transport": "udp", "stream": 336, "initiator_ip": "10.10.22.158", "initiator_port": 56823, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 19689, "last_frame": 19690, "first_seen_epoch": "1634914070.642877", "last_seen_epoch": "1634914070.89772", "packets": 2, "bytes": 172, "initiator_bytes": 78, "responder_bytes": 94 }, { "flow_id": "flow-a8840eec8ea3ee6cbaf5165c", "transport": "tcp", "stream": 406, "initiator_ip": "10.10.22.158", "initiator_port": 49792, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 19691, "last_frame": 22428, "first_seen_epoch": "1634914070.934542", "last_seen_epoch": "1634914214.44655", "packets": 23, "bytes": 4257, "initiator_bytes": 2836, "responder_bytes": 1421 }, { "flow_id": "flow-f6cfee06e8cb17197176f9fa", "transport": "tcp", "stream": 407, "initiator_ip": "10.10.22.156", "initiator_port": 49794, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19708, "last_frame": 19715, "first_seen_epoch": "1634914072.085978", "last_seen_epoch": "1634914074.789827", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-04a1e91324b8aa546eae9a03", "transport": "tcp", "stream": 408, "initiator_ip": "10.10.22.156", "initiator_port": 49794, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19716, "last_frame": 19720, "first_seen_epoch": "1634914075.290212", "last_seen_epoch": "1634914077.964351", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0bfc3d65075587ac5ad040b0", "transport": "tcp", "stream": 409, "initiator_ip": "10.10.22.156", "initiator_port": 49794, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19723, "last_frame": 19730, "first_seen_epoch": "1634914078.477195", "last_seen_epoch": "1634914081.136423", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0a2bdc7719990b4cec519e87", "transport": "udp", "stream": 337, "initiator_ip": "10.10.22.156", "initiator_port": 55266, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 19726, "last_frame": 19727, "first_seen_epoch": "1634914080.040183", "last_seen_epoch": "1634914080.08025", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-9555e2d20bb7b5659f6e4392", "transport": "tcp", "stream": 410, "initiator_ip": "10.10.22.156", "initiator_port": 49795, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19731, "last_frame": 19735, "first_seen_epoch": "1634914083.150388", "last_seen_epoch": "1634914084.219156", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-e53f1a7bc648912240332811", "transport": "tcp", "stream": 411, "initiator_ip": "10.10.22.156", "initiator_port": 49795, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19737, "last_frame": 19738, "first_seen_epoch": "1634914084.725893", "last_seen_epoch": "1634914087.382948", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b0af3d4b1a473acdd28e6ea2", "transport": "tcp", "stream": 412, "initiator_ip": "10.10.22.156", "initiator_port": 49795, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19739, "last_frame": 19747, "first_seen_epoch": "1634914087.899508", "last_seen_epoch": "1634914090.662478", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0cd74f6c1311fb08dd903e3b", "transport": "tcp", "stream": 413, "initiator_ip": "10.10.22.156", "initiator_port": 49795, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19748, "last_frame": 19760, "first_seen_epoch": "1634914091.164401", "last_seen_epoch": "1634914093.653601", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-128b70df4476e0814082e9da", "transport": "tcp", "stream": 414, "initiator_ip": "10.10.22.156", "initiator_port": 49796, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 19761, "last_frame": 20543, "first_seen_epoch": "1634914093.656172", "last_seen_epoch": "1634914096.812453", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-061cea3c00cfcfb029ebb007", "transport": "tcp", "stream": 415, "initiator_ip": "10.10.22.156", "initiator_port": 49796, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 20544, "last_frame": 20565, "first_seen_epoch": "1634914097.337005", "last_seen_epoch": "1634914100.083062", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9501d26916a7ba0cf6f83436", "transport": "tcp", "stream": 416, "initiator_ip": "10.10.22.158", "initiator_port": 49793, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 20547, "last_frame": 22424, "first_seen_epoch": "1634914098.257123", "last_seen_epoch": "1634914214.446109", "packets": 23, "bytes": 4253, "initiator_bytes": 2832, "responder_bytes": 1421 }, { "flow_id": "flow-db22bf236f87c0168922d331", "transport": "udp", "stream": 338, "initiator_ip": "10.10.22.156", "initiator_port": 63028, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20566, "last_frame": 20567, "first_seen_epoch": "1634914100.417669", "last_seen_epoch": "1634914100.418112", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-dde32f90b50e674ff34d4601", "transport": "udp", "stream": 339, "initiator_ip": "10.10.22.156", "initiator_port": 54172, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20568, "last_frame": 20569, "first_seen_epoch": "1634914100.418753", "last_seen_epoch": "1634914100.418985", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-4ce9b7bf42bc3274e44388bf", "transport": "tcp", "stream": 417, "initiator_ip": "10.10.22.156", "initiator_port": 49796, "responder_ip": "80.6.192.58", "responder_port": 443, "first_frame": 20570, "last_frame": 20574, "first_seen_epoch": "1634914100.586364", "last_seen_epoch": "1634914103.257594", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-77fc3f271d12fd6db9b7f8b6", "transport": "tcp", "stream": 418, "initiator_ip": "10.10.22.156", "initiator_port": 49797, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20601, "last_frame": 20608, "first_seen_epoch": "1634914108.26422", "last_seen_epoch": "1634914111.139933", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-f32ec63bdec59ede1773e921", "transport": "tcp", "stream": 419, "initiator_ip": "10.10.22.156", "initiator_port": 49797, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20609, "last_frame": 20611, "first_seen_epoch": "1634914111.64962", "last_seen_epoch": "1634914114.317926", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-185b10e613cec6687da511a2", "transport": "tcp", "stream": 420, "initiator_ip": "10.10.22.156", "initiator_port": 49797, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20614, "last_frame": 20619, "first_seen_epoch": "1634914114.820796", "last_seen_epoch": "1634914117.490807", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5c84312aaab16c2ba7c852ae", "transport": "tcp", "stream": 421, "initiator_ip": "10.10.22.158", "initiator_port": 49794, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 20621, "last_frame": 22420, "first_seen_epoch": "1634914117.529732", "last_seen_epoch": "1634914214.445618", "packets": 23, "bytes": 5084, "initiator_bytes": 2817, "responder_bytes": 2267 }, { "flow_id": "flow-7cf428b9d2dd4892c1058543", "transport": "tcp", "stream": 422, "initiator_ip": "10.10.22.156", "initiator_port": 49797, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20632, "last_frame": 20640, "first_seen_epoch": "1634914117.99276", "last_seen_epoch": "1634914120.765473", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-e05c7bf3f2db1481c0af88dd", "transport": "udp", "stream": 340, "initiator_ip": "10.10.22.156", "initiator_port": 54469, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20641, "last_frame": 20642, "first_seen_epoch": "1634914120.769729", "last_seen_epoch": "1634914120.770109", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-04c5b50cb2d99bf9e7711b3c", "transport": "tcp", "stream": 423, "initiator_ip": "10.10.22.156", "initiator_port": 49798, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20643, "last_frame": 20653, "first_seen_epoch": "1634914120.770234", "last_seen_epoch": "1634914123.873747", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-1ac35ea161b42367df35e645", "transport": "udp", "stream": 341, "initiator_ip": "10.10.22.156", "initiator_port": 50217, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20644, "last_frame": 20645, "first_seen_epoch": "1634914120.770773", "last_seen_epoch": "1634914120.771013", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-34f176ecf3b2af8a230ee0f4", "transport": "tcp", "stream": 424, "initiator_ip": "10.10.22.156", "initiator_port": 49798, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20656, "last_frame": 20668, "first_seen_epoch": "1634914124.383849", "last_seen_epoch": "1634914127.025484", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d4e5c09f763d9c02867d7df9", "transport": "udp", "stream": 342, "initiator_ip": "10.10.22.156", "initiator_port": 61341, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20659, "last_frame": 20660, "first_seen_epoch": "1634914125.043411", "last_seen_epoch": "1634914125.091553", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-a54b2a7dceec06d04f349dfc", "transport": "tcp", "stream": 425, "initiator_ip": "10.10.22.156", "initiator_port": 49798, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20669, "last_frame": 20673, "first_seen_epoch": "1634914127.541735", "last_seen_epoch": "1634914130.189636", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-41e8c45949119614fd873b46", "transport": "tcp", "stream": 426, "initiator_ip": "10.10.22.156", "initiator_port": 49799, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20675, "last_frame": 20677, "first_seen_epoch": "1634914132.200954", "last_seen_epoch": "1634914133.211071", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2615ab5f5ce538428916d951", "transport": "tcp", "stream": 427, "initiator_ip": "10.10.22.156", "initiator_port": 49799, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20679, "last_frame": 20691, "first_seen_epoch": "1634914133.728511", "last_seen_epoch": "1634914136.454956", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-ba9eb76d68895f032bbdcc89", "transport": "udp", "stream": 343, "initiator_ip": "10.10.22.156", "initiator_port": 55265, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20686, "last_frame": 20687, "first_seen_epoch": "1634914135.778296", "last_seen_epoch": "1634914135.778712", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-4eeee0d46f95638f92e73346", "transport": "udp", "stream": 344, "initiator_ip": "10.10.22.156", "initiator_port": 61378, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 20688, "last_frame": 20689, "first_seen_epoch": "1634914135.779607", "last_seen_epoch": "1634914135.779841", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-aa957feddf9444e00ea567bb", "transport": "tcp", "stream": 428, "initiator_ip": "10.10.22.156", "initiator_port": 49799, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20692, "last_frame": 20696, "first_seen_epoch": "1634914136.96187", "last_seen_epoch": "1634914139.578662", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-8ccf40f278f70bc8b99db0f2", "transport": "tcp", "stream": 429, "initiator_ip": "10.10.22.156", "initiator_port": 49799, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20701, "last_frame": 20720, "first_seen_epoch": "1634914140.087831", "last_seen_epoch": "1634914142.784865", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-012bf3a7ca63ecef2ec2dc6f", "transport": "tcp", "stream": 430, "initiator_ip": "10.10.22.158", "initiator_port": 49795, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 20704, "last_frame": 22416, "first_seen_epoch": "1634914140.765785", "last_seen_epoch": "1634914214.445294", "packets": 23, "bytes": 5100, "initiator_bytes": 2833, "responder_bytes": 2267 }, { "flow_id": "flow-5975de614886b3626ed63446", "transport": "tcp", "stream": 431, "initiator_ip": "10.10.22.156", "initiator_port": 49800, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20721, "last_frame": 20727, "first_seen_epoch": "1634914142.785849", "last_seen_epoch": "1634914145.842764", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-c1500558a9451f2ae6db4642", "transport": "tcp", "stream": 432, "initiator_ip": "10.10.22.156", "initiator_port": 49800, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20728, "last_frame": 20730, "first_seen_epoch": "1634914146.351463", "last_seen_epoch": "1634914149.133611", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5f4ead2f152318e7acd3ffd4", "transport": "tcp", "stream": 433, "initiator_ip": "10.10.22.156", "initiator_port": 49800, "responder_ip": "89.137.52.44", "responder_port": 443, "first_frame": 20731, "last_frame": 20741, "first_seen_epoch": "1634914149.649866", "last_seen_epoch": "1634914152.158674", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2adc06767854a9e8f5a68ccc", "transport": "tcp", "stream": 434, "initiator_ip": "10.10.22.158", "initiator_port": 49796, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 20748, "last_frame": 21674, "first_seen_epoch": "1634914158.727456", "last_seen_epoch": "1634914174.666155", "packets": 21, "bytes": 4205, "initiator_bytes": 2745, "responder_bytes": 1460 }, { "flow_id": "flow-ac8a7c9f10e365853180690b", "transport": "tcp", "stream": 435, "initiator_ip": "10.10.22.156", "initiator_port": 49801, "responder_ip": "73.230.205.91", "responder_port": 443, "first_frame": 20772, "last_frame": 22514, "first_seen_epoch": "1634914164.18562", "last_seen_epoch": "1634914239.512524", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-a757f1cd462bf1f03df155ee", "transport": "tcp", "stream": 436, "initiator_ip": "10.10.22.158", "initiator_port": 49797, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 20779, "last_frame": 23079, "first_seen_epoch": "1634914168.572302", "last_seen_epoch": "1634914407.281302", "packets": 28, "bytes": 11840, "initiator_bytes": 3351, "responder_bytes": 8489 }, { "flow_id": "flow-582085fff3f94c6b1dd093e3", "transport": "tcp", "stream": 437, "initiator_ip": "10.10.22.158", "initiator_port": 49798, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 20800, "last_frame": 22525, "first_seen_epoch": "1634914168.949232", "last_seen_epoch": "1634914243.959776", "packets": 1439, "bytes": 1336178, "initiator_bytes": 31614, "responder_bytes": 1304564 }, { "flow_id": "flow-ca64d3a9481a89f34a3688d4", "transport": "tcp", "stream": 438, "initiator_ip": "10.10.22.158", "initiator_port": 49799, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 21675, "last_frame": 22412, "first_seen_epoch": "1634914174.667654", "last_seen_epoch": "1634914214.444769", "packets": 23, "bytes": 4332, "initiator_bytes": 2841, "responder_bytes": 1491 }, { "flow_id": "flow-d0e602823e65d54db2a332e1", "transport": "tcp", "stream": 439, "initiator_ip": "10.10.22.156", "initiator_port": 49802, "responder_ip": "73.230.205.91", "responder_port": 443, "first_frame": 22274, "last_frame": 22572, "first_seen_epoch": "1634914180.216384", "last_seen_epoch": "1634914255.372408", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c829b968fe437ad42913c3a4", "transport": "udp", "stream": 345, "initiator_ip": "10.10.22.157", "initiator_port": 62968, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22281, "last_frame": 22282, "first_seen_epoch": "1634914183.668871", "last_seen_epoch": "1634914183.76501", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0ef5d0ede98db9f517d4cfde", "transport": "tcp", "stream": 440, "initiator_ip": "10.10.22.157", "initiator_port": 49837, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22283, "last_frame": 22288, "first_seen_epoch": "1634914183.766945", "last_seen_epoch": "1634914184.130494", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2a4cee3de10dfa61b15d2602", "transport": "udp", "stream": 346, "initiator_ip": "10.10.22.156", "initiator_port": 63913, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22289, "last_frame": 22290, "first_seen_epoch": "1634914185.046057", "last_seen_epoch": "1634914185.098419", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-a3c0ce410dce6a65739557bd", "transport": "tcp", "stream": 441, "initiator_ip": "10.10.22.157", "initiator_port": 49838, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22296, "last_frame": 22310, "first_seen_epoch": "1634914188.136501", "last_seen_epoch": "1634914191.429527", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-d3e3915aa1dfcd8f415f28f3", "transport": "tcp", "stream": 442, "initiator_ip": "10.10.22.158", "initiator_port": 49800, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 22315, "last_frame": 22802, "first_seen_epoch": "1634914193.203998", "last_seen_epoch": "1634914324.430798", "packets": 23, "bytes": 4814, "initiator_bytes": 2780, "responder_bytes": 2034 }, { "flow_id": "flow-189f37c432ce3cb481a5a8f4", "transport": "tcp", "stream": 443, "initiator_ip": "10.10.22.157", "initiator_port": 49839, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22334, "last_frame": 22339, "first_seen_epoch": "1634914195.434268", "last_seen_epoch": "1634914195.757582", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f04fd7cf009dc2bf565b277e", "transport": "udp", "stream": 347, "initiator_ip": "10.10.22.156", "initiator_port": 58939, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22340, "last_frame": 22341, "first_seen_epoch": "1634914195.796761", "last_seen_epoch": "1634914195.79719", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-b48b5a3cd61d6d390986aa00", "transport": "udp", "stream": 348, "initiator_ip": "10.10.22.156", "initiator_port": 54014, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22342, "last_frame": 46789, "first_seen_epoch": "1634914195.797783", "last_seen_epoch": "1634915393.27901", "packets": 4, "bytes": 483, "initiator_bytes": 172, "responder_bytes": 311 }, { "flow_id": "flow-126ef25fef29e62621f09484", "transport": "tcp", "stream": 444, "initiator_ip": "10.10.22.156", "initiator_port": 49803, "responder_ip": "73.230.205.91", "responder_port": 443, "first_frame": 22346, "last_frame": 22617, "first_seen_epoch": "1634914198.294807", "last_seen_epoch": "1634914273.453642", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-b63727a5f4ff2432adbd48fa", "transport": "tcp", "stream": 445, "initiator_ip": "10.10.22.157", "initiator_port": 49840, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22348, "last_frame": 22355, "first_seen_epoch": "1634914199.763638", "last_seen_epoch": "1634914200.049286", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-781ebef7059fbf5b9eda7d74", "transport": "udp", "stream": 349, "initiator_ip": "10.10.22.157", "initiator_port": 59517, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22357, "last_frame": 22358, "first_seen_epoch": "1634914204.074272", "last_seen_epoch": "1634914204.143386", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-52fbed5d7975455eb2851261", "transport": "tcp", "stream": 446, "initiator_ip": "10.10.22.157", "initiator_port": 49841, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22359, "last_frame": 22364, "first_seen_epoch": "1634914204.144716", "last_seen_epoch": "1634914204.46254", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3634ed2bbb301fc7557644d2", "transport": "tcp", "stream": 447, "initiator_ip": "10.10.22.158", "initiator_port": 49801, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 22370, "last_frame": 22798, "first_seen_epoch": "1634914207.541683", "last_seen_epoch": "1634914324.430256", "packets": 23, "bytes": 4824, "initiator_bytes": 2790, "responder_bytes": 2034 }, { "flow_id": "flow-9df6b5c2b19ba761f6879806", "transport": "udp", "stream": 350, "initiator_ip": "10.10.22.157", "initiator_port": 63896, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22385, "last_frame": 22386, "first_seen_epoch": "1634914208.480196", "last_seen_epoch": "1634914208.729228", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-c9a4db2b0aef336ab4b75b90", "transport": "tcp", "stream": 448, "initiator_ip": "10.10.22.157", "initiator_port": 49842, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22387, "last_frame": 22394, "first_seen_epoch": "1634914208.730506", "last_seen_epoch": "1634914209.050874", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9182d546b5f7ee3b87d9eabb", "transport": "udp", "stream": 351, "initiator_ip": "10.10.22.157", "initiator_port": 64277, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22395, "last_frame": 22396, "first_seen_epoch": "1634914213.060306", "last_seen_epoch": "1634914213.336672", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a5f6b54c18ee421b5c693706", "transport": "tcp", "stream": 449, "initiator_ip": "10.10.22.157", "initiator_port": 49843, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22397, "last_frame": 22403, "first_seen_epoch": "1634914213.338018", "last_seen_epoch": "1634914213.951085", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0037d5d5529dc0617d840b29", "transport": "udp", "stream": 352, "initiator_ip": "10.10.22.156", "initiator_port": 60664, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22404, "last_frame": 56014, "first_seen_epoch": "1634914214.343325", "last_seen_epoch": "1634915811.896726", "packets": 4, "bytes": 490, "initiator_bytes": 169, "responder_bytes": 321 }, { "flow_id": "flow-3cf064997b900a623f7f9d83", "transport": "tcp", "stream": 450, "initiator_ip": "10.10.22.156", "initiator_port": 49804, "responder_ip": "73.230.205.91", "responder_port": 443, "first_frame": 22406, "last_frame": 22702, "first_seen_epoch": "1634914214.34379", "last_seen_epoch": "1634914289.507001", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-bf459a47367cbaa621191a52", "transport": "udp", "stream": 353, "initiator_ip": "10.10.22.156", "initiator_port": 52366, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22407, "last_frame": 22408, "first_seen_epoch": "1634914214.344206", "last_seen_epoch": "1634914214.344439", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-0be7c0d1b36d091f5702ca02", "transport": "tcp", "stream": 451, "initiator_ip": "10.10.22.157", "initiator_port": 49844, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22431, "last_frame": 22436, "first_seen_epoch": "1634914217.965153", "last_seen_epoch": "1634914218.278964", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8333bc4607555cad03095415", "transport": "tcp", "stream": 452, "initiator_ip": "10.10.22.157", "initiator_port": 49845, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22442, "last_frame": 22447, "first_seen_epoch": "1634914222.294849", "last_seen_epoch": "1634914222.608244", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-94b6ccc86deb8a7d1872f135", "transport": "tcp", "stream": 453, "initiator_ip": "10.10.22.157", "initiator_port": 49846, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22450, "last_frame": 22455, "first_seen_epoch": "1634914226.623388", "last_seen_epoch": "1634914226.972065", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a606b18a90b1f2990e6d41c1", "transport": "udp", "stream": 354, "initiator_ip": "10.10.22.158", "initiator_port": 56824, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 22458, "last_frame": 22459, "first_seen_epoch": "1634914228.426721", "last_seen_epoch": "1634914228.610736", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-67bf609b293b0c25f9c5036a", "transport": "udp", "stream": 355, "initiator_ip": "10.10.22.158", "initiator_port": 56825, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 22460, "last_frame": 22461, "first_seen_epoch": "1634914228.615943", "last_seen_epoch": "1634914228.793138", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-727a7d14df8a788c8c39b29d", "transport": "udp", "stream": 356, "initiator_ip": "10.10.22.158", "initiator_port": 56826, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 22462, "last_frame": 22463, "first_seen_epoch": "1634914228.798254", "last_seen_epoch": "1634914228.968942", "packets": 2, "bytes": 172, "initiator_bytes": 78, "responder_bytes": 94 }, { "flow_id": "flow-91561eb8f2e42e911a9efcde", "transport": "tcp", "stream": 454, "initiator_ip": "10.10.22.158", "initiator_port": 49802, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 22466, "last_frame": 22547, "first_seen_epoch": "1634914229.007032", "last_seen_epoch": "1634914252.475503", "packets": 28, "bytes": 9597, "initiator_bytes": 2952, "responder_bytes": 6645 }, { "flow_id": "flow-58279e5ee36d6a1c9de5fa77", "transport": "udp", "stream": 357, "initiator_ip": "10.10.22.156", "initiator_port": 61199, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22487, "last_frame": 22488, "first_seen_epoch": "1634914229.358867", "last_seen_epoch": "1634914229.359261", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-49d13297bff6956d4ac88153", "transport": "udp", "stream": 358, "initiator_ip": "10.10.22.156", "initiator_port": 52423, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22489, "last_frame": 22490, "first_seen_epoch": "1634914229.360627", "last_seen_epoch": "1634914229.360861", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-bfdb5f5cf3cd24aefdbf5cc3", "transport": "udp", "stream": 359, "initiator_ip": "10.10.22.157", "initiator_port": 51517, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22492, "last_frame": 22493, "first_seen_epoch": "1634914230.982725", "last_seen_epoch": "1634914231.08624", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a73430eb42c8d3e26fc5f376", "transport": "tcp", "stream": 455, "initiator_ip": "10.10.22.157", "initiator_port": 49847, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22494, "last_frame": 22499, "first_seen_epoch": "1634914231.087637", "last_seen_epoch": "1634914231.44236", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-782e543e0f4f7f6128f55562", "transport": "udp", "stream": 360, "initiator_ip": "10.10.22.157", "initiator_port": 64220, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22504, "last_frame": 22505, "first_seen_epoch": "1634914235.450364", "last_seen_epoch": "1634914235.559285", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a83020d5e8d03b5940a30d19", "transport": "tcp", "stream": 456, "initiator_ip": "10.10.22.157", "initiator_port": 49848, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22506, "last_frame": 22513, "first_seen_epoch": "1634914235.560391", "last_seen_epoch": "1634914238.918012", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-8875005d86d85ba2e241090e", "transport": "udp", "stream": 361, "initiator_ip": "10.10.22.157", "initiator_port": 58351, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22517, "last_frame": 22518, "first_seen_epoch": "1634914242.934815", "last_seen_epoch": "1634914243.004538", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ca4ac980db6ea0bd9ae717a5", "transport": "tcp", "stream": 457, "initiator_ip": "10.10.22.157", "initiator_port": 49849, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22519, "last_frame": 22524, "first_seen_epoch": "1634914243.005852", "last_seen_epoch": "1634914243.302347", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7b7f7c5dad047453bfc40f6b", "transport": "tcp", "stream": 458, "initiator_ip": "10.10.22.157", "initiator_port": 49850, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22526, "last_frame": 22531, "first_seen_epoch": "1634914247.325036", "last_seen_epoch": "1634914247.653219", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-781004b71c4cce41b4baf81a", "transport": "tcp", "stream": 459, "initiator_ip": "10.10.22.156", "initiator_port": 49805, "responder_ip": "50.194.160.233", "responder_port": 32100, "first_frame": 22532, "last_frame": 22813, "first_seen_epoch": "1634914249.454171", "last_seen_epoch": "1634914324.605654", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-06f8f8fcd323d58b907e4778", "transport": "tcp", "stream": 460, "initiator_ip": "10.10.22.157", "initiator_port": 49851, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22534, "last_frame": 22540, "first_seen_epoch": "1634914251.671988", "last_seen_epoch": "1634914251.960449", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-97ae8ba1943b2e807cc48a61", "transport": "tcp", "stream": 461, "initiator_ip": "10.10.22.158", "initiator_port": 49803, "responder_ip": "107.161.180.34", "responder_port": 443, "first_frame": 22549, "last_frame": 22810, "first_seen_epoch": "1634914252.489012", "last_seen_epoch": "1634914324.43162", "packets": 23, "bytes": 4239, "initiator_bytes": 2818, "responder_bytes": 1421 }, { "flow_id": "flow-ece35c9e6d13bd26adcffaa1", "transport": "tcp", "stream": 462, "initiator_ip": "10.10.22.157", "initiator_port": 49852, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22573, "last_frame": 22580, "first_seen_epoch": "1634914255.966449", "last_seen_epoch": "1634914256.266722", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-238e23e20a727b67b7e574ab", "transport": "udp", "stream": 362, "initiator_ip": "10.10.22.157", "initiator_port": 65322, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22584, "last_frame": 22586, "first_seen_epoch": "1634914260.296679", "last_seen_epoch": "1634914260.355732", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4e2a04570e7383154ae6d489", "transport": "tcp", "stream": 463, "initiator_ip": "10.10.22.157", "initiator_port": 49853, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22587, "last_frame": 22592, "first_seen_epoch": "1634914260.356717", "last_seen_epoch": "1634914260.659651", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bf22078e3c514f01eaf9149f", "transport": "udp", "stream": 363, "initiator_ip": "10.10.22.157", "initiator_port": 64369, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22594, "last_frame": 22595, "first_seen_epoch": "1634914264.670534", "last_seen_epoch": "1634914264.742365", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-db18149a1a98c39b73c622d5", "transport": "tcp", "stream": 464, "initiator_ip": "10.10.22.157", "initiator_port": 49854, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22596, "last_frame": 22601, "first_seen_epoch": "1634914264.743699", "last_seen_epoch": "1634914265.032186", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6ad0c94fe1f0980f1e1d25f2", "transport": "tcp", "stream": 465, "initiator_ip": "10.10.22.156", "initiator_port": 49806, "responder_ip": "50.194.160.233", "responder_port": 32100, "first_frame": 22602, "last_frame": 22882, "first_seen_epoch": "1634914265.499946", "last_seen_epoch": "1634914340.662047", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-d2e9165b9d5459da808d1d25", "transport": "udp", "stream": 364, "initiator_ip": "10.10.22.157", "initiator_port": 53650, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22605, "last_frame": 22606, "first_seen_epoch": "1634914269.046576", "last_seen_epoch": "1634914269.105521", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7e381265d6183e824403bce7", "transport": "tcp", "stream": 466, "initiator_ip": "10.10.22.157", "initiator_port": 49855, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22607, "last_frame": 22612, "first_seen_epoch": "1634914269.106872", "last_seen_epoch": "1634914269.399909", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-499595845a64d9ec54f843f9", "transport": "tcp", "stream": 467, "initiator_ip": "10.10.22.157", "initiator_port": 49856, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22616, "last_frame": 22622, "first_seen_epoch": "1634914273.405728", "last_seen_epoch": "1634914273.705213", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9f38eea9652421237a94b0ed", "transport": "udp", "stream": 365, "initiator_ip": "10.10.22.156", "initiator_port": 49609, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22623, "last_frame": 22624, "first_seen_epoch": "1634914275.047966", "last_seen_epoch": "1634914275.140675", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-26572d54a49639ab63a2a2a2", "transport": "tcp", "stream": 468, "initiator_ip": "10.10.22.158", "initiator_port": 49804, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 22627, "last_frame": 22806, "first_seen_epoch": "1634914275.534318", "last_seen_epoch": "1634914324.431242", "packets": 23, "bytes": 5319, "initiator_bytes": 2841, "responder_bytes": 2478 }, { "flow_id": "flow-45a32d9291a3cf3bf3dc40a5", "transport": "tcp", "stream": 469, "initiator_ip": "10.10.22.157", "initiator_port": 49857, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22642, "last_frame": 22647, "first_seen_epoch": "1634914277.716695", "last_seen_epoch": "1634914278.012354", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bdf5b31f6747751456944924", "transport": "tcp", "stream": 470, "initiator_ip": "10.10.22.157", "initiator_port": 49858, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22655, "last_frame": 22662, "first_seen_epoch": "1634914282.029632", "last_seen_epoch": "1634914282.331116", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-0323cf1bd0823d245be4431d", "transport": "tcp", "stream": 471, "initiator_ip": "10.10.22.156", "initiator_port": 49807, "responder_ip": "50.194.160.233", "responder_port": 32100, "first_frame": 22664, "last_frame": 22944, "first_seen_epoch": "1634914283.546136", "last_seen_epoch": "1634914358.72333", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-0631252c39ad2b53b19a56a8", "transport": "udp", "stream": 366, "initiator_ip": "10.10.22.157", "initiator_port": 60469, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22669, "last_frame": 22670, "first_seen_epoch": "1634914286.343088", "last_seen_epoch": "1634914286.411598", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-502e7e0be55952c7ed8d7105", "transport": "tcp", "stream": 472, "initiator_ip": "10.10.22.157", "initiator_port": 49859, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22671, "last_frame": 22678, "first_seen_epoch": "1634914286.412885", "last_seen_epoch": "1634914286.709908", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0ef718773e7811c50c7e2ba5", "transport": "tcp", "stream": 473, "initiator_ip": "10.10.22.158", "initiator_port": 49805, "responder_ip": "83.223.99.191", "responder_port": 443, "first_frame": 22681, "last_frame": 22777, "first_seen_epoch": "1634914288.583091", "last_seen_epoch": "1634914321.368104", "packets": 16, "bytes": 4316, "initiator_bytes": 2605, "responder_bytes": 1711 }, { "flow_id": "flow-3ddd5ab083e9e3d1271cc5b7", "transport": "udp", "stream": 367, "initiator_ip": "10.10.22.156", "initiator_port": 55924, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22698, "last_frame": 22699, "first_seen_epoch": "1634914289.360244", "last_seen_epoch": "1634914289.360718", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-06ab59019167dcae67c88495", "transport": "udp", "stream": 368, "initiator_ip": "10.10.22.156", "initiator_port": 55965, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22700, "last_frame": 22701, "first_seen_epoch": "1634914289.36157", "last_seen_epoch": "1634914289.361806", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-6dc763cd00d243910af35463", "transport": "udp", "stream": 369, "initiator_ip": "10.10.22.157", "initiator_port": 56419, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22704, "last_frame": 22705, "first_seen_epoch": "1634914290.716642", "last_seen_epoch": "1634914290.805632", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ac819f18bcd075cf1b9887cf", "transport": "tcp", "stream": 474, "initiator_ip": "10.10.22.157", "initiator_port": 49860, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22706, "last_frame": 22711, "first_seen_epoch": "1634914290.806975", "last_seen_epoch": "1634914291.151443", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-edca81a844f8912dc49d6149", "transport": "udp", "stream": 370, "initiator_ip": "10.10.22.157", "initiator_port": 51481, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22714, "last_frame": 22715, "first_seen_epoch": "1634914295.156707", "last_seen_epoch": "1634914295.258487", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b4edeaaf864a08c5ea843e39", "transport": "tcp", "stream": 475, "initiator_ip": "10.10.22.157", "initiator_port": 49861, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22716, "last_frame": 22721, "first_seen_epoch": "1634914295.259801", "last_seen_epoch": "1634914295.624498", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f9aa762848dc93029eb3e620", "transport": "tcp", "stream": 476, "initiator_ip": "10.10.22.156", "initiator_port": 49808, "responder_ip": "50.194.160.233", "responder_port": 32100, "first_frame": 22723, "last_frame": 22984, "first_seen_epoch": "1634914299.578958", "last_seen_epoch": "1634914374.753428", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-32791b7428a551bc59904d52", "transport": "tcp", "stream": 477, "initiator_ip": "10.10.22.157", "initiator_port": 49862, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22724, "last_frame": 22731, "first_seen_epoch": "1634914299.639797", "last_seen_epoch": "1634914299.940238", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d815f37b712090d7eaabda5b", "transport": "tcp", "stream": 478, "initiator_ip": "10.10.22.157", "initiator_port": 49863, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22734, "last_frame": 22739, "first_seen_epoch": "1634914303.967657", "last_seen_epoch": "1634914304.282868", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4a64cc10e9175456089a3c38", "transport": "tcp", "stream": 479, "initiator_ip": "10.10.22.157", "initiator_port": 49864, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22743, "last_frame": 22748, "first_seen_epoch": "1634914308.297467", "last_seen_epoch": "1634914308.592669", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cd4b845dbffdbcb3b68ad73b", "transport": "udp", "stream": 371, "initiator_ip": "10.10.22.157", "initiator_port": 62552, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22750, "last_frame": 22751, "first_seen_epoch": "1634914312.609155", "last_seen_epoch": "1634914312.684432", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-829aea861079cb075c8969e6", "transport": "tcp", "stream": 480, "initiator_ip": "10.10.22.157", "initiator_port": 49865, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22752, "last_frame": 22758, "first_seen_epoch": "1634914312.685662", "last_seen_epoch": "1634914312.989911", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ccff94055063faa34e55d09b", "transport": "udp", "stream": 372, "initiator_ip": "10.10.22.157", "initiator_port": 58580, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22768, "last_frame": 22769, "first_seen_epoch": "1634914316.999774", "last_seen_epoch": "1634914317.051871", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ffa87fd813ca886bcc4f5033", "transport": "tcp", "stream": 481, "initiator_ip": "10.10.22.157", "initiator_port": 49866, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22770, "last_frame": 22775, "first_seen_epoch": "1634914317.052727", "last_seen_epoch": "1634914317.371239", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-32b1c7e0a55b52cc5b6a9773", "transport": "tcp", "stream": 482, "initiator_ip": "10.10.22.156", "initiator_port": 49809, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22776, "last_frame": 22793, "first_seen_epoch": "1634914320.66052", "last_seen_epoch": "1634914323.716018", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-dc035134fda68f913bfba6a8", "transport": "udp", "stream": 373, "initiator_ip": "10.10.22.157", "initiator_port": 62932, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22778, "last_frame": 22780, "first_seen_epoch": "1634914321.374829", "last_seen_epoch": "1634914321.418517", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-67b0062d83d3ed99b97d6ec1", "transport": "tcp", "stream": 483, "initiator_ip": "10.10.22.158", "initiator_port": 49806, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 22779, "last_frame": 22964, "first_seen_epoch": "1634914321.405602", "last_seen_epoch": "1634914370.58711", "packets": 21, "bytes": 9177, "initiator_bytes": 2719, "responder_bytes": 6458 }, { "flow_id": "flow-80d2db05e38b073d2494e962", "transport": "tcp", "stream": 484, "initiator_ip": "10.10.22.157", "initiator_port": 49867, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22781, "last_frame": 22791, "first_seen_epoch": "1634914321.419595", "last_seen_epoch": "1634914321.701919", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7f9b822134b3dc3c5280c58c", "transport": "tcp", "stream": 485, "initiator_ip": "10.10.22.156", "initiator_port": 49809, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22794, "last_frame": 22820, "first_seen_epoch": "1634914324.216912", "last_seen_epoch": "1634914326.765127", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1a3fc0f068c285e931e62b19", "transport": "tcp", "stream": 486, "initiator_ip": "10.10.22.157", "initiator_port": 49868, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22814, "last_frame": 22819, "first_seen_epoch": "1634914325.717988", "last_seen_epoch": "1634914326.051983", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-35f4614f115bc189fa07ba82", "transport": "tcp", "stream": 487, "initiator_ip": "10.10.22.156", "initiator_port": 49809, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22821, "last_frame": 22826, "first_seen_epoch": "1634914327.279169", "last_seen_epoch": "1634914329.871301", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1feef2ee4104a5336fd88743", "transport": "udp", "stream": 374, "initiator_ip": "10.10.22.156", "initiator_port": 64712, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22827, "last_frame": 22828, "first_seen_epoch": "1634914329.873916", "last_seen_epoch": "1634914329.874275", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-71c8caaca93f986d8976f692", "transport": "tcp", "stream": 488, "initiator_ip": "10.10.22.156", "initiator_port": 49810, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22829, "last_frame": 22843, "first_seen_epoch": "1634914329.874298", "last_seen_epoch": "1634914332.889811", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-ce9feb7e8d76b4761f4ff8ee", "transport": "udp", "stream": 375, "initiator_ip": "10.10.22.156", "initiator_port": 52254, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22830, "last_frame": 22831, "first_seen_epoch": "1634914329.874582", "last_seen_epoch": "1634914329.874791", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-3489c4c07e8725871fad81ae", "transport": "tcp", "stream": 489, "initiator_ip": "10.10.22.157", "initiator_port": 49869, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22832, "last_frame": 22837, "first_seen_epoch": "1634914330.062003", "last_seen_epoch": "1634914330.382298", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2d536dffeadae366b272f3fc", "transport": "udp", "stream": 376, "initiator_ip": "10.10.22.157", "initiator_port": 62283, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22839, "last_frame": 22840, "first_seen_epoch": "1634914330.90786", "last_seen_epoch": "1634914330.908117", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-ab1e603c7831cf5d5dd8f730", "transport": "udp", "stream": 377, "initiator_ip": "10.10.22.157", "initiator_port": 57173, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22841, "last_frame": 22842, "first_seen_epoch": "1634914330.908533", "last_seen_epoch": "1634914330.908691", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-fcadcf61a773440998ed9edc", "transport": "tcp", "stream": 490, "initiator_ip": "10.10.22.156", "initiator_port": 49810, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22844, "last_frame": 22853, "first_seen_epoch": "1634914333.40467", "last_seen_epoch": "1634914336.014856", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f90baf548e3ee418f576ffb3", "transport": "tcp", "stream": 491, "initiator_ip": "10.10.22.157", "initiator_port": 49870, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22845, "last_frame": 22850, "first_seen_epoch": "1634914334.389945", "last_seen_epoch": "1634914334.716967", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f4f8ec587bea5d90425840f0", "transport": "tcp", "stream": 492, "initiator_ip": "10.10.22.156", "initiator_port": 49810, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22854, "last_frame": 22875, "first_seen_epoch": "1634914336.529729", "last_seen_epoch": "1634914338.955753", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-8a0595c34a7e9f30868eb8a2", "transport": "udp", "stream": 378, "initiator_ip": "10.10.22.157", "initiator_port": 60847, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22872, "last_frame": 22873, "first_seen_epoch": "1634914338.749658", "last_seen_epoch": "1634914338.816178", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5bc9e2c1e32bc77adb6f7724", "transport": "tcp", "stream": 493, "initiator_ip": "10.10.22.157", "initiator_port": 49871, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22874, "last_frame": 22880, "first_seen_epoch": "1634914338.817638", "last_seen_epoch": "1634914339.137753", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-45ffb5c986a68e8284f0fe28", "transport": "tcp", "stream": 494, "initiator_ip": "10.10.22.156", "initiator_port": 49810, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22881, "last_frame": 22883, "first_seen_epoch": "1634914339.467128", "last_seen_epoch": "1634914342.057045", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-40f52a440208bc92ac860e7e", "transport": "udp", "stream": 379, "initiator_ip": "10.10.22.157", "initiator_port": 59027, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22884, "last_frame": 22885, "first_seen_epoch": "1634914343.156309", "last_seen_epoch": "1634914343.220553", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2ca70df7fbc15740f301e4f9", "transport": "tcp", "stream": 495, "initiator_ip": "10.10.22.157", "initiator_port": 49872, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22886, "last_frame": 22891, "first_seen_epoch": "1634914343.221507", "last_seen_epoch": "1634914343.503464", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cfc4523fe6bb3df7f31571d5", "transport": "tcp", "stream": 496, "initiator_ip": "10.10.22.156", "initiator_port": 49811, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22892, "last_frame": 22906, "first_seen_epoch": "1634914344.065075", "last_seen_epoch": "1634914345.106197", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-897d85566fdbcde931f8472c", "transport": "udp", "stream": 380, "initiator_ip": "10.10.22.156", "initiator_port": 50823, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22901, "last_frame": 22902, "first_seen_epoch": "1634914344.87558", "last_seen_epoch": "1634914344.875954", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-0445385734de75bbcefcb3ea", "transport": "udp", "stream": 381, "initiator_ip": "10.10.22.156", "initiator_port": 60013, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22903, "last_frame": 22904, "first_seen_epoch": "1634914344.876484", "last_seen_epoch": "1634914344.876688", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-45b249fff7fc161f30ef716c", "transport": "tcp", "stream": 497, "initiator_ip": "10.10.22.156", "initiator_port": 49811, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22907, "last_frame": 22916, "first_seen_epoch": "1634914345.607177", "last_seen_epoch": "1634914348.071534", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fd278ca9e58a027d72071c0b", "transport": "udp", "stream": 382, "initiator_ip": "10.10.22.157", "initiator_port": 52055, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22908, "last_frame": 22909, "first_seen_epoch": "1634914347.51671", "last_seen_epoch": "1634914347.579612", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-abcb8972bcfa15c612bd2359", "transport": "tcp", "stream": 498, "initiator_ip": "10.10.22.157", "initiator_port": 49873, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22910, "last_frame": 22915, "first_seen_epoch": "1634914347.580988", "last_seen_epoch": "1634914347.868396", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-61b7239b8c1c9f9697827530", "transport": "tcp", "stream": 499, "initiator_ip": "10.10.22.156", "initiator_port": 49811, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22917, "last_frame": 22928, "first_seen_epoch": "1634914348.576543", "last_seen_epoch": "1634914351.170373", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5d559faac91df80dcbfe21e3", "transport": "udp", "stream": 383, "initiator_ip": "10.10.22.158", "initiator_port": 54106, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22918, "last_frame": 22919, "first_seen_epoch": "1634914348.871422", "last_seen_epoch": "1634914348.871719", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-168a6eeabcd4af23e93f9185", "transport": "udp", "stream": 384, "initiator_ip": "10.10.22.158", "initiator_port": 56386, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22920, "last_frame": 22921, "first_seen_epoch": "1634914348.87212", "last_seen_epoch": "1634914348.872293", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-c392e494458a6f318ec62f70", "transport": "udp", "stream": 385, "initiator_ip": "10.10.22.156", "initiator_port": 58169, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 22924, "last_frame": 22925, "first_seen_epoch": "1634914350.048071", "last_seen_epoch": "1634914350.102554", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-7e1aba57bf10cb6f28847a7b", "transport": "tcp", "stream": 500, "initiator_ip": "10.10.22.156", "initiator_port": 49811, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22929, "last_frame": 22932, "first_seen_epoch": "1634914351.670711", "last_seen_epoch": "1634914354.242503", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6330b6b1681da6bbc3d3b306", "transport": "tcp", "stream": 501, "initiator_ip": "10.10.22.157", "initiator_port": 49874, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22930, "last_frame": 22953, "first_seen_epoch": "1634914351.875201", "last_seen_epoch": "1634914364.220637", "packets": 12, "bytes": 788, "initiator_bytes": 514, "responder_bytes": 274 }, { "flow_id": "flow-9d4dac96af101bd6ace1b0c9", "transport": "tcp", "stream": 502, "initiator_ip": "10.10.22.156", "initiator_port": 49812, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22933, "last_frame": 22942, "first_seen_epoch": "1634914354.245348", "last_seen_epoch": "1634914357.245147", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-653756c9beaf3593540862f0", "transport": "tcp", "stream": 503, "initiator_ip": "10.10.22.156", "initiator_port": 49812, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22943, "last_frame": 22945, "first_seen_epoch": "1634914357.748621", "last_seen_epoch": "1634914360.388966", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-036dc3d8d7a94a68066ec944", "transport": "tcp", "stream": 504, "initiator_ip": "10.10.22.156", "initiator_port": 49812, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22948, "last_frame": 22951, "first_seen_epoch": "1634914360.905936", "last_seen_epoch": "1634914363.356294", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b37d7425a73f873bd44df34f", "transport": "tcp", "stream": 505, "initiator_ip": "10.10.22.156", "initiator_port": 49812, "responder_ip": "47.40.196.233", "responder_port": 2222, "first_frame": 22952, "last_frame": 22955, "first_seen_epoch": "1634914363.858359", "last_seen_epoch": "1634914366.42913", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f49004ea3bc2f48e4873577e", "transport": "tcp", "stream": 506, "initiator_ip": "10.10.22.157", "initiator_port": 49875, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22956, "last_frame": 22963, "first_seen_epoch": "1634914368.236142", "last_seen_epoch": "1634914368.555663", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-0cf40c4ccffb653fa31b956a", "transport": "tcp", "stream": 507, "initiator_ip": "10.10.22.158", "initiator_port": 49807, "responder_ip": "198.136.61.225", "responder_port": 443, "first_frame": 22965, "last_frame": 23044, "first_seen_epoch": "1634914370.597721", "last_seen_epoch": "1634914402.93218", "packets": 6, "bytes": 724, "initiator_bytes": 612, "responder_bytes": 112 }, { "flow_id": "flow-200a6594c8fe3163397ed268", "transport": "tcp", "stream": 508, "initiator_ip": "10.10.22.157", "initiator_port": 49876, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22971, "last_frame": 22976, "first_seen_epoch": "1634914372.562482", "last_seen_epoch": "1634914373.186854", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-12c6c730c0e3f8eb875d68c0", "transport": "udp", "stream": 386, "initiator_ip": "10.10.22.157", "initiator_port": 61310, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 22986, "last_frame": 22987, "first_seen_epoch": "1634914377.203005", "last_seen_epoch": "1634914377.285576", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ba1cef137e9eb22c06bbbb8d", "transport": "tcp", "stream": 509, "initiator_ip": "10.10.22.157", "initiator_port": 49877, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 22988, "last_frame": 22995, "first_seen_epoch": "1634914377.286194", "last_seen_epoch": "1634914377.630077", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-3ca68b365be0ffd63dc4f083", "transport": "udp", "stream": 387, "initiator_ip": "10.10.22.157", "initiator_port": 52178, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23000, "last_frame": 23001, "first_seen_epoch": "1634914381.64089", "last_seen_epoch": "1634914381.692467", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8ee29634ffbe0210ab689d05", "transport": "tcp", "stream": 510, "initiator_ip": "10.10.22.157", "initiator_port": 49878, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23002, "last_frame": 23007, "first_seen_epoch": "1634914381.693923", "last_seen_epoch": "1634914381.976948", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2d09414f3ce0a804c631b851", "transport": "udp", "stream": 388, "initiator_ip": "10.10.22.157", "initiator_port": 49465, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23012, "last_frame": 23013, "first_seen_epoch": "1634914385.985262", "last_seen_epoch": "1634914386.057185", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4f345fa7a20de3012688188a", "transport": "tcp", "stream": 511, "initiator_ip": "10.10.22.157", "initiator_port": 49879, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23014, "last_frame": 23019, "first_seen_epoch": "1634914386.058506", "last_seen_epoch": "1634914386.3646", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8df7daf1c64ded79afeb5cb4", "transport": "tcp", "stream": 512, "initiator_ip": "10.10.22.157", "initiator_port": 49880, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23020, "last_frame": 23025, "first_seen_epoch": "1634914390.375396", "last_seen_epoch": "1634914390.688868", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0e3ac603bffc576fd2ced960", "transport": "tcp", "stream": 513, "initiator_ip": "10.10.22.156", "initiator_port": 49813, "responder_ip": "39.40.37.70", "responder_port": 32100, "first_frame": 23026, "last_frame": 23252, "first_seen_epoch": "1634914392.520553", "last_seen_epoch": "1634914467.717145", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-d299e06065b3a3de44ed35d0", "transport": "tcp", "stream": 514, "initiator_ip": "10.10.22.157", "initiator_port": 49881, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23028, "last_frame": 23033, "first_seen_epoch": "1634914394.718981", "last_seen_epoch": "1634914395.024077", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-99cd4d26a0fc5c208eba323d", "transport": "tcp", "stream": 515, "initiator_ip": "10.10.22.157", "initiator_port": 49882, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23035, "last_frame": 23040, "first_seen_epoch": "1634914399.048626", "last_seen_epoch": "1634914399.347392", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-06effb90154dd351bfe4b33d", "transport": "tcp", "stream": 516, "initiator_ip": "10.10.22.158", "initiator_port": 49808, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 23045, "last_frame": 23154, "first_seen_epoch": "1634914402.971308", "last_seen_epoch": "1634914435.386184", "packets": 16, "bytes": 4386, "initiator_bytes": 2586, "responder_bytes": 1800 }, { "flow_id": "flow-3292eb06041473124ac17f94", "transport": "udp", "stream": 389, "initiator_ip": "10.10.22.157", "initiator_port": 58541, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23060, "last_frame": 23061, "first_seen_epoch": "1634914403.36117", "last_seen_epoch": "1634914403.42165", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8e4635466348eb3efa9f2be5", "transport": "tcp", "stream": 517, "initiator_ip": "10.10.22.157", "initiator_port": 49883, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23062, "last_frame": 23070, "first_seen_epoch": "1634914403.42256", "last_seen_epoch": "1634914403.728629", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-4d1705f8c9fdeda1e7044aaa", "transport": "udp", "stream": 390, "initiator_ip": "10.10.22.156", "initiator_port": 62043, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23073, "last_frame": 23074, "first_seen_epoch": "1634914404.879515", "last_seen_epoch": "1634914404.879988", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-edac285dca20b7bbb72fda46", "transport": "udp", "stream": 391, "initiator_ip": "10.10.22.156", "initiator_port": 49567, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23075, "last_frame": 23076, "first_seen_epoch": "1634914404.881478", "last_seen_epoch": "1634914404.881718", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-15bb2a6aa2c49646967fd2b4", "transport": "udp", "stream": 392, "initiator_ip": "10.10.22.157", "initiator_port": 49172, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23081, "last_frame": 23084, "first_seen_epoch": "1634914407.736616", "last_seen_epoch": "1634914408.839192", "packets": 3, "bytes": 268, "initiator_bytes": 168, "responder_bytes": 100 }, { "flow_id": "flow-56b493daa4031eaab84bdabe", "transport": "tcp", "stream": 518, "initiator_ip": "10.10.22.156", "initiator_port": 49814, "responder_ip": "39.40.37.70", "responder_port": 32100, "first_frame": 23082, "last_frame": 23318, "first_seen_epoch": "1634914408.533656", "last_seen_epoch": "1634914483.760103", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-8db6a32d58551a460ba270d3", "transport": "tcp", "stream": 519, "initiator_ip": "10.10.22.157", "initiator_port": 49884, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23085, "last_frame": 23098, "first_seen_epoch": "1634914408.840606", "last_seen_epoch": "1634914412.254222", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-b9cbe1f36ea8fd61552e84de", "transport": "udp", "stream": 393, "initiator_ip": "10.10.22.156", "initiator_port": 53668, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23090, "last_frame": 23091, "first_seen_epoch": "1634914410.050467", "last_seen_epoch": "1634914410.104502", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-0a2d87e67447d8468914ec8a", "transport": "udp", "stream": 394, "initiator_ip": "10.10.22.157", "initiator_port": 54737, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23104, "last_frame": 23105, "first_seen_epoch": "1634914416.268347", "last_seen_epoch": "1634914416.342137", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0fa631342ae8979af6847378", "transport": "tcp", "stream": 520, "initiator_ip": "10.10.22.157", "initiator_port": 49885, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23106, "last_frame": 23111, "first_seen_epoch": "1634914416.343466", "last_seen_epoch": "1634914416.656169", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d2dec920756ab6b1cfdf8571", "transport": "tcp", "stream": 521, "initiator_ip": "10.10.22.157", "initiator_port": 49886, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23112, "last_frame": 23117, "first_seen_epoch": "1634914420.673274", "last_seen_epoch": "1634914421.024614", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d6237be95eb70a0c4584aad7", "transport": "tcp", "stream": 522, "initiator_ip": "10.10.22.157", "initiator_port": 49887, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23123, "last_frame": 23128, "first_seen_epoch": "1634914425.033218", "last_seen_epoch": "1634914425.340993", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e73b90a7110b84205e05ac5d", "transport": "tcp", "stream": 523, "initiator_ip": "10.10.22.156", "initiator_port": 49815, "responder_ip": "39.40.37.70", "responder_port": 32100, "first_frame": 23129, "last_frame": 23393, "first_seen_epoch": "1634914426.580181", "last_seen_epoch": "1634914501.820017", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-5baef055a525dc39bd2bcc29", "transport": "tcp", "stream": 524, "initiator_ip": "10.10.22.157", "initiator_port": 49888, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23131, "last_frame": 23137, "first_seen_epoch": "1634914429.345299", "last_seen_epoch": "1634914429.651145", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-73b32d522abdc95c1be1f23a", "transport": "udp", "stream": 395, "initiator_ip": "10.10.22.157", "initiator_port": 65503, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23141, "last_frame": 23142, "first_seen_epoch": "1634914433.65888", "last_seen_epoch": "1634914433.706208", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0f575be310277d4fe63b5aba", "transport": "tcp", "stream": 525, "initiator_ip": "10.10.22.157", "initiator_port": 49889, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23143, "last_frame": 23148, "first_seen_epoch": "1634914433.706855", "last_seen_epoch": "1634914433.989022", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cedea60b380c746ee72f4d34", "transport": "tcp", "stream": 526, "initiator_ip": "10.10.22.158", "initiator_port": 49809, "responder_ip": "198.50.182.64", "responder_port": 443, "first_frame": 23155, "last_frame": 23254, "first_seen_epoch": "1634914435.399352", "last_seen_epoch": "1634914467.933818", "packets": 16, "bytes": 4189, "initiator_bytes": 2568, "responder_bytes": 1621 }, { "flow_id": "flow-1e1a30890019952b6008c7b3", "transport": "udp", "stream": 396, "initiator_ip": "10.10.22.157", "initiator_port": 62076, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23170, "last_frame": 23171, "first_seen_epoch": "1634914438.001567", "last_seen_epoch": "1634914438.158584", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-26819391da5762a2a4d7bc8c", "transport": "tcp", "stream": 527, "initiator_ip": "10.10.22.157", "initiator_port": 49890, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23172, "last_frame": 23177, "first_seen_epoch": "1634914438.159204", "last_seen_epoch": "1634914438.52174", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-954949554a8fa65bc9528a78", "transport": "udp", "stream": 397, "initiator_ip": "10.10.22.157", "initiator_port": 52423, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23179, "last_frame": 23185, "first_seen_epoch": "1634914442.533119", "last_seen_epoch": "1634914442.602988", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8c3f893c748e6bfb87f4dafb", "transport": "udp", "stream": 398, "initiator_ip": "10.10.22.156", "initiator_port": 55048, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23180, "last_frame": 23181, "first_seen_epoch": "1634914442.597151", "last_seen_epoch": "1634914442.597449", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1b19002f482e22acfe85e44c", "transport": "tcp", "stream": 528, "initiator_ip": "10.10.22.156", "initiator_port": 49816, "responder_ip": "39.40.37.70", "responder_port": 32100, "first_frame": 23182, "last_frame": 23627, "first_seen_epoch": "1634914442.597812", "last_seen_epoch": "1634914517.783158", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-d9504e1cf17f011b8ea4c985", "transport": "udp", "stream": 399, "initiator_ip": "10.10.22.156", "initiator_port": 65405, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23183, "last_frame": 23184, "first_seen_epoch": "1634914442.597884", "last_seen_epoch": "1634914442.598088", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-976ff43f8ea5f529cc03529d", "transport": "tcp", "stream": 529, "initiator_ip": "10.10.22.157", "initiator_port": 49891, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23186, "last_frame": 23193, "first_seen_epoch": "1634914442.603705", "last_seen_epoch": "1634914442.890417", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-df5ce20f6bf30516875f5e2d", "transport": "tcp", "stream": 530, "initiator_ip": "10.10.22.157", "initiator_port": 49892, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23196, "last_frame": 23201, "first_seen_epoch": "1634914446.908996", "last_seen_epoch": "1634914447.250622", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-405d61078dca7c17b9dc4276", "transport": "tcp", "stream": 531, "initiator_ip": "10.10.22.157", "initiator_port": 49893, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23209, "last_frame": 23214, "first_seen_epoch": "1634914451.268949", "last_seen_epoch": "1634914451.571701", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b45d7caa43465257c33c370f", "transport": "tcp", "stream": 532, "initiator_ip": "10.10.22.157", "initiator_port": 49894, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23215, "last_frame": 23222, "first_seen_epoch": "1634914455.580588", "last_seen_epoch": "1634914455.903596", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-e6e0302e11596e0471770473", "transport": "udp", "stream": 400, "initiator_ip": "10.10.22.156", "initiator_port": 64390, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23223, "last_frame": 23224, "first_seen_epoch": "1634914457.599081", "last_seen_epoch": "1634914457.59939", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-4bc6202090116832b6810bee", "transport": "udp", "stream": 401, "initiator_ip": "10.10.22.156", "initiator_port": 53584, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23225, "last_frame": 23226, "first_seen_epoch": "1634914457.599827", "last_seen_epoch": "1634914457.600047", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-23cb685f55933ac67320837f", "transport": "udp", "stream": 402, "initiator_ip": "10.10.22.157", "initiator_port": 57499, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23228, "last_frame": 23229, "first_seen_epoch": "1634914459.910379", "last_seen_epoch": "1634914459.960568", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-801993e6bb593e357e15d124", "transport": "tcp", "stream": 533, "initiator_ip": "10.10.22.157", "initiator_port": 49895, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23230, "last_frame": 23235, "first_seen_epoch": "1634914459.961572", "last_seen_epoch": "1634914460.2946", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b0f78a9fbfc218d279215fc3", "transport": "tcp", "stream": 534, "initiator_ip": "10.10.22.156", "initiator_port": 49817, "responder_ip": "37.208.181.198", "responder_port": 61200, "first_frame": 23238, "last_frame": 23691, "first_seen_epoch": "1634914463.66204", "last_seen_epoch": "1634914538.856081", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-04aee2daf9ac118cb63c1bc2", "transport": "udp", "stream": 403, "initiator_ip": "10.10.22.157", "initiator_port": 57786, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23239, "last_frame": 23240, "first_seen_epoch": "1634914464.299237", "last_seen_epoch": "1634914464.364806", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ff51395dca49ce8eb320b112", "transport": "tcp", "stream": 535, "initiator_ip": "10.10.22.157", "initiator_port": 49896, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23241, "last_frame": 23253, "first_seen_epoch": "1634914464.365591", "last_seen_epoch": "1634914467.769082", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-40ab0921a7a0124c111d66ba", "transport": "udp", "stream": 404, "initiator_ip": "10.10.22.158", "initiator_port": 56387, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 23255, "last_frame": 23256, "first_seen_epoch": "1634914467.941439", "last_seen_epoch": "1634914468.093909", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-48185bec058107fe126970d1", "transport": "udp", "stream": 405, "initiator_ip": "10.10.22.158", "initiator_port": 56388, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 23257, "last_frame": 23258, "first_seen_epoch": "1634914468.097708", "last_seen_epoch": "1634914468.243632", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-1d48f504f983159fe25af09b", "transport": "udp", "stream": 406, "initiator_ip": "10.10.22.158", "initiator_port": 56389, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 23259, "last_frame": 23260, "first_seen_epoch": "1634914468.247672", "last_seen_epoch": "1634914468.391909", "packets": 2, "bytes": 172, "initiator_bytes": 78, "responder_bytes": 94 }, { "flow_id": "flow-df5faae98683c61bc993cf08", "transport": "udp", "stream": 407, "initiator_ip": "10.10.22.158", "initiator_port": 56390, "responder_ip": "130.61.64.122", "responder_port": 53, "first_frame": 23266, "last_frame": 23269, "first_seen_epoch": "1634914471.703428", "last_seen_epoch": "1634914471.872828", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-a42d871a73b181eed5e4c021", "transport": "udp", "stream": 408, "initiator_ip": "10.10.22.157", "initiator_port": 60554, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23267, "last_frame": 23268, "first_seen_epoch": "1634914471.800919", "last_seen_epoch": "1634914471.872656", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-fa871b27be45e82f4a116420", "transport": "tcp", "stream": 536, "initiator_ip": "10.10.22.157", "initiator_port": 49897, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23270, "last_frame": 23280, "first_seen_epoch": "1634914471.873289", "last_seen_epoch": "1634914472.184215", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b84a689ba28aac24654ef98a", "transport": "tcp", "stream": 537, "initiator_ip": "10.10.22.158", "initiator_port": 49810, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 23271, "last_frame": 23580, "first_seen_epoch": "1634914471.913121", "last_seen_epoch": "1634914508.245366", "packets": 19, "bytes": 5257, "initiator_bytes": 1786, "responder_bytes": 3471 }, { "flow_id": "flow-97eea377af6438a77abdbf5f", "transport": "tcp", "stream": 538, "initiator_ip": "10.10.22.157", "initiator_port": 49898, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23289, "last_frame": 23294, "first_seen_epoch": "1634914476.191391", "last_seen_epoch": "1634914476.500126", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c359f0af03b8ca073a559c9f", "transport": "tcp", "stream": 539, "initiator_ip": "10.10.22.158", "initiator_port": 49811, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 23298, "last_frame": 23330, "first_seen_epoch": "1634914479.189443", "last_seen_epoch": "1634914485.730553", "packets": 15, "bytes": 2562, "initiator_bytes": 1816, "responder_bytes": 746 }, { "flow_id": "flow-50524cb881582b58048bf7d0", "transport": "tcp", "stream": 540, "initiator_ip": "10.10.22.156", "initiator_port": 49818, "responder_ip": "37.208.181.198", "responder_port": 61200, "first_frame": 23309, "last_frame": 23714, "first_seen_epoch": "1634914479.67739", "last_seen_epoch": "1634914547.271958", "packets": 7, "bytes": 442, "initiator_bytes": 384, "responder_bytes": 58 }, { "flow_id": "flow-078623636f0a2c0f2a5a1c61", "transport": "tcp", "stream": 541, "initiator_ip": "10.10.22.157", "initiator_port": 49899, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23310, "last_frame": 23316, "first_seen_epoch": "1634914480.522206", "last_seen_epoch": "1634914480.820354", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ba991e3f78fcb4a4c2d912b6", "transport": "tcp", "stream": 542, "initiator_ip": "10.10.22.157", "initiator_port": 49900, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23319, "last_frame": 23326, "first_seen_epoch": "1634914484.832764", "last_seen_epoch": "1634914485.131552", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4ade890d242c8a9f1bc8e174", "transport": "udp", "stream": 409, "initiator_ip": "10.10.22.156", "initiator_port": 59003, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23324, "last_frame": 23325, "first_seen_epoch": "1634914485.052676", "last_seen_epoch": "1634914485.097975", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-fb33105f1858f8e29e7716da", "transport": "tcp", "stream": 543, "initiator_ip": "10.10.22.158", "initiator_port": 49812, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 23334, "last_frame": 23996, "first_seen_epoch": "1634914487.486763", "last_seen_epoch": "1634914654.439287", "packets": 19, "bytes": 3628, "initiator_bytes": 1640, "responder_bytes": 1988 }, { "flow_id": "flow-1567cf20c7bf8203822edf02", "transport": "udp", "stream": 410, "initiator_ip": "10.10.22.157", "initiator_port": 60385, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23345, "last_frame": 23346, "first_seen_epoch": "1634914489.144834", "last_seen_epoch": "1634914489.225606", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7871facbd2613e7123821e23", "transport": "tcp", "stream": 544, "initiator_ip": "10.10.22.157", "initiator_port": 49901, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23347, "last_frame": 23352, "first_seen_epoch": "1634914489.226819", "last_seen_epoch": "1634914489.541025", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6e479540827efbe472cefc4c", "transport": "udp", "stream": 411, "initiator_ip": "10.10.22.157", "initiator_port": 53929, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23357, "last_frame": 23358, "first_seen_epoch": "1634914493.551629", "last_seen_epoch": "1634914493.624284", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0614435b9f1ae05dd4acd99d", "transport": "tcp", "stream": 545, "initiator_ip": "10.10.22.157", "initiator_port": 49902, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23359, "last_frame": 23364, "first_seen_epoch": "1634914493.625616", "last_seen_epoch": "1634914493.910257", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-99c592a295cf093c95c0f005", "transport": "tcp", "stream": 546, "initiator_ip": "10.10.22.156", "initiator_port": 49819, "responder_ip": "37.208.181.198", "responder_port": 61200, "first_frame": 23375, "last_frame": 23793, "first_seen_epoch": "1634914497.738673", "last_seen_epoch": "1634914572.892591", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-60a1169fab8d65c99d765ccd", "transport": "udp", "stream": 412, "initiator_ip": "10.10.22.157", "initiator_port": 63967, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23376, "last_frame": 23377, "first_seen_epoch": "1634914497.926175", "last_seen_epoch": "1634914498.010723", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-dcdf4573deed934bc5072684", "transport": "tcp", "stream": 547, "initiator_ip": "10.10.22.157", "initiator_port": 49903, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23378, "last_frame": 23383, "first_seen_epoch": "1634914498.01207", "last_seen_epoch": "1634914498.334726", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0c24c3898c24f0efb5dafd4d", "transport": "udp", "stream": 413, "initiator_ip": "10.10.22.22", "initiator_port": 137, "responder_ip": "10.10.22.158", "responder_port": 137, "first_frame": 23391, "last_frame": 23391, "first_seen_epoch": "1634914501.810481", "last_seen_epoch": "1634914501.810481", "packets": 1, "bytes": 104, "initiator_bytes": 104, "responder_bytes": 0 }, { "flow_id": "flow-ec8ad6032d6849dd7cc9586d", "transport": "udp", "stream": 414, "initiator_ip": "10.10.22.158", "initiator_port": 138, "responder_ip": "10.10.22.22", "responder_port": 138, "first_frame": 23392, "last_frame": 23403, "first_seen_epoch": "1634914501.810834", "last_seen_epoch": "1634914503.825995", "packets": 3, "bytes": 648, "initiator_bytes": 648, "responder_bytes": 0 }, { "flow_id": "flow-c533fc52ac2cd4c5a0f167eb", "transport": "tcp", "stream": 548, "initiator_ip": "10.10.22.157", "initiator_port": 49904, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23394, "last_frame": 23399, "first_seen_epoch": "1634914502.34808", "last_seen_epoch": "1634914502.725672", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1f8ae4a6eaab6f0e995b90a5", "transport": "tcp", "stream": 549, "initiator_ip": "10.10.22.157", "initiator_port": 49905, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23412, "last_frame": 23419, "first_seen_epoch": "1634914506.737713", "last_seen_epoch": "1634914507.048198", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-dd500f6473dfd8aafd1bc47d", "transport": "tcp", "stream": 550, "initiator_ip": "10.10.22.158", "initiator_port": 49813, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 23420, "last_frame": 23632, "first_seen_epoch": "1634914507.238377", "last_seen_epoch": "1634914518.014433", "packets": 110, "bytes": 27128, "initiator_bytes": 15184, "responder_bytes": 11944 }, { "flow_id": "flow-4b28794356588ad8e979ff38", "transport": "tcp", "stream": 551, "initiator_ip": "10.10.22.158", "initiator_port": 49814, "responder_ip": "10.10.22.22", "responder_port": 88, "first_frame": 23427, "last_frame": 23438, "first_seen_epoch": "1634914507.241577", "last_seen_epoch": "1634914507.24349", "packets": 12, "bytes": 4083, "initiator_bytes": 2036, "responder_bytes": 2047 }, { "flow_id": "flow-02c1b225a50cccd38d1b6f78", "transport": "tcp", "stream": 552, "initiator_ip": "10.10.22.158", "initiator_port": 49815, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 23512, "last_frame": 23655, "first_seen_epoch": "1634914507.32956", "last_seen_epoch": "1634914522.327516", "packets": 13, "bytes": 1710, "initiator_bytes": 730, "responder_bytes": 980 }, { "flow_id": "flow-f89ed46d7e7061524ea0eeea", "transport": "tcp", "stream": 553, "initiator_ip": "10.10.22.158", "initiator_port": 49816, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 23519, "last_frame": 23653, "first_seen_epoch": "1634914507.331424", "last_seen_epoch": "1634914522.327246", "packets": 13, "bytes": 4118, "initiator_bytes": 1654, "responder_bytes": 2464 }, { "flow_id": "flow-6e6dfa282c0d91839939d3d6", "transport": "udp", "stream": 415, "initiator_ip": "10.10.22.158", "initiator_port": 50308, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23555, "last_frame": 23556, "first_seen_epoch": "1634914507.489178", "last_seen_epoch": "1634914507.544364", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-97492ce0bc6736bfb3452c70", "transport": "tcp", "stream": 554, "initiator_ip": "10.10.22.158", "initiator_port": 49817, "responder_ip": "34.117.59.81", "responder_port": 443, "first_frame": 23557, "last_frame": 23998, "first_seen_epoch": "1634914507.545772", "last_seen_epoch": "1634914654.469325", "packets": 23, "bytes": 6944, "initiator_bytes": 1117, "responder_bytes": 5827 }, { "flow_id": "flow-0c7dfb26645f36b8ca2890c3", "transport": "tcp", "stream": 555, "initiator_ip": "10.10.22.158", "initiator_port": 49818, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 23578, "last_frame": 23612, "first_seen_epoch": "1634914508.04589", "last_seen_epoch": "1634914513.789119", "packets": 25, "bytes": 8755, "initiator_bytes": 7739, "responder_bytes": 1016 }, { "flow_id": "flow-71abbe5263c31abfaffb1e46", "transport": "tcp", "stream": 556, "initiator_ip": "10.10.22.157", "initiator_port": 49906, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23601, "last_frame": 23606, "first_seen_epoch": "1634914511.051718", "last_seen_epoch": "1634914511.372626", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-94a5d6983579372c452ac61f", "transport": "tcp", "stream": 557, "initiator_ip": "10.10.22.156", "initiator_port": 49820, "responder_ip": "37.208.181.198", "responder_port": 61200, "first_frame": 23609, "last_frame": 23825, "first_seen_epoch": "1634914513.786707", "last_seen_epoch": "1634914588.917454", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-53f31dabc1113cc33ad5b675", "transport": "udp", "stream": 416, "initiator_ip": "10.10.22.157", "initiator_port": 51682, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23614, "last_frame": 23615, "first_seen_epoch": "1634914515.380801", "last_seen_epoch": "1634914515.437114", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0ef4c09263ec723ec6dc082a", "transport": "tcp", "stream": 558, "initiator_ip": "10.10.22.157", "initiator_port": 49907, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23616, "last_frame": 23621, "first_seen_epoch": "1634914515.438448", "last_seen_epoch": "1634914515.746835", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d7c8444057b9376f6921bb2b", "transport": "udp", "stream": 417, "initiator_ip": "10.10.22.156", "initiator_port": 56724, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23623, "last_frame": 23624, "first_seen_epoch": "1634914517.616724", "last_seen_epoch": "1634914517.617138", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-ef1e2f303736eea2f2dd8957", "transport": "udp", "stream": 418, "initiator_ip": "10.10.22.156", "initiator_port": 56304, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23625, "last_frame": 23626, "first_seen_epoch": "1634914517.617816", "last_seen_epoch": "1634914517.61807", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-92ea5221299539ce532ffed1", "transport": "udp", "stream": 419, "initiator_ip": "10.10.22.157", "initiator_port": 62690, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23633, "last_frame": 23634, "first_seen_epoch": "1634914519.7545", "last_seen_epoch": "1634914519.805555", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b017ef303b2aa619bc2f1a51", "transport": "tcp", "stream": 559, "initiator_ip": "10.10.22.157", "initiator_port": 49908, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23635, "last_frame": 23642, "first_seen_epoch": "1634914519.806905", "last_seen_epoch": "1634914520.131869", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-dfe202e2817ac0a149ff40e0", "transport": "udp", "stream": 420, "initiator_ip": "10.10.22.157", "initiator_port": 65038, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23657, "last_frame": 23658, "first_seen_epoch": "1634914524.145685", "last_seen_epoch": "1634914524.215233", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-78103aa8a25324bf2cabdac3", "transport": "tcp", "stream": 560, "initiator_ip": "10.10.22.157", "initiator_port": 49909, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23659, "last_frame": 23664, "first_seen_epoch": "1634914524.216509", "last_seen_epoch": "1634914524.509111", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-df5c7a2266e816d02ff305c5", "transport": "tcp", "stream": 561, "initiator_ip": "10.10.22.157", "initiator_port": 49910, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23667, "last_frame": 23672, "first_seen_epoch": "1634914528.520908", "last_seen_epoch": "1634914528.8371", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-34e09b88f84d58e62bad5031", "transport": "tcp", "stream": 562, "initiator_ip": "10.10.22.157", "initiator_port": 49911, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23674, "last_frame": 23681, "first_seen_epoch": "1634914532.848799", "last_seen_epoch": "1634914533.141353", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-0443fb026ae9a41e82c46baf", "transport": "tcp", "stream": 563, "initiator_ip": "10.10.22.156", "initiator_port": 49821, "responder_ip": "190.117.91.214", "responder_port": 443, "first_frame": 23682, "last_frame": 23874, "first_seen_epoch": "1634914534.852273", "last_seen_epoch": "1634914609.97875", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-d65e17794fafbdd98a6281c3", "transport": "tcp", "stream": 564, "initiator_ip": "10.10.22.157", "initiator_port": 49912, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23684, "last_frame": 23689, "first_seen_epoch": "1634914537.160836", "last_seen_epoch": "1634914537.472794", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0bd552c54e11ac38f22f27b6", "transport": "udp", "stream": 421, "initiator_ip": "10.10.22.157", "initiator_port": 62276, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23692, "last_frame": 23693, "first_seen_epoch": "1634914541.490415", "last_seen_epoch": "1634914541.546506", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e1435cfe88503f249556e389", "transport": "tcp", "stream": 565, "initiator_ip": "10.10.22.157", "initiator_port": 49913, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23694, "last_frame": 23699, "first_seen_epoch": "1634914541.547872", "last_seen_epoch": "1634914541.843973", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3b98243d0c2103d5f4f9e875", "transport": "udp", "stream": 422, "initiator_ip": "10.10.22.157", "initiator_port": 49570, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23703, "last_frame": 23704, "first_seen_epoch": "1634914545.84903", "last_seen_epoch": "1634914545.913789", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e148357debe785030612829e", "transport": "tcp", "stream": 566, "initiator_ip": "10.10.22.157", "initiator_port": 49914, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23705, "last_frame": 23712, "first_seen_epoch": "1634914545.915157", "last_seen_epoch": "1634914546.202686", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-66e318bf26a2b0b027941edd", "transport": "udp", "stream": 423, "initiator_ip": "10.10.22.157", "initiator_port": 54059, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23716, "last_frame": 23717, "first_seen_epoch": "1634914550.208315", "last_seen_epoch": "1634914550.266149", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8572f63621ec8aa3e67ae085", "transport": "tcp", "stream": 567, "initiator_ip": "10.10.22.157", "initiator_port": 49915, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23718, "last_frame": 23723, "first_seen_epoch": "1634914550.267445", "last_seen_epoch": "1634914550.560934", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c51adc4bef4acbde9b4af673", "transport": "udp", "stream": 424, "initiator_ip": "10.10.22.156", "initiator_port": 49461, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23724, "last_frame": 23725, "first_seen_epoch": "1634914550.883692", "last_seen_epoch": "1634914550.884098", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-c3ef74dbb92cf5a644476dc0", "transport": "udp", "stream": 425, "initiator_ip": "10.10.22.156", "initiator_port": 55613, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23726, "last_frame": 23727, "first_seen_epoch": "1634914550.884845", "last_seen_epoch": "1634914550.885082", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-7b15f445808b300b968de082", "transport": "tcp", "stream": 568, "initiator_ip": "10.10.22.156", "initiator_port": 49822, "responder_ip": "190.117.91.214", "responder_port": 443, "first_frame": 23728, "last_frame": 23925, "first_seen_epoch": "1634914550.885259", "last_seen_epoch": "1634914626.004852", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-07cd0c2a8522249d84e9d06d", "transport": "tcp", "stream": 569, "initiator_ip": "10.10.22.157", "initiator_port": 49916, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23736, "last_frame": 23741, "first_seen_epoch": "1634914554.567768", "last_seen_epoch": "1634914554.876135", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-131b7f4cc5df1b492e239787", "transport": "tcp", "stream": 570, "initiator_ip": "10.10.22.157", "initiator_port": 49917, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23745, "last_frame": 23750, "first_seen_epoch": "1634914558.88134", "last_seen_epoch": "1634914559.201859", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-96ca422f239ba261cff215a9", "transport": "udp", "stream": 426, "initiator_ip": "10.10.22.156", "initiator_port": 61921, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23751, "last_frame": 23752, "first_seen_epoch": "1634914560.054347", "last_seen_epoch": "1634914560.107824", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-c82fb0a094accb3e0147bafd", "transport": "tcp", "stream": 571, "initiator_ip": "10.10.22.157", "initiator_port": 49918, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23756, "last_frame": 23762, "first_seen_epoch": "1634914563.208322", "last_seen_epoch": "1634914563.525635", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e937cc19c3e821703abe6a95", "transport": "udp", "stream": 427, "initiator_ip": "10.10.22.156", "initiator_port": 53148, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23765, "last_frame": 23766, "first_seen_epoch": "1634914565.898515", "last_seen_epoch": "1634914565.898876", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-8b4fdce1aa3924c78b357fa0", "transport": "udp", "stream": 428, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23767, "last_frame": 23768, "first_seen_epoch": "1634914565.899709", "last_seen_epoch": "1634914565.899945", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-5ff914d52e3f55d8d4fa4e82", "transport": "udp", "stream": 429, "initiator_ip": "10.10.22.157", "initiator_port": 50444, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23772, "last_frame": 23773, "first_seen_epoch": "1634914567.537551", "last_seen_epoch": "1634914567.623201", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b0e67c39266ec5d409fb4a64", "transport": "tcp", "stream": 572, "initiator_ip": "10.10.22.157", "initiator_port": 49919, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23774, "last_frame": 23779, "first_seen_epoch": "1634914567.624664", "last_seen_epoch": "1634914567.917483", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e6f3f8fff50cfa83307c34fb", "transport": "tcp", "stream": 573, "initiator_ip": "10.10.22.156", "initiator_port": 49823, "responder_ip": "190.117.91.214", "responder_port": 443, "first_frame": 23780, "last_frame": 23967, "first_seen_epoch": "1634914568.946371", "last_seen_epoch": "1634914644.063947", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-fb00ff085994e5db89997b3b", "transport": "udp", "stream": 430, "initiator_ip": "10.10.22.157", "initiator_port": 63645, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23782, "last_frame": 23783, "first_seen_epoch": "1634914571.927976", "last_seen_epoch": "1634914571.988347", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3dd0704571b248da819c2074", "transport": "tcp", "stream": 574, "initiator_ip": "10.10.22.157", "initiator_port": 49920, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23785, "last_frame": 23792, "first_seen_epoch": "1634914571.989585", "last_seen_epoch": "1634914572.281264", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-8a0ee70dd1e32f1565d2704a", "transport": "udp", "stream": 431, "initiator_ip": "10.10.22.157", "initiator_port": 64431, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23795, "last_frame": 23796, "first_seen_epoch": "1634914576.302311", "last_seen_epoch": "1634914576.357418", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1d09d61baad9aa780d58ef0c", "transport": "tcp", "stream": 575, "initiator_ip": "10.10.22.157", "initiator_port": 49921, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23797, "last_frame": 23802, "first_seen_epoch": "1634914576.358769", "last_seen_epoch": "1634914576.655232", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ec57309d2992a0aed199ac63", "transport": "tcp", "stream": 576, "initiator_ip": "10.10.22.157", "initiator_port": 49922, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23805, "last_frame": 23810, "first_seen_epoch": "1634914580.662511", "last_seen_epoch": "1634914580.961636", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2e43709d9a7576040aa5e7b5", "transport": "tcp", "stream": 577, "initiator_ip": "10.10.22.156", "initiator_port": 49824, "responder_ip": "190.117.91.214", "responder_port": 443, "first_frame": 23814, "last_frame": 24021, "first_seen_epoch": "1634914584.976553", "last_seen_epoch": "1634914660.104882", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c412657bf15917d94711c15e", "transport": "tcp", "stream": 578, "initiator_ip": "10.10.22.157", "initiator_port": 49923, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23815, "last_frame": 23822, "first_seen_epoch": "1634914584.977443", "last_seen_epoch": "1634914585.30253", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-8eba0689d548944a40efb70a", "transport": "tcp", "stream": 579, "initiator_ip": "10.10.22.157", "initiator_port": 49924, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23826, "last_frame": 23834, "first_seen_epoch": "1634914589.319205", "last_seen_epoch": "1634914589.64153", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9adf3292a5d8c21ab99faad9", "transport": "udp", "stream": 432, "initiator_ip": "10.10.22.157", "initiator_port": 57182, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23838, "last_frame": 23839, "first_seen_epoch": "1634914593.647863", "last_seen_epoch": "1634914593.7614", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ed2722b289af9be517287fcd", "transport": "tcp", "stream": 580, "initiator_ip": "10.10.22.157", "initiator_port": 49925, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23840, "last_frame": 23845, "first_seen_epoch": "1634914593.762727", "last_seen_epoch": "1634914594.063648", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-84aed1c168169c0ef993daab", "transport": "udp", "stream": 433, "initiator_ip": "10.10.22.157", "initiator_port": 51522, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23846, "last_frame": 23847, "first_seen_epoch": "1634914598.069119", "last_seen_epoch": "1634914598.164685", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5cf65b3202a3823e2d878c6f", "transport": "tcp", "stream": 581, "initiator_ip": "10.10.22.157", "initiator_port": 49926, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23848, "last_frame": 23855, "first_seen_epoch": "1634914598.165994", "last_seen_epoch": "1634914598.454714", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-a43688b46e6294c6056c5de0", "transport": "udp", "stream": 434, "initiator_ip": "10.10.22.157", "initiator_port": 51962, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23857, "last_frame": 23858, "first_seen_epoch": "1634914602.460457", "last_seen_epoch": "1634914602.524781", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3545d77e5f647d88e7968211", "transport": "tcp", "stream": 582, "initiator_ip": "10.10.22.157", "initiator_port": 49927, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23859, "last_frame": 23864, "first_seen_epoch": "1634914602.526129", "last_seen_epoch": "1634914602.824465", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-086b3cce7a565ba4bc93a4b8", "transport": "tcp", "stream": 583, "initiator_ip": "10.10.22.156", "initiator_port": 49825, "responder_ip": "201.111.144.72", "responder_port": 443, "first_frame": 23865, "last_frame": 24084, "first_seen_epoch": "1634914606.0413", "last_seen_epoch": "1634914681.163317", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-1180589dc342273227a46e9f", "transport": "tcp", "stream": 584, "initiator_ip": "10.10.22.157", "initiator_port": 49928, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23866, "last_frame": 23872, "first_seen_epoch": "1634914606.83521", "last_seen_epoch": "1634914607.135603", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-668568c600b5d1b8ea4fbdea", "transport": "tcp", "stream": 585, "initiator_ip": "10.10.22.157", "initiator_port": 49929, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23875, "last_frame": 23882, "first_seen_epoch": "1634914611.164356", "last_seen_epoch": "1634914611.507244", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-c9a9e189627744fa552f53a3", "transport": "tcp", "stream": 586, "initiator_ip": "10.10.22.157", "initiator_port": 49930, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23891, "last_frame": 23896, "first_seen_epoch": "1634914615.523647", "last_seen_epoch": "1634914615.844844", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fb18575ebe378970e7215347", "transport": "udp", "stream": 435, "initiator_ip": "10.10.22.157", "initiator_port": 60818, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23899, "last_frame": 23900, "first_seen_epoch": "1634914619.850694", "last_seen_epoch": "1634914619.906244", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9152c81a61b8a0da313b698c", "transport": "tcp", "stream": 587, "initiator_ip": "10.10.22.157", "initiator_port": 49931, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23901, "last_frame": 23906, "first_seen_epoch": "1634914619.907633", "last_seen_epoch": "1634914620.204682", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5de7a5e4229c492ec6121779", "transport": "tcp", "stream": 588, "initiator_ip": "10.10.22.156", "initiator_port": 49826, "responder_ip": "201.111.144.72", "responder_port": 443, "first_frame": 23908, "last_frame": 24142, "first_seen_epoch": "1634914622.102964", "last_seen_epoch": "1634914697.233806", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-929c5dde60366a1f7ff3b16a", "transport": "udp", "stream": 436, "initiator_ip": "10.10.22.157", "initiator_port": 50255, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23910, "last_frame": 23911, "first_seen_epoch": "1634914624.209858", "last_seen_epoch": "1634914624.258371", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0ba8f57cd2c8a8762e20cd2a", "transport": "tcp", "stream": 589, "initiator_ip": "10.10.22.157", "initiator_port": 49932, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23912, "last_frame": 23919, "first_seen_epoch": "1634914624.259792", "last_seen_epoch": "1634914624.546693", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-c25b9ef6fb97c9f25b167a79", "transport": "udp", "stream": 437, "initiator_ip": "10.10.22.156", "initiator_port": 49330, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23921, "last_frame": 23922, "first_seen_epoch": "1634914625.900194", "last_seen_epoch": "1634914625.90065", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-da547b1db39115ad3d802e96", "transport": "udp", "stream": 438, "initiator_ip": "10.10.22.156", "initiator_port": 64274, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23923, "last_frame": 23924, "first_seen_epoch": "1634914625.901247", "last_seen_epoch": "1634914625.901471", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-08840d008212e575dbb4bdf4", "transport": "udp", "stream": 439, "initiator_ip": "10.10.22.157", "initiator_port": 58065, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23926, "last_frame": 23927, "first_seen_epoch": "1634914628.554786", "last_seen_epoch": "1634914628.754898", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d7aaca1fdff61a6081ed0b87", "transport": "tcp", "stream": 590, "initiator_ip": "10.10.22.157", "initiator_port": 49933, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23928, "last_frame": 23933, "first_seen_epoch": "1634914628.756441", "last_seen_epoch": "1634914629.051862", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8cd8a4b6bb9dba8a493ea57a", "transport": "tcp", "stream": 591, "initiator_ip": "10.10.22.157", "initiator_port": 49934, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23941, "last_frame": 23946, "first_seen_epoch": "1634914633.070232", "last_seen_epoch": "1634914633.403398", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d5a1e5887d3aed3ef0b93bd9", "transport": "udp", "stream": 440, "initiator_ip": "10.10.22.156", "initiator_port": 53439, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 23947, "last_frame": 23948, "first_seen_epoch": "1634914635.055933", "last_seen_epoch": "1634914635.115197", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-4450501830605748d4f4fabf", "transport": "tcp", "stream": 592, "initiator_ip": "10.10.22.157", "initiator_port": 49935, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23950, "last_frame": 23955, "first_seen_epoch": "1634914637.412928", "last_seen_epoch": "1634914637.720632", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a2feb7d6f249a89dbe52d860", "transport": "tcp", "stream": 593, "initiator_ip": "10.10.22.156", "initiator_port": 49827, "responder_ip": "201.111.144.72", "responder_port": 443, "first_frame": 23956, "last_frame": 24204, "first_seen_epoch": "1634914640.164326", "last_seen_epoch": "1634914715.310419", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-cf665a7aaa77ddd2a1406e98", "transport": "tcp", "stream": 594, "initiator_ip": "10.10.22.157", "initiator_port": 49936, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23958, "last_frame": 23963, "first_seen_epoch": "1634914641.726242", "last_seen_epoch": "1634914642.058255", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5335182c7538e14e3b35ac58", "transport": "udp", "stream": 441, "initiator_ip": "10.10.22.157", "initiator_port": 64919, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23969, "last_frame": 23970, "first_seen_epoch": "1634914646.070616", "last_seen_epoch": "1634914646.127539", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a85e9d4f8f2f7871e2cf1146", "transport": "tcp", "stream": 595, "initiator_ip": "10.10.22.157", "initiator_port": 49937, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23971, "last_frame": 23976, "first_seen_epoch": "1634914646.128879", "last_seen_epoch": "1634914646.416992", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c1dbed24c898c3074b8ef917", "transport": "udp", "stream": 442, "initiator_ip": "10.10.22.157", "initiator_port": 54050, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23983, "last_frame": 23984, "first_seen_epoch": "1634914650.430369", "last_seen_epoch": "1634914650.501931", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f6f7d89345886e785d9a06b9", "transport": "tcp", "stream": 596, "initiator_ip": "10.10.22.157", "initiator_port": 49938, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 23985, "last_frame": 23990, "first_seen_epoch": "1634914650.503308", "last_seen_epoch": "1634914650.822789", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7115b20b4da662cb3d4e3119", "transport": "udp", "stream": 443, "initiator_ip": "10.10.22.157", "initiator_port": 54544, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 23999, "last_frame": 24000, "first_seen_epoch": "1634914654.852534", "last_seen_epoch": "1634914654.916546", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a977c2a8bbd4cb42fcbf5e23", "transport": "tcp", "stream": 597, "initiator_ip": "10.10.22.157", "initiator_port": 49939, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24001, "last_frame": 24006, "first_seen_epoch": "1634914654.917455", "last_seen_epoch": "1634914655.215932", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e570c789c7765d548d573499", "transport": "udp", "stream": 444, "initiator_ip": "10.10.22.156", "initiator_port": 61695, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24008, "last_frame": 24009, "first_seen_epoch": "1634914656.213062", "last_seen_epoch": "1634914656.213481", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-470bdd82bf951e09885b4310", "transport": "tcp", "stream": 598, "initiator_ip": "10.10.22.156", "initiator_port": 49828, "responder_ip": "201.111.144.72", "responder_port": 443, "first_frame": 24010, "last_frame": 24259, "first_seen_epoch": "1634914656.213622", "last_seen_epoch": "1634914731.36608", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7ced098c9580d7d129dd278e", "transport": "udp", "stream": 445, "initiator_ip": "10.10.22.156", "initiator_port": 51308, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24011, "last_frame": 24012, "first_seen_epoch": "1634914656.214359", "last_seen_epoch": "1634914656.214597", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-d2a72b7f6f4d3a525eb01e84", "transport": "tcp", "stream": 599, "initiator_ip": "10.10.22.157", "initiator_port": 49940, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24014, "last_frame": 24020, "first_seen_epoch": "1634914659.226798", "last_seen_epoch": "1634914659.545234", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8bb5d7abfe80fcf0db755709", "transport": "tcp", "stream": 600, "initiator_ip": "10.10.22.157", "initiator_port": 49941, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24023, "last_frame": 24030, "first_seen_epoch": "1634914663.555598", "last_seen_epoch": "1634914663.895689", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2cba3c849bda310d7eca7f24", "transport": "tcp", "stream": 601, "initiator_ip": "10.10.22.157", "initiator_port": 49942, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24031, "last_frame": 24036, "first_seen_epoch": "1634914667.915086", "last_seen_epoch": "1634914668.246143", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5366595229ebade918b24122", "transport": "udp", "stream": 446, "initiator_ip": "10.10.22.156", "initiator_port": 51532, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24038, "last_frame": 24039, "first_seen_epoch": "1634914671.229286", "last_seen_epoch": "1634914671.229754", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1cab76be4c848154c785b944", "transport": "udp", "stream": 447, "initiator_ip": "10.10.22.156", "initiator_port": 64098, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24040, "last_frame": 24041, "first_seen_epoch": "1634914671.230546", "last_seen_epoch": "1634914671.230734", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-a731befc34a2a14664bacb7e", "transport": "udp", "stream": 448, "initiator_ip": "10.10.22.157", "initiator_port": 56825, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24043, "last_frame": 24044, "first_seen_epoch": "1634914672.258965", "last_seen_epoch": "1634914672.329774", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ec7fb14386c91094962f36c2", "transport": "tcp", "stream": 602, "initiator_ip": "10.10.22.157", "initiator_port": 49943, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24045, "last_frame": 24050, "first_seen_epoch": "1634914672.330724", "last_seen_epoch": "1634914672.652282", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bbd1ac1f0c57d7d8d26f0f07", "transport": "udp", "stream": 449, "initiator_ip": "10.10.22.157", "initiator_port": 57309, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24057, "last_frame": 24058, "first_seen_epoch": "1634914676.66546", "last_seen_epoch": "1634914676.731362", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a189b1b8370c1cd70dd6f8a5", "transport": "tcp", "stream": 603, "initiator_ip": "10.10.22.157", "initiator_port": 49944, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24059, "last_frame": 24064, "first_seen_epoch": "1634914676.732686", "last_seen_epoch": "1634914677.033827", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bcdd57b9ff27a1c7b90dd3a2", "transport": "tcp", "stream": 604, "initiator_ip": "10.10.22.156", "initiator_port": 49829, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24065, "last_frame": 24066, "first_seen_epoch": "1634914677.262419", "last_seen_epoch": "1634914677.366216", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-33124afd2f18080a8cc0c7fb", "transport": "tcp", "stream": 605, "initiator_ip": "10.10.22.156", "initiator_port": 49829, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24067, "last_frame": 24068, "first_seen_epoch": "1634914677.883666", "last_seen_epoch": "1634914677.991241", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-e3e47975370b405f8525132d", "transport": "tcp", "stream": 606, "initiator_ip": "10.10.22.156", "initiator_port": 49829, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24069, "last_frame": 24070, "first_seen_epoch": "1634914678.492362", "last_seen_epoch": "1634914678.588289", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-73ea885f527b0a7911396355", "transport": "tcp", "stream": 607, "initiator_ip": "10.10.22.156", "initiator_port": 49829, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24071, "last_frame": 24072, "first_seen_epoch": "1634914679.100856", "last_seen_epoch": "1634914679.209412", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dcd00b8233000549a814bc49", "transport": "tcp", "stream": 608, "initiator_ip": "10.10.22.156", "initiator_port": 49829, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24073, "last_frame": 24074, "first_seen_epoch": "1634914679.711178", "last_seen_epoch": "1634914679.8194", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2c35c207fe482f7e483da3da", "transport": "tcp", "stream": 609, "initiator_ip": "10.10.22.156", "initiator_port": 49830, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24075, "last_frame": 24076, "first_seen_epoch": "1634914679.822015", "last_seen_epoch": "1634914679.915168", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-49a84ae667e7fdf7cd37f029", "transport": "tcp", "stream": 610, "initiator_ip": "10.10.22.156", "initiator_port": 49830, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24077, "last_frame": 24078, "first_seen_epoch": "1634914680.429776", "last_seen_epoch": "1634914680.551315", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3b51a7656604d11c9589dfd6", "transport": "udp", "stream": 450, "initiator_ip": "10.10.22.157", "initiator_port": 60634, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24079, "last_frame": 24081, "first_seen_epoch": "1634914681.040471", "last_seen_epoch": "1634914681.116517", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-c4b8cde0693dd90931e6ea15", "transport": "tcp", "stream": 611, "initiator_ip": "10.10.22.156", "initiator_port": 49830, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24080, "last_frame": 24083, "first_seen_epoch": "1634914681.054749", "last_seen_epoch": "1634914681.151337", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-7790c54a67c91a82c8149ce2", "transport": "tcp", "stream": 612, "initiator_ip": "10.10.22.157", "initiator_port": 49945, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24082, "last_frame": 24089, "first_seen_epoch": "1634914681.11793", "last_seen_epoch": "1634914681.409547", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8a46fb8e32616471fc61936f", "transport": "tcp", "stream": 613, "initiator_ip": "10.10.22.156", "initiator_port": 49830, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24090, "last_frame": 24091, "first_seen_epoch": "1634914681.664693", "last_seen_epoch": "1634914681.762453", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1aca4abbd1494c22aae474bf", "transport": "tcp", "stream": 614, "initiator_ip": "10.10.22.156", "initiator_port": 49830, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24092, "last_frame": 24093, "first_seen_epoch": "1634914682.274436", "last_seen_epoch": "1634914682.372975", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-74eb915524dfea9ba3b6545e", "transport": "tcp", "stream": 615, "initiator_ip": "10.10.22.156", "initiator_port": 49831, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24096, "last_frame": 24097, "first_seen_epoch": "1634914684.384923", "last_seen_epoch": "1634914684.592531", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6b60a74cbccb60c7778537d3", "transport": "tcp", "stream": 616, "initiator_ip": "10.10.22.156", "initiator_port": 49831, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24098, "last_frame": 24099, "first_seen_epoch": "1634914685.101756", "last_seen_epoch": "1634914685.409284", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9c22aae8b369b22fa83aa71a", "transport": "tcp", "stream": 617, "initiator_ip": "10.10.22.157", "initiator_port": 49946, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24100, "last_frame": 24108, "first_seen_epoch": "1634914685.415227", "last_seen_epoch": "1634914685.923578", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-e5668b776fa5d270ee970095", "transport": "tcp", "stream": 618, "initiator_ip": "10.10.22.156", "initiator_port": 49831, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24107, "last_frame": 24109, "first_seen_epoch": "1634914685.914493", "last_seen_epoch": "1634914686.228573", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6f5576e21c33ec0d0da17e32", "transport": "tcp", "stream": 619, "initiator_ip": "10.10.22.156", "initiator_port": 49831, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24110, "last_frame": 24111, "first_seen_epoch": "1634914686.741764", "last_seen_epoch": "1634914686.819452", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ca3098db9abef8173f0da19c", "transport": "tcp", "stream": 620, "initiator_ip": "10.10.22.156", "initiator_port": 49831, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24112, "last_frame": 24113, "first_seen_epoch": "1634914687.320674", "last_seen_epoch": "1634914687.416442", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3ca4d4a5b16e525e1942523d", "transport": "tcp", "stream": 621, "initiator_ip": "10.10.22.156", "initiator_port": 49832, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24114, "last_frame": 24115, "first_seen_epoch": "1634914687.41935", "last_seen_epoch": "1634914687.508747", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b0608913eee637f96d12e4d3", "transport": "tcp", "stream": 622, "initiator_ip": "10.10.22.156", "initiator_port": 49832, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24116, "last_frame": 24117, "first_seen_epoch": "1634914688.023599", "last_seen_epoch": "1634914688.151621", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-4f5c23da6abcf4f177a3a44e", "transport": "tcp", "stream": 623, "initiator_ip": "10.10.22.156", "initiator_port": 49832, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24118, "last_frame": 24119, "first_seen_epoch": "1634914688.664619", "last_seen_epoch": "1634914688.769834", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fe16f3f38ef55a1d67d4d134", "transport": "tcp", "stream": 624, "initiator_ip": "10.10.22.156", "initiator_port": 49832, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24120, "last_frame": 24121, "first_seen_epoch": "1634914689.274047", "last_seen_epoch": "1634914689.372156", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2b3e8dbf88c1ac136d448afc", "transport": "tcp", "stream": 625, "initiator_ip": "10.10.22.156", "initiator_port": 49832, "responder_ip": "24.231.209.2", "responder_port": 6881, "first_frame": 24122, "last_frame": 24124, "first_seen_epoch": "1634914689.883963", "last_seen_epoch": "1634914689.992416", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-7054519b8ff4a7df6ca5159a", "transport": "tcp", "stream": 626, "initiator_ip": "10.10.22.157", "initiator_port": 49947, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24123, "last_frame": 24129, "first_seen_epoch": "1634914689.933219", "last_seen_epoch": "1634914690.232807", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-030b05e6fb56bfada08eecd8", "transport": "tcp", "stream": 627, "initiator_ip": "10.10.22.157", "initiator_port": 49948, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24132, "last_frame": 24137, "first_seen_epoch": "1634914694.243534", "last_seen_epoch": "1634914694.572703", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f2adf4372b5e1da5b1445d73", "transport": "tcp", "stream": 628, "initiator_ip": "10.10.22.156", "initiator_port": 49833, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24138, "last_frame": 24144, "first_seen_epoch": "1634914695.013201", "last_seen_epoch": "1634914698.103769", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-14e72f81c7b4b85db937d1be", "transport": "udp", "stream": 451, "initiator_ip": "10.10.22.156", "initiator_port": 59105, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24139, "last_frame": 24140, "first_seen_epoch": "1634914695.058142", "last_seen_epoch": "1634914695.104356", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-1fa1c47e6af165f1f4fe1bd8", "transport": "udp", "stream": 452, "initiator_ip": "10.10.22.157", "initiator_port": 65425, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24145, "last_frame": 24147, "first_seen_epoch": "1634914698.588864", "last_seen_epoch": "1634914698.648802", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-88ff409bcd2fff77e4954202", "transport": "tcp", "stream": 629, "initiator_ip": "10.10.22.156", "initiator_port": 49833, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24146, "last_frame": 24156, "first_seen_epoch": "1634914698.617859", "last_seen_epoch": "1634914701.284149", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9754ff3afef4f21443ea529e", "transport": "tcp", "stream": 630, "initiator_ip": "10.10.22.157", "initiator_port": 49949, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24148, "last_frame": 24155, "first_seen_epoch": "1634914698.650018", "last_seen_epoch": "1634914698.944488", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-66e29c25391ad07dc221dacf", "transport": "tcp", "stream": 631, "initiator_ip": "10.10.22.156", "initiator_port": 49833, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24157, "last_frame": 24169, "first_seen_epoch": "1634914701.789432", "last_seen_epoch": "1634914704.26006", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dcf8925b74615190e3cdf00e", "transport": "udp", "stream": 453, "initiator_ip": "10.10.22.157", "initiator_port": 58099, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24160, "last_frame": 24161, "first_seen_epoch": "1634914702.962937", "last_seen_epoch": "1634914703.042778", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-52c65dcf75c106051cd9b92c", "transport": "tcp", "stream": 632, "initiator_ip": "10.10.22.157", "initiator_port": 49950, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24162, "last_frame": 24167, "first_seen_epoch": "1634914703.04412", "last_seen_epoch": "1634914703.347517", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-74aff68be812fb03b28a2e04", "transport": "udp", "stream": 454, "initiator_ip": "10.10.22.156", "initiator_port": 50216, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24170, "last_frame": 24171, "first_seen_epoch": "1634914704.263857", "last_seen_epoch": "1634914704.264229", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-0ff00c41c574a17f897a9bbe", "transport": "tcp", "stream": 633, "initiator_ip": "10.10.22.156", "initiator_port": 49834, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24172, "last_frame": 24178, "first_seen_epoch": "1634914704.265068", "last_seen_epoch": "1634914707.251313", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-3587e0c98cf5d9ba70a99233", "transport": "udp", "stream": 455, "initiator_ip": "10.10.22.156", "initiator_port": 59262, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24173, "last_frame": 24174, "first_seen_epoch": "1634914704.265529", "last_seen_epoch": "1634914704.265783", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-046e1589aec0c86607a5e73c", "transport": "udp", "stream": 456, "initiator_ip": "10.10.22.157", "initiator_port": 60584, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24179, "last_frame": 24180, "first_seen_epoch": "1634914707.353674", "last_seen_epoch": "1634914707.405047", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d5731b3828a298678164aa8a", "transport": "tcp", "stream": 634, "initiator_ip": "10.10.22.157", "initiator_port": 49951, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24181, "last_frame": 24186, "first_seen_epoch": "1634914707.406366", "last_seen_epoch": "1634914707.702241", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9bf3aa8fd093a18c62da1a99", "transport": "tcp", "stream": 635, "initiator_ip": "10.10.22.156", "initiator_port": 49834, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24187, "last_frame": 24192, "first_seen_epoch": "1634914707.758257", "last_seen_epoch": "1634914710.398089", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-7c173aafc5c2495eb2a8e7ac", "transport": "tcp", "stream": 636, "initiator_ip": "10.10.22.156", "initiator_port": 49834, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24193, "last_frame": 24202, "first_seen_epoch": "1634914710.899024", "last_seen_epoch": "1634914713.47034", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2d5b68fef602f819c208d10d", "transport": "tcp", "stream": 637, "initiator_ip": "10.10.22.157", "initiator_port": 49952, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24194, "last_frame": 24199, "first_seen_epoch": "1634914711.712767", "last_seen_epoch": "1634914712.017662", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-810b822ee4a128f805ff915a", "transport": "tcp", "stream": 638, "initiator_ip": "10.10.22.156", "initiator_port": 49834, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24203, "last_frame": 24212, "first_seen_epoch": "1634914713.977646", "last_seen_epoch": "1634914716.393924", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-24536a49b3aacc40bb161708", "transport": "tcp", "stream": 639, "initiator_ip": "10.10.22.157", "initiator_port": 49953, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24205, "last_frame": 24210, "first_seen_epoch": "1634914716.026412", "last_seen_epoch": "1634914716.326186", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e1a8ba5e1883717a7cb3ebd8", "transport": "tcp", "stream": 640, "initiator_ip": "10.10.22.156", "initiator_port": 49835, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24213, "last_frame": 24220, "first_seen_epoch": "1634914718.402808", "last_seen_epoch": "1634914719.444967", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-a6a1ae10ede895db06bca8d9", "transport": "udp", "stream": 457, "initiator_ip": "10.10.22.156", "initiator_port": 53430, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24214, "last_frame": 24215, "first_seen_epoch": "1634914719.262008", "last_seen_epoch": "1634914719.262326", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5b48448abc6519602a6d1eb2", "transport": "udp", "stream": 458, "initiator_ip": "10.10.22.156", "initiator_port": 65527, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24216, "last_frame": 24217, "first_seen_epoch": "1634914719.26293", "last_seen_epoch": "1634914719.263165", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-dcea7b96459b7298cf92f2f6", "transport": "tcp", "stream": 641, "initiator_ip": "10.10.22.156", "initiator_port": 49835, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24221, "last_frame": 24228, "first_seen_epoch": "1634914719.947547", "last_seen_epoch": "1634914722.588437", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5fce770f26bdce055ab22d71", "transport": "tcp", "stream": 642, "initiator_ip": "10.10.22.157", "initiator_port": 49954, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24222, "last_frame": 24227, "first_seen_epoch": "1634914720.338447", "last_seen_epoch": "1634914720.651322", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-567da812c7a077b13226edae", "transport": "tcp", "stream": 643, "initiator_ip": "10.10.22.156", "initiator_port": 49835, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24229, "last_frame": 24246, "first_seen_epoch": "1634914723.102899", "last_seen_epoch": "1634914725.655916", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-488564c6a2418e2b89116e12", "transport": "udp", "stream": 459, "initiator_ip": "10.10.22.157", "initiator_port": 57664, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24232, "last_frame": 24233, "first_seen_epoch": "1634914724.667291", "last_seen_epoch": "1634914724.728318", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ec401e99a609155cf62b37bc", "transport": "tcp", "stream": 644, "initiator_ip": "10.10.22.157", "initiator_port": 49955, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24234, "last_frame": 24243, "first_seen_epoch": "1634914724.729496", "last_seen_epoch": "1634914725.03321", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5da722b04de05db99ed36f7c", "transport": "udp", "stream": 460, "initiator_ip": "10.10.22.156", "initiator_port": 59551, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24244, "last_frame": 24245, "first_seen_epoch": "1634914725.058995", "last_seen_epoch": "1634914725.108946", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-f75c9b93061f5ccd719408c3", "transport": "tcp", "stream": 645, "initiator_ip": "10.10.22.156", "initiator_port": 49835, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24247, "last_frame": 24248, "first_seen_epoch": "1634914726.165945", "last_seen_epoch": "1634914728.727994", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-187d5dfdb9f756c87e108956", "transport": "tcp", "stream": 646, "initiator_ip": "10.10.22.156", "initiator_port": 49836, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24249, "last_frame": 24260, "first_seen_epoch": "1634914728.730672", "last_seen_epoch": "1634914731.69765", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-5bc88f464d4038d39ad12bec", "transport": "udp", "stream": 461, "initiator_ip": "10.10.22.157", "initiator_port": 59191, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24250, "last_frame": 24251, "first_seen_epoch": "1634914729.058192", "last_seen_epoch": "1634914729.118299", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-42deda5021c9985b3873d1a7", "transport": "tcp", "stream": 647, "initiator_ip": "10.10.22.157", "initiator_port": 49956, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24252, "last_frame": 24257, "first_seen_epoch": "1634914729.119575", "last_seen_epoch": "1634914729.439556", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ed656d559c6c1be9961d5178", "transport": "tcp", "stream": 648, "initiator_ip": "10.10.22.156", "initiator_port": 49836, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24262, "last_frame": 24274, "first_seen_epoch": "1634914732.212415", "last_seen_epoch": "1634914734.769829", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-703fb3c313dafdfe8ed7d813", "transport": "udp", "stream": 462, "initiator_ip": "10.10.22.157", "initiator_port": 51721, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24263, "last_frame": 60206, "first_seen_epoch": "1634914733.448996", "last_seen_epoch": "1634916165.940003", "packets": 4, "bytes": 368, "initiator_bytes": 168, "responder_bytes": 200 }, { "flow_id": "flow-e92a9860001930d20b38c715", "transport": "tcp", "stream": 649, "initiator_ip": "10.10.22.157", "initiator_port": 49957, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24266, "last_frame": 24271, "first_seen_epoch": "1634914733.542445", "last_seen_epoch": "1634914733.844695", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bf65caa2b92a8b8d20f23249", "transport": "tcp", "stream": 650, "initiator_ip": "10.10.22.156", "initiator_port": 49836, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24276, "last_frame": 24279, "first_seen_epoch": "1634914735.274907", "last_seen_epoch": "1634914737.743155", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-38452fdd1e45bf12fd738fc1", "transport": "tcp", "stream": 651, "initiator_ip": "10.10.22.157", "initiator_port": 49958, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24280, "last_frame": 24286, "first_seen_epoch": "1634914737.854045", "last_seen_epoch": "1634914738.288398", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c6f0b114bbc88ab3afcd313d", "transport": "tcp", "stream": 652, "initiator_ip": "10.10.22.156", "initiator_port": 49836, "responder_ip": "47.151.181.188", "responder_port": 443, "first_frame": 24285, "last_frame": 24289, "first_seen_epoch": "1634914738.259046", "last_seen_epoch": "1634914740.792188", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-312f0d9b8e16fbe1986cb81e", "transport": "tcp", "stream": 653, "initiator_ip": "10.10.22.157", "initiator_port": 49959, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24290, "last_frame": 24295, "first_seen_epoch": "1634914742.291656", "last_seen_epoch": "1634914742.625074", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d82fe76bd253d83fcf218bf1", "transport": "tcp", "stream": 654, "initiator_ip": "10.10.22.157", "initiator_port": 49960, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24296, "last_frame": 24301, "first_seen_epoch": "1634914746.636497", "last_seen_epoch": "1634914746.955153", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-28b2c8eaf042a6d6578c6d00", "transport": "udp", "stream": 463, "initiator_ip": "10.10.22.157", "initiator_port": 64444, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24302, "last_frame": 24303, "first_seen_epoch": "1634914750.963986", "last_seen_epoch": "1634914751.025778", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-dc6c078882e9063925202f74", "transport": "tcp", "stream": 655, "initiator_ip": "10.10.22.157", "initiator_port": 49961, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24304, "last_frame": 24309, "first_seen_epoch": "1634914751.02703", "last_seen_epoch": "1634914751.316607", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b8f84d96a84cff669adb1fba", "transport": "tcp", "stream": 656, "initiator_ip": "10.10.22.156", "initiator_port": 49837, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24310, "last_frame": 24322, "first_seen_epoch": "1634914752.827142", "last_seen_epoch": "1634914756.024041", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-ce15f0e7ff1e357d67540501", "transport": "udp", "stream": 464, "initiator_ip": "10.10.22.157", "initiator_port": 52705, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24312, "last_frame": 24313, "first_seen_epoch": "1634914755.322795", "last_seen_epoch": "1634914755.408217", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-434f77bc92c8ca210412574a", "transport": "tcp", "stream": 657, "initiator_ip": "10.10.22.157", "initiator_port": 49962, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24314, "last_frame": 24319, "first_seen_epoch": "1634914755.409547", "last_seen_epoch": "1634914755.762891", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-55ad86c49e49115f410b5327", "transport": "tcp", "stream": 658, "initiator_ip": "10.10.22.156", "initiator_port": 49837, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24323, "last_frame": 24324, "first_seen_epoch": "1634914756.525898", "last_seen_epoch": "1634914759.243918", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-287d19f1e4cee53e3488a1f9", "transport": "tcp", "stream": 659, "initiator_ip": "10.10.22.156", "initiator_port": 49837, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24325, "last_frame": 24339, "first_seen_epoch": "1634914759.759842", "last_seen_epoch": "1634914762.316187", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b9785b1993d13b22b60705d2", "transport": "udp", "stream": 465, "initiator_ip": "10.10.22.157", "initiator_port": 60894, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24326, "last_frame": 24327, "first_seen_epoch": "1634914759.777763", "last_seen_epoch": "1634914759.852247", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5ee1d762ef76cfc36f7ef163", "transport": "tcp", "stream": 660, "initiator_ip": "10.10.22.157", "initiator_port": 49963, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24328, "last_frame": 24335, "first_seen_epoch": "1634914759.853674", "last_seen_epoch": "1634914760.185959", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-f81fc18701c6a11d981b7d4b", "transport": "tcp", "stream": 661, "initiator_ip": "10.10.22.156", "initiator_port": 49838, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24340, "last_frame": 24351, "first_seen_epoch": "1634914762.318644", "last_seen_epoch": "1634914765.423023", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-e29ce69974ac4f13d7c0e001", "transport": "tcp", "stream": 662, "initiator_ip": "10.10.22.157", "initiator_port": 49964, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24343, "last_frame": 24348, "first_seen_epoch": "1634914764.19931", "last_seen_epoch": "1634914764.534882", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8c02ccdd4d25848cbf984f1d", "transport": "tcp", "stream": 663, "initiator_ip": "10.10.22.156", "initiator_port": 49838, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24352, "last_frame": 24358, "first_seen_epoch": "1634914765.932055", "last_seen_epoch": "1634914768.577397", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ab4fe4499151851405825287", "transport": "tcp", "stream": 664, "initiator_ip": "10.10.22.157", "initiator_port": 49965, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24356, "last_frame": 24363, "first_seen_epoch": "1634914768.541998", "last_seen_epoch": "1634914768.891966", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a72d21475fc3360f337cfc33", "transport": "tcp", "stream": 665, "initiator_ip": "10.10.22.156", "initiator_port": 49838, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24364, "last_frame": 24370, "first_seen_epoch": "1634914769.088242", "last_seen_epoch": "1634914771.704654", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-eb8308a8fcb9535d7a83ea4d", "transport": "udp", "stream": 466, "initiator_ip": "10.10.22.156", "initiator_port": 59608, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24365, "last_frame": 24379, "first_seen_epoch": "1634914770.058961", "last_seen_epoch": "1634914773.172415", "packets": 5, "bytes": 396, "initiator_bytes": 304, "responder_bytes": 92 }, { "flow_id": "flow-0cef907c74ce72b3eefa6383", "transport": "tcp", "stream": 666, "initiator_ip": "10.10.22.157", "initiator_port": 49966, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24371, "last_frame": 24380, "first_seen_epoch": "1634914772.900619", "last_seen_epoch": "1634914773.245422", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-52d6dafa0c00b44a59383a53", "transport": "tcp", "stream": 667, "initiator_ip": "10.10.22.156", "initiator_port": 49839, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24381, "last_frame": 24386, "first_seen_epoch": "1634914773.715687", "last_seen_epoch": "1634914774.856151", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-8bd930d8a2d6fa9cadad74da", "transport": "tcp", "stream": 668, "initiator_ip": "10.10.22.156", "initiator_port": 49839, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24387, "last_frame": 24395, "first_seen_epoch": "1634914775.369718", "last_seen_epoch": "1634914777.983423", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-57e875e2acc2bf32469bbef3", "transport": "udp", "stream": 467, "initiator_ip": "10.10.22.157", "initiator_port": 54402, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24388, "last_frame": 24389, "first_seen_epoch": "1634914777.262213", "last_seen_epoch": "1634914777.363535", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2f491f18a024a585fe097fcc", "transport": "tcp", "stream": 669, "initiator_ip": "10.10.22.157", "initiator_port": 49967, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24390, "last_frame": 24396, "first_seen_epoch": "1634914777.364373", "last_seen_epoch": "1634914777.983451", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a473895f25b70fbea49bef2e", "transport": "tcp", "stream": 670, "initiator_ip": "10.10.22.156", "initiator_port": 49839, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24399, "last_frame": 24406, "first_seen_epoch": "1634914778.495142", "last_seen_epoch": "1634914781.163424", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3a75aef5e9d717cf50b1a5fe", "transport": "udp", "stream": 468, "initiator_ip": "10.10.22.156", "initiator_port": 63297, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24400, "last_frame": 24401, "first_seen_epoch": "1634914779.280959", "last_seen_epoch": "1634914779.281281", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5476677a50ac90b6f394141c", "transport": "udp", "stream": 469, "initiator_ip": "10.10.22.156", "initiator_port": 55037, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24402, "last_frame": 24403, "first_seen_epoch": "1634914779.281978", "last_seen_epoch": "1634914779.282226", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-3d1103aeb781cae16b689d66", "transport": "tcp", "stream": 671, "initiator_ip": "10.10.22.156", "initiator_port": 49839, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24407, "last_frame": 24417, "first_seen_epoch": "1634914781.668363", "last_seen_epoch": "1634914784.229884", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dd6d8bbc5ee8d36efafdf911", "transport": "udp", "stream": 470, "initiator_ip": "10.10.22.157", "initiator_port": 57359, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24408, "last_frame": 24409, "first_seen_epoch": "1634914781.997548", "last_seen_epoch": "1634914782.046361", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ddd3d23fd44a8f7814e58006", "transport": "tcp", "stream": 672, "initiator_ip": "10.10.22.157", "initiator_port": 49968, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24410, "last_frame": 24415, "first_seen_epoch": "1634914782.04769", "last_seen_epoch": "1634914782.369294", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5590c4632e9ad213e9265c54", "transport": "udp", "stream": 471, "initiator_ip": "10.10.22.156", "initiator_port": 61316, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24418, "last_frame": 24419, "first_seen_epoch": "1634914784.232618", "last_seen_epoch": "1634914784.233039", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-33a037a7ed0aa0a612197336", "transport": "udp", "stream": 472, "initiator_ip": "10.10.22.156", "initiator_port": 63654, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24420, "last_frame": 24421, "first_seen_epoch": "1634914784.233905", "last_seen_epoch": "1634914784.234191", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-587fc9ae828298ab0a00e0f1", "transport": "tcp", "stream": 673, "initiator_ip": "10.10.22.156", "initiator_port": 49840, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24422, "last_frame": 24433, "first_seen_epoch": "1634914784.234291", "last_seen_epoch": "1634914787.332277", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-8279917a95964bb5511f9bd6", "transport": "udp", "stream": 473, "initiator_ip": "10.10.22.157", "initiator_port": 49244, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24424, "last_frame": 24425, "first_seen_epoch": "1634914786.387714", "last_seen_epoch": "1634914786.433525", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-12c730e7f3dcb2595ac95044", "transport": "tcp", "stream": 674, "initiator_ip": "10.10.22.157", "initiator_port": 49969, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24426, "last_frame": 24431, "first_seen_epoch": "1634914786.434702", "last_seen_epoch": "1634914786.73992", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-45d5d0fa5578ebabd336b886", "transport": "tcp", "stream": 675, "initiator_ip": "10.10.22.156", "initiator_port": 49840, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24434, "last_frame": 24436, "first_seen_epoch": "1634914787.83833", "last_seen_epoch": "1634914790.579176", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-49362c4a0693d52262bd6bf1", "transport": "tcp", "stream": 676, "initiator_ip": "10.10.22.157", "initiator_port": 49970, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24437, "last_frame": 24442, "first_seen_epoch": "1634914790.747053", "last_seen_epoch": "1634914791.075754", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ccf47da8e91dad5c4af655cf", "transport": "tcp", "stream": 677, "initiator_ip": "10.10.22.156", "initiator_port": 49840, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 24443, "last_frame": 24448, "first_seen_epoch": "1634914791.088565", "last_seen_epoch": "1634914793.652057", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-4f2fc370cc6d641fb54ad978", "transport": "tcp", "stream": 678, "initiator_ip": "10.10.22.157", "initiator_port": 49971, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24452, "last_frame": 24457, "first_seen_epoch": "1634914795.109199", "last_seen_epoch": "1634914795.438075", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cb10418517ef6726550ee69f", "transport": "tcp", "stream": 679, "initiator_ip": "10.10.22.156", "initiator_port": 49841, "responder_ip": "37.208.181.198", "responder_port": 443, "first_frame": 24458, "last_frame": 24671, "first_seen_epoch": "1634914798.670351", "last_seen_epoch": "1634914873.745733", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-5d0d6f1b7ef1b07b81118b51", "transport": "udp", "stream": 474, "initiator_ip": "10.10.22.156", "initiator_port": 54301, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24459, "last_frame": 24460, "first_seen_epoch": "1634914799.232644", "last_seen_epoch": "1634914799.233036", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-89af1133ba335b948472017f", "transport": "udp", "stream": 475, "initiator_ip": "10.10.22.156", "initiator_port": 62173, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24461, "last_frame": 24462, "first_seen_epoch": "1634914799.233859", "last_seen_epoch": "1634914799.234105", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-8a7a5346e527264eaff909e4", "transport": "tcp", "stream": 680, "initiator_ip": "10.10.22.157", "initiator_port": 49972, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24463, "last_frame": 24469, "first_seen_epoch": "1634914799.45062", "last_seen_epoch": "1634914799.795073", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-67ec0cfe44efc44e44caa38d", "transport": "udp", "stream": 476, "initiator_ip": "10.10.22.157", "initiator_port": 49594, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24471, "last_frame": 24472, "first_seen_epoch": "1634914803.811119", "last_seen_epoch": "1634914803.891991", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-db79635bd11af9100c900658", "transport": "tcp", "stream": 681, "initiator_ip": "10.10.22.157", "initiator_port": 49973, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24473, "last_frame": 24478, "first_seen_epoch": "1634914803.893322", "last_seen_epoch": "1634914804.242961", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-18f87a98ef05101f1addcebb", "transport": "udp", "stream": 477, "initiator_ip": "10.10.22.157", "initiator_port": 62548, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24482, "last_frame": 24483, "first_seen_epoch": "1634914808.246922", "last_seen_epoch": "1634914808.297963", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a6fe40693386bee468322db3", "transport": "tcp", "stream": 682, "initiator_ip": "10.10.22.157", "initiator_port": 49974, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24484, "last_frame": 24489, "first_seen_epoch": "1634914808.299301", "last_seen_epoch": "1634914808.622917", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f9b18ff2c03e0b7d6393e6f6", "transport": "udp", "stream": 478, "initiator_ip": "10.10.22.157", "initiator_port": 56485, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24490, "last_frame": 24491, "first_seen_epoch": "1634914812.638408", "last_seen_epoch": "1634914812.717757", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4b723d8c20b73df6baba14b2", "transport": "tcp", "stream": 683, "initiator_ip": "10.10.22.157", "initiator_port": 49975, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24492, "last_frame": 24497, "first_seen_epoch": "1634914812.71911", "last_seen_epoch": "1634914813.007098", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-29f1d41a1bedb37f867a3236", "transport": "tcp", "stream": 684, "initiator_ip": "10.10.22.158", "initiator_port": 49819, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 24499, "last_frame": 24846, "first_seen_epoch": "1634914813.820875", "last_seen_epoch": "1634914923.788717", "packets": 21, "bytes": 5295, "initiator_bytes": 1739, "responder_bytes": 3556 }, { "flow_id": "flow-d2a0ac4409d0e5072caec5fa", "transport": "tcp", "stream": 685, "initiator_ip": "10.10.22.156", "initiator_port": 49842, "responder_ip": "37.208.181.198", "responder_port": 443, "first_frame": 24513, "last_frame": 24723, "first_seen_epoch": "1634914814.687356", "last_seen_epoch": "1634914889.764044", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7e3c7b733f635b0786667516", "transport": "tcp", "stream": 686, "initiator_ip": "10.10.22.157", "initiator_port": 49976, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24515, "last_frame": 24522, "first_seen_epoch": "1634914817.013303", "last_seen_epoch": "1634914817.317899", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-4addcf5b68efcc3e303292d7", "transport": "tcp", "stream": 687, "initiator_ip": "10.10.22.157", "initiator_port": 49977, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24526, "last_frame": 24531, "first_seen_epoch": "1634914821.326221", "last_seen_epoch": "1634914821.651955", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a55353bbf96b8c21aa36f4b1", "transport": "tcp", "stream": 688, "initiator_ip": "10.10.22.157", "initiator_port": 49978, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24537, "last_frame": 24542, "first_seen_epoch": "1634914825.671198", "last_seen_epoch": "1634914825.986699", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-52ef2cf6dbadf659b838c098", "transport": "udp", "stream": 479, "initiator_ip": "10.10.22.157", "initiator_port": 65426, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24546, "last_frame": 24547, "first_seen_epoch": "1634914829.997662", "last_seen_epoch": "1634914830.088341", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4c734e230987f9a49c41c8b2", "transport": "tcp", "stream": 689, "initiator_ip": "10.10.22.157", "initiator_port": 49979, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24548, "last_frame": 24555, "first_seen_epoch": "1634914830.089716", "last_seen_epoch": "1634914830.378295", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-b4330c50a9cb142cfd97388a", "transport": "tcp", "stream": 690, "initiator_ip": "10.10.22.156", "initiator_port": 49843, "responder_ip": "37.208.181.198", "responder_port": 443, "first_frame": 24556, "last_frame": 24776, "first_seen_epoch": "1634914832.748857", "last_seen_epoch": "1634914907.855357", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c951c8bc8c36b89055d6fa0c", "transport": "udp", "stream": 480, "initiator_ip": "10.10.22.157", "initiator_port": 52270, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 24558, "last_frame": 24559, "first_seen_epoch": "1634914834.388972", "last_seen_epoch": "1634914834.45106", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3beb1c108e2d5962e317df89", "transport": "tcp", "stream": 691, "initiator_ip": "10.10.22.157", "initiator_port": 49980, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 24560, "last_frame": 29981, "first_seen_epoch": "1634914834.452296", "last_seen_epoch": "1634915165.205736", "packets": 134, "bytes": 8096, "initiator_bytes": 4528, "responder_bytes": 3568 }, { "flow_id": "flow-83281026b30b4efcb9f9ec6e", "transport": "tcp", "stream": 692, "initiator_ip": "10.10.22.156", "initiator_port": 49844, "responder_ip": "37.208.181.198", "responder_port": 443, "first_frame": 24576, "last_frame": 24848, "first_seen_epoch": "1634914848.76532", "last_seen_epoch": "1634914923.897482", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-bf40f9d6e9e2300e7b727529", "transport": "udp", "stream": 481, "initiator_ip": "10.10.22.157", "initiator_port": 62570, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24585, "last_frame": 24587, "first_seen_epoch": "1634914851.166472", "last_seen_epoch": "1634914851.166836", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-c476e21ea17eadd48d4c0060", "transport": "udp", "stream": 482, "initiator_ip": "10.10.22.157", "initiator_port": 49433, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 24589, "last_frame": 24589, "first_seen_epoch": "1634914851.167306", "last_seen_epoch": "1634914851.167306", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-40cc35bfa25d31da8932fba0", "transport": "udp", "stream": 483, "initiator_ip": "10.10.22.157", "initiator_port": 52061, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24590, "last_frame": 24591, "first_seen_epoch": "1634914851.167979", "last_seen_epoch": "1634914851.168976", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-dd2e9771c43c5f8ef7b01a5c", "transport": "tcp", "stream": 693, "initiator_ip": "10.10.22.157", "initiator_port": 49981, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 24605, "last_frame": 24648, "first_seen_epoch": "1634914854.997418", "last_seen_epoch": "1634914865.737123", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-05143ebb69b0b2d64d9a7a60", "transport": "udp", "stream": 484, "initiator_ip": "10.10.22.156", "initiator_port": 49641, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24629, "last_frame": 24630, "first_seen_epoch": "1634914859.224037", "last_seen_epoch": "1634914859.224438", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-dcce21ed7ef10d3e814829b5", "transport": "udp", "stream": 485, "initiator_ip": "10.10.22.156", "initiator_port": 63950, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24631, "last_frame": 24632, "first_seen_epoch": "1634914859.224922", "last_seen_epoch": "1634914859.280742", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-98318c7bb843d156bc04bfc5", "transport": "tcp", "stream": 694, "initiator_ip": "10.10.22.156", "initiator_port": 49845, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24649, "last_frame": 24650, "first_seen_epoch": "1634914869.816255", "last_seen_epoch": "1634914869.912159", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-bcb730c49e1a42f1f4f5f4e5", "transport": "tcp", "stream": 695, "initiator_ip": "10.10.22.156", "initiator_port": 49845, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24651, "last_frame": 24652, "first_seen_epoch": "1634914870.422809", "last_seen_epoch": "1634914870.52543", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-46c7b3b661063831a24db42c", "transport": "tcp", "stream": 696, "initiator_ip": "10.10.22.156", "initiator_port": 49845, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24653, "last_frame": 24654, "first_seen_epoch": "1634914871.031856", "last_seen_epoch": "1634914871.151944", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-229ff8cf0aaa323f76501dd7", "transport": "tcp", "stream": 697, "initiator_ip": "10.10.22.156", "initiator_port": 49845, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24657, "last_frame": 24658, "first_seen_epoch": "1634914871.655465", "last_seen_epoch": "1634914871.753795", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5596e3e966e3c5a258827e6b", "transport": "tcp", "stream": 698, "initiator_ip": "10.10.22.156", "initiator_port": 49845, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24659, "last_frame": 24660, "first_seen_epoch": "1634914872.264594", "last_seen_epoch": "1634914872.363833", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-84a40e98b93c57f1368b57d9", "transport": "udp", "stream": 486, "initiator_ip": "10.10.22.156", "initiator_port": 52012, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24661, "last_frame": 24662, "first_seen_epoch": "1634914872.36738", "last_seen_epoch": "1634914872.367876", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-d6e087218e126796bdeccae5", "transport": "udp", "stream": 487, "initiator_ip": "10.10.22.156", "initiator_port": 64510, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24663, "last_frame": 24664, "first_seen_epoch": "1634914872.368374", "last_seen_epoch": "1634914872.368608", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-7f86629fcf5b2420746b2abd", "transport": "tcp", "stream": 699, "initiator_ip": "10.10.22.156", "initiator_port": 49846, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24665, "last_frame": 24666, "first_seen_epoch": "1634914872.369602", "last_seen_epoch": "1634914872.464906", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ab976c10e50049b7114045f0", "transport": "tcp", "stream": 700, "initiator_ip": "10.10.22.156", "initiator_port": 49846, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24667, "last_frame": 24668, "first_seen_epoch": "1634914872.967122", "last_seen_epoch": "1634914873.062809", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-80b8cb835bb9a14bdfa1d8ab", "transport": "tcp", "stream": 701, "initiator_ip": "10.10.22.156", "initiator_port": 49846, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24669, "last_frame": 24670, "first_seen_epoch": "1634914873.576114", "last_seen_epoch": "1634914873.68336", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fb857edcde500609578f0881", "transport": "tcp", "stream": 702, "initiator_ip": "10.10.22.156", "initiator_port": 49846, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24672, "last_frame": 24673, "first_seen_epoch": "1634914874.186518", "last_seen_epoch": "1634914874.310988", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2598a575f065a76612e72054", "transport": "tcp", "stream": 703, "initiator_ip": "10.10.22.156", "initiator_port": 49846, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24674, "last_frame": 24677, "first_seen_epoch": "1634914874.827092", "last_seen_epoch": "1634914875.949182", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3d1aceaea2df517dae40497b", "transport": "tcp", "stream": 704, "initiator_ip": "10.10.22.156", "initiator_port": 49847, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24680, "last_frame": 24681, "first_seen_epoch": "1634914877.970794", "last_seen_epoch": "1634914878.088807", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-57f9e256dce63514930697de", "transport": "tcp", "stream": 705, "initiator_ip": "10.10.22.156", "initiator_port": 49847, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24682, "last_frame": 24683, "first_seen_epoch": "1634914878.590434", "last_seen_epoch": "1634914878.689866", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-70952eba9aa57e729efc8dd1", "transport": "tcp", "stream": 706, "initiator_ip": "10.10.22.156", "initiator_port": 49847, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24684, "last_frame": 24685, "first_seen_epoch": "1634914879.199812", "last_seen_epoch": "1634914879.339785", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5e8c93c4e7e98f18908e815b", "transport": "tcp", "stream": 707, "initiator_ip": "10.10.22.156", "initiator_port": 49847, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24686, "last_frame": 24687, "first_seen_epoch": "1634914879.840291", "last_seen_epoch": "1634914879.93242", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3454a3c12b4fdef8ab19a82d", "transport": "tcp", "stream": 708, "initiator_ip": "10.10.22.156", "initiator_port": 49847, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24688, "last_frame": 24689, "first_seen_epoch": "1634914880.435606", "last_seen_epoch": "1634914880.539625", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-30ede20c095e9ca1c3f4a122", "transport": "tcp", "stream": 709, "initiator_ip": "10.10.22.156", "initiator_port": 49848, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24690, "last_frame": 24691, "first_seen_epoch": "1634914880.542682", "last_seen_epoch": "1634914880.634022", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-153ea0df07e9727612c197e4", "transport": "tcp", "stream": 710, "initiator_ip": "10.10.22.156", "initiator_port": 49848, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24692, "last_frame": 24693, "first_seen_epoch": "1634914881.139283", "last_seen_epoch": "1634914881.275756", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-7c4ae9728588d9190c9cc9d4", "transport": "tcp", "stream": 711, "initiator_ip": "10.10.22.156", "initiator_port": 49848, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24696, "last_frame": 24697, "first_seen_epoch": "1634914881.780028", "last_seen_epoch": "1634914881.87555", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d87d82e75a53c57c300f0d14", "transport": "tcp", "stream": 712, "initiator_ip": "10.10.22.156", "initiator_port": 49848, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24698, "last_frame": 24699, "first_seen_epoch": "1634914882.388977", "last_seen_epoch": "1634914882.490279", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-372b3d585c89e327e6ff3726", "transport": "tcp", "stream": 713, "initiator_ip": "10.10.22.156", "initiator_port": 49848, "responder_ip": "24.231.209.2", "responder_port": 2222, "first_frame": 24702, "last_frame": 24703, "first_seen_epoch": "1634914882.998069", "last_seen_epoch": "1634914883.116314", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2108c8c3f6d76a3d06e17018", "transport": "udp", "stream": 488, "initiator_ip": "10.10.22.156", "initiator_port": 59387, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24713, "last_frame": 24714, "first_seen_epoch": "1634914887.359326", "last_seen_epoch": "1634914887.359843", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-964a95061a6432183f534d09", "transport": "udp", "stream": 489, "initiator_ip": "10.10.22.156", "initiator_port": 64653, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24715, "last_frame": 24716, "first_seen_epoch": "1634914887.36053", "last_seen_epoch": "1634914887.360763", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-f4c899235f810e7821d494fe", "transport": "tcp", "stream": 714, "initiator_ip": "10.10.22.156", "initiator_port": 49849, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24719, "last_frame": 24720, "first_seen_epoch": "1634914888.126812", "last_seen_epoch": "1634914888.546823", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-86fb7d47ebb75b5ae8231f1f", "transport": "tcp", "stream": 715, "initiator_ip": "10.10.22.156", "initiator_port": 49849, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24721, "last_frame": 24722, "first_seen_epoch": "1634914889.058503", "last_seen_epoch": "1634914889.467472", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ba2b90f673227f889582bf5f", "transport": "tcp", "stream": 716, "initiator_ip": "10.10.22.156", "initiator_port": 49849, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24724, "last_frame": 24725, "first_seen_epoch": "1634914889.980097", "last_seen_epoch": "1634914890.388776", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-bf4d2d5952a60631c189b63c", "transport": "tcp", "stream": 717, "initiator_ip": "10.10.22.156", "initiator_port": 49849, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24726, "last_frame": 24729, "first_seen_epoch": "1634914890.90324", "last_seen_epoch": "1634914891.20087", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-decbce7324b4a674f41bb500", "transport": "tcp", "stream": 718, "initiator_ip": "10.10.22.156", "initiator_port": 49849, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24732, "last_frame": 24733, "first_seen_epoch": "1634914891.71496", "last_seen_epoch": "1634914892.130161", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6386609d9d02e9eec3adc6a6", "transport": "tcp", "stream": 719, "initiator_ip": "10.10.22.156", "initiator_port": 49850, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24734, "last_frame": 24735, "first_seen_epoch": "1634914892.133113", "last_seen_epoch": "1634914892.55312", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-627176bd53e4f7a167b9f3f1", "transport": "tcp", "stream": 720, "initiator_ip": "10.10.22.156", "initiator_port": 49850, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24736, "last_frame": 24737, "first_seen_epoch": "1634914893.059473", "last_seen_epoch": "1634914893.357831", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-16f53a4a26fd56eb2b896547", "transport": "tcp", "stream": 721, "initiator_ip": "10.10.22.156", "initiator_port": 49850, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24738, "last_frame": 24739, "first_seen_epoch": "1634914893.871624", "last_seen_epoch": "1634914894.280938", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2d75767b151f9628a31a9947", "transport": "tcp", "stream": 722, "initiator_ip": "10.10.22.156", "initiator_port": 49850, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24742, "last_frame": 24743, "first_seen_epoch": "1634914894.793936", "last_seen_epoch": "1634914895.201402", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0cfdc01f483f652e1b6707ec", "transport": "tcp", "stream": 723, "initiator_ip": "10.10.22.156", "initiator_port": 49850, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24744, "last_frame": 24745, "first_seen_epoch": "1634914895.714647", "last_seen_epoch": "1634914896.13217", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0afb9546bae395f6624a2f30", "transport": "tcp", "stream": 724, "initiator_ip": "10.10.22.156", "initiator_port": 49851, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24748, "last_frame": 24749, "first_seen_epoch": "1634914898.139808", "last_seen_epoch": "1634914898.580571", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-bace36cfe7e56258200dae5a", "transport": "tcp", "stream": 725, "initiator_ip": "10.10.22.156", "initiator_port": 49851, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24750, "last_frame": 24751, "first_seen_epoch": "1634914899.089031", "last_seen_epoch": "1634914899.502054", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-bafa5a1f357ebb86a4cb7838", "transport": "tcp", "stream": 726, "initiator_ip": "10.10.22.156", "initiator_port": 49851, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24752, "last_frame": 24753, "first_seen_epoch": "1634914900.012108", "last_seen_epoch": "1634914900.420768", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ac7b37a9fd1131538343cc0f", "transport": "tcp", "stream": 727, "initiator_ip": "10.10.22.156", "initiator_port": 49851, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24754, "last_frame": 24755, "first_seen_epoch": "1634914900.934479", "last_seen_epoch": "1634914901.345359", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-080f7483dbd86d208d299a1c", "transport": "tcp", "stream": 728, "initiator_ip": "10.10.22.156", "initiator_port": 49851, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24758, "last_frame": 24759, "first_seen_epoch": "1634914901.855652", "last_seen_epoch": "1634914902.264045", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d3836f352fd2e77d89889d26", "transport": "tcp", "stream": 729, "initiator_ip": "10.10.22.156", "initiator_port": 49852, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24760, "last_frame": 24761, "first_seen_epoch": "1634914902.267342", "last_seen_epoch": "1634914902.676459", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-7ba4aef3855aaf13816058b8", "transport": "tcp", "stream": 730, "initiator_ip": "10.10.22.156", "initiator_port": 49852, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24762, "last_frame": 24763, "first_seen_epoch": "1634914903.184659", "last_seen_epoch": "1634914903.621302", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b8d2d4e7a1e28048ef6376f0", "transport": "tcp", "stream": 731, "initiator_ip": "10.10.22.156", "initiator_port": 49852, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24764, "last_frame": 24765, "first_seen_epoch": "1634914904.138271", "last_seen_epoch": "1634914904.519486", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2ea34a6d12135a513ddbe9c0", "transport": "tcp", "stream": 732, "initiator_ip": "10.10.22.156", "initiator_port": 49852, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24768, "last_frame": 24771, "first_seen_epoch": "1634914905.029283", "last_seen_epoch": "1634914905.441207", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-cc300c9c7bbffc494ee96759", "transport": "udp", "stream": 490, "initiator_ip": "10.10.22.156", "initiator_port": 58092, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24769, "last_frame": 24770, "first_seen_epoch": "1634914905.031554", "last_seen_epoch": "1634914905.079895", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-4f8469b20799b51585e531da", "transport": "tcp", "stream": 733, "initiator_ip": "10.10.22.156", "initiator_port": 49852, "responder_ip": "103.143.8.71", "responder_port": 443, "first_frame": 24772, "last_frame": 24773, "first_seen_epoch": "1634914905.949157", "last_seen_epoch": "1634914906.362804", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b91ef2bec685801abd97c3ed", "transport": "tcp", "stream": 734, "initiator_ip": "10.10.22.156", "initiator_port": 49853, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 24781, "last_frame": 26175, "first_seen_epoch": "1634914911.376253", "last_seen_epoch": "1634914986.550114", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-62eccbd18aec44aafb25a896", "transport": "udp", "stream": 491, "initiator_ip": "10.10.22.156", "initiator_port": 51597, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24787, "last_frame": 24790, "first_seen_epoch": "1634914911.840865", "last_seen_epoch": "1634914911.841181", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-2beb914120dcf3be90eeee03", "transport": "udp", "stream": 492, "initiator_ip": "10.10.22.156", "initiator_port": 57693, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 24793, "last_frame": 24793, "first_seen_epoch": "1634914911.842008", "last_seen_epoch": "1634914911.842008", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-f2eec1be90fc1f999fb6f011", "transport": "udp", "stream": 493, "initiator_ip": "10.10.22.156", "initiator_port": 53937, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24795, "last_frame": 24796, "first_seen_epoch": "1634914911.844792", "last_seen_epoch": "1634914911.845809", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-0a3a3ad5815975feb650c042", "transport": "tcp", "stream": 735, "initiator_ip": "10.10.22.156", "initiator_port": 49854, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 24810, "last_frame": 24853, "first_seen_epoch": "1634914915.079347", "last_seen_epoch": "1634914925.888601", "packets": 25, "bytes": 7495, "initiator_bytes": 5137, "responder_bytes": 2358 }, { "flow_id": "flow-506e2125acd8b8cb8ffbc77a", "transport": "tcp", "stream": 736, "initiator_ip": "10.10.22.156", "initiator_port": 49855, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 24858, "last_frame": 29036, "first_seen_epoch": "1634914927.450624", "last_seen_epoch": "1634915002.747982", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-782fbca3ac3d269d5ae52319", "transport": "udp", "stream": 494, "initiator_ip": "10.10.22.157", "initiator_port": 57951, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24861, "last_frame": 24862, "first_seen_epoch": "1634914930.936664", "last_seen_epoch": "1634914930.937051", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-cbe44e850486a2b8208fc470", "transport": "udp", "stream": 495, "initiator_ip": "10.10.22.157", "initiator_port": 55444, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 24863, "last_frame": 24864, "first_seen_epoch": "1634914930.93751", "last_seen_epoch": "1634914930.937711", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-1e1096f0951aa7fe26b26473", "transport": "tcp", "stream": 737, "initiator_ip": "10.10.22.158", "initiator_port": 49820, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 24872, "last_frame": 29072, "first_seen_epoch": "1634914942.237605", "last_seen_epoch": "1634915009.48155", "packets": 21, "bytes": 9127, "initiator_bytes": 2062, "responder_bytes": 7065 }, { "flow_id": "flow-3173a8bb74a6d148874bd971", "transport": "tcp", "stream": 738, "initiator_ip": "10.10.22.158", "initiator_port": 49821, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 24893, "last_frame": 29073, "first_seen_epoch": "1634914942.511833", "last_seen_epoch": "1634915009.713466", "packets": 1001, "bytes": 890220, "initiator_bytes": 22755, "responder_bytes": 867465 }, { "flow_id": "flow-a2cab8b0cee9fac596ded63a", "transport": "udp", "stream": 496, "initiator_ip": "10.10.22.158", "initiator_port": 50859, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25085, "last_frame": 25086, "first_seen_epoch": "1634914943.549678", "last_seen_epoch": "1634914943.549966", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-8ec32e8568c3f237aa95edfd", "transport": "udp", "stream": 497, "initiator_ip": "10.10.22.158", "initiator_port": 53558, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 25091, "last_frame": 25091, "first_seen_epoch": "1634914943.550852", "last_seen_epoch": "1634914943.550852", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-fb8ca2e58f2ef085ad0fc0ba", "transport": "udp", "stream": 498, "initiator_ip": "10.10.22.158", "initiator_port": 56784, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25092, "last_frame": 25093, "first_seen_epoch": "1634914943.551261", "last_seen_epoch": "1634914943.552065", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-a067e627950e27be49902ac3", "transport": "tcp", "stream": 739, "initiator_ip": "10.10.22.156", "initiator_port": 49856, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 25918, "last_frame": 29213, "first_seen_epoch": "1634914945.497327", "last_seen_epoch": "1634915020.842726", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c1edde9a9bc1e58e381d3b29", "transport": "tcp", "stream": 740, "initiator_ip": "10.10.22.158", "initiator_port": 49822, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 25919, "last_frame": 25969, "first_seen_epoch": "1634914945.979312", "last_seen_epoch": "1634914956.727424", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-3e3e894e37fc5da0fed920ae", "transport": "udp", "stream": 499, "initiator_ip": "10.10.22.156", "initiator_port": 56589, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25941, "last_frame": 25942, "first_seen_epoch": "1634914947.372907", "last_seen_epoch": "1634914947.373433", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-c2f39d579bbc00c263409493", "transport": "udp", "stream": 500, "initiator_ip": "10.10.22.156", "initiator_port": 52000, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25943, "last_frame": 25944, "first_seen_epoch": "1634914947.374201", "last_seen_epoch": "1634914947.374424", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-5bf61a1bcc31575e103e2e1c", "transport": "udp", "stream": 501, "initiator_ip": "10.10.22.158", "initiator_port": 49686, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25950, "last_frame": 25951, "first_seen_epoch": "1634914948.901586", "last_seen_epoch": "1634914948.901928", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-c8281550ff0339217e6fd278", "transport": "udp", "stream": 502, "initiator_ip": "10.10.22.158", "initiator_port": 49267, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25952, "last_frame": 25953, "first_seen_epoch": "1634914948.90247", "last_seen_epoch": "1634914948.90274", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-d67a1a8865b2f9456321a8aa", "transport": "udp", "stream": 503, "initiator_ip": "10.10.22.156", "initiator_port": 58594, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 25955, "last_frame": 25957, "first_seen_epoch": "1634914950.030901", "last_seen_epoch": "1634914950.088184", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-720505937ff2ee09d0b01dcd", "transport": "tcp", "stream": 741, "initiator_ip": "10.10.22.156", "initiator_port": 49857, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 25974, "last_frame": 29229, "first_seen_epoch": "1634914961.531934", "last_seen_epoch": "1634915036.913916", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-fcf937dceb0f5b6520becf90", "transport": "tcp", "stream": 742, "initiator_ip": "10.10.22.156", "initiator_port": 49858, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 26004, "last_frame": 26381, "first_seen_epoch": "1634914982.596595", "last_seen_epoch": "1634914999.150581", "packets": 19, "bytes": 3396, "initiator_bytes": 1507, "responder_bytes": 1889 }, { "flow_id": "flow-88a3ae266d8f92317a144c67", "transport": "tcp", "stream": 743, "initiator_ip": "10.10.22.156", "initiator_port": 49859, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 26021, "last_frame": 26370, "first_seen_epoch": "1634914984.791977", "last_seen_epoch": "1634914998.280104", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-049da96f26934388e44f3c67", "transport": "tcp", "stream": 744, "initiator_ip": "10.10.22.156", "initiator_port": 49860, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 26028, "last_frame": 26371, "first_seen_epoch": "1634914984.79382", "last_seen_epoch": "1634914998.280223", "packets": 13, "bytes": 2038, "initiator_bytes": 886, "responder_bytes": 1152 }, { "flow_id": "flow-c5962e12820613436e997d68", "transport": "tcp", "stream": 745, "initiator_ip": "10.10.22.158", "initiator_port": 49823, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 26047, "last_frame": 26396, "first_seen_epoch": "1634914985.972772", "last_seen_epoch": "1634915000.227151", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-3f2b2f0228cb2dabc7901bc3", "transport": "tcp", "stream": 746, "initiator_ip": "10.10.22.158", "initiator_port": 49824, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 26054, "last_frame": 29212, "first_seen_epoch": "1634914985.974503", "last_seen_epoch": "1634915020.228452", "packets": 25, "bytes": 6783, "initiator_bytes": 4254, "responder_bytes": 2529 }, { "flow_id": "flow-b439436712e54d8728d9457c", "transport": "tcp", "stream": 747, "initiator_ip": "10.10.22.158", "initiator_port": 49825, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 26073, "last_frame": 26179, "first_seen_epoch": "1634914985.987035", "last_seen_epoch": "1634914986.759215", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-d62b6ec5e82d18bf7edd10df", "transport": "tcp", "stream": 748, "initiator_ip": "10.10.22.158", "initiator_port": 49826, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 26080, "last_frame": 26180, "first_seen_epoch": "1634914985.993713", "last_seen_epoch": "1634914986.759289", "packets": 24, "bytes": 6913, "initiator_bytes": 4330, "responder_bytes": 2583 }, { "flow_id": "flow-6c0f8e20e00490ea45aeb969", "transport": "udp", "stream": 504, "initiator_ip": "10.10.22.158", "initiator_port": 49269, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 26107, "last_frame": 26108, "first_seen_epoch": "1634914986.005923", "last_seen_epoch": "1634914986.006176", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-344f747ec76da89e655065bb", "transport": "tcp", "stream": 749, "initiator_ip": "10.10.22.158", "initiator_port": 49827, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 26113, "last_frame": 26149, "first_seen_epoch": "1634914986.116617", "last_seen_epoch": "1634914986.129687", "packets": 21, "bytes": 7448, "initiator_bytes": 3431, "responder_bytes": 4017 }, { "flow_id": "flow-f46088c546358808ab095309", "transport": "tcp", "stream": 750, "initiator_ip": "10.10.22.158", "initiator_port": 49828, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 26130, "last_frame": 26145, "first_seen_epoch": "1634914986.124647", "last_seen_epoch": "1634914986.129166", "packets": 16, "bytes": 6758, "initiator_bytes": 2779, "responder_bytes": 3979 }, { "flow_id": "flow-47de800cca531b1f14e52329", "transport": "udp", "stream": 505, "initiator_ip": "10.10.22.158", "initiator_port": 50671, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 26150, "last_frame": 26151, "first_seen_epoch": "1634914986.188846", "last_seen_epoch": "1634914986.243518", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-ef4e3dbc00470863828f270e", "transport": "tcp", "stream": 751, "initiator_ip": "10.10.22.158", "initiator_port": 49829, "responder_ip": "40.126.29.11", "responder_port": 443, "first_frame": 26152, "last_frame": 26181, "first_seen_epoch": "1634914986.245594", "last_seen_epoch": "1634914986.759797", "packets": 20, "bytes": 6832, "initiator_bytes": 1566, "responder_bytes": 5266 }, { "flow_id": "flow-fb8cdcf4cd3857d3001f4b43", "transport": "udp", "stream": 506, "initiator_ip": "10.10.22.22", "initiator_port": 137, "responder_ip": "10.10.22.156", "responder_port": 137, "first_frame": 26186, "last_frame": 26186, "first_seen_epoch": "1634914989.747212", "last_seen_epoch": "1634914989.747212", "packets": 1, "bytes": 104, "initiator_bytes": 104, "responder_bytes": 0 }, { "flow_id": "flow-64db3128f600865f8e1fa794", "transport": "udp", "stream": 507, "initiator_ip": "10.10.22.156", "initiator_port": 138, "responder_ip": "10.10.22.22", "responder_port": 138, "first_frame": 26187, "last_frame": 32243, "first_seen_epoch": "1634914989.747425", "last_seen_epoch": "1634915268.396288", "packets": 6, "bytes": 1296, "initiator_bytes": 1296, "responder_bytes": 0 }, { "flow_id": "flow-b754882c31964b32a3f48589", "transport": "udp", "stream": 508, "initiator_ip": "10.10.22.156", "initiator_port": 58595, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 26197, "last_frame": 26198, "first_seen_epoch": "1634914995.224941", "last_seen_epoch": "1634914995.225313", "packets": 2, "bytes": 210, "initiator_bytes": 84, "responder_bytes": 126 }, { "flow_id": "flow-29ddc0c34ba9f1f7e83130a7", "transport": "udp", "stream": 509, "initiator_ip": "10.10.22.156", "initiator_port": 58596, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 26199, "last_frame": 26200, "first_seen_epoch": "1634914995.227977", "last_seen_epoch": "1634914995.228221", "packets": 2, "bytes": 287, "initiator_bytes": 106, "responder_bytes": 181 }, { "flow_id": "flow-f75b242354400fe56caef305", "transport": "udp", "stream": 510, "initiator_ip": "10.10.22.156", "initiator_port": 58597, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 26201, "last_frame": 26202, "first_seen_epoch": "1634914995.228528", "last_seen_epoch": "1634914995.292294", "packets": 2, "bytes": 257, "initiator_bytes": 91, "responder_bytes": 166 }, { "flow_id": "flow-8b08e5a6bf0a635093fc3ada", "transport": "tcp", "stream": 752, "initiator_ip": "10.10.22.156", "initiator_port": 49861, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 26203, "last_frame": 29054, "first_seen_epoch": "1634914997.332276", "last_seen_epoch": "1634915006.131254", "packets": 167, "bytes": 116369, "initiator_bytes": 110492, "responder_bytes": 5877 }, { "flow_id": "flow-8d03832899af02004a64cb4c", "transport": "tcp", "stream": 753, "initiator_ip": "10.10.22.156", "initiator_port": 49862, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 26378, "last_frame": 29070, "first_seen_epoch": "1634914999.036387", "last_seen_epoch": "1634915008.879908", "packets": 2653, "bytes": 2125961, "initiator_bytes": 66107, "responder_bytes": 2059854 }, { "flow_id": "flow-00915e97198661fda43106d3", "transport": "udp", "stream": 511, "initiator_ip": "10.10.22.156", "initiator_port": 51650, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29041, "last_frame": 29042, "first_seen_epoch": "1634915003.536401", "last_seen_epoch": "1634915003.536696", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-3e35a48dcd0d536281d72310", "transport": "udp", "stream": 512, "initiator_ip": "10.10.22.156", "initiator_port": 51651, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29043, "last_frame": 29044, "first_seen_epoch": "1634915003.537279", "last_seen_epoch": "1634915003.537529", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-0ca541882809ca3decc84935", "transport": "udp", "stream": 513, "initiator_ip": "10.10.22.156", "initiator_port": 56611, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29045, "last_frame": 29046, "first_seen_epoch": "1634915005.889025", "last_seen_epoch": "1634915005.889413", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-eaed8418ca562de788a1e943", "transport": "udp", "stream": 514, "initiator_ip": "10.10.22.156", "initiator_port": 56612, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29047, "last_frame": 29048, "first_seen_epoch": "1634915005.890598", "last_seen_epoch": "1634915005.890937", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-22bccd15d48ec208a080b81f", "transport": "tcp", "stream": 754, "initiator_ip": "10.10.22.156", "initiator_port": 49863, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 29051, "last_frame": 29071, "first_seen_epoch": "1634915006.01229", "last_seen_epoch": "1634915008.880938", "packets": 16, "bytes": 3126, "initiator_bytes": 1500, "responder_bytes": 1626 }, { "flow_id": "flow-1aad6ea74a12d0f9d4f3f72b", "transport": "tcp", "stream": 755, "initiator_ip": "10.10.22.157", "initiator_port": 49982, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 29074, "last_frame": 29219, "first_seen_epoch": "1634915012.95899", "last_seen_epoch": "1634915027.078268", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-07818f663b264171d41a4d40", "transport": "tcp", "stream": 756, "initiator_ip": "10.10.22.157", "initiator_port": 49983, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 29081, "last_frame": 29373, "first_seen_epoch": "1634915012.963898", "last_seen_epoch": "1634915047.078524", "packets": 25, "bytes": 6743, "initiator_bytes": 4214, "responder_bytes": 2529 }, { "flow_id": "flow-01d455f0248f2d3d261d1bbf", "transport": "tcp", "stream": 757, "initiator_ip": "10.10.22.157", "initiator_port": 49984, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 29092, "last_frame": 29202, "first_seen_epoch": "1634915012.971064", "last_seen_epoch": "1634915013.7041", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-85e1e068f36d590c822dd13d", "transport": "tcp", "stream": 758, "initiator_ip": "10.10.22.157", "initiator_port": 49985, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 29109, "last_frame": 29203, "first_seen_epoch": "1634915012.987128", "last_seen_epoch": "1634915013.704214", "packets": 24, "bytes": 6873, "initiator_bytes": 4290, "responder_bytes": 2583 }, { "flow_id": "flow-9bcfb5b642f3aa47c163b949", "transport": "udp", "stream": 515, "initiator_ip": "10.10.22.157", "initiator_port": 55446, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29132, "last_frame": 29133, "first_seen_epoch": "1634915013.001069", "last_seen_epoch": "1634915013.001366", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-233eda2084731cca96829ea1", "transport": "tcp", "stream": 759, "initiator_ip": "10.10.22.157", "initiator_port": 49986, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29140, "last_frame": 29178, "first_seen_epoch": "1634915013.107972", "last_seen_epoch": "1634915013.119773", "packets": 21, "bytes": 7408, "initiator_bytes": 3391, "responder_bytes": 4017 }, { "flow_id": "flow-862306554b83f1884d041124", "transport": "tcp", "stream": 760, "initiator_ip": "10.10.22.157", "initiator_port": 49987, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29157, "last_frame": 29174, "first_seen_epoch": "1634915013.115054", "last_seen_epoch": "1634915013.11928", "packets": 18, "bytes": 6826, "initiator_bytes": 2793, "responder_bytes": 4033 }, { "flow_id": "flow-5f4aae2379cf0b0ee0fa53a0", "transport": "udp", "stream": 516, "initiator_ip": "10.10.22.157", "initiator_port": 59813, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29179, "last_frame": 29180, "first_seen_epoch": "1634915013.197718", "last_seen_epoch": "1634915013.198041", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-b1cd82cfbf7af7f721330723", "transport": "tcp", "stream": 761, "initiator_ip": "10.10.22.157", "initiator_port": 49988, "responder_ip": "40.126.29.15", "responder_port": 443, "first_frame": 29181, "last_frame": 29204, "first_seen_epoch": "1634915013.198808", "last_seen_epoch": "1634915013.704571", "packets": 20, "bytes": 6832, "initiator_bytes": 1566, "responder_bytes": 5266 }, { "flow_id": "flow-a7f375637cabc12516b9b727", "transport": "tcp", "stream": 762, "initiator_ip": "10.10.22.156", "initiator_port": 49864, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 29238, "last_frame": 29381, "first_seen_epoch": "1634915040.429808", "last_seen_epoch": "1634915054.78258", "packets": 13, "bytes": 1518, "initiator_bytes": 730, "responder_bytes": 788 }, { "flow_id": "flow-7f9a037c357468a8ce9c7ce3", "transport": "tcp", "stream": 763, "initiator_ip": "10.10.22.156", "initiator_port": 49865, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 29245, "last_frame": 29400, "first_seen_epoch": "1634915040.431726", "last_seen_epoch": "1634915074.783227", "packets": 25, "bytes": 6753, "initiator_bytes": 4224, "responder_bytes": 2529 }, { "flow_id": "flow-2641912953e36f0cb6093997", "transport": "tcp", "stream": 764, "initiator_ip": "10.10.22.156", "initiator_port": 49866, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 29264, "last_frame": 29361, "first_seen_epoch": "1634915040.441231", "last_seen_epoch": "1634915041.333274", "packets": 11, "bytes": 1566, "initiator_bytes": 886, "responder_bytes": 680 }, { "flow_id": "flow-900745861c14b884f7ba12a8", "transport": "tcp", "stream": 765, "initiator_ip": "10.10.22.156", "initiator_port": 49867, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 29271, "last_frame": 29362, "first_seen_epoch": "1634915040.445945", "last_seen_epoch": "1634915041.333386", "packets": 24, "bytes": 6883, "initiator_bytes": 4300, "responder_bytes": 2583 }, { "flow_id": "flow-baa22fa9747ec36bab1dcca4", "transport": "udp", "stream": 517, "initiator_ip": "10.10.22.156", "initiator_port": 56614, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29296, "last_frame": 29297, "first_seen_epoch": "1634915040.457636", "last_seen_epoch": "1634915040.457913", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-77e308faeb66557be8801ffc", "transport": "tcp", "stream": 766, "initiator_ip": "10.10.22.156", "initiator_port": 49868, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29303, "last_frame": 29341, "first_seen_epoch": "1634915040.56122", "last_seen_epoch": "1634915040.575695", "packets": 21, "bytes": 7418, "initiator_bytes": 3401, "responder_bytes": 4017 }, { "flow_id": "flow-0f796314d90eb018bee1e818", "transport": "tcp", "stream": 767, "initiator_ip": "10.10.22.156", "initiator_port": 49869, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29320, "last_frame": 29337, "first_seen_epoch": "1634915040.570436", "last_seen_epoch": "1634915040.575263", "packets": 18, "bytes": 6836, "initiator_bytes": 2803, "responder_bytes": 4033 }, { "flow_id": "flow-f196c0472b9e6ff19413fd59", "transport": "udp", "stream": 518, "initiator_ip": "10.10.22.156", "initiator_port": 60620, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29342, "last_frame": 29343, "first_seen_epoch": "1634915040.620279", "last_seen_epoch": "1634915040.620571", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-4c7c1bba85f13d6d48c4d19e", "transport": "tcp", "stream": 768, "initiator_ip": "10.10.22.156", "initiator_port": 49870, "responder_ip": "40.126.29.12", "responder_port": 443, "first_frame": 29344, "last_frame": 29363, "first_seen_epoch": "1634915040.621759", "last_seen_epoch": "1634915041.333787", "packets": 18, "bytes": 6724, "initiator_bytes": 1458, "responder_bytes": 5266 }, { "flow_id": "flow-5793489458042f4b925a89db", "transport": "tcp", "stream": 769, "initiator_ip": "10.10.22.158", "initiator_port": 49830, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 29430, "last_frame": 30785, "first_seen_epoch": "1634915117.811342", "last_seen_epoch": "1634915253.797744", "packets": 21, "bytes": 5179, "initiator_bytes": 1739, "responder_bytes": 3440 }, { "flow_id": "flow-10109bf48e6bcb93de57d538", "transport": "tcp", "stream": 770, "initiator_ip": "10.10.22.156", "initiator_port": 49871, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 29456, "last_frame": 30111, "first_seen_epoch": "1634915137.325256", "last_seen_epoch": "1634915201.565925", "packets": 487, "bytes": 405189, "initiator_bytes": 12165, "responder_bytes": 393024 }, { "flow_id": "flow-76acd8b099a3698daf28177d", "transport": "tcp", "stream": 771, "initiator_ip": "10.10.22.156", "initiator_port": 49872, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 29941, "last_frame": 30132, "first_seen_epoch": "1634915146.420681", "last_seen_epoch": "1634915202.240623", "packets": 22, "bytes": 3482, "initiator_bytes": 1663, "responder_bytes": 1819 }, { "flow_id": "flow-94a505b56f35587367c119a2", "transport": "udp", "stream": 519, "initiator_ip": "10.10.22.156", "initiator_port": 59039, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29942, "last_frame": 29943, "first_seen_epoch": "1634915146.452494", "last_seen_epoch": "1634915146.452914", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-a8ccc7cd031e970c62195228", "transport": "udp", "stream": 520, "initiator_ip": "10.10.22.156", "initiator_port": 59040, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29944, "last_frame": 29945, "first_seen_epoch": "1634915146.453611", "last_seen_epoch": "1634915146.453931", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-eb44447aafd488195a6eebba", "transport": "udp", "stream": 521, "initiator_ip": "10.10.22.156", "initiator_port": 52270, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 29950, "last_frame": 29951, "first_seen_epoch": "1634915146.580837", "last_seen_epoch": "1634915146.58118", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-f18e027fad9fabeef177451e", "transport": "udp", "stream": 522, "initiator_ip": "10.10.22.156", "initiator_port": 52271, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 29952, "last_frame": 29953, "first_seen_epoch": "1634915146.581756", "last_seen_epoch": "1634915146.582047", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-ac8b8afe33868c229dfb185a", "transport": "udp", "stream": 523, "initiator_ip": "10.10.22.157", "initiator_port": 63321, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 29982, "last_frame": 29984, "first_seen_epoch": "1634915169.223385", "last_seen_epoch": "1634915169.318743", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4d94aa92377f92d492ecc4d1", "transport": "tcp", "stream": 772, "initiator_ip": "10.10.22.157", "initiator_port": 49989, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 29985, "last_frame": 29990, "first_seen_epoch": "1634915169.320377", "last_seen_epoch": "1634915169.615885", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2c3b7bed339159c974dcd69b", "transport": "tcp", "stream": 773, "initiator_ip": "10.10.22.157", "initiator_port": 49990, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 29991, "last_frame": 29996, "first_seen_epoch": "1634915173.628244", "last_seen_epoch": "1634915173.947026", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2bdf731440de8e960318564a", "transport": "tcp", "stream": 774, "initiator_ip": "10.10.22.157", "initiator_port": 49991, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30001, "last_frame": 30008, "first_seen_epoch": "1634915177.956197", "last_seen_epoch": "1634915178.270356", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-a647e0050c5c91a58cf97d8c", "transport": "tcp", "stream": 775, "initiator_ip": "10.10.22.157", "initiator_port": 49992, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30012, "last_frame": 30017, "first_seen_epoch": "1634915182.285014", "last_seen_epoch": "1634915182.60427", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-10f74f33e6a4805409fc9303", "transport": "udp", "stream": 524, "initiator_ip": "10.10.22.157", "initiator_port": 51503, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30020, "last_frame": 30022, "first_seen_epoch": "1634915186.612498", "last_seen_epoch": "1634915186.702691", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0e303b86ac74703fe2116177", "transport": "tcp", "stream": 776, "initiator_ip": "10.10.22.157", "initiator_port": 49993, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30023, "last_frame": 30028, "first_seen_epoch": "1634915186.703605", "last_seen_epoch": "1634915187.031885", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0f8d4bec0d88e8f278974ad7", "transport": "udp", "stream": 525, "initiator_ip": "10.10.22.157", "initiator_port": 63592, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30031, "last_frame": 30032, "first_seen_epoch": "1634915191.035484", "last_seen_epoch": "1634915191.100763", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f758b5e659cd59349a33340a", "transport": "tcp", "stream": 777, "initiator_ip": "10.10.22.157", "initiator_port": 49994, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30033, "last_frame": 30040, "first_seen_epoch": "1634915191.101388", "last_seen_epoch": "1634915191.384477", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-fb8a0233a7002257e33df3ab", "transport": "udp", "stream": 526, "initiator_ip": "10.10.22.157", "initiator_port": 51484, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30043, "last_frame": 30044, "first_seen_epoch": "1634915195.395287", "last_seen_epoch": "1634915195.492299", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-eb7a201ab6d1bb5930c21270", "transport": "tcp", "stream": 778, "initiator_ip": "10.10.22.157", "initiator_port": 49995, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30045, "last_frame": 30050, "first_seen_epoch": "1634915195.493087", "last_seen_epoch": "1634915195.852628", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9f65f8e9b4ecd210aa7f2e9b", "transport": "udp", "stream": 527, "initiator_ip": "10.10.22.156", "initiator_port": 59619, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 30051, "last_frame": 30052, "first_seen_epoch": "1634915196.896412", "last_seen_epoch": "1634915196.896782", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-fe760520b9f346a3be39fbbb", "transport": "udp", "stream": 528, "initiator_ip": "10.10.22.156", "initiator_port": 59620, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 30053, "last_frame": 30054, "first_seen_epoch": "1634915196.897629", "last_seen_epoch": "1634915196.897906", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-c16fda862ce09a2aa13665ef", "transport": "udp", "stream": 529, "initiator_ip": "10.10.22.156", "initiator_port": 53493, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 30055, "last_frame": 30057, "first_seen_epoch": "1634915197.440065", "last_seen_epoch": "1634915197.555154", "packets": 3, "bytes": 335, "initiator_bytes": 180, "responder_bytes": 155 }, { "flow_id": "flow-7eddb1a9708c11fc0087f746", "transport": "tcp", "stream": 779, "initiator_ip": "10.10.22.156", "initiator_port": 49873, "responder_ip": "52.109.76.31", "responder_port": 443, "first_frame": 30058, "last_frame": 30677, "first_seen_epoch": "1634915197.563372", "last_seen_epoch": "1634915211.297501", "packets": 20, "bytes": 8321, "initiator_bytes": 1437, "responder_bytes": 6884 }, { "flow_id": "flow-4037874e303853c240cf8580", "transport": "udp", "stream": 530, "initiator_ip": "10.10.22.156", "initiator_port": 65183, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 30059, "last_frame": 30061, "first_seen_epoch": "1634915197.637794", "last_seen_epoch": "1634915197.737111", "packets": 3, "bytes": 328, "initiator_bytes": 166, "responder_bytes": 162 }, { "flow_id": "flow-b33e5bec1eab188eed040b15", "transport": "tcp", "stream": 780, "initiator_ip": "10.10.22.156", "initiator_port": 49874, "responder_ip": "52.109.2.1", "responder_port": 443, "first_frame": 30062, "last_frame": 30678, "first_seen_epoch": "1634915197.738393", "last_seen_epoch": "1634915211.297764", "packets": 21, "bytes": 8910, "initiator_bytes": 1123, "responder_bytes": 7787 }, { "flow_id": "flow-910d5786614565527423b16d", "transport": "tcp", "stream": 781, "initiator_ip": "10.10.22.157", "initiator_port": 49996, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30100, "last_frame": 30105, "first_seen_epoch": "1634915199.864018", "last_seen_epoch": "1634915200.169297", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-73f1a8881c78bdfb954a1602", "transport": "tcp", "stream": 782, "initiator_ip": "10.10.22.156", "initiator_port": 49875, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 30112, "last_frame": 30765, "first_seen_epoch": "1634915201.566342", "last_seen_epoch": "1634915247.303465", "packets": 21, "bytes": 4307, "initiator_bytes": 1842, "responder_bytes": 2465 }, { "flow_id": "flow-462facf243393814cd18f577", "transport": "tcp", "stream": 783, "initiator_ip": "10.10.22.156", "initiator_port": 49876, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 30133, "last_frame": 30761, "first_seen_epoch": "1634915202.241262", "last_seen_epoch": "1634915247.302825", "packets": 21, "bytes": 3429, "initiator_bytes": 1664, "responder_bytes": 1765 }, { "flow_id": "flow-5bda47f680218530637a41c3", "transport": "tcp", "stream": 784, "initiator_ip": "10.10.22.157", "initiator_port": 49997, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30148, "last_frame": 30163, "first_seen_epoch": "1634915204.175616", "last_seen_epoch": "1634915204.537812", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9cbab05ac0bcde7322f268f5", "transport": "udp", "stream": 531, "initiator_ip": "10.10.22.156", "initiator_port": 60460, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 30149, "last_frame": 30151, "first_seen_epoch": "1634915204.264412", "last_seen_epoch": "1634915204.33034", "packets": 3, "bytes": 366, "initiator_bytes": 162, "responder_bytes": 204 }, { "flow_id": "flow-ad7ab79c88cc64366e8f0634", "transport": "tcp", "stream": 785, "initiator_ip": "10.10.22.156", "initiator_port": 49877, "responder_ip": "52.96.55.242", "responder_port": 443, "first_frame": 30156, "last_frame": 30680, "first_seen_epoch": "1634915204.388174", "last_seen_epoch": "1634915211.298249", "packets": 46, "bytes": 19855, "initiator_bytes": 8683, "responder_bytes": 11172 }, { "flow_id": "flow-0343a4211231c04efb7b2533", "transport": "udp", "stream": 532, "initiator_ip": "10.10.22.156", "initiator_port": 54958, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 30180, "last_frame": 30182, "first_seen_epoch": "1634915205.196753", "last_seen_epoch": "1634915205.48798", "packets": 3, "bytes": 528, "initiator_bytes": 148, "responder_bytes": 380 }, { "flow_id": "flow-de1c9a9f82ee6cc7aa47b87e", "transport": "tcp", "stream": 786, "initiator_ip": "10.10.22.156", "initiator_port": 49878, "responder_ip": "20.190.157.11", "responder_port": 443, "first_frame": 30183, "last_frame": 30233, "first_seen_epoch": "1634915205.492759", "last_seen_epoch": "1634915206.078331", "packets": 51, "bytes": 33772, "initiator_bytes": 8380, "responder_bytes": 25392 }, { "flow_id": "flow-f278cd0119514edbfa096829", "transport": "tcp", "stream": 787, "initiator_ip": "10.10.22.156", "initiator_port": 49879, "responder_ip": "37.252.0.102", "responder_port": 443, "first_frame": 30260, "last_frame": 30679, "first_seen_epoch": "1634915207.01529", "last_seen_epoch": "1634915211.298095", "packets": 20, "bytes": 5547, "initiator_bytes": 3419, "responder_bytes": 2128 }, { "flow_id": "flow-13368e60585acd5331fbe414", "transport": "tcp", "stream": 788, "initiator_ip": "10.10.22.157", "initiator_port": 49998, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30279, "last_frame": 30285, "first_seen_epoch": "1634915208.550399", "last_seen_epoch": "1634915208.854323", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b50b51f380a8e72d28c687e1", "transport": "tcp", "stream": 789, "initiator_ip": "10.10.22.156", "initiator_port": 49880, "responder_ip": "37.252.0.102", "responder_port": 443, "first_frame": 30284, "last_frame": 30676, "first_seen_epoch": "1634915208.789271", "last_seen_epoch": "1634915211.297131", "packets": 387, "bytes": 275312, "initiator_bytes": 264284, "responder_bytes": 11028 }, { "flow_id": "flow-98960bbdf8f2a9e388909fe8", "transport": "udp", "stream": 533, "initiator_ip": "10.10.22.157", "initiator_port": 64200, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30682, "last_frame": 30683, "first_seen_epoch": "1634915212.86277", "last_seen_epoch": "1634915212.914226", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3ecadcac5ee1519f6dcd5392", "transport": "tcp", "stream": 790, "initiator_ip": "10.10.22.157", "initiator_port": 49999, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30684, "last_frame": 30689, "first_seen_epoch": "1634915212.91464", "last_seen_epoch": "1634915213.217995", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-813b0070019e296bcf602bba", "transport": "udp", "stream": 534, "initiator_ip": "10.10.22.157", "initiator_port": 65033, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30694, "last_frame": 30695, "first_seen_epoch": "1634915217.224262", "last_seen_epoch": "1634915217.282715", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ed87ea2bbe86aca55cdd25ed", "transport": "tcp", "stream": 791, "initiator_ip": "10.10.22.157", "initiator_port": 50000, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30696, "last_frame": 30703, "first_seen_epoch": "1634915217.284055", "last_seen_epoch": "1634915217.584261", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-2ae19e216491e7b10a1221af", "transport": "udp", "stream": 535, "initiator_ip": "10.10.22.157", "initiator_port": 51874, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30706, "last_frame": 30707, "first_seen_epoch": "1634915221.59854", "last_seen_epoch": "1634915221.6617", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7541d505566ba48c5f6621ca", "transport": "tcp", "stream": 792, "initiator_ip": "10.10.22.157", "initiator_port": 50001, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30708, "last_frame": 30713, "first_seen_epoch": "1634915221.662517", "last_seen_epoch": "1634915221.944994", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7b7c5539a5c04be8ec383996", "transport": "tcp", "stream": 793, "initiator_ip": "10.10.22.157", "initiator_port": 50002, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30714, "last_frame": 30723, "first_seen_epoch": "1634915225.957314", "last_seen_epoch": "1634915226.566353", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-3444f07e0ed4883c0f758f67", "transport": "tcp", "stream": 794, "initiator_ip": "10.10.22.157", "initiator_port": 50003, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30724, "last_frame": 30729, "first_seen_epoch": "1634915230.585843", "last_seen_epoch": "1634915230.907223", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-db2fd0ed38b846b360bda5b5", "transport": "tcp", "stream": 795, "initiator_ip": "10.10.22.157", "initiator_port": 50004, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30732, "last_frame": 30737, "first_seen_epoch": "1634915234.911358", "last_seen_epoch": "1634915235.221896", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e61bb02ff390a4ac03169612", "transport": "udp", "stream": 536, "initiator_ip": "10.10.22.157", "initiator_port": 53519, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30740, "last_frame": 30741, "first_seen_epoch": "1634915239.239857", "last_seen_epoch": "1634915239.335827", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-bd56875925197275e76ad13f", "transport": "tcp", "stream": 796, "initiator_ip": "10.10.22.157", "initiator_port": 50005, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30742, "last_frame": 30749, "first_seen_epoch": "1634915239.337211", "last_seen_epoch": "1634915239.689348", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-09ac5641e4896543d5102bd8", "transport": "udp", "stream": 537, "initiator_ip": "10.10.22.157", "initiator_port": 52562, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30750, "last_frame": 30751, "first_seen_epoch": "1634915243.708954", "last_seen_epoch": "1634915243.814701", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8a938af20b2df2c6e1629b2f", "transport": "tcp", "stream": 797, "initiator_ip": "10.10.22.157", "initiator_port": 50006, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30752, "last_frame": 30757, "first_seen_epoch": "1634915243.816022", "last_seen_epoch": "1634915244.151545", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d15c538b7869ce0a65dc2561", "transport": "udp", "stream": 538, "initiator_ip": "10.10.22.157", "initiator_port": 62082, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 30766, "last_frame": 30767, "first_seen_epoch": "1634915248.162523", "last_seen_epoch": "1634915248.220775", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-09e5e3ae30643c512b830bce", "transport": "tcp", "stream": 798, "initiator_ip": "10.10.22.157", "initiator_port": 50007, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30768, "last_frame": 30773, "first_seen_epoch": "1634915248.222102", "last_seen_epoch": "1634915248.511566", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-63414573d4634a1360dcd76a", "transport": "tcp", "stream": 799, "initiator_ip": "10.10.22.157", "initiator_port": 50008, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 30776, "last_frame": 30781, "first_seen_epoch": "1634915252.53737", "last_seen_epoch": "1634915252.8289", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-50cea1c4546238fdee092547", "transport": "tcp", "stream": 800, "initiator_ip": "10.10.22.158", "initiator_port": 49831, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 30786, "last_frame": 43208, "first_seen_epoch": "1634915254.368602", "last_seen_epoch": "1634915321.291914", "packets": 22, "bytes": 9127, "initiator_bytes": 2100, "responder_bytes": 7027 }, { "flow_id": "flow-7d79db78322fbb3964c4e2a7", "transport": "tcp", "stream": 801, "initiator_ip": "10.10.22.158", "initiator_port": 49832, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 30807, "last_frame": 43205, "first_seen_epoch": "1634915254.65812", "last_seen_epoch": "1634915319.870029", "packets": 638, "bytes": 566259, "initiator_bytes": 14747, "responder_bytes": 551512 }, { "flow_id": "flow-358c61387282c74ed265416e", "transport": "tcp", "stream": 802, "initiator_ip": "10.10.22.157", "initiator_port": 50009, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 31185, "last_frame": 31426, "first_seen_epoch": "1634915256.832816", "last_seen_epoch": "1634915257.154431", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4016f5a745d54cccfe98682e", "transport": "tcp", "stream": 803, "initiator_ip": "10.10.22.157", "initiator_port": 50010, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 31450, "last_frame": 31455, "first_seen_epoch": "1634915261.162035", "last_seen_epoch": "1634915261.469804", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3eb800b2b8daf04ce22cb32e", "transport": "tcp", "stream": 804, "initiator_ip": "10.10.22.156", "initiator_port": 49881, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 31456, "last_frame": 43231, "first_seen_epoch": "1634915261.72597", "last_seen_epoch": "1634915325.977608", "packets": 241, "bytes": 204341, "initiator_bytes": 6332, "responder_bytes": 198009 }, { "flow_id": "flow-b32ca7001db037855b54c55d", "transport": "tcp", "stream": 805, "initiator_ip": "10.10.22.156", "initiator_port": 49882, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 31692, "last_frame": 44265, "first_seen_epoch": "1634915263.433817", "last_seen_epoch": "1634915329.121699", "packets": 21, "bytes": 3429, "initiator_bytes": 1664, "responder_bytes": 1765 }, { "flow_id": "flow-802608bc4ea4516e14204f96", "transport": "udp", "stream": 539, "initiator_ip": "10.10.22.156", "initiator_port": 59993, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 31693, "last_frame": 31694, "first_seen_epoch": "1634915263.463718", "last_seen_epoch": "1634915263.464085", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-e05c79e7a9074d3d7aafd237", "transport": "udp", "stream": 540, "initiator_ip": "10.10.22.156", "initiator_port": 59994, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 31695, "last_frame": 31696, "first_seen_epoch": "1634915263.464807", "last_seen_epoch": "1634915263.465072", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-51a5b7c7f10b5e002ab5e5dc", "transport": "udp", "stream": 541, "initiator_ip": "10.10.22.156", "initiator_port": 56170, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 31701, "last_frame": 31702, "first_seen_epoch": "1634915263.584728", "last_seen_epoch": "1634915263.585025", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-1751734472c1f6395c69c221", "transport": "udp", "stream": 542, "initiator_ip": "10.10.22.156", "initiator_port": 56171, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 31703, "last_frame": 31704, "first_seen_epoch": "1634915263.585612", "last_seen_epoch": "1634915263.585893", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-55691baa15a97aa9bb7643a5", "transport": "udp", "stream": 543, "initiator_ip": "10.10.22.157", "initiator_port": 63995, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 31715, "last_frame": 31716, "first_seen_epoch": "1634915265.474483", "last_seen_epoch": "1634915265.561801", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9530ef6f014fbdb3565a8b9b", "transport": "tcp", "stream": 806, "initiator_ip": "10.10.22.157", "initiator_port": 50011, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 31717, "last_frame": 31722, "first_seen_epoch": "1634915265.563008", "last_seen_epoch": "1634915265.857964", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7f9264997732902fc77ee5d6", "transport": "udp", "stream": 544, "initiator_ip": "10.10.22.156", "initiator_port": 56172, "responder_ip": "239.255.255.250", "responder_port": 1900, "first_frame": 31723, "last_frame": 34463, "first_seen_epoch": "1634915266.355183", "last_seen_epoch": "1634915272.380086", "packets": 4, "bytes": 671, "initiator_bytes": 671, "responder_bytes": 0 }, { "flow_id": "flow-6ac7b2b281be8c69440b3f85", "transport": "udp", "stream": 545, "initiator_ip": "10.10.22.156", "initiator_port": 50762, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 31724, "last_frame": 31728, "first_seen_epoch": "1634915266.373501", "last_seen_epoch": "1634915266.455724", "packets": 3, "bytes": 303, "initiator_bytes": 174, "responder_bytes": 129 }, { "flow_id": "flow-9ab87fe3ce4f5a4fb5e62c55", "transport": "udp", "stream": 546, "initiator_ip": "10.10.22.156", "initiator_port": 60196, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 31729, "last_frame": 31731, "first_seen_epoch": "1634915266.480525", "last_seen_epoch": "1634915266.69349", "packets": 3, "bytes": 321, "initiator_bytes": 150, "responder_bytes": 171 }, { "flow_id": "flow-10f78c81e97e13626c37730d", "transport": "tcp", "stream": 807, "initiator_ip": "10.10.22.156", "initiator_port": 49883, "responder_ip": "72.247.207.22", "responder_port": 443, "first_frame": 31732, "last_frame": 45543, "first_seen_epoch": "1634915266.697922", "last_seen_epoch": "1634915376.521602", "packets": 11090, "bytes": 10436524, "initiator_bytes": 217327, "responder_bytes": 10219197 }, { "flow_id": "flow-ce1056de2356f6fc3a6e90b2", "transport": "udp", "stream": 547, "initiator_ip": "10.10.22.157", "initiator_port": 65392, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 33102, "last_frame": 33169, "first_seen_epoch": "1634915269.866616", "last_seen_epoch": "1634915270.122876", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-80641d56d563a3e7c4291578", "transport": "tcp", "stream": 808, "initiator_ip": "10.10.22.157", "initiator_port": 50012, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 33204, "last_frame": 33543, "first_seen_epoch": "1634915270.123737", "last_seen_epoch": "1634915270.83188", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5ab075d3fcc99f6ec592284d", "transport": "udp", "stream": 548, "initiator_ip": "10.10.22.157", "initiator_port": 49397, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 38638, "last_frame": 38841, "first_seen_epoch": "1634915274.849359", "last_seen_epoch": "1634915274.921813", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-18663e635a13363a882d7b22", "transport": "tcp", "stream": 809, "initiator_ip": "10.10.22.157", "initiator_port": 50013, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 38850, "last_frame": 39574, "first_seen_epoch": "1634915274.922777", "last_seen_epoch": "1634915275.238203", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-05ceba1f48296ee9e2842d0b", "transport": "tcp", "stream": 810, "initiator_ip": "10.10.22.156", "initiator_port": 49884, "responder_ip": "23.111.114.52", "responder_port": 65400, "first_frame": 42858, "last_frame": 84540, "first_seen_epoch": "1634915276.907685", "last_seen_epoch": "1634918599.611491", "packets": 9622, "bytes": 1586196, "initiator_bytes": 1149601, "responder_bytes": 436595 }, { "flow_id": "flow-7deda2a1a378184bb2d83064", "transport": "tcp", "stream": 811, "initiator_ip": "10.10.22.157", "initiator_port": 50014, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 42866, "last_frame": 42871, "first_seen_epoch": "1634915279.256417", "last_seen_epoch": "1634915279.569312", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-48d3639a098cc95f510e0633", "transport": "tcp", "stream": 812, "initiator_ip": "10.10.22.157", "initiator_port": 50015, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 42874, "last_frame": 42881, "first_seen_epoch": "1634915283.584888", "last_seen_epoch": "1634915283.91954", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-12fff46599d27c31ac268e63", "transport": "tcp", "stream": 813, "initiator_ip": "10.10.22.157", "initiator_port": 50016, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 42887, "last_frame": 42898, "first_seen_epoch": "1634915287.929435", "last_seen_epoch": "1634915291.347531", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-f01054b936466a84a326c4b1", "transport": "udp", "stream": 549, "initiator_ip": "10.10.22.157", "initiator_port": 57903, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 42907, "last_frame": 42908, "first_seen_epoch": "1634915295.367445", "last_seen_epoch": "1634915295.459335", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-efe1e59f601682326515e524", "transport": "tcp", "stream": 814, "initiator_ip": "10.10.22.157", "initiator_port": 50017, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 42909, "last_frame": 42914, "first_seen_epoch": "1634915295.460176", "last_seen_epoch": "1634915295.754079", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-644101e7f4be7834834968d9", "transport": "udp", "stream": 550, "initiator_ip": "10.10.22.156", "initiator_port": 58019, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 42927, "last_frame": 42929, "first_seen_epoch": "1634915298.359593", "last_seen_epoch": "1634915298.389799", "packets": 3, "bytes": 445, "initiator_bytes": 146, "responder_bytes": 299 }, { "flow_id": "flow-16b6582d19a421e7524b3ced", "transport": "tcp", "stream": 815, "initiator_ip": "10.10.22.156", "initiator_port": 49885, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 42930, "last_frame": 43044, "first_seen_epoch": "1634915298.392832", "last_seen_epoch": "1634915299.794297", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-82dbd00411a4b918d2f6fe21", "transport": "tcp", "stream": 816, "initiator_ip": "10.10.22.156", "initiator_port": 49886, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 42931, "last_frame": 43054, "first_seen_epoch": "1634915298.393551", "last_seen_epoch": "1634915299.795965", "packets": 25, "bytes": 8192, "initiator_bytes": 1151, "responder_bytes": 7041 }, { "flow_id": "flow-c3729e610e3cc98a2af69688", "transport": "tcp", "stream": 817, "initiator_ip": "10.10.22.156", "initiator_port": 49887, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 42932, "last_frame": 43072, "first_seen_epoch": "1634915298.393973", "last_seen_epoch": "1634915299.977103", "packets": 23, "bytes": 8084, "initiator_bytes": 1097, "responder_bytes": 6987 }, { "flow_id": "flow-146fe79d1a266879d3cda1cf", "transport": "udp", "stream": 551, "initiator_ip": "10.10.22.157", "initiator_port": 50868, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 43037, "last_frame": 43057, "first_seen_epoch": "1634915299.757331", "last_seen_epoch": "1634915299.813569", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-53bc5c3b064b57ae39d03f86", "transport": "tcp", "stream": 818, "initiator_ip": "10.10.22.157", "initiator_port": 50018, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43058, "last_frame": 43075, "first_seen_epoch": "1634915299.814827", "last_seen_epoch": "1634915300.107183", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c0be6d9b46d38b01adb9ec6f", "transport": "udp", "stream": 552, "initiator_ip": "10.10.22.156", "initiator_port": 64109, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 43087, "last_frame": 43089, "first_seen_epoch": "1634915301.498808", "last_seen_epoch": "1634915301.536026", "packets": 3, "bytes": 256, "initiator_bytes": 160, "responder_bytes": 96 }, { "flow_id": "flow-7afd2d2e6d8e816068a14d99", "transport": "tcp", "stream": 819, "initiator_ip": "10.10.22.156", "initiator_port": 49888, "responder_ip": "142.250.114.28", "responder_port": 465, "first_frame": 43090, "last_frame": 43112, "first_seen_epoch": "1634915301.537037", "last_seen_epoch": "1634915301.92019", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-e4d3f09eadc31ffa311008cb", "transport": "udp", "stream": 553, "initiator_ip": "10.10.22.156", "initiator_port": 59614, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 43091, "last_frame": 43096, "first_seen_epoch": "1634915301.537594", "last_seen_epoch": "1634915301.574987", "packets": 3, "bytes": 256, "initiator_bytes": 160, "responder_bytes": 96 }, { "flow_id": "flow-72c50fe237a7267c9124d224", "transport": "tcp", "stream": 820, "initiator_ip": "10.10.22.156", "initiator_port": 49889, "responder_ip": "64.29.151.102", "responder_port": 110, "first_frame": 43097, "last_frame": 43120, "first_seen_epoch": "1634915301.575783", "last_seen_epoch": "1634915302.136339", "packets": 9, "bytes": 582, "initiator_bytes": 282, "responder_bytes": 300 }, { "flow_id": "flow-7b862dc5b8f04e7093161979", "transport": "tcp", "stream": 821, "initiator_ip": "10.10.22.156", "initiator_port": 49890, "responder_ip": "142.250.114.28", "responder_port": 587, "first_frame": 43132, "last_frame": 43150, "first_seen_epoch": "1634915302.951793", "last_seen_epoch": "1634915303.374217", "packets": 9, "bytes": 561, "initiator_bytes": 282, "responder_bytes": 279 }, { "flow_id": "flow-94c39b13126c35def8473b82", "transport": "tcp", "stream": 822, "initiator_ip": "10.10.22.156", "initiator_port": 49891, "responder_ip": "64.29.151.102", "responder_port": 143, "first_frame": 43142, "last_frame": 45302, "first_seen_epoch": "1634915303.131902", "last_seen_epoch": "1634915370.54292", "packets": 7, "bytes": 442, "initiator_bytes": 384, "responder_bytes": 58 }, { "flow_id": "flow-f5cf76b2e9a665003755b419", "transport": "udp", "stream": 554, "initiator_ip": "10.10.22.157", "initiator_port": 60311, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 43152, "last_frame": 43154, "first_seen_epoch": "1634915304.117676", "last_seen_epoch": "1634915304.186652", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a8d8f7453b4a0812bb7c4b2f", "transport": "tcp", "stream": 823, "initiator_ip": "10.10.22.157", "initiator_port": 50019, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43155, "last_frame": 43161, "first_seen_epoch": "1634915304.187986", "last_seen_epoch": "1634915304.478736", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d06b1fc430d6414282ee4ae4", "transport": "tcp", "stream": 824, "initiator_ip": "10.10.22.157", "initiator_port": 50020, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43171, "last_frame": 43176, "first_seen_epoch": "1634915308.507262", "last_seen_epoch": "1634915308.812756", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f63cb6c739fcdc3595205745", "transport": "tcp", "stream": 825, "initiator_ip": "10.10.22.157", "initiator_port": 50021, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43185, "last_frame": 43190, "first_seen_epoch": "1634915312.835289", "last_seen_epoch": "1634915313.146659", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e1ca95d926c3bba9f63b0d4f", "transport": "tcp", "stream": 826, "initiator_ip": "10.10.22.157", "initiator_port": 50022, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43195, "last_frame": 43201, "first_seen_epoch": "1634915317.163781", "last_seen_epoch": "1634915317.488886", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cc9230595e8c916f550a461c", "transport": "udp", "stream": 555, "initiator_ip": "10.10.22.157", "initiator_port": 50811, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 43209, "last_frame": 43210, "first_seen_epoch": "1634915321.508376", "last_seen_epoch": "1634915321.559997", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2c2fb9323fcd20e5e773d9ee", "transport": "tcp", "stream": 827, "initiator_ip": "10.10.22.157", "initiator_port": 50023, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43211, "last_frame": 43216, "first_seen_epoch": "1634915321.561339", "last_seen_epoch": "1634915321.872055", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e822e471ff377937b10369ed", "transport": "udp", "stream": 556, "initiator_ip": "10.10.22.157", "initiator_port": 52666, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 43225, "last_frame": 43226, "first_seen_epoch": "1634915325.883027", "last_seen_epoch": "1634915325.95217", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a58107952390106bf6367bcc", "transport": "tcp", "stream": 828, "initiator_ip": "10.10.22.157", "initiator_port": 50024, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 43227, "last_frame": 43246, "first_seen_epoch": "1634915325.953499", "last_seen_epoch": "1634915326.244874", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-35f0af8efa5d81e8f67f6247", "transport": "tcp", "stream": 829, "initiator_ip": "10.10.22.156", "initiator_port": 49892, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 43232, "last_frame": 45821, "first_seen_epoch": "1634915325.978011", "last_seen_epoch": "1634915390.213562", "packets": 1028, "bytes": 914466, "initiator_bytes": 22638, "responder_bytes": 891828 }, { "flow_id": "flow-279339954ec4ee34dfec1919", "transport": "tcp", "stream": 830, "initiator_ip": "10.10.22.156", "initiator_port": 49893, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 44266, "last_frame": 46717, "first_seen_epoch": "1634915329.122016", "last_seen_epoch": "1634915392.701098", "packets": 21, "bytes": 3429, "initiator_bytes": 1664, "responder_bytes": 1765 }, { "flow_id": "flow-755bf6038c8923605c1f5a51", "transport": "udp", "stream": 557, "initiator_ip": "10.10.22.156", "initiator_port": 56899, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44267, "last_frame": 44268, "first_seen_epoch": "1634915329.150086", "last_seen_epoch": "1634915329.150455", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-bdcaa5bf98db68d4ad23adc5", "transport": "udp", "stream": 558, "initiator_ip": "10.10.22.156", "initiator_port": 56900, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 44269, "last_frame": 44270, "first_seen_epoch": "1634915329.152629", "last_seen_epoch": "1634915329.152921", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-729de71d5798e76dc3f6ad37", "transport": "udp", "stream": 559, "initiator_ip": "10.10.22.156", "initiator_port": 55219, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44276, "last_frame": 44277, "first_seen_epoch": "1634915329.261887", "last_seen_epoch": "1634915329.262199", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-6e1e9b28bdadef9aee39f348", "transport": "udp", "stream": 560, "initiator_ip": "10.10.22.156", "initiator_port": 55220, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 44278, "last_frame": 44279, "first_seen_epoch": "1634915329.264628", "last_seen_epoch": "1634915329.264945", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-79286c8b542f83f1d54b7288", "transport": "udp", "stream": 561, "initiator_ip": "10.10.22.157", "initiator_port": 57259, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 44291, "last_frame": 44292, "first_seen_epoch": "1634915330.258826", "last_seen_epoch": "1634915330.315083", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4efd167e83b09c5fb2635d35", "transport": "tcp", "stream": 831, "initiator_ip": "10.10.22.157", "initiator_port": 50025, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44293, "last_frame": 44298, "first_seen_epoch": "1634915330.315991", "last_seen_epoch": "1634915330.631534", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-346964681ac184a26d43c845", "transport": "udp", "stream": 562, "initiator_ip": "10.10.22.156", "initiator_port": 61457, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44310, "last_frame": 44312, "first_seen_epoch": "1634915332.088412", "last_seen_epoch": "1634915332.122085", "packets": 3, "bytes": 445, "initiator_bytes": 146, "responder_bytes": 299 }, { "flow_id": "flow-2ebf097235d89b6b588c7324", "transport": "tcp", "stream": 832, "initiator_ip": "10.10.22.156", "initiator_port": 49894, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44313, "last_frame": 44441, "first_seen_epoch": "1634915332.123075", "last_seen_epoch": "1634915333.583197", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-9194a4b1e6bb043849668d6e", "transport": "tcp", "stream": 833, "initiator_ip": "10.10.22.156", "initiator_port": 49895, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44314, "last_frame": 44455, "first_seen_epoch": "1634915332.123609", "last_seen_epoch": "1634915333.790712", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-0845328a66d30756a93fbdfb", "transport": "tcp", "stream": 834, "initiator_ip": "10.10.22.156", "initiator_port": 49896, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44315, "last_frame": 44429, "first_seen_epoch": "1634915332.124047", "last_seen_epoch": "1634915333.406736", "packets": 23, "bytes": 8084, "initiator_bytes": 1097, "responder_bytes": 6987 }, { "flow_id": "flow-17fa4d02ec427996d3e0759a", "transport": "tcp", "stream": 835, "initiator_ip": "10.10.22.157", "initiator_port": 50026, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44473, "last_frame": 44483, "first_seen_epoch": "1634915334.648922", "last_seen_epoch": "1634915334.955421", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0e6a0f245f7cfba333e32c6b", "transport": "tcp", "stream": 836, "initiator_ip": "10.10.22.156", "initiator_port": 49897, "responder_ip": "142.250.114.28", "responder_port": 465, "first_frame": 44485, "last_frame": 44515, "first_seen_epoch": "1634915335.026524", "last_seen_epoch": "1634915335.541972", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-1f0449043cf83109abaf4fed", "transport": "udp", "stream": 563, "initiator_ip": "10.10.22.156", "initiator_port": 57712, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44492, "last_frame": 44496, "first_seen_epoch": "1634915335.22216", "last_seen_epoch": "1634915335.282631", "packets": 3, "bytes": 324, "initiator_bytes": 152, "responder_bytes": 172 }, { "flow_id": "flow-13ac25c2fb31bd1dcaee39e9", "transport": "tcp", "stream": 837, "initiator_ip": "10.10.22.156", "initiator_port": 49898, "responder_ip": "66.228.43.14", "responder_port": 2525, "first_frame": 44497, "last_frame": 44524, "first_seen_epoch": "1634915335.283715", "last_seen_epoch": "1634915335.752597", "packets": 11, "bytes": 730, "initiator_bytes": 336, "responder_bytes": 394 }, { "flow_id": "flow-16fdd1f13028eb0b2b0fb45b", "transport": "udp", "stream": 564, "initiator_ip": "10.10.22.156", "initiator_port": 53364, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44498, "last_frame": 44500, "first_seen_epoch": "1634915335.284248", "last_seen_epoch": "1634915335.347911", "packets": 3, "bytes": 254, "initiator_bytes": 148, "responder_bytes": 106 }, { "flow_id": "flow-0d0aa8a14b73e95b756d8d77", "transport": "tcp", "stream": 838, "initiator_ip": "10.10.22.156", "initiator_port": 49899, "responder_ip": "142.250.114.109", "responder_port": 993, "first_frame": 44501, "last_frame": 44562, "first_seen_epoch": "1634915335.348918", "last_seen_epoch": "1634915336.890759", "packets": 8, "bytes": 460, "initiator_bytes": 294, "responder_bytes": 166 }, { "flow_id": "flow-6baf157b0bf0c9ebc06296df", "transport": "tcp", "stream": 839, "initiator_ip": "10.10.22.156", "initiator_port": 49900, "responder_ip": "142.250.114.28", "responder_port": 587, "first_frame": 44541, "last_frame": 44572, "first_seen_epoch": "1634915336.399406", "last_seen_epoch": "1634915337.078099", "packets": 9, "bytes": 560, "initiator_bytes": 282, "responder_bytes": 278 }, { "flow_id": "flow-5fcc408570bf0afda0808058", "transport": "tcp", "stream": 840, "initiator_ip": "10.10.22.156", "initiator_port": 49901, "responder_ip": "64.29.151.102", "responder_port": 110, "first_frame": 44550, "last_frame": 44579, "first_seen_epoch": "1634915336.584765", "last_seen_epoch": "1634915337.543038", "packets": 9, "bytes": 582, "initiator_bytes": 282, "responder_bytes": 300 }, { "flow_id": "flow-bb35f71eeed624e5ef29418d", "transport": "tcp", "stream": 841, "initiator_ip": "10.10.22.157", "initiator_port": 50027, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44581, "last_frame": 44587, "first_seen_epoch": "1634915338.9632", "last_seen_epoch": "1634915339.43463", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-99f90bcd11dc89d26269d8b4", "transport": "tcp", "stream": 842, "initiator_ip": "10.10.22.157", "initiator_port": 50028, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44594, "last_frame": 44599, "first_seen_epoch": "1634915343.44522", "last_seen_epoch": "1634915343.782413", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-13daa7f677617a7f23a8f525", "transport": "tcp", "stream": 843, "initiator_ip": "10.10.22.156", "initiator_port": 49902, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44614, "last_frame": 44767, "first_seen_epoch": "1634915346.89456", "last_seen_epoch": "1634915348.715919", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-fe52e6ef97300d1227f29bd0", "transport": "tcp", "stream": 844, "initiator_ip": "10.10.22.156", "initiator_port": 49903, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44615, "last_frame": 44799, "first_seen_epoch": "1634915346.895226", "last_seen_epoch": "1634915348.911931", "packets": 23, "bytes": 8084, "initiator_bytes": 1097, "responder_bytes": 6987 }, { "flow_id": "flow-52ba40920e55717c5d1636e1", "transport": "tcp", "stream": 845, "initiator_ip": "10.10.22.156", "initiator_port": 49904, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44616, "last_frame": 44805, "first_seen_epoch": "1634915346.895865", "last_seen_epoch": "1634915348.912567", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-9ecb6125ab4505b16fc494a3", "transport": "tcp", "stream": 846, "initiator_ip": "10.10.22.156", "initiator_port": 49905, "responder_ip": "54.243.250.193", "responder_port": 443, "first_frame": 44617, "last_frame": 44787, "first_seen_epoch": "1634915346.896392", "last_seen_epoch": "1634915348.904587", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-feaf65022683258ae40f231f", "transport": "udp", "stream": 565, "initiator_ip": "10.10.22.157", "initiator_port": 55253, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 44664, "last_frame": 44722, "first_seen_epoch": "1634915347.790624", "last_seen_epoch": "1634915347.98053", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6a1c9f3e327ae88063ba267f", "transport": "tcp", "stream": 847, "initiator_ip": "10.10.22.157", "initiator_port": 50029, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44723, "last_frame": 44738, "first_seen_epoch": "1634915347.981884", "last_seen_epoch": "1634915348.283434", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-cc653bd05cc58103b8b17784", "transport": "tcp", "stream": 848, "initiator_ip": "10.10.22.156", "initiator_port": 49906, "responder_ip": "66.228.43.14", "responder_port": 2525, "first_frame": 44820, "last_frame": 44860, "first_seen_epoch": "1634915350.058428", "last_seen_epoch": "1634915350.761331", "packets": 11, "bytes": 730, "initiator_bytes": 336, "responder_bytes": 394 }, { "flow_id": "flow-bdfaf89333ab7acc1d1f8736", "transport": "tcp", "stream": 849, "initiator_ip": "10.10.22.156", "initiator_port": 49907, "responder_ip": "142.250.114.109", "responder_port": 993, "first_frame": 44833, "last_frame": 44869, "first_seen_epoch": "1634915350.492125", "last_seen_epoch": "1634915351.011134", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-a27f952bc067f6ae57dd0cd7", "transport": "tcp", "stream": 850, "initiator_ip": "10.10.22.156", "initiator_port": 49908, "responder_ip": "142.250.114.28", "responder_port": 25, "first_frame": 44834, "last_frame": 44879, "first_seen_epoch": "1634915350.492863", "last_seen_epoch": "1634915351.198524", "packets": 9, "bytes": 560, "initiator_bytes": 282, "responder_bytes": 278 }, { "flow_id": "flow-49048a53df2eeab4796a051d", "transport": "tcp", "stream": 851, "initiator_ip": "10.10.22.156", "initiator_port": 49909, "responder_ip": "142.250.114.28", "responder_port": 587, "first_frame": 44848, "last_frame": 44881, "first_seen_epoch": "1634915350.68226", "last_seen_epoch": "1634915351.217729", "packets": 9, "bytes": 558, "initiator_bytes": 282, "responder_bytes": 276 }, { "flow_id": "flow-6c90bdc21a2045580328d61c", "transport": "tcp", "stream": 852, "initiator_ip": "10.10.22.156", "initiator_port": 49910, "responder_ip": "64.29.151.102", "responder_port": 110, "first_frame": 44886, "last_frame": 44901, "first_seen_epoch": "1634915351.505215", "last_seen_epoch": "1634915352.062909", "packets": 9, "bytes": 583, "initiator_bytes": 282, "responder_bytes": 301 }, { "flow_id": "flow-36bc95c0ea8f7b8d93dc5a45", "transport": "udp", "stream": 566, "initiator_ip": "10.10.22.157", "initiator_port": 63722, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 44903, "last_frame": 44904, "first_seen_epoch": "1634915352.290937", "last_seen_epoch": "1634915352.342324", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-abfceee60057c2f198ee7964", "transport": "tcp", "stream": 853, "initiator_ip": "10.10.22.157", "initiator_port": 50030, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44905, "last_frame": 44910, "first_seen_epoch": "1634915352.343624", "last_seen_epoch": "1634915352.642503", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cb2f57476309b0ee13f16d50", "transport": "udp", "stream": 567, "initiator_ip": "10.10.22.156", "initiator_port": 51839, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 44922, "last_frame": 44926, "first_seen_epoch": "1634915355.155639", "last_seen_epoch": "1634915355.503845", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-f07ec703b6a09e94bf0313bb", "transport": "tcp", "stream": 854, "initiator_ip": "10.10.22.156", "initiator_port": 49911, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 44927, "last_frame": 45258, "first_seen_epoch": "1634915355.504919", "last_seen_epoch": "1634915367.174151", "packets": 50, "bytes": 7471, "initiator_bytes": 2233, "responder_bytes": 5238 }, { "flow_id": "flow-f3f47556f7f34d7bf4ffde6c", "transport": "udp", "stream": 568, "initiator_ip": "10.10.22.157", "initiator_port": 61664, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 44930, "last_frame": 44931, "first_seen_epoch": "1634915356.649682", "last_seen_epoch": "1634915356.707839", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-758742cebd85c63e10dd2beb", "transport": "tcp", "stream": 855, "initiator_ip": "10.10.22.157", "initiator_port": 50031, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 44932, "last_frame": 44941, "first_seen_epoch": "1634915356.709149", "last_seen_epoch": "1634915357.012627", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9b1489d20ad398486e4e1b70", "transport": "udp", "stream": 569, "initiator_ip": "10.10.22.158", "initiator_port": 50672, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 44943, "last_frame": 44944, "first_seen_epoch": "1634915357.522444", "last_seen_epoch": "1634915357.522824", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-b3fc0401dfa826ad5367ce16", "transport": "tcp", "stream": 856, "initiator_ip": "10.10.22.158", "initiator_port": 49833, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 44945, "last_frame": 45038, "first_seen_epoch": "1634915357.638191", "last_seen_epoch": "1634915358.214494", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-6ba3f15d614b92832da76bde", "transport": "tcp", "stream": 857, "initiator_ip": "10.10.22.158", "initiator_port": 49834, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 44952, "last_frame": 45039, "first_seen_epoch": "1634915357.643271", "last_seen_epoch": "1634915358.214596", "packets": 24, "bytes": 6913, "initiator_bytes": 4330, "responder_bytes": 2583 }, { "flow_id": "flow-7b579bcfd74787115a880312", "transport": "tcp", "stream": 858, "initiator_ip": "10.10.22.158", "initiator_port": 49835, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 44975, "last_frame": 45013, "first_seen_epoch": "1634915357.655929", "last_seen_epoch": "1634915357.668667", "packets": 21, "bytes": 7448, "initiator_bytes": 3431, "responder_bytes": 4017 }, { "flow_id": "flow-d0e74d99147d594d7aa283f2", "transport": "tcp", "stream": 859, "initiator_ip": "10.10.22.158", "initiator_port": 49836, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 44992, "last_frame": 45009, "first_seen_epoch": "1634915357.663687", "last_seen_epoch": "1634915357.668279", "packets": 18, "bytes": 6866, "initiator_bytes": 2833, "responder_bytes": 4033 }, { "flow_id": "flow-0bd085f7d2866110b37ed16c", "transport": "udp", "stream": 570, "initiator_ip": "10.10.22.158", "initiator_port": 49861, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 45018, "last_frame": 45019, "first_seen_epoch": "1634915357.704362", "last_seen_epoch": "1634915357.751768", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-d10df6c56881bb9c3336559d", "transport": "tcp", "stream": 860, "initiator_ip": "10.10.22.158", "initiator_port": 49837, "responder_ip": "40.126.28.22", "responder_port": 443, "first_frame": 45020, "last_frame": 45040, "first_seen_epoch": "1634915357.752806", "last_seen_epoch": "1634915358.215129", "packets": 19, "bytes": 6779, "initiator_bytes": 1512, "responder_bytes": 5267 }, { "flow_id": "flow-bfc60d3568e2394ba846faff", "transport": "udp", "stream": 571, "initiator_ip": "10.10.22.157", "initiator_port": 61665, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 45057, "last_frame": 45058, "first_seen_epoch": "1634915359.544602", "last_seen_epoch": "1634915359.544897", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-5fe90b7a856492841ca179a6", "transport": "tcp", "stream": 861, "initiator_ip": "10.10.22.157", "initiator_port": 50032, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 45059, "last_frame": 45160, "first_seen_epoch": "1634915359.658409", "last_seen_epoch": "1634915360.22055", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-076c3b56f313374bd9533bda", "transport": "tcp", "stream": 862, "initiator_ip": "10.10.22.157", "initiator_port": 50033, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 45066, "last_frame": 45161, "first_seen_epoch": "1634915359.663339", "last_seen_epoch": "1634915360.220668", "packets": 24, "bytes": 6873, "initiator_bytes": 4290, "responder_bytes": 2583 }, { "flow_id": "flow-113c34a05c0093778dd9253f", "transport": "tcp", "stream": 863, "initiator_ip": "10.10.22.157", "initiator_port": 50034, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 45089, "last_frame": 45127, "first_seen_epoch": "1634915359.674819", "last_seen_epoch": "1634915359.68722", "packets": 21, "bytes": 7408, "initiator_bytes": 3391, "responder_bytes": 4017 }, { "flow_id": "flow-62028828e88097479538fd49", "transport": "tcp", "stream": 864, "initiator_ip": "10.10.22.157", "initiator_port": 50035, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 45106, "last_frame": 45123, "first_seen_epoch": "1634915359.682591", "last_seen_epoch": "1634915359.686777", "packets": 18, "bytes": 6826, "initiator_bytes": 2793, "responder_bytes": 4033 }, { "flow_id": "flow-e14d37dff24f8dc7cb2843aa", "transport": "udp", "stream": 572, "initiator_ip": "10.10.22.157", "initiator_port": 59256, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 45132, "last_frame": 45133, "first_seen_epoch": "1634915359.720788", "last_seen_epoch": "1634915359.721078", "packets": 2, "bytes": 409, "initiator_bytes": 85, "responder_bytes": 324 }, { "flow_id": "flow-46c6205753eb30bb0a46efa3", "transport": "tcp", "stream": 865, "initiator_ip": "10.10.22.157", "initiator_port": 50036, "responder_ip": "40.126.28.12", "responder_port": 443, "first_frame": 45134, "last_frame": 45162, "first_seen_epoch": "1634915359.721768", "last_seen_epoch": "1634915360.221062", "packets": 20, "bytes": 6833, "initiator_bytes": 1566, "responder_bytes": 5267 }, { "flow_id": "flow-42c126017a30662bec3c976b", "transport": "tcp", "stream": 866, "initiator_ip": "10.10.22.157", "initiator_port": 50037, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45177, "last_frame": 45187, "first_seen_epoch": "1634915361.024237", "last_seen_epoch": "1634915361.339607", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-2d12aced00c199d6dfd6c3dd", "transport": "tcp", "stream": 867, "initiator_ip": "10.10.22.157", "initiator_port": 50038, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45230, "last_frame": 45239, "first_seen_epoch": "1634915365.351943", "last_seen_epoch": "1634915365.652799", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a842f1fe578de77c453049a3", "transport": "tcp", "stream": 868, "initiator_ip": "10.10.22.156", "initiator_port": 49912, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 45273, "last_frame": 45801, "first_seen_epoch": "1634915369.266209", "last_seen_epoch": "1634915384.192665", "packets": 50, "bytes": 7467, "initiator_bytes": 2175, "responder_bytes": 5292 }, { "flow_id": "flow-7601c84fafb6eb58dece3808", "transport": "tcp", "stream": 869, "initiator_ip": "10.10.22.157", "initiator_port": 50039, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45282, "last_frame": 45293, "first_seen_epoch": "1634915369.664988", "last_seen_epoch": "1634915370.001679", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-36915cc78616c82255339d81", "transport": "tcp", "stream": 870, "initiator_ip": "10.10.22.156", "initiator_port": 49913, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 45295, "last_frame": 45790, "first_seen_epoch": "1634915370.20979", "last_seen_epoch": "1634915383.832072", "packets": 50, "bytes": 7471, "initiator_bytes": 2179, "responder_bytes": 5292 }, { "flow_id": "flow-54358840e4243faac7d5cca9", "transport": "udp", "stream": 573, "initiator_ip": "10.10.22.156", "initiator_port": 54350, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 45308, "last_frame": 45328, "first_seen_epoch": "1634915370.665053", "last_seen_epoch": "1634915374.223619", "packets": 5, "bytes": 436, "initiator_bytes": 316, "responder_bytes": 120 }, { "flow_id": "flow-d47b1f4a87909b4d265ebd3c", "transport": "udp", "stream": 574, "initiator_ip": "10.10.22.157", "initiator_port": 52170, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 45324, "last_frame": 45325, "first_seen_epoch": "1634915374.009177", "last_seen_epoch": "1634915374.074224", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-cf53c7ac32fffbe7636b0fe8", "transport": "tcp", "stream": 871, "initiator_ip": "10.10.22.157", "initiator_port": 50040, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45326, "last_frame": 45339, "first_seen_epoch": "1634915374.07562", "last_seen_epoch": "1634915374.38514", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-702fdd5f0ca58708af6b7ac5", "transport": "tcp", "stream": 872, "initiator_ip": "10.10.22.156", "initiator_port": 49914, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 45332, "last_frame": 46929, "first_seen_epoch": "1634915374.224659", "last_seen_epoch": "1634915415.690081", "packets": 51, "bytes": 9460, "initiator_bytes": 2275, "responder_bytes": 7185 }, { "flow_id": "flow-94eb6aad44a5abc81715f2cf", "transport": "udp", "stream": 575, "initiator_ip": "10.10.22.156", "initiator_port": 56363, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 45361, "last_frame": 45363, "first_seen_epoch": "1634915374.97457", "last_seen_epoch": "1634915375.02327", "packets": 3, "bytes": 445, "initiator_bytes": 146, "responder_bytes": 299 }, { "flow_id": "flow-6fe9cd6086f8c1ccd6844895", "transport": "tcp", "stream": 873, "initiator_ip": "10.10.22.156", "initiator_port": 49915, "responder_ip": "23.21.76.7", "responder_port": 443, "first_frame": 45364, "last_frame": 45550, "first_seen_epoch": "1634915375.023986", "last_seen_epoch": "1634915376.580507", "packets": 24, "bytes": 7790, "initiator_bytes": 1028, "responder_bytes": 6762 }, { "flow_id": "flow-991430866c99bdbaae1269da", "transport": "tcp", "stream": 874, "initiator_ip": "10.10.22.156", "initiator_port": 49916, "responder_ip": "23.21.76.7", "responder_port": 443, "first_frame": 45365, "last_frame": 45581, "first_seen_epoch": "1634915375.024507", "last_seen_epoch": "1634915376.764763", "packets": 23, "bytes": 7736, "initiator_bytes": 974, "responder_bytes": 6762 }, { "flow_id": "flow-174c8c9c528d56849f06dfa8", "transport": "tcp", "stream": 875, "initiator_ip": "10.10.22.156", "initiator_port": 49917, "responder_ip": "23.21.76.7", "responder_port": 443, "first_frame": 45380, "last_frame": 45613, "first_seen_epoch": "1634915375.151542", "last_seen_epoch": "1634915377.019897", "packets": 23, "bytes": 7736, "initiator_bytes": 974, "responder_bytes": 6762 }, { "flow_id": "flow-6841c0f65db52b8a8829c051", "transport": "tcp", "stream": 876, "initiator_ip": "10.10.22.156", "initiator_port": 49918, "responder_ip": "23.21.76.7", "responder_port": 443, "first_frame": 45381, "last_frame": 45609, "first_seen_epoch": "1634915375.152233", "last_seen_epoch": "1634915377.019447", "packets": 21, "bytes": 7628, "initiator_bytes": 920, "responder_bytes": 6708 }, { "flow_id": "flow-a4e64c9a1419b663548b9f8d", "transport": "udp", "stream": 576, "initiator_ip": "10.10.22.157", "initiator_port": 53396, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 45648, "last_frame": 45652, "first_seen_epoch": "1634915378.400545", "last_seen_epoch": "1634915378.446599", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-02a014c8ad52298ebdf70054", "transport": "tcp", "stream": 877, "initiator_ip": "10.10.22.157", "initiator_port": 50041, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45653, "last_frame": 45663, "first_seen_epoch": "1634915378.447461", "last_seen_epoch": "1634915378.737014", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b5cd5c4e5676ba3aa2f1445c", "transport": "udp", "stream": 577, "initiator_ip": "10.10.22.157", "initiator_port": 60774, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 45754, "last_frame": 45756, "first_seen_epoch": "1634915382.743623", "last_seen_epoch": "1634915382.786044", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-07152a21a180d556dd7df535", "transport": "tcp", "stream": 878, "initiator_ip": "10.10.22.157", "initiator_port": 50042, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45757, "last_frame": 45770, "first_seen_epoch": "1634915382.78735", "last_seen_epoch": "1634915383.084157", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-41cb827f990dff5ac71798b8", "transport": "tcp", "stream": 879, "initiator_ip": "10.10.22.157", "initiator_port": 50043, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45807, "last_frame": 45815, "first_seen_epoch": "1634915387.087025", "last_seen_epoch": "1634915387.400153", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9dac21223cb9104046c77dd7", "transport": "tcp", "stream": 880, "initiator_ip": "10.10.22.156", "initiator_port": 49919, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 45822, "last_frame": 46864, "first_seen_epoch": "1634915390.213871", "last_seen_epoch": "1634915410.891585", "packets": 886, "bytes": 754863, "initiator_bytes": 20801, "responder_bytes": 734062 }, { "flow_id": "flow-befb84ad158b925b1dd10aea", "transport": "tcp", "stream": 881, "initiator_ip": "10.10.22.157", "initiator_port": 50044, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 45837, "last_frame": 45842, "first_seen_epoch": "1634915391.415774", "last_seen_epoch": "1634915391.727438", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0a99bfd0b398b869b70e93ef", "transport": "tcp", "stream": 882, "initiator_ip": "10.10.22.156", "initiator_port": 49920, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 46718, "last_frame": 46885, "first_seen_epoch": "1634915392.701422", "last_seen_epoch": "1634915412.734926", "packets": 19, "bytes": 3321, "initiator_bytes": 1556, "responder_bytes": 1765 }, { "flow_id": "flow-be3d3b6dd78d07a42e47872e", "transport": "udp", "stream": 578, "initiator_ip": "10.10.22.156", "initiator_port": 50789, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46719, "last_frame": 46720, "first_seen_epoch": "1634915392.7278", "last_seen_epoch": "1634915392.728211", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-a5345702d5996f925b53c7e6", "transport": "udp", "stream": 579, "initiator_ip": "10.10.22.156", "initiator_port": 50790, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46721, "last_frame": 46722, "first_seen_epoch": "1634915392.728732", "last_seen_epoch": "1634915392.72897", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-00f9625ebc46a182020cce42", "transport": "udp", "stream": 580, "initiator_ip": "10.10.22.156", "initiator_port": 60360, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46727, "last_frame": 46728, "first_seen_epoch": "1634915392.851965", "last_seen_epoch": "1634915392.852309", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-4a6d679692626924283d8cc4", "transport": "udp", "stream": 581, "initiator_ip": "10.10.22.156", "initiator_port": 60361, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46729, "last_frame": 46730, "first_seen_epoch": "1634915392.854395", "last_seen_epoch": "1634915392.854693", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4b60efa3cc4a032544ce1179", "transport": "udp", "stream": 582, "initiator_ip": "10.10.22.156", "initiator_port": 58870, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46735, "last_frame": 46736, "first_seen_epoch": "1634915393.000091", "last_seen_epoch": "1634915393.000387", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-0609cfeb69e1597e7c0e5c70", "transport": "udp", "stream": 583, "initiator_ip": "10.10.22.156", "initiator_port": 58871, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46737, "last_frame": 46738, "first_seen_epoch": "1634915393.000999", "last_seen_epoch": "1634915393.001291", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f6c56a6fa82ae19f6f56cc02", "transport": "udp", "stream": 584, "initiator_ip": "10.10.22.156", "initiator_port": 60040, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46739, "last_frame": 46740, "first_seen_epoch": "1634915393.030731", "last_seen_epoch": "1634915393.031045", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-81fdb557fe3d29e739dcda76", "transport": "udp", "stream": 585, "initiator_ip": "10.10.22.156", "initiator_port": 60041, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46743, "last_frame": 46744, "first_seen_epoch": "1634915393.03383", "last_seen_epoch": "1634915393.034149", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-7681caad38c61fb12f2c2bed", "transport": "udp", "stream": 586, "initiator_ip": "10.10.22.156", "initiator_port": 58452, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46747, "last_frame": 46748, "first_seen_epoch": "1634915393.046553", "last_seen_epoch": "1634915393.046827", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-82efa7370f65dc915ed10fac", "transport": "udp", "stream": 587, "initiator_ip": "10.10.22.156", "initiator_port": 58453, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46749, "last_frame": 46750, "first_seen_epoch": "1634915393.049251", "last_seen_epoch": "1634915393.049567", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-135ce0830ab052120edc3c7d", "transport": "udp", "stream": 588, "initiator_ip": "10.10.22.156", "initiator_port": 51324, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46751, "last_frame": 46752, "first_seen_epoch": "1634915393.063333", "last_seen_epoch": "1634915393.063626", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-1da818c3bb124f8d5b336889", "transport": "udp", "stream": 589, "initiator_ip": "10.10.22.156", "initiator_port": 51325, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46753, "last_frame": 46754, "first_seen_epoch": "1634915393.064695", "last_seen_epoch": "1634915393.064963", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-35a0516245352cbab4067fe0", "transport": "udp", "stream": 590, "initiator_ip": "10.10.22.156", "initiator_port": 63492, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46755, "last_frame": 46756, "first_seen_epoch": "1634915393.075325", "last_seen_epoch": "1634915393.075598", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-e9f23e4124d0b02630a8030b", "transport": "udp", "stream": 591, "initiator_ip": "10.10.22.156", "initiator_port": 63493, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46757, "last_frame": 46758, "first_seen_epoch": "1634915393.076182", "last_seen_epoch": "1634915393.0766", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-279332f26c396ff7ec32978d", "transport": "udp", "stream": 592, "initiator_ip": "10.10.22.156", "initiator_port": 58875, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46759, "last_frame": 46760, "first_seen_epoch": "1634915393.093741", "last_seen_epoch": "1634915393.094028", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-1a3ee297b1915000822c0470", "transport": "udp", "stream": 593, "initiator_ip": "10.10.22.156", "initiator_port": 58876, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46761, "last_frame": 46762, "first_seen_epoch": "1634915393.094791", "last_seen_epoch": "1634915393.095086", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-e2814b730ea594ff25dcdbf2", "transport": "udp", "stream": 594, "initiator_ip": "10.10.22.156", "initiator_port": 65453, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46763, "last_frame": 46764, "first_seen_epoch": "1634915393.108196", "last_seen_epoch": "1634915393.108464", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-fb37b860f1044c86635851ff", "transport": "udp", "stream": 595, "initiator_ip": "10.10.22.156", "initiator_port": 65454, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46765, "last_frame": 46766, "first_seen_epoch": "1634915393.111334", "last_seen_epoch": "1634915393.111633", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-24a723f5253a41f78216d1aa", "transport": "udp", "stream": 596, "initiator_ip": "10.10.22.156", "initiator_port": 53016, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46767, "last_frame": 46768, "first_seen_epoch": "1634915393.124385", "last_seen_epoch": "1634915393.12471", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-a4a7269c475bf511eebc49a6", "transport": "udp", "stream": 597, "initiator_ip": "10.10.22.156", "initiator_port": 53017, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46769, "last_frame": 46770, "first_seen_epoch": "1634915393.127718", "last_seen_epoch": "1634915393.128024", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-e1dace7a7df35bc9fe07c52e", "transport": "udp", "stream": 598, "initiator_ip": "10.10.22.156", "initiator_port": 54211, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46771, "last_frame": 46772, "first_seen_epoch": "1634915393.158392", "last_seen_epoch": "1634915393.158707", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-8ec1ba3cacd023cab271e0e7", "transport": "udp", "stream": 599, "initiator_ip": "10.10.22.156", "initiator_port": 54212, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46773, "last_frame": 46774, "first_seen_epoch": "1634915393.159287", "last_seen_epoch": "1634915393.159527", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-9d18b8c07fabc93ed308f07e", "transport": "udp", "stream": 600, "initiator_ip": "10.10.22.156", "initiator_port": 52084, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46775, "last_frame": 46776, "first_seen_epoch": "1634915393.198976", "last_seen_epoch": "1634915393.199365", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-e725ad650717fcb701f33a2e", "transport": "udp", "stream": 601, "initiator_ip": "10.10.22.156", "initiator_port": 52085, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46777, "last_frame": 46778, "first_seen_epoch": "1634915393.200034", "last_seen_epoch": "1634915393.200286", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-6a2369545f015820c5b9b0a9", "transport": "udp", "stream": 602, "initiator_ip": "10.10.22.156", "initiator_port": 52097, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46779, "last_frame": 46780, "first_seen_epoch": "1634915393.218897", "last_seen_epoch": "1634915393.219171", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-547185bab1b9f2ec992a77fe", "transport": "udp", "stream": 603, "initiator_ip": "10.10.22.156", "initiator_port": 52098, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46781, "last_frame": 46782, "first_seen_epoch": "1634915393.219754", "last_seen_epoch": "1634915393.220023", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f56aa259bac8d1d9dc830310", "transport": "udp", "stream": 604, "initiator_ip": "10.10.22.156", "initiator_port": 57250, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46783, "last_frame": 82055, "first_seen_epoch": "1634915393.24006", "last_seen_epoch": "1634918327.681047", "packets": 4, "bytes": 563, "initiator_bytes": 172, "responder_bytes": 391 }, { "flow_id": "flow-3e329cfb083ce59c0eea97cd", "transport": "udp", "stream": 605, "initiator_ip": "10.10.22.156", "initiator_port": 57251, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46785, "last_frame": 46786, "first_seen_epoch": "1634915393.240835", "last_seen_epoch": "1634915393.241084", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-5d91513c1ce51e2fc021490e", "transport": "udp", "stream": 606, "initiator_ip": "10.10.22.156", "initiator_port": 54015, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46790, "last_frame": 46791, "first_seen_epoch": "1634915393.281612", "last_seen_epoch": "1634915393.281871", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f1761f844bd55281d689b3d4", "transport": "udp", "stream": 607, "initiator_ip": "10.10.22.156", "initiator_port": 49394, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46792, "last_frame": 46793, "first_seen_epoch": "1634915393.317054", "last_seen_epoch": "1634915393.317369", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-7742ac315002f32a3b153519", "transport": "udp", "stream": 608, "initiator_ip": "10.10.22.156", "initiator_port": 49395, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46794, "last_frame": 46795, "first_seen_epoch": "1634915393.318041", "last_seen_epoch": "1634915393.318313", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-c564bcff23fac49994adccd8", "transport": "udp", "stream": 609, "initiator_ip": "10.10.22.156", "initiator_port": 65461, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46798, "last_frame": 46799, "first_seen_epoch": "1634915393.33671", "last_seen_epoch": "1634915393.337021", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-e25bfc8106b84cd5457fafa8", "transport": "udp", "stream": 610, "initiator_ip": "10.10.22.156", "initiator_port": 65462, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46800, "last_frame": 46801, "first_seen_epoch": "1634915393.338916", "last_seen_epoch": "1634915393.339197", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-5f6ba981c982f443ffc76a1a", "transport": "udp", "stream": 611, "initiator_ip": "10.10.22.156", "initiator_port": 64123, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46802, "last_frame": 46803, "first_seen_epoch": "1634915393.372864", "last_seen_epoch": "1634915393.373103", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-9dbfcffa15fe2372864c4a32", "transport": "udp", "stream": 612, "initiator_ip": "10.10.22.156", "initiator_port": 64124, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 46804, "last_frame": 46805, "first_seen_epoch": "1634915393.375842", "last_seen_epoch": "1634915393.376126", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-3d5608c14472df975bf2933b", "transport": "tcp", "stream": 883, "initiator_ip": "10.10.22.157", "initiator_port": 50045, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46812, "last_frame": 46817, "first_seen_epoch": "1634915395.743724", "last_seen_epoch": "1634915396.058066", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6f0a975f0e1cef1d70fb93bf", "transport": "udp", "stream": 613, "initiator_ip": "10.10.22.157", "initiator_port": 59870, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 46822, "last_frame": 46823, "first_seen_epoch": "1634915400.07232", "last_seen_epoch": "1634915400.172358", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9e7b96c0cc6e9a90ac2d19dc", "transport": "tcp", "stream": 884, "initiator_ip": "10.10.22.157", "initiator_port": 50046, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46824, "last_frame": 46832, "first_seen_epoch": "1634915400.172999", "last_seen_epoch": "1634915400.463611", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-00b7aefe14bce02081ec7bd7", "transport": "udp", "stream": 614, "initiator_ip": "10.10.22.157", "initiator_port": 54767, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 46837, "last_frame": 46838, "first_seen_epoch": "1634915404.478824", "last_seen_epoch": "1634915404.540182", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-12f759f23f909cb79f79438f", "transport": "tcp", "stream": 885, "initiator_ip": "10.10.22.157", "initiator_port": 50047, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46839, "last_frame": 46844, "first_seen_epoch": "1634915404.541697", "last_seen_epoch": "1634915404.883221", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cfdf286a3b5dc911e635a004", "transport": "udp", "stream": 615, "initiator_ip": "10.10.22.157", "initiator_port": 57884, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 46849, "last_frame": 67587, "first_seen_epoch": "1634915408.902203", "last_seen_epoch": "1634916796.584492", "packets": 4, "bytes": 368, "initiator_bytes": 168, "responder_bytes": 200 }, { "flow_id": "flow-f4f3a6b1175f32dc5b5a3b4c", "transport": "tcp", "stream": 886, "initiator_ip": "10.10.22.157", "initiator_port": 50048, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46851, "last_frame": 46857, "first_seen_epoch": "1634915409.047635", "last_seen_epoch": "1634915409.455933", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-89823ef364b7939a3084162d", "transport": "tcp", "stream": 887, "initiator_ip": "10.10.22.156", "initiator_port": 49921, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 46861, "last_frame": 47208, "first_seen_epoch": "1634915410.546425", "last_seen_epoch": "1634915454.435449", "packets": 21, "bytes": 3539, "initiator_bytes": 1614, "responder_bytes": 1925 }, { "flow_id": "flow-70c2cda2535ae0a5050344ee", "transport": "tcp", "stream": 888, "initiator_ip": "10.10.22.156", "initiator_port": 49922, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 46882, "last_frame": 48247, "first_seen_epoch": "1634915412.457676", "last_seen_epoch": "1634915457.079597", "packets": 29, "bytes": 8945, "initiator_bytes": 6913, "responder_bytes": 2032 }, { "flow_id": "flow-a35e2563b0f78bd866c929c9", "transport": "tcp", "stream": 889, "initiator_ip": "10.10.22.157", "initiator_port": 50049, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46906, "last_frame": 46912, "first_seen_epoch": "1634915413.462744", "last_seen_epoch": "1634915413.964228", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1b331bcf664cc5b9e572bf7c", "transport": "tcp", "stream": 890, "initiator_ip": "10.10.22.157", "initiator_port": 50050, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46938, "last_frame": 46944, "first_seen_epoch": "1634915417.979079", "last_seen_epoch": "1634915418.328667", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0915525897fe1c6dd7177431", "transport": "tcp", "stream": 891, "initiator_ip": "10.10.22.157", "initiator_port": 50051, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46949, "last_frame": 46956, "first_seen_epoch": "1634915422.338511", "last_seen_epoch": "1634915422.742838", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-b88e4dd1b88d93cd125dba2c", "transport": "udp", "stream": 616, "initiator_ip": "10.10.22.157", "initiator_port": 62824, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 46969, "last_frame": 46970, "first_seen_epoch": "1634915426.760572", "last_seen_epoch": "1634915426.822945", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f6a5c4e4280e9bed5740e7a0", "transport": "tcp", "stream": 892, "initiator_ip": "10.10.22.157", "initiator_port": 50052, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 46971, "last_frame": 46985, "first_seen_epoch": "1634915426.824375", "last_seen_epoch": "1634915427.121869", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-eca5522047527fdab9d704ae", "transport": "tcp", "stream": 893, "initiator_ip": "10.10.22.158", "initiator_port": 49838, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 46975, "last_frame": 47116, "first_seen_epoch": "1634915426.954289", "last_seen_epoch": "1634915438.2446", "packets": 17, "bytes": 4209, "initiator_bytes": 1920, "responder_bytes": 2289 }, { "flow_id": "flow-9f4fd525bc4952a621b6c705", "transport": "udp", "stream": 617, "initiator_ip": "10.10.22.156", "initiator_port": 49397, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 46988, "last_frame": 46993, "first_seen_epoch": "1634915427.246847", "last_seen_epoch": "1634915427.305975", "packets": 3, "bytes": 383, "initiator_bytes": 152, "responder_bytes": 231 }, { "flow_id": "flow-cbacfd614984b57a66c422dc", "transport": "tcp", "stream": 894, "initiator_ip": "10.10.22.156", "initiator_port": 49923, "responder_ip": "52.96.121.210", "responder_port": 25, "first_frame": 46994, "last_frame": 47172, "first_seen_epoch": "1634915427.307015", "last_seen_epoch": "1634915446.806487", "packets": 53, "bytes": 9002, "initiator_bytes": 2135, "responder_bytes": 6867 }, { "flow_id": "flow-05d556e1cc17b510ef05f055", "transport": "udp", "stream": 618, "initiator_ip": "10.10.22.157", "initiator_port": 63901, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 47073, "last_frame": 47074, "first_seen_epoch": "1634915431.152211", "last_seen_epoch": "1634915431.213422", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b6410d07f856afb9d42b34f1", "transport": "tcp", "stream": 895, "initiator_ip": "10.10.22.157", "initiator_port": 50053, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47075, "last_frame": 47089, "first_seen_epoch": "1634915431.214267", "last_seen_epoch": "1634915431.517121", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e820670f96d9b28cd369eb85", "transport": "udp", "stream": 619, "initiator_ip": "10.10.22.157", "initiator_port": 57679, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 47102, "last_frame": 47103, "first_seen_epoch": "1634915435.526122", "last_seen_epoch": "1634915435.595713", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e095b7d05487004ce9b9e91f", "transport": "tcp", "stream": 896, "initiator_ip": "10.10.22.157", "initiator_port": 50054, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47104, "last_frame": 47109, "first_seen_epoch": "1634915435.597073", "last_seen_epoch": "1634915435.88465", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-570a983a233a9692a03c7201", "transport": "tcp", "stream": 897, "initiator_ip": "10.10.22.158", "initiator_port": 49839, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 47117, "last_frame": 52705, "first_seen_epoch": "1634915438.262078", "last_seen_epoch": "1634915584.367255", "packets": 19, "bytes": 3618, "initiator_bytes": 1649, "responder_bytes": 1969 }, { "flow_id": "flow-2cde7bf2359872964012fdfe", "transport": "tcp", "stream": 898, "initiator_ip": "10.10.22.157", "initiator_port": 50055, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47129, "last_frame": 47134, "first_seen_epoch": "1634915439.901013", "last_seen_epoch": "1634915440.203983", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-db36bb861208ccf76c9ce687", "transport": "tcp", "stream": 899, "initiator_ip": "10.10.22.157", "initiator_port": 50056, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47149, "last_frame": 47157, "first_seen_epoch": "1634915444.215621", "last_seen_epoch": "1634915444.509223", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f5c9b8ed51fa33a4c092b0fe", "transport": "tcp", "stream": 900, "initiator_ip": "10.10.22.157", "initiator_port": 50057, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47179, "last_frame": 47186, "first_seen_epoch": "1634915448.542721", "last_seen_epoch": "1634915448.853078", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-1120d0aee5eb1ca9c60d5f44", "transport": "udp", "stream": 620, "initiator_ip": "10.10.22.157", "initiator_port": 64025, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 47193, "last_frame": 47194, "first_seen_epoch": "1634915452.871221", "last_seen_epoch": "1634915452.94352", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-bb835ebf6ab7d3d768ae658e", "transport": "tcp", "stream": 901, "initiator_ip": "10.10.22.157", "initiator_port": 50058, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 47195, "last_frame": 47201, "first_seen_epoch": "1634915452.944831", "last_seen_epoch": "1634915453.256446", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c9fe84571d9f0e56cc3df0cc", "transport": "tcp", "stream": 902, "initiator_ip": "10.10.22.156", "initiator_port": 49924, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 47207, "last_frame": 49547, "first_seen_epoch": "1634915454.435217", "last_seen_epoch": "1634915514.65428", "packets": 1034, "bytes": 885559, "initiator_bytes": 24037, "responder_bytes": 861522 }, { "flow_id": "flow-ec6c40cfa5ff02010a58899f", "transport": "tcp", "stream": 903, "initiator_ip": "10.10.22.156", "initiator_port": 49925, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 48248, "last_frame": 50845, "first_seen_epoch": "1634915457.07995", "last_seen_epoch": "1634915519.940223", "packets": 23, "bytes": 3537, "initiator_bytes": 1718, "responder_bytes": 1819 }, { "flow_id": "flow-7b4861812d0be4e2ab7642bf", "transport": "udp", "stream": 621, "initiator_ip": "10.10.22.156", "initiator_port": 57696, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48249, "last_frame": 48250, "first_seen_epoch": "1634915457.107015", "last_seen_epoch": "1634915457.107343", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-b40de227e0b39af6b6e51b7c", "transport": "udp", "stream": 622, "initiator_ip": "10.10.22.156", "initiator_port": 57697, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48251, "last_frame": 48252, "first_seen_epoch": "1634915457.107853", "last_seen_epoch": "1634915457.108094", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f58e1f96f247fd2e0e9c6afc", "transport": "udp", "stream": 623, "initiator_ip": "10.10.22.156", "initiator_port": 62504, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48257, "last_frame": 48258, "first_seen_epoch": "1634915457.221548", "last_seen_epoch": "1634915457.221831", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-d99391ac903dec2d8f19d974", "transport": "udp", "stream": 624, "initiator_ip": "10.10.22.156", "initiator_port": 62505, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48259, "last_frame": 48260, "first_seen_epoch": "1634915457.222451", "last_seen_epoch": "1634915457.222741", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f287025ae6c3fc410bac750e", "transport": "udp", "stream": 625, "initiator_ip": "10.10.22.157", "initiator_port": 54947, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 48262, "last_frame": 48267, "first_seen_epoch": "1634915457.261332", "last_seen_epoch": "1634915457.314776", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-72d3a1b75c4113d96d01b2e9", "transport": "tcp", "stream": 904, "initiator_ip": "10.10.22.157", "initiator_port": 50059, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48268, "last_frame": 48277, "first_seen_epoch": "1634915457.31553", "last_seen_epoch": "1634915457.621469", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f3b0207b38e7e179fcb2c184", "transport": "udp", "stream": 626, "initiator_ip": "10.10.22.157", "initiator_port": 57699, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 48284, "last_frame": 48285, "first_seen_epoch": "1634915461.651754", "last_seen_epoch": "1634915461.744642", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4d4a5d160dc7039ca7ae9375", "transport": "tcp", "stream": 905, "initiator_ip": "10.10.22.157", "initiator_port": 50060, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48286, "last_frame": 48291, "first_seen_epoch": "1634915461.745516", "last_seen_epoch": "1634915462.043342", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d7500869d295b556c65402a0", "transport": "tcp", "stream": 906, "initiator_ip": "10.10.22.157", "initiator_port": 50061, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48296, "last_frame": 48302, "first_seen_epoch": "1634915466.075147", "last_seen_epoch": "1634915466.402098", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bed2bcb6f2208db5879b034c", "transport": "tcp", "stream": 907, "initiator_ip": "10.10.22.157", "initiator_port": 50062, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48309, "last_frame": 48315, "first_seen_epoch": "1634915470.433888", "last_seen_epoch": "1634915470.746684", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-18248f45fb7ebf9b1d193742", "transport": "udp", "stream": 627, "initiator_ip": "10.10.22.156", "initiator_port": 62506, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48319, "last_frame": 48320, "first_seen_epoch": "1634915472.060838", "last_seen_epoch": "1634915472.061221", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-b5bba969a03318c775af0c27", "transport": "tcp", "stream": 908, "initiator_ip": "10.10.22.156", "initiator_port": 49926, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 48321, "last_frame": 48423, "first_seen_epoch": "1634915472.176664", "last_seen_epoch": "1634915472.872268", "packets": 12, "bytes": 1804, "initiator_bytes": 898, "responder_bytes": 906 }, { "flow_id": "flow-af86b84bf7d9fa5373f2d4a3", "transport": "tcp", "stream": 909, "initiator_ip": "10.10.22.156", "initiator_port": 49927, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 48328, "last_frame": 48422, "first_seen_epoch": "1634915472.181454", "last_seen_epoch": "1634915472.872166", "packets": 24, "bytes": 6883, "initiator_bytes": 4300, "responder_bytes": 2583 }, { "flow_id": "flow-db35c7873de449292ad9577f", "transport": "tcp", "stream": 910, "initiator_ip": "10.10.22.156", "initiator_port": 49928, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48351, "last_frame": 48387, "first_seen_epoch": "1634915472.194166", "last_seen_epoch": "1634915472.207665", "packets": 19, "bytes": 7310, "initiator_bytes": 3347, "responder_bytes": 3963 }, { "flow_id": "flow-628f5dc280d1bcaf1a029b9f", "transport": "tcp", "stream": 911, "initiator_ip": "10.10.22.156", "initiator_port": 49929, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48368, "last_frame": 48385, "first_seen_epoch": "1634915472.202579", "last_seen_epoch": "1634915472.207223", "packets": 18, "bytes": 6836, "initiator_bytes": 2803, "responder_bytes": 4033 }, { "flow_id": "flow-a88d5229528b3e09fca2e16a", "transport": "udp", "stream": 628, "initiator_ip": "10.10.22.156", "initiator_port": 49182, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48392, "last_frame": 48403, "first_seen_epoch": "1634915472.242241", "last_seen_epoch": "1634915472.31317", "packets": 3, "bytes": 474, "initiator_bytes": 170, "responder_bytes": 304 }, { "flow_id": "flow-e4cc01b2f67ff68fa44b9ee9", "transport": "udp", "stream": 629, "initiator_ip": "10.10.22.156", "initiator_port": 57723, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48395, "last_frame": 48396, "first_seen_epoch": "1634915472.278702", "last_seen_epoch": "1634915472.278982", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-3102685d02b8c5dbf6163ad9", "transport": "udp", "stream": 630, "initiator_ip": "10.10.22.156", "initiator_port": 57724, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48397, "last_frame": 48398, "first_seen_epoch": "1634915472.282048", "last_seen_epoch": "1634915472.282364", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-79d9c141810ce6805927c987", "transport": "udp", "stream": 631, "initiator_ip": "10.10.22.156", "initiator_port": 57662, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48399, "last_frame": 48400, "first_seen_epoch": "1634915472.296004", "last_seen_epoch": "1634915472.296287", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-829d296855365ce82435ce9e", "transport": "udp", "stream": 632, "initiator_ip": "10.10.22.156", "initiator_port": 57663, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48401, "last_frame": 48402, "first_seen_epoch": "1634915472.296869", "last_seen_epoch": "1634915472.297145", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-3f71d437e17b39f274eb17ef", "transport": "tcp", "stream": 912, "initiator_ip": "10.10.22.156", "initiator_port": 49930, "responder_ip": "40.126.28.11", "responder_port": 443, "first_frame": 48404, "last_frame": 48424, "first_seen_epoch": "1634915472.314548", "last_seen_epoch": "1634915472.872614", "packets": 19, "bytes": 6779, "initiator_bytes": 1512, "responder_bytes": 5267 }, { "flow_id": "flow-12605fc9e6840331681655d6", "transport": "udp", "stream": 633, "initiator_ip": "10.10.22.156", "initiator_port": 59129, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 48426, "last_frame": 48427, "first_seen_epoch": "1634915473.459094", "last_seen_epoch": "1634915473.459396", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-1a526c130d72a6b9581f27b3", "transport": "udp", "stream": 634, "initiator_ip": "10.10.22.156", "initiator_port": 59130, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 48428, "last_frame": 48429, "first_seen_epoch": "1634915473.462313", "last_seen_epoch": "1634915473.462651", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-ae2b95e421cab87d298c8b69", "transport": "tcp", "stream": 913, "initiator_ip": "10.10.22.157", "initiator_port": 50063, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48431, "last_frame": 48436, "first_seen_epoch": "1634915474.762378", "last_seen_epoch": "1634915475.072379", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3c8c6d1c79525dfa5e1af7b3", "transport": "udp", "stream": 635, "initiator_ip": "10.10.22.157", "initiator_port": 49532, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 48441, "last_frame": 48442, "first_seen_epoch": "1634915479.090276", "last_seen_epoch": "1634915479.193874", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0461e56a3c5308b99c1c8403", "transport": "tcp", "stream": 914, "initiator_ip": "10.10.22.157", "initiator_port": 50064, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 48443, "last_frame": 48449, "first_seen_epoch": "1634915479.194751", "last_seen_epoch": "1634915479.498043", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-beb5bcdba41dc5864e793fa8", "transport": "tcp", "stream": 915, "initiator_ip": "10.10.22.158", "initiator_port": 49840, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 48451, "last_frame": 51532, "first_seen_epoch": "1634915480.322259", "last_seen_epoch": "1634915548.862111", "packets": 19, "bytes": 9114, "initiator_bytes": 1987, "responder_bytes": 7127 }, { "flow_id": "flow-f8a7d02b33fd3e5730b716ac", "transport": "tcp", "stream": 916, "initiator_ip": "10.10.22.158", "initiator_port": 49841, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 48469, "last_frame": 51314, "first_seen_epoch": "1634915480.591021", "last_seen_epoch": "1634915545.127799", "packets": 538, "bytes": 473466, "initiator_bytes": 13176, "responder_bytes": 460290 }, { "flow_id": "flow-d0bbd7d57da522cd1a579701", "transport": "udp", "stream": 636, "initiator_ip": "10.10.22.157", "initiator_port": 59931, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 49009, "last_frame": 49010, "first_seen_epoch": "1634915483.513221", "last_seen_epoch": "1634915483.567843", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e5090682dfb2a81dcc3c9969", "transport": "tcp", "stream": 917, "initiator_ip": "10.10.22.157", "initiator_port": 50065, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49011, "last_frame": 49016, "first_seen_epoch": "1634915483.569195", "last_seen_epoch": "1634915483.88777", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-20d895f70ec94dc7a7cd279d", "transport": "udp", "stream": 637, "initiator_ip": "10.10.22.156", "initiator_port": 61190, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 49034, "last_frame": 49037, "first_seen_epoch": "1634915486.773687", "last_seen_epoch": "1634915486.826878", "packets": 3, "bytes": 445, "initiator_bytes": 146, "responder_bytes": 299 }, { "flow_id": "flow-51867b0214d3e224859787c9", "transport": "tcp", "stream": 918, "initiator_ip": "10.10.22.156", "initiator_port": 49931, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49038, "last_frame": 49281, "first_seen_epoch": "1634915486.827709", "last_seen_epoch": "1634915488.980219", "packets": 23, "bytes": 8084, "initiator_bytes": 1097, "responder_bytes": 6987 }, { "flow_id": "flow-65300188561aa99ed3568e48", "transport": "tcp", "stream": 919, "initiator_ip": "10.10.22.156", "initiator_port": 49932, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49039, "last_frame": 49285, "first_seen_epoch": "1634915486.828129", "last_seen_epoch": "1634915488.980524", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-8e305d3871195dfcd4c595ad", "transport": "tcp", "stream": 920, "initiator_ip": "10.10.22.156", "initiator_port": 49933, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49040, "last_frame": 49287, "first_seen_epoch": "1634915486.828457", "last_seen_epoch": "1634915488.980641", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-18a3fef755ce4dc11568afbb", "transport": "tcp", "stream": 921, "initiator_ip": "10.10.22.156", "initiator_port": 49934, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49041, "last_frame": 49300, "first_seen_epoch": "1634915486.828795", "last_seen_epoch": "1634915489.165462", "packets": 25, "bytes": 8192, "initiator_bytes": 1151, "responder_bytes": 7041 }, { "flow_id": "flow-0d9fc1f2ac2693dd1c281f75", "transport": "udp", "stream": 638, "initiator_ip": "10.10.22.157", "initiator_port": 51334, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 49147, "last_frame": 49148, "first_seen_epoch": "1634915487.904066", "last_seen_epoch": "1634915487.949808", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e419219abc7d7d5a4ff3c254", "transport": "tcp", "stream": 922, "initiator_ip": "10.10.22.157", "initiator_port": 50066, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49149, "last_frame": 49167, "first_seen_epoch": "1634915487.951146", "last_seen_epoch": "1634915488.27012", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a1eb141de0a25bf2022d2987", "transport": "tcp", "stream": 923, "initiator_ip": "10.10.22.156", "initiator_port": 49935, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49164, "last_frame": 49350, "first_seen_epoch": "1634915488.268623", "last_seen_epoch": "1634915490.12293", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-6c3b14105ec607053958709c", "transport": "tcp", "stream": 924, "initiator_ip": "10.10.22.156", "initiator_port": 49936, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49165, "last_frame": 49358, "first_seen_epoch": "1634915488.269354", "last_seen_epoch": "1634915490.127561", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-51c8c24a4ecb713574c9b56e", "transport": "tcp", "stream": 925, "initiator_ip": "10.10.22.156", "initiator_port": 49937, "responder_ip": "54.243.29.214", "responder_port": 443, "first_frame": 49166, "last_frame": 49346, "first_seen_epoch": "1634915488.269988", "last_seen_epoch": "1634915490.122567", "packets": 22, "bytes": 8030, "initiator_bytes": 1097, "responder_bytes": 6933 }, { "flow_id": "flow-7132c1660cf24652fa48e920", "transport": "udp", "stream": 639, "initiator_ip": "10.10.22.156", "initiator_port": 54455, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 49366, "last_frame": 49369, "first_seen_epoch": "1634915490.86716", "last_seen_epoch": "1634915490.920891", "packets": 3, "bytes": 433, "initiator_bytes": 150, "responder_bytes": 283 }, { "flow_id": "flow-8a4639b21ae63ca3b39cc57c", "transport": "tcp", "stream": 926, "initiator_ip": "10.10.22.156", "initiator_port": 49938, "responder_ip": "66.218.88.149", "responder_port": 995, "first_frame": 49370, "last_frame": 49384, "first_seen_epoch": "1634915490.921887", "last_seen_epoch": "1634915491.439609", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-a1bb4224830351561dc8a4a0", "transport": "udp", "stream": 640, "initiator_ip": "10.10.22.156", "initiator_port": 64616, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 49389, "last_frame": 49394, "first_seen_epoch": "1634915492.152219", "last_seen_epoch": "1634915492.456666", "packets": 3, "bytes": 269, "initiator_bytes": 152, "responder_bytes": 117 }, { "flow_id": "flow-9cb9e5cf849b1f3d63d881d5", "transport": "tcp", "stream": 927, "initiator_ip": "10.10.22.157", "initiator_port": 50067, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49393, "last_frame": 49404, "first_seen_epoch": "1634915492.292876", "last_seen_epoch": "1634915492.629333", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7d60134ead59b5f78e97f80c", "transport": "tcp", "stream": 928, "initiator_ip": "10.10.22.156", "initiator_port": 49939, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 49395, "last_frame": 51008, "first_seen_epoch": "1634915492.457695", "last_seen_epoch": "1634915534.493173", "packets": 52, "bytes": 9511, "initiator_bytes": 2272, "responder_bytes": 7239 }, { "flow_id": "flow-75ac9ccc558c1982eb840bba", "transport": "tcp", "stream": 929, "initiator_ip": "10.10.22.157", "initiator_port": 50068, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49464, "last_frame": 49469, "first_seen_epoch": "1634915496.637066", "last_seen_epoch": "1634915496.933079", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a2e3459d0d5450e35b20e2e3", "transport": "tcp", "stream": 930, "initiator_ip": "10.10.22.157", "initiator_port": 50069, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49501, "last_frame": 49508, "first_seen_epoch": "1634915500.950034", "last_seen_epoch": "1634915501.310253", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9dcef293bb9791a67a1c257a", "transport": "udp", "stream": 641, "initiator_ip": "10.10.22.157", "initiator_port": 61117, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 49513, "last_frame": 49514, "first_seen_epoch": "1634915505.325702", "last_seen_epoch": "1634915505.39341", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-bdbb81788be372d893b361a4", "transport": "tcp", "stream": 931, "initiator_ip": "10.10.22.157", "initiator_port": 50070, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49515, "last_frame": 49525, "first_seen_epoch": "1634915505.39439", "last_seen_epoch": "1634915508.841491", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-374b62b24cacb1822b2ce1da", "transport": "udp", "stream": 642, "initiator_ip": "10.10.22.157", "initiator_port": 54429, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 49531, "last_frame": 49532, "first_seen_epoch": "1634915512.85637", "last_seen_epoch": "1634915512.941604", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1e0119b01fca075c258d107f", "transport": "tcp", "stream": 932, "initiator_ip": "10.10.22.157", "initiator_port": 50071, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 49533, "last_frame": 49538, "first_seen_epoch": "1634915512.942952", "last_seen_epoch": "1634915513.234467", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b2327c6bd08e441b8f1d9f18", "transport": "tcp", "stream": 933, "initiator_ip": "10.10.22.156", "initiator_port": 49940, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 49548, "last_frame": 51789, "first_seen_epoch": "1634915514.654711", "last_seen_epoch": "1634915577.312249", "packets": 1283, "bytes": 1306389, "initiator_bytes": 22145, "responder_bytes": 1284244 }, { "flow_id": "flow-9629a682b2fe2ec6bd97c628", "transport": "udp", "stream": 643, "initiator_ip": "10.10.22.157", "initiator_port": 56380, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 50009, "last_frame": 50089, "first_seen_epoch": "1634915517.247298", "last_seen_epoch": "1634915517.337963", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3ba89919fe2e74ce61658b95", "transport": "tcp", "stream": 934, "initiator_ip": "10.10.22.157", "initiator_port": 50072, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 50090, "last_frame": 50875, "first_seen_epoch": "1634915517.338927", "last_seen_epoch": "1634915520.637754", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-0d11c17cf6b5b0b479166c41", "transport": "tcp", "stream": 935, "initiator_ip": "10.10.22.156", "initiator_port": 49941, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 50846, "last_frame": 51785, "first_seen_epoch": "1634915519.94029", "last_seen_epoch": "1634915577.311476", "packets": 21, "bytes": 3422, "initiator_bytes": 1657, "responder_bytes": 1765 }, { "flow_id": "flow-8d32c837d248fc1d52929350", "transport": "udp", "stream": 644, "initiator_ip": "10.10.22.156", "initiator_port": 61789, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 50847, "last_frame": 50848, "first_seen_epoch": "1634915519.961941", "last_seen_epoch": "1634915519.962205", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-c2feb8ae8dc0c172efacfc43", "transport": "udp", "stream": 645, "initiator_ip": "10.10.22.156", "initiator_port": 61790, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 50849, "last_frame": 50850, "first_seen_epoch": "1634915519.962711", "last_seen_epoch": "1634915519.96294", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-b9f74cef81e7e2748eed9124", "transport": "udp", "stream": 646, "initiator_ip": "10.10.22.156", "initiator_port": 60998, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 50855, "last_frame": 50856, "first_seen_epoch": "1634915520.094046", "last_seen_epoch": "1634915520.094319", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-6b68b6a13fe09cdbdabcbf0d", "transport": "udp", "stream": 647, "initiator_ip": "10.10.22.156", "initiator_port": 60999, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 50857, "last_frame": 50858, "first_seen_epoch": "1634915520.094954", "last_seen_epoch": "1634915520.095242", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-68022bfd2934217cde98fd81", "transport": "tcp", "stream": 936, "initiator_ip": "10.10.22.157", "initiator_port": 50073, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 50882, "last_frame": 50887, "first_seen_epoch": "1634915524.654359", "last_seen_epoch": "1634915524.986944", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1081ac7649f9d35d42d6982e", "transport": "tcp", "stream": 937, "initiator_ip": "10.10.22.157", "initiator_port": 50074, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 50900, "last_frame": 50912, "first_seen_epoch": "1634915528.997081", "last_seen_epoch": "1634915529.298814", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-e91bd8eaec130fbc9d24eae2", "transport": "udp", "stream": 648, "initiator_ip": "10.10.22.156", "initiator_port": 59700, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 50906, "last_frame": 50913, "first_seen_epoch": "1634915529.167235", "last_seen_epoch": "1634915529.455777", "packets": 3, "bytes": 269, "initiator_bytes": 152, "responder_bytes": 117 }, { "flow_id": "flow-5579b839b9d657891b1e8bd2", "transport": "tcp", "stream": 938, "initiator_ip": "10.10.22.156", "initiator_port": 49942, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 50914, "last_frame": 51747, "first_seen_epoch": "1634915529.456673", "last_seen_epoch": "1634915571.624229", "packets": 51, "bytes": 9441, "initiator_bytes": 2202, "responder_bytes": 7239 }, { "flow_id": "flow-3bb7cf0e5acbd8c03d523af3", "transport": "udp", "stream": 649, "initiator_ip": "10.10.22.157", "initiator_port": 63444, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 50932, "last_frame": 50933, "first_seen_epoch": "1634915531.001095", "last_seen_epoch": "1634915531.001414", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-95cbf91bd2703a0ebdf92e80", "transport": "udp", "stream": 650, "initiator_ip": "10.10.22.157", "initiator_port": 58575, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 50934, "last_frame": 50935, "first_seen_epoch": "1634915531.00188", "last_seen_epoch": "1634915531.002113", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-3da698f960bf07bd44d4a651", "transport": "tcp", "stream": 939, "initiator_ip": "10.10.22.157", "initiator_port": 50075, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 50981, "last_frame": 50986, "first_seen_epoch": "1634915533.310602", "last_seen_epoch": "1634915533.618047", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-41eaa175e4f2b662411a17f5", "transport": "udp", "stream": 651, "initiator_ip": "10.10.22.156", "initiator_port": 64076, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51023, "last_frame": 51024, "first_seen_epoch": "1634915535.203142", "last_seen_epoch": "1634915535.203404", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-a729fc9b9355e4a5d09cacb1", "transport": "udp", "stream": 652, "initiator_ip": "10.10.22.156", "initiator_port": 64077, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 51025, "last_frame": 51026, "first_seen_epoch": "1634915535.208283", "last_seen_epoch": "1634915535.208572", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-bd250e954506a67bfe3f500b", "transport": "udp", "stream": 653, "initiator_ip": "10.10.22.156", "initiator_port": 57434, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51027, "last_frame": 51028, "first_seen_epoch": "1634915535.217976", "last_seen_epoch": "1634915535.218273", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-6d6deff1383c4e431221b055", "transport": "udp", "stream": 654, "initiator_ip": "10.10.22.156", "initiator_port": 57435, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 51029, "last_frame": 51030, "first_seen_epoch": "1634915535.218888", "last_seen_epoch": "1634915535.219178", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-d5825d38eef8547d9546d82e", "transport": "udp", "stream": 655, "initiator_ip": "10.10.22.157", "initiator_port": 53962, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51040, "last_frame": 51042, "first_seen_epoch": "1634915537.622613", "last_seen_epoch": "1634915537.678265", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-477e127ef0f8e2623d8d0749", "transport": "tcp", "stream": 940, "initiator_ip": "10.10.22.157", "initiator_port": 50076, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51045, "last_frame": 51051, "first_seen_epoch": "1634915537.679357", "last_seen_epoch": "1634915537.982078", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d50f7d5df0bde296b43fff32", "transport": "udp", "stream": 656, "initiator_ip": "10.10.22.157", "initiator_port": 49835, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51056, "last_frame": 51057, "first_seen_epoch": "1634915541.998357", "last_seen_epoch": "1634915542.056761", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-143c67a36d9945004465c1b5", "transport": "tcp", "stream": 941, "initiator_ip": "10.10.22.157", "initiator_port": 50077, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51058, "last_frame": 51066, "first_seen_epoch": "1634915542.058087", "last_seen_epoch": "1634915542.352084", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-54433c542300a42799d0705a", "transport": "udp", "stream": 657, "initiator_ip": "10.10.22.156", "initiator_port": 49214, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51083, "last_frame": 51085, "first_seen_epoch": "1634915543.490135", "last_seen_epoch": "1634915543.523047", "packets": 3, "bytes": 445, "initiator_bytes": 146, "responder_bytes": 299 }, { "flow_id": "flow-298b5f83be06a5ff154287dc", "transport": "tcp", "stream": 942, "initiator_ip": "10.10.22.156", "initiator_port": 49943, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51086, "last_frame": 51332, "first_seen_epoch": "1634915543.52398", "last_seen_epoch": "1634915545.165958", "packets": 24, "bytes": 8138, "initiator_bytes": 1097, "responder_bytes": 7041 }, { "flow_id": "flow-3ced2447cda9b35175e87a97", "transport": "tcp", "stream": 943, "initiator_ip": "10.10.22.156", "initiator_port": 49944, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51087, "last_frame": 51365, "first_seen_epoch": "1634915543.524551", "last_seen_epoch": "1634915545.345789", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-213c09e37606f3293a7f4d65", "transport": "tcp", "stream": 944, "initiator_ip": "10.10.22.156", "initiator_port": 49945, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51088, "last_frame": 51322, "first_seen_epoch": "1634915543.525029", "last_seen_epoch": "1634915545.16107", "packets": 25, "bytes": 8192, "initiator_bytes": 1151, "responder_bytes": 7041 }, { "flow_id": "flow-f6e5c8a0d2c28684704eeb07", "transport": "tcp", "stream": 945, "initiator_ip": "10.10.22.156", "initiator_port": 49946, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51089, "last_frame": 51367, "first_seen_epoch": "1634915543.525431", "last_seen_epoch": "1634915545.346095", "packets": 23, "bytes": 8084, "initiator_bytes": 1151, "responder_bytes": 6933 }, { "flow_id": "flow-2fb204b4500882b579acc7de", "transport": "tcp", "stream": 946, "initiator_ip": "10.10.22.156", "initiator_port": 49947, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51090, "last_frame": 51371, "first_seen_epoch": "1634915543.525834", "last_seen_epoch": "1634915545.346411", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-e235c9efa546461939d47779", "transport": "tcp", "stream": 947, "initiator_ip": "10.10.22.156", "initiator_port": 49948, "responder_ip": "50.17.218.95", "responder_port": 443, "first_frame": 51091, "last_frame": 51361, "first_seen_epoch": "1634915543.526214", "last_seen_epoch": "1634915545.345328", "packets": 24, "bytes": 8138, "initiator_bytes": 1151, "responder_bytes": 6987 }, { "flow_id": "flow-9bc6ec7a4c976c400b7f3cfc", "transport": "udp", "stream": 658, "initiator_ip": "10.10.22.156", "initiator_port": 49917, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51117, "last_frame": 51120, "first_seen_epoch": "1634915543.670036", "last_seen_epoch": "1634915543.73877", "packets": 3, "bytes": 259, "initiator_bytes": 162, "responder_bytes": 97 }, { "flow_id": "flow-b2d7f9e40411055d6ba2ead9", "transport": "tcp", "stream": 948, "initiator_ip": "10.10.22.156", "initiator_port": 49949, "responder_ip": "108.168.133.76", "responder_port": 25, "first_frame": 51121, "last_frame": 51599, "first_seen_epoch": "1634915543.739829", "last_seen_epoch": "1634915550.888118", "packets": 55, "bytes": 9108, "initiator_bytes": 2275, "responder_bytes": 6833 }, { "flow_id": "flow-d162572f0d3c019892731d9b", "transport": "udp", "stream": 659, "initiator_ip": "10.10.22.157", "initiator_port": 61289, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51406, "last_frame": 51413, "first_seen_epoch": "1634915546.37475", "last_seen_epoch": "1634915546.425969", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-044591c06747d23c1ee432a0", "transport": "tcp", "stream": 949, "initiator_ip": "10.10.22.156", "initiator_port": 49950, "responder_ip": "142.250.114.28", "responder_port": 25, "first_frame": 51408, "last_frame": 51462, "first_seen_epoch": "1634915546.385409", "last_seen_epoch": "1634915547.121757", "packets": 9, "bytes": 561, "initiator_bytes": 282, "responder_bytes": 279 }, { "flow_id": "flow-a8b6c58dc54acb26a52a1934", "transport": "udp", "stream": 660, "initiator_ip": "10.10.22.156", "initiator_port": 62881, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51409, "last_frame": 51415, "first_seen_epoch": "1634915546.386041", "last_seen_epoch": "1634915546.430128", "packets": 3, "bytes": 256, "initiator_bytes": 160, "responder_bytes": 96 }, { "flow_id": "flow-6a105bf7984349e7c24a94af", "transport": "tcp", "stream": 950, "initiator_ip": "10.10.22.157", "initiator_port": 50078, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51414, "last_frame": 51438, "first_seen_epoch": "1634915546.427332", "last_seen_epoch": "1634915546.723572", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d841be7ce8d54b78c9399923", "transport": "tcp", "stream": 951, "initiator_ip": "10.10.22.156", "initiator_port": 49951, "responder_ip": "64.29.151.102", "responder_port": 110, "first_frame": 51416, "last_frame": 51476, "first_seen_epoch": "1634915546.431053", "last_seen_epoch": "1634915547.178397", "packets": 9, "bytes": 583, "initiator_bytes": 282, "responder_bytes": 301 }, { "flow_id": "flow-13ab0fe427f4bfa9e365d316", "transport": "udp", "stream": 661, "initiator_ip": "10.10.22.156", "initiator_port": 62832, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51449, "last_frame": 51452, "first_seen_epoch": "1634915547.030252", "last_seen_epoch": "1634915547.102831", "packets": 3, "bytes": 254, "initiator_bytes": 148, "responder_bytes": 106 }, { "flow_id": "flow-b5fc605aecff347097068118", "transport": "tcp", "stream": 952, "initiator_ip": "10.10.22.156", "initiator_port": 49952, "responder_ip": "142.250.114.109", "responder_port": 993, "first_frame": 51453, "last_frame": 51503, "first_seen_epoch": "1634915547.103867", "last_seen_epoch": "1634915547.686877", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-a3bd157d96e9f4ef117c6e7a", "transport": "tcp", "stream": 953, "initiator_ip": "10.10.22.156", "initiator_port": 49953, "responder_ip": "142.250.114.109", "responder_port": 993, "first_frame": 51456, "last_frame": 51504, "first_seen_epoch": "1634915547.104551", "last_seen_epoch": "1634915547.687078", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-c103d5797065af027aef11d3", "transport": "tcp", "stream": 954, "initiator_ip": "10.10.22.156", "initiator_port": 49954, "responder_ip": "66.218.88.149", "responder_port": 995, "first_frame": 51457, "last_frame": 51506, "first_seen_epoch": "1634915547.105168", "last_seen_epoch": "1634915547.720119", "packets": 7, "bytes": 394, "initiator_bytes": 228, "responder_bytes": 166 }, { "flow_id": "flow-f8fb4633e7910fd3ddeb41a6", "transport": "tcp", "stream": 955, "initiator_ip": "10.10.22.156", "initiator_port": 49955, "responder_ip": "142.250.114.28", "responder_port": 25, "first_frame": 51458, "last_frame": 51508, "first_seen_epoch": "1634915547.105636", "last_seen_epoch": "1634915547.745742", "packets": 9, "bytes": 560, "initiator_bytes": 282, "responder_bytes": 278 }, { "flow_id": "flow-706ee5d7873b92e843015196", "transport": "udp", "stream": 662, "initiator_ip": "10.10.22.156", "initiator_port": 49968, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51486, "last_frame": 51487, "first_seen_epoch": "1634915547.390996", "last_seen_epoch": "1634915547.391306", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-9d258459258a085f52790dae", "transport": "udp", "stream": 663, "initiator_ip": "10.10.22.156", "initiator_port": 52213, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51488, "last_frame": 51489, "first_seen_epoch": "1634915547.394327", "last_seen_epoch": "1634915547.394619", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-ac9d28760c5ee58672725c88", "transport": "udp", "stream": 664, "initiator_ip": "10.10.22.156", "initiator_port": 65446, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51513, "last_frame": 51515, "first_seen_epoch": "1634915548.731525", "last_seen_epoch": "1634915548.77474", "packets": 3, "bytes": 324, "initiator_bytes": 152, "responder_bytes": 172 }, { "flow_id": "flow-2ff5ff6cae682a9d5f6f3356", "transport": "tcp", "stream": 956, "initiator_ip": "10.10.22.156", "initiator_port": 49956, "responder_ip": "66.228.43.14", "responder_port": 2525, "first_frame": 51516, "last_frame": 51568, "first_seen_epoch": "1634915548.775952", "last_seen_epoch": "1634915549.574048", "packets": 11, "bytes": 730, "initiator_bytes": 336, "responder_bytes": 394 }, { "flow_id": "flow-ebed9eb143c0929e92c5b425", "transport": "tcp", "stream": 957, "initiator_ip": "10.10.22.156", "initiator_port": 49957, "responder_ip": "64.29.151.102", "responder_port": 143, "first_frame": 51517, "last_frame": 51564, "first_seen_epoch": "1634915548.776462", "last_seen_epoch": "1634915549.570828", "packets": 9, "bytes": 620, "initiator_bytes": 282, "responder_bytes": 338 }, { "flow_id": "flow-b8418d68ab0277a1d2a34676", "transport": "udp", "stream": 665, "initiator_ip": "10.10.22.158", "initiator_port": 58588, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51540, "last_frame": 51541, "first_seen_epoch": "1634915548.962584", "last_seen_epoch": "1634915548.962889", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-a9dd1e1a244676789d9439a4", "transport": "udp", "stream": 666, "initiator_ip": "10.10.22.158", "initiator_port": 63706, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51542, "last_frame": 51543, "first_seen_epoch": "1634915548.963372", "last_seen_epoch": "1634915548.963577", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-6ba0a46a1281d4cf839c0966", "transport": "tcp", "stream": 958, "initiator_ip": "10.10.22.157", "initiator_port": 50079, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51592, "last_frame": 51607, "first_seen_epoch": "1634915550.733439", "last_seen_epoch": "1634915551.059176", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a95a08b98876b486f7087381", "transport": "tcp", "stream": 959, "initiator_ip": "10.10.22.157", "initiator_port": 50080, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51615, "last_frame": 51623, "first_seen_epoch": "1634915555.063879", "last_seen_epoch": "1634915555.388462", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-007ce197c499393df95eda0a", "transport": "udp", "stream": 667, "initiator_ip": "10.10.22.156", "initiator_port": 57852, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51635, "last_frame": 51639, "first_seen_epoch": "1634915558.169085", "last_seen_epoch": "1634915558.288115", "packets": 3, "bytes": 301, "initiator_bytes": 156, "responder_bytes": 145 }, { "flow_id": "flow-223a4ea2174dfa87f6461348", "transport": "tcp", "stream": 960, "initiator_ip": "10.10.22.156", "initiator_port": 49958, "responder_ip": "208.68.106.6", "responder_port": 25, "first_frame": 51640, "last_frame": 51709, "first_seen_epoch": "1634915558.28933", "last_seen_epoch": "1634915563.896555", "packets": 29, "bytes": 2310, "initiator_bytes": 953, "responder_bytes": 1357 }, { "flow_id": "flow-486bbc91836be00d2d20b4fb", "transport": "tcp", "stream": 961, "initiator_ip": "10.10.22.157", "initiator_port": 50081, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51646, "last_frame": 51651, "first_seen_epoch": "1634915559.405475", "last_seen_epoch": "1634915559.729413", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0ed72d2f699062006bf7d91b", "transport": "udp", "stream": 668, "initiator_ip": "10.10.22.157", "initiator_port": 53709, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51701, "last_frame": 51705, "first_seen_epoch": "1634915563.732948", "last_seen_epoch": "1634915563.814827", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-fcfc2d89392ea84a26a088c3", "transport": "tcp", "stream": 962, "initiator_ip": "10.10.22.157", "initiator_port": 50082, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51706, "last_frame": 51714, "first_seen_epoch": "1634915563.816183", "last_seen_epoch": "1634915564.150476", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2e20153f00e6bc322dd4d876", "transport": "udp", "stream": 669, "initiator_ip": "10.10.22.157", "initiator_port": 61304, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51719, "last_frame": 51720, "first_seen_epoch": "1634915568.154298", "last_seen_epoch": "1634915568.217897", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8e4a4b1d9c20ef6443c45248", "transport": "tcp", "stream": 963, "initiator_ip": "10.10.22.157", "initiator_port": 50083, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51721, "last_frame": 51729, "first_seen_epoch": "1634915568.219238", "last_seen_epoch": "1634915568.507625", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-f662cbe00b078009ffb5a77a", "transport": "udp", "stream": 670, "initiator_ip": "10.10.22.157", "initiator_port": 50377, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 51755, "last_frame": 51756, "first_seen_epoch": "1634915572.516734", "last_seen_epoch": "1634915572.60031", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6e0329ecec08bb972adbc112", "transport": "tcp", "stream": 964, "initiator_ip": "10.10.22.157", "initiator_port": 50084, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51757, "last_frame": 51763, "first_seen_epoch": "1634915572.601779", "last_seen_epoch": "1634915572.923399", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-10044a29b5515168da809ffa", "transport": "tcp", "stream": 965, "initiator_ip": "10.10.22.157", "initiator_port": 50085, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51775, "last_frame": 51780, "first_seen_epoch": "1634915576.93763", "last_seen_epoch": "1634915577.247796", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-eebd6ee70e431871af725029", "transport": "tcp", "stream": 966, "initiator_ip": "10.10.22.156", "initiator_port": 49959, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 51796, "last_frame": 53082, "first_seen_epoch": "1634915578.977856", "last_seen_epoch": "1634915588.490403", "packets": 1167, "bytes": 1099347, "initiator_bytes": 23279, "responder_bytes": 1076068 }, { "flow_id": "flow-03b2076f1bb15d4327d32816", "transport": "udp", "stream": 671, "initiator_ip": "10.10.22.156", "initiator_port": 65343, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51808, "last_frame": 51809, "first_seen_epoch": "1634915579.258302", "last_seen_epoch": "1634915579.258589", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-34af0db60a981e8afa1ccf60", "transport": "udp", "stream": 672, "initiator_ip": "10.10.22.156", "initiator_port": 65344, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 51810, "last_frame": 51811, "first_seen_epoch": "1634915579.259287", "last_seen_epoch": "1634915579.259577", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-1f57a528953a8d90a082407b", "transport": "udp", "stream": 673, "initiator_ip": "10.10.22.156", "initiator_port": 55073, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 51818, "last_frame": 51821, "first_seen_epoch": "1634915579.498326", "last_seen_epoch": "1634915579.753138", "packets": 3, "bytes": 266, "initiator_bytes": 152, "responder_bytes": 114 }, { "flow_id": "flow-e5625b9b8c8dff73134be002", "transport": "tcp", "stream": 967, "initiator_ip": "10.10.22.156", "initiator_port": 49960, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 51822, "last_frame": 54011, "first_seen_epoch": "1634915579.753684", "last_seen_epoch": "1634915622.5123", "packets": 51, "bytes": 9458, "initiator_bytes": 2272, "responder_bytes": 7186 }, { "flow_id": "flow-c2052e1ec46a5c1c3411d71d", "transport": "tcp", "stream": 968, "initiator_ip": "10.10.22.157", "initiator_port": 50086, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 51877, "last_frame": 57255, "first_seen_epoch": "1634915581.265992", "last_seen_epoch": "1634915915.88371", "packets": 136, "bytes": 8216, "initiator_bytes": 4594, "responder_bytes": 3622 }, { "flow_id": "flow-ae58bcd34d34d0c31aecbf01", "transport": "tcp", "stream": 969, "initiator_ip": "10.10.22.156", "initiator_port": 49961, "responder_ip": "68.186.192.69", "responder_port": 443, "first_frame": 53109, "last_frame": 53920, "first_seen_epoch": "1634915600.552322", "last_seen_epoch": "1634915605.885421", "packets": 365, "bytes": 317452, "initiator_bytes": 8967, "responder_bytes": 308485 }, { "flow_id": "flow-94891f71382ae2f160aedd98", "transport": "tcp", "stream": 970, "initiator_ip": "10.10.22.156", "initiator_port": 49962, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 53126, "last_frame": 54964, "first_seen_epoch": "1634915602.29244", "last_seen_epoch": "1634915687.331933", "packets": 21, "bytes": 3449, "initiator_bytes": 1616, "responder_bytes": 1833 }, { "flow_id": "flow-1a1a6dbf45656dd9c57cee55", "transport": "tcp", "stream": 971, "initiator_ip": "10.10.22.156", "initiator_port": 49963, "responder_ip": "201.137.10.225", "responder_port": 443, "first_frame": 53261, "last_frame": 54960, "first_seen_epoch": "1634915603.564027", "last_seen_epoch": "1634915687.331498", "packets": 431, "bytes": 306395, "initiator_bytes": 292861, "responder_bytes": 13534 }, { "flow_id": "flow-98fd682238f179623f529ce2", "transport": "tcp", "stream": 972, "initiator_ip": "10.10.22.156", "initiator_port": 49964, "responder_ip": "83.243.251.46", "responder_port": 443, "first_frame": 53930, "last_frame": 54934, "first_seen_epoch": "1634915610.910877", "last_seen_epoch": "1634915686.236592", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-a64b85026f718601a28d5074", "transport": "udp", "stream": 674, "initiator_ip": "10.10.22.156", "initiator_port": 64028, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 53946, "last_frame": 53956, "first_seen_epoch": "1634915612.140267", "last_seen_epoch": "1634915616.07102", "packets": 5, "bytes": 411, "initiator_bytes": 316, "responder_bytes": 95 }, { "flow_id": "flow-a472e6b5a7a6cd1f35fdfb11", "transport": "tcp", "stream": 973, "initiator_ip": "10.10.22.156", "initiator_port": 49965, "responder_ip": "197.221.10.57", "responder_port": 25, "first_frame": 53957, "last_frame": 54168, "first_seen_epoch": "1634915616.072189", "last_seen_epoch": "1634915628.938166", "packets": 52, "bytes": 8921, "initiator_bytes": 2052, "responder_bytes": 6869 }, { "flow_id": "flow-7167cfb7cc65b0cffc68c8c5", "transport": "tcp", "stream": 974, "initiator_ip": "10.10.22.156", "initiator_port": 49966, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 54057, "last_frame": 54808, "first_seen_epoch": "1634915624.226013", "last_seen_epoch": "1634915666.751767", "packets": 51, "bytes": 9458, "initiator_bytes": 2218, "responder_bytes": 7240 }, { "flow_id": "flow-86760f22d64f1294cef17b48", "transport": "tcp", "stream": 975, "initiator_ip": "10.10.22.156", "initiator_port": 49967, "responder_ip": "83.243.251.46", "responder_port": 443, "first_frame": 54114, "last_frame": 55160, "first_seen_epoch": "1634915626.955407", "last_seen_epoch": "1634915702.28151", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7e626780273762d73f46fe11", "transport": "udp", "stream": 675, "initiator_ip": "10.10.22.156", "initiator_port": 49836, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 54177, "last_frame": 54181, "first_seen_epoch": "1634915629.22224", "last_seen_epoch": "1634915629.326249", "packets": 3, "bytes": 280, "initiator_bytes": 176, "responder_bytes": 104 }, { "flow_id": "flow-23001893bc5db5f3d8492a8a", "transport": "tcp", "stream": 976, "initiator_ip": "10.10.22.156", "initiator_port": 49968, "responder_ip": "65.254.248.195", "responder_port": 25, "first_frame": 54182, "last_frame": 54327, "first_seen_epoch": "1634915629.327572", "last_seen_epoch": "1634915637.31354", "packets": 49, "bytes": 7947, "initiator_bytes": 2011, "responder_bytes": 5936 }, { "flow_id": "flow-ea5f710131fca90ea0cd998a", "transport": "udp", "stream": 676, "initiator_ip": "10.10.22.156", "initiator_port": 58511, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 54347, "last_frame": 54361, "first_seen_epoch": "1634915639.507085", "last_seen_epoch": "1634915643.830713", "packets": 5, "bytes": 438, "initiator_bytes": 312, "responder_bytes": 126 }, { "flow_id": "flow-655ea7c25f487660d6b9fd0d", "transport": "tcp", "stream": 977, "initiator_ip": "10.10.22.156", "initiator_port": 49969, "responder_ip": "217.11.242.15", "responder_port": 25, "first_frame": 54362, "last_frame": 54547, "first_seen_epoch": "1634915643.831915", "last_seen_epoch": "1634915650.723787", "packets": 53, "bytes": 11789, "initiator_bytes": 1997, "responder_bytes": 9792 }, { "flow_id": "flow-5e5bffb4ba314c29124517e2", "transport": "tcp", "stream": 978, "initiator_ip": "10.10.22.156", "initiator_port": 49970, "responder_ip": "83.243.251.46", "responder_port": 443, "first_frame": 54368, "last_frame": 55416, "first_seen_epoch": "1634915645.017961", "last_seen_epoch": "1634915720.348494", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-cbcd64b73f2433522be0280b", "transport": "udp", "stream": 677, "initiator_ip": "10.10.22.156", "initiator_port": 61093, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 54427, "last_frame": 54431, "first_seen_epoch": "1634915647.142244", "last_seen_epoch": "1634915647.306081", "packets": 3, "bytes": 278, "initiator_bytes": 158, "responder_bytes": 120 }, { "flow_id": "flow-68aea727c836a349af0303b2", "transport": "tcp", "stream": 979, "initiator_ip": "10.10.22.156", "initiator_port": 49971, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 54432, "last_frame": 55021, "first_seen_epoch": "1634915647.307288", "last_seen_epoch": "1634915689.588199", "packets": 52, "bytes": 9514, "initiator_bytes": 2275, "responder_bytes": 7239 }, { "flow_id": "flow-e47794f895ef2fad7fd48b9e", "transport": "udp", "stream": 678, "initiator_ip": "10.10.22.156", "initiator_port": 65320, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 54595, "last_frame": 54596, "first_seen_epoch": "1634915655.861428", "last_seen_epoch": "1634915655.894902", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-5cf7553e7cb2663af48db79b", "transport": "tcp", "stream": 980, "initiator_ip": "10.10.22.156", "initiator_port": 49972, "responder_ip": "52.96.22.178", "responder_port": 25, "first_frame": 54597, "last_frame": 54864, "first_seen_epoch": "1634915655.896042", "last_seen_epoch": "1634915673.51286", "packets": 53, "bytes": 9028, "initiator_bytes": 2151, "responder_bytes": 6877 }, { "flow_id": "flow-b2f1d0a4732bff0a22219b87", "transport": "tcp", "stream": 981, "initiator_ip": "10.10.22.156", "initiator_port": 49973, "responder_ip": "52.96.22.178", "responder_port": 25, "first_frame": 54674, "last_frame": 54886, "first_seen_epoch": "1634915658.949005", "last_seen_epoch": "1634915675.712082", "packets": 54, "bytes": 9062, "initiator_bytes": 2185, "responder_bytes": 6877 }, { "flow_id": "flow-4507802e096a2494b32367e9", "transport": "tcp", "stream": 982, "initiator_ip": "10.10.22.156", "initiator_port": 49974, "responder_ip": "83.243.251.46", "responder_port": 443, "first_frame": 54743, "last_frame": 55520, "first_seen_epoch": "1634915661.051376", "last_seen_epoch": "1634915736.285185", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-a5c728e0c2880eb7e74942f4", "transport": "tcp", "stream": 983, "initiator_ip": "10.10.22.156", "initiator_port": 49975, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 54902, "last_frame": 54918, "first_seen_epoch": "1634915682.147153", "last_seen_epoch": "1634915685.226956", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-503eb0db4128e18782654c4f", "transport": "udp", "stream": 679, "initiator_ip": "10.10.22.156", "initiator_port": 50215, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 54921, "last_frame": 54922, "first_seen_epoch": "1634915685.499305", "last_seen_epoch": "1634915685.543598", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-9f35ab5006664c60984c5802", "transport": "tcp", "stream": 984, "initiator_ip": "10.10.22.156", "initiator_port": 49976, "responder_ip": "40.97.121.18", "responder_port": 25, "first_frame": 54923, "last_frame": 55177, "first_seen_epoch": "1634915685.544857", "last_seen_epoch": "1634915703.523052", "packets": 51, "bytes": 8926, "initiator_bytes": 2097, "responder_bytes": 6829 }, { "flow_id": "flow-34380632fdb94336bf435f26", "transport": "tcp", "stream": 985, "initiator_ip": "10.10.22.156", "initiator_port": 49975, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 54925, "last_frame": 54989, "first_seen_epoch": "1634915685.734702", "last_seen_epoch": "1634915688.287935", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fe5c1b6379cec9ec9993474f", "transport": "tcp", "stream": 986, "initiator_ip": "10.10.22.156", "initiator_port": 49975, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 54999, "last_frame": 55050, "first_seen_epoch": "1634915688.799222", "last_seen_epoch": "1634915694.404774", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-21e539cbf648c1a1cd737150", "transport": "tcp", "stream": 987, "initiator_ip": "10.10.22.156", "initiator_port": 49977, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55051, "last_frame": 55062, "first_seen_epoch": "1634915694.407163", "last_seen_epoch": "1634915697.434376", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-f5a7c4edba7a01a7dc27e307", "transport": "tcp", "stream": 988, "initiator_ip": "10.10.22.156", "initiator_port": 49977, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55067, "last_frame": 55079, "first_seen_epoch": "1634915697.938894", "last_seen_epoch": "1634915700.689366", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-71556f374cd624eb34b6025d", "transport": "udp", "stream": 680, "initiator_ip": "10.10.22.157", "initiator_port": 51337, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55080, "last_frame": 55081, "first_seen_epoch": "1634915700.708092", "last_seen_epoch": "1634915700.708374", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-eebf0bb76b3234266a6a52fb", "transport": "udp", "stream": 681, "initiator_ip": "10.10.22.157", "initiator_port": 51338, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 55082, "last_frame": 55083, "first_seen_epoch": "1634915700.709164", "last_seen_epoch": "1634915700.709464", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-919149c843d3e723d3398115", "transport": "tcp", "stream": 989, "initiator_ip": "10.10.22.157", "initiator_port": 50087, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 55084, "last_frame": 55153, "first_seen_epoch": "1634915700.842174", "last_seen_epoch": "1634915700.869582", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-b710344d60fd1a8f492e642f", "transport": "tcp", "stream": 990, "initiator_ip": "10.10.22.157", "initiator_port": 50088, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 55091, "last_frame": 55154, "first_seen_epoch": "1634915700.84674", "last_seen_epoch": "1634915700.86968", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-2cf35516bd5be3841ff2cdf3", "transport": "tcp", "stream": 991, "initiator_ip": "10.10.22.157", "initiator_port": 50089, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 55114, "last_frame": 55152, "first_seen_epoch": "1634915700.856144", "last_seen_epoch": "1634915700.86718", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-4abb97c24658039ac7dce2f2", "transport": "tcp", "stream": 992, "initiator_ip": "10.10.22.157", "initiator_port": 50090, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 55131, "last_frame": 55148, "first_seen_epoch": "1634915700.862664", "last_seen_epoch": "1634915700.86681", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-1e40f2cbff04f61531cec664", "transport": "tcp", "stream": 993, "initiator_ip": "10.10.22.156", "initiator_port": 49977, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55155, "last_frame": 55181, "first_seen_epoch": "1634915701.189658", "last_seen_epoch": "1634915703.542511", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-08c805e90078a72a8e195dbb", "transport": "tcp", "stream": 994, "initiator_ip": "10.10.22.156", "initiator_port": 49978, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55184, "last_frame": 55187, "first_seen_epoch": "1634915705.550875", "last_seen_epoch": "1634915706.586465", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-cafb37b3206e6c7fc7afa7b0", "transport": "tcp", "stream": 995, "initiator_ip": "10.10.22.156", "initiator_port": 49978, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55188, "last_frame": 55194, "first_seen_epoch": "1634915707.094812", "last_seen_epoch": "1634915709.70096", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-0fb295ed7b83641cec7a40a7", "transport": "tcp", "stream": 996, "initiator_ip": "10.10.22.156", "initiator_port": 49978, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55195, "last_frame": 55227, "first_seen_epoch": "1634915710.205529", "last_seen_epoch": "1634915712.712556", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-76764a28599a317596aaec88", "transport": "udp", "stream": 682, "initiator_ip": "10.10.22.156", "initiator_port": 56831, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55207, "last_frame": 55212, "first_seen_epoch": "1634915711.706754", "last_seen_epoch": "1634915711.820815", "packets": 3, "bytes": 277, "initiator_bytes": 174, "responder_bytes": 103 }, { "flow_id": "flow-57526ab75ec45c140bace00d", "transport": "tcp", "stream": 997, "initiator_ip": "10.10.22.156", "initiator_port": 49979, "responder_ip": "70.39.150.220", "responder_port": 25, "first_frame": 55213, "last_frame": 55405, "first_seen_epoch": "1634915711.821687", "last_seen_epoch": "1634915719.763956", "packets": 51, "bytes": 9729, "initiator_bytes": 2068, "responder_bytes": 7661 }, { "flow_id": "flow-c592d122e15e5b9450cb262e", "transport": "tcp", "stream": 998, "initiator_ip": "10.10.22.156", "initiator_port": 49978, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55239, "last_frame": 55280, "first_seen_epoch": "1634915713.235838", "last_seen_epoch": "1634915715.845122", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-35fc1eb46f64ad80e561cb08", "transport": "tcp", "stream": 999, "initiator_ip": "10.10.22.156", "initiator_port": 49980, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55282, "last_frame": 55368, "first_seen_epoch": "1634915715.847503", "last_seen_epoch": "1634915718.810982", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-9db56082f5e80d72fcd440f9", "transport": "tcp", "stream": 1000, "initiator_ip": "10.10.22.156", "initiator_port": 49981, "responder_ip": "70.39.150.220", "responder_port": 25, "first_frame": 55310, "last_frame": 55488, "first_seen_epoch": "1634915716.808938", "last_seen_epoch": "1634915731.874165", "packets": 51, "bytes": 9729, "initiator_bytes": 2068, "responder_bytes": 7661 }, { "flow_id": "flow-d9124060a60dae2ac65e440c", "transport": "tcp", "stream": 1001, "initiator_ip": "10.10.22.156", "initiator_port": 49980, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55382, "last_frame": 55423, "first_seen_epoch": "1634915719.314789", "last_seen_epoch": "1634915721.904547", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-52ddcdd6cd01e1c75ca95a54", "transport": "udp", "stream": 683, "initiator_ip": "10.10.22.156", "initiator_port": 54297, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55418, "last_frame": 55443, "first_seen_epoch": "1634915720.446277", "last_seen_epoch": "1634915728.597238", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-3b9a4d8a6f884b86b7346b14", "transport": "tcp", "stream": 1002, "initiator_ip": "10.10.22.156", "initiator_port": 49980, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55425, "last_frame": 55435, "first_seen_epoch": "1634915722.409457", "last_seen_epoch": "1634915724.958744", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ee859bb3ed0d484daa0edf1d", "transport": "tcp", "stream": 1003, "initiator_ip": "10.10.22.156", "initiator_port": 49980, "responder_ip": "187.250.109.250", "responder_port": 443, "first_frame": 55437, "last_frame": 55441, "first_seen_epoch": "1634915725.487147", "last_seen_epoch": "1634915728.030879", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-da7b4d510d9b89b1f21b72b7", "transport": "tcp", "stream": 1004, "initiator_ip": "10.10.22.156", "initiator_port": 49982, "responder_ip": "189.210.115.207", "responder_port": 443, "first_frame": 55496, "last_frame": 56002, "first_seen_epoch": "1634915733.037953", "last_seen_epoch": "1634915808.19769", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-2c3c749e89590271efb58ccf", "transport": "udp", "stream": 684, "initiator_ip": "10.10.22.156", "initiator_port": 60011, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55513, "last_frame": 55538, "first_seen_epoch": "1634915734.730177", "last_seen_epoch": "1634915743.112516", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-3158aac44b7f51aeb7e6e438", "transport": "udp", "stream": 685, "initiator_ip": "10.10.22.156", "initiator_port": 64975, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55547, "last_frame": 55551, "first_seen_epoch": "1634915744.549818", "last_seen_epoch": "1634915744.596738", "packets": 4, "bytes": 614, "initiator_bytes": 152, "responder_bytes": 462 }, { "flow_id": "flow-03fb75963e7357f0895290d5", "transport": "tcp", "stream": 1005, "initiator_ip": "10.10.22.156", "initiator_port": 49983, "responder_ip": "52.96.121.194", "responder_port": 25, "first_frame": 55552, "last_frame": 55770, "first_seen_epoch": "1634915744.599786", "last_seen_epoch": "1634915762.11333", "packets": 53, "bytes": 9016, "initiator_bytes": 2151, "responder_bytes": 6865 }, { "flow_id": "flow-a9a8ba06fdc8911bf44fdeb5", "transport": "tcp", "stream": 1006, "initiator_ip": "10.10.22.156", "initiator_port": 49984, "responder_ip": "189.210.115.207", "responder_port": 443, "first_frame": 55619, "last_frame": 56132, "first_seen_epoch": "1634915749.067845", "last_seen_epoch": "1634915824.21878", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-9d7e9144226985a0b0784148", "transport": "udp", "stream": 686, "initiator_ip": "10.10.22.157", "initiator_port": 52934, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55651, "last_frame": 55652, "first_seen_epoch": "1634915751.20968", "last_seen_epoch": "1634915751.209906", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-c237f845516fa3327c864f44", "transport": "udp", "stream": 687, "initiator_ip": "10.10.22.157", "initiator_port": 55382, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 55653, "last_frame": 55653, "first_seen_epoch": "1634915751.210002", "last_seen_epoch": "1634915751.210002", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-3508d5c70a231cb726421ca4", "transport": "udp", "stream": 688, "initiator_ip": "10.10.22.157", "initiator_port": 64545, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55654, "last_frame": 55655, "first_seen_epoch": "1634915751.211365", "last_seen_epoch": "1634915751.212115", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-01280cf39e744ce8c322895a", "transport": "tcp", "stream": 1007, "initiator_ip": "10.10.22.158", "initiator_port": 49842, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 55670, "last_frame": 56612, "first_seen_epoch": "1634915754.780413", "last_seen_epoch": "1634915864.767205", "packets": 21, "bytes": 5138, "initiator_bytes": 1747, "responder_bytes": 3391 }, { "flow_id": "flow-934cca113dc43d99b21fd2f4", "transport": "tcp", "stream": 1008, "initiator_ip": "10.10.22.157", "initiator_port": 50091, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 55679, "last_frame": 55786, "first_seen_epoch": "1634915755.027118", "last_seen_epoch": "1634915765.771567", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-6df3e0f50713b154e7c7bd7b", "transport": "udp", "stream": 689, "initiator_ip": "10.10.22.157", "initiator_port": 59551, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55720, "last_frame": 55722, "first_seen_epoch": "1634915757.323029", "last_seen_epoch": "1634915757.416872", "packets": 3, "bytes": 397, "initiator_bytes": 178, "responder_bytes": 219 }, { "flow_id": "flow-4275d1698b6b60621c49c600", "transport": "tcp", "stream": 1009, "initiator_ip": "10.10.22.157", "initiator_port": 50092, "responder_ip": "13.89.178.27", "responder_port": 443, "first_frame": 55723, "last_frame": 55747, "first_seen_epoch": "1634915757.418438", "last_seen_epoch": "1634915758.205986", "packets": 23, "bytes": 8327, "initiator_bytes": 2811, "responder_bytes": 5516 }, { "flow_id": "flow-f376b960308e9d791c2fb993", "transport": "tcp", "stream": 1010, "initiator_ip": "10.10.22.156", "initiator_port": 49985, "responder_ip": "189.210.115.207", "responder_port": 443, "first_frame": 55790, "last_frame": 56334, "first_seen_epoch": "1634915767.161825", "last_seen_epoch": "1634915842.342278", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-158f4f6d3f6f5a1fc5c16631", "transport": "tcp", "stream": 1011, "initiator_ip": "10.10.22.156", "initiator_port": 49986, "responder_ip": "189.210.115.207", "responder_port": 443, "first_frame": 55820, "last_frame": 56564, "first_seen_epoch": "1634915783.209653", "last_seen_epoch": "1634915858.400418", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7e0771aa8df07c5b96f2c30e", "transport": "udp", "stream": 690, "initiator_ip": "10.10.22.156", "initiator_port": 65278, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55847, "last_frame": 55850, "first_seen_epoch": "1634915788.551718", "last_seen_epoch": "1634915788.989651", "packets": 3, "bytes": 260, "initiator_bytes": 146, "responder_bytes": 114 }, { "flow_id": "flow-1c8c45fd4b9103cd0299df6d", "transport": "tcp", "stream": 1012, "initiator_ip": "10.10.22.156", "initiator_port": 49987, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 55851, "last_frame": 56259, "first_seen_epoch": "1634915788.990427", "last_seen_epoch": "1634915830.272941", "packets": 55, "bytes": 9654, "initiator_bytes": 2307, "responder_bytes": 7347 }, { "flow_id": "flow-1ed3a5d8c32a47486e439721", "transport": "udp", "stream": 691, "initiator_ip": "10.10.22.156", "initiator_port": 55051, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 55891, "last_frame": 55894, "first_seen_epoch": "1634915790.804635", "last_seen_epoch": "1634915790.948301", "packets": 3, "bytes": 280, "initiator_bytes": 176, "responder_bytes": 104 }, { "flow_id": "flow-633fd9f069ea915fcb773b00", "transport": "tcp", "stream": 1013, "initiator_ip": "10.10.22.156", "initiator_port": 49988, "responder_ip": "34.193.71.224", "responder_port": 25, "first_frame": 55895, "last_frame": 55991, "first_seen_epoch": "1634915790.950017", "last_seen_epoch": "1634915801.428973", "packets": 7, "bytes": 612, "initiator_bytes": 228, "responder_bytes": 384 }, { "flow_id": "flow-df4442307a60baa82da8f76f", "transport": "tcp", "stream": 1014, "initiator_ip": "10.10.22.156", "initiator_port": 49989, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56007, "last_frame": 56032, "first_seen_epoch": "1634915811.308522", "last_seen_epoch": "1634915814.561132", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-5602167af92dcf03c838abad", "transport": "udp", "stream": 692, "initiator_ip": "10.10.22.156", "initiator_port": 63533, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56016, "last_frame": 56020, "first_seen_epoch": "1634915811.899276", "last_seen_epoch": "1634915811.90045", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-10a9d470cd69c805064e5ae0", "transport": "udp", "stream": 693, "initiator_ip": "10.10.22.156", "initiator_port": 64539, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 56019, "last_frame": 56019, "first_seen_epoch": "1634915811.900108", "last_seen_epoch": "1634915811.900108", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-2022ac3396f11c3e81043207", "transport": "tcp", "stream": 1015, "initiator_ip": "10.10.22.156", "initiator_port": 49989, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56035, "last_frame": 56073, "first_seen_epoch": "1634915815.06653", "last_seen_epoch": "1634915817.744306", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-67178a3c334f3193ebbadf70", "transport": "tcp", "stream": 1016, "initiator_ip": "10.10.22.156", "initiator_port": 49990, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 56036, "last_frame": 56161, "first_seen_epoch": "1634915815.10441", "last_seen_epoch": "1634915825.866418", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-b0c43723de54c2bdcb1ee5eb", "transport": "udp", "stream": 694, "initiator_ip": "10.10.22.156", "initiator_port": 55510, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56068, "last_frame": 56135, "first_seen_epoch": "1634915817.067518", "last_seen_epoch": "1634915824.915652", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-58800fbc819003524e07d072", "transport": "udp", "stream": 695, "initiator_ip": "10.10.22.156", "initiator_port": 60687, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56075, "last_frame": 56078, "first_seen_epoch": "1634915818.089794", "last_seen_epoch": "1634915818.130774", "packets": 3, "bytes": 399, "initiator_bytes": 178, "responder_bytes": 221 }, { "flow_id": "flow-25b1a33810debec57428b317", "transport": "tcp", "stream": 1017, "initiator_ip": "10.10.22.156", "initiator_port": 49991, "responder_ip": "20.50.80.210", "responder_port": 443, "first_frame": 56079, "last_frame": 56107, "first_seen_epoch": "1634915818.133813", "last_seen_epoch": "1634915819.201798", "packets": 23, "bytes": 8574, "initiator_bytes": 3008, "responder_bytes": 5566 }, { "flow_id": "flow-4b507a0c935b8182c76993a6", "transport": "tcp", "stream": 1018, "initiator_ip": "10.10.22.156", "initiator_port": 49989, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56083, "last_frame": 56118, "first_seen_epoch": "1634915818.271409", "last_seen_epoch": "1634915820.815503", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-429338f3574aba9a908d6795", "transport": "tcp", "stream": 1019, "initiator_ip": "10.10.22.156", "initiator_port": 49992, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56119, "last_frame": 56129, "first_seen_epoch": "1634915820.818455", "last_seen_epoch": "1634915823.917737", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-ee792c6b350ffbe69683e947", "transport": "tcp", "stream": 1020, "initiator_ip": "10.10.22.156", "initiator_port": 49992, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56134, "last_frame": 56195, "first_seen_epoch": "1634915824.426924", "last_seen_epoch": "1634915826.999642", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3bfc90a23fce2d6c50ea7bbb", "transport": "udp", "stream": 696, "initiator_ip": "10.10.22.156", "initiator_port": 60220, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56145, "last_frame": 56147, "first_seen_epoch": "1634915825.580857", "last_seen_epoch": "1634915825.621", "packets": 3, "bytes": 250, "initiator_bytes": 156, "responder_bytes": 94 }, { "flow_id": "flow-834a861d88f529c5abc2fcee", "transport": "tcp", "stream": 1021, "initiator_ip": "10.10.22.156", "initiator_port": 49993, "responder_ip": "65.111.191.196", "responder_port": 25, "first_frame": 56148, "last_frame": 56303, "first_seen_epoch": "1634915825.622021", "last_seen_epoch": "1634915833.435686", "packets": 57, "bytes": 9083, "initiator_bytes": 2252, "responder_bytes": 6831 }, { "flow_id": "flow-ee71584db1adf6a3e14211c0", "transport": "tcp", "stream": 1022, "initiator_ip": "10.10.22.156", "initiator_port": 49992, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56209, "last_frame": 56246, "first_seen_epoch": "1634915827.504462", "last_seen_epoch": "1634915830.007796", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9e8727cb6c86c946a339c4d3", "transport": "tcp", "stream": 1023, "initiator_ip": "10.10.22.156", "initiator_port": 49994, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56267, "last_frame": 56294, "first_seen_epoch": "1634915832.022579", "last_seen_epoch": "1634915833.144919", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-596457d3dec53a115b649304", "transport": "tcp", "stream": 1024, "initiator_ip": "10.10.22.156", "initiator_port": 49994, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56308, "last_frame": 56317, "first_seen_epoch": "1634915833.662295", "last_seen_epoch": "1634915836.371937", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5e8d913abecc3f82f5c43aea", "transport": "udp", "stream": 697, "initiator_ip": "10.10.22.156", "initiator_port": 55358, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56310, "last_frame": 56314, "first_seen_epoch": "1634915835.05384", "last_seen_epoch": "1634915835.125936", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-df5b5110aa7c0a2da8df7a78", "transport": "tcp", "stream": 1025, "initiator_ip": "10.10.22.156", "initiator_port": 49994, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56318, "last_frame": 56325, "first_seen_epoch": "1634915836.87993", "last_seen_epoch": "1634915839.444205", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-63e0de817354c2c5f3422cee", "transport": "tcp", "stream": 1026, "initiator_ip": "10.10.22.156", "initiator_port": 49994, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56326, "last_frame": 56335, "first_seen_epoch": "1634915839.958733", "last_seen_epoch": "1634915842.516051", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-c629faaf4d476fe161588410", "transport": "tcp", "stream": 1027, "initiator_ip": "10.10.22.156", "initiator_port": 49995, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56336, "last_frame": 56360, "first_seen_epoch": "1634915842.51913", "last_seen_epoch": "1634915845.623271", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-2960e84c52383948e34e9d8f", "transport": "udp", "stream": 698, "initiator_ip": "10.10.22.158", "initiator_port": 61733, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56343, "last_frame": 56345, "first_seen_epoch": "1634915843.577936", "last_seen_epoch": "1634915843.578231", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-fbff89bfba60e30bf9a03dab", "transport": "udp", "stream": 699, "initiator_ip": "10.10.22.158", "initiator_port": 49466, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 56348, "last_frame": 56348, "first_seen_epoch": "1634915843.579402", "last_seen_epoch": "1634915843.579402", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-ac42ef2c0f27b0ce288fad56", "transport": "udp", "stream": 700, "initiator_ip": "10.10.22.158", "initiator_port": 64611, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56349, "last_frame": 56351, "first_seen_epoch": "1634915843.580566", "last_seen_epoch": "1634915843.581725", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-cc6065ce65ff2511e71c67d3", "transport": "tcp", "stream": 1028, "initiator_ip": "10.10.22.158", "initiator_port": 49843, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 56361, "last_frame": 56559, "first_seen_epoch": "1634915846.005823", "last_seen_epoch": "1634915856.799002", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-7a1b1e600d26344039d57171", "transport": "tcp", "stream": 1029, "initiator_ip": "10.10.22.156", "initiator_port": 49995, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56380, "last_frame": 56387, "first_seen_epoch": "1634915846.129694", "last_seen_epoch": "1634915848.866373", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-09238b99c89d9eb181de3c13", "transport": "udp", "stream": 701, "initiator_ip": "10.10.22.158", "initiator_port": 62517, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56388, "last_frame": 56389, "first_seen_epoch": "1634915849.019882", "last_seen_epoch": "1634915849.071661", "packets": 2, "bytes": 310, "initiator_bytes": 89, "responder_bytes": 221 }, { "flow_id": "flow-6d995e81594d06593cbc449c", "transport": "tcp", "stream": 1030, "initiator_ip": "10.10.22.158", "initiator_port": 49844, "responder_ip": "20.50.80.210", "responder_port": 443, "first_frame": 56390, "last_frame": 56415, "first_seen_epoch": "1634915849.073362", "last_seen_epoch": "1634915850.206996", "packets": 23, "bytes": 8472, "initiator_bytes": 2906, "responder_bytes": 5566 }, { "flow_id": "flow-5e2135c199b39bb531b192b5", "transport": "tcp", "stream": 1031, "initiator_ip": "10.10.22.156", "initiator_port": 49995, "responder_ip": "86.8.177.143", "responder_port": 443, "first_frame": 56396, "last_frame": 56423, "first_seen_epoch": "1634915849.381768", "last_seen_epoch": "1634915852.039506", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-77e5e5fa603fd8dff7800089", "transport": "tcp", "stream": 1032, "initiator_ip": "10.10.22.156", "initiator_port": 49996, "responder_ip": "10.10.22.158", "responder_port": 445, "first_frame": 56428, "last_frame": 56590, "first_seen_epoch": "1634915852.261932", "last_seen_epoch": "1634915862.99187", "packets": 22, "bytes": 4350, "initiator_bytes": 2220, "responder_bytes": 2130 }, { "flow_id": "flow-b17fd52026c3a4d264c30b0f", "transport": "udp", "stream": 702, "initiator_ip": "10.10.22.158", "initiator_port": 62518, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 56438, "last_frame": 56439, "first_seen_epoch": "1634915852.299258", "last_seen_epoch": "1634915852.299634", "packets": 2, "bytes": 540, "initiator_bytes": 308, "responder_bytes": 232 }, { "flow_id": "flow-bf67851be1cef2a04685e6d6", "transport": "tcp", "stream": 1033, "initiator_ip": "10.10.22.158", "initiator_port": 49845, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 56441, "last_frame": 56605, "first_seen_epoch": "1634915852.407802", "last_seen_epoch": "1634915864.59647", "packets": 12, "bytes": 1376, "initiator_bytes": 718, "responder_bytes": 658 }, { "flow_id": "flow-72ec0c77fc95aa0c72af3e79", "transport": "tcp", "stream": 1034, "initiator_ip": "10.10.22.158", "initiator_port": 49846, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 56448, "last_frame": 56606, "first_seen_epoch": "1634915852.410629", "last_seen_epoch": "1634915864.596647", "packets": 14, "bytes": 5144, "initiator_bytes": 2776, "responder_bytes": 2368 }, { "flow_id": "flow-488e35682abc6577112cc991", "transport": "tcp", "stream": 1035, "initiator_ip": "10.10.22.156", "initiator_port": 49997, "responder_ip": "10.10.22.158", "responder_port": 135, "first_frame": 56460, "last_frame": 57192, "first_seen_epoch": "1634915852.422618", "last_seen_epoch": "1634915912.25945", "packets": 12, "bytes": 1180, "initiator_bytes": 662, "responder_bytes": 518 }, { "flow_id": "flow-4bc9d16788a60e783fc50003", "transport": "tcp", "stream": 1036, "initiator_ip": "10.10.22.156", "initiator_port": 49998, "responder_ip": "10.10.22.158", "responder_port": 49699, "first_frame": 56467, "last_frame": 57188, "first_seen_epoch": "1634915852.424992", "last_seen_epoch": "1634915912.258688", "packets": 14, "bytes": 2104, "initiator_bytes": 1318, "responder_bytes": 786 }, { "flow_id": "flow-4cead4c8b8dbd49a64f6f348", "transport": "tcp", "stream": 1037, "initiator_ip": "10.10.22.156", "initiator_port": 49999, "responder_ip": "10.10.22.157", "responder_port": 445, "first_frame": 56482, "last_frame": 56589, "first_seen_epoch": "1634915852.444866", "last_seen_epoch": "1634915862.991708", "packets": 22, "bytes": 4350, "initiator_bytes": 2220, "responder_bytes": 2130 }, { "flow_id": "flow-dabc84947b36be46f408753e", "transport": "udp", "stream": 703, "initiator_ip": "10.10.22.157", "initiator_port": 59552, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 56494, "last_frame": 56495, "first_seen_epoch": "1634915852.467159", "last_seen_epoch": "1634915852.467521", "packets": 2, "bytes": 540, "initiator_bytes": 308, "responder_bytes": 232 }, { "flow_id": "flow-77537307ea1d564ed6d94f19", "transport": "tcp", "stream": 1038, "initiator_ip": "10.10.22.157", "initiator_port": 50093, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 56500, "last_frame": 56629, "first_seen_epoch": "1634915852.569599", "last_seen_epoch": "1634915867.460734", "packets": 14, "bytes": 1764, "initiator_bytes": 784, "responder_bytes": 980 }, { "flow_id": "flow-807627820f825410f966142c", "transport": "tcp", "stream": 1039, "initiator_ip": "10.10.22.157", "initiator_port": 50094, "responder_ip": "10.10.22.22", "responder_port": 49671, "first_frame": 56507, "last_frame": 56630, "first_seen_epoch": "1634915852.571545", "last_seen_epoch": "1634915867.460854", "packets": 16, "bytes": 6216, "initiator_bytes": 2842, "responder_bytes": 3374 }, { "flow_id": "flow-b41318fb7704bc56026f9329", "transport": "tcp", "stream": 1040, "initiator_ip": "10.10.22.156", "initiator_port": 50000, "responder_ip": "10.10.22.157", "responder_port": 135, "first_frame": 56519, "last_frame": 57184, "first_seen_epoch": "1634915852.579218", "last_seen_epoch": "1634915912.257984", "packets": 12, "bytes": 1180, "initiator_bytes": 662, "responder_bytes": 518 }, { "flow_id": "flow-a1e9b345a3fcb65d8db7773f", "transport": "tcp", "stream": 1041, "initiator_ip": "10.10.22.156", "initiator_port": 50001, "responder_ip": "10.10.22.157", "responder_port": 49696, "first_frame": 56526, "last_frame": 57180, "first_seen_epoch": "1634915852.581204", "last_seen_epoch": "1634915912.257612", "packets": 14, "bytes": 2104, "initiator_bytes": 1318, "responder_bytes": 786 }, { "flow_id": "flow-5a5ed596457aca9cba8e6654", "transport": "tcp", "stream": 1042, "initiator_ip": "10.10.22.156", "initiator_port": 50002, "responder_ip": "94.200.181.154", "responder_port": 443, "first_frame": 56560, "last_frame": 57654, "first_seen_epoch": "1634915857.05775", "last_seen_epoch": "1634915932.350253", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-e6b1d99a8cae76c4f9c09d60", "transport": "udp", "stream": 704, "initiator_ip": "10.10.22.156", "initiator_port": 62299, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56592, "last_frame": 56641, "first_seen_epoch": "1634915863.166672", "last_seen_epoch": "1634915871.126057", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-6cc748c130d6c2bd0ed36284", "transport": "udp", "stream": 705, "initiator_ip": "10.10.22.156", "initiator_port": 53726, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56651, "last_frame": 56655, "first_seen_epoch": "1634915872.12771", "last_seen_epoch": "1634915872.51922", "packets": 3, "bytes": 250, "initiator_bytes": 156, "responder_bytes": 94 }, { "flow_id": "flow-43b6b930a7e565f60e7c50f5", "transport": "tcp", "stream": 1043, "initiator_ip": "10.10.22.156", "initiator_port": 50003, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 56656, "last_frame": 56708, "first_seen_epoch": "1634915872.520196", "last_seen_epoch": "1634915883.976308", "packets": 6, "bytes": 423, "initiator_bytes": 228, "responder_bytes": 195 }, { "flow_id": "flow-038cfa0452ee3798bfff1ce6", "transport": "tcp", "stream": 1044, "initiator_ip": "10.10.22.156", "initiator_port": 50004, "responder_ip": "94.200.181.154", "responder_port": 443, "first_frame": 56662, "last_frame": 57705, "first_seen_epoch": "1634915873.102493", "last_seen_epoch": "1634915948.394599", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-71d3bf824d993ed6bf1ddc73", "transport": "udp", "stream": 706, "initiator_ip": "10.10.22.156", "initiator_port": 63923, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56681, "last_frame": 56707, "first_seen_epoch": "1634915875.903759", "last_seen_epoch": "1634915883.975322", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-53afba5048422c5bf6f7972b", "transport": "udp", "stream": 707, "initiator_ip": "10.10.22.156", "initiator_port": 55917, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56718, "last_frame": 56721, "first_seen_epoch": "1634915884.753429", "last_seen_epoch": "1634915884.889335", "packets": 3, "bytes": 290, "initiator_bytes": 166, "responder_bytes": 124 }, { "flow_id": "flow-ad94caad694c153faca9b3e0", "transport": "tcp", "stream": 1045, "initiator_ip": "10.10.22.156", "initiator_port": 50005, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 56722, "last_frame": 57546, "first_seen_epoch": "1634915884.890429", "last_seen_epoch": "1634915926.996533", "packets": 51, "bytes": 9497, "initiator_bytes": 2241, "responder_bytes": 7256 }, { "flow_id": "flow-5175bdd70c3f43684bbba629", "transport": "tcp", "stream": 1046, "initiator_ip": "10.10.22.156", "initiator_port": 50006, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 56739, "last_frame": 57071, "first_seen_epoch": "1634915885.678617", "last_seen_epoch": "1634915899.145818", "packets": 50, "bytes": 8786, "initiator_bytes": 1997, "responder_bytes": 6789 }, { "flow_id": "flow-f8e01615c552031581ea70f8", "transport": "tcp", "stream": 1047, "initiator_ip": "10.10.22.156", "initiator_port": 50007, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 56770, "last_frame": 57598, "first_seen_epoch": "1634915886.98056", "last_seen_epoch": "1634915928.738024", "packets": 54, "bytes": 9658, "initiator_bytes": 2349, "responder_bytes": 7309 }, { "flow_id": "flow-f2b94e65db1bfda52a1ef7c8", "transport": "tcp", "stream": 1048, "initiator_ip": "10.10.22.156", "initiator_port": 50008, "responder_ip": "94.200.181.154", "responder_port": 443, "first_frame": 56894, "last_frame": 57765, "first_seen_epoch": "1634915891.147243", "last_seen_epoch": "1634915966.391004", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-7c66d3ef62a44383d9e035db", "transport": "udp", "stream": 708, "initiator_ip": "10.10.22.156", "initiator_port": 53707, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 56964, "last_frame": 56966, "first_seen_epoch": "1634915893.752985", "last_seen_epoch": "1634915893.822917", "packets": 3, "bytes": 336, "initiator_bytes": 182, "responder_bytes": 154 }, { "flow_id": "flow-5b6633a80f57d94d778db18b", "transport": "tcp", "stream": 1049, "initiator_ip": "10.10.22.156", "initiator_port": 50009, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 56967, "last_frame": 57002, "first_seen_epoch": "1634915893.823638", "last_seen_epoch": "1634915894.319749", "packets": 30, "bytes": 8375, "initiator_bytes": 3123, "responder_bytes": 5252 }, { "flow_id": "flow-5306a8357c936f89212b33d4", "transport": "tcp", "stream": 1050, "initiator_ip": "10.10.22.156", "initiator_port": 50010, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 57095, "last_frame": 57266, "first_seen_epoch": "1634915903.180777", "last_seen_epoch": "1634915916.656867", "packets": 51, "bytes": 8840, "initiator_bytes": 2051, "responder_bytes": 6789 }, { "flow_id": "flow-6b4336972d0be3502b816916", "transport": "tcp", "stream": 1051, "initiator_ip": "10.10.22.156", "initiator_port": 50011, "responder_ip": "94.200.181.154", "responder_port": 443, "first_frame": 57110, "last_frame": 57916, "first_seen_epoch": "1634915907.213138", "last_seen_epoch": "1634915982.457296", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-ef173cf74aae9f54516576e8", "transport": "tcp", "stream": 1052, "initiator_ip": "10.10.22.156", "initiator_port": 50012, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 57223, "last_frame": 57515, "first_seen_epoch": "1634915914.479511", "last_seen_epoch": "1634915925.973768", "packets": 50, "bytes": 8786, "initiator_bytes": 1997, "responder_bytes": 6789 }, { "flow_id": "flow-2f32a72d4f6bacda71a15b3a", "transport": "tcp", "stream": 1053, "initiator_ip": "10.10.22.156", "initiator_port": 50013, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 57240, "last_frame": 57570, "first_seen_epoch": "1634915915.198127", "last_seen_epoch": "1634915927.546747", "packets": 53, "bytes": 8948, "initiator_bytes": 2051, "responder_bytes": 6897 }, { "flow_id": "flow-a58b056e688419d854124e68", "transport": "tcp", "stream": 1054, "initiator_ip": "10.10.22.156", "initiator_port": 50014, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 57290, "last_frame": 57645, "first_seen_epoch": "1634915918.321483", "last_seen_epoch": "1634915931.963663", "packets": 51, "bytes": 8840, "initiator_bytes": 1997, "responder_bytes": 6843 }, { "flow_id": "flow-a68adeae2cd4a9e5ad15c076", "transport": "tcp", "stream": 1055, "initiator_ip": "10.10.22.157", "initiator_port": 50095, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57316, "last_frame": 57330, "first_seen_epoch": "1634915919.916028", "last_seen_epoch": "1634915920.220221", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2bb508c09749623f20516aff", "transport": "udp", "stream": 709, "initiator_ip": "10.10.22.157", "initiator_port": 49696, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57446, "last_frame": 57448, "first_seen_epoch": "1634915924.227907", "last_seen_epoch": "1634915924.332745", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-696ea56ce3b874eb8ee3fd18", "transport": "tcp", "stream": 1056, "initiator_ip": "10.10.22.157", "initiator_port": 50096, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57449, "last_frame": 57574, "first_seen_epoch": "1634915924.334505", "last_seen_epoch": "1634915927.81374", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-5cc6dd2ad19650a51c22b7dd", "transport": "tcp", "stream": 1057, "initiator_ip": "10.10.22.156", "initiator_port": 50015, "responder_ip": "73.77.87.137", "responder_port": 443, "first_frame": 57583, "last_frame": 58180, "first_seen_epoch": "1634915928.261449", "last_seen_epoch": "1634916003.467998", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-b18a7c210eacba2789c54c5a", "transport": "udp", "stream": 710, "initiator_ip": "10.10.22.157", "initiator_port": 57770, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57635, "last_frame": 57637, "first_seen_epoch": "1634915931.822036", "last_seen_epoch": "1634915931.912642", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-595efdd02e9bf0497d54373a", "transport": "tcp", "stream": 1058, "initiator_ip": "10.10.22.157", "initiator_port": 50097, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57638, "last_frame": 57652, "first_seen_epoch": "1634915931.913599", "last_seen_epoch": "1634915932.24284", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3dffa8b9275f2f67a190dc8f", "transport": "udp", "stream": 711, "initiator_ip": "10.10.22.157", "initiator_port": 54796, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57665, "last_frame": 57667, "first_seen_epoch": "1634915936.258767", "last_seen_epoch": "1634915936.325824", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ddb5b65d7285dac53ed9bc95", "transport": "tcp", "stream": 1059, "initiator_ip": "10.10.22.157", "initiator_port": 50098, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57668, "last_frame": 57673, "first_seen_epoch": "1634915936.327176", "last_seen_epoch": "1634915936.638502", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a842f869b54ea5dcb0afbecf", "transport": "tcp", "stream": 1060, "initiator_ip": "10.10.22.157", "initiator_port": 50099, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57681, "last_frame": 57686, "first_seen_epoch": "1634915940.649385", "last_seen_epoch": "1634915940.979707", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0f8a0b29c2ea87b7e21124f8", "transport": "tcp", "stream": 1061, "initiator_ip": "10.10.22.156", "initiator_port": 50016, "responder_ip": "73.77.87.137", "responder_port": 443, "first_frame": 57692, "last_frame": 58421, "first_seen_epoch": "1634915944.322186", "last_seen_epoch": "1634916019.570673", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-be50d42c4f10b4e73024d2dc", "transport": "tcp", "stream": 1062, "initiator_ip": "10.10.22.157", "initiator_port": 50100, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57693, "last_frame": 57699, "first_seen_epoch": "1634915944.994166", "last_seen_epoch": "1634915945.291158", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-272f5a49f528a12361465453", "transport": "tcp", "stream": 1063, "initiator_ip": "10.10.22.157", "initiator_port": 50101, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57707, "last_frame": 57712, "first_seen_epoch": "1634915949.304802", "last_seen_epoch": "1634915949.602952", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-19f4c00d01b0c0c091cc43db", "transport": "udp", "stream": 712, "initiator_ip": "10.10.22.157", "initiator_port": 55111, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57720, "last_frame": 57721, "first_seen_epoch": "1634915953.618068", "last_seen_epoch": "1634915953.687284", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d0c99e81cfc0a003a79eca48", "transport": "tcp", "stream": 1064, "initiator_ip": "10.10.22.157", "initiator_port": 50102, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57722, "last_frame": 57729, "first_seen_epoch": "1634915953.688418", "last_seen_epoch": "1634915954.058187", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-c3e968a72ebecccf34015c3d", "transport": "udp", "stream": 713, "initiator_ip": "10.10.22.157", "initiator_port": 63650, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57734, "last_frame": 57735, "first_seen_epoch": "1634915958.087086", "last_seen_epoch": "1634915958.153284", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5ea050ac4ba03a452cef7d7d", "transport": "tcp", "stream": 1065, "initiator_ip": "10.10.22.157", "initiator_port": 50103, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57736, "last_frame": 57742, "first_seen_epoch": "1634915958.154642", "last_seen_epoch": "1634915958.482343", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-329776a255e7963c1bae326f", "transport": "tcp", "stream": 1066, "initiator_ip": "10.10.22.156", "initiator_port": 50017, "responder_ip": "73.77.87.137", "responder_port": 443, "first_frame": 57748, "last_frame": 58559, "first_seen_epoch": "1634915962.38386", "last_seen_epoch": "1634916037.660177", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c7c461f90a287d46b18b7af7", "transport": "udp", "stream": 714, "initiator_ip": "10.10.22.157", "initiator_port": 60195, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57749, "last_frame": 57750, "first_seen_epoch": "1634915962.494873", "last_seen_epoch": "1634915962.579221", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8854589d1fc2d8bd3655d872", "transport": "tcp", "stream": 1067, "initiator_ip": "10.10.22.157", "initiator_port": 50104, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57751, "last_frame": 57756, "first_seen_epoch": "1634915962.580632", "last_seen_epoch": "1634915962.871401", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a74b7662bda29ecc29c97848", "transport": "tcp", "stream": 1068, "initiator_ip": "10.10.22.157", "initiator_port": 50105, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57767, "last_frame": 57774, "first_seen_epoch": "1634915966.885435", "last_seen_epoch": "1634915967.20736", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-442046cea2272c0744b88f2c", "transport": "tcp", "stream": 1069, "initiator_ip": "10.10.22.157", "initiator_port": 50106, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57792, "last_frame": 57807, "first_seen_epoch": "1634915971.227709", "last_seen_epoch": "1634915971.55419", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dbdd8e1bf510e1b31db076b6", "transport": "udp", "stream": 715, "initiator_ip": "10.10.22.156", "initiator_port": 60100, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 57799, "last_frame": 57800, "first_seen_epoch": "1634915971.437623", "last_seen_epoch": "1634915971.491138", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-e6f6b5ed31b1e165a4ab53ef", "transport": "tcp", "stream": 1070, "initiator_ip": "10.10.22.156", "initiator_port": 50018, "responder_ip": "52.96.55.242", "responder_port": 25, "first_frame": 57802, "last_frame": 58104, "first_seen_epoch": "1634915971.492369", "last_seen_epoch": "1634915992.450611", "packets": 53, "bytes": 9006, "initiator_bytes": 2139, "responder_bytes": 6867 }, { "flow_id": "flow-fb5c3aaf2922891a0abd24a0", "transport": "tcp", "stream": 1071, "initiator_ip": "10.10.22.157", "initiator_port": 50107, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57877, "last_frame": 57886, "first_seen_epoch": "1634915975.572709", "last_seen_epoch": "1634915975.860617", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8c489ad0161c52038b72cd8d", "transport": "tcp", "stream": 1072, "initiator_ip": "10.10.22.156", "initiator_port": 50019, "responder_ip": "73.77.87.137", "responder_port": 443, "first_frame": 57899, "last_frame": 58688, "first_seen_epoch": "1634915978.448137", "last_seen_epoch": "1634916053.708567", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-4dd50932e3ba8153825b9ba8", "transport": "udp", "stream": 716, "initiator_ip": "10.10.22.157", "initiator_port": 54314, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57902, "last_frame": 57903, "first_seen_epoch": "1634915979.869481", "last_seen_epoch": "1634915979.926263", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4a0cd846e962f3f59ca66527", "transport": "tcp", "stream": 1073, "initiator_ip": "10.10.22.157", "initiator_port": 50108, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57904, "last_frame": 57911, "first_seen_epoch": "1634915979.927136", "last_seen_epoch": "1634915980.207606", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5b285d8a864e881ca78b10a5", "transport": "udp", "stream": 717, "initiator_ip": "10.10.22.157", "initiator_port": 54990, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57926, "last_frame": 57927, "first_seen_epoch": "1634915984.213613", "last_seen_epoch": "1634915984.266132", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0a021b8083b5de0f40b5fd46", "transport": "tcp", "stream": 1074, "initiator_ip": "10.10.22.157", "initiator_port": 50109, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 57928, "last_frame": 57937, "first_seen_epoch": "1634915984.267456", "last_seen_epoch": "1634915984.547943", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6bccf5cf4cd14440beb851aa", "transport": "udp", "stream": 718, "initiator_ip": "10.10.22.156", "initiator_port": 51737, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 57935, "last_frame": 57939, "first_seen_epoch": "1634915984.476336", "last_seen_epoch": "1634915984.768572", "packets": 3, "bytes": 275, "initiator_bytes": 156, "responder_bytes": 119 }, { "flow_id": "flow-bd2db90375e28dbe6d0169b1", "transport": "tcp", "stream": 1075, "initiator_ip": "10.10.22.156", "initiator_port": 50020, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 57940, "last_frame": 58457, "first_seen_epoch": "1634915984.769621", "last_seen_epoch": "1634916027.310388", "packets": 53, "bytes": 9568, "initiator_bytes": 2274, "responder_bytes": 7294 }, { "flow_id": "flow-6553a02a987cb434e910b875", "transport": "udp", "stream": 719, "initiator_ip": "10.10.22.157", "initiator_port": 63847, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 57998, "last_frame": 57999, "first_seen_epoch": "1634915988.558556", "last_seen_epoch": "1634915988.614487", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-80b749870cd336fa6f9b22d7", "transport": "tcp", "stream": 1076, "initiator_ip": "10.10.22.157", "initiator_port": 50110, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58000, "last_frame": 58008, "first_seen_epoch": "1634915988.615833", "last_seen_epoch": "1634915988.906738", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4ada7d2fd60cbcd2f72345f4", "transport": "udp", "stream": 720, "initiator_ip": "10.10.22.157", "initiator_port": 63455, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58021, "last_frame": 58026, "first_seen_epoch": "1634915989.434794", "last_seen_epoch": "1634915989.502323", "packets": 3, "bytes": 336, "initiator_bytes": 182, "responder_bytes": 154 }, { "flow_id": "flow-8a05546daf4e36c6e87763a6", "transport": "tcp", "stream": 1077, "initiator_ip": "10.10.22.157", "initiator_port": 50111, "responder_ip": "52.183.220.149", "responder_port": 443, "first_frame": 58027, "last_frame": 58066, "first_seen_epoch": "1634915989.503911", "last_seen_epoch": "1634915989.887665", "packets": 28, "bytes": 8377, "initiator_bytes": 3114, "responder_bytes": 5263 }, { "flow_id": "flow-5cfb047b431ea903abe2ec7c", "transport": "tcp", "stream": 1078, "initiator_ip": "10.10.22.156", "initiator_port": 50021, "responder_ip": "34.193.71.224", "responder_port": 25, "first_frame": 58043, "last_frame": 58156, "first_seen_epoch": "1634915989.649224", "last_seen_epoch": "1634916000.459063", "packets": 9, "bytes": 720, "initiator_bytes": 282, "responder_bytes": 438 }, { "flow_id": "flow-53fbca4e567e67c33894516c", "transport": "tcp", "stream": 1079, "initiator_ip": "10.10.22.157", "initiator_port": 50112, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58108, "last_frame": 58116, "first_seen_epoch": "1634915992.917316", "last_seen_epoch": "1634915993.222105", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0a898770ddc6ea74ed21c6c4", "transport": "tcp", "stream": 1080, "initiator_ip": "10.10.22.157", "initiator_port": 50113, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58134, "last_frame": 58140, "first_seen_epoch": "1634915997.231131", "last_seen_epoch": "1634915997.545158", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e8b74797e0ead439cf5ab99e", "transport": "udp", "stream": 721, "initiator_ip": "10.10.22.156", "initiator_port": 53259, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58161, "last_frame": 58164, "first_seen_epoch": "1634916001.036727", "last_seen_epoch": "1634916001.176536", "packets": 3, "bytes": 251, "initiator_bytes": 146, "responder_bytes": 105 }, { "flow_id": "flow-7b407b0c194273ac30d10d13", "transport": "tcp", "stream": 1081, "initiator_ip": "10.10.22.156", "initiator_port": 50022, "responder_ip": "31.193.50.122", "responder_port": 25, "first_frame": 58165, "last_frame": 58301, "first_seen_epoch": "1634916001.177618", "last_seen_epoch": "1634916012.650796", "packets": 50, "bytes": 8375, "initiator_bytes": 2471, "responder_bytes": 5904 }, { "flow_id": "flow-08048bde57e9a953d7aa50d8", "transport": "tcp", "stream": 1082, "initiator_ip": "10.10.22.157", "initiator_port": 50114, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58171, "last_frame": 58176, "first_seen_epoch": "1634916001.556399", "last_seen_epoch": "1634916001.849509", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-51cee909c523fcab86a83051", "transport": "udp", "stream": 722, "initiator_ip": "10.10.22.157", "initiator_port": 52956, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58183, "last_frame": 58184, "first_seen_epoch": "1634916005.870223", "last_seen_epoch": "1634916005.945531", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2e46c06942bf6a8b9d428f64", "transport": "tcp", "stream": 1083, "initiator_ip": "10.10.22.157", "initiator_port": 50115, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58185, "last_frame": 58190, "first_seen_epoch": "1634916005.94681", "last_seen_epoch": "1634916006.242147", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1dbb204d355c6bfa55e88e06", "transport": "tcp", "stream": 1084, "initiator_ip": "10.10.22.156", "initiator_port": 50023, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 58192, "last_frame": 59230, "first_seen_epoch": "1634916006.499164", "last_seen_epoch": "1634916081.776888", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-52a406ff04fa0ae0dc952bb1", "transport": "udp", "stream": 723, "initiator_ip": "10.10.22.157", "initiator_port": 57838, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58245, "last_frame": 58251, "first_seen_epoch": "1634916010.245828", "last_seen_epoch": "1634916010.308034", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ef323855bddbf9eac02ef4f7", "transport": "tcp", "stream": 1085, "initiator_ip": "10.10.22.157", "initiator_port": 50116, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58252, "last_frame": 58257, "first_seen_epoch": "1634916010.309269", "last_seen_epoch": "1634916010.60021", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8bc81f396b526ed690bc8792", "transport": "udp", "stream": 724, "initiator_ip": "10.10.22.157", "initiator_port": 63997, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58316, "last_frame": 58317, "first_seen_epoch": "1634916014.605498", "last_seen_epoch": "1634916014.662693", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-693072bcba65bf67f9c45075", "transport": "tcp", "stream": 1086, "initiator_ip": "10.10.22.157", "initiator_port": 50117, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58318, "last_frame": 58326, "first_seen_epoch": "1634916014.663636", "last_seen_epoch": "1634916014.970095", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f60b675668ba4a8cb8d8dee1", "transport": "udp", "stream": 725, "initiator_ip": "10.10.22.156", "initiator_port": 57838, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58328, "last_frame": 58329, "first_seen_epoch": "1634916015.11351", "last_seen_epoch": "1634916015.150564", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-420833b40f9101201b591f09", "transport": "tcp", "stream": 1087, "initiator_ip": "10.10.22.156", "initiator_port": 50024, "responder_ip": "40.97.199.114", "responder_port": 25, "first_frame": 58330, "last_frame": 58523, "first_seen_epoch": "1634916015.151582", "last_seen_epoch": "1634916034.101874", "packets": 51, "bytes": 8900, "initiator_bytes": 2081, "responder_bytes": 6819 }, { "flow_id": "flow-fce97fb4915b41305f64badf", "transport": "tcp", "stream": 1088, "initiator_ip": "10.10.22.157", "initiator_port": 50118, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58403, "last_frame": 58420, "first_seen_epoch": "1634916018.978464", "last_seen_epoch": "1634916019.517519", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-6604662b7c3786906359a9b0", "transport": "tcp", "stream": 1089, "initiator_ip": "10.10.22.156", "initiator_port": 50025, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 58428, "last_frame": 59386, "first_seen_epoch": "1634916022.52942", "last_seen_epoch": "1634916097.778808", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-9bb5e0bb521b3d4dab792655", "transport": "tcp", "stream": 1090, "initiator_ip": "10.10.22.157", "initiator_port": 50119, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58430, "last_frame": 58436, "first_seen_epoch": "1634916023.52808", "last_seen_epoch": "1634916023.822378", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dbf608697ad764e059d29c07", "transport": "tcp", "stream": 1091, "initiator_ip": "10.10.22.157", "initiator_port": 50120, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58464, "last_frame": 58469, "first_seen_epoch": "1634916027.83885", "last_seen_epoch": "1634916028.154507", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e53add31d2f29f659e77cfb3", "transport": "tcp", "stream": 1092, "initiator_ip": "10.10.22.156", "initiator_port": 50026, "responder_ip": "31.193.50.122", "responder_port": 25, "first_frame": 58492, "last_frame": 58644, "first_seen_epoch": "1634916030.246006", "last_seen_epoch": "1634916041.50122", "packets": 49, "bytes": 8321, "initiator_bytes": 2417, "responder_bytes": 5904 }, { "flow_id": "flow-f2435395412698e4bd866cfe", "transport": "udp", "stream": 726, "initiator_ip": "10.10.22.157", "initiator_port": 56008, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58500, "last_frame": 58501, "first_seen_epoch": "1634916032.168693", "last_seen_epoch": "1634916032.248286", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2393626019f9f55bbccabad2", "transport": "tcp", "stream": 1093, "initiator_ip": "10.10.22.157", "initiator_port": 50121, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58502, "last_frame": 58508, "first_seen_epoch": "1634916032.249624", "last_seen_epoch": "1634916032.553687", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d96f175edd2ca2c0cd7de514", "transport": "udp", "stream": 727, "initiator_ip": "10.10.22.157", "initiator_port": 55657, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58529, "last_frame": 58534, "first_seen_epoch": "1634916036.557513", "last_seen_epoch": "1634916036.607542", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8ef01e4dc96eeb82bba93803", "transport": "tcp", "stream": 1094, "initiator_ip": "10.10.22.157", "initiator_port": 50122, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58535, "last_frame": 58544, "first_seen_epoch": "1634916036.608902", "last_seen_epoch": "1634916036.892407", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7807aa3fb253c5a51a8d2e0d", "transport": "tcp", "stream": 1095, "initiator_ip": "10.10.22.156", "initiator_port": 50027, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 58613, "last_frame": 59495, "first_seen_epoch": "1634916040.605114", "last_seen_epoch": "1634916115.833296", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-9810a9dbfa15378e30280cde", "transport": "udp", "stream": 728, "initiator_ip": "10.10.22.157", "initiator_port": 62498, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58618, "last_frame": 58619, "first_seen_epoch": "1634916040.902294", "last_seen_epoch": "1634916040.947783", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-78c9ec8af661842ac34ac57d", "transport": "tcp", "stream": 1096, "initiator_ip": "10.10.22.157", "initiator_port": 50123, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58623, "last_frame": 58633, "first_seen_epoch": "1634916040.949095", "last_seen_epoch": "1634916041.230758", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-808448ed0d99b310e35d704b", "transport": "udp", "stream": 729, "initiator_ip": "10.10.22.156", "initiator_port": 57567, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58656, "last_frame": 58657, "first_seen_epoch": "1634916045.058882", "last_seen_epoch": "1634916045.100546", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-6d68dace6524f7396f2fa435", "transport": "tcp", "stream": 1097, "initiator_ip": "10.10.22.157", "initiator_port": 50124, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58658, "last_frame": 58666, "first_seen_epoch": "1634916045.246573", "last_seen_epoch": "1634916045.542662", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-2185b71139ceb766374d6413", "transport": "tcp", "stream": 1098, "initiator_ip": "10.10.22.157", "initiator_port": 50125, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58674, "last_frame": 58679, "first_seen_epoch": "1634916049.558523", "last_seen_epoch": "1634916049.865103", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-15ed39413c6c773ae237ad90", "transport": "tcp", "stream": 1099, "initiator_ip": "10.10.22.157", "initiator_port": 50126, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58689, "last_frame": 58695, "first_seen_epoch": "1634916053.871109", "last_seen_epoch": "1634916054.484705", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-63b6a22d55b6d95dabce7c6c", "transport": "tcp", "stream": 1100, "initiator_ip": "10.10.22.156", "initiator_port": 50028, "responder_ip": "73.52.50.32", "responder_port": 443, "first_frame": 58706, "last_frame": 59681, "first_seen_epoch": "1634916056.65378", "last_seen_epoch": "1634916131.91676", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-ba946af50b64490b84947864", "transport": "tcp", "stream": 1101, "initiator_ip": "10.10.22.158", "initiator_port": 49847, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 58709, "last_frame": 60292, "first_seen_epoch": "1634916058.163745", "last_seen_epoch": "1634916168.165607", "packets": 21, "bytes": 5217, "initiator_bytes": 1737, "responder_bytes": 3480 }, { "flow_id": "flow-141e44c1aa819afc1202fa6b", "transport": "udp", "stream": 730, "initiator_ip": "10.10.22.157", "initiator_port": 65131, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58716, "last_frame": 58721, "first_seen_epoch": "1634916058.497618", "last_seen_epoch": "1634916058.559426", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e649f88d15585091fac8acd8", "transport": "tcp", "stream": 1102, "initiator_ip": "10.10.22.157", "initiator_port": 50127, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58722, "last_frame": 58731, "first_seen_epoch": "1634916058.560651", "last_seen_epoch": "1634916058.865468", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9168b7dc429bc35f8ec8d400", "transport": "udp", "stream": 731, "initiator_ip": "10.10.22.158", "initiator_port": 62245, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58734, "last_frame": 58735, "first_seen_epoch": "1634916059.942415", "last_seen_epoch": "1634916060.014151", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-6493e0f690437fd0d4fa7e0f", "transport": "tcp", "stream": 1103, "initiator_ip": "10.10.22.158", "initiator_port": 49848, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 58736, "last_frame": 58761, "first_seen_epoch": "1634916060.015425", "last_seen_epoch": "1634916060.691527", "packets": 25, "bytes": 6478, "initiator_bytes": 1744, "responder_bytes": 4734 }, { "flow_id": "flow-b0bdfcc95900de1f58b638bf", "transport": "udp", "stream": 732, "initiator_ip": "10.10.22.157", "initiator_port": 61546, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58764, "last_frame": 58765, "first_seen_epoch": "1634916062.871359", "last_seen_epoch": "1634916062.936141", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a2e175d86ec3b9f99345147d", "transport": "tcp", "stream": 1104, "initiator_ip": "10.10.22.157", "initiator_port": 50128, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58766, "last_frame": 58773, "first_seen_epoch": "1634916062.937486", "last_seen_epoch": "1634916063.219989", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ca6c9a259e7195dc833fad19", "transport": "tcp", "stream": 1105, "initiator_ip": "10.10.22.156", "initiator_port": 50029, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 58796, "last_frame": 59446, "first_seen_epoch": "1634916066.27616", "last_seen_epoch": "1634916107.264386", "packets": 52, "bytes": 9513, "initiator_bytes": 2274, "responder_bytes": 7239 }, { "flow_id": "flow-87402025b53e7edbf0f4dec5", "transport": "udp", "stream": 733, "initiator_ip": "10.10.22.157", "initiator_port": 54410, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 58806, "last_frame": 58808, "first_seen_epoch": "1634916067.23026", "last_seen_epoch": "1634916067.297551", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-11e61287d1158cf71866fb71", "transport": "tcp", "stream": 1106, "initiator_ip": "10.10.22.157", "initiator_port": 50129, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58809, "last_frame": 58822, "first_seen_epoch": "1634916067.298616", "last_seen_epoch": "1634916067.625157", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-925172ae7b85ff570b0e7707", "transport": "tcp", "stream": 1107, "initiator_ip": "10.10.22.157", "initiator_port": 50130, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58886, "last_frame": 58897, "first_seen_epoch": "1634916071.638654", "last_seen_epoch": "1634916071.952026", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a0cf359097c04f7595d0f4c4", "transport": "udp", "stream": 734, "initiator_ip": "10.10.22.156", "initiator_port": 49536, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58909, "last_frame": 58911, "first_seen_epoch": "1634916075.061602", "last_seen_epoch": "1634916075.171514", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-28a348e06ad913375be1a95a", "transport": "tcp", "stream": 1108, "initiator_ip": "10.10.22.157", "initiator_port": 50131, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58913, "last_frame": 58919, "first_seen_epoch": "1634916075.964725", "last_seen_epoch": "1634916076.275967", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8d678facf7acd9ed43c44c38", "transport": "tcp", "stream": 1109, "initiator_ip": "10.10.22.156", "initiator_port": 50030, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 58921, "last_frame": 58960, "first_seen_epoch": "1634916077.719751", "last_seen_epoch": "1634916080.904461", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-26cbd8feb875189c432d2994", "transport": "tcp", "stream": 1110, "initiator_ip": "10.10.22.157", "initiator_port": 50132, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 58936, "last_frame": 58945, "first_seen_epoch": "1634916080.292658", "last_seen_epoch": "1634916080.578453", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-05efbba64f8da72e9ff4ffdd", "transport": "udp", "stream": 735, "initiator_ip": "10.10.22.156", "initiator_port": 62534, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58938, "last_frame": 58946, "first_seen_epoch": "1634916080.399713", "last_seen_epoch": "1634916080.627397", "packets": 3, "bytes": 272, "initiator_bytes": 154, "responder_bytes": 118 }, { "flow_id": "flow-c2c4c1896249fbac70dd99f7", "transport": "tcp", "stream": 1111, "initiator_ip": "10.10.22.156", "initiator_port": 50031, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 58947, "last_frame": 59659, "first_seen_epoch": "1634916080.627928", "last_seen_epoch": "1634916129.342703", "packets": 52, "bytes": 9528, "initiator_bytes": 2289, "responder_bytes": 7239 }, { "flow_id": "flow-c47ea68b94d04f621be95a63", "transport": "udp", "stream": 736, "initiator_ip": "10.10.22.158", "initiator_port": 56290, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 58953, "last_frame": 58954, "first_seen_epoch": "1634916080.780532", "last_seen_epoch": "1634916080.833762", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-e83fcac2b03412c45d6ea1ca", "transport": "tcp", "stream": 1112, "initiator_ip": "10.10.22.158", "initiator_port": 49849, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 58955, "last_frame": 59751, "first_seen_epoch": "1634916080.834824", "last_seen_epoch": "1634916146.2304", "packets": 258, "bytes": 233195, "initiator_bytes": 6462, "responder_bytes": 226733 }, { "flow_id": "flow-14778b8a00b0c48717c9c811", "transport": "tcp", "stream": 1113, "initiator_ip": "10.10.22.156", "initiator_port": 50030, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59229, "last_frame": 59272, "first_seen_epoch": "1634916081.416347", "last_seen_epoch": "1634916084.054558", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-3ddeff316a9387f2790471a0", "transport": "tcp", "stream": 1114, "initiator_ip": "10.10.22.156", "initiator_port": 50030, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59283, "last_frame": 59311, "first_seen_epoch": "1634916084.556979", "last_seen_epoch": "1634916087.256502", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6960eaa606d7fb4f1b1cd7ea", "transport": "udp", "stream": 737, "initiator_ip": "10.10.22.157", "initiator_port": 54475, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59284, "last_frame": 59285, "first_seen_epoch": "1634916084.59039", "last_seen_epoch": "1634916084.681504", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-fcdd148100e6b4b1c104907f", "transport": "tcp", "stream": 1115, "initiator_ip": "10.10.22.157", "initiator_port": 50133, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59286, "last_frame": 59294, "first_seen_epoch": "1634916084.682829", "last_seen_epoch": "1634916084.967833", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ff6040e6dad9d18404b5a309", "transport": "udp", "stream": 738, "initiator_ip": "10.10.22.156", "initiator_port": 49982, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59298, "last_frame": 59335, "first_seen_epoch": "1634916085.312045", "last_seen_epoch": "1634916092.653365", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-796d94e495af7388e8eec84d", "transport": "tcp", "stream": 1116, "initiator_ip": "10.10.22.156", "initiator_port": 50032, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59312, "last_frame": 59328, "first_seen_epoch": "1634916087.259284", "last_seen_epoch": "1634916090.305475", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-0a3bac32c6073e05cea4d60b", "transport": "udp", "stream": 739, "initiator_ip": "10.10.22.157", "initiator_port": 58765, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59317, "last_frame": 59318, "first_seen_epoch": "1634916088.981313", "last_seen_epoch": "1634916089.037163", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3a6d1fa7cce3b9ccc7730572", "transport": "tcp", "stream": 1117, "initiator_ip": "10.10.22.157", "initiator_port": 50134, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59319, "last_frame": 59325, "first_seen_epoch": "1634916089.03854", "last_seen_epoch": "1634916089.318833", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c12e9980c8cc7a2a37192e33", "transport": "tcp", "stream": 1118, "initiator_ip": "10.10.22.156", "initiator_port": 50032, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59331, "last_frame": 59358, "first_seen_epoch": "1634916090.807835", "last_seen_epoch": "1634916093.454789", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-08a17bf7d96d1c9d3fb07343", "transport": "udp", "stream": 740, "initiator_ip": "10.10.22.157", "initiator_port": 53898, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59351, "last_frame": 59355, "first_seen_epoch": "1634916093.326035", "last_seen_epoch": "1634916093.366474", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b005fd75c61edfa47a909293", "transport": "tcp", "stream": 1119, "initiator_ip": "10.10.22.157", "initiator_port": 50135, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59356, "last_frame": 59367, "first_seen_epoch": "1634916093.367343", "last_seen_epoch": "1634916093.648759", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-348cf30ad23ee3b5c83d1423", "transport": "tcp", "stream": 1120, "initiator_ip": "10.10.22.156", "initiator_port": 50032, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59368, "last_frame": 59383, "first_seen_epoch": "1634916093.96497", "last_seen_epoch": "1634916096.677382", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6b4ce6482ea37e88b817af26", "transport": "tcp", "stream": 1121, "initiator_ip": "10.10.22.157", "initiator_port": 50136, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59385, "last_frame": 59393, "first_seen_epoch": "1634916097.653406", "last_seen_epoch": "1634916097.968817", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-29a5f92d4f0707b020c273ca", "transport": "tcp", "stream": 1122, "initiator_ip": "10.10.22.156", "initiator_port": 50033, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59395, "last_frame": 59398, "first_seen_epoch": "1634916098.68524", "last_seen_epoch": "1634916099.728978", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-3b2b6bbb73f9ec5a788beeea", "transport": "tcp", "stream": 1123, "initiator_ip": "10.10.22.156", "initiator_port": 50033, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59399, "last_frame": 59413, "first_seen_epoch": "1634916100.24679", "last_seen_epoch": "1634916102.923725", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5e854536729fdd9f65211d60", "transport": "tcp", "stream": 1124, "initiator_ip": "10.10.22.157", "initiator_port": 50137, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59402, "last_frame": 59408, "first_seen_epoch": "1634916101.983872", "last_seen_epoch": "1634916102.28177", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2690fbb916b8fdc550d3a74c", "transport": "tcp", "stream": 1125, "initiator_ip": "10.10.22.156", "initiator_port": 50033, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59415, "last_frame": 59423, "first_seen_epoch": "1634916103.43421", "last_seen_epoch": "1634916106.098118", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-c03f8083a938691ed9099183", "transport": "udp", "stream": 741, "initiator_ip": "10.10.22.156", "initiator_port": 50790, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59419, "last_frame": 59421, "first_seen_epoch": "1634916105.060129", "last_seen_epoch": "1634916105.133991", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-9dbad3d95965d95e839ec800", "transport": "tcp", "stream": 1126, "initiator_ip": "10.10.22.157", "initiator_port": 50138, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59425, "last_frame": 59431, "first_seen_epoch": "1634916106.311099", "last_seen_epoch": "1634916106.660435", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bd6de069e905059ede9f4346", "transport": "tcp", "stream": 1127, "initiator_ip": "10.10.22.156", "initiator_port": 50033, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59430, "last_frame": 59455, "first_seen_epoch": "1634916106.606608", "last_seen_epoch": "1634916109.301754", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-4ed12a7e934d2f110f333661", "transport": "tcp", "stream": 1128, "initiator_ip": "10.10.22.156", "initiator_port": 50034, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59456, "last_frame": 59472, "first_seen_epoch": "1634916109.304983", "last_seen_epoch": "1634916112.319579", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-35486349c8024204c3764810", "transport": "udp", "stream": 742, "initiator_ip": "10.10.22.157", "initiator_port": 51385, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59459, "last_frame": 59460, "first_seen_epoch": "1634916110.67087", "last_seen_epoch": "1634916110.727284", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-72be1afb6348f4c51b10032b", "transport": "tcp", "stream": 1129, "initiator_ip": "10.10.22.157", "initiator_port": 50139, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59461, "last_frame": 59468, "first_seen_epoch": "1634916110.728601", "last_seen_epoch": "1634916111.033317", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-9daf1c766d0965d2a271759a", "transport": "tcp", "stream": 1130, "initiator_ip": "10.10.22.156", "initiator_port": 50034, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59474, "last_frame": 59492, "first_seen_epoch": "1634916112.83959", "last_seen_epoch": "1634916115.428102", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-c006b875384e9dfe3471945e", "transport": "udp", "stream": 743, "initiator_ip": "10.10.22.157", "initiator_port": 51208, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59480, "last_frame": 59481, "first_seen_epoch": "1634916115.045263", "last_seen_epoch": "1634916115.089298", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-96cda69ec8ca929b1d66619f", "transport": "tcp", "stream": 1131, "initiator_ip": "10.10.22.157", "initiator_port": 50140, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59482, "last_frame": 59491, "first_seen_epoch": "1634916115.090375", "last_seen_epoch": "1634916115.37241", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9230b514f36a5ad19d63fed9", "transport": "tcp", "stream": 1132, "initiator_ip": "10.10.22.156", "initiator_port": 50034, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59496, "last_frame": 59520, "first_seen_epoch": "1634916115.934459", "last_seen_epoch": "1634916118.693666", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-e97bd5838ffd446bc844db6d", "transport": "udp", "stream": 744, "initiator_ip": "10.10.22.156", "initiator_port": 54968, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59508, "last_frame": 59513, "first_seen_epoch": "1634916117.526733", "last_seen_epoch": "1634916117.96933", "packets": 3, "bytes": 263, "initiator_bytes": 148, "responder_bytes": 115 }, { "flow_id": "flow-27709c6887b6882a907169c6", "transport": "tcp", "stream": 1133, "initiator_ip": "10.10.22.156", "initiator_port": 50035, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 59514, "last_frame": 60062, "first_seen_epoch": "1634916117.970649", "last_seen_epoch": "1634916159.669334", "packets": 55, "bytes": 9672, "initiator_bytes": 2270, "responder_bytes": 7402 }, { "flow_id": "flow-2235056ccf3b0d128125951e", "transport": "tcp", "stream": 1134, "initiator_ip": "10.10.22.156", "initiator_port": 50034, "responder_ip": "81.241.252.59", "responder_port": 2078, "first_frame": 59525, "last_frame": 59592, "first_seen_epoch": "1634916119.200847", "last_seen_epoch": "1634916121.718642", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-83745fa5d17dd83c51a82f8f", "transport": "udp", "stream": 745, "initiator_ip": "10.10.22.157", "initiator_port": 50944, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59536, "last_frame": 59537, "first_seen_epoch": "1634916119.388777", "last_seen_epoch": "1634916119.448015", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e17cce41c5c2d2d5d9138ad8", "transport": "tcp", "stream": 1135, "initiator_ip": "10.10.22.157", "initiator_port": 50141, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59538, "last_frame": 59547, "first_seen_epoch": "1634916119.449357", "last_seen_epoch": "1634916119.747089", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-eb77eae13d86efffc44ef424", "transport": "tcp", "stream": 1136, "initiator_ip": "10.10.22.157", "initiator_port": 50142, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59615, "last_frame": 59622, "first_seen_epoch": "1634916123.763728", "last_seen_epoch": "1634916124.071211", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-deca30f7b1a96b263395da3f", "transport": "tcp", "stream": 1137, "initiator_ip": "10.10.22.156", "initiator_port": 50036, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59634, "last_frame": 59636, "first_seen_epoch": "1634916126.737113", "last_seen_epoch": "1634916127.705045", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-2cb9777fc4a485c0a8cfaf6e", "transport": "tcp", "stream": 1138, "initiator_ip": "10.10.22.157", "initiator_port": 50143, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59637, "last_frame": 59644, "first_seen_epoch": "1634916128.075187", "last_seen_epoch": "1634916128.395587", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-18b789557c63cf54e56cbc9b", "transport": "tcp", "stream": 1139, "initiator_ip": "10.10.22.156", "initiator_port": 50036, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59642, "last_frame": 59674, "first_seen_epoch": "1634916128.230889", "last_seen_epoch": "1634916130.777388", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-10b7d1a8903656be35b63c6e", "transport": "udp", "stream": 746, "initiator_ip": "10.10.22.157", "initiator_port": 52762, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59675, "last_frame": 59676, "first_seen_epoch": "1634916131.048088", "last_seen_epoch": "1634916131.048404", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-c9b1b4a213f6c92b8d851313", "transport": "udp", "stream": 747, "initiator_ip": "10.10.22.157", "initiator_port": 57369, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59677, "last_frame": 59678, "first_seen_epoch": "1634916131.048888", "last_seen_epoch": "1634916131.103842", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-67e0a73e984adfe58e9c29e2", "transport": "tcp", "stream": 1140, "initiator_ip": "10.10.22.156", "initiator_port": 50036, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59680, "last_frame": 59690, "first_seen_epoch": "1634916131.279893", "last_seen_epoch": "1634916133.859502", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1475741cfb556e5083488618", "transport": "tcp", "stream": 1141, "initiator_ip": "10.10.22.157", "initiator_port": 50144, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59683, "last_frame": 59688, "first_seen_epoch": "1634916132.404141", "last_seen_epoch": "1634916132.694587", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a287c2901e42a746f14c45a4", "transport": "tcp", "stream": 1142, "initiator_ip": "10.10.22.156", "initiator_port": 50036, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59692, "last_frame": 59704, "first_seen_epoch": "1634916134.371982", "last_seen_epoch": "1634916136.799783", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-521b28fce75970ca22ae5105", "transport": "udp", "stream": 748, "initiator_ip": "10.10.22.157", "initiator_port": 49564, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59701, "last_frame": 59702, "first_seen_epoch": "1634916136.716541", "last_seen_epoch": "1634916136.777678", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9dee8009ddeee24077879b11", "transport": "tcp", "stream": 1143, "initiator_ip": "10.10.22.157", "initiator_port": 50145, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59703, "last_frame": 59710, "first_seen_epoch": "1634916136.77923", "last_seen_epoch": "1634916137.059578", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-660775f5ca45820098a68fc0", "transport": "tcp", "stream": 1144, "initiator_ip": "10.10.22.156", "initiator_port": 50037, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59705, "last_frame": 59716, "first_seen_epoch": "1634916136.802727", "last_seen_epoch": "1634916139.871356", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-6703e2e1f031474195124c35", "transport": "tcp", "stream": 1145, "initiator_ip": "10.10.22.156", "initiator_port": 50037, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59718, "last_frame": 59731, "first_seen_epoch": "1634916140.37229", "last_seen_epoch": "1634916143.065388", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-8df42903bc552f2d6b8dc667", "transport": "udp", "stream": 749, "initiator_ip": "10.10.22.157", "initiator_port": 56611, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59719, "last_frame": 59722, "first_seen_epoch": "1634916141.077676", "last_seen_epoch": "1634916141.138441", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b83e2d28a920bf23e6bd2a76", "transport": "tcp", "stream": 1146, "initiator_ip": "10.10.22.157", "initiator_port": 50146, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59723, "last_frame": 59729, "first_seen_epoch": "1634916141.139349", "last_seen_epoch": "1634916141.42783", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8fc09650665d590195ef48d6", "transport": "tcp", "stream": 1147, "initiator_ip": "10.10.22.156", "initiator_port": 50037, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59733, "last_frame": 59750, "first_seen_epoch": "1634916143.591583", "last_seen_epoch": "1634916146.13753", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-74068d5eda616ea516b8aeb5", "transport": "udp", "stream": 750, "initiator_ip": "10.10.22.157", "initiator_port": 60341, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 59742, "last_frame": 59743, "first_seen_epoch": "1634916145.436371", "last_seen_epoch": "1634916145.507748", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2dda298bd155a444a22eb5a3", "transport": "tcp", "stream": 1148, "initiator_ip": "10.10.22.157", "initiator_port": 50147, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59744, "last_frame": 59805, "first_seen_epoch": "1634916145.509097", "last_seen_epoch": "1634916148.800881", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-5dbfd0d2433674927c579a8a", "transport": "udp", "stream": 751, "initiator_ip": "10.10.22.156", "initiator_port": 61229, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59763, "last_frame": 59764, "first_seen_epoch": "1634916147.455802", "last_seen_epoch": "1634916147.456162", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-5416a7f13e3bd42afb2abb3a", "transport": "udp", "stream": 752, "initiator_ip": "10.10.22.156", "initiator_port": 57133, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59765, "last_frame": 59766, "first_seen_epoch": "1634916147.457095", "last_seen_epoch": "1634916147.457337", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-16ae4913bc4bcb0dde58af84", "transport": "udp", "stream": 753, "initiator_ip": "10.10.22.156", "initiator_port": 58207, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59768, "last_frame": 59769, "first_seen_epoch": "1634916147.493073", "last_seen_epoch": "1634916147.532603", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-f4e969eb33e7293f710046eb", "transport": "tcp", "stream": 1149, "initiator_ip": "10.10.22.156", "initiator_port": 50038, "responder_ip": "40.97.120.226", "responder_port": 25, "first_frame": 59770, "last_frame": 60224, "first_seen_epoch": "1634916147.533227", "last_seen_epoch": "1634916166.16316", "packets": 54, "bytes": 9082, "initiator_bytes": 2151, "responder_bytes": 6931 }, { "flow_id": "flow-3cd30894b360e81138d0968f", "transport": "tcp", "stream": 1150, "initiator_ip": "10.10.22.156", "initiator_port": 50039, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59787, "last_frame": 59829, "first_seen_epoch": "1634916148.153622", "last_seen_epoch": "1634916149.053638", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-73b065b14ae62012f1a0a803", "transport": "udp", "stream": 754, "initiator_ip": "10.10.22.158", "initiator_port": 61412, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59825, "last_frame": 59826, "first_seen_epoch": "1634916149.02742", "last_seen_epoch": "1634916149.02776", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-ba785ad3c27fae1aeb9b0721", "transport": "udp", "stream": 755, "initiator_ip": "10.10.22.158", "initiator_port": 62533, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59827, "last_frame": 59828, "first_seen_epoch": "1634916149.02831", "last_seen_epoch": "1634916149.02859", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-6518217432864eed3ab43cd7", "transport": "tcp", "stream": 1151, "initiator_ip": "10.10.22.156", "initiator_port": 50039, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59839, "last_frame": 59888, "first_seen_epoch": "1634916149.561507", "last_seen_epoch": "1634916152.175852", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-af6c457927d10f73391822e4", "transport": "udp", "stream": 756, "initiator_ip": "10.10.22.156", "initiator_port": 60556, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59873, "last_frame": 59876, "first_seen_epoch": "1634916150.714325", "last_seen_epoch": "1634916150.782954", "packets": 3, "bytes": 226, "initiator_bytes": 140, "responder_bytes": 86 }, { "flow_id": "flow-2b19f267e41477209c8d0ca5", "transport": "tcp", "stream": 1152, "initiator_ip": "10.10.22.156", "initiator_port": 50040, "responder_ip": "192.185.57.27", "responder_port": 25, "first_frame": 59877, "last_frame": 60146, "first_seen_epoch": "1634916150.783906", "last_seen_epoch": "1634916163.822268", "packets": 49, "bytes": 7403, "initiator_bytes": 1969, "responder_bytes": 5434 }, { "flow_id": "flow-ce7c80823cf257c1eedfa77f", "transport": "tcp", "stream": 1153, "initiator_ip": "10.10.22.156", "initiator_port": 50039, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59890, "last_frame": 59974, "first_seen_epoch": "1634916152.685337", "last_seen_epoch": "1634916155.251097", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-492a1c51deee10e3108f1c5f", "transport": "tcp", "stream": 1154, "initiator_ip": "10.10.22.157", "initiator_port": 50148, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59891, "last_frame": 59896, "first_seen_epoch": "1634916152.812213", "last_seen_epoch": "1634916153.103513", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-efbebf21fb3ce7f9396dff67", "transport": "udp", "stream": 757, "initiator_ip": "10.10.22.158", "initiator_port": 51788, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 59897, "last_frame": 59898, "first_seen_epoch": "1634916153.252792", "last_seen_epoch": "1634916153.253123", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-cc8156b0130ce9554012f063", "transport": "udp", "stream": 758, "initiator_ip": "10.10.22.158", "initiator_port": 51789, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 59899, "last_frame": 59900, "first_seen_epoch": "1634916153.254093", "last_seen_epoch": "1634916153.254375", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-3fcd5dd1140465bc33497e89", "transport": "tcp", "stream": 1155, "initiator_ip": "10.10.22.158", "initiator_port": 49850, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 59902, "last_frame": 59971, "first_seen_epoch": "1634916153.378619", "last_seen_epoch": "1634916153.408086", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-9561bf2e300163c066d36d2e", "transport": "tcp", "stream": 1156, "initiator_ip": "10.10.22.158", "initiator_port": 49851, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 59909, "last_frame": 59972, "first_seen_epoch": "1634916153.383638", "last_seen_epoch": "1634916153.408196", "packets": 22, "bytes": 6663, "initiator_bytes": 4274, "responder_bytes": 2389 }, { "flow_id": "flow-e9cf4b7175150391b56c4706", "transport": "tcp", "stream": 1157, "initiator_ip": "10.10.22.158", "initiator_port": 49852, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 59932, "last_frame": 59970, "first_seen_epoch": "1634916153.393943", "last_seen_epoch": "1634916153.40551", "packets": 21, "bytes": 7458, "initiator_bytes": 3441, "responder_bytes": 4017 }, { "flow_id": "flow-cca1d06d20a61391a458e70c", "transport": "tcp", "stream": 1158, "initiator_ip": "10.10.22.158", "initiator_port": 49853, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 59949, "last_frame": 59966, "first_seen_epoch": "1634916153.400685", "last_seen_epoch": "1634916153.405042", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-c9eab6fc905220010bdd93c9", "transport": "tcp", "stream": 1159, "initiator_ip": "10.10.22.156", "initiator_port": 50039, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 59976, "last_frame": 60022, "first_seen_epoch": "1634916155.763117", "last_seen_epoch": "1634916158.231862", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-78481767a7b7a2b3b872bd27", "transport": "tcp", "stream": 1160, "initiator_ip": "10.10.22.157", "initiator_port": 50149, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 59998, "last_frame": 60018, "first_seen_epoch": "1634916157.108207", "last_seen_epoch": "1634916157.457055", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2c92b8dbd8782c39b6875ee6", "transport": "tcp", "stream": 1161, "initiator_ip": "10.10.22.156", "initiator_port": 50041, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 60023, "last_frame": 60093, "first_seen_epoch": "1634916158.234721", "last_seen_epoch": "1634916161.355141", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-7c54445e23e1d474133a8f95", "transport": "tcp", "stream": 1162, "initiator_ip": "10.10.22.156", "initiator_port": 50042, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 60081, "last_frame": 60523, "first_seen_epoch": "1634916160.204522", "last_seen_epoch": "1634916204.307721", "packets": 53, "bytes": 9575, "initiator_bytes": 2336, "responder_bytes": 7239 }, { "flow_id": "flow-59479819b2b556649cfdcf53", "transport": "tcp", "stream": 1163, "initiator_ip": "10.10.22.157", "initiator_port": 50150, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60098, "last_frame": 60107, "first_seen_epoch": "1634916161.482304", "last_seen_epoch": "1634916161.849867", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-44a0d5bfe7cd4c3a551c15f0", "transport": "tcp", "stream": 1164, "initiator_ip": "10.10.22.156", "initiator_port": 50041, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 60108, "last_frame": 60170, "first_seen_epoch": "1634916161.872881", "last_seen_epoch": "1634916164.368086", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fe7fe910096aad16a286e50c", "transport": "tcp", "stream": 1165, "initiator_ip": "10.10.22.156", "initiator_port": 50041, "responder_ip": "68.204.7.158", "responder_port": 443, "first_frame": 60178, "last_frame": 60260, "first_seen_epoch": "1634916164.872924", "last_seen_epoch": "1634916167.420231", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-fdf832f27dcba0f06347a3ef", "transport": "udp", "stream": 759, "initiator_ip": "10.10.22.156", "initiator_port": 60305, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 60180, "last_frame": 60185, "first_seen_epoch": "1634916164.953616", "last_seen_epoch": "1634916165.25122", "packets": 3, "bytes": 272, "initiator_bytes": 154, "responder_bytes": 118 }, { "flow_id": "flow-3d64cfce86064fdebdc75ecd", "transport": "tcp", "stream": 1166, "initiator_ip": "10.10.22.156", "initiator_port": 50043, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 60186, "last_frame": 60579, "first_seen_epoch": "1634916165.2525", "last_seen_epoch": "1634916207.650555", "packets": 52, "bytes": 9513, "initiator_bytes": 2273, "responder_bytes": 7240 }, { "flow_id": "flow-e0ebf41e60020f68d16b00fe", "transport": "tcp", "stream": 1167, "initiator_ip": "10.10.22.157", "initiator_port": 50151, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60207, "last_frame": 60228, "first_seen_epoch": "1634916165.94093", "last_seen_epoch": "1634916166.245853", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9749116c0b8ed2311f43567b", "transport": "udp", "stream": 760, "initiator_ip": "10.10.22.157", "initiator_port": 54342, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60322, "last_frame": 60328, "first_seen_epoch": "1634916170.250238", "last_seen_epoch": "1634916170.337923", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-af71a1447e2bb0f3bb8a6412", "transport": "tcp", "stream": 1168, "initiator_ip": "10.10.22.157", "initiator_port": 50152, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60329, "last_frame": 60342, "first_seen_epoch": "1634916170.33925", "last_seen_epoch": "1634916170.698498", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9b4e624442d576064eafdfb9", "transport": "udp", "stream": 761, "initiator_ip": "10.10.22.157", "initiator_port": 59024, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60362, "last_frame": 60363, "first_seen_epoch": "1634916174.704136", "last_seen_epoch": "1634916174.800523", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6973d842c6370d50e30e5585", "transport": "tcp", "stream": 1169, "initiator_ip": "10.10.22.157", "initiator_port": 50153, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60364, "last_frame": 60370, "first_seen_epoch": "1634916174.801846", "last_seen_epoch": "1634916175.118161", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9a70f33e0a27f82559461f87", "transport": "tcp", "stream": 1170, "initiator_ip": "10.10.22.157", "initiator_port": 50154, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60381, "last_frame": 60388, "first_seen_epoch": "1634916179.140836", "last_seen_epoch": "1634916179.482345", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6fbef7b77e7962496936b4a9", "transport": "tcp", "stream": 1171, "initiator_ip": "10.10.22.156", "initiator_port": 50044, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60387, "last_frame": 60389, "first_seen_epoch": "1634916179.457069", "last_seen_epoch": "1634916179.554484", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5cae71fd5048e4e1c465e2a1", "transport": "tcp", "stream": 1172, "initiator_ip": "10.10.22.156", "initiator_port": 50044, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60390, "last_frame": 60391, "first_seen_epoch": "1634916180.060779", "last_seen_epoch": "1634916180.193514", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-31e6f63dd4a059031c59fe9e", "transport": "tcp", "stream": 1173, "initiator_ip": "10.10.22.156", "initiator_port": 50044, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60395, "last_frame": 60397, "first_seen_epoch": "1634916180.703143", "last_seen_epoch": "1634916180.847898", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-804352e8bf91e54e2db5fbf1", "transport": "tcp", "stream": 1174, "initiator_ip": "10.10.22.156", "initiator_port": 50044, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60399, "last_frame": 60401, "first_seen_epoch": "1634916181.358467", "last_seen_epoch": "1634916181.477685", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d3eec68472b3b0991ff33950", "transport": "tcp", "stream": 1175, "initiator_ip": "10.10.22.156", "initiator_port": 50044, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60402, "last_frame": 60403, "first_seen_epoch": "1634916181.981545", "last_seen_epoch": "1634916182.077423", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-96ba929d304d3735089267a7", "transport": "tcp", "stream": 1176, "initiator_ip": "10.10.22.156", "initiator_port": 50045, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60404, "last_frame": 60406, "first_seen_epoch": "1634916182.080036", "last_seen_epoch": "1634916182.193456", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-77bfa29c8d9d6fb15270d56b", "transport": "tcp", "stream": 1177, "initiator_ip": "10.10.22.156", "initiator_port": 50045, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60408, "last_frame": 60409, "first_seen_epoch": "1634916182.716922", "last_seen_epoch": "1634916182.853645", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-33a77bee4f2cd23d844929c2", "transport": "tcp", "stream": 1178, "initiator_ip": "10.10.22.156", "initiator_port": 50045, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60411, "last_frame": 60412, "first_seen_epoch": "1634916183.358561", "last_seen_epoch": "1634916183.470816", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d3953166b57b79f137b71676", "transport": "tcp", "stream": 1179, "initiator_ip": "10.10.22.157", "initiator_port": 50155, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60413, "last_frame": 60418, "first_seen_epoch": "1634916183.498908", "last_seen_epoch": "1634916183.817444", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-29073029ddd8f0887627221e", "transport": "tcp", "stream": 1180, "initiator_ip": "10.10.22.156", "initiator_port": 50045, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60419, "last_frame": 60420, "first_seen_epoch": "1634916183.982085", "last_seen_epoch": "1634916184.086593", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f33881bd5e65c1d64ad0f9d1", "transport": "tcp", "stream": 1181, "initiator_ip": "10.10.22.156", "initiator_port": 50045, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60422, "last_frame": 60424, "first_seen_epoch": "1634916184.59339", "last_seen_epoch": "1634916184.697492", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d4412f69735d96c0c58fde91", "transport": "tcp", "stream": 1182, "initiator_ip": "10.10.22.156", "initiator_port": 50046, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60429, "last_frame": 60430, "first_seen_epoch": "1634916186.701609", "last_seen_epoch": "1634916186.818708", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-585e33158a461a0def19eae8", "transport": "tcp", "stream": 1183, "initiator_ip": "10.10.22.156", "initiator_port": 50046, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60432, "last_frame": 60434, "first_seen_epoch": "1634916187.342252", "last_seen_epoch": "1634916187.445421", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dd0a08b4e2c9e8d0edaa860d", "transport": "tcp", "stream": 1184, "initiator_ip": "10.10.22.157", "initiator_port": 50156, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60435, "last_frame": 60442, "first_seen_epoch": "1634916187.842774", "last_seen_epoch": "1634916188.151493", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-88b182cff3e228d2741faa78", "transport": "tcp", "stream": 1185, "initiator_ip": "10.10.22.156", "initiator_port": 50046, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60436, "last_frame": 60441, "first_seen_epoch": "1634916187.950388", "last_seen_epoch": "1634916188.044446", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dd3792b5adc7f61b69626458", "transport": "tcp", "stream": 1186, "initiator_ip": "10.10.22.156", "initiator_port": 50046, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60444, "last_frame": 60446, "first_seen_epoch": "1634916188.562422", "last_seen_epoch": "1634916188.684824", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5dc3684fbe324a8de89e5a6c", "transport": "tcp", "stream": 1187, "initiator_ip": "10.10.22.156", "initiator_port": 50046, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60447, "last_frame": 60449, "first_seen_epoch": "1634916189.186559", "last_seen_epoch": "1634916189.310249", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-590a5195b83d7381894ddb81", "transport": "tcp", "stream": 1188, "initiator_ip": "10.10.22.156", "initiator_port": 50047, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60450, "last_frame": 60453, "first_seen_epoch": "1634916189.313141", "last_seen_epoch": "1634916190.441283", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-85af24776e28d9bb87ab878d", "transport": "tcp", "stream": 1189, "initiator_ip": "10.10.22.156", "initiator_port": 50047, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60454, "last_frame": 60455, "first_seen_epoch": "1634916190.953499", "last_seen_epoch": "1634916191.044612", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-24437db038b9c00911cc3391", "transport": "tcp", "stream": 1190, "initiator_ip": "10.10.22.156", "initiator_port": 50047, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60457, "last_frame": 60459, "first_seen_epoch": "1634916191.562493", "last_seen_epoch": "1634916191.66075", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-57885f0c9e9eed415a06baf1", "transport": "udp", "stream": 762, "initiator_ip": "10.10.22.157", "initiator_port": 55415, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60460, "last_frame": 60462, "first_seen_epoch": "1634916192.156186", "last_seen_epoch": "1634916192.228486", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-67c9162d3906f52d593e5aa8", "transport": "tcp", "stream": 1191, "initiator_ip": "10.10.22.156", "initiator_port": 50047, "responder_ip": "47.22.148.6", "responder_port": 443, "first_frame": 60461, "last_frame": 60475, "first_seen_epoch": "1634916192.171209", "last_seen_epoch": "1634916193.271719", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-04027caa037dfa6b3da9bafb", "transport": "tcp", "stream": 1192, "initiator_ip": "10.10.22.157", "initiator_port": 50157, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60463, "last_frame": 60471, "first_seen_epoch": "1634916192.229742", "last_seen_epoch": "1634916192.536322", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-66954c2100d1ac7cb6a2d9ab", "transport": "udp", "stream": 763, "initiator_ip": "10.10.22.156", "initiator_port": 57795, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 60477, "last_frame": 60478, "first_seen_epoch": "1634916195.064811", "last_seen_epoch": "1634916195.114033", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-31d448787bf393e42cbc7fc5", "transport": "udp", "stream": 764, "initiator_ip": "10.10.22.157", "initiator_port": 51074, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60481, "last_frame": 60482, "first_seen_epoch": "1634916196.563668", "last_seen_epoch": "1634916196.620752", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-23144262bcf719b3e940ccf0", "transport": "tcp", "stream": 1193, "initiator_ip": "10.10.22.157", "initiator_port": 50158, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60483, "last_frame": 60488, "first_seen_epoch": "1634916196.622083", "last_seen_epoch": "1634916196.912464", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a5ae84503af958328223bf33", "transport": "udp", "stream": 765, "initiator_ip": "10.10.22.157", "initiator_port": 56957, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60497, "last_frame": 60498, "first_seen_epoch": "1634916200.923222", "last_seen_epoch": "1634916200.970764", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a5659c7f5591341a9c841cd7", "transport": "tcp", "stream": 1194, "initiator_ip": "10.10.22.157", "initiator_port": 50159, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60499, "last_frame": 60504, "first_seen_epoch": "1634916200.97211", "last_seen_epoch": "1634916201.252801", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b5ae6d3cae1cac33a0805662", "transport": "tcp", "stream": 1195, "initiator_ip": "10.10.22.157", "initiator_port": 50160, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60531, "last_frame": 60553, "first_seen_epoch": "1634916205.265094", "last_seen_epoch": "1634916205.565798", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a1a7d54cb973a28572c95a71", "transport": "tcp", "stream": 1196, "initiator_ip": "10.10.22.156", "initiator_port": 50048, "responder_ip": "162.210.220.137", "responder_port": 443, "first_frame": 60533, "last_frame": 60549, "first_seen_epoch": "1634916205.317293", "last_seen_epoch": "1634916205.5322", "packets": 11, "bytes": 1992, "initiator_bytes": 485, "responder_bytes": 1507 }, { "flow_id": "flow-7b828e9031c7eea51ee4e23d", "transport": "tcp", "stream": 1197, "initiator_ip": "10.10.22.156", "initiator_port": 50049, "responder_ip": "162.210.220.137", "responder_port": 443, "first_frame": 60546, "last_frame": 60559, "first_seen_epoch": "1634916205.459682", "last_seen_epoch": "1634916205.675828", "packets": 11, "bytes": 1992, "initiator_bytes": 485, "responder_bytes": 1507 }, { "flow_id": "flow-2baecaef4c1cacd36c2ee0a1", "transport": "tcp", "stream": 1198, "initiator_ip": "10.10.22.156", "initiator_port": 50050, "responder_ip": "162.210.220.137", "responder_port": 443, "first_frame": 60573, "last_frame": 60593, "first_seen_epoch": "1634916207.623856", "last_seen_epoch": "1634916207.853762", "packets": 11, "bytes": 1992, "initiator_bytes": 485, "responder_bytes": 1507 }, { "flow_id": "flow-86e0d714036ec5348cfb6993", "transport": "tcp", "stream": 1199, "initiator_ip": "10.10.22.156", "initiator_port": 50051, "responder_ip": "162.210.220.137", "responder_port": 443, "first_frame": 60590, "last_frame": 60602, "first_seen_epoch": "1634916207.784017", "last_seen_epoch": "1634916208.025096", "packets": 11, "bytes": 1992, "initiator_bytes": 485, "responder_bytes": 1507 }, { "flow_id": "flow-d88ab7f019edfa9b4516be1b", "transport": "tcp", "stream": 1200, "initiator_ip": "10.10.22.157", "initiator_port": 50161, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60611, "last_frame": 60616, "first_seen_epoch": "1634916209.595962", "last_seen_epoch": "1634916209.981779", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6b15a87398ae83e4be955cc1", "transport": "tcp", "stream": 1201, "initiator_ip": "10.10.22.156", "initiator_port": 50052, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60622, "last_frame": 60634, "first_seen_epoch": "1634916212.954772", "last_seen_epoch": "1634916216.089178", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-167520b23d9339758cc8ea6a", "transport": "tcp", "stream": 1202, "initiator_ip": "10.10.22.157", "initiator_port": 50162, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60625, "last_frame": 60631, "first_seen_epoch": "1634916213.999848", "last_seen_epoch": "1634916214.326078", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-906bb37f77d69db5fc2a9a19", "transport": "tcp", "stream": 1203, "initiator_ip": "10.10.22.156", "initiator_port": 50052, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60636, "last_frame": 60650, "first_seen_epoch": "1634916216.593308", "last_seen_epoch": "1634916219.252289", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-e5346384285c77aa252be3ce", "transport": "udp", "stream": 766, "initiator_ip": "10.10.22.157", "initiator_port": 58991, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60639, "last_frame": 60640, "first_seen_epoch": "1634916218.360593", "last_seen_epoch": "1634916218.449267", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3f4e6e2d9fae0b923c50505c", "transport": "tcp", "stream": 1204, "initiator_ip": "10.10.22.157", "initiator_port": 50163, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60641, "last_frame": 60648, "first_seen_epoch": "1634916218.450599", "last_seen_epoch": "1634916218.811626", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5b0001cc6fe1d3141ab26029", "transport": "tcp", "stream": 1205, "initiator_ip": "10.10.22.156", "initiator_port": 50052, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60652, "last_frame": 60657, "first_seen_epoch": "1634916219.764766", "last_seen_epoch": "1634916222.222712", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-895b2cf20f8ceabf502685fc", "transport": "tcp", "stream": 1206, "initiator_ip": "10.10.22.156", "initiator_port": 50053, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60658, "last_frame": 60674, "first_seen_epoch": "1634916222.225514", "last_seen_epoch": "1634916225.29739", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-49b6f33faae91a3ff2663303", "transport": "udp", "stream": 767, "initiator_ip": "10.10.22.157", "initiator_port": 57401, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60660, "last_frame": 60661, "first_seen_epoch": "1634916222.829696", "last_seen_epoch": "1634916222.910694", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-03cc47830cbf967b04391883", "transport": "tcp", "stream": 1207, "initiator_ip": "10.10.22.157", "initiator_port": 50164, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60662, "last_frame": 60667, "first_seen_epoch": "1634916222.91203", "last_seen_epoch": "1634916223.198009", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6b0a2225d1eba959565b76c6", "transport": "tcp", "stream": 1208, "initiator_ip": "10.10.22.156", "initiator_port": 50053, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60675, "last_frame": 60687, "first_seen_epoch": "1634916225.813542", "last_seen_epoch": "1634916228.468243", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-78e6bea91dccc1f15986d579", "transport": "udp", "stream": 768, "initiator_ip": "10.10.22.157", "initiator_port": 51226, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60677, "last_frame": 60679, "first_seen_epoch": "1634916227.203754", "last_seen_epoch": "1634916227.300313", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-477026b86e1ce1c516621ac0", "transport": "tcp", "stream": 1209, "initiator_ip": "10.10.22.157", "initiator_port": 50165, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60680, "last_frame": 60685, "first_seen_epoch": "1634916227.301688", "last_seen_epoch": "1634916227.660168", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e088888cd8b219f233d61ea3", "transport": "tcp", "stream": 1210, "initiator_ip": "10.10.22.156", "initiator_port": 50053, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60688, "last_frame": 60698, "first_seen_epoch": "1634916228.984513", "last_seen_epoch": "1634916231.393614", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-bf320d0550012829cc5a8c0b", "transport": "tcp", "stream": 1211, "initiator_ip": "10.10.22.157", "initiator_port": 50166, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60699, "last_frame": 60704, "first_seen_epoch": "1634916231.671579", "last_seen_epoch": "1634916231.967357", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0c63e392de5cc1614ef44b45", "transport": "tcp", "stream": 1212, "initiator_ip": "10.10.22.156", "initiator_port": 50054, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60708, "last_frame": 60713, "first_seen_epoch": "1634916233.406914", "last_seen_epoch": "1634916234.473204", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-0ab864ac724a7b066813949f", "transport": "tcp", "stream": 1213, "initiator_ip": "10.10.22.156", "initiator_port": 50054, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60715, "last_frame": 60750, "first_seen_epoch": "1634916234.984407", "last_seen_epoch": "1634916237.580774", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1ce5bc3de75bc954ec632ea6", "transport": "tcp", "stream": 1214, "initiator_ip": "10.10.22.157", "initiator_port": 50167, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60723, "last_frame": 60732, "first_seen_epoch": "1634916235.985047", "last_seen_epoch": "1634916236.452607", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e5830082b14e22349efb8780", "transport": "udp", "stream": 769, "initiator_ip": "10.10.22.156", "initiator_port": 64065, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 60734, "last_frame": 60737, "first_seen_epoch": "1634916236.458815", "last_seen_epoch": "1634916236.759885", "packets": 3, "bytes": 269, "initiator_bytes": 158, "responder_bytes": 111 }, { "flow_id": "flow-32d6e4683b32f57bbdef3870", "transport": "tcp", "stream": 1215, "initiator_ip": "10.10.22.156", "initiator_port": 50055, "responder_ip": "81.31.145.216", "responder_port": 25, "first_frame": 60738, "last_frame": 60824, "first_seen_epoch": "1634916236.76048", "last_seen_epoch": "1634916241.449248", "packets": 33, "bytes": 2341, "initiator_bytes": 1106, "responder_bytes": 1235 }, { "flow_id": "flow-67ff80adeed2fc4042f6c53f", "transport": "tcp", "stream": 1216, "initiator_ip": "10.10.22.156", "initiator_port": 50054, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60758, "last_frame": 60798, "first_seen_epoch": "1634916238.108478", "last_seen_epoch": "1634916240.586832", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d8cb9826906692ee31ec4d1d", "transport": "tcp", "stream": 1217, "initiator_ip": "10.10.22.157", "initiator_port": 50168, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60796, "last_frame": 60809, "first_seen_epoch": "1634916240.455448", "last_seen_epoch": "1634916240.923186", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-74c6a22d14df280f5521b452", "transport": "tcp", "stream": 1218, "initiator_ip": "10.10.22.156", "initiator_port": 50054, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60817, "last_frame": 60854, "first_seen_epoch": "1634916241.09489", "last_seen_epoch": "1634916243.726684", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6cec1100bf8f2b733341b4dc", "transport": "udp", "stream": 770, "initiator_ip": "10.10.22.156", "initiator_port": 60656, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 60829, "last_frame": 60832, "first_seen_epoch": "1634916241.823013", "last_seen_epoch": "1634916241.962512", "packets": 3, "bytes": 256, "initiator_bytes": 160, "responder_bytes": 96 }, { "flow_id": "flow-c2bb5e164e2eabff4b393ec4", "transport": "tcp", "stream": 1219, "initiator_ip": "10.10.22.156", "initiator_port": 50056, "responder_ip": "142.250.114.28", "responder_port": 25, "first_frame": 60833, "last_frame": 60848, "first_seen_epoch": "1634916241.963559", "last_seen_epoch": "1634916242.986419", "packets": 9, "bytes": 559, "initiator_bytes": 282, "responder_bytes": 277 }, { "flow_id": "flow-b18492c04fa2547172de9fd2", "transport": "tcp", "stream": 1220, "initiator_ip": "10.10.22.156", "initiator_port": 50057, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60857, "last_frame": 60882, "first_seen_epoch": "1634916243.72981", "last_seen_epoch": "1634916246.729827", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-af4c2631fe99635adfa4f189", "transport": "tcp", "stream": 1221, "initiator_ip": "10.10.22.156", "initiator_port": 50058, "responder_ip": "34.149.19.242", "responder_port": 25, "first_frame": 60859, "last_frame": 61008, "first_seen_epoch": "1634916244.239168", "last_seen_epoch": "1634916256.56762", "packets": 50, "bytes": 9675, "initiator_bytes": 1928, "responder_bytes": 7747 }, { "flow_id": "flow-a0b0ca1807939d3658492f45", "transport": "udp", "stream": 771, "initiator_ip": "10.10.22.157", "initiator_port": 52847, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60871, "last_frame": 60872, "first_seen_epoch": "1634916244.939495", "last_seen_epoch": "1634916245.023427", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-2965f952ec68ba220b1ca1d9", "transport": "tcp", "stream": 1222, "initiator_ip": "10.10.22.157", "initiator_port": 50169, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60873, "last_frame": 60879, "first_seen_epoch": "1634916245.024763", "last_seen_epoch": "1634916245.301346", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-98370baeff81de6a1619d4ab", "transport": "tcp", "stream": 1223, "initiator_ip": "10.10.22.156", "initiator_port": 50057, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60883, "last_frame": 60896, "first_seen_epoch": "1634916247.234081", "last_seen_epoch": "1634916249.818756", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-84a4425142a5544f4c4e1f5a", "transport": "udp", "stream": 772, "initiator_ip": "10.10.22.157", "initiator_port": 65386, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60887, "last_frame": 60888, "first_seen_epoch": "1634916249.31536", "last_seen_epoch": "1634916249.38675", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0e9e2f6c186f7f587a2e58b1", "transport": "tcp", "stream": 1224, "initiator_ip": "10.10.22.157", "initiator_port": 50170, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60889, "last_frame": 60894, "first_seen_epoch": "1634916249.388085", "last_seen_epoch": "1634916249.731829", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c79f1dd20c222c05f4c7dda1", "transport": "tcp", "stream": 1225, "initiator_ip": "10.10.22.156", "initiator_port": 50057, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60898, "last_frame": 60953, "first_seen_epoch": "1634916250.343333", "last_seen_epoch": "1634916252.857738", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-faaa30313e1f62b4a5799d6c", "transport": "tcp", "stream": 1226, "initiator_ip": "10.10.22.156", "initiator_port": 50057, "responder_ip": "45.46.53.140", "responder_port": 2222, "first_frame": 60963, "last_frame": 60995, "first_seen_epoch": "1634916253.360039", "last_seen_epoch": "1634916256.020328", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5de940a6d541bd369fad8670", "transport": "udp", "stream": 773, "initiator_ip": "10.10.22.157", "initiator_port": 55278, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 60964, "last_frame": 60968, "first_seen_epoch": "1634916253.735564", "last_seen_epoch": "1634916253.79187", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-77e3f2c98ac3c0aa3f79b016", "transport": "tcp", "stream": 1227, "initiator_ip": "10.10.22.157", "initiator_port": 50171, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 60969, "last_frame": 60979, "first_seen_epoch": "1634916253.793267", "last_seen_epoch": "1634916254.095912", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e83a7e6eeef922e0ac90621f", "transport": "tcp", "stream": 1228, "initiator_ip": "10.10.22.157", "initiator_port": 50172, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61014, "last_frame": 61020, "first_seen_epoch": "1634916258.111561", "last_seen_epoch": "1634916258.420047", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-59a38085c7b9b9ee1a7448d0", "transport": "tcp", "stream": 1229, "initiator_ip": "10.10.22.156", "initiator_port": 50059, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61023, "last_frame": 61035, "first_seen_epoch": "1634916261.03861", "last_seen_epoch": "1634916264.20889", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-72a2c6e66a2ef3c40285fe70", "transport": "tcp", "stream": 1230, "initiator_ip": "10.10.22.157", "initiator_port": 50173, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61027, "last_frame": 61032, "first_seen_epoch": "1634916262.424231", "last_seen_epoch": "1634916262.726739", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-64048d10bec16fd8a3d65373", "transport": "tcp", "stream": 1231, "initiator_ip": "10.10.22.156", "initiator_port": 50059, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61037, "last_frame": 61051, "first_seen_epoch": "1634916264.735388", "last_seen_epoch": "1634916267.38217", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b244758e6b3c6a286ed41e10", "transport": "tcp", "stream": 1232, "initiator_ip": "10.10.22.157", "initiator_port": 50174, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61042, "last_frame": 61049, "first_seen_epoch": "1634916266.735587", "last_seen_epoch": "1634916267.02522", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-566f215d9b08fd2b74784183", "transport": "tcp", "stream": 1233, "initiator_ip": "10.10.22.156", "initiator_port": 50059, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61052, "last_frame": 61060, "first_seen_epoch": "1634916267.890079", "last_seen_epoch": "1634916270.555465", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ea7986854849df90c771b74f", "transport": "tcp", "stream": 1234, "initiator_ip": "10.10.22.156", "initiator_port": 50060, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61061, "last_frame": 61075, "first_seen_epoch": "1634916270.558366", "last_seen_epoch": "1634916273.620945", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-573b350ea555ef9d332098f7", "transport": "udp", "stream": 774, "initiator_ip": "10.10.22.157", "initiator_port": 57327, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61062, "last_frame": 61063, "first_seen_epoch": "1634916271.033879", "last_seen_epoch": "1634916271.101017", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b812d91716a0f8a5ac7416b2", "transport": "tcp", "stream": 1235, "initiator_ip": "10.10.22.157", "initiator_port": 50175, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61064, "last_frame": 61070, "first_seen_epoch": "1634916271.102377", "last_seen_epoch": "1634916271.384124", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9e03b5c88f36b59573d0a31b", "transport": "tcp", "stream": 1236, "initiator_ip": "10.10.22.156", "initiator_port": 50060, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61076, "last_frame": 61088, "first_seen_epoch": "1634916274.125455", "last_seen_epoch": "1634916276.736042", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-1628e3586da9cd16f63eee16", "transport": "udp", "stream": 775, "initiator_ip": "10.10.22.157", "initiator_port": 50659, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61079, "last_frame": 61080, "first_seen_epoch": "1634916275.394237", "last_seen_epoch": "1634916275.442987", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a9d8f2e13806f59f03b7c74e", "transport": "tcp", "stream": 1237, "initiator_ip": "10.10.22.157", "initiator_port": 50176, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61081, "last_frame": 61086, "first_seen_epoch": "1634916275.443819", "last_seen_epoch": "1634916275.775171", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-520fbc4d2264566c36e3c8a3", "transport": "tcp", "stream": 1238, "initiator_ip": "10.10.22.156", "initiator_port": 50060, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61089, "last_frame": 61098, "first_seen_epoch": "1634916277.249745", "last_seen_epoch": "1634916279.866277", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-058bfd979b05cf067e406634", "transport": "udp", "stream": 776, "initiator_ip": "10.10.22.157", "initiator_port": 51394, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61095, "last_frame": 61096, "first_seen_epoch": "1634916279.783596", "last_seen_epoch": "1634916279.84942", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d6f7d3c59c0295510d0f49fa", "transport": "tcp", "stream": 1239, "initiator_ip": "10.10.22.157", "initiator_port": 50177, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61097, "last_frame": 61103, "first_seen_epoch": "1634916279.850698", "last_seen_epoch": "1634916280.154721", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ea385c6f233a8a495985884a", "transport": "tcp", "stream": 1240, "initiator_ip": "10.10.22.156", "initiator_port": 50061, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61106, "last_frame": 61109, "first_seen_epoch": "1634916281.876623", "last_seen_epoch": "1634916283.001585", "packets": 3, "bytes": 186, "initiator_bytes": 132, "responder_bytes": 54 }, { "flow_id": "flow-ef74af26f68968bc006c5479", "transport": "tcp", "stream": 1241, "initiator_ip": "10.10.22.156", "initiator_port": 50061, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61111, "last_frame": 61120, "first_seen_epoch": "1634916283.501743", "last_seen_epoch": "1634916286.121683", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5e459532664ed7eb2bc16ec0", "transport": "tcp", "stream": 1242, "initiator_ip": "10.10.22.157", "initiator_port": 50178, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61112, "last_frame": 61118, "first_seen_epoch": "1634916284.158701", "last_seen_epoch": "1634916284.454783", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0ccc46daaa06d612e29d0068", "transport": "tcp", "stream": 1243, "initiator_ip": "10.10.22.156", "initiator_port": 50061, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61122, "last_frame": 61135, "first_seen_epoch": "1634916286.642478", "last_seen_epoch": "1634916289.295325", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b3223e09b51e7d1b85b639ed", "transport": "tcp", "stream": 1244, "initiator_ip": "10.10.22.157", "initiator_port": 50179, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61127, "last_frame": 61132, "first_seen_epoch": "1634916288.469828", "last_seen_epoch": "1634916288.794644", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b6961f1c194b6fc3126a187e", "transport": "tcp", "stream": 1245, "initiator_ip": "10.10.22.156", "initiator_port": 50061, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61136, "last_frame": 61141, "first_seen_epoch": "1634916289.79811", "last_seen_epoch": "1634916292.367051", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9028c7ba78aa329e61eb63a3", "transport": "tcp", "stream": 1246, "initiator_ip": "10.10.22.156", "initiator_port": 50062, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61142, "last_frame": 61163, "first_seen_epoch": "1634916292.369829", "last_seen_epoch": "1634916295.450845", "packets": 4, "bytes": 252, "initiator_bytes": 198, "responder_bytes": 54 }, { "flow_id": "flow-d9e2c09adc5953540306115f", "transport": "tcp", "stream": 1247, "initiator_ip": "10.10.22.157", "initiator_port": 50180, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61143, "last_frame": 61150, "first_seen_epoch": "1634916292.799481", "last_seen_epoch": "1634916293.109636", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-963c1a76f3504f5ef9267068", "transport": "udp", "stream": 777, "initiator_ip": "10.10.22.156", "initiator_port": 56180, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 61170, "last_frame": 61174, "first_seen_epoch": "1634916295.817023", "last_seen_epoch": "1634916296.118791", "packets": 3, "bytes": 284, "initiator_bytes": 162, "responder_bytes": 122 }, { "flow_id": "flow-bf61f1a04627e5f4b0dad239", "transport": "tcp", "stream": 1248, "initiator_ip": "10.10.22.156", "initiator_port": 50062, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61173, "last_frame": 61266, "first_seen_epoch": "1634916295.956095", "last_seen_epoch": "1634916298.588851", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b7b4b3189a860cc5d59b5501", "transport": "tcp", "stream": 1249, "initiator_ip": "10.10.22.156", "initiator_port": 50063, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61175, "last_frame": 61765, "first_seen_epoch": "1634916296.119882", "last_seen_epoch": "1634916336.239545", "packets": 50, "bytes": 9408, "initiator_bytes": 2223, "responder_bytes": 7185 }, { "flow_id": "flow-682553fa8c266721b28635d8", "transport": "udp", "stream": 778, "initiator_ip": "10.10.22.156", "initiator_port": 50409, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 61176, "last_frame": 61182, "first_seen_epoch": "1634916296.120407", "last_seen_epoch": "1634916296.419248", "packets": 3, "bytes": 263, "initiator_bytes": 148, "responder_bytes": 115 }, { "flow_id": "flow-b642b1f46bb8dcd2a454e8fe", "transport": "tcp", "stream": 1250, "initiator_ip": "10.10.22.156", "initiator_port": 50064, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61183, "last_frame": 61840, "first_seen_epoch": "1634916296.420205", "last_seen_epoch": "1634916338.633576", "packets": 51, "bytes": 9439, "initiator_bytes": 2254, "responder_bytes": 7185 }, { "flow_id": "flow-18cac64f92e8870860bb12eb", "transport": "udp", "stream": 779, "initiator_ip": "10.10.22.157", "initiator_port": 61404, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61203, "last_frame": 61208, "first_seen_epoch": "1634916297.112308", "last_seen_epoch": "1634916297.162161", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a663165862ac30e1b4ab96e7", "transport": "tcp", "stream": 1251, "initiator_ip": "10.10.22.157", "initiator_port": 50181, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61209, "last_frame": 61223, "first_seen_epoch": "1634916297.16311", "last_seen_epoch": "1634916297.447975", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bb05e92a568eb3c3a475aba4", "transport": "tcp", "stream": 1252, "initiator_ip": "10.10.22.156", "initiator_port": 50062, "responder_ip": "2.222.167.138", "responder_port": 443, "first_frame": 61293, "last_frame": 61359, "first_seen_epoch": "1634916299.094293", "last_seen_epoch": "1634916301.698192", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-28c1068aefc70ddec7307ef9", "transport": "udp", "stream": 780, "initiator_ip": "10.10.22.157", "initiator_port": 60168, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61346, "last_frame": 61347, "first_seen_epoch": "1634916301.45571", "last_seen_epoch": "1634916301.507567", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-55091123d530ae2336820dc3", "transport": "tcp", "stream": 1253, "initiator_ip": "10.10.22.157", "initiator_port": 50182, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61348, "last_frame": 61360, "first_seen_epoch": "1634916301.50893", "last_seen_epoch": "1634916301.794037", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c1bd2f0c82ce2149db2a4f79", "transport": "udp", "stream": 781, "initiator_ip": "10.10.22.157", "initiator_port": 57108, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 61385, "last_frame": 61386, "first_seen_epoch": "1634916305.800419", "last_seen_epoch": "1634916305.873602", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6bf2051f99890455471c4fa4", "transport": "tcp", "stream": 1254, "initiator_ip": "10.10.22.157", "initiator_port": 50183, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 61387, "last_frame": 65542, "first_seen_epoch": "1634916305.874935", "last_seen_epoch": "1634916636.508778", "packets": 134, "bytes": 8096, "initiator_bytes": 4528, "responder_bytes": 3568 }, { "flow_id": "flow-364ac309974916ad7117d699", "transport": "tcp", "stream": 1255, "initiator_ip": "10.10.22.156", "initiator_port": 50065, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 61395, "last_frame": 62233, "first_seen_epoch": "1634916306.712159", "last_seen_epoch": "1634916381.948185", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-bf1c089c6b230bf618289a37", "transport": "tcp", "stream": 1256, "initiator_ip": "10.10.22.156", "initiator_port": 50066, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61409, "last_frame": 62063, "first_seen_epoch": "1634916309.470985", "last_seen_epoch": "1634916357.63825", "packets": 51, "bytes": 9439, "initiator_bytes": 2200, "responder_bytes": 7239 }, { "flow_id": "flow-6b27e5a2fa4009ce5304b21d", "transport": "tcp", "stream": 1257, "initiator_ip": "10.10.22.156", "initiator_port": 50067, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61464, "last_frame": 62071, "first_seen_epoch": "1634916311.62994", "last_seen_epoch": "1634916357.655966", "packets": 52, "bytes": 9493, "initiator_bytes": 2254, "responder_bytes": 7239 }, { "flow_id": "flow-8f305bd500bcefc0b828ad15", "transport": "tcp", "stream": 1258, "initiator_ip": "10.10.22.156", "initiator_port": 50068, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 61615, "last_frame": 64197, "first_seen_epoch": "1634916322.740368", "last_seen_epoch": "1634916398.04955", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-c897567e6b220322896e1ff0", "transport": "udp", "stream": 782, "initiator_ip": "10.10.22.156", "initiator_port": 55530, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 61640, "last_frame": 61641, "first_seen_epoch": "1634916328.820489", "last_seen_epoch": "1634916328.861958", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-fbe1d706caf593deda18040d", "transport": "tcp", "stream": 1259, "initiator_ip": "10.10.22.156", "initiator_port": 50069, "responder_ip": "52.96.16.162", "responder_port": 25, "first_frame": 61642, "last_frame": 62046, "first_seen_epoch": "1634916328.863131", "last_seen_epoch": "1634916356.946369", "packets": 53, "bytes": 9016, "initiator_bytes": 2143, "responder_bytes": 6873 }, { "flow_id": "flow-d2b62634298c86bfea1302c4", "transport": "tcp", "stream": 1260, "initiator_ip": "10.10.22.156", "initiator_port": 50070, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61740, "last_frame": 62219, "first_seen_epoch": "1634916335.64821", "last_seen_epoch": "1634916376.53009", "packets": 52, "bytes": 9517, "initiator_bytes": 2277, "responder_bytes": 7240 }, { "flow_id": "flow-b223c2566e69fc136e2158c1", "transport": "tcp", "stream": 1261, "initiator_ip": "10.10.22.156", "initiator_port": 50071, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 61868, "last_frame": 64326, "first_seen_epoch": "1634916340.800622", "last_seen_epoch": "1634916416.060577", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-12559431cf1f1a9911f7fa35", "transport": "tcp", "stream": 1262, "initiator_ip": "10.10.22.156", "initiator_port": 50072, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 61873, "last_frame": 62248, "first_seen_epoch": "1634916341.175103", "last_seen_epoch": "1634916382.60836", "packets": 52, "bytes": 9517, "initiator_bytes": 2223, "responder_bytes": 7294 }, { "flow_id": "flow-448a2cb30eb4e03816cf4950", "transport": "udp", "stream": 783, "initiator_ip": "10.10.22.156", "initiator_port": 53794, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 62000, "last_frame": 62031, "first_seen_epoch": "1634916348.676153", "last_seen_epoch": "1634916356.905207", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-f5ad695bfc7b8354efd2a61f", "transport": "tcp", "stream": 1263, "initiator_ip": "10.10.22.156", "initiator_port": 50073, "responder_ip": "209.210.95.228", "responder_port": 443, "first_frame": 62030, "last_frame": 64353, "first_seen_epoch": "1634916356.834205", "last_seen_epoch": "1634916432.052121", "packets": 6, "bytes": 384, "initiator_bytes": 330, "responder_bytes": 54 }, { "flow_id": "flow-3584937ae4d649c4cea45377", "transport": "udp", "stream": 784, "initiator_ip": "10.10.22.156", "initiator_port": 56960, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 62084, "last_frame": 62085, "first_seen_epoch": "1634916360.230809", "last_seen_epoch": "1634916360.231211", "packets": 2, "bytes": 316, "initiator_bytes": 126, "responder_bytes": 190 }, { "flow_id": "flow-37a3ccafd90223a93f0fd13f", "transport": "udp", "stream": 785, "initiator_ip": "10.10.22.156", "initiator_port": 56961, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 62086, "last_frame": 62087, "first_seen_epoch": "1634916360.231888", "last_seen_epoch": "1634916360.232175", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-c64b57b6dd7d7c080804be75", "transport": "tcp", "stream": 1264, "initiator_ip": "10.10.22.156", "initiator_port": 50074, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 62089, "last_frame": 62156, "first_seen_epoch": "1634916360.357552", "last_seen_epoch": "1634916360.386117", "packets": 10, "bytes": 1512, "initiator_bytes": 832, "responder_bytes": 680 }, { "flow_id": "flow-e0007a025ad0d178a479a1cd", "transport": "tcp", "stream": 1265, "initiator_ip": "10.10.22.156", "initiator_port": 50075, "responder_ip": "10.10.22.22", "responder_port": 49667, "first_frame": 62096, "last_frame": 62157, "first_seen_epoch": "1634916360.362243", "last_seen_epoch": "1634916360.386265", "packets": 22, "bytes": 6662, "initiator_bytes": 4273, "responder_bytes": 2389 }, { "flow_id": "flow-e7e979db81bfa7145620da60", "transport": "tcp", "stream": 1266, "initiator_ip": "10.10.22.156", "initiator_port": 50076, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 62119, "last_frame": 62155, "first_seen_epoch": "1634916360.372626", "last_seen_epoch": "1634916360.383628", "packets": 19, "bytes": 7350, "initiator_bytes": 3387, "responder_bytes": 3963 }, { "flow_id": "flow-b422f30aa28a6acc1457c723", "transport": "tcp", "stream": 1267, "initiator_ip": "10.10.22.156", "initiator_port": 50077, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 62136, "last_frame": 62153, "first_seen_epoch": "1634916360.379386", "last_seen_epoch": "1634916360.383427", "packets": 18, "bytes": 6876, "initiator_bytes": 2843, "responder_bytes": 4033 }, { "flow_id": "flow-31df9994077b721519967076", "transport": "tcp", "stream": 1268, "initiator_ip": "10.10.22.158", "initiator_port": 49854, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 62169, "last_frame": 64629, "first_seen_epoch": "1634916364.955249", "last_seen_epoch": "1634916474.941596", "packets": 21, "bytes": 5253, "initiator_bytes": 1753, "responder_bytes": 3500 }, { "flow_id": "flow-cabf663a13546aa96dc0a1e3", "transport": "udp", "stream": 786, "initiator_ip": "10.10.22.156", "initiator_port": 55284, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 62201, "last_frame": 62203, "first_seen_epoch": "1634916375.069866", "last_seen_epoch": "1634916375.150726", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-b62a23add019bd3ba7199075", "transport": "tcp", "stream": 1269, "initiator_ip": "10.10.22.156", "initiator_port": 50078, "responder_ip": "72.252.201.69", "responder_port": 443, "first_frame": 62259, "last_frame": 64402, "first_seen_epoch": "1634916384.945221", "last_seen_epoch": "1634916457.334981", "packets": 19, "bytes": 3892, "initiator_bytes": 1784, "responder_bytes": 2108 }, { "flow_id": "flow-a417def58051eb2d706ac088", "transport": "tcp", "stream": 1270, "initiator_ip": "10.10.22.156", "initiator_port": 50079, "responder_ip": "72.252.201.69", "responder_port": 443, "first_frame": 62279, "last_frame": 64400, "first_seen_epoch": "1634916387.597643", "last_seen_epoch": "1634916457.334626", "packets": 19, "bytes": 3892, "initiator_bytes": 1784, "responder_bytes": 2108 }, { "flow_id": "flow-b69fe282c76a72a3294e625a", "transport": "tcp", "stream": 1271, "initiator_ip": "10.10.22.156", "initiator_port": 50080, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 62305, "last_frame": 64196, "first_seen_epoch": "1634916393.15043", "last_seen_epoch": "1634916397.280274", "packets": 1885, "bytes": 1967911, "initiator_bytes": 30021, "responder_bytes": 1937890 }, { "flow_id": "flow-abf57518214e1dcf4f4985e1", "transport": "tcp", "stream": 1272, "initiator_ip": "10.10.22.156", "initiator_port": 50081, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 64205, "last_frame": 64280, "first_seen_epoch": "1634916402.417817", "last_seen_epoch": "1634916403.379148", "packets": 17, "bytes": 3330, "initiator_bytes": 1272, "responder_bytes": 2058 }, { "flow_id": "flow-60a81e3c89631c170ccb280d", "transport": "udp", "stream": 787, "initiator_ip": "10.10.22.156", "initiator_port": 49321, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64206, "last_frame": 64207, "first_seen_epoch": "1634916402.422053", "last_seen_epoch": "1634916402.422514", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-9bc50eba0bc28ab910ba8e57", "transport": "udp", "stream": 788, "initiator_ip": "10.10.22.156", "initiator_port": 49322, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64208, "last_frame": 64209, "first_seen_epoch": "1634916402.423016", "last_seen_epoch": "1634916402.423253", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-93e4907db36ae02ba28a1058", "transport": "udp", "stream": 789, "initiator_ip": "10.10.22.156", "initiator_port": 49840, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64216, "last_frame": 64217, "first_seen_epoch": "1634916402.551816", "last_seen_epoch": "1634916402.552106", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-2cb45efdb08f39c85bbeaf84", "transport": "udp", "stream": 790, "initiator_ip": "10.10.22.156", "initiator_port": 49841, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64218, "last_frame": 64219, "first_seen_epoch": "1634916402.552746", "last_seen_epoch": "1634916402.553046", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-e0377978b54d6de9dee48df9", "transport": "udp", "stream": 791, "initiator_ip": "10.10.22.156", "initiator_port": 52178, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64228, "last_frame": 64229, "first_seen_epoch": "1634916402.711511", "last_seen_epoch": "1634916402.711823", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-cad3a9d9594d55237a89704e", "transport": "udp", "stream": 792, "initiator_ip": "10.10.22.156", "initiator_port": 52179, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64230, "last_frame": 64231, "first_seen_epoch": "1634916402.712667", "last_seen_epoch": "1634916402.712942", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f7b200b371c027f0bb17dfa2", "transport": "udp", "stream": 793, "initiator_ip": "10.10.22.156", "initiator_port": 64456, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64232, "last_frame": 64233, "first_seen_epoch": "1634916402.729941", "last_seen_epoch": "1634916402.730249", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-df826b603ca21362c2b2fe9f", "transport": "udp", "stream": 794, "initiator_ip": "10.10.22.156", "initiator_port": 64457, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64234, "last_frame": 64235, "first_seen_epoch": "1634916402.731448", "last_seen_epoch": "1634916402.731737", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-02cbd982c793a5102dc79831", "transport": "udp", "stream": 795, "initiator_ip": "10.10.22.156", "initiator_port": 56091, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64236, "last_frame": 64237, "first_seen_epoch": "1634916402.753226", "last_seen_epoch": "1634916402.753532", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-10954bb271f06d4e77950e3e", "transport": "udp", "stream": 796, "initiator_ip": "10.10.22.156", "initiator_port": 56092, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64238, "last_frame": 64239, "first_seen_epoch": "1634916402.755171", "last_seen_epoch": "1634916402.755463", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-d763a7d93007da73b1521156", "transport": "udp", "stream": 797, "initiator_ip": "10.10.22.156", "initiator_port": 55156, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64240, "last_frame": 64241, "first_seen_epoch": "1634916402.783421", "last_seen_epoch": "1634916402.783715", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-f109e9252498771a3708c7b4", "transport": "udp", "stream": 798, "initiator_ip": "10.10.22.156", "initiator_port": 55157, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64242, "last_frame": 64243, "first_seen_epoch": "1634916402.78429", "last_seen_epoch": "1634916402.784567", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-3c01d0601467abec2bbf14e8", "transport": "udp", "stream": 799, "initiator_ip": "10.10.22.156", "initiator_port": 50818, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64244, "last_frame": 64245, "first_seen_epoch": "1634916402.829498", "last_seen_epoch": "1634916402.82982", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-ab8e49241692a6b3c15b54cf", "transport": "udp", "stream": 800, "initiator_ip": "10.10.22.156", "initiator_port": 50819, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64246, "last_frame": 64247, "first_seen_epoch": "1634916402.831113", "last_seen_epoch": "1634916402.831404", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-7f08375c0103720546b4bb20", "transport": "udp", "stream": 801, "initiator_ip": "10.10.22.156", "initiator_port": 63598, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64248, "last_frame": 64249, "first_seen_epoch": "1634916402.845877", "last_seen_epoch": "1634916402.846172", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-4d2ead15be17ef7cfee06c53", "transport": "udp", "stream": 802, "initiator_ip": "10.10.22.156", "initiator_port": 63599, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64250, "last_frame": 64251, "first_seen_epoch": "1634916402.84697", "last_seen_epoch": "1634916402.847306", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f522ba14168e1cd79ae3ce1d", "transport": "udp", "stream": 803, "initiator_ip": "10.10.22.156", "initiator_port": 56448, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64252, "last_frame": 64253, "first_seen_epoch": "1634916402.874715", "last_seen_epoch": "1634916402.875022", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-eabe6b9de61a8f9af132e8a8", "transport": "udp", "stream": 804, "initiator_ip": "10.10.22.156", "initiator_port": 56449, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64254, "last_frame": 64255, "first_seen_epoch": "1634916402.876755", "last_seen_epoch": "1634916402.877045", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-69939e49b854fa649bfb52a3", "transport": "udp", "stream": 805, "initiator_ip": "10.10.22.156", "initiator_port": 56204, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64256, "last_frame": 64257, "first_seen_epoch": "1634916402.951619", "last_seen_epoch": "1634916402.951911", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-11f1ab49e777cad626114be3", "transport": "udp", "stream": 806, "initiator_ip": "10.10.22.156", "initiator_port": 56205, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64258, "last_frame": 64259, "first_seen_epoch": "1634916402.952459", "last_seen_epoch": "1634916402.95278", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-45f20fbba76860bfffbf6593", "transport": "udp", "stream": 807, "initiator_ip": "10.10.22.156", "initiator_port": 54334, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64260, "last_frame": 64261, "first_seen_epoch": "1634916403.040915", "last_seen_epoch": "1634916403.041189", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-5d5be783ac530b216c5eb990", "transport": "udp", "stream": 808, "initiator_ip": "10.10.22.156", "initiator_port": 54335, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64262, "last_frame": 64263, "first_seen_epoch": "1634916403.041676", "last_seen_epoch": "1634916403.041918", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4d6db78f93fc14f4d5850e37", "transport": "udp", "stream": 809, "initiator_ip": "10.10.22.156", "initiator_port": 53711, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64264, "last_frame": 64265, "first_seen_epoch": "1634916403.08041", "last_seen_epoch": "1634916403.08068", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-3c77713b6ed3f136e5ea2c63", "transport": "udp", "stream": 810, "initiator_ip": "10.10.22.156", "initiator_port": 53712, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64266, "last_frame": 64267, "first_seen_epoch": "1634916403.08123", "last_seen_epoch": "1634916403.08151", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-ce329bc86424b17673bb2a2b", "transport": "udp", "stream": 811, "initiator_ip": "10.10.22.156", "initiator_port": 55723, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64268, "last_frame": 64269, "first_seen_epoch": "1634916403.159357", "last_seen_epoch": "1634916403.159676", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-77970bb4cd7b96c269c80472", "transport": "udp", "stream": 812, "initiator_ip": "10.10.22.156", "initiator_port": 55724, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64270, "last_frame": 64271, "first_seen_epoch": "1634916403.160713", "last_seen_epoch": "1634916403.16095", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-b3e5d73bcd87c9965f4871e3", "transport": "udp", "stream": 813, "initiator_ip": "10.10.22.156", "initiator_port": 62503, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64272, "last_frame": 64273, "first_seen_epoch": "1634916403.254167", "last_seen_epoch": "1634916403.254458", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-742e518cae7543d861e14a12", "transport": "udp", "stream": 814, "initiator_ip": "10.10.22.156", "initiator_port": 62504, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64274, "last_frame": 64275, "first_seen_epoch": "1634916403.255023", "last_seen_epoch": "1634916403.255252", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-897359816cf211ff8c4c4f2d", "transport": "udp", "stream": 815, "initiator_ip": "10.10.22.156", "initiator_port": 58671, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64281, "last_frame": 64282, "first_seen_epoch": "1634916403.380922", "last_seen_epoch": "1634916403.381271", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-345edc1a43a81022a6be0817", "transport": "udp", "stream": 816, "initiator_ip": "10.10.22.156", "initiator_port": 58672, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64283, "last_frame": 64284, "first_seen_epoch": "1634916403.381816", "last_seen_epoch": "1634916403.382167", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-60413be2f3f48a8a2cb850b7", "transport": "udp", "stream": 817, "initiator_ip": "10.10.22.156", "initiator_port": 50872, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64285, "last_frame": 64286, "first_seen_epoch": "1634916403.426759", "last_seen_epoch": "1634916403.427051", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-22d4e7d6df5b524d7a9a6f65", "transport": "udp", "stream": 818, "initiator_ip": "10.10.22.156", "initiator_port": 50873, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64287, "last_frame": 64288, "first_seen_epoch": "1634916403.42769", "last_seen_epoch": "1634916403.427988", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-9c076c99541040f572de9a49", "transport": "udp", "stream": 819, "initiator_ip": "10.10.22.156", "initiator_port": 63434, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64289, "last_frame": 64290, "first_seen_epoch": "1634916403.553995", "last_seen_epoch": "1634916403.554272", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-c82662d4ddf93cda4c1ef7ce", "transport": "udp", "stream": 820, "initiator_ip": "10.10.22.156", "initiator_port": 63435, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64291, "last_frame": 64292, "first_seen_epoch": "1634916403.555894", "last_seen_epoch": "1634916403.556159", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-511573767e65a4cb3a477a01", "transport": "udp", "stream": 821, "initiator_ip": "10.10.22.156", "initiator_port": 52072, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64293, "last_frame": 64294, "first_seen_epoch": "1634916403.592513", "last_seen_epoch": "1634916403.592859", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-8c769f3716fbc0ba1deaf25f", "transport": "udp", "stream": 822, "initiator_ip": "10.10.22.156", "initiator_port": 52073, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 64295, "last_frame": 64296, "first_seen_epoch": "1634916403.593368", "last_seen_epoch": "1634916403.593604", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-96658802d859feb629d24ba1", "transport": "udp", "stream": 823, "initiator_ip": "10.10.22.156", "initiator_port": 52062, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64418, "last_frame": 64421, "first_seen_epoch": "1634916461.486699", "last_seen_epoch": "1634916461.695322", "packets": 3, "bytes": 265, "initiator_bytes": 166, "responder_bytes": 99 }, { "flow_id": "flow-e184e9adf8f3d16a2b9bd19e", "transport": "tcp", "stream": 1273, "initiator_ip": "10.10.22.156", "initiator_port": 50082, "responder_ip": "173.249.53.15", "responder_port": 25, "first_frame": 64422, "last_frame": 64557, "first_seen_epoch": "1634916461.696492", "last_seen_epoch": "1634916467.934889", "packets": 54, "bytes": 7969, "initiator_bytes": 2158, "responder_bytes": 5811 }, { "flow_id": "flow-60b31b032ac03910f3653990", "transport": "tcp", "stream": 1274, "initiator_ip": "10.10.22.156", "initiator_port": 50083, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 64501, "last_frame": 64546, "first_seen_epoch": "1634916466.133342", "last_seen_epoch": "1634916467.28513", "packets": 17, "bytes": 4610, "initiator_bytes": 1454, "responder_bytes": 3156 }, { "flow_id": "flow-62faf73d36373666ee8434b6", "transport": "udp", "stream": 824, "initiator_ip": "10.10.22.156", "initiator_port": 55744, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64576, "last_frame": 64577, "first_seen_epoch": "1634916472.80523", "last_seen_epoch": "1634916472.86132", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-9425794806d9ee3fc2d2d1ad", "transport": "tcp", "stream": 1275, "initiator_ip": "10.10.22.156", "initiator_port": 50084, "responder_ip": "52.96.57.18", "responder_port": 25, "first_frame": 64578, "last_frame": 64781, "first_seen_epoch": "1634916472.862574", "last_seen_epoch": "1634916489.056963", "packets": 53, "bytes": 9002, "initiator_bytes": 2135, "responder_bytes": 6867 }, { "flow_id": "flow-4ccd6b21dff3d74c6acd55c2", "transport": "udp", "stream": 825, "initiator_ip": "10.10.22.156", "initiator_port": 58115, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64697, "last_frame": 64698, "first_seen_epoch": "1634916483.815052", "last_seen_epoch": "1634916483.852171", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-e17cef73b3c9db454baf4e0d", "transport": "tcp", "stream": 1276, "initiator_ip": "10.10.22.156", "initiator_port": 50085, "responder_ip": "221.176.66.188", "responder_port": 25, "first_frame": 64699, "last_frame": 64833, "first_seen_epoch": "1634916483.853137", "last_seen_epoch": "1634916492.666266", "packets": 50, "bytes": 8926, "initiator_bytes": 2175, "responder_bytes": 6751 }, { "flow_id": "flow-c81bbfcf5dc5f50ff2ecd5b4", "transport": "udp", "stream": 826, "initiator_ip": "10.10.22.156", "initiator_port": 49497, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 64868, "last_frame": 64869, "first_seen_epoch": "1634916507.659138", "last_seen_epoch": "1634916507.707543", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-a73cbd722c1256c1fc465251", "transport": "tcp", "stream": 1277, "initiator_ip": "10.10.22.156", "initiator_port": 50086, "responder_ip": "66.96.147.96", "responder_port": 25, "first_frame": 64871, "last_frame": 64987, "first_seen_epoch": "1634916507.708976", "last_seen_epoch": "1634916514.289642", "packets": 50, "bytes": 9310, "initiator_bytes": 1989, "responder_bytes": 7321 }, { "flow_id": "flow-c1abf92d7bf076400f13aae1", "transport": "udp", "stream": 827, "initiator_ip": "10.10.22.156", "initiator_port": 63560, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65025, "last_frame": 65028, "first_seen_epoch": "1634916530.578947", "last_seen_epoch": "1634916530.966581", "packets": 3, "bytes": 258, "initiator_bytes": 148, "responder_bytes": 110 }, { "flow_id": "flow-7968d060a2c3d2ec6d3e9c5d", "transport": "tcp", "stream": 1278, "initiator_ip": "10.10.22.156", "initiator_port": 50087, "responder_ip": "197.97.195.226", "responder_port": 25, "first_frame": 65029, "last_frame": 65211, "first_seen_epoch": "1634916530.967614", "last_seen_epoch": "1634916545.234453", "packets": 35, "bytes": 2523, "initiator_bytes": 1141, "responder_bytes": 1382 }, { "flow_id": "flow-f3a687b1bbaf47043674d517", "transport": "udp", "stream": 828, "initiator_ip": "10.10.22.156", "initiator_port": 49697, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65070, "last_frame": 65074, "first_seen_epoch": "1634916539.198314", "last_seen_epoch": "1634916539.281605", "packets": 3, "bytes": 383, "initiator_bytes": 152, "responder_bytes": 231 }, { "flow_id": "flow-0f6a152cd5da43786ac826bd", "transport": "tcp", "stream": 1279, "initiator_ip": "10.10.22.156", "initiator_port": 50088, "responder_ip": "52.96.103.34", "responder_port": 25, "first_frame": 65075, "last_frame": 65297, "first_seen_epoch": "1634916539.282869", "last_seen_epoch": "1634916561.094387", "packets": 54, "bytes": 9070, "initiator_bytes": 2197, "responder_bytes": 6873 }, { "flow_id": "flow-61f0cafc10c85aaffce153e6", "transport": "udp", "stream": 829, "initiator_ip": "10.10.22.156", "initiator_port": 61291, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65253, "last_frame": 65256, "first_seen_epoch": "1634916559.022681", "last_seen_epoch": "1634916559.20444", "packets": 3, "bytes": 262, "initiator_bytes": 164, "responder_bytes": 98 }, { "flow_id": "flow-ed68f31299cab25e8619721d", "transport": "tcp", "stream": 1280, "initiator_ip": "10.10.22.156", "initiator_port": 50089, "responder_ip": "85.13.132.2", "responder_port": 25, "first_frame": 65257, "last_frame": 65407, "first_seen_epoch": "1634916559.205412", "last_seen_epoch": "1634916572.268397", "packets": 55, "bytes": 7744, "initiator_bytes": 2182, "responder_bytes": 5562 }, { "flow_id": "flow-5c36c8a05bb9e85986992056", "transport": "udp", "stream": 830, "initiator_ip": "10.10.22.156", "initiator_port": 49423, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65453, "last_frame": 65457, "first_seen_epoch": "1634916592.69665", "last_seen_epoch": "1634916593.10875", "packets": 3, "bytes": 250, "initiator_bytes": 156, "responder_bytes": 94 }, { "flow_id": "flow-f96206b2a1c912cbe6fd15e9", "transport": "tcp", "stream": 1281, "initiator_ip": "10.10.22.156", "initiator_port": 50090, "responder_ip": "115.112.78.166", "responder_port": 25, "first_frame": 65458, "last_frame": 65471, "first_seen_epoch": "1634916593.109709", "last_seen_epoch": "1634916594.950293", "packets": 7, "bytes": 467, "initiator_bytes": 228, "responder_bytes": 239 }, { "flow_id": "flow-dcfcb8a2c53152f246b1fcda", "transport": "tcp", "stream": 1282, "initiator_ip": "10.10.22.157", "initiator_port": 50184, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65547, "last_frame": 65552, "first_seen_epoch": "1634916640.539298", "last_seen_epoch": "1634916640.874997", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6a30c5f88352c74170bed30a", "transport": "tcp", "stream": 1283, "initiator_ip": "10.10.22.157", "initiator_port": 50185, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65557, "last_frame": 65568, "first_seen_epoch": "1634916644.901952", "last_seen_epoch": "1634916648.361443", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-f9f1a18928354687d937ffe6", "transport": "tcp", "stream": 1284, "initiator_ip": "10.10.22.156", "initiator_port": 50091, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 65572, "last_frame": 65750, "first_seen_epoch": "1634916650.248666", "last_seen_epoch": "1634916660.97738", "packets": 22, "bytes": 4584, "initiator_bytes": 2218, "responder_bytes": 2366 }, { "flow_id": "flow-533ffbb7c81faa7297a8e683", "transport": "tcp", "stream": 1285, "initiator_ip": "10.10.22.156", "initiator_port": 50092, "responder_ip": "10.10.22.22", "responder_port": 135, "first_frame": 65587, "last_frame": 65937, "first_seen_epoch": "1634916650.25589", "last_seen_epoch": "1634916680.274317", "packets": 13, "bytes": 1398, "initiator_bytes": 674, "responder_bytes": 724 }, { "flow_id": "flow-73054f2572677e52d971ef75", "transport": "tcp", "stream": 1286, "initiator_ip": "10.10.22.156", "initiator_port": 50093, "responder_ip": "10.10.22.22", "responder_port": 49679, "first_frame": 65594, "last_frame": 65934, "first_seen_epoch": "1634916650.257562", "last_seen_epoch": "1634916680.273876", "packets": 17, "bytes": 2532, "initiator_bytes": 1534, "responder_bytes": 998 }, { "flow_id": "flow-b60babcafd794ab0d47dd005", "transport": "udp", "stream": 831, "initiator_ip": "10.10.22.157", "initiator_port": 51637, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65615, "last_frame": 65617, "first_seen_epoch": "1634916651.224305", "last_seen_epoch": "1634916651.224658", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-b456e20fbcb797753a53f34b", "transport": "udp", "stream": 832, "initiator_ip": "10.10.22.157", "initiator_port": 53558, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 65621, "last_frame": 65621, "first_seen_epoch": "1634916651.225807", "last_seen_epoch": "1634916651.225807", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-252eddd4f369e6691b571581", "transport": "udp", "stream": 833, "initiator_ip": "10.10.22.157", "initiator_port": 55904, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65622, "last_frame": 65623, "first_seen_epoch": "1634916651.227721", "last_seen_epoch": "1634916651.228384", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-49b3d187b62a5a93577918e6", "transport": "tcp", "stream": 1287, "initiator_ip": "10.10.22.157", "initiator_port": 50186, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65628, "last_frame": 65633, "first_seen_epoch": "1634916652.368626", "last_seen_epoch": "1634916652.671443", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bea30c06cdd4fadcc206ae14", "transport": "udp", "stream": 834, "initiator_ip": "10.10.22.156", "initiator_port": 49817, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65646, "last_frame": 65649, "first_seen_epoch": "1634916653.913882", "last_seen_epoch": "1634916654.032955", "packets": 3, "bytes": 309, "initiator_bytes": 174, "responder_bytes": 135 }, { "flow_id": "flow-07ba1d73312910892ffd2bc6", "transport": "tcp", "stream": 1288, "initiator_ip": "10.10.22.156", "initiator_port": 50094, "responder_ip": "123.58.177.213", "responder_port": 25, "first_frame": 65650, "last_frame": 65819, "first_seen_epoch": "1634916654.034323", "last_seen_epoch": "1634916666.815101", "packets": 45, "bytes": 7903, "initiator_bytes": 1826, "responder_bytes": 6077 }, { "flow_id": "flow-bfb78bbf1a03c02d24448835", "transport": "udp", "stream": 835, "initiator_ip": "10.10.22.157", "initiator_port": 55023, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65658, "last_frame": 65659, "first_seen_epoch": "1634916655.027139", "last_seen_epoch": "1634916655.027546", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-a6edd6402f38498f66d78add", "transport": "tcp", "stream": 1289, "initiator_ip": "10.10.22.157", "initiator_port": 50187, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 65660, "last_frame": 65815, "first_seen_epoch": "1634916655.029118", "last_seen_epoch": "1634916665.80753", "packets": 28, "bytes": 8101, "initiator_bytes": 5369, "responder_bytes": 2732 }, { "flow_id": "flow-140f734a8b16991357f29f50", "transport": "udp", "stream": 836, "initiator_ip": "10.10.22.157", "initiator_port": 60648, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 65700, "last_frame": 65705, "first_seen_epoch": "1634916656.680969", "last_seen_epoch": "1634916656.75832", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1b6b62a3ffb2e1a2e9760908", "transport": "tcp", "stream": 1290, "initiator_ip": "10.10.22.157", "initiator_port": 50188, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65706, "last_frame": 65715, "first_seen_epoch": "1634916656.760258", "last_seen_epoch": "1634916657.05245", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-99a3a1ff0630a87925917e1d", "transport": "udp", "stream": 837, "initiator_ip": "10.10.22.157", "initiator_port": 64596, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 65751, "last_frame": 65752, "first_seen_epoch": "1634916661.06887", "last_seen_epoch": "1634916661.182586", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4386c0a2bc53caa2387f25ab", "transport": "tcp", "stream": 1291, "initiator_ip": "10.10.22.157", "initiator_port": 50189, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65753, "last_frame": 65759, "first_seen_epoch": "1634916661.183833", "last_seen_epoch": "1634916661.486164", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7d5ed962480dd6bcb3a19afa", "transport": "udp", "stream": 838, "initiator_ip": "10.10.22.157", "initiator_port": 63912, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 65800, "last_frame": 65804, "first_seen_epoch": "1634916665.492322", "last_seen_epoch": "1634916665.563536", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6ce162d1b2fd2c205ff18b80", "transport": "tcp", "stream": 1292, "initiator_ip": "10.10.22.157", "initiator_port": 50190, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65805, "last_frame": 65816, "first_seen_epoch": "1634916665.564844", "last_seen_epoch": "1634916665.89629", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-25b44b833b83993af8c807b2", "transport": "tcp", "stream": 1293, "initiator_ip": "10.10.22.158", "initiator_port": 49855, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 65822, "last_frame": 66648, "first_seen_epoch": "1634916669.08309", "last_seen_epoch": "1634916779.082818", "packets": 21, "bytes": 5267, "initiator_bytes": 1750, "responder_bytes": 3517 }, { "flow_id": "flow-445cc4a11b9a1b2b90e43b99", "transport": "tcp", "stream": 1294, "initiator_ip": "10.10.22.157", "initiator_port": 50191, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65837, "last_frame": 65842, "first_seen_epoch": "1634916669.91451", "last_seen_epoch": "1634916670.231597", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-13cf14f724d12dd7aa76dfb3", "transport": "udp", "stream": 839, "initiator_ip": "10.10.22.156", "initiator_port": 64670, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 65854, "last_frame": 65857, "first_seen_epoch": "1634916671.267416", "last_seen_epoch": "1634916671.628154", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-d5fe28ac2fe07fb64e84595f", "transport": "tcp", "stream": 1295, "initiator_ip": "10.10.22.156", "initiator_port": 50095, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 65858, "last_frame": 66010, "first_seen_epoch": "1634916671.62909", "last_seen_epoch": "1634916683.711803", "packets": 26, "bytes": 5407, "initiator_bytes": 1338, "responder_bytes": 4069 }, { "flow_id": "flow-6feb4f78e0ff99290f9031ca", "transport": "tcp", "stream": 1296, "initiator_ip": "10.10.22.157", "initiator_port": 50192, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65868, "last_frame": 65875, "first_seen_epoch": "1634916674.242471", "last_seen_epoch": "1634916674.545463", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9ffd8975e195c355b9b4a8aa", "transport": "tcp", "stream": 1297, "initiator_ip": "10.10.22.156", "initiator_port": 50096, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 65888, "last_frame": 66089, "first_seen_epoch": "1634916677.26578", "last_seen_epoch": "1634916689.036892", "packets": 49, "bytes": 7405, "initiator_bytes": 2167, "responder_bytes": 5238 }, { "flow_id": "flow-366b79783c790cdf0397af7f", "transport": "tcp", "stream": 1298, "initiator_ip": "10.10.22.157", "initiator_port": 50193, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65895, "last_frame": 65900, "first_seen_epoch": "1634916678.555445", "last_seen_epoch": "1634916678.856472", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dc2c9974cbc80205b2e4b17f", "transport": "udp", "stream": 840, "initiator_ip": "10.10.22.157", "initiator_port": 60903, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 65993, "last_frame": 65994, "first_seen_epoch": "1634916682.868973", "last_seen_epoch": "1634916682.902695", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4c59fc79eff8e1559e995579", "transport": "tcp", "stream": 1299, "initiator_ip": "10.10.22.157", "initiator_port": 50194, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 65995, "last_frame": 66004, "first_seen_epoch": "1634916682.904045", "last_seen_epoch": "1634916683.184315", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2fde1612fa65d16493a248f8", "transport": "udp", "stream": 841, "initiator_ip": "10.10.22.157", "initiator_port": 64873, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66051, "last_frame": 66053, "first_seen_epoch": "1634916687.19667", "last_seen_epoch": "1634916687.251446", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7cd3e313a788fa1c3ff02db3", "transport": "tcp", "stream": 1300, "initiator_ip": "10.10.22.157", "initiator_port": 50195, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66054, "last_frame": 66065, "first_seen_epoch": "1634916687.252806", "last_seen_epoch": "1634916687.557673", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4f6a4f5e44d1113d9e27deb9", "transport": "tcp", "stream": 1301, "initiator_ip": "10.10.22.156", "initiator_port": 50097, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 66056, "last_frame": 66150, "first_seen_epoch": "1634916687.307205", "last_seen_epoch": "1634916693.781122", "packets": 25, "bytes": 5341, "initiator_bytes": 1272, "responder_bytes": 4069 }, { "flow_id": "flow-9687f8e44621c465e68b83e9", "transport": "udp", "stream": 842, "initiator_ip": "10.10.22.157", "initiator_port": 59711, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66123, "last_frame": 66124, "first_seen_epoch": "1634916691.570709", "last_seen_epoch": "1634916691.627791", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-42f0fb56d49ad45d55f0547b", "transport": "tcp", "stream": 1302, "initiator_ip": "10.10.22.157", "initiator_port": 50196, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66125, "last_frame": 66130, "first_seen_epoch": "1634916691.629124", "last_seen_epoch": "1634916691.918269", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-22d4972998bccb311307eeda", "transport": "tcp", "stream": 1303, "initiator_ip": "10.10.22.157", "initiator_port": 50197, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66155, "last_frame": 66161, "first_seen_epoch": "1634916695.93181", "last_seen_epoch": "1634916696.248622", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2e349f2b2a3467c8ff687017", "transport": "udp", "stream": 843, "initiator_ip": "10.10.22.156", "initiator_port": 50670, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66172, "last_frame": 66176, "first_seen_epoch": "1634916698.150802", "last_seen_epoch": "1634916698.559572", "packets": 3, "bytes": 238, "initiator_bytes": 148, "responder_bytes": 90 }, { "flow_id": "flow-6f00b5ca31bc2e88f15ab127", "transport": "tcp", "stream": 1304, "initiator_ip": "10.10.22.156", "initiator_port": 50098, "responder_ip": "209.203.34.199", "responder_port": 25, "first_frame": 66177, "last_frame": 66182, "first_seen_epoch": "1634916698.560501", "last_seen_epoch": "1634916698.856907", "packets": 4, "bytes": 232, "initiator_bytes": 120, "responder_bytes": 112 }, { "flow_id": "flow-c7ed08573e84077a3fb737c0", "transport": "tcp", "stream": 1305, "initiator_ip": "10.10.22.157", "initiator_port": 50198, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66187, "last_frame": 66192, "first_seen_epoch": "1634916700.259515", "last_seen_epoch": "1634916700.554663", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9a92dfa544e3e3d42fd1063a", "transport": "tcp", "stream": 1306, "initiator_ip": "10.10.22.157", "initiator_port": 50199, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66197, "last_frame": 66204, "first_seen_epoch": "1634916704.570459", "last_seen_epoch": "1634916704.864074", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-edfd03979c61a353c1dbbf5c", "transport": "udp", "stream": 844, "initiator_ip": "10.10.22.157", "initiator_port": 53805, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66209, "last_frame": 66210, "first_seen_epoch": "1634916708.869411", "last_seen_epoch": "1634916708.922591", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-147ab30f627315d5ac44f1ce", "transport": "tcp", "stream": 1307, "initiator_ip": "10.10.22.157", "initiator_port": 50200, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66211, "last_frame": 66216, "first_seen_epoch": "1634916708.923901", "last_seen_epoch": "1634916709.208981", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9cec92784bd44760f83aa45b", "transport": "udp", "stream": 845, "initiator_ip": "10.10.22.156", "initiator_port": 49904, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66223, "last_frame": 66226, "first_seen_epoch": "1634916711.897566", "last_seen_epoch": "1634916711.898055", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-326cee560cbb6afb5389417d", "transport": "udp", "stream": 846, "initiator_ip": "10.10.22.156", "initiator_port": 52058, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 66229, "last_frame": 66229, "first_seen_epoch": "1634916711.89882", "last_seen_epoch": "1634916711.89882", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-ca380ba489f2baa77a11cca7", "transport": "udp", "stream": 847, "initiator_ip": "10.10.22.156", "initiator_port": 59352, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66231, "last_frame": 66232, "first_seen_epoch": "1634916711.901387", "last_seen_epoch": "1634916711.902427", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-f697531de7ac9161d433f70f", "transport": "udp", "stream": 848, "initiator_ip": "10.10.22.157", "initiator_port": 63314, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66235, "last_frame": 66237, "first_seen_epoch": "1634916713.229058", "last_seen_epoch": "1634916713.292617", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5efc33d4f98cf381864a7332", "transport": "tcp", "stream": 1308, "initiator_ip": "10.10.22.157", "initiator_port": 50201, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66238, "last_frame": 66244, "first_seen_epoch": "1634916713.293961", "last_seen_epoch": "1634916713.596182", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6752de887d9443f786a46e84", "transport": "udp", "stream": 849, "initiator_ip": "10.10.22.156", "initiator_port": 58181, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66248, "last_frame": 66249, "first_seen_epoch": "1634916715.105701", "last_seen_epoch": "1634916715.106019", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-7a26640b6af3fdb50d5a1c8d", "transport": "tcp", "stream": 1309, "initiator_ip": "10.10.22.156", "initiator_port": 50099, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 66250, "last_frame": 66317, "first_seen_epoch": "1634916715.108029", "last_seen_epoch": "1634916725.868609", "packets": 28, "bytes": 8101, "initiator_bytes": 5369, "responder_bytes": 2732 }, { "flow_id": "flow-35a70816b1d526cc7ced5d26", "transport": "udp", "stream": 850, "initiator_ip": "10.10.22.157", "initiator_port": 52986, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66283, "last_frame": 66284, "first_seen_epoch": "1634916717.603185", "last_seen_epoch": "1634916717.654111", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e6123a662dccf34e400cb708", "transport": "tcp", "stream": 1310, "initiator_ip": "10.10.22.157", "initiator_port": 50202, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66285, "last_frame": 66293, "first_seen_epoch": "1634916717.655307", "last_seen_epoch": "1634916717.938301", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-65765ece757a5c695bfee8e2", "transport": "tcp", "stream": 1311, "initiator_ip": "10.10.22.157", "initiator_port": 50203, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66301, "last_frame": 66307, "first_seen_epoch": "1634916721.961993", "last_seen_epoch": "1634916722.286302", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-61d60ad72f98be6082f2ed4d", "transport": "tcp", "stream": 1312, "initiator_ip": "10.10.22.157", "initiator_port": 50204, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66319, "last_frame": 66324, "first_seen_epoch": "1634916726.289775", "last_seen_epoch": "1634916726.630937", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-707be963ba917b1326a962d6", "transport": "tcp", "stream": 1313, "initiator_ip": "10.10.22.157", "initiator_port": 50205, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66330, "last_frame": 66337, "first_seen_epoch": "1634916730.650609", "last_seen_epoch": "1634916730.986291", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-306ba1aea88b3689f0d9a58e", "transport": "udp", "stream": 851, "initiator_ip": "10.10.22.157", "initiator_port": 62983, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66338, "last_frame": 66339, "first_seen_epoch": "1634916731.074763", "last_seen_epoch": "1634916731.075094", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-2016fd7cf10de112a0fed137", "transport": "udp", "stream": 852, "initiator_ip": "10.10.22.157", "initiator_port": 59159, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66340, "last_frame": 66341, "first_seen_epoch": "1634916731.07559", "last_seen_epoch": "1634916731.075832", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-8cd16b05abd92e8952b10216", "transport": "udp", "stream": 853, "initiator_ip": "10.10.22.157", "initiator_port": 49410, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66346, "last_frame": 66347, "first_seen_epoch": "1634916735.011579", "last_seen_epoch": "1634916735.109496", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3a779185c5fb5c76bf17f892", "transport": "tcp", "stream": 1314, "initiator_ip": "10.10.22.157", "initiator_port": 50206, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66348, "last_frame": 66354, "first_seen_epoch": "1634916735.110822", "last_seen_epoch": "1634916735.425007", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-47223b115f5c61622583b32f", "transport": "udp", "stream": 854, "initiator_ip": "10.10.22.157", "initiator_port": 52643, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66361, "last_frame": 66362, "first_seen_epoch": "1634916739.431286", "last_seen_epoch": "1634916739.629171", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8ea4a58ec09477eec16c2567", "transport": "tcp", "stream": 1315, "initiator_ip": "10.10.22.157", "initiator_port": 50207, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66363, "last_frame": 66370, "first_seen_epoch": "1634916739.630413", "last_seen_epoch": "1634916739.951422", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5a1d01e86612338261311e89", "transport": "udp", "stream": 855, "initiator_ip": "10.10.22.158", "initiator_port": 55006, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66381, "last_frame": 66383, "first_seen_epoch": "1634916743.597755", "last_seen_epoch": "1634916743.598056", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-7f57fc63e4cbcf4c4b39c1ab", "transport": "udp", "stream": 856, "initiator_ip": "10.10.22.158", "initiator_port": 58505, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66386, "last_frame": 66389, "first_seen_epoch": "1634916743.599382", "last_seen_epoch": "1634916743.600644", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-7ecee46c122335deac682041", "transport": "udp", "stream": 857, "initiator_ip": "10.10.22.158", "initiator_port": 50706, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 66388, "last_frame": 66388, "first_seen_epoch": "1634916743.599773", "last_seen_epoch": "1634916743.599773", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-a48a3279b98e4cc84b5d851c", "transport": "udp", "stream": 858, "initiator_ip": "10.10.22.157", "initiator_port": 53555, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66390, "last_frame": 66392, "first_seen_epoch": "1634916743.962971", "last_seen_epoch": "1634916744.014508", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9b6e474a9aa29199e916fbff", "transport": "tcp", "stream": 1316, "initiator_ip": "10.10.22.157", "initiator_port": 50208, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66393, "last_frame": 66399, "first_seen_epoch": "1634916744.01579", "last_seen_epoch": "1634916744.336364", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-35b193dd899bf6b373174be0", "transport": "udp", "stream": 859, "initiator_ip": "10.10.22.158", "initiator_port": 58203, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66406, "last_frame": 66407, "first_seen_epoch": "1634916746.007359", "last_seen_epoch": "1634916746.007694", "packets": 2, "bytes": 192, "initiator_bytes": 88, "responder_bytes": 104 }, { "flow_id": "flow-04185bc2d292695b35cf961d", "transport": "tcp", "stream": 1317, "initiator_ip": "10.10.22.158", "initiator_port": 49856, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 66408, "last_frame": 66478, "first_seen_epoch": "1634916746.009558", "last_seen_epoch": "1634916756.787536", "packets": 28, "bytes": 8101, "initiator_bytes": 5369, "responder_bytes": 2732 }, { "flow_id": "flow-36dc573a0ac5464f3664ba84", "transport": "udp", "stream": 860, "initiator_ip": "10.10.22.156", "initiator_port": 60311, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66439, "last_frame": 66440, "first_seen_epoch": "1634916747.482631", "last_seen_epoch": "1634916747.482971", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-c9f4a241ac77cec4e0ac6d3b", "transport": "udp", "stream": 861, "initiator_ip": "10.10.22.156", "initiator_port": 63629, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66441, "last_frame": 66442, "first_seen_epoch": "1634916747.483471", "last_seen_epoch": "1634916747.483707", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-bffb7107c5ca338632fad83a", "transport": "tcp", "stream": 1318, "initiator_ip": "10.10.22.157", "initiator_port": 50209, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66444, "last_frame": 66449, "first_seen_epoch": "1634916748.369731", "last_seen_epoch": "1634916748.691731", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ba0a5dcfa36e1524753dfd47", "transport": "udp", "stream": 862, "initiator_ip": "10.10.22.158", "initiator_port": 65299, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66450, "last_frame": 66451, "first_seen_epoch": "1634916749.071172", "last_seen_epoch": "1634916749.071493", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-13c1f4c500e9dc6455357a5f", "transport": "udp", "stream": 863, "initiator_ip": "10.10.22.158", "initiator_port": 56796, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66452, "last_frame": 78484, "first_seen_epoch": "1634916749.071885", "last_seen_epoch": "1634917949.226998", "packets": 4, "bytes": 454, "initiator_bytes": 152, "responder_bytes": 302 }, { "flow_id": "flow-2439c09a2e3857e746b97eae", "transport": "tcp", "stream": 1319, "initiator_ip": "10.10.22.157", "initiator_port": 50210, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66460, "last_frame": 66467, "first_seen_epoch": "1634916752.700371", "last_seen_epoch": "1634916753.073901", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-b27822115608eff2cf312cd4", "transport": "tcp", "stream": 1320, "initiator_ip": "10.10.22.157", "initiator_port": 50211, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66479, "last_frame": 66485, "first_seen_epoch": "1634916757.088929", "last_seen_epoch": "1634916757.40503", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-30581788b2e04f19912e469a", "transport": "udp", "stream": 864, "initiator_ip": "10.10.22.157", "initiator_port": 52788, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66491, "last_frame": 66492, "first_seen_epoch": "1634916761.415862", "last_seen_epoch": "1634916761.516805", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-20ac7c6d3c1a69cbd3503198", "transport": "tcp", "stream": 1321, "initiator_ip": "10.10.22.157", "initiator_port": 50212, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66493, "last_frame": 66498, "first_seen_epoch": "1634916761.517663", "last_seen_epoch": "1634916761.801549", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8d0580d4cc97e194dc4d6df3", "transport": "tcp", "stream": 1322, "initiator_ip": "10.10.22.156", "initiator_port": 50100, "responder_ip": "10.10.22.1", "responder_port": 445, "first_frame": 66503, "last_frame": 66504, "first_seen_epoch": "1634916764.249781", "last_seen_epoch": "1634916764.249862", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-54ce10ca042e63964810347e", "transport": "tcp", "stream": 1323, "initiator_ip": "10.10.22.156", "initiator_port": 50100, "responder_ip": "10.10.22.1", "responder_port": 445, "first_frame": 66505, "last_frame": 66506, "first_seen_epoch": "1634916764.760188", "last_seen_epoch": "1634916764.760382", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-ff52b3d38976a22a07f8faf9", "transport": "tcp", "stream": 1324, "initiator_ip": "10.10.22.156", "initiator_port": 50100, "responder_ip": "10.10.22.1", "responder_port": 445, "first_frame": 66507, "last_frame": 66508, "first_seen_epoch": "1634916765.275146", "last_seen_epoch": "1634916765.275299", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-78b43c42454c1cde396f0bb1", "transport": "tcp", "stream": 1325, "initiator_ip": "10.10.22.156", "initiator_port": 50101, "responder_ip": "10.10.22.1", "responder_port": 139, "first_frame": 66509, "last_frame": 66510, "first_seen_epoch": "1634916765.355628", "last_seen_epoch": "1634916765.355739", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6f0937c312130031c7a83bd2", "transport": "tcp", "stream": 1326, "initiator_ip": "10.10.22.156", "initiator_port": 50100, "responder_ip": "10.10.22.1", "responder_port": 445, "first_frame": 66511, "last_frame": 66512, "first_seen_epoch": "1634916765.790251", "last_seen_epoch": "1634916765.790337", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-79ab34a2c629a8e0c09dbfb8", "transport": "udp", "stream": 865, "initiator_ip": "10.10.22.157", "initiator_port": 64274, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66513, "last_frame": 66514, "first_seen_epoch": "1634916765.807396", "last_seen_epoch": "1634916765.86168", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-32b7fd8991072fab47a37309", "transport": "tcp", "stream": 1327, "initiator_ip": "10.10.22.157", "initiator_port": 50213, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66515, "last_frame": 66524, "first_seen_epoch": "1634916765.862878", "last_seen_epoch": "1634916766.187", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-51f8e2e795d71d0f7646bfc7", "transport": "tcp", "stream": 1328, "initiator_ip": "10.10.22.156", "initiator_port": 50101, "responder_ip": "10.10.22.1", "responder_port": 139, "first_frame": 66516, "last_frame": 66517, "first_seen_epoch": "1634916765.867849", "last_seen_epoch": "1634916765.868017", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dd9aaff542d59232a7dab5e6", "transport": "tcp", "stream": 1329, "initiator_ip": "10.10.22.156", "initiator_port": 50100, "responder_ip": "10.10.22.1", "responder_port": 445, "first_frame": 66525, "last_frame": 66526, "first_seen_epoch": "1634916766.291994", "last_seen_epoch": "1634916766.29216", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-738906b708dbc29f85aa8f24", "transport": "tcp", "stream": 1330, "initiator_ip": "10.10.22.156", "initiator_port": 50101, "responder_ip": "10.10.22.1", "responder_port": 139, "first_frame": 66527, "last_frame": 66528, "first_seen_epoch": "1634916766.384214", "last_seen_epoch": "1634916766.384381", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-9f8a12c217f7d586106fe915", "transport": "tcp", "stream": 1331, "initiator_ip": "10.10.22.156", "initiator_port": 50101, "responder_ip": "10.10.22.1", "responder_port": 139, "first_frame": 66529, "last_frame": 66530, "first_seen_epoch": "1634916766.900927", "last_seen_epoch": "1634916766.901098", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f4068e71ec321b542a3362ef", "transport": "tcp", "stream": 1332, "initiator_ip": "10.10.22.156", "initiator_port": 50101, "responder_ip": "10.10.22.1", "responder_port": 139, "first_frame": 66531, "last_frame": 66532, "first_seen_epoch": "1634916767.41493", "last_seen_epoch": "1634916767.415089", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-d1b95573c657f404b8d4fb19", "transport": "udp", "stream": 866, "initiator_ip": "10.10.22.157", "initiator_port": 55052, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 66536, "last_frame": 66537, "first_seen_epoch": "1634916770.198737", "last_seen_epoch": "1634916770.294219", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4bfb55f3a8b03f38f314a951", "transport": "tcp", "stream": 1333, "initiator_ip": "10.10.22.157", "initiator_port": 50214, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66538, "last_frame": 66544, "first_seen_epoch": "1634916770.295597", "last_seen_epoch": "1634916770.666632", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b11ebb2028b6b3a86ba5753e", "transport": "tcp", "stream": 1334, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.1", "responder_port": 80, "first_frame": 66546, "last_frame": 66547, "first_seen_epoch": "1634916772.19732", "last_seen_epoch": "1634916772.197408", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-6e188500a5f808473bc7fdc7", "transport": "tcp", "stream": 1335, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.1", "responder_port": 80, "first_frame": 66548, "last_frame": 66549, "first_seen_epoch": "1634916772.697553", "last_seen_epoch": "1634916772.697714", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-98ec80721ff9052fc5b88c6d", "transport": "tcp", "stream": 1336, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.1", "responder_port": 80, "first_frame": 66551, "last_frame": 66552, "first_seen_epoch": "1634916773.197586", "last_seen_epoch": "1634916773.197732", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-dadc3e14fc2e71b9bb676210", "transport": "tcp", "stream": 1337, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.1", "responder_port": 80, "first_frame": 66553, "last_frame": 66554, "first_seen_epoch": "1634916773.712169", "last_seen_epoch": "1634916773.712331", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-5423a0b6ba4b9af75bc70a57", "transport": "tcp", "stream": 1338, "initiator_ip": "10.10.22.156", "initiator_port": 50103, "responder_ip": "10.10.22.1", "responder_port": 80, "first_frame": 66555, "last_frame": 66556, "first_seen_epoch": "1634916774.228913", "last_seen_epoch": "1634916774.229082", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-e043f0416d353b066955ed0c", "transport": "tcp", "stream": 1339, "initiator_ip": "10.10.22.157", "initiator_port": 50215, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66559, "last_frame": 66564, "first_seen_epoch": "1634916774.698713", "last_seen_epoch": "1634916775.010706", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-716f619918eb53a8cb48f9e8", "transport": "udp", "stream": 867, "initiator_ip": "10.10.22.156", "initiator_port": 53835, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 66580, "last_frame": 66581, "first_seen_epoch": "1634916776.490423", "last_seen_epoch": "1634916776.538279", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-f9c2e66f19de10d2f5420a02", "transport": "tcp", "stream": 1340, "initiator_ip": "10.10.22.156", "initiator_port": 50106, "responder_ip": "40.97.120.242", "responder_port": 25, "first_frame": 66582, "last_frame": 67551, "first_seen_epoch": "1634916776.539281", "last_seen_epoch": "1634916792.876", "packets": 53, "bytes": 9028, "initiator_bytes": 2151, "responder_bytes": 6877 }, { "flow_id": "flow-a5387ff90177a4768a21d7dd", "transport": "tcp", "stream": 1341, "initiator_ip": "10.10.22.157", "initiator_port": 50216, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66644, "last_frame": 66653, "first_seen_epoch": "1634916779.026753", "last_seen_epoch": "1634916779.317129", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-dcd04027b07550913d104f87", "transport": "tcp", "stream": 1342, "initiator_ip": "10.10.22.156", "initiator_port": 50109, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 66678, "last_frame": 67478, "first_seen_epoch": "1634916783.170137", "last_seen_epoch": "1634916787.513488", "packets": 787, "bytes": 945054, "initiator_bytes": 8587, "responder_bytes": 936467 }, { "flow_id": "flow-39220d744cbc62713588b8e5", "transport": "tcp", "stream": 1343, "initiator_ip": "10.10.22.157", "initiator_port": 50217, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 66683, "last_frame": 66696, "first_seen_epoch": "1634916783.322941", "last_seen_epoch": "1634916783.630159", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-03f553145234cddd557b1b61", "transport": "tcp", "stream": 1344, "initiator_ip": "10.10.22.156", "initiator_port": 50110, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 67479, "last_frame": 67511, "first_seen_epoch": "1634916787.64343", "last_seen_epoch": "1634916788.773919", "packets": 17, "bytes": 3330, "initiator_bytes": 1272, "responder_bytes": 2058 }, { "flow_id": "flow-8bf412dda84923903486c7de", "transport": "udp", "stream": 868, "initiator_ip": "10.10.22.157", "initiator_port": 60858, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67480, "last_frame": 67485, "first_seen_epoch": "1634916787.650615", "last_seen_epoch": "1634916787.726446", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-828147efac6aea1ce9b179b0", "transport": "udp", "stream": 869, "initiator_ip": "10.10.22.156", "initiator_port": 53831, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67481, "last_frame": 67482, "first_seen_epoch": "1634916787.666872", "last_seen_epoch": "1634916787.66721", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-02f7c54b943f4e7ddbdcd43a", "transport": "udp", "stream": 870, "initiator_ip": "10.10.22.156", "initiator_port": 53832, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 67483, "last_frame": 67484, "first_seen_epoch": "1634916787.668268", "last_seen_epoch": "1634916787.668499", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-4aeeaa5a183ae9d222cb56bd", "transport": "tcp", "stream": 1345, "initiator_ip": "10.10.22.157", "initiator_port": 50218, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67486, "last_frame": 67507, "first_seen_epoch": "1634916787.727819", "last_seen_epoch": "1634916788.082509", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fbf3b98519f0a578016cc5fa", "transport": "udp", "stream": 871, "initiator_ip": "10.10.22.156", "initiator_port": 61778, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67491, "last_frame": 67492, "first_seen_epoch": "1634916787.791191", "last_seen_epoch": "1634916787.791526", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-316719ef74a0957f46be23a3", "transport": "udp", "stream": 872, "initiator_ip": "10.10.22.156", "initiator_port": 61779, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 67493, "last_frame": 67494, "first_seen_epoch": "1634916787.79306", "last_seen_epoch": "1634916787.793351", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-0ea356ae5d8e284a33ce4234", "transport": "tcp", "stream": 1346, "initiator_ip": "10.10.22.156", "initiator_port": 50111, "responder_ip": "45.153.241.142", "responder_port": 443, "first_frame": 67512, "last_frame": 74936, "first_seen_epoch": "1634916791.498014", "last_seen_epoch": "1634917490.844975", "packets": 52, "bytes": 3186, "initiator_bytes": 1684, "responder_bytes": 1502 }, { "flow_id": "flow-cbf7b1f9341ea7c205d72972", "transport": "tcp", "stream": 1347, "initiator_ip": "10.10.22.156", "initiator_port": 50112, "responder_ip": "45.153.241.142", "responder_port": 443, "first_frame": 67513, "last_frame": 74937, "first_seen_epoch": "1634916791.526839", "last_seen_epoch": "1634917490.845077", "packets": 54, "bytes": 3306, "initiator_bytes": 1738, "responder_bytes": 1568 }, { "flow_id": "flow-264d5ab3de4dbcf3f8dc4eb5", "transport": "udp", "stream": 873, "initiator_ip": "10.10.22.156", "initiator_port": 58622, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67522, "last_frame": 67523, "first_seen_epoch": "1634916791.927739", "last_seen_epoch": "1634916791.928026", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-1602ee2bcd67e3380fc4ac5f", "transport": "udp", "stream": 874, "initiator_ip": "10.10.22.156", "initiator_port": 58623, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 67524, "last_frame": 67525, "first_seen_epoch": "1634916791.92863", "last_seen_epoch": "1634916791.928922", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-f63801c4b0e359ebbcb24c31", "transport": "udp", "stream": 875, "initiator_ip": "10.10.22.157", "initiator_port": 53118, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67526, "last_frame": 67531, "first_seen_epoch": "1634916792.088136", "last_seen_epoch": "1634916792.157266", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-78d2dbc2c7fb8df950a7f08f", "transport": "tcp", "stream": 1348, "initiator_ip": "10.10.22.157", "initiator_port": 50219, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67532, "last_frame": 67537, "first_seen_epoch": "1634916792.157898", "last_seen_epoch": "1634916792.482191", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2d8a2aad978cd57dbc2d5dee", "transport": "udp", "stream": 876, "initiator_ip": "10.10.22.156", "initiator_port": 59322, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67558, "last_frame": 67560, "first_seen_epoch": "1634916794.254198", "last_seen_epoch": "1634916794.33009", "packets": 3, "bytes": 336, "initiator_bytes": 182, "responder_bytes": 154 }, { "flow_id": "flow-9d9f0ec073cea2e39942548b", "transport": "tcp", "stream": 1349, "initiator_ip": "10.10.22.156", "initiator_port": 50113, "responder_ip": "52.183.220.149", "responder_port": 443, "first_frame": 67561, "last_frame": 67585, "first_seen_epoch": "1634916794.331391", "last_seen_epoch": "1634916794.731581", "packets": 25, "bytes": 6805, "initiator_bytes": 2062, "responder_bytes": 4743 }, { "flow_id": "flow-09185752bf8d0c2fa5cb2b67", "transport": "tcp", "stream": 1350, "initiator_ip": "10.10.22.157", "initiator_port": 50220, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67588, "last_frame": 67593, "first_seen_epoch": "1634916796.58584", "last_seen_epoch": "1634916796.868721", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0a832590f6c8b362f2f4709c", "transport": "tcp", "stream": 1351, "initiator_ip": "10.10.22.157", "initiator_port": 50221, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67594, "last_frame": 67599, "first_seen_epoch": "1634916800.88483", "last_seen_epoch": "1634916801.221008", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-868766668123ddfeafcf1fb0", "transport": "tcp", "stream": 1352, "initiator_ip": "10.10.22.157", "initiator_port": 50222, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67600, "last_frame": 67605, "first_seen_epoch": "1634916805.228966", "last_seen_epoch": "1634916805.644586", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-85cc6972d3971d0415acc01f", "transport": "tcp", "stream": 1353, "initiator_ip": "10.10.22.157", "initiator_port": 50223, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67616, "last_frame": 67625, "first_seen_epoch": "1634916809.651125", "last_seen_epoch": "1634916809.943724", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6bd465b7e8621b2f0b00ef32", "transport": "udp", "stream": 877, "initiator_ip": "10.10.22.156", "initiator_port": 57802, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67618, "last_frame": 67626, "first_seen_epoch": "1634916809.753004", "last_seen_epoch": "1634916810.05278", "packets": 3, "bytes": 268, "initiator_bytes": 168, "responder_bytes": 100 }, { "flow_id": "flow-e9f8b967d6c63bdceb0fdc96", "transport": "tcp", "stream": 1354, "initiator_ip": "10.10.22.156", "initiator_port": 50114, "responder_ip": "82.98.154.100", "responder_port": 25, "first_frame": 67627, "last_frame": 67743, "first_seen_epoch": "1634916810.053679", "last_seen_epoch": "1634916818.222213", "packets": 53, "bytes": 8496, "initiator_bytes": 2119, "responder_bytes": 6377 }, { "flow_id": "flow-0ce738098ac4132a41b41621", "transport": "udp", "stream": 878, "initiator_ip": "10.10.22.157", "initiator_port": 53684, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67689, "last_frame": 67690, "first_seen_epoch": "1634916813.949956", "last_seen_epoch": "1634916814.011316", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-25d06630e33853de43a6ca82", "transport": "tcp", "stream": 1355, "initiator_ip": "10.10.22.157", "initiator_port": 50224, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67691, "last_frame": 67696, "first_seen_epoch": "1634916814.012248", "last_seen_epoch": "1634916814.297839", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-496bba627367ead3b4990239", "transport": "udp", "stream": 879, "initiator_ip": "10.10.22.157", "initiator_port": 51213, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67746, "last_frame": 67747, "first_seen_epoch": "1634916818.308882", "last_seen_epoch": "1634916818.354857", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-c9ec2fe388544433272ba40c", "transport": "tcp", "stream": 1356, "initiator_ip": "10.10.22.157", "initiator_port": 50225, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67748, "last_frame": 67755, "first_seen_epoch": "1634916818.355823", "last_seen_epoch": "1634916818.651718", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8dc371ab9fe941493d5964be", "transport": "udp", "stream": 880, "initiator_ip": "10.10.22.157", "initiator_port": 64869, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67758, "last_frame": 67759, "first_seen_epoch": "1634916822.668313", "last_seen_epoch": "1634916822.772799", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f555bbf8c8e0fbc0f2f5a2eb", "transport": "tcp", "stream": 1357, "initiator_ip": "10.10.22.157", "initiator_port": 50226, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67760, "last_frame": 67765, "first_seen_epoch": "1634916822.774124", "last_seen_epoch": "1634916823.079998", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-feabe5b3a31623ff65975d25", "transport": "tcp", "stream": 1358, "initiator_ip": "10.10.22.157", "initiator_port": 50227, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67766, "last_frame": 67773, "first_seen_epoch": "1634916827.088756", "last_seen_epoch": "1634916827.386901", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fd62e727554bfbae9e6ac626", "transport": "udp", "stream": 881, "initiator_ip": "10.10.22.156", "initiator_port": 53935, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 67781, "last_frame": 67782, "first_seen_epoch": "1634916828.026126", "last_seen_epoch": "1634916828.065732", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-eb2a58e04df30307e466cb00", "transport": "tcp", "stream": 1359, "initiator_ip": "10.10.22.156", "initiator_port": 50115, "responder_ip": "52.96.121.98", "responder_port": 25, "first_frame": 67783, "last_frame": 67915, "first_seen_epoch": "1634916828.066775", "last_seen_epoch": "1634916845.099492", "packets": 51, "bytes": 8904, "initiator_bytes": 2085, "responder_bytes": 6819 }, { "flow_id": "flow-0d745fd1f25dd6d784c83268", "transport": "tcp", "stream": 1360, "initiator_ip": "10.10.22.157", "initiator_port": 50228, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67843, "last_frame": 67856, "first_seen_epoch": "1634916831.402579", "last_seen_epoch": "1634916831.704142", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e7df589cd2e2d63cad4730ff", "transport": "tcp", "stream": 1361, "initiator_ip": "10.10.22.157", "initiator_port": 50229, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67873, "last_frame": 67878, "first_seen_epoch": "1634916835.714792", "last_seen_epoch": "1634916836.023239", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7645556ce7cf86803df297e8", "transport": "udp", "stream": 882, "initiator_ip": "10.10.22.157", "initiator_port": 56988, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67887, "last_frame": 67888, "first_seen_epoch": "1634916840.028315", "last_seen_epoch": "1634916840.332601", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-12baf367bb5592f306021069", "transport": "tcp", "stream": 1362, "initiator_ip": "10.10.22.157", "initiator_port": 50230, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67889, "last_frame": 67894, "first_seen_epoch": "1634916840.333988", "last_seen_epoch": "1634916840.668294", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f1ae930c5f8aca9d57533b4e", "transport": "udp", "stream": 883, "initiator_ip": "10.10.22.157", "initiator_port": 54611, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67895, "last_frame": 67899, "first_seen_epoch": "1634916844.684963", "last_seen_epoch": "1634916844.741476", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-db120593c4ca58e5a53d9864", "transport": "tcp", "stream": 1363, "initiator_ip": "10.10.22.157", "initiator_port": 50231, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67900, "last_frame": 67907, "first_seen_epoch": "1634916844.742819", "last_seen_epoch": "1634916845.059335", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6e5be097fdc8e8df65a1a6b4", "transport": "tcp", "stream": 1364, "initiator_ip": "10.10.22.156", "initiator_port": 50116, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 67920, "last_frame": 67936, "first_seen_epoch": "1634916847.405992", "last_seen_epoch": "1634916848.682415", "packets": 17, "bytes": 4440, "initiator_bytes": 1470, "responder_bytes": 2970 }, { "flow_id": "flow-7ca6e9c950f4c910b561ee73", "transport": "udp", "stream": 884, "initiator_ip": "10.10.22.157", "initiator_port": 50837, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67937, "last_frame": 67938, "first_seen_epoch": "1634916849.075132", "last_seen_epoch": "1634916849.15128", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ad03b58108492b23cc30d4ee", "transport": "tcp", "stream": 1365, "initiator_ip": "10.10.22.157", "initiator_port": 50232, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67939, "last_frame": 67944, "first_seen_epoch": "1634916849.152081", "last_seen_epoch": "1634916849.454431", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-000abdd535a10e61f7ee2a15", "transport": "tcp", "stream": 1366, "initiator_ip": "10.10.22.157", "initiator_port": 50233, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67953, "last_frame": 67958, "first_seen_epoch": "1634916853.464919", "last_seen_epoch": "1634916853.764447", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2df59f5d8b8ab50c0019605e", "transport": "tcp", "stream": 1367, "initiator_ip": "10.10.22.157", "initiator_port": 50234, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67959, "last_frame": 67964, "first_seen_epoch": "1634916857.797241", "last_seen_epoch": "1634916858.101038", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a79aa426a64c20d48bc3cac4", "transport": "tcp", "stream": 1368, "initiator_ip": "10.10.22.157", "initiator_port": 50235, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67965, "last_frame": 67970, "first_seen_epoch": "1634916862.121774", "last_seen_epoch": "1634916862.420581", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a554ba7c42f0a9dc3d736b08", "transport": "udp", "stream": 885, "initiator_ip": "10.10.22.157", "initiator_port": 52011, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67975, "last_frame": 67976, "first_seen_epoch": "1634916866.434905", "last_seen_epoch": "1634916866.502752", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-fd63d7ab340cdbd80611b770", "transport": "tcp", "stream": 1369, "initiator_ip": "10.10.22.157", "initiator_port": 50236, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67977, "last_frame": 67983, "first_seen_epoch": "1634916866.503458", "last_seen_epoch": "1634916866.819224", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bb4d9f7b816bd9872d84e856", "transport": "udp", "stream": 886, "initiator_ip": "10.10.22.157", "initiator_port": 52790, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67986, "last_frame": 67987, "first_seen_epoch": "1634916870.824872", "last_seen_epoch": "1634916870.898943", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f7a16652026032cc2f58b3ce", "transport": "tcp", "stream": 1370, "initiator_ip": "10.10.22.157", "initiator_port": 50237, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67988, "last_frame": 67995, "first_seen_epoch": "1634916870.899837", "last_seen_epoch": "1634916871.188044", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bfeb32ee1486f2c49005880f", "transport": "udp", "stream": 887, "initiator_ip": "10.10.22.157", "initiator_port": 64485, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 67996, "last_frame": 67997, "first_seen_epoch": "1634916875.20123", "last_seen_epoch": "1634916875.259659", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6f7fcbdc8c01281c75b924a3", "transport": "tcp", "stream": 1371, "initiator_ip": "10.10.22.157", "initiator_port": 50238, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 67998, "last_frame": 68003, "first_seen_epoch": "1634916875.260918", "last_seen_epoch": "1634916875.566967", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8b330c11c92dcf0f3f6fad34", "transport": "tcp", "stream": 1372, "initiator_ip": "10.10.22.157", "initiator_port": 50239, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68004, "last_frame": 68009, "first_seen_epoch": "1634916879.574961", "last_seen_epoch": "1634916879.870936", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2469df39fc2763d56f2201ff", "transport": "tcp", "stream": 1373, "initiator_ip": "10.10.22.157", "initiator_port": 50240, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68010, "last_frame": 68015, "first_seen_epoch": "1634916883.902825", "last_seen_epoch": "1634916884.52427", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7e4307075fa01ac67fdbf9a6", "transport": "tcp", "stream": 1374, "initiator_ip": "10.10.22.157", "initiator_port": 50241, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68016, "last_frame": 68021, "first_seen_epoch": "1634916888.54564", "last_seen_epoch": "1634916888.83766", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e5d1f1937f8dfc6550b71d65", "transport": "udp", "stream": 888, "initiator_ip": "10.10.22.157", "initiator_port": 49226, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68022, "last_frame": 68024, "first_seen_epoch": "1634916889.837479", "last_seen_epoch": "1634916889.92259", "packets": 3, "bytes": 336, "initiator_bytes": 182, "responder_bytes": 154 }, { "flow_id": "flow-a4944b304e5166e04f0a957e", "transport": "tcp", "stream": 1375, "initiator_ip": "10.10.22.157", "initiator_port": 50242, "responder_ip": "52.183.220.149", "responder_port": 443, "first_frame": 68025, "last_frame": 68052, "first_seen_epoch": "1634916889.924162", "last_seen_epoch": "1634916890.759538", "packets": 28, "bytes": 7692, "initiator_bytes": 2774, "responder_bytes": 4918 }, { "flow_id": "flow-f327779ae0fcffb8032e8182", "transport": "udp", "stream": 889, "initiator_ip": "10.10.22.157", "initiator_port": 61695, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68055, "last_frame": 68056, "first_seen_epoch": "1634916892.842097", "last_seen_epoch": "1634916892.926379", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-af27476e5e6e61f113862865", "transport": "tcp", "stream": 1376, "initiator_ip": "10.10.22.157", "initiator_port": 50243, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68057, "last_frame": 68062, "first_seen_epoch": "1634916892.927735", "last_seen_epoch": "1634916893.26118", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7138f6b26f0bc63c8058fd57", "transport": "udp", "stream": 890, "initiator_ip": "10.10.22.157", "initiator_port": 53050, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68070, "last_frame": 68071, "first_seen_epoch": "1634916897.279787", "last_seen_epoch": "1634916897.375902", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-482dcaf4c7b8b6b05104b4bb", "transport": "tcp", "stream": 1377, "initiator_ip": "10.10.22.157", "initiator_port": 50244, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68072, "last_frame": 68077, "first_seen_epoch": "1634916897.377257", "last_seen_epoch": "1634916897.699443", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-90f61eb4626c54eaaa015c8c", "transport": "udp", "stream": 891, "initiator_ip": "10.10.22.157", "initiator_port": 58301, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68078, "last_frame": 68079, "first_seen_epoch": "1634916901.716961", "last_seen_epoch": "1634916901.773539", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-4cff2878203bcb207ebae0de", "transport": "tcp", "stream": 1378, "initiator_ip": "10.10.22.157", "initiator_port": 50245, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68080, "last_frame": 68085, "first_seen_epoch": "1634916901.774858", "last_seen_epoch": "1634916902.069128", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8268838c2f416d641e229b47", "transport": "udp", "stream": 892, "initiator_ip": "10.10.22.156", "initiator_port": 60794, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68095, "last_frame": 68098, "first_seen_epoch": "1634916905.476321", "last_seen_epoch": "1634916905.566833", "packets": 3, "bytes": 271, "initiator_bytes": 170, "responder_bytes": 101 }, { "flow_id": "flow-4b8720dbedf5fdd8eb5f66c1", "transport": "tcp", "stream": 1379, "initiator_ip": "10.10.22.156", "initiator_port": 50117, "responder_ip": "64.87.23.16", "responder_port": 25, "first_frame": 68099, "last_frame": 68213, "first_seen_epoch": "1634916905.56808", "last_seen_epoch": "1634916910.790844", "packets": 51, "bytes": 8408, "initiator_bytes": 2213, "responder_bytes": 6195 }, { "flow_id": "flow-9e9ff1f905906211961d957a", "transport": "tcp", "stream": 1380, "initiator_ip": "10.10.22.157", "initiator_port": 50246, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68111, "last_frame": 68121, "first_seen_epoch": "1634916906.077541", "last_seen_epoch": "1634916906.376145", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d86299a5c3d869d4376d7a0a", "transport": "tcp", "stream": 1381, "initiator_ip": "10.10.22.157", "initiator_port": 50247, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68195, "last_frame": 68202, "first_seen_epoch": "1634916910.389042", "last_seen_epoch": "1634916910.689391", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f4862f49039f1985bc2af446", "transport": "tcp", "stream": 1382, "initiator_ip": "10.10.22.157", "initiator_port": 50248, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68228, "last_frame": 68233, "first_seen_epoch": "1634916914.701955", "last_seen_epoch": "1634916915.002633", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ae8dd0cd291708e74ae3e4f2", "transport": "udp", "stream": 893, "initiator_ip": "10.10.22.157", "initiator_port": 52249, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68234, "last_frame": 68235, "first_seen_epoch": "1634916919.015205", "last_seen_epoch": "1634916919.086962", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-340ff02a28b518ccff1d6f54", "transport": "tcp", "stream": 1383, "initiator_ip": "10.10.22.157", "initiator_port": 50249, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68236, "last_frame": 68241, "first_seen_epoch": "1634916919.088289", "last_seen_epoch": "1634916919.425508", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-385cb202b81ecb7fdd49dec5", "transport": "udp", "stream": 894, "initiator_ip": "10.10.22.157", "initiator_port": 52267, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68242, "last_frame": 68243, "first_seen_epoch": "1634916923.436083", "last_seen_epoch": "1634916923.535494", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e1d4eadac48e6ab06a3d4dee", "transport": "tcp", "stream": 1384, "initiator_ip": "10.10.22.157", "initiator_port": 50250, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68244, "last_frame": 68249, "first_seen_epoch": "1634916923.536818", "last_seen_epoch": "1634916923.83385", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7fa3ace837dbf7280b9f1531", "transport": "udp", "stream": 895, "initiator_ip": "10.10.22.157", "initiator_port": 59326, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68250, "last_frame": 68251, "first_seen_epoch": "1634916927.842317", "last_seen_epoch": "1634916927.944428", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-3a71f74961e7089bb7bdc796", "transport": "tcp", "stream": 1385, "initiator_ip": "10.10.22.157", "initiator_port": 50251, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68252, "last_frame": 68257, "first_seen_epoch": "1634916927.945722", "last_seen_epoch": "1634916928.260668", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2770d5bebe65c2b6c396a51b", "transport": "tcp", "stream": 1386, "initiator_ip": "10.10.22.157", "initiator_port": 50252, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68258, "last_frame": 68263, "first_seen_epoch": "1634916932.264788", "last_seen_epoch": "1634916932.703897", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8db7f6eacef67c46cfc12309", "transport": "tcp", "stream": 1387, "initiator_ip": "10.10.22.157", "initiator_port": 50253, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68264, "last_frame": 68271, "first_seen_epoch": "1634916936.717037", "last_seen_epoch": "1634916937.106306", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-31a9ea7271dfabffde2bf54f", "transport": "tcp", "stream": 1388, "initiator_ip": "10.10.22.157", "initiator_port": 50254, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68272, "last_frame": 68277, "first_seen_epoch": "1634916941.124022", "last_seen_epoch": "1634916941.520061", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-652460b72751b62c8a005a52", "transport": "udp", "stream": 896, "initiator_ip": "10.10.22.157", "initiator_port": 56029, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68278, "last_frame": 68279, "first_seen_epoch": "1634916945.530539", "last_seen_epoch": "1634916945.654387", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0a649198fc123d338855225f", "transport": "tcp", "stream": 1389, "initiator_ip": "10.10.22.157", "initiator_port": 50255, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68280, "last_frame": 68285, "first_seen_epoch": "1634916945.655559", "last_seen_epoch": "1634916945.937891", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-194512d879098d2710eaba2f", "transport": "udp", "stream": 897, "initiator_ip": "10.10.22.157", "initiator_port": 55389, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68286, "last_frame": 68287, "first_seen_epoch": "1634916949.967315", "last_seen_epoch": "1634916950.159695", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-78b6f6b34f438071ddc6ef75", "transport": "tcp", "stream": 1390, "initiator_ip": "10.10.22.157", "initiator_port": 50256, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68288, "last_frame": 68306, "first_seen_epoch": "1634916950.160222", "last_seen_epoch": "1634916950.463312", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-def054a63919848ec3dc1623", "transport": "udp", "stream": 898, "initiator_ip": "10.10.22.157", "initiator_port": 63435, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68289, "last_frame": 68291, "first_seen_epoch": "1634916950.170866", "last_seen_epoch": "1634916950.227634", "packets": 3, "bytes": 327, "initiator_bytes": 148, "responder_bytes": 179 }, { "flow_id": "flow-13e97e43078b487198518d7a", "transport": "tcp", "stream": 1391, "initiator_ip": "10.10.22.157", "initiator_port": 50257, "responder_ip": "104.94.77.31", "responder_port": 80, "first_frame": 68292, "last_frame": 68479, "first_seen_epoch": "1634916950.233982", "last_seen_epoch": "1634917010.644807", "packets": 11, "bytes": 1100, "initiator_bytes": 563, "responder_bytes": 537 }, { "flow_id": "flow-902117e85faab04503a1068a", "transport": "udp", "stream": 899, "initiator_ip": "10.10.22.157", "initiator_port": 62398, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68302, "last_frame": 68305, "first_seen_epoch": "1634916950.343151", "last_seen_epoch": "1634916950.38894", "packets": 3, "bytes": 383, "initiator_bytes": 166, "responder_bytes": 217 }, { "flow_id": "flow-72ae4ddb79fc9fcd5ff1100b", "transport": "udp", "stream": 900, "initiator_ip": "10.10.22.157", "initiator_port": 62645, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68309, "last_frame": 68310, "first_seen_epoch": "1634916954.46813", "last_seen_epoch": "1634916954.563178", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-86ce80de7341d40f100a5335", "transport": "tcp", "stream": 1392, "initiator_ip": "10.10.22.157", "initiator_port": 50259, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68311, "last_frame": 68316, "first_seen_epoch": "1634916954.564513", "last_seen_epoch": "1634916954.861342", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9a1ee0411eec1a5a91e2a82f", "transport": "tcp", "stream": 1393, "initiator_ip": "10.10.22.157", "initiator_port": 50260, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68326, "last_frame": 68331, "first_seen_epoch": "1634916958.875662", "last_seen_epoch": "1634916959.204315", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9c4b5c239542b1bfa36b6c32", "transport": "udp", "stream": 901, "initiator_ip": "10.10.22.158", "initiator_port": 51978, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68334, "last_frame": 68335, "first_seen_epoch": "1634916960.375305", "last_seen_epoch": "1634916960.449014", "packets": 2, "bytes": 245, "initiator_bytes": 91, "responder_bytes": 154 }, { "flow_id": "flow-72f90a4191dd594009856451", "transport": "tcp", "stream": 1394, "initiator_ip": "10.10.22.158", "initiator_port": 49857, "responder_ip": "52.185.211.133", "responder_port": 443, "first_frame": 68336, "last_frame": 68360, "first_seen_epoch": "1634916960.450943", "last_seen_epoch": "1634916960.768464", "packets": 25, "bytes": 6799, "initiator_bytes": 2056, "responder_bytes": 4743 }, { "flow_id": "flow-a9b828a6a235140147384ba1", "transport": "tcp", "stream": 1395, "initiator_ip": "10.10.22.157", "initiator_port": 50261, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68361, "last_frame": 68366, "first_seen_epoch": "1634916963.220141", "last_seen_epoch": "1634916963.629535", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-be737bc8c41d274ee959ddd1", "transport": "tcp", "stream": 1396, "initiator_ip": "10.10.22.157", "initiator_port": 50262, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68371, "last_frame": 68376, "first_seen_epoch": "1634916967.639883", "last_seen_epoch": "1634916968.025547", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d943db3e67bc343fbc8925ca", "transport": "udp", "stream": 902, "initiator_ip": "10.10.22.157", "initiator_port": 61637, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68377, "last_frame": 68378, "first_seen_epoch": "1634916972.031919", "last_seen_epoch": "1634916972.107107", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-39d942b99e897478d476805a", "transport": "tcp", "stream": 1397, "initiator_ip": "10.10.22.157", "initiator_port": 50263, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68379, "last_frame": 68386, "first_seen_epoch": "1634916972.107875", "last_seen_epoch": "1634916972.400448", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-2cd7e763ff00bd3180939eff", "transport": "tcp", "stream": 1398, "initiator_ip": "10.10.22.158", "initiator_port": 49858, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 68395, "last_frame": 68467, "first_seen_epoch": "1634916972.949608", "last_seen_epoch": "1634917005.525158", "packets": 14, "bytes": 3461, "initiator_bytes": 1535, "responder_bytes": 1926 }, { "flow_id": "flow-045ddf2e8cd255b06a91d920", "transport": "udp", "stream": 903, "initiator_ip": "10.10.22.157", "initiator_port": 64506, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68409, "last_frame": 68411, "first_seen_epoch": "1634916976.40729", "last_seen_epoch": "1634916976.478528", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-178b6990b026aa842862c287", "transport": "tcp", "stream": 1399, "initiator_ip": "10.10.22.157", "initiator_port": 50264, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68412, "last_frame": 68417, "first_seen_epoch": "1634916976.47962", "last_seen_epoch": "1634916976.760945", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2aed75a4ff40c90f14910421", "transport": "udp", "stream": 904, "initiator_ip": "10.10.22.157", "initiator_port": 49291, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68418, "last_frame": 68419, "first_seen_epoch": "1634916980.766524", "last_seen_epoch": "1634916980.835794", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9d7fb6c79e4e55b76918a5dd", "transport": "tcp", "stream": 1400, "initiator_ip": "10.10.22.157", "initiator_port": 50265, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68420, "last_frame": 68425, "first_seen_epoch": "1634916980.837094", "last_seen_epoch": "1634916981.126645", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f4302b2e51d6475fb132caa8", "transport": "tcp", "stream": 1401, "initiator_ip": "10.10.22.157", "initiator_port": 50266, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68427, "last_frame": 68433, "first_seen_epoch": "1634916985.140688", "last_seen_epoch": "1634916985.469018", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3dcdd9538749465cabae9f4f", "transport": "tcp", "stream": 1402, "initiator_ip": "10.10.22.157", "initiator_port": 50267, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68437, "last_frame": 68442, "first_seen_epoch": "1634916989.484032", "last_seen_epoch": "1634916989.822748", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-741e3bb186e13c176094d9a6", "transport": "tcp", "stream": 1403, "initiator_ip": "10.10.22.157", "initiator_port": 50268, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68443, "last_frame": 68448, "first_seen_epoch": "1634916993.84438", "last_seen_epoch": "1634916994.141056", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a50de9fc96cf5982e18798d6", "transport": "udp", "stream": 905, "initiator_ip": "10.10.22.157", "initiator_port": 65437, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68449, "last_frame": 68450, "first_seen_epoch": "1634916998.157912", "last_seen_epoch": "1634916998.216356", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-372e43ce184a695287d847c0", "transport": "tcp", "stream": 1404, "initiator_ip": "10.10.22.157", "initiator_port": 50269, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68451, "last_frame": 68458, "first_seen_epoch": "1634916998.217704", "last_seen_epoch": "1634916998.509553", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-bba7c59b2b95d787e484e1af", "transport": "udp", "stream": 906, "initiator_ip": "10.10.22.157", "initiator_port": 53488, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68459, "last_frame": 68460, "first_seen_epoch": "1634917002.516775", "last_seen_epoch": "1634917002.58134", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-721a498d8bc70b7a9f7629b2", "transport": "tcp", "stream": 1405, "initiator_ip": "10.10.22.157", "initiator_port": 50270, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68461, "last_frame": 68466, "first_seen_epoch": "1634917002.582744", "last_seen_epoch": "1634917002.886131", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2beec4fe1f1e4d1a64ecf4b1", "transport": "udp", "stream": 907, "initiator_ip": "10.10.22.157", "initiator_port": 59234, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68468, "last_frame": 76662, "first_seen_epoch": "1634917006.891483", "last_seen_epoch": "1634917648.343693", "packets": 4, "bytes": 368, "initiator_bytes": 168, "responder_bytes": 200 }, { "flow_id": "flow-981f9719c2733d13be33bbd6", "transport": "tcp", "stream": 1406, "initiator_ip": "10.10.22.157", "initiator_port": 50271, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68470, "last_frame": 68475, "first_seen_epoch": "1634917006.973727", "last_seen_epoch": "1634917007.259234", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e828bf5dae50bcbdb285c514", "transport": "tcp", "stream": 1407, "initiator_ip": "10.10.22.157", "initiator_port": 50272, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68481, "last_frame": 68486, "first_seen_epoch": "1634917011.266517", "last_seen_epoch": "1634917011.700227", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4ab0bb46c9cd6bb002a4bbb3", "transport": "udp", "stream": 908, "initiator_ip": "10.10.22.156", "initiator_port": 60444, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68497, "last_frame": 68499, "first_seen_epoch": "1634917013.135912", "last_seen_epoch": "1634917013.187179", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-be2ca90ad6060a4cfbdb0e42", "transport": "tcp", "stream": 1408, "initiator_ip": "10.10.22.156", "initiator_port": 50118, "responder_ip": "52.96.16.162", "responder_port": 25, "first_frame": 68500, "last_frame": 68655, "first_seen_epoch": "1634917013.188297", "last_seen_epoch": "1634917020.652199", "packets": 64, "bytes": 10159, "initiator_bytes": 2931, "responder_bytes": 7228 }, { "flow_id": "flow-d9d8908b53b33c8779de5f5f", "transport": "udp", "stream": 909, "initiator_ip": "10.10.22.156", "initiator_port": 62939, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68533, "last_frame": 68538, "first_seen_epoch": "1634917014.646205", "last_seen_epoch": "1634917014.998659", "packets": 3, "bytes": 265, "initiator_bytes": 166, "responder_bytes": 99 }, { "flow_id": "flow-2ba0529e8425d994db555297", "transport": "tcp", "stream": 1409, "initiator_ip": "10.10.22.156", "initiator_port": 50119, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 68539, "last_frame": 69134, "first_seen_epoch": "1634917014.999595", "last_seen_epoch": "1634917090.223956", "packets": 5, "bytes": 318, "initiator_bytes": 264, "responder_bytes": 54 }, { "flow_id": "flow-d5b3437f57b5e30f6d51cf0e", "transport": "tcp", "stream": 1410, "initiator_ip": "10.10.22.157", "initiator_port": 50273, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68560, "last_frame": 68573, "first_seen_epoch": "1634917015.719318", "last_seen_epoch": "1634917016.020718", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5ded98ffd1266dae7622195a", "transport": "tcp", "stream": 1411, "initiator_ip": "10.10.22.157", "initiator_port": 50274, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68632, "last_frame": 68641, "first_seen_epoch": "1634917020.032588", "last_seen_epoch": "1634917020.330585", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9c5f8b3694f0a1e60ada328e", "transport": "udp", "stream": 910, "initiator_ip": "10.10.22.158", "initiator_port": 52431, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68651, "last_frame": 68658, "first_seen_epoch": "1634917020.637946", "last_seen_epoch": "1634917020.693186", "packets": 2, "bytes": 300, "initiator_bytes": 83, "responder_bytes": 217 }, { "flow_id": "flow-2d85a0fd02896bb7ebb52be6", "transport": "tcp", "stream": 1412, "initiator_ip": "10.10.22.157", "initiator_port": 50275, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68668, "last_frame": 68673, "first_seen_epoch": "1634917024.398692", "last_seen_epoch": "1634917024.685795", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f5429272eec2611be39477f9", "transport": "udp", "stream": 911, "initiator_ip": "10.10.22.157", "initiator_port": 59478, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68678, "last_frame": 68679, "first_seen_epoch": "1634917028.690254", "last_seen_epoch": "1634917028.75286", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-afa0a75772229e4b90e9f7dd", "transport": "tcp", "stream": 1413, "initiator_ip": "10.10.22.157", "initiator_port": 50276, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68680, "last_frame": 68685, "first_seen_epoch": "1634917028.754156", "last_seen_epoch": "1634917029.053659", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-98e31a974146c4cffe02df04", "transport": "udp", "stream": 912, "initiator_ip": "10.10.22.157", "initiator_port": 52012, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68694, "last_frame": 68695, "first_seen_epoch": "1634917033.064851", "last_seen_epoch": "1634917033.120421", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b4c09687a6e6879aaee6494a", "transport": "tcp", "stream": 1414, "initiator_ip": "10.10.22.157", "initiator_port": 50277, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68696, "last_frame": 68701, "first_seen_epoch": "1634917033.121735", "last_seen_epoch": "1634917033.403569", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b55e335c4f10cf578990904a", "transport": "udp", "stream": 913, "initiator_ip": "10.10.22.156", "initiator_port": 50861, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68711, "last_frame": 68714, "first_seen_epoch": "1634917034.798675", "last_seen_epoch": "1634917035.160241", "packets": 3, "bytes": 310, "initiator_bytes": 164, "responder_bytes": 146 }, { "flow_id": "flow-56b9c887cf888ca870e7b1fd", "transport": "tcp", "stream": 1415, "initiator_ip": "10.10.22.156", "initiator_port": 50120, "responder_ip": "62.149.128.203", "responder_port": 25, "first_frame": 68715, "last_frame": 68824, "first_seen_epoch": "1634917035.161249", "last_seen_epoch": "1634917040.862163", "packets": 52, "bytes": 8774, "initiator_bytes": 2115, "responder_bytes": 6659 }, { "flow_id": "flow-b52b17dd60cf3d8d0114c540", "transport": "tcp", "stream": 1416, "initiator_ip": "10.10.22.157", "initiator_port": 50278, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68758, "last_frame": 68773, "first_seen_epoch": "1634917037.408245", "last_seen_epoch": "1634917037.73836", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-3d12a5b03479f3e122e8c5e9", "transport": "tcp", "stream": 1417, "initiator_ip": "10.10.22.157", "initiator_port": 50279, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68829, "last_frame": 68834, "first_seen_epoch": "1634917041.751128", "last_seen_epoch": "1634917042.041848", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5a2733543e39ce07530081ed", "transport": "tcp", "stream": 1418, "initiator_ip": "10.10.22.157", "initiator_port": 50280, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68835, "last_frame": 68840, "first_seen_epoch": "1634917046.049588", "last_seen_epoch": "1634917046.356009", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-913708f8b5df541a48b9a396", "transport": "udp", "stream": 914, "initiator_ip": "10.10.22.157", "initiator_port": 62801, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68841, "last_frame": 68842, "first_seen_epoch": "1634917050.376983", "last_seen_epoch": "1634917050.431078", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a35523a1dea031cce86341fb", "transport": "tcp", "stream": 1419, "initiator_ip": "10.10.22.157", "initiator_port": 50281, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68843, "last_frame": 68850, "first_seen_epoch": "1634917050.432555", "last_seen_epoch": "1634917050.74604", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-3e91bb7f8498dc37918fcc21", "transport": "udp", "stream": 915, "initiator_ip": "10.10.22.156", "initiator_port": 51925, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68860, "last_frame": 68863, "first_seen_epoch": "1634917054.463571", "last_seen_epoch": "1634917054.536701", "packets": 3, "bytes": 232, "initiator_bytes": 144, "responder_bytes": 88 }, { "flow_id": "flow-7db3a6206bb24013471515f3", "transport": "tcp", "stream": 1420, "initiator_ip": "10.10.22.156", "initiator_port": 50121, "responder_ip": "183.61.185.83", "responder_port": 25, "first_frame": 68864, "last_frame": 68912, "first_seen_epoch": "1634917054.537637", "last_seen_epoch": "1634917065.745203", "packets": 11, "bytes": 694, "initiator_bytes": 352, "responder_bytes": 342 }, { "flow_id": "flow-da1343ca93a7a6fb410d1965", "transport": "udp", "stream": 916, "initiator_ip": "10.10.22.157", "initiator_port": 61100, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68865, "last_frame": 68866, "first_seen_epoch": "1634917054.75202", "last_seen_epoch": "1634917054.805597", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-225b2171719de5d52c3fb170", "transport": "tcp", "stream": 1421, "initiator_ip": "10.10.22.157", "initiator_port": 50282, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68867, "last_frame": 68879, "first_seen_epoch": "1634917054.80655", "last_seen_epoch": "1634917055.120946", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c5c74054e314b83a2099f645", "transport": "udp", "stream": 917, "initiator_ip": "10.10.22.157", "initiator_port": 56692, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68887, "last_frame": 68888, "first_seen_epoch": "1634917059.126234", "last_seen_epoch": "1634917059.186045", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ca2aba4e8820f5055c5b4d4b", "transport": "tcp", "stream": 1422, "initiator_ip": "10.10.22.157", "initiator_port": 50283, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68889, "last_frame": 68896, "first_seen_epoch": "1634917059.187324", "last_seen_epoch": "1634917059.472278", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b2005561089acbddc1ac533f", "transport": "tcp", "stream": 1423, "initiator_ip": "10.10.22.157", "initiator_port": 50284, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68897, "last_frame": 68902, "first_seen_epoch": "1634917063.486166", "last_seen_epoch": "1634917063.789734", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9053014b09af7acfafe09a00", "transport": "tcp", "stream": 1424, "initiator_ip": "10.10.22.158", "initiator_port": 49860, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 68908, "last_frame": 69167, "first_seen_epoch": "1634917065.558977", "last_seen_epoch": "1634917097.996359", "packets": 12, "bytes": 1816, "initiator_bytes": 1433, "responder_bytes": 383 }, { "flow_id": "flow-f4a5173487c69939865d9145", "transport": "tcp", "stream": 1425, "initiator_ip": "10.10.22.157", "initiator_port": 50285, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68921, "last_frame": 68926, "first_seen_epoch": "1634917067.802513", "last_seen_epoch": "1634917068.161092", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d5f1cea0337402b635d02ee0", "transport": "tcp", "stream": 1426, "initiator_ip": "10.10.22.157", "initiator_port": 50286, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68928, "last_frame": 68933, "first_seen_epoch": "1634917072.174654", "last_seen_epoch": "1634917072.65593", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a020e1ca58ef37b5cacd421c", "transport": "udp", "stream": 918, "initiator_ip": "10.10.22.157", "initiator_port": 50210, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68938, "last_frame": 68939, "first_seen_epoch": "1634917076.675112", "last_seen_epoch": "1634917076.730459", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-bd73e8be73bae5662598f14f", "transport": "tcp", "stream": 1427, "initiator_ip": "10.10.22.157", "initiator_port": 50287, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68940, "last_frame": 68947, "first_seen_epoch": "1634917076.731793", "last_seen_epoch": "1634917077.016778", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-d52c7d96932c8ef6946a9eff", "transport": "udp", "stream": 919, "initiator_ip": "10.10.22.156", "initiator_port": 60396, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68957, "last_frame": 68959, "first_seen_epoch": "1634917079.726839", "last_seen_epoch": "1634917079.7799", "packets": 2, "bytes": 166, "initiator_bytes": 75, "responder_bytes": 91 }, { "flow_id": "flow-98ce6a77dca5a1a95fd6ece7", "transport": "tcp", "stream": 1428, "initiator_ip": "10.10.22.156", "initiator_port": 50122, "responder_ip": "74.202.142.20", "responder_port": 25, "first_frame": 68960, "last_frame": 69084, "first_seen_epoch": "1634917079.780953", "last_seen_epoch": "1634917085.23885", "packets": 49, "bytes": 7683, "initiator_bytes": 2117, "responder_bytes": 5566 }, { "flow_id": "flow-68a4c5861da11a01cbc098bf", "transport": "udp", "stream": 920, "initiator_ip": "10.10.22.157", "initiator_port": 51199, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 68983, "last_frame": 68987, "first_seen_epoch": "1634917081.033328", "last_seen_epoch": "1634917081.089185", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-b45c3e6dea84d538114c264a", "transport": "tcp", "stream": 1429, "initiator_ip": "10.10.22.157", "initiator_port": 50288, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 68988, "last_frame": 69002, "first_seen_epoch": "1634917081.09053", "last_seen_epoch": "1634917081.408425", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d407479baf38f0f99f63517f", "transport": "udp", "stream": 921, "initiator_ip": "10.10.22.156", "initiator_port": 59095, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 68999, "last_frame": 69004, "first_seen_epoch": "1634917081.26864", "last_seen_epoch": "1634917081.519715", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-d2133c542b1cd4935c63bafa", "transport": "tcp", "stream": 1430, "initiator_ip": "10.10.22.156", "initiator_port": 50123, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 69005, "last_frame": 69166, "first_seen_epoch": "1634917081.520748", "last_seen_epoch": "1634917096.087247", "packets": 30, "bytes": 5856, "initiator_bytes": 1479, "responder_bytes": 4377 }, { "flow_id": "flow-5d976337668b2dd77971deb1", "transport": "udp", "stream": 922, "initiator_ip": "10.10.22.157", "initiator_port": 58282, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69091, "last_frame": 69092, "first_seen_epoch": "1634917085.425334", "last_seen_epoch": "1634917085.481814", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-14ef6bd33ce273d3a47182a6", "transport": "tcp", "stream": 1431, "initiator_ip": "10.10.22.157", "initiator_port": 50289, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69093, "last_frame": 69098, "first_seen_epoch": "1634917085.483154", "last_seen_epoch": "1634917085.765771", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-57bfcd7e401d767f7cdd35d4", "transport": "tcp", "stream": 1432, "initiator_ip": "10.10.22.157", "initiator_port": 50290, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69115, "last_frame": 69133, "first_seen_epoch": "1634917089.783668", "last_seen_epoch": "1634917090.0818", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-7b0621e33c9e3d034fd4523c", "transport": "tcp", "stream": 1433, "initiator_ip": "10.10.22.157", "initiator_port": 50291, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69159, "last_frame": 69164, "first_seen_epoch": "1634917094.097203", "last_seen_epoch": "1634917094.421191", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-34fee99a877ed8293a9a860b", "transport": "tcp", "stream": 1434, "initiator_ip": "10.10.22.157", "initiator_port": 50292, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69168, "last_frame": 69173, "first_seen_epoch": "1634917098.424719", "last_seen_epoch": "1634917098.710963", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-eab353d59a264b027b49a170", "transport": "udp", "stream": 923, "initiator_ip": "10.10.22.157", "initiator_port": 64879, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69174, "last_frame": 69175, "first_seen_epoch": "1634917102.721748", "last_seen_epoch": "1634917102.787971", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f273ca4a06834d2d3fd0873b", "transport": "tcp", "stream": 1435, "initiator_ip": "10.10.22.157", "initiator_port": 50293, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69176, "last_frame": 69183, "first_seen_epoch": "1634917102.788773", "last_seen_epoch": "1634917103.074039", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-c1d0c827d17ad3b5cac6fc0d", "transport": "udp", "stream": 924, "initiator_ip": "10.10.22.157", "initiator_port": 60757, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69189, "last_frame": 69190, "first_seen_epoch": "1634917107.080969", "last_seen_epoch": "1634917107.131865", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-98d1df3c3fa2b1b0ca171596", "transport": "tcp", "stream": 1436, "initiator_ip": "10.10.22.157", "initiator_port": 50294, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69191, "last_frame": 69196, "first_seen_epoch": "1634917107.133196", "last_seen_epoch": "1634917107.651182", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6a4bf23e4feab56f7e3b8cd6", "transport": "udp", "stream": 925, "initiator_ip": "10.10.22.156", "initiator_port": 57720, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69206, "last_frame": 69209, "first_seen_epoch": "1634917109.395921", "last_seen_epoch": "1634917109.702372", "packets": 3, "bytes": 279, "initiator_bytes": 158, "responder_bytes": 121 }, { "flow_id": "flow-fecbd233b4821309fc05a5a0", "transport": "tcp", "stream": 1437, "initiator_ip": "10.10.22.156", "initiator_port": 50124, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 69210, "last_frame": 69565, "first_seen_epoch": "1634917109.703052", "last_seen_epoch": "1634917151.728197", "packets": 53, "bytes": 9568, "initiator_bytes": 2275, "responder_bytes": 7293 }, { "flow_id": "flow-d35a2f11932a3a553d0871f8", "transport": "udp", "stream": 926, "initiator_ip": "10.10.22.157", "initiator_port": 56897, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69238, "last_frame": 69239, "first_seen_epoch": "1634917111.661114", "last_seen_epoch": "1634917111.750742", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-796ac3264d6cf3614b8baf3c", "transport": "tcp", "stream": 1438, "initiator_ip": "10.10.22.157", "initiator_port": 50295, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69243, "last_frame": 69263, "first_seen_epoch": "1634917111.752149", "last_seen_epoch": "1634917112.053007", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b1db31cd6ccd4891aadaebeb", "transport": "tcp", "stream": 1439, "initiator_ip": "10.10.22.157", "initiator_port": 50296, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69304, "last_frame": 69309, "first_seen_epoch": "1634917116.066442", "last_seen_epoch": "1634917116.384825", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-df60503474a329c06c19a30e", "transport": "tcp", "stream": 1440, "initiator_ip": "10.10.22.157", "initiator_port": 50297, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69318, "last_frame": 69323, "first_seen_epoch": "1634917120.394172", "last_seen_epoch": "1634917120.694134", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-47da45e6f20f07a4ad8a1d28", "transport": "udp", "stream": 927, "initiator_ip": "10.10.22.156", "initiator_port": 52207, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69333, "last_frame": 69334, "first_seen_epoch": "1634917122.214648", "last_seen_epoch": "1634917122.261173", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-b0dec3455f54c40d9885fa3a", "transport": "tcp", "stream": 1441, "initiator_ip": "10.10.22.156", "initiator_port": 50125, "responder_ip": "52.96.191.98", "responder_port": 25, "first_frame": 69335, "last_frame": 69499, "first_seen_epoch": "1634917122.262093", "last_seen_epoch": "1634917146.509592", "packets": 51, "bytes": 8896, "initiator_bytes": 2077, "responder_bytes": 6819 }, { "flow_id": "flow-1af89b78389c8b65bc07fcb8", "transport": "tcp", "stream": 1442, "initiator_ip": "10.10.22.157", "initiator_port": 50298, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69401, "last_frame": 69407, "first_seen_epoch": "1634917124.707436", "last_seen_epoch": "1634917124.993379", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-547fa25491fba23d40151c4e", "transport": "udp", "stream": 928, "initiator_ip": "10.10.22.157", "initiator_port": 53876, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69419, "last_frame": 69420, "first_seen_epoch": "1634917129.020295", "last_seen_epoch": "1634917129.158899", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1a68e779e69b7b365f72ee70", "transport": "tcp", "stream": 1443, "initiator_ip": "10.10.22.157", "initiator_port": 50299, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69421, "last_frame": 69426, "first_seen_epoch": "1634917129.160216", "last_seen_epoch": "1634917129.453395", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-df43b8f7737e816a13db1cc9", "transport": "udp", "stream": 929, "initiator_ip": "10.10.22.157", "initiator_port": 56958, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69429, "last_frame": 69430, "first_seen_epoch": "1634917133.457902", "last_seen_epoch": "1634917133.663643", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-ba41ff560bb906845a1fa4ae", "transport": "tcp", "stream": 1444, "initiator_ip": "10.10.22.157", "initiator_port": 50300, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69431, "last_frame": 69436, "first_seen_epoch": "1634917133.664992", "last_seen_epoch": "1634917133.962499", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-aec026597970d4e8221e0cae", "transport": "udp", "stream": 930, "initiator_ip": "10.10.22.156", "initiator_port": 61864, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69457, "last_frame": 69483, "first_seen_epoch": "1634917137.357962", "last_seen_epoch": "1634917145.722044", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-6c593904ae0b88cdc794342e", "transport": "udp", "stream": 931, "initiator_ip": "10.10.22.157", "initiator_port": 59853, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 69460, "last_frame": 69461, "first_seen_epoch": "1634917137.987752", "last_seen_epoch": "1634917138.052638", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8bed2b929bbc2d425511aa6b", "transport": "tcp", "stream": 1445, "initiator_ip": "10.10.22.157", "initiator_port": 50301, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69462, "last_frame": 69469, "first_seen_epoch": "1634917138.054036", "last_seen_epoch": "1634917138.390054", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-6d2e538dd5f067731a7d9408", "transport": "tcp", "stream": 1446, "initiator_ip": "10.10.22.157", "initiator_port": 50302, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69476, "last_frame": 69481, "first_seen_epoch": "1634917142.40941", "last_seen_epoch": "1634917142.896367", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-970e70439a57b741d69a0ba1", "transport": "tcp", "stream": 1447, "initiator_ip": "10.10.22.157", "initiator_port": 50303, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69504, "last_frame": 69511, "first_seen_epoch": "1634917146.909656", "last_seen_epoch": "1634917147.214792", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b349b5f361a5447666437c74", "transport": "udp", "stream": 932, "initiator_ip": "10.10.22.156", "initiator_port": 65246, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69524, "last_frame": 69531, "first_seen_epoch": "1634917150.228182", "last_seen_epoch": "1634917150.663411", "packets": 3, "bytes": 263, "initiator_bytes": 148, "responder_bytes": 115 }, { "flow_id": "flow-5de9b43e028a7962e928db93", "transport": "tcp", "stream": 1448, "initiator_ip": "10.10.22.156", "initiator_port": 50126, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 69532, "last_frame": 69767, "first_seen_epoch": "1634917150.664344", "last_seen_epoch": "1634917192.381398", "packets": 52, "bytes": 9510, "initiator_bytes": 2270, "responder_bytes": 7240 }, { "flow_id": "flow-bb4f2c399d7bf646ca97328d", "transport": "tcp", "stream": 1449, "initiator_ip": "10.10.22.156", "initiator_port": 50127, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 69540, "last_frame": 70242, "first_seen_epoch": "1634917151.045327", "last_seen_epoch": "1634917226.274854", "packets": 5, "bytes": 318, "initiator_bytes": 264, "responder_bytes": 54 }, { "flow_id": "flow-7f52521813eb333a89a02a42", "transport": "tcp", "stream": 1450, "initiator_ip": "10.10.22.157", "initiator_port": 50304, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 69549, "last_frame": 74788, "first_seen_epoch": "1634917151.222338", "last_seen_epoch": "1634917482.388397", "packets": 132, "bytes": 7976, "initiator_bytes": 4462, "responder_bytes": 3514 }, { "flow_id": "flow-915d4a13e864a899d044d5c4", "transport": "tcp", "stream": 1451, "initiator_ip": "10.10.22.158", "initiator_port": 49861, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 69659, "last_frame": 69732, "first_seen_epoch": "1634917158.02975", "last_seen_epoch": "1634917190.436668", "packets": 12, "bytes": 1818, "initiator_bytes": 1435, "responder_bytes": 383 }, { "flow_id": "flow-2a3ba6903e60ba6e83b30d45", "transport": "tcp", "stream": 1452, "initiator_ip": "10.10.22.156", "initiator_port": 50128, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 69685, "last_frame": 69701, "first_seen_epoch": "1634917164.555527", "last_seen_epoch": "1634917165.819195", "packets": 17, "bytes": 4172, "initiator_bytes": 1458, "responder_bytes": 2714 }, { "flow_id": "flow-0dbd85c7619d7ed98ed00ccb", "transport": "udp", "stream": 933, "initiator_ip": "10.10.22.156", "initiator_port": 51414, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69723, "last_frame": 69726, "first_seen_epoch": "1634917189.939416", "last_seen_epoch": "1634917190.196662", "packets": 3, "bytes": 268, "initiator_bytes": 168, "responder_bytes": 100 }, { "flow_id": "flow-39dd2ad684f1c0cebd554140", "transport": "tcp", "stream": 1453, "initiator_ip": "10.10.22.156", "initiator_port": 50129, "responder_ip": "217.116.0.228", "responder_port": 25, "first_frame": 69727, "last_frame": 69853, "first_seen_epoch": "1634917190.197616", "last_seen_epoch": "1634917199.636635", "packets": 49, "bytes": 7563, "initiator_bytes": 1995, "responder_bytes": 5568 }, { "flow_id": "flow-59bb24f7131b367ca3c0c460", "transport": "udp", "stream": 934, "initiator_ip": "10.10.22.156", "initiator_port": 59675, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69867, "last_frame": 69879, "first_seen_epoch": "1634917200.84051", "last_seen_epoch": "1634917209.208653", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-f7525b1066bdba384d75c68f", "transport": "udp", "stream": 935, "initiator_ip": "10.10.22.156", "initiator_port": 51939, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69885, "last_frame": 69886, "first_seen_epoch": "1634917209.631693", "last_seen_epoch": "1634917209.673251", "packets": 2, "bytes": 178, "initiator_bytes": 73, "responder_bytes": 105 }, { "flow_id": "flow-d1f16aa0a669aa0ab6cc4194", "transport": "tcp", "stream": 1454, "initiator_ip": "10.10.22.156", "initiator_port": 50130, "responder_ip": "64.136.52.45", "responder_port": 25, "first_frame": 69887, "last_frame": 69972, "first_seen_epoch": "1634917209.674118", "last_seen_epoch": "1634917213.929973", "packets": 39, "bytes": 3081, "initiator_bytes": 1529, "responder_bytes": 1552 }, { "flow_id": "flow-0c5a25cba5a22fe7498ca91c", "transport": "udp", "stream": 936, "initiator_ip": "10.10.22.156", "initiator_port": 65337, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 69986, "last_frame": 69988, "first_seen_epoch": "1634917217.429368", "last_seen_epoch": "1634917217.516688", "packets": 2, "bytes": 186, "initiator_bytes": 85, "responder_bytes": 101 }, { "flow_id": "flow-68882816253e0c258a100389", "transport": "tcp", "stream": 1455, "initiator_ip": "10.10.22.156", "initiator_port": 50131, "responder_ip": "180.149.244.81", "responder_port": 25, "first_frame": 69989, "last_frame": 70135, "first_seen_epoch": "1634917217.51764", "last_seen_epoch": "1634917223.553909", "packets": 33, "bytes": 2218, "initiator_bytes": 1015, "responder_bytes": 1203 }, { "flow_id": "flow-39a69b0ffb14cdafc911c59e", "transport": "udp", "stream": 937, "initiator_ip": "10.10.22.156", "initiator_port": 52918, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 70031, "last_frame": 70034, "first_seen_epoch": "1634917221.441465", "last_seen_epoch": "1634917221.491585", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-42a57e35712f1efb1d3ae886", "transport": "tcp", "stream": 1456, "initiator_ip": "10.10.22.156", "initiator_port": 50132, "responder_ip": "52.96.10.242", "responder_port": 25, "first_frame": 70035, "last_frame": 70457, "first_seen_epoch": "1634917221.492681", "last_seen_epoch": "1634917238.730094", "packets": 50, "bytes": 8850, "initiator_bytes": 2031, "responder_bytes": 6819 }, { "flow_id": "flow-66ae912a23a0ad61b68aa48c", "transport": "tcp", "stream": 1457, "initiator_ip": "10.10.22.156", "initiator_port": 50133, "responder_ip": "52.96.10.242", "responder_port": 25, "first_frame": 70083, "last_frame": 70528, "first_seen_epoch": "1634917222.835242", "last_seen_epoch": "1634917244.574669", "packets": 51, "bytes": 8912, "initiator_bytes": 2093, "responder_bytes": 6819 }, { "flow_id": "flow-f24ab452f704e9361d0a7272", "transport": "udp", "stream": 938, "initiator_ip": "10.10.22.156", "initiator_port": 49355, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 70189, "last_frame": 70193, "first_seen_epoch": "1634917225.073589", "last_seen_epoch": "1634917225.23209", "packets": 3, "bytes": 322, "initiator_bytes": 172, "responder_bytes": 150 }, { "flow_id": "flow-b72224867f377634fb15e7da", "transport": "tcp", "stream": 1458, "initiator_ip": "10.10.22.156", "initiator_port": 50134, "responder_ip": "62.149.128.203", "responder_port": 25, "first_frame": 70194, "last_frame": 70376, "first_seen_epoch": "1634917225.234976", "last_seen_epoch": "1634917232.565401", "packets": 50, "bytes": 8700, "initiator_bytes": 2090, "responder_bytes": 6610 }, { "flow_id": "flow-6fe4fb9bdc597a8f12872900", "transport": "udp", "stream": 939, "initiator_ip": "10.10.22.156", "initiator_port": 59589, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 70267, "last_frame": 70276, "first_seen_epoch": "1634917226.948965", "last_seen_epoch": "1634917228.307217", "packets": 4, "bytes": 320, "initiator_bytes": 228, "responder_bytes": 92 }, { "flow_id": "flow-80c910a97ba8bebfd7f83838", "transport": "tcp", "stream": 1459, "initiator_ip": "10.10.22.156", "initiator_port": 50135, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 70277, "last_frame": 70564, "first_seen_epoch": "1634917228.308207", "last_seen_epoch": "1634917246.211852", "packets": 49, "bytes": 7413, "initiator_bytes": 2175, "responder_bytes": 5238 }, { "flow_id": "flow-372f664a331bb87950fa3d71", "transport": "tcp", "stream": 1460, "initiator_ip": "10.10.22.156", "initiator_port": 50136, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 70471, "last_frame": 70632, "first_seen_epoch": "1634917239.549494", "last_seen_epoch": "1634917251.024882", "packets": 49, "bytes": 7413, "initiator_bytes": 2175, "responder_bytes": 5238 }, { "flow_id": "flow-ae2450af9952dc4552cabe34", "transport": "tcp", "stream": 1461, "initiator_ip": "10.10.22.158", "initiator_port": 49862, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 70607, "last_frame": 73472, "first_seen_epoch": "1634917250.470009", "last_seen_epoch": "1634917412.958209", "packets": 19, "bytes": 3571, "initiator_bytes": 1648, "responder_bytes": 1923 }, { "flow_id": "flow-74abf5b9b942fa2f0259dd11", "transport": "tcp", "stream": 1462, "initiator_ip": "10.10.22.156", "initiator_port": 50137, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 70645, "last_frame": 70955, "first_seen_epoch": "1634917251.760141", "last_seen_epoch": "1634917270.985477", "packets": 50, "bytes": 7479, "initiator_bytes": 2241, "responder_bytes": 5238 }, { "flow_id": "flow-cbbe1c4f4ba39275aaa2d9ac", "transport": "tcp", "stream": 1463, "initiator_ip": "10.10.22.156", "initiator_port": 50138, "responder_ip": "183.61.185.83", "responder_port": 25, "first_frame": 70651, "last_frame": 70881, "first_seen_epoch": "1634917252.431947", "last_seen_epoch": "1634917265.331887", "packets": 62, "bytes": 9559, "initiator_bytes": 2676, "responder_bytes": 6883 }, { "flow_id": "flow-234071d93e4a20c772f20a32", "transport": "udp", "stream": 940, "initiator_ip": "10.10.22.156", "initiator_port": 60776, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 70852, "last_frame": 70857, "first_seen_epoch": "1634917264.562033", "last_seen_epoch": "1634917264.766583", "packets": 3, "bytes": 235, "initiator_bytes": 146, "responder_bytes": 89 }, { "flow_id": "flow-f56cfb0a8f749a8712121fec", "transport": "tcp", "stream": 1464, "initiator_ip": "10.10.22.156", "initiator_port": 50139, "responder_ip": "94.143.155.83", "responder_port": 25, "first_frame": 70858, "last_frame": 70933, "first_seen_epoch": "1634917264.767525", "last_seen_epoch": "1634917268.48572", "packets": 29, "bytes": 2167, "initiator_bytes": 955, "responder_bytes": 1212 }, { "flow_id": "flow-af5415cddac0d10edb5e663a", "transport": "tcp", "stream": 1465, "initiator_ip": "10.10.22.156", "initiator_port": 50140, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 70977, "last_frame": 71062, "first_seen_epoch": "1634917276.412391", "last_seen_epoch": "1634917284.772117", "packets": 23, "bytes": 4915, "initiator_bytes": 954, "responder_bytes": 3961 }, { "flow_id": "flow-35309460e3ff0651ba8e8e6b", "transport": "tcp", "stream": 1466, "initiator_ip": "10.10.22.156", "initiator_port": 50141, "responder_ip": "183.61.185.83", "responder_port": 25, "first_frame": 71017, "last_frame": 71285, "first_seen_epoch": "1634917281.366977", "last_seen_epoch": "1634917293.169363", "packets": 59, "bytes": 9379, "initiator_bytes": 2550, "responder_bytes": 6829 }, { "flow_id": "flow-c8d03e8205f895099eb9970b", "transport": "udp", "stream": 941, "initiator_ip": "10.10.22.156", "initiator_port": 50550, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71101, "last_frame": 71102, "first_seen_epoch": "1634917286.960839", "last_seen_epoch": "1634917286.961286", "packets": 2, "bytes": 168, "initiator_bytes": 76, "responder_bytes": 92 }, { "flow_id": "flow-981a5ed12e3b73a47ce70c91", "transport": "tcp", "stream": 1467, "initiator_ip": "10.10.22.156", "initiator_port": 50142, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 71103, "last_frame": 71347, "first_seen_epoch": "1634917286.961872", "last_seen_epoch": "1634917299.555163", "packets": 50, "bytes": 7479, "initiator_bytes": 2241, "responder_bytes": 5238 }, { "flow_id": "flow-ce80db76147a8f8eb4aa1496", "transport": "tcp", "stream": 1468, "initiator_ip": "10.10.22.156", "initiator_port": 50143, "responder_ip": "64.136.52.45", "responder_port": 25, "first_frame": 71104, "last_frame": 71249, "first_seen_epoch": "1634917286.962393", "last_seen_epoch": "1634917291.667552", "packets": 39, "bytes": 3045, "initiator_bytes": 1498, "responder_bytes": 1547 }, { "flow_id": "flow-b09462a7efdcd9416caa9cdc", "transport": "udp", "stream": 942, "initiator_ip": "10.10.22.156", "initiator_port": 54504, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71361, "last_frame": 71377, "first_seen_epoch": "1634917301.726066", "last_seen_epoch": "1634917309.929561", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-c1eed25a75f1b63f3a7b49d4", "transport": "udp", "stream": 943, "initiator_ip": "10.10.22.156", "initiator_port": 63695, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71386, "last_frame": 71389, "first_seen_epoch": "1634917311.02444", "last_seen_epoch": "1634917311.330942", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-706d63ee3f1fd788cf4fe272", "transport": "tcp", "stream": 1469, "initiator_ip": "10.10.22.156", "initiator_port": 50144, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 71390, "last_frame": 71407, "first_seen_epoch": "1634917311.332058", "last_seen_epoch": "1634917314.198283", "packets": 8, "bytes": 514, "initiator_bytes": 294, "responder_bytes": 220 }, { "flow_id": "flow-ae763e12fc6217f8a1e24756", "transport": "tcp", "stream": 1470, "initiator_ip": "10.10.22.156", "initiator_port": 50145, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 71434, "last_frame": 71724, "first_seen_epoch": "1634917325.257623", "last_seen_epoch": "1634917335.849875", "packets": 25, "bytes": 5341, "initiator_bytes": 1272, "responder_bytes": 4069 }, { "flow_id": "flow-5a2b2e317325ff57ea804a2c", "transport": "udp", "stream": 944, "initiator_ip": "10.10.22.156", "initiator_port": 52094, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71444, "last_frame": 71458, "first_seen_epoch": "1634917326.100452", "last_seen_epoch": "1634917329.864858", "packets": 5, "bytes": 406, "initiator_bytes": 292, "responder_bytes": 114 }, { "flow_id": "flow-e6e4cfdd8dafda0b18a3f9b4", "transport": "tcp", "stream": 1471, "initiator_ip": "10.10.22.156", "initiator_port": 50146, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 71459, "last_frame": 72030, "first_seen_epoch": "1634917329.865965", "last_seen_epoch": "1634917372.957564", "packets": 52, "bytes": 9508, "initiator_bytes": 2215, "responder_bytes": 7293 }, { "flow_id": "flow-cfc41cd66e7ec374aed56796", "transport": "tcp", "stream": 1472, "initiator_ip": "10.10.22.156", "initiator_port": 50147, "responder_ip": "183.61.185.83", "responder_port": 25, "first_frame": 71476, "last_frame": 71927, "first_seen_epoch": "1634917330.546379", "last_seen_epoch": "1634917341.608144", "packets": 60, "bytes": 9444, "initiator_bytes": 2615, "responder_bytes": 6829 }, { "flow_id": "flow-0507d1bf1d6c82b62d1a7cb2", "transport": "udp", "stream": 945, "initiator_ip": "10.10.22.156", "initiator_port": 51797, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71477, "last_frame": 71478, "first_seen_epoch": "1634917330.547013", "last_seen_epoch": "1634917330.593824", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-4f5fd2bf9bf32c7b215e2b53", "transport": "tcp", "stream": 1473, "initiator_ip": "10.10.22.156", "initiator_port": 50148, "responder_ip": "52.96.121.194", "responder_port": 25, "first_frame": 71479, "last_frame": 71965, "first_seen_epoch": "1634917330.59467", "last_seen_epoch": "1634917349.06178", "packets": 52, "bytes": 8964, "initiator_bytes": 2147, "responder_bytes": 6817 }, { "flow_id": "flow-5e9c2b99387e05bb2bb64c91", "transport": "udp", "stream": 946, "initiator_ip": "10.10.22.157", "initiator_port": 59143, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71491, "last_frame": 71492, "first_seen_epoch": "1634917331.152147", "last_seen_epoch": "1634917331.152513", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-267ae4ea767c7baa71817212", "transport": "udp", "stream": 947, "initiator_ip": "10.10.22.157", "initiator_port": 60636, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71493, "last_frame": 71495, "first_seen_epoch": "1634917331.153034", "last_seen_epoch": "1634917331.20292", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-ddef5716c6f6e531a409b17b", "transport": "tcp", "stream": 1474, "initiator_ip": "10.10.22.156", "initiator_port": 50149, "responder_ip": "123.126.45.161", "responder_port": 25, "first_frame": 71578, "last_frame": 71907, "first_seen_epoch": "1634917333.007811", "last_seen_epoch": "1634917340.542566", "packets": 26, "bytes": 5407, "initiator_bytes": 1338, "responder_bytes": 4069 }, { "flow_id": "flow-8f024e6c3f35b45d42441251", "transport": "udp", "stream": 948, "initiator_ip": "10.10.22.156", "initiator_port": 52681, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71703, "last_frame": 71705, "first_seen_epoch": "1634917335.483162", "last_seen_epoch": "1634917335.545942", "packets": 2, "bytes": 218, "initiator_bytes": 76, "responder_bytes": 142 }, { "flow_id": "flow-20c9bc8e33e3ab645986d157", "transport": "tcp", "stream": 1475, "initiator_ip": "10.10.22.156", "initiator_port": 50150, "responder_ip": "64.136.52.50", "responder_port": 25, "first_frame": 71706, "last_frame": 71891, "first_seen_epoch": "1634917335.54701", "last_seen_epoch": "1634917339.842323", "packets": 39, "bytes": 3056, "initiator_bytes": 1502, "responder_bytes": 1554 }, { "flow_id": "flow-5de55033c83df439dc74dd80", "transport": "udp", "stream": 949, "initiator_ip": "10.10.22.156", "initiator_port": 59303, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71949, "last_frame": 71950, "first_seen_epoch": "1634917347.560377", "last_seen_epoch": "1634917347.560843", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-1c79dbb3d5e31cf3ff6b402d", "transport": "udp", "stream": 950, "initiator_ip": "10.10.22.156", "initiator_port": 54772, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71951, "last_frame": 71952, "first_seen_epoch": "1634917347.561402", "last_seen_epoch": "1634917347.56164", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-338f7026b7a84bedfdc077fe", "transport": "udp", "stream": 951, "initiator_ip": "10.10.22.158", "initiator_port": 57904, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71968, "last_frame": 71969, "first_seen_epoch": "1634917349.148502", "last_seen_epoch": "1634917349.148818", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-397b0c03aa12ebd54a586d8e", "transport": "udp", "stream": 952, "initiator_ip": "10.10.22.158", "initiator_port": 52945, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71970, "last_frame": 71971, "first_seen_epoch": "1634917349.149338", "last_seen_epoch": "1634917349.149599", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-db34fd9d147f68b305c9d1f7", "transport": "udp", "stream": 953, "initiator_ip": "10.10.22.156", "initiator_port": 53955, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 71989, "last_frame": 71999, "first_seen_epoch": "1634917355.855992", "last_seen_epoch": "1634917364.399117", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-6b7f682ffd88ec97d9e41d95", "transport": "udp", "stream": 954, "initiator_ip": "10.10.22.156", "initiator_port": 49332, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 72037, "last_frame": 72038, "first_seen_epoch": "1634917373.591663", "last_seen_epoch": "1634917373.592036", "packets": 2, "bytes": 193, "initiator_bytes": 76, "responder_bytes": 117 }, { "flow_id": "flow-f251e7033d99badb3a52ec39", "transport": "tcp", "stream": 1476, "initiator_ip": "10.10.22.156", "initiator_port": 50151, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 72039, "last_frame": 73490, "first_seen_epoch": "1634917373.592615", "last_seen_epoch": "1634917415.430289", "packets": 52, "bytes": 9512, "initiator_bytes": 2272, "responder_bytes": 7240 }, { "flow_id": "flow-3ef28f061bae144b223aea5e", "transport": "udp", "stream": 955, "initiator_ip": "10.10.22.158", "initiator_port": 63026, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 72054, "last_frame": 72061, "first_seen_epoch": "1634917374.648741", "last_seen_epoch": "1634917374.725026", "packets": 3, "bytes": 236, "initiator_bytes": 136, "responder_bytes": 100 }, { "flow_id": "flow-7e7034cb77131add10f1be35", "transport": "tcp", "stream": 1477, "initiator_ip": "10.10.22.158", "initiator_port": 49863, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 72062, "last_frame": 73748, "first_seen_epoch": "1634917374.72586", "last_seen_epoch": "1634917437.247383", "packets": 25, "bytes": 9908, "initiator_bytes": 2399, "responder_bytes": 7509 }, { "flow_id": "flow-02a0100f20ce8a8a1338978a", "transport": "tcp", "stream": 1478, "initiator_ip": "10.10.22.158", "initiator_port": 49864, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 72086, "last_frame": 75043, "first_seen_epoch": "1634917375.066069", "last_seen_epoch": "1634917500.279522", "packets": 1213, "bytes": 1164539, "initiator_bytes": 27917, "responder_bytes": 1136622 }, { "flow_id": "flow-9b8b3efa6f293c8c0d470141", "transport": "udp", "stream": 956, "initiator_ip": "10.10.22.158", "initiator_port": 55416, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 72773, "last_frame": 72777, "first_seen_epoch": "1634917379.407846", "last_seen_epoch": "1634917379.488011", "packets": 4, "bytes": 376, "initiator_bytes": 156, "responder_bytes": 220 }, { "flow_id": "flow-61f956ee563a2155f23ccf55", "transport": "tcp", "stream": 1479, "initiator_ip": "10.10.22.158", "initiator_port": 49865, "responder_ip": "104.16.10.88", "responder_port": 443, "first_frame": 72778, "last_frame": 75087, "first_seen_epoch": "1634917379.488993", "last_seen_epoch": "1634917523.014353", "packets": 636, "bytes": 666772, "initiator_bytes": 10318, "responder_bytes": 656454 }, { "flow_id": "flow-e0f9759d8f374e9a43704513", "transport": "udp", "stream": 957, "initiator_ip": "10.10.22.156", "initiator_port": 50290, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 72801, "last_frame": 73433, "first_seen_epoch": "1634917380.182309", "last_seen_epoch": "1634917388.083004", "packets": 6, "bytes": 492, "initiator_bytes": 410, "responder_bytes": 82 }, { "flow_id": "flow-93173cf0b593b34f5c41d501", "transport": "udp", "stream": 958, "initiator_ip": "10.10.22.156", "initiator_port": 65144, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 73466, "last_frame": 73468, "first_seen_epoch": "1634917410.059916", "last_seen_epoch": "1634917410.206214", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-19a2dc9ffe7d51823f6edbd3", "transport": "udp", "stream": 959, "initiator_ip": "10.10.22.156", "initiator_port": 54355, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 73506, "last_frame": 73507, "first_seen_epoch": "1634917417.52228", "last_seen_epoch": "1634917417.580238", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-bad8961fa1b7f20140b1550b", "transport": "tcp", "stream": 1480, "initiator_ip": "10.10.22.156", "initiator_port": 50152, "responder_ip": "52.96.122.242", "responder_port": 25, "first_frame": 73508, "last_frame": 73669, "first_seen_epoch": "1634917417.581281", "last_seen_epoch": "1634917434.444851", "packets": 51, "bytes": 8900, "initiator_bytes": 2081, "responder_bytes": 6819 }, { "flow_id": "flow-b9d1bccfacf98b004fa04266", "transport": "udp", "stream": 960, "initiator_ip": "10.10.22.156", "initiator_port": 55661, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 73611, "last_frame": 73612, "first_seen_epoch": "1634917432.410989", "last_seen_epoch": "1634917432.451328", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-cbac190818f2e328752da11d", "transport": "tcp", "stream": 1481, "initiator_ip": "10.10.22.156", "initiator_port": 50153, "responder_ip": "52.96.57.2", "responder_port": 25, "first_frame": 73613, "last_frame": 74420, "first_seen_epoch": "1634917432.452355", "last_seen_epoch": "1634917453.859276", "packets": 51, "bytes": 8904, "initiator_bytes": 2085, "responder_bytes": 6819 }, { "flow_id": "flow-7ce22afe8e64d11dd3396ae8", "transport": "udp", "stream": 961, "initiator_ip": "10.10.22.156", "initiator_port": 56013, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 73614, "last_frame": 73621, "first_seen_epoch": "1634917432.452958", "last_seen_epoch": "1634917433.086568", "packets": 3, "bytes": 241, "initiator_bytes": 150, "responder_bytes": 91 }, { "flow_id": "flow-404aef00bd063fcd3e282506", "transport": "tcp", "stream": 1482, "initiator_ip": "10.10.22.156", "initiator_port": 50154, "responder_ip": "41.86.105.101", "responder_port": 25, "first_frame": 73622, "last_frame": 74390, "first_seen_epoch": "1634917433.087674", "last_seen_epoch": "1634917439.459977", "packets": 33, "bytes": 2261, "initiator_bytes": 1011, "responder_bytes": 1250 }, { "flow_id": "flow-ebb9b67b591569dc221035a8", "transport": "tcp", "stream": 1483, "initiator_ip": "10.10.22.158", "initiator_port": 49866, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 73742, "last_frame": 75044, "first_seen_epoch": "1634917437.198127", "last_seen_epoch": "1634917500.382449", "packets": 20, "bytes": 9055, "initiator_bytes": 2004, "responder_bytes": 7051 }, { "flow_id": "flow-45cc3d2b2fe426fca507e020", "transport": "udp", "stream": 962, "initiator_ip": "10.10.22.156", "initiator_port": 51941, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74442, "last_frame": 74444, "first_seen_epoch": "1634917455.672827", "last_seen_epoch": "1634917455.719712", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-87dee17b51c9c65d2eb72136", "transport": "tcp", "stream": 1484, "initiator_ip": "10.10.22.156", "initiator_port": 50155, "responder_ip": "52.96.103.2", "responder_port": 25, "first_frame": 74445, "last_frame": 74730, "first_seen_epoch": "1634917455.721148", "last_seen_epoch": "1634917475.893715", "packets": 53, "bytes": 9002, "initiator_bytes": 2135, "responder_bytes": 6867 }, { "flow_id": "flow-d736f76f14a43ae8f6ce8c2e", "transport": "tcp", "stream": 1485, "initiator_ip": "10.10.22.156", "initiator_port": 50156, "responder_ip": "45.153.241.142", "responder_port": 443, "first_frame": 74529, "last_frame": 74938, "first_seen_epoch": "1634917460.73518", "last_seen_epoch": "1634917490.845161", "packets": 19, "bytes": 1120, "initiator_bytes": 546, "responder_bytes": 574 }, { "flow_id": "flow-0374c694f8f25c113d337779", "transport": "udp", "stream": 963, "initiator_ip": "10.10.22.156", "initiator_port": 54117, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74552, "last_frame": 74555, "first_seen_epoch": "1634917462.904094", "last_seen_epoch": "1634917463.04474", "packets": 3, "bytes": 259, "initiator_bytes": 162, "responder_bytes": 97 }, { "flow_id": "flow-7fb09464a06086f68dee2e31", "transport": "tcp", "stream": 1486, "initiator_ip": "10.10.22.156", "initiator_port": 50157, "responder_ip": "66.96.162.198", "responder_port": 25, "first_frame": 74556, "last_frame": 74673, "first_seen_epoch": "1634917463.04588", "last_seen_epoch": "1634917470.369769", "packets": 50, "bytes": 7962, "initiator_bytes": 1996, "responder_bytes": 5966 }, { "flow_id": "flow-8ba36ed060929b1a9cf42a94", "transport": "udp", "stream": 964, "initiator_ip": "10.10.22.156", "initiator_port": 51187, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74639, "last_frame": 74640, "first_seen_epoch": "1634917467.26439", "last_seen_epoch": "1634917467.264716", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-015119b5d5efbd9f925f41f8", "transport": "udp", "stream": 965, "initiator_ip": "10.10.22.156", "initiator_port": 51188, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 74641, "last_frame": 74642, "first_seen_epoch": "1634917467.265299", "last_seen_epoch": "1634917467.265528", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-1487b206dcd85c157e536330", "transport": "udp", "stream": 966, "initiator_ip": "10.10.22.156", "initiator_port": 61656, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74686, "last_frame": 74687, "first_seen_epoch": "1634917472.377018", "last_seen_epoch": "1634917472.439528", "packets": 2, "bytes": 319, "initiator_bytes": 94, "responder_bytes": 225 }, { "flow_id": "flow-d3c1fe9302bfd3f74353b233", "transport": "tcp", "stream": 1487, "initiator_ip": "10.10.22.156", "initiator_port": 50158, "responder_ip": "104.208.16.94", "responder_port": 443, "first_frame": 74688, "last_frame": 75054, "first_seen_epoch": "1634917472.444169", "last_seen_epoch": "1634917508.871128", "packets": 28, "bytes": 13609, "initiator_bytes": 7469, "responder_bytes": 6140 }, { "flow_id": "flow-931bf6d5ea83b0e05760cf95", "transport": "udp", "stream": 967, "initiator_ip": "10.10.22.156", "initiator_port": 65467, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74712, "last_frame": 74713, "first_seen_epoch": "1634917473.116898", "last_seen_epoch": "1634917473.117213", "packets": 2, "bytes": 256, "initiator_bytes": 96, "responder_bytes": 160 }, { "flow_id": "flow-72f23a3567d2bf7902af8359", "transport": "udp", "stream": 968, "initiator_ip": "10.10.22.156", "initiator_port": 65468, "responder_ip": "10.10.22.22", "responder_port": 389, "first_frame": 74714, "last_frame": 74715, "first_seen_epoch": "1634917473.117825", "last_seen_epoch": "1634917473.1181", "packets": 2, "bytes": 497, "initiator_bytes": 265, "responder_bytes": 232 }, { "flow_id": "flow-45ddfe86f24e497b99204954", "transport": "tcp", "stream": 1488, "initiator_ip": "10.10.22.156", "initiator_port": 50159, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 74741, "last_frame": 74757, "first_seen_epoch": "1634917477.764748", "last_seen_epoch": "1634917479.0656", "packets": 17, "bytes": 4294, "initiator_bytes": 1460, "responder_bytes": 2834 }, { "flow_id": "flow-1c0f4a1b27303e769e987378", "transport": "udp", "stream": 969, "initiator_ip": "10.10.22.156", "initiator_port": 56238, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74767, "last_frame": 74770, "first_seen_epoch": "1634917480.878971", "last_seen_epoch": "1634917480.997903", "packets": 3, "bytes": 287, "initiator_bytes": 170, "responder_bytes": 117 }, { "flow_id": "flow-efbe63b39cd6f70ced08ada7", "transport": "tcp", "stream": 1489, "initiator_ip": "10.10.22.156", "initiator_port": 50160, "responder_ip": "103.129.255.250", "responder_port": 25, "first_frame": 74771, "last_frame": 74908, "first_seen_epoch": "1634917480.998851", "last_seen_epoch": "1634917488.717699", "packets": 49, "bytes": 7493, "initiator_bytes": 2041, "responder_bytes": 5452 }, { "flow_id": "flow-5716782a31e455633136a4f6", "transport": "udp", "stream": 970, "initiator_ip": "10.10.22.157", "initiator_port": 57061, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 74844, "last_frame": 74846, "first_seen_epoch": "1634917486.420741", "last_seen_epoch": "1634917486.492765", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9338ea5112ae1ca21873207e", "transport": "tcp", "stream": 1490, "initiator_ip": "10.10.22.157", "initiator_port": 50305, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 74847, "last_frame": 74867, "first_seen_epoch": "1634917486.494771", "last_seen_epoch": "1634917486.791393", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-df74054bae2c5b5d3bfc24b0", "transport": "tcp", "stream": 1491, "initiator_ip": "10.10.22.156", "initiator_port": 50161, "responder_ip": "208.68.106.6", "responder_port": 25, "first_frame": 74849, "last_frame": 74934, "first_seen_epoch": "1634917486.571234", "last_seen_epoch": "1634917489.969056", "packets": 29, "bytes": 2310, "initiator_bytes": 953, "responder_bytes": 1357 }, { "flow_id": "flow-462f31e24d085e4f6f0464d7", "transport": "udp", "stream": 971, "initiator_ip": "10.10.22.157", "initiator_port": 55156, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 74935, "last_frame": 74939, "first_seen_epoch": "1634917490.810269", "last_seen_epoch": "1634917490.880535", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8dd3b6b88eb43fa23e307827", "transport": "tcp", "stream": 1492, "initiator_ip": "10.10.22.157", "initiator_port": 50306, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 74940, "last_frame": 74959, "first_seen_epoch": "1634917490.881025", "last_seen_epoch": "1634917491.225308", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c7e5a40928161a6852b1f3e5", "transport": "udp", "stream": 972, "initiator_ip": "10.10.22.156", "initiator_port": 64254, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74941, "last_frame": 74946, "first_seen_epoch": "1634917491.02327", "last_seen_epoch": "1634917491.091952", "packets": 2, "bytes": 454, "initiator_bytes": 74, "responder_bytes": 380 }, { "flow_id": "flow-e13b95652b3a414ee1bf871f", "transport": "tcp", "stream": 1493, "initiator_ip": "10.10.22.156", "initiator_port": 50162, "responder_ip": "40.126.29.8", "responder_port": 443, "first_frame": 74947, "last_frame": 74990, "first_seen_epoch": "1634917491.09622", "last_seen_epoch": "1634917491.490003", "packets": 42, "bytes": 25771, "initiator_bytes": 6434, "responder_bytes": 19337 }, { "flow_id": "flow-7a11e1169bb8f07127858c35", "transport": "udp", "stream": 973, "initiator_ip": "10.10.22.156", "initiator_port": 55649, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 74991, "last_frame": 74992, "first_seen_epoch": "1634917491.530973", "last_seen_epoch": "1634917491.61128", "packets": 2, "bytes": 319, "initiator_bytes": 94, "responder_bytes": 225 }, { "flow_id": "flow-f1dd49d9644eb30cd3ea4d59", "transport": "tcp", "stream": 1494, "initiator_ip": "10.10.22.156", "initiator_port": 50163, "responder_ip": "104.208.16.94", "responder_port": 443, "first_frame": 74993, "last_frame": 75021, "first_seen_epoch": "1634917491.615431", "last_seen_epoch": "1634917492.762155", "packets": 29, "bytes": 13737, "initiator_bytes": 7578, "responder_bytes": 6159 }, { "flow_id": "flow-d708499d6a6b2f30712c0073", "transport": "udp", "stream": 974, "initiator_ip": "10.10.22.157", "initiator_port": 49898, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75027, "last_frame": 75028, "first_seen_epoch": "1634917495.231744", "last_seen_epoch": "1634917495.28378", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-c4400f0900df4ef20dbf6e79", "transport": "tcp", "stream": 1495, "initiator_ip": "10.10.22.157", "initiator_port": 50307, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75029, "last_frame": 75034, "first_seen_epoch": "1634917495.285035", "last_seen_epoch": "1634917495.650344", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e5ac3a0aa4896b6de1f57646", "transport": "tcp", "stream": 1496, "initiator_ip": "10.10.22.157", "initiator_port": 50308, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75037, "last_frame": 75042, "first_seen_epoch": "1634917499.668011", "last_seen_epoch": "1634917500.158573", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-cc4de9c8de156652b923a34d", "transport": "tcp", "stream": 1497, "initiator_ip": "10.10.22.157", "initiator_port": 50309, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75047, "last_frame": 75052, "first_seen_epoch": "1634917504.171388", "last_seen_epoch": "1634917504.507859", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7b989d0dd18d7281d9700345", "transport": "tcp", "stream": 1498, "initiator_ip": "10.10.22.157", "initiator_port": 50310, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75053, "last_frame": 75059, "first_seen_epoch": "1634917508.513293", "last_seen_epoch": "1634917509.027019", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8c2f4531049432c7e7dc2b4e", "transport": "udp", "stream": 975, "initiator_ip": "10.10.22.157", "initiator_port": 65455, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75060, "last_frame": 75061, "first_seen_epoch": "1634917513.031011", "last_seen_epoch": "1634917513.107376", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d1e787708883a0975bcedee6", "transport": "tcp", "stream": 1499, "initiator_ip": "10.10.22.157", "initiator_port": 50311, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75062, "last_frame": 75067, "first_seen_epoch": "1634917513.108562", "last_seen_epoch": "1634917513.429176", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f728ad4901decb806e61c63f", "transport": "udp", "stream": 976, "initiator_ip": "10.10.22.157", "initiator_port": 63921, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75068, "last_frame": 75069, "first_seen_epoch": "1634917517.451981", "last_seen_epoch": "1634917517.515396", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-c06601d35735fca6f9f4641b", "transport": "tcp", "stream": 1500, "initiator_ip": "10.10.22.157", "initiator_port": 50312, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75070, "last_frame": 75075, "first_seen_epoch": "1634917517.516646", "last_seen_epoch": "1634917517.810311", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-af3b32a31eaddd798a2e247f", "transport": "udp", "stream": 977, "initiator_ip": "10.10.22.157", "initiator_port": 57575, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75076, "last_frame": 75077, "first_seen_epoch": "1634917521.82703", "last_seen_epoch": "1634917521.88753", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7e886fecdd7ba90248e165bd", "transport": "tcp", "stream": 1501, "initiator_ip": "10.10.22.157", "initiator_port": 50313, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75078, "last_frame": 75083, "first_seen_epoch": "1634917521.88897", "last_seen_epoch": "1634917522.189552", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-f3ada85f2992c0a5cacadd73", "transport": "tcp", "stream": 1502, "initiator_ip": "10.10.22.157", "initiator_port": 50314, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75088, "last_frame": 75093, "first_seen_epoch": "1634917526.200821", "last_seen_epoch": "1634917526.541332", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-763b2fc1fb2339a11da0c2eb", "transport": "tcp", "stream": 1503, "initiator_ip": "10.10.22.157", "initiator_port": 50315, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75096, "last_frame": 75105, "first_seen_epoch": "1634917530.560731", "last_seen_epoch": "1634917530.911809", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0f44acd95f1721f94d26acb3", "transport": "udp", "stream": 978, "initiator_ip": "10.10.22.156", "initiator_port": 64030, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75109, "last_frame": 75112, "first_seen_epoch": "1634917531.267706", "last_seen_epoch": "1634917531.441008", "packets": 3, "bytes": 266, "initiator_bytes": 152, "responder_bytes": 114 }, { "flow_id": "flow-598bcfb747d8d543dd84a3f2", "transport": "tcp", "stream": 1504, "initiator_ip": "10.10.22.156", "initiator_port": 50164, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 75113, "last_frame": 76253, "first_seen_epoch": "1634917531.442339", "last_seen_epoch": "1634917573.397599", "packets": 51, "bytes": 9458, "initiator_bytes": 2272, "responder_bytes": 7186 }, { "flow_id": "flow-01931e3dbe55cc263c439f2d", "transport": "udp", "stream": 979, "initiator_ip": "10.10.22.156", "initiator_port": 64318, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75138, "last_frame": 75139, "first_seen_epoch": "1634917532.951928", "last_seen_epoch": "1634917533.012812", "packets": 2, "bytes": 253, "initiator_bytes": 74, "responder_bytes": 179 }, { "flow_id": "flow-5e30714e3eae5f3df417a8ad", "transport": "tcp", "stream": 1505, "initiator_ip": "10.10.22.156", "initiator_port": 50165, "responder_ip": "104.94.77.31", "responder_port": 80, "first_frame": 75140, "last_frame": 76357, "first_seen_epoch": "1634917533.017573", "last_seen_epoch": "1634917611.886391", "packets": 11, "bytes": 1100, "initiator_bytes": 563, "responder_bytes": 537 }, { "flow_id": "flow-5cf8b5ffac854a1d9ea03460", "transport": "udp", "stream": 980, "initiator_ip": "10.10.22.156", "initiator_port": 60681, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75146, "last_frame": 75150, "first_seen_epoch": "1634917533.096883", "last_seen_epoch": "1634917533.142513", "packets": 2, "bytes": 300, "initiator_bytes": 83, "responder_bytes": 217 }, { "flow_id": "flow-37d3a6479f3bca2c0c7ac9ff", "transport": "tcp", "stream": 1506, "initiator_ip": "10.10.22.157", "initiator_port": 50316, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75179, "last_frame": 75188, "first_seen_epoch": "1634917534.91957", "last_seen_epoch": "1634917535.210526", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-92983f166806b2ad850ca68f", "transport": "udp", "stream": 981, "initiator_ip": "10.10.22.157", "initiator_port": 52332, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75213, "last_frame": 75214, "first_seen_epoch": "1634917539.232645", "last_seen_epoch": "1634917539.408654", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e151b651c15dd0b31ebde776", "transport": "tcp", "stream": 1507, "initiator_ip": "10.10.22.157", "initiator_port": 50317, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75218, "last_frame": 75226, "first_seen_epoch": "1634917539.409975", "last_seen_epoch": "1634917539.702086", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5012a71ef3a9b53e0c569f7e", "transport": "udp", "stream": 982, "initiator_ip": "10.10.22.157", "initiator_port": 51664, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75231, "last_frame": 75232, "first_seen_epoch": "1634917543.717527", "last_seen_epoch": "1634917543.887039", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8b888f09bfadc147b12ee691", "transport": "tcp", "stream": 1508, "initiator_ip": "10.10.22.157", "initiator_port": 50318, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75233, "last_frame": 75238, "first_seen_epoch": "1634917543.888351", "last_seen_epoch": "1634917544.192849", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-455139892337faddc3cc7f3b", "transport": "udp", "stream": 983, "initiator_ip": "10.10.22.157", "initiator_port": 52944, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 75239, "last_frame": 75240, "first_seen_epoch": "1634917548.201951", "last_seen_epoch": "1634917548.39076", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-265e1d21525bc343e607e9a2", "transport": "tcp", "stream": 1509, "initiator_ip": "10.10.22.157", "initiator_port": 50319, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75241, "last_frame": 75246, "first_seen_epoch": "1634917548.392095", "last_seen_epoch": "1634917548.686149", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e99465f42b5fa54082332043", "transport": "udp", "stream": 984, "initiator_ip": "10.10.22.157", "initiator_port": 62461, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75252, "last_frame": 75254, "first_seen_epoch": "1634917551.265096", "last_seen_epoch": "1634917551.265471", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-14e80c92a95632d83389b7b0", "transport": "udp", "stream": 985, "initiator_ip": "10.10.22.157", "initiator_port": 55918, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75256, "last_frame": 75257, "first_seen_epoch": "1634917551.267075", "last_seen_epoch": "1634917551.267916", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-d8ef3e3b9d78d851d938582f", "transport": "udp", "stream": 986, "initiator_ip": "10.10.22.156", "initiator_port": 54353, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75258, "last_frame": 75260, "first_seen_epoch": "1634917551.320799", "last_seen_epoch": "1634917551.564701", "packets": 3, "bytes": 383, "initiator_bytes": 166, "responder_bytes": 217 }, { "flow_id": "flow-447895a987102d9ca29a83c5", "transport": "tcp", "stream": 1510, "initiator_ip": "10.10.22.158", "initiator_port": 49867, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 75263, "last_frame": 76443, "first_seen_epoch": "1634917552.493773", "last_seen_epoch": "1634917620.076031", "packets": 20, "bytes": 9079, "initiator_bytes": 2010, "responder_bytes": 7069 }, { "flow_id": "flow-88351f8368649d8ea420a23f", "transport": "tcp", "stream": 1511, "initiator_ip": "10.10.22.158", "initiator_port": 49868, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 75282, "last_frame": 76447, "first_seen_epoch": "1634917552.715027", "last_seen_epoch": "1634917622.120254", "packets": 756, "bytes": 678146, "initiator_bytes": 17087, "responder_bytes": 661059 }, { "flow_id": "flow-e21102d516dd6e4607c0a1ff", "transport": "tcp", "stream": 1512, "initiator_ip": "10.10.22.157", "initiator_port": 50320, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75283, "last_frame": 75305, "first_seen_epoch": "1634917552.715828", "last_seen_epoch": "1634917552.99907", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4510b894979101e216f626f5", "transport": "tcp", "stream": 1513, "initiator_ip": "10.10.22.157", "initiator_port": 50321, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 75600, "last_frame": 76224, "first_seen_epoch": "1634917555.048759", "last_seen_epoch": "1634917565.781657", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-845f6da0305c544132feafbb", "transport": "udp", "stream": 987, "initiator_ip": "10.10.22.156", "initiator_port": 58948, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75740, "last_frame": 75745, "first_seen_epoch": "1634917555.755522", "last_seen_epoch": "1634917556.072346", "packets": 3, "bytes": 269, "initiator_bytes": 152, "responder_bytes": 117 }, { "flow_id": "flow-f9a6f4cfa5085f39c6aa36ce", "transport": "tcp", "stream": 1514, "initiator_ip": "10.10.22.156", "initiator_port": 50168, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 75746, "last_frame": 76327, "first_seen_epoch": "1634917556.073441", "last_seen_epoch": "1634917597.527788", "packets": 50, "bytes": 9388, "initiator_bytes": 2202, "responder_bytes": 7186 }, { "flow_id": "flow-073352acdbee73f6da9a8424", "transport": "tcp", "stream": 1515, "initiator_ip": "10.10.22.157", "initiator_port": 50322, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 75813, "last_frame": 75890, "first_seen_epoch": "1634917557.01377", "last_seen_epoch": "1634917557.325139", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-bbc0afc26d229d8fd2845023", "transport": "udp", "stream": 988, "initiator_ip": "10.10.22.157", "initiator_port": 59823, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 75898, "last_frame": 75924, "first_seen_epoch": "1634917557.34698", "last_seen_epoch": "1634917557.392527", "packets": 3, "bytes": 398, "initiator_bytes": 178, "responder_bytes": 220 }, { "flow_id": "flow-246e423367cd6be88d36cfa3", "transport": "tcp", "stream": 1516, "initiator_ip": "10.10.22.157", "initiator_port": 50323, "responder_ip": "52.178.17.3", "responder_port": 443, "first_frame": 75925, "last_frame": 76161, "first_seen_epoch": "1634917557.393341", "last_seen_epoch": "1634917558.524409", "packets": 22, "bytes": 8319, "initiator_bytes": 2753, "responder_bytes": 5566 }, { "flow_id": "flow-b4635ae06cf20059afb68152", "transport": "tcp", "stream": 1517, "initiator_ip": "10.10.22.157", "initiator_port": 50324, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76190, "last_frame": 76195, "first_seen_epoch": "1634917561.327738", "last_seen_epoch": "1634917561.627019", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d8f9b6daca94e8bf9ed87ddc", "transport": "tcp", "stream": 1518, "initiator_ip": "10.10.22.158", "initiator_port": 49869, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 76196, "last_frame": 77054, "first_seen_epoch": "1634917563.371584", "last_seen_epoch": "1634917742.967389", "packets": 21, "bytes": 5140, "initiator_bytes": 1742, "responder_bytes": 3398 }, { "flow_id": "flow-ee6b9f38828603511d3c8a5c", "transport": "udp", "stream": 989, "initiator_ip": "10.10.22.157", "initiator_port": 59722, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76217, "last_frame": 76218, "first_seen_epoch": "1634917565.639631", "last_seen_epoch": "1634917565.697195", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d98a45c64eb5c2ef7a740013", "transport": "tcp", "stream": 1519, "initiator_ip": "10.10.22.157", "initiator_port": 50325, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76219, "last_frame": 76231, "first_seen_epoch": "1634917565.69851", "last_seen_epoch": "1634917565.987682", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-d7d3ad0b360dfa605e12662a", "transport": "udp", "stream": 990, "initiator_ip": "10.10.22.157", "initiator_port": 52683, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76232, "last_frame": 76233, "first_seen_epoch": "1634917569.999945", "last_seen_epoch": "1634917570.063243", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d5fc3480e5bacf9c6d22cadb", "transport": "tcp", "stream": 1520, "initiator_ip": "10.10.22.157", "initiator_port": 50326, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76234, "last_frame": 76239, "first_seen_epoch": "1634917570.064598", "last_seen_epoch": "1634917570.357206", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-948e9c7f774bd881d0a7b787", "transport": "udp", "stream": 991, "initiator_ip": "10.10.22.157", "initiator_port": 52409, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76260, "last_frame": 76261, "first_seen_epoch": "1634917574.374153", "last_seen_epoch": "1634917574.435037", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-25756117a7bbff225a22157e", "transport": "tcp", "stream": 1521, "initiator_ip": "10.10.22.157", "initiator_port": 50327, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76262, "last_frame": 76267, "first_seen_epoch": "1634917574.436179", "last_seen_epoch": "1634917574.723603", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2300c256cb743d001d4be2b0", "transport": "tcp", "stream": 1522, "initiator_ip": "10.10.22.157", "initiator_port": 50328, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76270, "last_frame": 76278, "first_seen_epoch": "1634917578.732742", "last_seen_epoch": "1634917579.033501", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-7e8a4cb09c9372fbd0f47ed8", "transport": "tcp", "stream": 1523, "initiator_ip": "10.10.22.157", "initiator_port": 50329, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76279, "last_frame": 76284, "first_seen_epoch": "1634917583.046767", "last_seen_epoch": "1634917583.351507", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c86d44ba69d20723fb006902", "transport": "tcp", "stream": 1524, "initiator_ip": "10.10.22.157", "initiator_port": 50330, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76290, "last_frame": 76295, "first_seen_epoch": "1634917587.359625", "last_seen_epoch": "1634917587.671816", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-60c093825ad6ff101c46c190", "transport": "udp", "stream": 992, "initiator_ip": "10.10.22.157", "initiator_port": 59050, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76298, "last_frame": 76299, "first_seen_epoch": "1634917591.687674", "last_seen_epoch": "1634917591.73749", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-7cc4b08da899979e46f80910", "transport": "tcp", "stream": 1525, "initiator_ip": "10.10.22.157", "initiator_port": 50331, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76300, "last_frame": 76305, "first_seen_epoch": "1634917591.738348", "last_seen_epoch": "1634917592.025116", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-56be5e3aebb4cc0a2f4d0ec3", "transport": "udp", "stream": 993, "initiator_ip": "10.10.22.157", "initiator_port": 61315, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76306, "last_frame": 76307, "first_seen_epoch": "1634917596.032163", "last_seen_epoch": "1634917596.101682", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6102c559aa8cabb721c3617c", "transport": "tcp", "stream": 1526, "initiator_ip": "10.10.22.157", "initiator_port": 50332, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76308, "last_frame": 76313, "first_seen_epoch": "1634917596.103047", "last_seen_epoch": "1634917596.436682", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-197ee0f55f5136dc5153d974", "transport": "udp", "stream": 994, "initiator_ip": "10.10.22.157", "initiator_port": 54491, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76334, "last_frame": 76335, "first_seen_epoch": "1634917600.453446", "last_seen_epoch": "1634917600.523861", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-63dd79a2a21e4fbf1e8ea72b", "transport": "tcp", "stream": 1527, "initiator_ip": "10.10.22.157", "initiator_port": 50333, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76336, "last_frame": 76341, "first_seen_epoch": "1634917600.525103", "last_seen_epoch": "1634917600.810759", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-d038bc52c5a1d5f5f2efb559", "transport": "tcp", "stream": 1528, "initiator_ip": "10.10.22.157", "initiator_port": 50334, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76342, "last_frame": 76347, "first_seen_epoch": "1634917604.828123", "last_seen_epoch": "1634917605.119812", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e5e6a78aba5618f9955509b9", "transport": "tcp", "stream": 1529, "initiator_ip": "10.10.22.157", "initiator_port": 50335, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76348, "last_frame": 76353, "first_seen_epoch": "1634917609.144335", "last_seen_epoch": "1634917609.444834", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e27b19af3a50e74b362bbadc", "transport": "udp", "stream": 995, "initiator_ip": "10.10.22.156", "initiator_port": 60136, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76363, "last_frame": 76366, "first_seen_epoch": "1634917611.951027", "last_seen_epoch": "1634917611.951492", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-1c3acd549cedc9cb6ba6a0e4", "transport": "udp", "stream": 996, "initiator_ip": "10.10.22.156", "initiator_port": 55213, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 76367, "last_frame": 76367, "first_seen_epoch": "1634917611.951587", "last_seen_epoch": "1634917611.951587", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-3b6031edd69bc78e3feebd97", "transport": "udp", "stream": 997, "initiator_ip": "10.10.22.156", "initiator_port": 59177, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76368, "last_frame": 76369, "first_seen_epoch": "1634917611.952688", "last_seen_epoch": "1634917611.953658", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-0470db3cf8b8e69cf1f9636f", "transport": "tcp", "stream": 1530, "initiator_ip": "10.10.22.157", "initiator_port": 50336, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76372, "last_frame": 76378, "first_seen_epoch": "1634917613.45402", "last_seen_epoch": "1634917613.81496", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-170adee35778b06debff9ec5", "transport": "tcp", "stream": 1531, "initiator_ip": "10.10.22.156", "initiator_port": 50169, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 76381, "last_frame": 76461, "first_seen_epoch": "1634917615.129668", "last_seen_epoch": "1634917625.939222", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-3dcffcf7b16dc36feca7b096", "transport": "udp", "stream": 998, "initiator_ip": "10.10.22.157", "initiator_port": 54917, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76402, "last_frame": 76403, "first_seen_epoch": "1634917617.828927", "last_seen_epoch": "1634917617.909785", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-06c61365f551aa300d80f4e7", "transport": "tcp", "stream": 1532, "initiator_ip": "10.10.22.157", "initiator_port": 50337, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76404, "last_frame": 76419, "first_seen_epoch": "1634917617.911122", "last_seen_epoch": "1634917618.211713", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-2cb3f0f3c0caca1f8d0e3692", "transport": "udp", "stream": 999, "initiator_ip": "10.10.22.156", "initiator_port": 51225, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76410, "last_frame": 76411, "first_seen_epoch": "1634917618.094197", "last_seen_epoch": "1634917618.132695", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-85eeaaf16bc11841e2054996", "transport": "tcp", "stream": 1533, "initiator_ip": "10.10.22.156", "initiator_port": 50170, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 76412, "last_frame": 76442, "first_seen_epoch": "1634917618.133972", "last_seen_epoch": "1634917618.875958", "packets": 28, "bytes": 11554, "initiator_bytes": 5419, "responder_bytes": 6135 }, { "flow_id": "flow-f405ffaeacda56f1ff4dc954", "transport": "udp", "stream": 1000, "initiator_ip": "10.10.22.157", "initiator_port": 49481, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76448, "last_frame": 76449, "first_seen_epoch": "1634917622.220081", "last_seen_epoch": "1634917622.268115", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-8dc3c191a47bbd64a6715fbd", "transport": "tcp", "stream": 1534, "initiator_ip": "10.10.22.157", "initiator_port": 50338, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76450, "last_frame": 76455, "first_seen_epoch": "1634917622.269395", "last_seen_epoch": "1634917622.567658", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a78bf7e4ee0149cc634bc21c", "transport": "udp", "stream": 1001, "initiator_ip": "10.10.22.157", "initiator_port": 54717, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76462, "last_frame": 76463, "first_seen_epoch": "1634917626.579572", "last_seen_epoch": "1634917626.645474", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-1d9433d7587a4d5f40dcb533", "transport": "tcp", "stream": 1535, "initiator_ip": "10.10.22.157", "initiator_port": 50339, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76464, "last_frame": 76469, "first_seen_epoch": "1634917626.646835", "last_seen_epoch": "1634917626.952535", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-5f03ed1aec031ba75748f595", "transport": "tcp", "stream": 1536, "initiator_ip": "10.10.22.157", "initiator_port": 50340, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76471, "last_frame": 76478, "first_seen_epoch": "1634917630.969703", "last_seen_epoch": "1634917631.28488", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-5a22fa196ad7956809052db7", "transport": "udp", "stream": 1002, "initiator_ip": "10.10.22.156", "initiator_port": 57884, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76488, "last_frame": 76498, "first_seen_epoch": "1634917635.125626", "last_seen_epoch": "1634917636.367594", "packets": 4, "bytes": 364, "initiator_bytes": 261, "responder_bytes": 103 }, { "flow_id": "flow-19092d7e6d98178c028b12a0", "transport": "tcp", "stream": 1537, "initiator_ip": "10.10.22.157", "initiator_port": 50341, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76491, "last_frame": 76496, "first_seen_epoch": "1634917635.31286", "last_seen_epoch": "1634917635.606137", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3bf4a5c0f011a373b089087a", "transport": "tcp", "stream": 1538, "initiator_ip": "10.10.22.156", "initiator_port": 50171, "responder_ip": "70.39.150.220", "responder_port": 25, "first_frame": 76499, "last_frame": 76608, "first_seen_epoch": "1634917636.368576", "last_seen_epoch": "1634917642.844391", "packets": 51, "bytes": 9729, "initiator_bytes": 2068, "responder_bytes": 7661 }, { "flow_id": "flow-bc6288715348f50a747a751a", "transport": "tcp", "stream": 1539, "initiator_ip": "10.10.22.157", "initiator_port": 50342, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76558, "last_frame": 76571, "first_seen_epoch": "1634917639.609587", "last_seen_epoch": "1634917639.917857", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c1ee6381d6b2928a7c8bb4f2", "transport": "udp", "stream": 1003, "initiator_ip": "10.10.22.158", "initiator_port": 56086, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76623, "last_frame": 76624, "first_seen_epoch": "1634917643.637827", "last_seen_epoch": "1634917643.638037", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-30c2c7df2cde83ea1a5523f8", "transport": "udp", "stream": 1004, "initiator_ip": "10.10.22.158", "initiator_port": 55933, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 76625, "last_frame": 76625, "first_seen_epoch": "1634917643.638226", "last_seen_epoch": "1634917643.638226", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-552efd4a1d7ef8b9e7d592eb", "transport": "udp", "stream": 1005, "initiator_ip": "10.10.22.158", "initiator_port": 55693, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76626, "last_frame": 76627, "first_seen_epoch": "1634917643.640229", "last_seen_epoch": "1634917643.64124", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-1151e0542be14c86a45657bd", "transport": "udp", "stream": 1006, "initiator_ip": "10.10.22.157", "initiator_port": 57033, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76628, "last_frame": 76629, "first_seen_epoch": "1634917643.922936", "last_seen_epoch": "1634917643.985581", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e966687cf6c9fa9694989f8b", "transport": "tcp", "stream": 1540, "initiator_ip": "10.10.22.157", "initiator_port": 50343, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76630, "last_frame": 76636, "first_seen_epoch": "1634917643.986951", "last_seen_epoch": "1634917644.26957", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3d264cd4f1b40b349343ec1b", "transport": "tcp", "stream": 1541, "initiator_ip": "10.10.22.158", "initiator_port": 49870, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 76640, "last_frame": 76709, "first_seen_epoch": "1634917646.048974", "last_seen_epoch": "1634917656.807912", "packets": 24, "bytes": 7213, "initiator_bytes": 5125, "responder_bytes": 2088 }, { "flow_id": "flow-f81236fb9e551b3da29ab51b", "transport": "tcp", "stream": 1542, "initiator_ip": "10.10.22.157", "initiator_port": 50344, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76663, "last_frame": 76668, "first_seen_epoch": "1634917648.345009", "last_seen_epoch": "1634917648.639657", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-64f8d255795bab904ce6f504", "transport": "udp", "stream": 1007, "initiator_ip": "10.10.22.158", "initiator_port": 49493, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76669, "last_frame": 76670, "first_seen_epoch": "1634917649.030395", "last_seen_epoch": "1634917649.092285", "packets": 2, "bytes": 308, "initiator_bytes": 89, "responder_bytes": 219 }, { "flow_id": "flow-292451ea93c35979fa6afc8c", "transport": "tcp", "stream": 1543, "initiator_ip": "10.10.22.158", "initiator_port": 49871, "responder_ip": "20.44.10.123", "responder_port": 443, "first_frame": 76671, "last_frame": 76694, "first_seen_epoch": "1634917649.093635", "last_seen_epoch": "1634917649.820815", "packets": 23, "bytes": 8468, "initiator_bytes": 2902, "responder_bytes": 5566 }, { "flow_id": "flow-9534405039df60e00aa66680", "transport": "udp", "stream": 1008, "initiator_ip": "10.10.22.157", "initiator_port": 54252, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76695, "last_frame": 76697, "first_seen_epoch": "1634917652.643329", "last_seen_epoch": "1634917652.701783", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-001b961ee899a27555484615", "transport": "tcp", "stream": 1544, "initiator_ip": "10.10.22.157", "initiator_port": 50345, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76698, "last_frame": 76703, "first_seen_epoch": "1634917652.703041", "last_seen_epoch": "1634917652.979562", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c95dd4107255b027b6627eca", "transport": "tcp", "stream": 1545, "initiator_ip": "10.10.22.157", "initiator_port": 50346, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76710, "last_frame": 76717, "first_seen_epoch": "1634917656.98542", "last_seen_epoch": "1634917657.301732", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-d311584727259173f8db2a24", "transport": "tcp", "stream": 1546, "initiator_ip": "10.10.22.157", "initiator_port": 50347, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76719, "last_frame": 76724, "first_seen_epoch": "1634917661.313305", "last_seen_epoch": "1634917661.630009", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c458289169d690402cd74f33", "transport": "tcp", "stream": 1547, "initiator_ip": "10.10.22.157", "initiator_port": 50348, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76725, "last_frame": 76730, "first_seen_epoch": "1634917665.641753", "last_seen_epoch": "1634917665.974894", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-a3b5e03f485efc5b0993ba85", "transport": "udp", "stream": 1009, "initiator_ip": "10.10.22.157", "initiator_port": 60507, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76731, "last_frame": 76732, "first_seen_epoch": "1634917669.986091", "last_seen_epoch": "1634917670.054984", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-719641e178e39b40123c7b26", "transport": "tcp", "stream": 1548, "initiator_ip": "10.10.22.157", "initiator_port": 50349, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76733, "last_frame": 76740, "first_seen_epoch": "1634917670.056294", "last_seen_epoch": "1634917670.385103", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-edcc47fa946dab1d9c1e7c50", "transport": "udp", "stream": 1010, "initiator_ip": "10.10.22.157", "initiator_port": 54290, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76744, "last_frame": 76745, "first_seen_epoch": "1634917674.393914", "last_seen_epoch": "1634917674.457074", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-86170126a4d69d3d43a9ed7d", "transport": "tcp", "stream": 1549, "initiator_ip": "10.10.22.157", "initiator_port": 50350, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76746, "last_frame": 76751, "first_seen_epoch": "1634917674.458041", "last_seen_epoch": "1634917674.74088", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e0d60128a51286a996e58c62", "transport": "udp", "stream": 1011, "initiator_ip": "10.10.22.157", "initiator_port": 50089, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76754, "last_frame": 76755, "first_seen_epoch": "1634917678.751851", "last_seen_epoch": "1634917678.949216", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-62683c4f203c07d0bd12a3cd", "transport": "tcp", "stream": 1550, "initiator_ip": "10.10.22.157", "initiator_port": 50351, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76756, "last_frame": 76761, "first_seen_epoch": "1634917678.950481", "last_seen_epoch": "1634917679.359735", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-afe53ec67c7a2b9cdc3eaadb", "transport": "tcp", "stream": 1551, "initiator_ip": "10.10.22.157", "initiator_port": 50352, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76764, "last_frame": 76769, "first_seen_epoch": "1634917683.375819", "last_seen_epoch": "1634917683.682379", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-632616caecffbbdfa38641fa", "transport": "tcp", "stream": 1552, "initiator_ip": "10.10.22.157", "initiator_port": 50353, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76770, "last_frame": 76775, "first_seen_epoch": "1634917687.689747", "last_seen_epoch": "1634917688.013356", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-7d92077412702a72484c8fb9", "transport": "tcp", "stream": 1553, "initiator_ip": "10.10.22.157", "initiator_port": 50354, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76776, "last_frame": 76781, "first_seen_epoch": "1634917692.033308", "last_seen_epoch": "1634917692.334466", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b2f395d681e5730083ea230d", "transport": "udp", "stream": 1012, "initiator_ip": "10.10.22.157", "initiator_port": 49809, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76782, "last_frame": 76783, "first_seen_epoch": "1634917696.345742", "last_seen_epoch": "1634917696.39753", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-0b2e010cec290d6d50fe906f", "transport": "tcp", "stream": 1554, "initiator_ip": "10.10.22.157", "initiator_port": 50355, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76784, "last_frame": 76789, "first_seen_epoch": "1634917696.398888", "last_seen_epoch": "1634917696.716416", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-3fa1e4a9c1b57293d3099373", "transport": "udp", "stream": 1013, "initiator_ip": "10.10.22.157", "initiator_port": 60433, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76790, "last_frame": 76791, "first_seen_epoch": "1634917700.722245", "last_seen_epoch": "1634917700.790467", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-22fa05c519dd5d7448d6da3e", "transport": "tcp", "stream": 1555, "initiator_ip": "10.10.22.157", "initiator_port": 50356, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76792, "last_frame": 76797, "first_seen_epoch": "1634917700.791436", "last_seen_epoch": "1634917701.080164", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4c0680c8831c1f34120a8af7", "transport": "udp", "stream": 1014, "initiator_ip": "10.10.22.157", "initiator_port": 59230, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 76798, "last_frame": 76799, "first_seen_epoch": "1634917705.111972", "last_seen_epoch": "1634917705.187454", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-09423443b21492220876678e", "transport": "tcp", "stream": 1556, "initiator_ip": "10.10.22.157", "initiator_port": 50357, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76800, "last_frame": 76805, "first_seen_epoch": "1634917705.188407", "last_seen_epoch": "1634917705.472557", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-6bd1f916e2baf71e3629c433", "transport": "tcp", "stream": 1557, "initiator_ip": "10.10.22.157", "initiator_port": 50358, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76808, "last_frame": 76817, "first_seen_epoch": "1634917709.485643", "last_seen_epoch": "1634917712.931732", "packets": 8, "bytes": 548, "initiator_bytes": 382, "responder_bytes": 166 }, { "flow_id": "flow-3102fbfee32c991ba051da79", "transport": "udp", "stream": 1015, "initiator_ip": "10.10.22.156", "initiator_port": 53441, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 76828, "last_frame": 76829, "first_seen_epoch": "1634917715.511186", "last_seen_epoch": "1634917715.511717", "packets": 2, "bytes": 187, "initiator_bytes": 73, "responder_bytes": 114 }, { "flow_id": "flow-c335d7cce4a701160bc3e6fc", "transport": "tcp", "stream": 1558, "initiator_ip": "10.10.22.156", "initiator_port": 50172, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 76830, "last_frame": 77082, "first_seen_epoch": "1634917715.513073", "last_seen_epoch": "1634917757.496353", "packets": 51, "bytes": 9439, "initiator_bytes": 2253, "responder_bytes": 7186 }, { "flow_id": "flow-df6c69e8d42e44e21a3e91e5", "transport": "tcp", "stream": 1559, "initiator_ip": "10.10.22.157", "initiator_port": 50359, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 76852, "last_frame": 79136, "first_seen_epoch": "1634917716.942239", "last_seen_epoch": "1634918050.196939", "packets": 132, "bytes": 7976, "initiator_bytes": 4462, "responder_bytes": 3514 }, { "flow_id": "flow-a10e0e7240f400d47d15017a", "transport": "tcp", "stream": 1560, "initiator_ip": "10.10.22.156", "initiator_port": 50173, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 76942, "last_frame": 77109, "first_seen_epoch": "1634917726.537704", "last_seen_epoch": "1634917767.450902", "packets": 55, "bytes": 9655, "initiator_bytes": 2307, "responder_bytes": 7348 }, { "flow_id": "flow-0a36650f33dacd007728abc9", "transport": "udp", "stream": 1016, "initiator_ip": "10.10.22.156", "initiator_port": 65522, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 77125, "last_frame": 77128, "first_seen_epoch": "1634917769.638059", "last_seen_epoch": "1634917769.838468", "packets": 3, "bytes": 270, "initiator_bytes": 152, "responder_bytes": 118 }, { "flow_id": "flow-24b6bcd804976ca6412ee8d5", "transport": "tcp", "stream": 1561, "initiator_ip": "10.10.22.156", "initiator_port": 50174, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 77129, "last_frame": 78047, "first_seen_epoch": "1634917769.839898", "last_seen_epoch": "1634917811.631828", "packets": 54, "bytes": 9636, "initiator_bytes": 2342, "responder_bytes": 7294 }, { "flow_id": "flow-01c4955e659e00963b9b2cee", "transport": "tcp", "stream": 1562, "initiator_ip": "10.10.22.156", "initiator_port": 50175, "responder_ip": "197.242.67.121", "responder_port": 25, "first_frame": 77246, "last_frame": 78015, "first_seen_epoch": "1634917784.348978", "last_seen_epoch": "1634917796.9092", "packets": 52, "bytes": 8894, "initiator_bytes": 2051, "responder_bytes": 6843 }, { "flow_id": "flow-c363047437b1a42ad7101e7b", "transport": "udp", "stream": 1017, "initiator_ip": "10.10.22.156", "initiator_port": 54228, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 77263, "last_frame": 77268, "first_seen_epoch": "1634917788.058447", "last_seen_epoch": "1634917788.420012", "packets": 3, "bytes": 284, "initiator_bytes": 162, "responder_bytes": 122 }, { "flow_id": "flow-6e2bd8c0a0442d68f4e69b51", "transport": "tcp", "stream": 1563, "initiator_ip": "10.10.22.156", "initiator_port": 50176, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 77269, "last_frame": 78137, "first_seen_epoch": "1634917788.421051", "last_seen_epoch": "1634917830.81951", "packets": 53, "bytes": 9571, "initiator_bytes": 2277, "responder_bytes": 7294 }, { "flow_id": "flow-c0b1504c4a611de3ce88588b", "transport": "tcp", "stream": 1564, "initiator_ip": "10.10.22.158", "initiator_port": 49872, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 77354, "last_frame": 78226, "first_seen_epoch": "1634917790.906155", "last_seen_epoch": "1634917855.185268", "packets": 22, "bytes": 9222, "initiator_bytes": 2131, "responder_bytes": 7091 }, { "flow_id": "flow-8f90737690e2cdae597edef5", "transport": "tcp", "stream": 1565, "initiator_ip": "10.10.22.158", "initiator_port": 49873, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 77382, "last_frame": 78227, "first_seen_epoch": "1634917791.15591", "last_seen_epoch": "1634917855.492381", "packets": 519, "bytes": 476620, "initiator_bytes": 11754, "responder_bytes": 464866 }, { "flow_id": "flow-a2c33c168560f69c6b263bd3", "transport": "tcp", "stream": 1566, "initiator_ip": "10.10.22.156", "initiator_port": 50177, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 77960, "last_frame": 77993, "first_seen_epoch": "1634917794.97549", "last_seen_epoch": "1634917796.207235", "packets": 17, "bytes": 4257, "initiator_bytes": 1463, "responder_bytes": 2794 }, { "flow_id": "flow-c190d6dc608582ff2c6181a0", "transport": "udp", "stream": 1018, "initiator_ip": "10.10.22.156", "initiator_port": 54903, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78071, "last_frame": 78075, "first_seen_epoch": "1634917828.562404", "last_seen_epoch": "1634917828.660958", "packets": 4, "bytes": 614, "initiator_bytes": 152, "responder_bytes": 462 }, { "flow_id": "flow-e315b3590e5ababb9bc37b44", "transport": "udp", "stream": 1018, "initiator_ip": "10.10.22.156", "initiator_port": 53, "responder_ip": "10.10.22.22", "responder_port": 54903, "first_frame": 78076, "last_frame": 78076, "first_seen_epoch": "1634917828.661276", "last_seen_epoch": "1634917828.661276", "packets": 1, "bytes": 259, "initiator_bytes": 259, "responder_bytes": 0 }, { "flow_id": "flow-934dcc2fcdb1e5cbaf43b2b7", "transport": "tcp", "stream": 1567, "initiator_ip": "10.10.22.156", "initiator_port": 50178, "responder_ip": "40.97.120.146", "responder_port": 25, "first_frame": 78077, "last_frame": 78216, "first_seen_epoch": "1634917828.661645", "last_seen_epoch": "1634917845.363466", "packets": 56, "bytes": 9130, "initiator_bytes": 2185, "responder_bytes": 6945 }, { "flow_id": "flow-908609d15ab584680423476f", "transport": "udp", "stream": 1019, "initiator_ip": "10.10.22.158", "initiator_port": 49255, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78236, "last_frame": 78238, "first_seen_epoch": "1634917860.786777", "last_seen_epoch": "1634917860.884313", "packets": 3, "bytes": 336, "initiator_bytes": 182, "responder_bytes": 154 }, { "flow_id": "flow-52b1742090d8f6402cd517e2", "transport": "tcp", "stream": 1568, "initiator_ip": "10.10.22.158", "initiator_port": 49874, "responder_ip": "52.183.220.149", "responder_port": 443, "first_frame": 78239, "last_frame": 78263, "first_seen_epoch": "1634917860.885948", "last_seen_epoch": "1634917861.209203", "packets": 25, "bytes": 6909, "initiator_bytes": 2110, "responder_bytes": 4799 }, { "flow_id": "flow-7a2195d3aaaf805fee4f5426", "transport": "tcp", "stream": 1569, "initiator_ip": "10.10.22.158", "initiator_port": 49875, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 78274, "last_frame": 78982, "first_seen_epoch": "1634917875.330475", "last_seen_epoch": "1634918010.925544", "packets": 21, "bytes": 5216, "initiator_bytes": 1749, "responder_bytes": 3467 }, { "flow_id": "flow-ee897c3b851fb22a7d76e53e", "transport": "udp", "stream": 1020, "initiator_ip": "10.10.22.156", "initiator_port": 58699, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78338, "last_frame": 78339, "first_seen_epoch": "1634917928.063707", "last_seen_epoch": "1634917928.099537", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-2417e0838d97ca988fc5fc6c", "transport": "tcp", "stream": 1570, "initiator_ip": "10.10.22.156", "initiator_port": 50179, "responder_ip": "52.96.121.114", "responder_port": 25, "first_frame": 78340, "last_frame": 78455, "first_seen_epoch": "1634917928.100708", "last_seen_epoch": "1634917944.012389", "packets": 55, "bytes": 9126, "initiator_bytes": 2151, "responder_bytes": 6975 }, { "flow_id": "flow-1e4863839389df8744b4d32b", "transport": "udp", "stream": 1021, "initiator_ip": "10.10.22.157", "initiator_port": 64986, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78403, "last_frame": 78404, "first_seen_epoch": "1634917931.214637", "last_seen_epoch": "1634917931.214967", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-ca3ae5a229311f453b97bbb3", "transport": "udp", "stream": 1022, "initiator_ip": "10.10.22.157", "initiator_port": 61469, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78405, "last_frame": 78406, "first_seen_epoch": "1634917931.215402", "last_seen_epoch": "1634917931.215639", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-466d1b1b94a49eb389be721e", "transport": "udp", "stream": 1023, "initiator_ip": "10.10.22.156", "initiator_port": 63224, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78477, "last_frame": 78478, "first_seen_epoch": "1634917947.652981", "last_seen_epoch": "1634917947.653388", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-6361854cac3478acd15a0812", "transport": "udp", "stream": 1024, "initiator_ip": "10.10.22.156", "initiator_port": 62235, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78479, "last_frame": 78480, "first_seen_epoch": "1634917947.653857", "last_seen_epoch": "1634917947.65409", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-e8ef10eeafb8ce652c4132ba", "transport": "udp", "stream": 1025, "initiator_ip": "10.10.22.158", "initiator_port": 54180, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78481, "last_frame": 78482, "first_seen_epoch": "1634917949.22581", "last_seen_epoch": "1634917949.226193", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-b30040f40efa28d1284f6138", "transport": "udp", "stream": 1026, "initiator_ip": "10.10.22.156", "initiator_port": 53748, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78500, "last_frame": 78501, "first_seen_epoch": "1634917954.938449", "last_seen_epoch": "1634917954.975773", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-bd28ede195031c5acabdf20e", "transport": "tcp", "stream": 1571, "initiator_ip": "10.10.22.156", "initiator_port": 50180, "responder_ip": "52.96.10.242", "responder_port": 25, "first_frame": 78502, "last_frame": 78814, "first_seen_epoch": "1634917954.977125", "last_seen_epoch": "1634917973.803565", "packets": 51, "bytes": 8912, "initiator_bytes": 2093, "responder_bytes": 6819 }, { "flow_id": "flow-b8b9bf752c3208706cc6d356", "transport": "tcp", "stream": 1572, "initiator_ip": "10.10.22.156", "initiator_port": 50181, "responder_ip": "31.193.50.122", "responder_port": 25, "first_frame": 78590, "last_frame": 78771, "first_seen_epoch": "1634917960.625861", "last_seen_epoch": "1634917972.309816", "packets": 49, "bytes": 8321, "initiator_bytes": 2417, "responder_bytes": 5904 }, { "flow_id": "flow-e438927b5081db1f16d7635b", "transport": "tcp", "stream": 1573, "initiator_ip": "10.10.22.156", "initiator_port": 50182, "responder_ip": "31.193.50.122", "responder_port": 25, "first_frame": 78607, "last_frame": 78826, "first_seen_epoch": "1634917962.121915", "last_seen_epoch": "1634917974.088814", "packets": 49, "bytes": 8321, "initiator_bytes": 2417, "responder_bytes": 5904 }, { "flow_id": "flow-a46cc06154081277e9237f36", "transport": "tcp", "stream": 1574, "initiator_ip": "10.10.22.156", "initiator_port": 50183, "responder_ip": "31.193.50.122", "responder_port": 25, "first_frame": 78843, "last_frame": 78955, "first_seen_epoch": "1634917975.794361", "last_seen_epoch": "1634917987.54188", "packets": 50, "bytes": 8375, "initiator_bytes": 2471, "responder_bytes": 5904 }, { "flow_id": "flow-4601022c3dee55d22744df29", "transport": "udp", "stream": 1027, "initiator_ip": "10.10.22.156", "initiator_port": 65232, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 78997, "last_frame": 78998, "first_seen_epoch": "1634918020.328674", "last_seen_epoch": "1634918020.366852", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-3099df3a30091b43d3f10d90", "transport": "tcp", "stream": 1575, "initiator_ip": "10.10.22.156", "initiator_port": 50184, "responder_ip": "52.96.121.162", "responder_port": 25, "first_frame": 78999, "last_frame": 79124, "first_seen_epoch": "1634918020.368212", "last_seen_epoch": "1634918040.582884", "packets": 55, "bytes": 9126, "initiator_bytes": 2205, "responder_bytes": 6921 }, { "flow_id": "flow-4977976a69b7f33f167bc2d3", "transport": "udp", "stream": 1028, "initiator_ip": "10.10.22.156", "initiator_port": 56394, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 79141, "last_frame": 79143, "first_seen_epoch": "1634918051.080942", "last_seen_epoch": "1634918051.168288", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-6531ced24c37d0a204b49dcd", "transport": "tcp", "stream": 1576, "initiator_ip": "10.10.22.156", "initiator_port": 50185, "responder_ip": "64.98.36.176", "responder_port": 25, "first_frame": 79144, "last_frame": 79247, "first_seen_epoch": "1634918051.169079", "last_seen_epoch": "1634918058.146863", "packets": 50, "bytes": 7960, "initiator_bytes": 2065, "responder_bytes": 5895 }, { "flow_id": "flow-99d9b74feeb84ca38c8fda5f", "transport": "tcp", "stream": 1577, "initiator_ip": "10.10.22.157", "initiator_port": 50360, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 79200, "last_frame": 79205, "first_seen_epoch": "1634918054.214173", "last_seen_epoch": "1634918054.5366", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-543c98278fea4d81509fb26f", "transport": "udp", "stream": 1029, "initiator_ip": "10.10.22.157", "initiator_port": 51651, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 79252, "last_frame": 79254, "first_seen_epoch": "1634918058.543458", "last_seen_epoch": "1634918058.598533", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5faf36c752bb3cfe29124fc4", "transport": "tcp", "stream": 1578, "initiator_ip": "10.10.22.157", "initiator_port": 50361, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 79255, "last_frame": 79261, "first_seen_epoch": "1634918058.60037", "last_seen_epoch": "1634918058.907523", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c57b527fba4ed552cb49a8ec", "transport": "tcp", "stream": 1579, "initiator_ip": "10.10.22.158", "initiator_port": 49876, "responder_ip": "13.107.21.200", "responder_port": 443, "first_frame": 79262, "last_frame": 81034, "first_seen_epoch": "1634918060.44167", "last_seen_epoch": "1634918132.786007", "packets": 25, "bytes": 11121, "initiator_bytes": 3072, "responder_bytes": 8049 }, { "flow_id": "flow-9c47c424a96a132cf6202d13", "transport": "udp", "stream": 1030, "initiator_ip": "10.10.22.158", "initiator_port": 57268, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 79282, "last_frame": 79283, "first_seen_epoch": "1634918060.70984", "last_seen_epoch": "1634918060.763284", "packets": 2, "bytes": 292, "initiator_bytes": 72, "responder_bytes": 220 }, { "flow_id": "flow-727a3399185bd284158392eb", "transport": "tcp", "stream": 1580, "initiator_ip": "10.10.22.158", "initiator_port": 49877, "responder_ip": "204.79.197.200", "responder_port": 443, "first_frame": 79284, "last_frame": 81032, "first_seen_epoch": "1634918060.764363", "last_seen_epoch": "1634918131.875233", "packets": 1113, "bytes": 1059573, "initiator_bytes": 23394, "responder_bytes": 1036179 }, { "flow_id": "flow-961dbf916b7ff75a2e7d9abe", "transport": "udp", "stream": 1031, "initiator_ip": "10.10.22.157", "initiator_port": 61876, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 79843, "last_frame": 79844, "first_seen_epoch": "1634918062.917019", "last_seen_epoch": "1634918062.97829", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-9158d1e2fb781e279f5aa39f", "transport": "tcp", "stream": 1581, "initiator_ip": "10.10.22.157", "initiator_port": 50362, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 79845, "last_frame": 79856, "first_seen_epoch": "1634918062.978889", "last_seen_epoch": "1634918063.285163", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e0df746080cdda0a343aefd3", "transport": "udp", "stream": 1032, "initiator_ip": "10.10.22.158", "initiator_port": 59902, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80412, "last_frame": 80414, "first_seen_epoch": "1634918065.765731", "last_seen_epoch": "1634918065.853495", "packets": 3, "bytes": 254, "initiator_bytes": 148, "responder_bytes": 106 }, { "flow_id": "flow-4cd6aaa038cddcefb9d93cae", "transport": "tcp", "stream": 1582, "initiator_ip": "10.10.22.158", "initiator_port": 49878, "responder_ip": "23.222.241.43", "responder_port": 443, "first_frame": 80415, "last_frame": 81204, "first_seen_epoch": "1634918065.85483", "last_seen_epoch": "1634918170.492584", "packets": 26, "bytes": 10254, "initiator_bytes": 1351, "responder_bytes": 8903 }, { "flow_id": "flow-3983dac8843fc0fa4706db14", "transport": "udp", "stream": 1033, "initiator_ip": "10.10.22.158", "initiator_port": 49914, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80437, "last_frame": 80439, "first_seen_epoch": "1634918066.17448", "last_seen_epoch": "1634918066.250031", "packets": 3, "bytes": 271, "initiator_bytes": 148, "responder_bytes": 123 }, { "flow_id": "flow-e3e0cdd4249f0c894915cb95", "transport": "tcp", "stream": 1583, "initiator_ip": "10.10.22.158", "initiator_port": 49879, "responder_ip": "159.127.40.144", "responder_port": 80, "first_frame": 80440, "last_frame": 80454, "first_seen_epoch": "1634918066.251667", "last_seen_epoch": "1634918066.49878", "packets": 11, "bytes": 2124, "initiator_bytes": 647, "responder_bytes": 1477 }, { "flow_id": "flow-e75a37469e57454ada17704d", "transport": "udp", "stream": 1034, "initiator_ip": "10.10.22.158", "initiator_port": 61063, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80449, "last_frame": 80451, "first_seen_epoch": "1634918066.4277", "last_seen_epoch": "1634918066.49512", "packets": 3, "bytes": 268, "initiator_bytes": 146, "responder_bytes": 122 }, { "flow_id": "flow-7b3f3ca3926887ebd170508a", "transport": "tcp", "stream": 1584, "initiator_ip": "10.10.22.158", "initiator_port": 49880, "responder_ip": "159.127.40.144", "responder_port": 443, "first_frame": 80452, "last_frame": 80476, "first_seen_epoch": "1634918066.496276", "last_seen_epoch": "1634918066.829015", "packets": 23, "bytes": 7725, "initiator_bytes": 1658, "responder_bytes": 6067 }, { "flow_id": "flow-7e874cfcc81ddc11f44a552b", "transport": "udp", "stream": 1035, "initiator_ip": "10.10.22.158", "initiator_port": 65125, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80477, "last_frame": 80481, "first_seen_epoch": "1634918066.829689", "last_seen_epoch": "1634918066.882943", "packets": 3, "bytes": 268, "initiator_bytes": 146, "responder_bytes": 122 }, { "flow_id": "flow-22894824eccea2c0a88df463", "transport": "tcp", "stream": 1585, "initiator_ip": "10.10.22.158", "initiator_port": 49881, "responder_ip": "159.127.40.144", "responder_port": 443, "first_frame": 80482, "last_frame": 80504, "first_seen_epoch": "1634918066.883766", "last_seen_epoch": "1634918067.204728", "packets": 23, "bytes": 7565, "initiator_bytes": 1770, "responder_bytes": 5795 }, { "flow_id": "flow-8506234c0e6d8d09f10a9ba2", "transport": "udp", "stream": 1036, "initiator_ip": "10.10.22.158", "initiator_port": 64333, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80505, "last_frame": 80508, "first_seen_epoch": "1634918067.205406", "last_seen_epoch": "1634918067.295588", "packets": 3, "bytes": 265, "initiator_bytes": 166, "responder_bytes": 99 }, { "flow_id": "flow-8553d499c2a9e040d2ea25bc", "transport": "udp", "stream": 1037, "initiator_ip": "10.10.22.157", "initiator_port": 56537, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80507, "last_frame": 80514, "first_seen_epoch": "1634918067.292194", "last_seen_epoch": "1634918067.346709", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-f65d6cf9cb220b039a57aa76", "transport": "tcp", "stream": 1586, "initiator_ip": "10.10.22.158", "initiator_port": 49882, "responder_ip": "34.120.119.232", "responder_port": 443, "first_frame": 80509, "last_frame": 81203, "first_seen_epoch": "1634918067.296631", "last_seen_epoch": "1634918170.492328", "packets": 153, "bytes": 135031, "initiator_bytes": 3601, "responder_bytes": 131430 }, { "flow_id": "flow-231b2081c0931c83d2238d58", "transport": "tcp", "stream": 1587, "initiator_ip": "10.10.22.157", "initiator_port": 50363, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80515, "last_frame": 80659, "first_seen_epoch": "1634918067.348021", "last_seen_epoch": "1634918067.659408", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1a1186c6fe279fab741d6269", "transport": "tcp", "stream": 1588, "initiator_ip": "10.10.22.157", "initiator_port": 50364, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80665, "last_frame": 80670, "first_seen_epoch": "1634918071.683939", "last_seen_epoch": "1634918072.013574", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-4f13017adfe631672fa4a8a9", "transport": "tcp", "stream": 1589, "initiator_ip": "10.10.22.157", "initiator_port": 50365, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80673, "last_frame": 80681, "first_seen_epoch": "1634918076.027131", "last_seen_epoch": "1634918076.366658", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-1720eb9df4caef3cd32d8c90", "transport": "udp", "stream": 1038, "initiator_ip": "10.10.22.156", "initiator_port": 54991, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80686, "last_frame": 80688, "first_seen_epoch": "1634918076.913428", "last_seen_epoch": "1634918076.96905", "packets": 2, "bytes": 174, "initiator_bytes": 79, "responder_bytes": 95 }, { "flow_id": "flow-904d3d795cdc1f61f0396ba6", "transport": "tcp", "stream": 1590, "initiator_ip": "10.10.22.156", "initiator_port": 50186, "responder_ip": "208.180.40.68", "responder_port": 25, "first_frame": 80689, "last_frame": 80811, "first_seen_epoch": "1634918076.969843", "last_seen_epoch": "1634918091.959115", "packets": 51, "bytes": 7801, "initiator_bytes": 1986, "responder_bytes": 5815 }, { "flow_id": "flow-e6171c9eb766dd8abc6e20d4", "transport": "tcp", "stream": 1591, "initiator_ip": "10.10.22.157", "initiator_port": 50366, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80744, "last_frame": 80757, "first_seen_epoch": "1634918080.372051", "last_seen_epoch": "1634918080.704077", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-8b547dd9cd9c676ebc60144d", "transport": "udp", "stream": 1039, "initiator_ip": "10.10.22.157", "initiator_port": 60943, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80773, "last_frame": 80774, "first_seen_epoch": "1634918084.716787", "last_seen_epoch": "1634918084.775897", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-41c0847b7b5d45ea5651c50a", "transport": "tcp", "stream": 1592, "initiator_ip": "10.10.22.157", "initiator_port": 50367, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80775, "last_frame": 80780, "first_seen_epoch": "1634918084.777004", "last_seen_epoch": "1634918085.074126", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9d6f9a79873589f2ad82ae5c", "transport": "udp", "stream": 1040, "initiator_ip": "10.10.22.157", "initiator_port": 56617, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80781, "last_frame": 80782, "first_seen_epoch": "1634918089.091168", "last_seen_epoch": "1634918089.147253", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-e5ab38626a3f41ebe161a19a", "transport": "tcp", "stream": 1593, "initiator_ip": "10.10.22.157", "initiator_port": 50368, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80783, "last_frame": 80790, "first_seen_epoch": "1634918089.148554", "last_seen_epoch": "1634918089.452254", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-da234805ebd96a3833ba0786", "transport": "udp", "stream": 1041, "initiator_ip": "10.10.22.157", "initiator_port": 52427, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80817, "last_frame": 80819, "first_seen_epoch": "1634918093.465267", "last_seen_epoch": "1634918093.529402", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-209c8eaa3d69ef311a2f1187", "transport": "tcp", "stream": 1594, "initiator_ip": "10.10.22.157", "initiator_port": 50369, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80820, "last_frame": 80825, "first_seen_epoch": "1634918093.530657", "last_seen_epoch": "1634918093.837647", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c3aad66419245ad74cc0f5d8", "transport": "tcp", "stream": 1595, "initiator_ip": "10.10.22.157", "initiator_port": 50370, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80830, "last_frame": 80835, "first_seen_epoch": "1634918097.855698", "last_seen_epoch": "1634918098.232373", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-b2d7bfe9c0e119963b278f8f", "transport": "tcp", "stream": 1596, "initiator_ip": "10.10.22.157", "initiator_port": 50371, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80838, "last_frame": 80845, "first_seen_epoch": "1634918102.246541", "last_seen_epoch": "1634918102.571158", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-90b57ef8a755bfa4f2f8a37f", "transport": "tcp", "stream": 1597, "initiator_ip": "10.10.22.157", "initiator_port": 50372, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80846, "last_frame": 80851, "first_seen_epoch": "1634918106.575854", "last_seen_epoch": "1634918106.888228", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ec62a5c8bf43f1f0212c4f19", "transport": "udp", "stream": 1042, "initiator_ip": "10.10.22.157", "initiator_port": 61600, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80852, "last_frame": 80853, "first_seen_epoch": "1634918110.905062", "last_seen_epoch": "1634918110.981223", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-52cf6d3de8d93d38a103bf91", "transport": "tcp", "stream": 1598, "initiator_ip": "10.10.22.157", "initiator_port": 50373, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80854, "last_frame": 80859, "first_seen_epoch": "1634918110.982094", "last_seen_epoch": "1634918111.300088", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-0e7c2263aba2d74d9981558c", "transport": "tcp", "stream": 1599, "initiator_ip": "10.10.22.156", "initiator_port": 50187, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 80868, "last_frame": 80898, "first_seen_epoch": "1634918112.108732", "last_seen_epoch": "1634918113.263346", "packets": 17, "bytes": 4745, "initiator_bytes": 1465, "responder_bytes": 3280 }, { "flow_id": "flow-cca494d35620e08d74e3f3d7", "transport": "udp", "stream": 1043, "initiator_ip": "10.10.22.156", "initiator_port": 61702, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 80874, "last_frame": 80885, "first_seen_epoch": "1634918112.276282", "last_seen_epoch": "1634918112.495866", "packets": 3, "bytes": 238, "initiator_bytes": 148, "responder_bytes": 90 }, { "flow_id": "flow-8c35c40a2b9a1c0d5a1c790a", "transport": "tcp", "stream": 1600, "initiator_ip": "10.10.22.156", "initiator_port": 50188, "responder_ip": "223.29.248.111", "responder_port": 25, "first_frame": 80886, "last_frame": 81018, "first_seen_epoch": "1634918112.497056", "last_seen_epoch": "1634918126.039595", "packets": 51, "bytes": 9112, "initiator_bytes": 2047, "responder_bytes": 7065 }, { "flow_id": "flow-beb2ce68ebd1b604c27bde71", "transport": "udp", "stream": 1044, "initiator_ip": "10.10.22.157", "initiator_port": 51466, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80929, "last_frame": 80930, "first_seen_epoch": "1634918115.309563", "last_seen_epoch": "1634918115.362681", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-13cc2d3c559778bd9526a575", "transport": "tcp", "stream": 1601, "initiator_ip": "10.10.22.157", "initiator_port": 50374, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80931, "last_frame": 80942, "first_seen_epoch": "1634918115.364032", "last_seen_epoch": "1634918115.647697", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-bbf37077c605e8a67e454df7", "transport": "udp", "stream": 1045, "initiator_ip": "10.10.22.157", "initiator_port": 49645, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 80981, "last_frame": 80982, "first_seen_epoch": "1634918119.65514", "last_seen_epoch": "1634918119.708387", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-d2ac5f243138764addc0c8bf", "transport": "tcp", "stream": 1602, "initiator_ip": "10.10.22.157", "initiator_port": 50375, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80983, "last_frame": 80988, "first_seen_epoch": "1634918119.70973", "last_seen_epoch": "1634918119.997744", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-255d8abf50ea4787f660fd04", "transport": "tcp", "stream": 1603, "initiator_ip": "10.10.22.157", "initiator_port": 50376, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 80990, "last_frame": 80995, "first_seen_epoch": "1634918124.013537", "last_seen_epoch": "1634918124.324784", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-fdf06dce1676b45fe818353f", "transport": "tcp", "stream": 1604, "initiator_ip": "10.10.22.157", "initiator_port": 50377, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 81022, "last_frame": 81031, "first_seen_epoch": "1634918128.341388", "last_seen_epoch": "1634918128.654335", "packets": 8, "bytes": 536, "initiator_bytes": 316, "responder_bytes": 220 }, { "flow_id": "flow-a35e387635f834d60042aab5", "transport": "tcp", "stream": 1605, "initiator_ip": "10.10.22.157", "initiator_port": 50378, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 81033, "last_frame": 81039, "first_seen_epoch": "1634918132.685832", "last_seen_epoch": "1634918133.006056", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-52a02770469c6668c544cdf2", "transport": "udp", "stream": 1046, "initiator_ip": "10.10.22.157", "initiator_port": 65319, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 81040, "last_frame": 81041, "first_seen_epoch": "1634918137.012996", "last_seen_epoch": "1634918137.074709", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-53494782eaa970915886e247", "transport": "tcp", "stream": 1606, "initiator_ip": "10.10.22.157", "initiator_port": 50379, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 81042, "last_frame": 81047, "first_seen_epoch": "1634918137.076007", "last_seen_epoch": "1634918137.374229", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-2c6e2269bf620e3b20318150", "transport": "udp", "stream": 1047, "initiator_ip": "10.10.22.157", "initiator_port": 52115, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 81048, "last_frame": 81049, "first_seen_epoch": "1634918141.388581", "last_seen_epoch": "1634918141.449891", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-98b7f61c56a6c361d47148e7", "transport": "tcp", "stream": 1607, "initiator_ip": "10.10.22.157", "initiator_port": 50380, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 81050, "last_frame": 83546, "first_seen_epoch": "1634918141.451196", "last_seen_epoch": "1634918473.201174", "packets": 134, "bytes": 8096, "initiator_bytes": 4528, "responder_bytes": 3568 }, { "flow_id": "flow-3bddf35d0cc6c2b05fe8fb4f", "transport": "udp", "stream": 1048, "initiator_ip": "10.10.22.156", "initiator_port": 62779, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81066, "last_frame": 81067, "first_seen_epoch": "1634918143.858014", "last_seen_epoch": "1634918143.898692", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-83ecf362c48a04bb213df71d", "transport": "tcp", "stream": 1608, "initiator_ip": "10.10.22.156", "initiator_port": 50189, "responder_ip": "52.96.57.82", "responder_port": 25, "first_frame": 81068, "last_frame": 81183, "first_seen_epoch": "1634918143.899609", "last_seen_epoch": "1634918160.247809", "packets": 54, "bytes": 9074, "initiator_bytes": 2155, "responder_bytes": 6919 }, { "flow_id": "flow-795a958465346638115905ea", "transport": "tcp", "stream": 1609, "initiator_ip": "10.10.22.158", "initiator_port": 49883, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 81209, "last_frame": 81762, "first_seen_epoch": "1634918180.965009", "last_seen_epoch": "1634918280.430778", "packets": 22, "bytes": 5309, "initiator_bytes": 1743, "responder_bytes": 3566 }, { "flow_id": "flow-e03f78fc7e05a6d3c7ed13c4", "transport": "tcp", "stream": 1610, "initiator_ip": "10.10.22.156", "initiator_port": 50190, "responder_ip": "208.180.40.68", "responder_port": 25, "first_frame": 81255, "last_frame": 81353, "first_seen_epoch": "1634918198.43809", "last_seen_epoch": "1634918204.183175", "packets": 50, "bytes": 7776, "initiator_bytes": 1994, "responder_bytes": 5782 }, { "flow_id": "flow-b7cbc4c655168521260b1fa0", "transport": "udp", "stream": 1049, "initiator_ip": "10.10.22.156", "initiator_port": 58152, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81369, "last_frame": 81371, "first_seen_epoch": "1634918206.810516", "last_seen_epoch": "1634918206.876873", "packets": 2, "bytes": 180, "initiator_bytes": 82, "responder_bytes": 98 }, { "flow_id": "flow-b70400ae158f0e389ee77b30", "transport": "tcp", "stream": 1611, "initiator_ip": "10.10.22.156", "initiator_port": 50191, "responder_ip": "50.77.156.245", "responder_port": 25, "first_frame": 81372, "last_frame": 81373, "first_seen_epoch": "1634918206.877963", "last_seen_epoch": "1634918206.95817", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-b55c68c4e68a0a2ff1fcbe5e", "transport": "tcp", "stream": 1612, "initiator_ip": "10.10.22.156", "initiator_port": 50191, "responder_ip": "50.77.156.245", "responder_port": 25, "first_frame": 81374, "last_frame": 81375, "first_seen_epoch": "1634918207.466046", "last_seen_epoch": "1634918207.585468", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-53ca9ce4a5a51ec8212102eb", "transport": "tcp", "stream": 1613, "initiator_ip": "10.10.22.156", "initiator_port": 50191, "responder_ip": "50.77.156.245", "responder_port": 25, "first_frame": 81376, "last_frame": 81377, "first_seen_epoch": "1634918208.092405", "last_seen_epoch": "1634918208.188152", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-455e9dc70c41820df5de4526", "transport": "tcp", "stream": 1614, "initiator_ip": "10.10.22.156", "initiator_port": 50191, "responder_ip": "50.77.156.245", "responder_port": 25, "first_frame": 81378, "last_frame": 81379, "first_seen_epoch": "1634918208.700963", "last_seen_epoch": "1634918208.797353", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-06d41b6bf47de9327aebf6c3", "transport": "tcp", "stream": 1615, "initiator_ip": "10.10.22.156", "initiator_port": 50191, "responder_ip": "50.77.156.245", "responder_port": 25, "first_frame": 81380, "last_frame": 81381, "first_seen_epoch": "1634918209.310889", "last_seen_epoch": "1634918209.41478", "packets": 2, "bytes": 120, "initiator_bytes": 66, "responder_bytes": 54 }, { "flow_id": "flow-f0f378a97cf5f7dd67389436", "transport": "udp", "stream": 1050, "initiator_ip": "10.10.22.156", "initiator_port": 60202, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81411, "last_frame": 81413, "first_seen_epoch": "1634918235.081162", "last_seen_epoch": "1634918235.239591", "packets": 3, "bytes": 244, "initiator_bytes": 152, "responder_bytes": 92 }, { "flow_id": "flow-23e2bf5c951e5007a426a7e6", "transport": "udp", "stream": 1051, "initiator_ip": "10.10.22.156", "initiator_port": 49329, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81445, "last_frame": 81446, "first_seen_epoch": "1634918255.11925", "last_seen_epoch": "1634918255.159839", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-3272b2235f4c8de965df3225", "transport": "tcp", "stream": 1616, "initiator_ip": "10.10.22.156", "initiator_port": 50192, "responder_ip": "40.97.199.114", "responder_port": 25, "first_frame": 81447, "last_frame": 81645, "first_seen_epoch": "1634918255.161068", "last_seen_epoch": "1634918271.797548", "packets": 50, "bytes": 8858, "initiator_bytes": 2039, "responder_bytes": 6819 }, { "flow_id": "flow-90b8e6928e72f9e3b06c61ca", "transport": "udp", "stream": 1052, "initiator_ip": "10.10.22.156", "initiator_port": 53214, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81548, "last_frame": 81551, "first_seen_epoch": "1634918268.68035", "last_seen_epoch": "1634918268.842171", "packets": 3, "bytes": 284, "initiator_bytes": 162, "responder_bytes": 122 }, { "flow_id": "flow-15d0e5355dedba4f6bd5e366", "transport": "tcp", "stream": 1617, "initiator_ip": "10.10.22.156", "initiator_port": 50193, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 81552, "last_frame": 81988, "first_seen_epoch": "1634918268.843063", "last_seen_epoch": "1634918311.602688", "packets": 52, "bytes": 9516, "initiator_bytes": 2277, "responder_bytes": 7239 }, { "flow_id": "flow-f681aa06f59e4f14001f0f63", "transport": "tcp", "stream": 1618, "initiator_ip": "10.10.22.156", "initiator_port": 50194, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 81583, "last_frame": 81996, "first_seen_epoch": "1634918270.341129", "last_seen_epoch": "1634918311.689094", "packets": 53, "bytes": 9570, "initiator_bytes": 2277, "responder_bytes": 7293 }, { "flow_id": "flow-a7e0c6ed4b30e49d926fd606", "transport": "udp", "stream": 1053, "initiator_ip": "10.10.22.156", "initiator_port": 65310, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 81784, "last_frame": 81786, "first_seen_epoch": "1634918299.075994", "last_seen_epoch": "1634918299.158717", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-042df51597654a70bdd6d4ff", "transport": "tcp", "stream": 1619, "initiator_ip": "10.10.22.156", "initiator_port": 50195, "responder_ip": "52.96.57.2", "responder_port": 25, "first_frame": 81787, "last_frame": 82036, "first_seen_epoch": "1634918299.160034", "last_seen_epoch": "1634918315.919198", "packets": 51, "bytes": 8864, "initiator_bytes": 2031, "responder_bytes": 6833 }, { "flow_id": "flow-69ebd920f88ec3f8ca0ea6ed", "transport": "tcp", "stream": 1620, "initiator_ip": "10.10.22.156", "initiator_port": 50196, "responder_ip": "52.96.57.2", "responder_port": 25, "first_frame": 81788, "last_frame": 82017, "first_seen_epoch": "1634918299.160754", "last_seen_epoch": "1634918314.857656", "packets": 51, "bytes": 8864, "initiator_bytes": 2031, "responder_bytes": 6833 }, { "flow_id": "flow-9d1297340fa22e76a39de4a2", "transport": "tcp", "stream": 1621, "initiator_ip": "10.10.22.156", "initiator_port": 50197, "responder_ip": "52.96.121.194", "responder_port": 25, "first_frame": 82056, "last_frame": 82361, "first_seen_epoch": "1634918327.681748", "last_seen_epoch": "1634918349.914495", "packets": 51, "bytes": 8898, "initiator_bytes": 2081, "responder_bytes": 6817 }, { "flow_id": "flow-c29e6c3dfa638383658e8d73", "transport": "udp", "stream": 1054, "initiator_ip": "10.10.22.156", "initiator_port": 53878, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82153, "last_frame": 82154, "first_seen_epoch": "1634918337.989056", "last_seen_epoch": "1634918338.028376", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-ebcc7865410a91807faa9040", "transport": "tcp", "stream": 1622, "initiator_ip": "10.10.22.156", "initiator_port": 50198, "responder_ip": "52.96.191.98", "responder_port": 25, "first_frame": 82155, "last_frame": 82379, "first_seen_epoch": "1634918338.029267", "last_seen_epoch": "1634918353.698127", "packets": 51, "bytes": 8864, "initiator_bytes": 2085, "responder_bytes": 6779 }, { "flow_id": "flow-e610007685d2f9b22cb9ba36", "transport": "udp", "stream": 1055, "initiator_ip": "10.10.22.156", "initiator_port": 55138, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82247, "last_frame": 82250, "first_seen_epoch": "1634918343.030324", "last_seen_epoch": "1634918343.21238", "packets": 3, "bytes": 383, "initiator_bytes": 152, "responder_bytes": 231 }, { "flow_id": "flow-7b65dc4ccb51c3f9f8d11caf", "transport": "tcp", "stream": 1623, "initiator_ip": "10.10.22.156", "initiator_port": 50199, "responder_ip": "52.96.122.226", "responder_port": 25, "first_frame": 82251, "last_frame": 82499, "first_seen_epoch": "1634918343.21354", "last_seen_epoch": "1634918363.488203", "packets": 53, "bytes": 9004, "initiator_bytes": 2131, "responder_bytes": 6873 }, { "flow_id": "flow-07752a80ee90a4e0c1e45f7c", "transport": "udp", "stream": 1056, "initiator_ip": "10.10.22.156", "initiator_port": 58153, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82397, "last_frame": 82399, "first_seen_epoch": "1634918357.567053", "last_seen_epoch": "1634918357.613079", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-c3a8a2dbcfd28c1e91f19566", "transport": "tcp", "stream": 1624, "initiator_ip": "10.10.22.156", "initiator_port": 50200, "responder_ip": "52.96.103.18", "responder_port": 25, "first_frame": 82400, "last_frame": 82620, "first_seen_epoch": "1634918357.614376", "last_seen_epoch": "1634918379.271045", "packets": 51, "bytes": 8908, "initiator_bytes": 2089, "responder_bytes": 6819 }, { "flow_id": "flow-f0ec7f5b852aa5afc0ff4aab", "transport": "udp", "stream": 1057, "initiator_ip": "10.10.22.156", "initiator_port": 54847, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82534, "last_frame": 82536, "first_seen_epoch": "1634918375.162553", "last_seen_epoch": "1634918375.217778", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-a32d62598d5bc73e9fb65f96", "transport": "tcp", "stream": 1625, "initiator_ip": "10.10.22.156", "initiator_port": 50201, "responder_ip": "52.96.91.66", "responder_port": 25, "first_frame": 82537, "last_frame": 82760, "first_seen_epoch": "1634918375.218519", "last_seen_epoch": "1634918394.507597", "packets": 53, "bytes": 9002, "initiator_bytes": 2135, "responder_bytes": 6867 }, { "flow_id": "flow-aebc8948b266c4f82bfe43d3", "transport": "udp", "stream": 1058, "initiator_ip": "10.10.22.156", "initiator_port": 57063, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82647, "last_frame": 82649, "first_seen_epoch": "1634918382.745958", "last_seen_epoch": "1634918382.817371", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-a164d760d5de03031b21fc07", "transport": "tcp", "stream": 1626, "initiator_ip": "10.10.22.156", "initiator_port": 50202, "responder_ip": "52.96.90.18", "responder_port": 25, "first_frame": 82650, "last_frame": 82881, "first_seen_epoch": "1634918382.818444", "last_seen_epoch": "1634918401.521422", "packets": 52, "bytes": 8948, "initiator_bytes": 2135, "responder_bytes": 6813 }, { "flow_id": "flow-a7a0325e05c6c4f93d43d04d", "transport": "udp", "stream": 1059, "initiator_ip": "10.10.22.156", "initiator_port": 65161, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82776, "last_frame": 82781, "first_seen_epoch": "1634918395.715644", "last_seen_epoch": "1634918396.035657", "packets": 3, "bytes": 261, "initiator_bytes": 150, "responder_bytes": 111 }, { "flow_id": "flow-5f1faeea928b03224b5db4a8", "transport": "tcp", "stream": 1627, "initiator_ip": "10.10.22.156", "initiator_port": 50203, "responder_ip": "81.2.195.204", "responder_port": 25, "first_frame": 82782, "last_frame": 82914, "first_seen_epoch": "1634918396.036869", "last_seen_epoch": "1634918403.389561", "packets": 51, "bytes": 8662, "initiator_bytes": 1990, "responder_bytes": 6672 }, { "flow_id": "flow-a3e5857f9a162305cfc01097", "transport": "udp", "stream": 1060, "initiator_ip": "10.10.22.156", "initiator_port": 58188, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82936, "last_frame": 82939, "first_seen_epoch": "1634918417.753855", "last_seen_epoch": "1634918418.059868", "packets": 3, "bytes": 281, "initiator_bytes": 160, "responder_bytes": 121 }, { "flow_id": "flow-9a66c6062c123f76104ab7d3", "transport": "tcp", "stream": 1628, "initiator_ip": "10.10.22.156", "initiator_port": 50204, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 82940, "last_frame": 83382, "first_seen_epoch": "1634918418.060664", "last_seen_epoch": "1634918461.699561", "packets": 51, "bytes": 9478, "initiator_bytes": 2292, "responder_bytes": 7186 }, { "flow_id": "flow-05d6583bd894e5edd16ec28b", "transport": "udp", "stream": 1061, "initiator_ip": "10.10.22.156", "initiator_port": 64221, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 82993, "last_frame": 82998, "first_seen_epoch": "1634918422.574642", "last_seen_epoch": "1634918422.87802", "packets": 3, "bytes": 274, "initiator_bytes": 172, "responder_bytes": 102 }, { "flow_id": "flow-cc89c9336ee9ccd6a0465bfb", "transport": "tcp", "stream": 1629, "initiator_ip": "10.10.22.156", "initiator_port": 50205, "responder_ip": "111.223.52.28", "responder_port": 25, "first_frame": 82999, "last_frame": 83264, "first_seen_epoch": "1634918422.879261", "last_seen_epoch": "1634918431.536708", "packets": 53, "bytes": 11104, "initiator_bytes": 2117, "responder_bytes": 8987 }, { "flow_id": "flow-8708249f46c1d5e5dbd8c986", "transport": "udp", "stream": 1062, "initiator_ip": "10.10.22.156", "initiator_port": 63473, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83016, "last_frame": 83021, "first_seen_epoch": "1634918423.328802", "last_seen_epoch": "1634918423.640951", "packets": 3, "bytes": 259, "initiator_bytes": 162, "responder_bytes": 97 }, { "flow_id": "flow-632a1539ee336d55eda2744f", "transport": "tcp", "stream": 1630, "initiator_ip": "10.10.22.156", "initiator_port": 50206, "responder_ip": "82.98.154.100", "responder_port": 25, "first_frame": 83022, "last_frame": 83285, "first_seen_epoch": "1634918423.641968", "last_seen_epoch": "1634918432.471906", "packets": 53, "bytes": 8493, "initiator_bytes": 2116, "responder_bytes": 6377 }, { "flow_id": "flow-e4eeb2fabc8bc0196d9bf57a", "transport": "tcp", "stream": 1631, "initiator_ip": "10.10.22.156", "initiator_port": 50207, "responder_ip": "207.246.112.221", "responder_port": 443, "first_frame": 83196, "last_frame": 83236, "first_seen_epoch": "1634918429.107424", "last_seen_epoch": "1634918430.260516", "packets": 17, "bytes": 4643, "initiator_bytes": 1463, "responder_bytes": 3180 }, { "flow_id": "flow-08bc9bb4526c749fba4ed04a", "transport": "udp", "stream": 1063, "initiator_ip": "10.10.22.157", "initiator_port": 61910, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83305, "last_frame": 83306, "first_seen_epoch": "1634918451.277359", "last_seen_epoch": "1634918451.277724", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-3b503e71b40aa57b3fa7dbb0", "transport": "udp", "stream": 1064, "initiator_ip": "10.10.22.157", "initiator_port": 60244, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 83309, "last_frame": 83309, "first_seen_epoch": "1634918451.278449", "last_seen_epoch": "1634918451.278449", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-95176ef0352c2de27235e009", "transport": "udp", "stream": 1065, "initiator_ip": "10.10.22.157", "initiator_port": 59302, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83310, "last_frame": 83311, "first_seen_epoch": "1634918451.279871", "last_seen_epoch": "1634918451.280595", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-eb86fed89a760d4e4fcafeac", "transport": "tcp", "stream": 1632, "initiator_ip": "10.10.22.157", "initiator_port": 50381, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 83319, "last_frame": 83397, "first_seen_epoch": "1634918455.06486", "last_seen_epoch": "1634918465.812597", "packets": 28, "bytes": 8101, "initiator_bytes": 5369, "responder_bytes": 2732 }, { "flow_id": "flow-c52e21f225b9ae935eeedb3e", "transport": "udp", "stream": 1066, "initiator_ip": "10.10.22.156", "initiator_port": 65102, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83360, "last_frame": 83363, "first_seen_epoch": "1634918459.346607", "last_seen_epoch": "1634918459.527553", "packets": 3, "bytes": 258, "initiator_bytes": 148, "responder_bytes": 110 }, { "flow_id": "flow-337c6408a8810f069afcfb75", "transport": "tcp", "stream": 1633, "initiator_ip": "10.10.22.156", "initiator_port": 50208, "responder_ip": "197.97.195.226", "responder_port": 25, "first_frame": 83364, "last_frame": 83532, "first_seen_epoch": "1634918459.528777", "last_seen_epoch": "1634918472.438354", "packets": 33, "bytes": 2415, "initiator_bytes": 1087, "responder_bytes": 1328 }, { "flow_id": "flow-b92fb92e6d2ae2378bc247d2", "transport": "udp", "stream": 1067, "initiator_ip": "10.10.22.156", "initiator_port": 59853, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83417, "last_frame": 83422, "first_seen_epoch": "1634918468.026099", "last_seen_epoch": "1634918468.197715", "packets": 3, "bytes": 296, "initiator_bytes": 170, "responder_bytes": 126 }, { "flow_id": "flow-cb23aab0929277aa14fe8492", "transport": "tcp", "stream": 1634, "initiator_ip": "10.10.22.156", "initiator_port": 50209, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 83423, "last_frame": 83794, "first_seen_epoch": "1634918468.199004", "last_seen_epoch": "1634918509.50635", "packets": 55, "bytes": 9698, "initiator_bytes": 2335, "responder_bytes": 7363 }, { "flow_id": "flow-0a765b41c6d073e65cc07515", "transport": "tcp", "stream": 1635, "initiator_ip": "10.10.22.156", "initiator_port": 50210, "responder_ip": "111.223.52.28", "responder_port": 25, "first_frame": 83571, "last_frame": 83692, "first_seen_epoch": "1634918476.664939", "last_seen_epoch": "1634918485.339559", "packets": 53, "bytes": 11104, "initiator_bytes": 2117, "responder_bytes": 8987 }, { "flow_id": "flow-4e58592ef49d737b29594ee2", "transport": "udp", "stream": 1068, "initiator_ip": "10.10.22.157", "initiator_port": 55164, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 83577, "last_frame": 83578, "first_seen_epoch": "1634918477.216323", "last_seen_epoch": "1634918477.279586", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-a0711824fda687ab4e3f1db8", "transport": "tcp", "stream": 1636, "initiator_ip": "10.10.22.157", "initiator_port": 50382, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83579, "last_frame": 83588, "first_seen_epoch": "1634918477.281518", "last_seen_epoch": "1634918477.598072", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-9e6851016076381f1847a0aa", "transport": "tcp", "stream": 1637, "initiator_ip": "10.10.22.157", "initiator_port": 50383, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83643, "last_frame": 83648, "first_seen_epoch": "1634918481.605842", "last_seen_epoch": "1634918481.908961", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-838a3854fe331e170ca0140b", "transport": "tcp", "stream": 1638, "initiator_ip": "10.10.22.157", "initiator_port": 50384, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83699, "last_frame": 83704, "first_seen_epoch": "1634918485.922651", "last_seen_epoch": "1634918486.229959", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-ce35e1d3685c8f62ff02f22f", "transport": "tcp", "stream": 1639, "initiator_ip": "10.10.22.158", "initiator_port": 49884, "responder_ip": "194.15.112.173", "responder_port": 443, "first_frame": 83710, "last_frame": 84347, "first_seen_epoch": "1634918489.758607", "last_seen_epoch": "1634918564.611526", "packets": 17, "bytes": 5019, "initiator_bytes": 1576, "responder_bytes": 3443 }, { "flow_id": "flow-829946b2658720086a8467b7", "transport": "tcp", "stream": 1640, "initiator_ip": "10.10.22.157", "initiator_port": 50385, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83715, "last_frame": 83729, "first_seen_epoch": "1634918490.2475", "last_seen_epoch": "1634918490.538783", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-986d54c1646bc377eab8a0c1", "transport": "udp", "stream": 1069, "initiator_ip": "10.10.22.157", "initiator_port": 50013, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 83735, "last_frame": 83739, "first_seen_epoch": "1634918494.545347", "last_seen_epoch": "1634918494.601647", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-fa1e539faef3988d96049fb1", "transport": "tcp", "stream": 1641, "initiator_ip": "10.10.22.157", "initiator_port": 50386, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83740, "last_frame": 83745, "first_seen_epoch": "1634918494.603016", "last_seen_epoch": "1634918494.887814", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-18856b14a1ef7d3f5a10f879", "transport": "tcp", "stream": 1642, "initiator_ip": "10.10.22.156", "initiator_port": 50211, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 83747, "last_frame": 84386, "first_seen_epoch": "1634918494.923175", "last_seen_epoch": "1634918570.108077", "packets": 5, "bytes": 318, "initiator_bytes": 264, "responder_bytes": 54 }, { "flow_id": "flow-19a14e003fa2ce52a7485dfa", "transport": "udp", "stream": 1070, "initiator_ip": "10.10.22.157", "initiator_port": 56154, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 83751, "last_frame": 83752, "first_seen_epoch": "1634918498.920852", "last_seen_epoch": "1634918498.990116", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-90ed72318077f078d69c6b62", "transport": "tcp", "stream": 1643, "initiator_ip": "10.10.22.157", "initiator_port": 50387, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83753, "last_frame": 83758, "first_seen_epoch": "1634918498.991408", "last_seen_epoch": "1634918499.269877", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-e2cbc5b251a42c858b865778", "transport": "udp", "stream": 1071, "initiator_ip": "10.10.22.157", "initiator_port": 62086, "responder_ip": "8.8.8.8", "responder_port": 53, "first_frame": 83764, "last_frame": 83765, "first_seen_epoch": "1634918503.281923", "last_seen_epoch": "1634918503.387693", "packets": 2, "bytes": 184, "initiator_bytes": 84, "responder_bytes": 100 }, { "flow_id": "flow-5fbc6fd5a3ad062b088b120d", "transport": "tcp", "stream": 1644, "initiator_ip": "10.10.22.157", "initiator_port": 50388, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83766, "last_frame": 83771, "first_seen_epoch": "1634918503.388384", "last_seen_epoch": "1634918503.671957", "packets": 6, "bytes": 416, "initiator_bytes": 250, "responder_bytes": 166 }, { "flow_id": "flow-c6f3f1fdf7a8744c789b1d1b", "transport": "tcp", "stream": 1645, "initiator_ip": "10.10.22.157", "initiator_port": 50389, "responder_ip": "37.0.10.22", "responder_port": 1187, "first_frame": 83774, "last_frame": 84542, "first_seen_epoch": "1634918507.685795", "last_seen_epoch": "1634918599.671398", "packets": 41, "bytes": 2522, "initiator_bytes": 1438, "responder_bytes": 1084 }, { "flow_id": "flow-1f8ae1aa90b1dfad50ccaf66", "transport": "tcp", "stream": 1646, "initiator_ip": "10.10.22.156", "initiator_port": 50212, "responder_ip": "193.70.18.144", "responder_port": 25, "first_frame": 83806, "last_frame": 84177, "first_seen_epoch": "1634918510.744879", "last_seen_epoch": "1634918551.151399", "packets": 51, "bytes": 9482, "initiator_bytes": 2281, "responder_bytes": 7201 }, { "flow_id": "flow-9c0969e883e043f4e327bf7b", "transport": "udp", "stream": 1072, "initiator_ip": "10.10.22.156", "initiator_port": 57673, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83827, "last_frame": 83828, "first_seen_epoch": "1634918511.96751", "last_seen_epoch": "1634918511.967816", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-894c8727174a2a6ba8bb9c97", "transport": "udp", "stream": 1073, "initiator_ip": "10.10.22.156", "initiator_port": 52241, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 83833, "last_frame": 83833, "first_seen_epoch": "1634918511.969046", "last_seen_epoch": "1634918511.969046", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-2c8f36781fd930e4cb68c7af", "transport": "udp", "stream": 1074, "initiator_ip": "10.10.22.156", "initiator_port": 54166, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83834, "last_frame": 83836, "first_seen_epoch": "1634918511.970888", "last_seen_epoch": "1634918511.971977", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-581b9347b3463529370b91db", "transport": "tcp", "stream": 1647, "initiator_ip": "10.10.22.156", "initiator_port": 50213, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 83900, "last_frame": 84024, "first_seen_epoch": "1634918515.144862", "last_seen_epoch": "1634918525.87477", "packets": 27, "bytes": 7767, "initiator_bytes": 5357, "responder_bytes": 2410 }, { "flow_id": "flow-b76c7f2032bcdc27e99c7834", "transport": "udp", "stream": 1075, "initiator_ip": "10.10.22.156", "initiator_port": 49883, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 83957, "last_frame": 83958, "first_seen_epoch": "1634918522.601973", "last_seen_epoch": "1634918522.646651", "packets": 2, "bytes": 178, "initiator_bytes": 73, "responder_bytes": 105 }, { "flow_id": "flow-de46616dece1959045978225", "transport": "tcp", "stream": 1648, "initiator_ip": "10.10.22.156", "initiator_port": 50214, "responder_ip": "64.136.52.45", "responder_port": 25, "first_frame": 83959, "last_frame": 84043, "first_seen_epoch": "1634918522.647936", "last_seen_epoch": "1634918526.595541", "packets": 40, "bytes": 3157, "initiator_bytes": 1546, "responder_bytes": 1611 }, { "flow_id": "flow-db2279b1c963dd6f6c4a51b5", "transport": "udp", "stream": 1076, "initiator_ip": "10.10.22.157", "initiator_port": 50038, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84051, "last_frame": 84052, "first_seen_epoch": "1634918531.252694", "last_seen_epoch": "1634918531.253039", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-3272df6499bf67b3923b45e6", "transport": "udp", "stream": 1077, "initiator_ip": "10.10.22.157", "initiator_port": 59614, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84053, "last_frame": 84054, "first_seen_epoch": "1634918531.253516", "last_seen_epoch": "1634918531.328141", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-a6565b87a3583f4317089cc0", "transport": "udp", "stream": 1078, "initiator_ip": "10.10.22.158", "initiator_port": 57786, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84064, "last_frame": 84066, "first_seen_epoch": "1634918543.664285", "last_seen_epoch": "1634918543.664706", "packets": 2, "bytes": 257, "initiator_bytes": 90, "responder_bytes": 167 }, { "flow_id": "flow-c2f34ac4a371de6e17b6c60c", "transport": "udp", "stream": 1079, "initiator_ip": "10.10.22.158", "initiator_port": 51117, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84068, "last_frame": 84072, "first_seen_epoch": "1634918543.666253", "last_seen_epoch": "1634918543.667247", "packets": 2, "bytes": 312, "initiator_bytes": 156, "responder_bytes": 156 }, { "flow_id": "flow-5f24af345c282e26e2309eff", "transport": "udp", "stream": 1080, "initiator_ip": "10.10.22.158", "initiator_port": 61702, "responder_ip": "224.0.0.252", "responder_port": 5355, "first_frame": 84073, "last_frame": 84073, "first_seen_epoch": "1634918543.667774", "last_seen_epoch": "1634918543.667774", "packets": 1, "bytes": 75, "initiator_bytes": 75, "responder_bytes": 0 }, { "flow_id": "flow-a3ee96d364c6d8e40112b638", "transport": "tcp", "stream": 1649, "initiator_ip": "10.10.22.156", "initiator_port": 50215, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 84084, "last_frame": 84190, "first_seen_epoch": "1634918544.535183", "last_seen_epoch": "1634918551.576775", "packets": 4, "bytes": 264, "initiator_bytes": 264, "responder_bytes": 0 }, { "flow_id": "flow-3e1d1fddd908bc8eaceb110e", "transport": "tcp", "stream": 1650, "initiator_ip": "10.10.22.158", "initiator_port": 49885, "responder_ip": "10.10.22.22", "responder_port": 445, "first_frame": 84088, "last_frame": 84264, "first_seen_epoch": "1634918546.059644", "last_seen_epoch": "1634918556.80799", "packets": 28, "bytes": 8101, "initiator_bytes": 5369, "responder_bytes": 2732 }, { "flow_id": "flow-c384b61492d67776b84c6d2a", "transport": "udp", "stream": 1081, "initiator_ip": "10.10.22.156", "initiator_port": 54536, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84126, "last_frame": 84127, "first_seen_epoch": "1634918547.689794", "last_seen_epoch": "1634918547.690116", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-6b681caec60f15285c53b708", "transport": "udp", "stream": 1082, "initiator_ip": "10.10.22.156", "initiator_port": 57125, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84128, "last_frame": 84129, "first_seen_epoch": "1634918547.690546", "last_seen_epoch": "1634918547.690773", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-5df5ebad46dc44e515eb6248", "transport": "udp", "stream": 1083, "initiator_ip": "10.10.22.156", "initiator_port": 52660, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84137, "last_frame": 84140, "first_seen_epoch": "1634918548.491385", "last_seen_epoch": "1634918548.529465", "packets": 2, "bytes": 164, "initiator_bytes": 74, "responder_bytes": 90 }, { "flow_id": "flow-8e2b93eb8664dbbcf2c21ccc", "transport": "tcp", "stream": 1651, "initiator_ip": "10.10.22.156", "initiator_port": 50216, "responder_ip": "62.103.147.201", "responder_port": 25, "first_frame": 84141, "last_frame": 84298, "first_seen_epoch": "1634918548.530585", "last_seen_epoch": "1634918558.237835", "packets": 53, "bytes": 7809, "initiator_bytes": 2124, "responder_bytes": 5685 }, { "flow_id": "flow-c085f4bca1dac47151b62739", "transport": "udp", "stream": 1084, "initiator_ip": "10.10.22.158", "initiator_port": 54326, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84147, "last_frame": 84148, "first_seen_epoch": "1634918549.277602", "last_seen_epoch": "1634918549.277947", "packets": 2, "bytes": 233, "initiator_bytes": 79, "responder_bytes": 154 }, { "flow_id": "flow-077b788f4029c96cfb1031f1", "transport": "udp", "stream": 1085, "initiator_ip": "10.10.22.158", "initiator_port": 65187, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84149, "last_frame": 84150, "first_seen_epoch": "1634918549.278484", "last_seen_epoch": "1634918549.278737", "packets": 2, "bytes": 227, "initiator_bytes": 76, "responder_bytes": 151 }, { "flow_id": "flow-22b8e4d7d4939df76467a3d2", "transport": "udp", "stream": 1086, "initiator_ip": "10.10.22.156", "initiator_port": 61111, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84239, "last_frame": 84246, "first_seen_epoch": "1634918554.99135", "last_seen_epoch": "1634918556.203293", "packets": 4, "bytes": 396, "initiator_bytes": 261, "responder_bytes": 135 }, { "flow_id": "flow-59c40f8a06fc714e2488dbea", "transport": "tcp", "stream": 1652, "initiator_ip": "10.10.22.156", "initiator_port": 50217, "responder_ip": "123.58.177.213", "responder_port": 25, "first_frame": 84247, "last_frame": 84394, "first_seen_epoch": "1634918556.204391", "last_seen_epoch": "1634918570.949791", "packets": 46, "bytes": 7970, "initiator_bytes": 1892, "responder_bytes": 6078 }, { "flow_id": "flow-55a673cb7c5b8dc29a8f71f6", "transport": "udp", "stream": 1087, "initiator_ip": "10.10.22.156", "initiator_port": 61955, "responder_ip": "10.10.22.22", "responder_port": 53, "first_frame": 84425, "last_frame": 84427, "first_seen_epoch": "1634918586.379793", "last_seen_epoch": "1634918586.460066", "packets": 2, "bytes": 307, "initiator_bytes": 76, "responder_bytes": 231 }, { "flow_id": "flow-59616bc11869336eb81b3ae9", "transport": "tcp", "stream": 1653, "initiator_ip": "10.10.22.156", "initiator_port": 50218, "responder_ip": "40.97.212.2", "responder_port": 25, "first_frame": 84428, "last_frame": 84516, "first_seen_epoch": "1634918586.461073", "last_seen_epoch": "1634918590.732518", "packets": 42, "bytes": 8015, "initiator_bytes": 1752, "responder_bytes": 6263 }, { "flow_id": "flow-afa77fafd3c960fd22267bd5", "transport": "tcp", "stream": 1654, "initiator_ip": "10.10.22.156", "initiator_port": 50219, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 84434, "last_frame": 84520, "first_seen_epoch": "1634918586.577376", "last_seen_epoch": "1634918593.609269", "packets": 4, "bytes": 264, "initiator_bytes": 264, "responder_bytes": 0 }, { "flow_id": "flow-8e720fc76f77280839235e42", "transport": "tcp", "stream": 1655, "initiator_ip": "10.10.22.156", "initiator_port": 50220, "responder_ip": "168.196.133.84", "responder_port": 25, "first_frame": 84532, "last_frame": 84537, "first_seen_epoch": "1634918596.604106", "last_seen_epoch": "1634918599.609088", "packets": 3, "bytes": 198, "initiator_bytes": 198, "responder_bytes": 0 } ], "events": { "dns": [ { "event_id": "evt-ef8b286821bd35df044159ec", "kind": "dns", "frame_number": 15, "timestamp_epoch": "1634913052.528738000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55837, "dst_port": 53, "tcp_stream": null, "udp_stream": 4, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-84373587738b117cefc05f68", "kind": "dns", "frame_number": 16, "timestamp_epoch": "1634913052.528989000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55837, "tcp_stream": null, "udp_stream": 4, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c2d01e5f88427e31b418350b", "kind": "dns", "frame_number": 17, "timestamp_epoch": "1634913052.531003000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 58843, "dst_port": 53, "tcp_stream": null, "udp_stream": 5, "fields": { "dns.flags.response": "False", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b844ec66fe727bb1b4130b32", "kind": "dns", "frame_number": 18, "timestamp_epoch": "1634913052.531190000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58843, "tcp_stream": null, "udp_stream": 5, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1b0ce1239607025009d7b399", "kind": "dns", "frame_number": 22, "timestamp_epoch": "1634913052.666195000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55306, "dst_port": 53, "tcp_stream": null, "udp_stream": 7, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-8e13f0c4369d7f2a2a00e293", "kind": "dns", "frame_number": 23, "timestamp_epoch": "1634913052.666434000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55306, "tcp_stream": null, "udp_stream": 7, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-51a87c440fa05e3e4b343544", "kind": "dns", "frame_number": 31, "timestamp_epoch": "1634913052.672583000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 58047, "dst_port": 53, "tcp_stream": null, "udp_stream": 8, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-cad4bcc7c16fd6d1bd2983f7", "kind": "dns", "frame_number": 32, "timestamp_epoch": "1634913052.672733000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58047, "tcp_stream": null, "udp_stream": 8, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f88695bc0aece9893ddff116", "kind": "dns", "frame_number": 36, "timestamp_epoch": "1634913053.483974000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55369, "dst_port": 53, "tcp_stream": null, "udp_stream": 9, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-ff7b899f4545eae9c341d7dd", "kind": "dns", "frame_number": 37, "timestamp_epoch": "1634913053.539379000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55369, "tcp_stream": null, "udp_stream": 9, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-753f6421fef0886084421103", "kind": "dns", "frame_number": 38, "timestamp_epoch": "1634913053.598967000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59204, "dst_port": 53, "tcp_stream": null, "udp_stream": 10, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-34b7e70dadd581ae2c36b4e3", "kind": "dns", "frame_number": 39, "timestamp_epoch": "1634913053.599183000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59204, "tcp_stream": null, "udp_stream": 10, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-038421ffab41b0126fcf0f9b", "kind": "dns", "frame_number": 40, "timestamp_epoch": "1634913053.600065000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 54982, "dst_port": 53, "tcp_stream": null, "udp_stream": 11, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e3e2fd1dbc58a8292c850cd6", "kind": "dns", "frame_number": 41, "timestamp_epoch": "1634913053.600187000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54982, "tcp_stream": null, "udp_stream": 11, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6ba5f534753f35d74c5863e9", "kind": "dns", "frame_number": 44, "timestamp_epoch": "1634913053.906979000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 61219, "dst_port": 53, "tcp_stream": null, "udp_stream": 13, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-999f83cdf4d15e19b86dc0e7", "kind": "dns", "frame_number": 45, "timestamp_epoch": "1634913053.907345000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61219, "tcp_stream": null, "udp_stream": 13, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-791e89f85035be194dd23a03", "kind": "dns", "frame_number": 153, "timestamp_epoch": "1634913054.102537000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50376, "dst_port": 53, "tcp_stream": null, "udp_stream": 17, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-2967d4d9169927bf4981461d", "kind": "dns", "frame_number": 154, "timestamp_epoch": "1634913054.102768000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50376, "tcp_stream": null, "udp_stream": 17, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5fac778c4c941d591472c1eb", "kind": "dns", "frame_number": 171, "timestamp_epoch": "1634913054.223915000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 51085, "dst_port": 53, "tcp_stream": null, "udp_stream": 19, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5e5ff8ccaf5c6fbc7e4c8dfd", "kind": "dns", "frame_number": 172, "timestamp_epoch": "1634913054.224061000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51085, "tcp_stream": null, "udp_stream": 19, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0afbc0be7db28ea5c8adcd5c", "kind": "dns", "frame_number": 242, "timestamp_epoch": "1634913054.392061000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62135, "dst_port": 53, "tcp_stream": null, "udp_stream": 21, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-36df8420fd66f1c7bdb1b1ae", "kind": "dns", "frame_number": 243, "timestamp_epoch": "1634913054.392241000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62135, "tcp_stream": null, "udp_stream": 21, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-aea14aae4d0bc09727186b91", "kind": "dns", "frame_number": 340, "timestamp_epoch": "1634913055.074816000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49334, "dst_port": 53, "tcp_stream": null, "udp_stream": 23, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-59a86851570fd754d31d9514", "kind": "dns", "frame_number": 341, "timestamp_epoch": "1634913055.075067000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49334, "tcp_stream": null, "udp_stream": 23, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-31d82b5a2f6a352724adb5b5", "kind": "dns", "frame_number": 548, "timestamp_epoch": "1634913057.533432000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 58505, "dst_port": 53, "tcp_stream": null, "udp_stream": 24, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-d0c027062218a06b06a1df82", "kind": "dns", "frame_number": 549, "timestamp_epoch": "1634913057.533706000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58505, "tcp_stream": null, "udp_stream": 24, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-058d0816413a3902cc205bc3", "kind": "dns", "frame_number": 715, "timestamp_epoch": "1634913064.746770000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50209, "dst_port": 53, "tcp_stream": null, "udp_stream": 31, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-52b6a2ec62de0309d01b62d8", "kind": "dns", "frame_number": 716, "timestamp_epoch": "1634913064.812497000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50209, "tcp_stream": null, "udp_stream": 31, "fields": { "dns.a": "20.189.173.7", "dns.cname": "self-events-data.trafficmanager.net,onedscolprdwus06.westus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-7870b4e9d8cf75791c2b83f8", "kind": "dns", "frame_number": 751, "timestamp_epoch": "1634913070.790528000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50953, "dst_port": 53, "tcp_stream": null, "udp_stream": 32, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-fd983dccc25177a697934e33", "kind": "dns", "frame_number": 752, "timestamp_epoch": "1634913070.790860000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50953, "tcp_stream": null, "udp_stream": 32, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-0b62cda7588e7e55c6b3d339", "kind": "dns", "frame_number": 753, "timestamp_epoch": "1634913070.791341000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52394, "dst_port": 53, "tcp_stream": null, "udp_stream": 33, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-eddff3310a5e76c68882f4da", "kind": "dns", "frame_number": 754, "timestamp_epoch": "1634913070.791562000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52394, "tcp_stream": null, "udp_stream": 33, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-09ad2fdd2c63288aca5635a7", "kind": "dns", "frame_number": 791, "timestamp_epoch": "1634913113.335313000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62346, "dst_port": 53, "tcp_stream": null, "udp_stream": 36, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ddce564f11d669aec051b915", "kind": "dns", "frame_number": 792, "timestamp_epoch": "1634913113.335549000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62346, "tcp_stream": null, "udp_stream": 36, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-de1ae39914e166986d1bf9a8", "kind": "dns", "frame_number": 793, "timestamp_epoch": "1634913113.344659000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64125, "dst_port": 53, "tcp_stream": null, "udp_stream": 37, "fields": { "dns.flags.response": "False", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-60098c92d6fa96704c7d71ef", "kind": "dns", "frame_number": 794, "timestamp_epoch": "1634913113.344886000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64125, "tcp_stream": null, "udp_stream": 37, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-eec0f972fce853e6b69da0ed", "kind": "dns", "frame_number": 799, "timestamp_epoch": "1634913113.442459000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63464, "dst_port": 53, "tcp_stream": null, "udp_stream": 40, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-86ba9670097c4c73d57d2a72", "kind": "dns", "frame_number": 800, "timestamp_epoch": "1634913113.442679000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63464, "tcp_stream": null, "udp_stream": 40, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-fabef27c4f013822c14ca874", "kind": "dns", "frame_number": 810, "timestamp_epoch": "1634913113.503289000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56598, "dst_port": 53, "tcp_stream": null, "udp_stream": 42, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9dd0a06bd4423932124480f2", "kind": "dns", "frame_number": 811, "timestamp_epoch": "1634913113.503550000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56598, "tcp_stream": null, "udp_stream": 42, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c577613e47374b23d9c30ec7", "kind": "dns", "frame_number": 824, "timestamp_epoch": "1634913113.850284000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56195, "dst_port": 53, "tcp_stream": null, "udp_stream": 43, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1a0a92eb13f3e86c6188b556", "kind": "dns", "frame_number": 825, "timestamp_epoch": "1634913113.850586000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56195, "tcp_stream": null, "udp_stream": 43, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e3ad28af2531c4a8b92dd8b3", "kind": "dns", "frame_number": 826, "timestamp_epoch": "1634913113.850879000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55524, "dst_port": 53, "tcp_stream": null, "udp_stream": 44, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-5781c9d803308b37961a1d54", "kind": "dns", "frame_number": 827, "timestamp_epoch": "1634913113.851046000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55524, "tcp_stream": null, "udp_stream": 44, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8ab1413f76605cdc05226d6f", "kind": "dns", "frame_number": 828, "timestamp_epoch": "1634913114.321568000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55175, "dst_port": 53, "tcp_stream": null, "udp_stream": 45, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-65a85e35d92686976d309ee6", "kind": "dns", "frame_number": 829, "timestamp_epoch": "1634913114.390652000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55175, "tcp_stream": null, "udp_stream": 45, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-152541d1fe8a97334c4351a4", "kind": "dns", "frame_number": 830, "timestamp_epoch": "1634913114.716833000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56856, "dst_port": 53, "tcp_stream": null, "udp_stream": 46, "fields": { "dns.flags.response": "False", "dns.qry.name": "_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9a39e46acb23e741320d12d5", "kind": "dns", "frame_number": 831, "timestamp_epoch": "1634913114.717046000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56856, "tcp_stream": null, "udp_stream": 46, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ce938439cafa727ac5e53a70", "kind": "dns", "frame_number": 833, "timestamp_epoch": "1634913114.745933000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63607, "dst_port": 53, "tcp_stream": null, "udp_stream": 47, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bfed70ab6e5d15645586e88d", "kind": "dns", "frame_number": 834, "timestamp_epoch": "1634913114.746216000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63607, "tcp_stream": null, "udp_stream": 47, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5dc8ed799e803da019f3185a", "kind": "dns", "frame_number": 1076, "timestamp_epoch": "1634913114.971426000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51761, "dst_port": 53, "tcp_stream": null, "udp_stream": 53, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-7dbe430133be7e1941fd084d", "kind": "dns", "frame_number": 1077, "timestamp_epoch": "1634913114.971588000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51761, "tcp_stream": null, "udp_stream": 53, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-b063be10a649488e245824ab", "kind": "dns", "frame_number": 1142, "timestamp_epoch": "1634913115.125315000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53644, "dst_port": 53, "tcp_stream": null, "udp_stream": 55, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-25928098e6b381af178e01e4", "kind": "dns", "frame_number": 1143, "timestamp_epoch": "1634913115.125570000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53644, "tcp_stream": null, "udp_stream": 55, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f4fb57c0bfb2c21acbd0a19f", "kind": "dns", "frame_number": 1154, "timestamp_epoch": "1634913115.458399000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63732, "dst_port": 53, "tcp_stream": null, "udp_stream": 57, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c5e357813eea70906573655a", "kind": "dns", "frame_number": 1155, "timestamp_epoch": "1634913115.458770000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63732, "tcp_stream": null, "udp_stream": 57, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e1ae50cadb630110f5d9b660", "kind": "dns", "frame_number": 1158, "timestamp_epoch": "1634913115.518951000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54642, "dst_port": 53, "tcp_stream": null, "udp_stream": 58, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-43bc1fefc6566a032439156b", "kind": "dns", "frame_number": 1159, "timestamp_epoch": "1634913115.519297000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54642, "tcp_stream": null, "udp_stream": 58, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-538008902b9da9c1087804b8", "kind": "dns", "frame_number": 1275, "timestamp_epoch": "1634913116.772980000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 53469, "dst_port": 53, "tcp_stream": null, "udp_stream": 60, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-fd3c77180620c30600bce6b1", "kind": "dns", "frame_number": 1378, "timestamp_epoch": "1634913116.834876000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53469, "tcp_stream": null, "udp_stream": 60, "fields": { "dns.a": "52.109.76.32", "dns.cname": "prod.nexusrules.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-3fc58a81af4025019dab34c6", "kind": "dns", "frame_number": 1428, "timestamp_epoch": "1634913118.374525000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62908, "dst_port": 53, "tcp_stream": null, "udp_stream": 63, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e28a8edd76269c617dd26b3f", "kind": "dns", "frame_number": 1429, "timestamp_epoch": "1634913118.374783000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62908, "tcp_stream": null, "udp_stream": 63, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-2f39b823f49db3c5c2597f2b", "kind": "dns", "frame_number": 1607, "timestamp_epoch": "1634913125.864468000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51886, "dst_port": 53, "tcp_stream": null, "udp_stream": 69, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-17a25dec438ab34af8a7121b", "kind": "dns", "frame_number": 1608, "timestamp_epoch": "1634913125.914432000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51886, "tcp_stream": null, "udp_stream": 69, "fields": { "dns.a": "20.44.10.123", "dns.cname": "self-events-data.trafficmanager.net,onedscolprdcus05.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-6514b776763555596ec2d26b", "kind": "dns", "frame_number": 1638, "timestamp_epoch": "1634913129.895705000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54457, "dst_port": 53, "tcp_stream": null, "udp_stream": 70, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-733814791393104c2d79de48", "kind": "dns", "frame_number": 1639, "timestamp_epoch": "1634913129.896164000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54457, "tcp_stream": null, "udp_stream": 70, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-08ed6714d6a0be44e9cf1d4c", "kind": "dns", "frame_number": 1640, "timestamp_epoch": "1634913129.896748000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57945, "dst_port": 53, "tcp_stream": null, "udp_stream": 71, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2babbe5e75c4bf4296f46074", "kind": "dns", "frame_number": 1641, "timestamp_epoch": "1634913129.896996000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57945, "tcp_stream": null, "udp_stream": 71, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e4de697ec60741ce4b5a4f43", "kind": "dns", "frame_number": 1642, "timestamp_epoch": "1634913130.805014000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52344, "dst_port": 53, "tcp_stream": null, "udp_stream": 72, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-bc0db3975caa4ee4936eee6f", "kind": "dns", "frame_number": 1643, "timestamp_epoch": "1634913130.805321000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52344, "tcp_stream": null, "udp_stream": 72, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-48c307c904e9e28dff1338b5", "kind": "dns", "frame_number": 1644, "timestamp_epoch": "1634913130.805721000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50490, "dst_port": 53, "tcp_stream": null, "udp_stream": 73, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-cb77dfa90185446bc374dc14", "kind": "dns", "frame_number": 1645, "timestamp_epoch": "1634913130.805902000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50490, "tcp_stream": null, "udp_stream": 73, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6f233283a353baa950836a54", "kind": "dns", "frame_number": 1685, "timestamp_epoch": "1634913143.961260000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 53494, "dst_port": 53, "tcp_stream": null, "udp_stream": 76, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-8a210a213395c12a9bf89192", "kind": "dns", "frame_number": 1686, "timestamp_epoch": "1634913143.961520000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 53494, "tcp_stream": null, "udp_stream": 76, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e63109db46abf40d70b339ac", "kind": "dns", "frame_number": 1687, "timestamp_epoch": "1634913143.965608000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61123, "dst_port": 53, "tcp_stream": null, "udp_stream": 77, "fields": { "dns.flags.response": "False", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-75499b07811702a99eee7cd4", "kind": "dns", "frame_number": 1688, "timestamp_epoch": "1634913143.965839000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61123, "tcp_stream": null, "udp_stream": 77, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch-dc.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e35b85ba4937002b75aac6b2", "kind": "dns", "frame_number": 1699, "timestamp_epoch": "1634913144.099978000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50888, "dst_port": 53, "tcp_stream": null, "udp_stream": 80, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4d091b47f8fcebd0bcd82956", "kind": "dns", "frame_number": 1701, "timestamp_epoch": "1634913144.100240000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50888, "tcp_stream": null, "udp_stream": 80, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-45a66d4c479ea17b92b16a37", "kind": "dns", "frame_number": 1702, "timestamp_epoch": "1634913144.116616000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56232, "dst_port": 53, "tcp_stream": null, "udp_stream": 81, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-05bec49b294d32f61c670667", "kind": "dns", "frame_number": 1703, "timestamp_epoch": "1634913144.116955000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56232, "tcp_stream": null, "udp_stream": 81, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.localdomain.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-7f52863273f80956e50ba76d", "kind": "dns", "frame_number": 1718, "timestamp_epoch": "1634913144.722170000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 53747, "dst_port": 53, "tcp_stream": null, "udp_stream": 83, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-7f75f8676f9985425a273ab6", "kind": "dns", "frame_number": 1719, "timestamp_epoch": "1634913144.722420000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 53747, "tcp_stream": null, "udp_stream": 83, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-80e5285d2d71268473334971", "kind": "dns", "frame_number": 1720, "timestamp_epoch": "1634913144.722619000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 84, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-08af24333ddb8cd7aefeca57", "kind": "dns", "frame_number": 1721, "timestamp_epoch": "1634913144.722778000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54297, "tcp_stream": null, "udp_stream": 84, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-7f6215c63144c6b66c17c986", "kind": "dns", "frame_number": 1722, "timestamp_epoch": "1634913145.245893000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49898, "dst_port": 53, "tcp_stream": null, "udp_stream": 85, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-f6aace506630cc913b647573", "kind": "dns", "frame_number": 1723, "timestamp_epoch": "1634913145.318048000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49898, "tcp_stream": null, "udp_stream": 85, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-174253a22734471599e1e899", "kind": "dns", "frame_number": 1727, "timestamp_epoch": "1634913145.615237000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61902, "dst_port": 53, "tcp_stream": null, "udp_stream": 86, "fields": { "dns.flags.response": "False", "dns.qry.name": "_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-372b95fede46ba1517598e49", "kind": "dns", "frame_number": 1728, "timestamp_epoch": "1634913145.615477000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61902, "tcp_stream": null, "udp_stream": 86, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-7528f570a8bd5ea673d943be", "kind": "dns", "frame_number": 1729, "timestamp_epoch": "1634913145.615525000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59912, "dst_port": 53, "tcp_stream": null, "udp_stream": 87, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c31041b5e6c0260a0ee6af2e", "kind": "dns", "frame_number": 1730, "timestamp_epoch": "1634913145.615705000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59912, "tcp_stream": null, "udp_stream": 87, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-d0a75c6537c2d92bdcb2aa92", "kind": "dns", "frame_number": 1995, "timestamp_epoch": "1634913145.911965000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62340, "dst_port": 53, "tcp_stream": null, "udp_stream": 93, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4d9269ce5582e9bad3f1f556", "kind": "dns", "frame_number": 1996, "timestamp_epoch": "1634913145.912184000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62340, "tcp_stream": null, "udp_stream": 93, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a3cae2aa14a80725fbe8edee", "kind": "dns", "frame_number": 2061, "timestamp_epoch": "1634913146.047890000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52106, "dst_port": 53, "tcp_stream": null, "udp_stream": 95, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bd31287e9a6359e29a16e25e", "kind": "dns", "frame_number": 2062, "timestamp_epoch": "1634913146.048142000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52106, "tcp_stream": null, "udp_stream": 95, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6b41cd7b39f49a2e22aaef53", "kind": "dns", "frame_number": 2075, "timestamp_epoch": "1634913146.186606000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64184, "dst_port": 53, "tcp_stream": null, "udp_stream": 97, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a020d93a0db64339d48e8045", "kind": "dns", "frame_number": 2076, "timestamp_epoch": "1634913146.186851000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64184, "tcp_stream": null, "udp_stream": 97, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-35ba2f6989abfc5f4961cbca", "kind": "dns", "frame_number": 2103, "timestamp_epoch": "1634913146.406926000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59393, "dst_port": 53, "tcp_stream": null, "udp_stream": 99, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-26373add9d3c6556652834bd", "kind": "dns", "frame_number": 2104, "timestamp_epoch": "1634913146.407180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59393, "tcp_stream": null, "udp_stream": 99, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-392569400cf258859d6c75fe", "kind": "dns", "frame_number": 2311, "timestamp_epoch": "1634913148.520983000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61195, "dst_port": 53, "tcp_stream": null, "udp_stream": 100, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-1ef51c36ef12c5681337d3aa", "kind": "dns", "frame_number": 2312, "timestamp_epoch": "1634913148.521332000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61195, "tcp_stream": null, "udp_stream": 100, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-5316d16884e8c1ab05610d8b", "kind": "dns", "frame_number": 2313, "timestamp_epoch": "1634913148.528960000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63663, "dst_port": 53, "tcp_stream": null, "udp_stream": 101, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-7df31193fbdabc13c7a101d3", "kind": "dns", "frame_number": 2314, "timestamp_epoch": "1634913148.530213000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63663, "tcp_stream": null, "udp_stream": 101, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-ec1b9a78e8fdf16db634174f", "kind": "dns", "frame_number": 2317, "timestamp_epoch": "1634913149.209418000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62653, "dst_port": 53, "tcp_stream": null, "udp_stream": 103, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e490aed637d1b197437a6530", "kind": "dns", "frame_number": 2318, "timestamp_epoch": "1634913149.209673000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62653, "tcp_stream": null, "udp_stream": 103, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-3261c82da39eb1078ea2b4a3", "kind": "dns", "frame_number": 2473, "timestamp_epoch": "1634913156.429653000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64110, "dst_port": 53, "tcp_stream": null, "udp_stream": 109, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-5d001e23acdec9fc541d86b2", "kind": "dns", "frame_number": 2479, "timestamp_epoch": "1634913157.440770000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64110, "dst_port": 53, "tcp_stream": null, "udp_stream": 109, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-7b5f51d3bc99ff6491457df4", "kind": "dns", "frame_number": 2480, "timestamp_epoch": "1634913158.456958000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64110, "dst_port": 53, "tcp_stream": null, "udp_stream": 109, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-baed71121162299ae34a1745", "kind": "dns", "frame_number": 2483, "timestamp_epoch": "1634913160.471749000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64110, "dst_port": 53, "tcp_stream": null, "udp_stream": 109, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-69f7a1ba83441344e1104dc3", "kind": "dns", "frame_number": 2484, "timestamp_epoch": "1634913160.525696000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64110, "tcp_stream": null, "udp_stream": 109, "fields": { "dns.a": "52.182.143.210", "dns.cname": "self-events-data.trafficmanager.net,onedscolprdcus10.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-59072f97969881211cc7dd74", "kind": "dns", "frame_number": 2521, "timestamp_epoch": "1634913161.020398000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60042, "dst_port": 53, "tcp_stream": null, "udp_stream": 110, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-fb5b646a6bb4ccbc96cb7237", "kind": "dns", "frame_number": 2522, "timestamp_epoch": "1634913161.020747000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 60042, "tcp_stream": null, "udp_stream": 110, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-6ff23a8fed1a470c14d1b948", "kind": "dns", "frame_number": 2523, "timestamp_epoch": "1634913161.021205000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54307, "dst_port": 53, "tcp_stream": null, "udp_stream": 111, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4c115eb3d4cbd56cabf05356", "kind": "dns", "frame_number": 2524, "timestamp_epoch": "1634913161.021420000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54307, "tcp_stream": null, "udp_stream": 111, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-b90a79ba23b98c5921f0265c", "kind": "dns", "frame_number": 2561, "timestamp_epoch": "1634913176.519414000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51130, "dst_port": 53, "tcp_stream": null, "udp_stream": 112, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-6a4838821fb869ba78257ad5", "kind": "dns", "frame_number": 2562, "timestamp_epoch": "1634913176.519727000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51130, "tcp_stream": null, "udp_stream": 112, "fields": { "dns.a": "52.109.76.32", "dns.cname": "prod.nexusrules.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-39682cf2d4e72890bea593de", "kind": "dns", "frame_number": 2630, "timestamp_epoch": "1634913184.572748000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63173, "dst_port": 53, "tcp_stream": null, "udp_stream": 114, "fields": { "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2a8b5fa66782ff7284d2a2b1", "kind": "dns", "frame_number": 2631, "timestamp_epoch": "1634913184.573027000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63173, "tcp_stream": null, "udp_stream": 114, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d398ed2f7de9e0c29318cae", "kind": "dns", "frame_number": 2635, "timestamp_epoch": "1634913184.576256000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57213, "dst_port": 53, "tcp_stream": null, "udp_stream": 115, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-a7840312b66328c2bcfd0221", "kind": "dns", "frame_number": 2697, "timestamp_epoch": "1634913184.621165000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57213, "tcp_stream": null, "udp_stream": 115, "fields": { "dns.a": "20.189.173.12", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdwus11.westus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-ece0899491238503ea81efd3", "kind": "dns", "frame_number": 2847, "timestamp_epoch": "1634913185.960794000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52468, "dst_port": 53, "tcp_stream": null, "udp_stream": 116, "fields": { "dns.flags.response": "False", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-8e4ab14c0d85c16ba6b02d5b", "kind": "dns", "frame_number": 2848, "timestamp_epoch": "1634913186.043325000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54381, "dst_port": 53, "tcp_stream": null, "udp_stream": 117, "fields": { "dns.flags.response": "False", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-6eeead513a0e7996101870d2", "kind": "dns", "frame_number": 2849, "timestamp_epoch": "1634913186.043617000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54381, "tcp_stream": null, "udp_stream": 117, "fields": { "dns.a": "20.189.173.12", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdwus11.westus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-367a6d9be0f8769c7c7b603c", "kind": "dns", "frame_number": 2851, "timestamp_epoch": "1634913186.072160000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52468, "tcp_stream": null, "udp_stream": 116, "fields": { "dns.a": "13.64.180.106", "dns.cname": "wns.notify.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-658adb8102186e481f731364", "kind": "dns", "frame_number": 2901, "timestamp_epoch": "1634913187.407198000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64983, "dst_port": 53, "tcp_stream": null, "udp_stream": 118, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-9a1ca7aa2d7f3b5d0ef1b158", "kind": "dns", "frame_number": 2902, "timestamp_epoch": "1634913187.444782000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64983, "tcp_stream": null, "udp_stream": 118, "fields": { "dns.a": "204.79.197.203", "dns.cname": "api-msn-com.a-0003.a-msedge.net,a-0003.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-554b5f1ce20ad7dee9cb20ea", "kind": "dns", "frame_number": 2926, "timestamp_epoch": "1634913189.570179000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59183, "dst_port": 53, "tcp_stream": null, "udp_stream": 119, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-90617a0b84dc37962d6e52a8", "kind": "dns", "frame_number": 2927, "timestamp_epoch": "1634913189.590171000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65060, "dst_port": 53, "tcp_stream": null, "udp_stream": 120, "fields": { "dns.flags.response": "False", "dns.qry.name": "eafddirect.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-a17a68a7fa8b2ec226002ead", "kind": "dns", "frame_number": 2928, "timestamp_epoch": "1634913189.645501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59183, "tcp_stream": null, "udp_stream": 119, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-57ced4ac60170167db2fd363", "kind": "dns", "frame_number": 2929, "timestamp_epoch": "1634913189.665089000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 65060, "tcp_stream": null, "udp_stream": 120, "fields": { "dns.a": "20.42.4.116", "dns.cname": "eafd-footprint.elasticafd.net,s0-c-0001.trafficmanager.net,eafd-prod-blr5a1-eafd-c-0001.eastus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "eafddirect.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-f4c2c881e8c0fc8ea0e4f882", "kind": "dns", "frame_number": 2945, "timestamp_epoch": "1634913189.859187000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62680, "dst_port": 53, "tcp_stream": null, "udp_stream": 121, "fields": { "dns.flags.response": "False", "dns.qry.name": "c-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-5db54f1d8dc531b69882364f", "kind": "dns", "frame_number": 2948, "timestamp_epoch": "1634913189.885516000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60577, "dst_port": 53, "tcp_stream": null, "udp_stream": 122, "fields": { "dns.flags.response": "False", "dns.qry.name": "teams-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-e9ed18c47f2f1c5388e7c37a", "kind": "dns", "frame_number": 2953, "timestamp_epoch": "1634913189.897161000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54154, "dst_port": 53, "tcp_stream": null, "udp_stream": 123, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1aad1f2bbff38b93583fa434", "kind": "dns", "frame_number": 2954, "timestamp_epoch": "1634913189.897467000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54154, "tcp_stream": null, "udp_stream": 123, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-13017cbff90d5fcce3d26704", "kind": "dns", "frame_number": 2955, "timestamp_epoch": "1634913189.898070000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50125, "dst_port": 53, "tcp_stream": null, "udp_stream": 124, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-3f3bbe2bab7e2e26d32b9fbf", "kind": "dns", "frame_number": 2956, "timestamp_epoch": "1634913189.898363000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50125, "tcp_stream": null, "udp_stream": 124, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-871beefe7869c14d2294fb94", "kind": "dns", "frame_number": 2957, "timestamp_epoch": "1634913189.898578000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62680, "tcp_stream": null, "udp_stream": 121, "fields": { "dns.a": "13.107.4.254", "dns.cname": "c-ring.c-9999.c-msedge.net,c-9999.c-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "c-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-011bed5d84f378c31ffbf15a", "kind": "dns", "frame_number": 2959, "timestamp_epoch": "1634913189.913522000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50556, "dst_port": 53, "tcp_stream": null, "udp_stream": 125, "fields": { "dns.flags.response": "False", "dns.qry.name": "a-ring-fallback.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d0c7bf5caca1eca6a23995e", "kind": "dns", "frame_number": 2964, "timestamp_epoch": "1634913189.936660000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 60577, "tcp_stream": null, "udp_stream": 122, "fields": { "dns.a": "52.113.196.254", "dns.cname": "teams-ring.teams-9999.teams-msedge.net,teams-9999.teams-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "teams-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-51a3617fd1c045d555367d7a", "kind": "dns", "frame_number": 2970, "timestamp_epoch": "1634913189.942723000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64306, "dst_port": 53, "tcp_stream": null, "udp_stream": 126, "fields": { "dns.flags.response": "False", "dns.qry.name": "k-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-be978cca76004fd32a9ab10a", "kind": "dns", "frame_number": 2971, "timestamp_epoch": "1634913189.957387000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50556, "tcp_stream": null, "udp_stream": 125, "fields": { "dns.a": "131.253.33.254", "dns.cname": "a-9999.dc-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "a-ring-fallback.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-741980698c5277c377960ee5", "kind": "dns", "frame_number": 2972, "timestamp_epoch": "1634913189.980872000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64973, "dst_port": 53, "tcp_stream": null, "udp_stream": 127, "fields": { "dns.flags.response": "False", "dns.qry.name": "moiazureorigin.clo.footprintdns.com", "dns.qry.type": "1" } }, { "event_id": "evt-073d6cefcac229ff52b0376a", "kind": "dns", "frame_number": 2973, "timestamp_epoch": "1634913189.984101000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64306, "tcp_stream": null, "udp_stream": 126, "fields": { "dns.a": "13.107.18.254", "dns.cname": "k-ring.k-9999.k-msedge.net,k-9999.k-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "k-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-b05f532054a141a158c73646", "kind": "dns", "frame_number": 3051, "timestamp_epoch": "1634913190.761599000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52241, "dst_port": 53, "tcp_stream": null, "udp_stream": 128, "fields": { "dns.flags.response": "False", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-104be8abb1ebd6d566957865", "kind": "dns", "frame_number": 3052, "timestamp_epoch": "1634913190.761920000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52241, "tcp_stream": null, "udp_stream": 128, "fields": { "dns.a": "13.86.61.82", "dns.cname": "cs-geo-dds.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-8cb61760a8b7026973575970", "kind": "dns", "frame_number": 3060, "timestamp_epoch": "1634913190.875812000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58866, "dst_port": 53, "tcp_stream": null, "udp_stream": 129, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-5b473e337ab60d6b1f50c6fb", "kind": "dns", "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58866, "tcp_stream": null, "udp_stream": 129, "fields": { "dns.a": "40.126.28.23,40.126.28.22,40.126.28.20,40.126.28.21,40.126.28.19,40.126.28.11,40.126.7.32,40.126.28.18", "dns.cname": "login.msa.msidentity.com,www.tm.lg.prod.aadmsa.trafficmanager.net,prda.aadg.msidentity.com,www.tm.a.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-00b999a052705adf1b8c69ac", "kind": "dns", "frame_number": 3072, "timestamp_epoch": "1634913190.988595000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64973, "dst_port": 53, "tcp_stream": null, "udp_stream": 127, "fields": { "dns.flags.response": "False", "dns.qry.name": "moiazureorigin.clo.footprintdns.com", "dns.qry.type": "1" } }, { "event_id": "evt-78c0d0a4bca63dc05c77e02a", "kind": "dns", "frame_number": 3164, "timestamp_epoch": "1634913191.654248000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63396, "dst_port": 53, "tcp_stream": null, "udp_stream": 130, "fields": { "dns.flags.response": "False", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-33cdf36dde90a188b5a4d284", "kind": "dns", "frame_number": 3185, "timestamp_epoch": "1634913191.727556000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63396, "tcp_stream": null, "udp_stream": 130, "fields": { "dns.a": "20.69.137.228", "dns.cname": "activity-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7b8466837708d46f25c228e", "kind": "dns", "frame_number": 3200, "timestamp_epoch": "1634913191.999643000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64973, "dst_port": 53, "tcp_stream": null, "udp_stream": 127, "fields": { "dns.flags.response": "False", "dns.qry.name": "moiazureorigin.clo.footprintdns.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7732e15253c45eb732c906f", "kind": "dns", "frame_number": 3212, "timestamp_epoch": "1634913193.243570000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49564, "dst_port": 53, "tcp_stream": null, "udp_stream": 131, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-575952fff0df99d2803b62f5", "kind": "dns", "frame_number": 3213, "timestamp_epoch": "1634913193.335410000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49564, "tcp_stream": null, "udp_stream": 131, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-80c91309ecea0455c39a4635", "kind": "dns", "frame_number": 3241, "timestamp_epoch": "1634913194.017456000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64973, "dst_port": 53, "tcp_stream": null, "udp_stream": 127, "fields": { "dns.flags.response": "False", "dns.qry.name": "moiazureorigin.clo.footprintdns.com", "dns.qry.type": "1" } }, { "event_id": "evt-79b48866154cf77cfba0b5e2", "kind": "dns", "frame_number": 3242, "timestamp_epoch": "1634913194.082079000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64973, "tcp_stream": null, "udp_stream": 127, "fields": { "dns.a": "255.255.255.255", "dns.cname": "glborigintest.trafficmanager.net,canaryeast1.eastus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "moiazureorigin.clo.footprintdns.com", "dns.qry.type": "1" } }, { "event_id": "evt-5aafcc2caf7449ef10df7a29", "kind": "dns", "frame_number": 3264, "timestamp_epoch": "1634913202.399124000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59756, "dst_port": 53, "tcp_stream": null, "udp_stream": 132, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d4213cf9ded4eb0dc43f65cd", "kind": "dns", "frame_number": 3265, "timestamp_epoch": "1634913202.399444000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59756, "tcp_stream": null, "udp_stream": 132, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c852f074074a054a84ade632", "kind": "dns", "frame_number": 3336, "timestamp_epoch": "1634913207.157887000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62748, "dst_port": 53, "tcp_stream": null, "udp_stream": 133, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-9dbe70112dacb291dd33e388", "kind": "dns", "frame_number": 3337, "timestamp_epoch": "1634913207.158388000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62748, "tcp_stream": null, "udp_stream": 133, "fields": { "dns.a": "52.109.76.32", "dns.cname": "prod.nexusrules.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-8472508f99c412345408d911", "kind": "dns", "frame_number": 3398, "timestamp_epoch": "1634913211.537384000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 65104, "dst_port": 53, "tcp_stream": null, "udp_stream": 134, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH.NET", "dns.qry.type": "1" } }, { "event_id": "evt-4b339625eca65128c9b390c0", "kind": "dns", "frame_number": 3400, "timestamp_epoch": "1634913211.537593000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65104, "tcp_stream": null, "udp_stream": 134, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH.NET", "dns.qry.type": "1" } }, { "event_id": "evt-bf973a9b908cdd38a46ba179", "kind": "dns", "frame_number": 3575, "timestamp_epoch": "1634913212.560767000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59719, "dst_port": 53, "tcp_stream": null, "udp_stream": 135, "fields": { "dns.flags.response": "False", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-ec0a608aada69a642fc1ab76", "kind": "dns", "frame_number": 3576, "timestamp_epoch": "1634913212.561085000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59719, "tcp_stream": null, "udp_stream": 135, "fields": { "dns.a": "13.64.180.106", "dns.cname": "wns.notify.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-4824c4c6886fb6f905f7895f", "kind": "dns", "frame_number": 3597, "timestamp_epoch": "1634913212.872362000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50927, "dst_port": 53, "tcp_stream": null, "udp_stream": 136, "fields": { "dns.flags.response": "False", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-3041e2994db5cebd2e38a812", "kind": "dns", "frame_number": 3598, "timestamp_epoch": "1634913212.913933000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50927, "tcp_stream": null, "udp_stream": 136, "fields": { "dns.a": "13.89.179.9", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus09.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c3569de3221f66a83ac6b79a", "kind": "dns", "frame_number": 3631, "timestamp_epoch": "1634913213.982362000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62525, "dst_port": 53, "tcp_stream": null, "udp_stream": 137, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-6d078db26dae9b5103de704c", "kind": "dns", "frame_number": 3632, "timestamp_epoch": "1634913214.046853000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62525, "tcp_stream": null, "udp_stream": 137, "fields": { "dns.a": "204.79.197.203", "dns.cname": "api-msn-com.a-0003.a-msedge.net,a-0003.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-8dfdd2fb8cc28d1d7684341d", "kind": "dns", "frame_number": 3665, "timestamp_epoch": "1634913217.546954000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 58951, "dst_port": 53, "tcp_stream": null, "udp_stream": 138, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-665c9d567b5a002a40d95b57", "kind": "dns", "frame_number": 3666, "timestamp_epoch": "1634913217.547326000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58951, "tcp_stream": null, "udp_stream": 138, "fields": { "dns.a": "13.107.21.200,204.79.197.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-9ce06932532d9af4fea8cfab", "kind": "dns", "frame_number": 3667, "timestamp_epoch": "1634913218.473259000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 54569, "dst_port": 53, "tcp_stream": null, "udp_stream": 139, "fields": { "dns.flags.response": "False", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-0dbf7be27d6567fc8ff96bac", "kind": "dns", "frame_number": 3668, "timestamp_epoch": "1634913218.473549000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54569, "tcp_stream": null, "udp_stream": 139, "fields": { "dns.a": "13.86.61.82", "dns.cname": "cs-geo-dds.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-58606503db24731c23b37524", "kind": "dns", "frame_number": 3670, "timestamp_epoch": "1634913218.672739000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 53438, "dst_port": 53, "tcp_stream": null, "udp_stream": 140, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-91f30c13d3ec5a28fce3b8cd", "kind": "dns", "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53438, "tcp_stream": null, "udp_stream": 140, "fields": { "dns.a": "40.126.28.22,40.126.28.20,40.126.28.21,40.126.28.19,40.126.28.11,40.126.7.32,40.126.28.18,40.126.28.23", "dns.cname": "login.msa.msidentity.com,www.tm.lg.prod.aadmsa.trafficmanager.net,prda.aadg.msidentity.com,www.tm.a.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-29b7f55e19344900417757e3", "kind": "dns", "frame_number": 3804, "timestamp_epoch": "1634913219.965376000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 65449, "dst_port": 53, "tcp_stream": null, "udp_stream": 141, "fields": { "dns.flags.response": "False", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-becb855047707a6ea50fce34", "kind": "dns", "frame_number": 3805, "timestamp_epoch": "1634913219.965690000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65449, "tcp_stream": null, "udp_stream": 141, "fields": { "dns.a": "20.69.137.228", "dns.cname": "activity-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-de4ed46a35a4fc3bdee363d8", "kind": "dns", "frame_number": 3812, "timestamp_epoch": "1634913221.034974000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60357, "dst_port": 53, "tcp_stream": null, "udp_stream": 142, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b26b0159038216852153bdf1", "kind": "dns", "frame_number": 3813, "timestamp_epoch": "1634913221.035309000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 60357, "tcp_stream": null, "udp_stream": 142, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-78b7673f1395204d50ca0640", "kind": "dns", "frame_number": 3814, "timestamp_epoch": "1634913221.035679000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60980, "dst_port": 53, "tcp_stream": null, "udp_stream": 143, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4b096eae6f1dc0f08067bf49", "kind": "dns", "frame_number": 3815, "timestamp_epoch": "1634913221.035924000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 60980, "tcp_stream": null, "udp_stream": 143, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-951b501b30cfac9fd673b0ca", "kind": "dns", "frame_number": 3877, "timestamp_epoch": "1634913224.579385000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63603, "dst_port": 53, "tcp_stream": null, "udp_stream": 144, "fields": { "dns.flags.response": "False", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-973fa13d0c7aa50428dcef54", "kind": "dns", "frame_number": 3879, "timestamp_epoch": "1634913224.789705000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63603, "tcp_stream": null, "udp_stream": 144, "fields": { "dns.a": "173.223.109.212", "dns.cname": "storeedgefd.xbetservices.akadns.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net,e16646.dscg.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-088c52e5deaacbabce1648ca", "kind": "dns", "frame_number": 3935, "timestamp_epoch": "1634913230.480309000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49507, "dst_port": 53, "tcp_stream": null, "udp_stream": 145, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-034a3c006e6c74c9bba3461d", "kind": "dns", "frame_number": 3936, "timestamp_epoch": "1634913230.480668000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49507, "tcp_stream": null, "udp_stream": 145, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f797c8499ad922756a86c5f7", "kind": "dns", "frame_number": 3942, "timestamp_epoch": "1634913230.588490000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58280, "dst_port": 53, "tcp_stream": null, "udp_stream": 146, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d215725b59a1a5956fa16f0a", "kind": "dns", "frame_number": 3943, "timestamp_epoch": "1634913230.665301000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58280, "tcp_stream": null, "udp_stream": 146, "fields": { "dns.a": "51.132.193.105", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprduks05.uksouth.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-ace17755bb719e2e5e09ced3", "kind": "dns", "frame_number": 4022, "timestamp_epoch": "1634913232.617476000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50974, "dst_port": 53, "tcp_stream": null, "udp_stream": 147, "fields": { "dns.flags.response": "False", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-41e5ed788e3cebb7f9087880", "kind": "dns", "frame_number": 4026, "timestamp_epoch": "1634913232.720993000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50974, "tcp_stream": null, "udp_stream": 147, "fields": { "dns.a": "40.90.64.98", "dns.cname": "sfd-production.azurefd.net,global-geo-afdthirdparty-unicast.trafficmanager.net,sn1r3a.msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d83e740fdcf209314ad3bd20", "kind": "dns", "frame_number": 4180, "timestamp_epoch": "1634913239.033435000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62898, "dst_port": 53, "tcp_stream": null, "udp_stream": 149, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH.NET", "dns.qry.type": "1" } }, { "event_id": "evt-632d16def5934b0f853e515b", "kind": "dns", "frame_number": 4181, "timestamp_epoch": "1634913239.033711000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62898, "tcp_stream": null, "udp_stream": 149, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH.NET", "dns.qry.type": "1" } }, { "event_id": "evt-8e7c16d2c2282d4921369aca", "kind": "dns", "frame_number": 4355, "timestamp_epoch": "1634913240.431527000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54845, "dst_port": 53, "tcp_stream": null, "udp_stream": 150, "fields": { "dns.flags.response": "False", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-033e3ae64b45b8e3da199fbe", "kind": "dns", "frame_number": 4356, "timestamp_epoch": "1634913240.483165000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50448, "dst_port": 53, "tcp_stream": null, "udp_stream": 151, "fields": { "dns.flags.response": "False", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-90ae6bcffcec7fc74f7cede0", "kind": "dns", "frame_number": 4357, "timestamp_epoch": "1634913240.483552000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50448, "tcp_stream": null, "udp_stream": 151, "fields": { "dns.a": "13.64.180.106", "dns.cname": "wns.notify.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "client.wns.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-998d3cff05cb660fee01427c", "kind": "dns", "frame_number": 4359, "timestamp_epoch": "1634913240.500255000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54845, "tcp_stream": null, "udp_stream": 150, "fields": { "dns.a": "51.132.193.105", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprduks05.uksouth.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v20.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d56241623b27cca1a7336973", "kind": "dns", "frame_number": 4399, "timestamp_epoch": "1634913241.439752000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50585, "dst_port": 53, "tcp_stream": null, "udp_stream": 152, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-bbdbf01abdadb687abd9085e", "kind": "dns", "frame_number": 4400, "timestamp_epoch": "1634913241.440038000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50585, "tcp_stream": null, "udp_stream": 152, "fields": { "dns.a": "204.79.197.203", "dns.cname": "api-msn-com.a-0003.a-msedge.net,a-0003.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.msn.com", "dns.qry.type": "1" } }, { "event_id": "evt-24a48d1bc3f34a75274dee55", "kind": "dns", "frame_number": 4438, "timestamp_epoch": "1634913243.673192000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51588, "dst_port": 53, "tcp_stream": null, "udp_stream": 153, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-e6147c82865650c6faeda142", "kind": "dns", "frame_number": 4439, "timestamp_epoch": "1634913243.673512000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51588, "tcp_stream": null, "udp_stream": 153, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-6e3eee383af48050578790d1", "kind": "dns", "frame_number": 4445, "timestamp_epoch": "1634913243.816240000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50050, "dst_port": 53, "tcp_stream": null, "udp_stream": 154, "fields": { "dns.flags.response": "False", "dns.qry.name": "fp-as.azureedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-eec16302b93a9236f11a3dba", "kind": "dns", "frame_number": 4453, "timestamp_epoch": "1634913243.853823000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64821, "dst_port": 53, "tcp_stream": null, "udp_stream": 155, "fields": { "dns.flags.response": "False", "dns.qry.name": "b-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-825cc5a0c22054552e35895b", "kind": "dns", "frame_number": 4460, "timestamp_epoch": "1634913243.877808000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50050, "tcp_stream": null, "udp_stream": 154, "fields": { "dns.a": "23.47.52.13,23.47.52.19", "dns.cname": "fp-as.akstd.azureedge.net,azureedge.mdc.akamaized.net,a1879.dscw14.akamai.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fp-as.azureedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-fae7135e47928c8ab8c0fb36", "kind": "dns", "frame_number": 4462, "timestamp_epoch": "1634913243.907353000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64821, "tcp_stream": null, "udp_stream": 155, "fields": { "dns.a": "13.107.6.254", "dns.cname": "b-ring.b-9999.b-msedge.net,b-9999.b-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "b-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-adba80e08b42a8117cd562e6", "kind": "dns", "frame_number": 4474, "timestamp_epoch": "1634913243.925895000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56575, "dst_port": 53, "tcp_stream": null, "udp_stream": 156, "fields": { "dns.flags.response": "False", "dns.qry.name": "k-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-b6ae643cff12ee4dbabb793b", "kind": "dns", "frame_number": 4475, "timestamp_epoch": "1634913243.932548000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58923, "dst_port": 53, "tcp_stream": null, "udp_stream": 157, "fields": { "dns.flags.response": "False", "dns.qry.name": "l-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-b587185674a4cc99c8e9a09a", "kind": "dns", "frame_number": 4476, "timestamp_epoch": "1634913243.935915000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51947, "dst_port": 53, "tcp_stream": null, "udp_stream": 158, "fields": { "dns.flags.response": "False", "dns.qry.name": "rum18.perf.linkedin.com", "dns.qry.type": "1" } }, { "event_id": "evt-a5ff76c73002bb3c3282cbf9", "kind": "dns", "frame_number": 4477, "timestamp_epoch": "1634913243.956564000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59301, "dst_port": 53, "tcp_stream": null, "udp_stream": 159, "fields": { "dns.flags.response": "False", "dns.qry.name": "fp-vs-nocache.azureedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-29fc5c7f728f8f6f0c6c8141", "kind": "dns", "frame_number": 4478, "timestamp_epoch": "1634913243.956860000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59301, "tcp_stream": null, "udp_stream": 159, "fields": { "dns.a": "72.21.81.200", "dns.cname": "fp-vs-nocache.ec.azureedge.net,cs9.wpc.v0cdn.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fp-vs-nocache.azureedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-9a179e5d1146b0ae703ea626", "kind": "dns", "frame_number": 4482, "timestamp_epoch": "1634913243.976900000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58923, "tcp_stream": null, "udp_stream": 157, "fields": { "dns.a": "13.107.42.254", "dns.cname": "l-ring.l-9999.l-msedge.net,l-9999.l-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "l-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-1ae939c18c4816cae6aac041", "kind": "dns", "frame_number": 4483, "timestamp_epoch": "1634913243.976966000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56575, "tcp_stream": null, "udp_stream": 156, "fields": { "dns.a": "13.107.18.254", "dns.cname": "k-ring.k-9999.k-msedge.net,k-9999.k-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "k-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-ce54e75344d22e341b5c2cf6", "kind": "dns", "frame_number": 4504, "timestamp_epoch": "1634913243.996774000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50150, "dst_port": 53, "tcp_stream": null, "udp_stream": 160, "fields": { "dns.flags.response": "False", "dns.qry.name": "spo-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-d5a03e9dbe3cd927212e934d", "kind": "dns", "frame_number": 4540, "timestamp_epoch": "1634913244.024012000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51947, "tcp_stream": null, "udp_stream": 158, "fields": { "dns.a": "13.107.43.14", "dns.cname": "l-0005.dc-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "rum18.perf.linkedin.com", "dns.qry.type": "1" } }, { "event_id": "evt-7869c119db4e845770aec3e2", "kind": "dns", "frame_number": 4559, "timestamp_epoch": "1634913244.050900000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56432, "dst_port": 53, "tcp_stream": null, "udp_stream": 161, "fields": { "dns.flags.response": "False", "dns.qry.name": "a-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-9c36b602446310885e4cfbf0", "kind": "dns", "frame_number": 4560, "timestamp_epoch": "1634913244.053159000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64288, "dst_port": 53, "tcp_stream": null, "udp_stream": 162, "fields": { "dns.flags.response": "False", "dns.qry.name": "t-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-4ca4aac60d82c13397d8324c", "kind": "dns", "frame_number": 4567, "timestamp_epoch": "1634913244.055601000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61445, "dst_port": 53, "tcp_stream": null, "udp_stream": 163, "fields": { "dns.flags.response": "False", "dns.qry.name": "teams-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-e1358439736b68dda10b9a6a", "kind": "dns", "frame_number": 4568, "timestamp_epoch": "1634913244.055822000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61445, "tcp_stream": null, "udp_stream": 163, "fields": { "dns.a": "52.113.196.254", "dns.cname": "teams-ring.teams-9999.teams-msedge.net,teams-9999.teams-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "teams-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-a6ffe20b5cc684eeedf8c0d0", "kind": "dns", "frame_number": 4585, "timestamp_epoch": "1634913244.069281000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57225, "dst_port": 53, "tcp_stream": null, "udp_stream": 164, "fields": { "dns.flags.response": "False", "dns.qry.name": "fp-afd.azurefd.us", "dns.qry.type": "1" } }, { "event_id": "evt-f954f41d670c0745b9545d37", "kind": "dns", "frame_number": 4588, "timestamp_epoch": "1634913244.070161000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50150, "tcp_stream": null, "udp_stream": 160, "fields": { "dns.a": "13.107.136.254", "dns.cname": "spo-ring.spo-9999.spo-msedge.net,spo-9999.spo-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "spo-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-39ab28664ea57e64f58b24d4", "kind": "dns", "frame_number": 4631, "timestamp_epoch": "1634913244.108653000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56432, "tcp_stream": null, "udp_stream": 161, "fields": { "dns.a": "204.79.197.254", "dns.cname": "a-ring.a-9999.a-msedge.net,a-9999.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "a-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-256562f15ee133182f22fdd8", "kind": "dns", "frame_number": 4632, "timestamp_epoch": "1634913244.111711000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64288, "tcp_stream": null, "udp_stream": 162, "fields": { "dns.a": "13.107.246.254", "dns.cname": "t-ring.t-9999.t-msedge.net,t-9999.t-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "t-ring.msedge.net", "dns.qry.type": "1" } }, { "event_id": "evt-5883dedb468e6ee739792c65", "kind": "dns", "frame_number": 4651, "timestamp_epoch": "1634913244.151253000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57225, "tcp_stream": null, "udp_stream": 164, "fields": { "dns.a": "20.140.56.70", "dns.cname": "t-0001.msedge.azure.us,eafd-defaultvips-3p-gov.usgovtrafficmanager.net,eafd-ffgov-sn01.elasticafd.msedge.azure.us", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fp-afd.azurefd.us", "dns.qry.type": "1" } }, { "event_id": "evt-9854cac36f471601f7c1bc47", "kind": "dns", "frame_number": 4813, "timestamp_epoch": "1634913244.827055000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49466, "dst_port": 53, "tcp_stream": null, "udp_stream": 165, "fields": { "dns.flags.response": "False", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-ee1d32155a09e1d42a5231b1", "kind": "dns", "frame_number": 4816, "timestamp_epoch": "1634913244.864837000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63248, "dst_port": 53, "tcp_stream": null, "udp_stream": 166, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-e3a5505cf1b0090b4e59e48f", "kind": "dns", "frame_number": 4817, "timestamp_epoch": "1634913244.901806000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49466, "tcp_stream": null, "udp_stream": 165, "fields": { "dns.a": "20.190.4.251", "dns.cname": "cs-geo-dds.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "continuum.dds.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b6cb12fbfd12f04dee110b9a", "kind": "dns", "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63248, "tcp_stream": null, "udp_stream": 166, "fields": { "dns.a": "40.126.28.20,40.126.28.21,40.126.28.19,40.126.28.11,40.126.7.32,40.126.28.18,40.126.28.23,40.126.28.22", "dns.cname": "login.msa.msidentity.com,www.tm.lg.prod.aadmsa.trafficmanager.net,prda.aadg.msidentity.com,www.tm.a.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-fb53a369559f1459db50b31d", "kind": "dns", "frame_number": 4878, "timestamp_epoch": "1634913245.185121000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63412, "dst_port": 53, "tcp_stream": null, "udp_stream": 167, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-e90748e1199240876dad6878", "kind": "dns", "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63412, "tcp_stream": null, "udp_stream": 167, "fields": { "dns.a": "8.253.156.120,8.249.245.254,8.249.123.254,8.248.163.254,8.253.131.120", "dns.cname": "wu-shim.trafficmanager.net,fg.download.windowsupdate.com.c.footprint.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-3819292c2e130bf98f678635", "kind": "dns", "frame_number": 4993, "timestamp_epoch": "1634913245.426118000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52896, "dst_port": 53, "tcp_stream": null, "udp_stream": 168, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e272c630715da6ff49347da0", "kind": "dns", "frame_number": 4994, "timestamp_epoch": "1634913245.426440000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52896, "tcp_stream": null, "udp_stream": 168, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-66816d9a354a229ebb2fd212", "kind": "dns", "frame_number": 5111, "timestamp_epoch": "1634913245.634910000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65080, "dst_port": 53, "tcp_stream": null, "udp_stream": 170, "fields": { "dns.flags.response": "False", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-ad819aa87f7d564f7f0cd0ae", "kind": "dns", "frame_number": 5112, "timestamp_epoch": "1634913245.635178000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65080, "tcp_stream": null, "udp_stream": 170, "fields": { "dns.a": "20.69.137.228", "dns.cname": "activity-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-fb4b00cec6c0a77bb2f41e4c", "kind": "dns", "frame_number": 5211, "timestamp_epoch": "1634913261.753949000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64783, "dst_port": 53, "tcp_stream": null, "udp_stream": 171, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-d07a7f4028bbc1de886541aa", "kind": "dns", "frame_number": 5212, "timestamp_epoch": "1634913261.839505000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64783, "tcp_stream": null, "udp_stream": 171, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-43ffd9fb10647ab0fb544958", "kind": "dns", "frame_number": 5246, "timestamp_epoch": "1634913264.245413000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63862, "dst_port": 53, "tcp_stream": null, "udp_stream": 172, "fields": { "dns.flags.response": "False", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-92cdba11da6e68df654b88b5", "kind": "dns", "frame_number": 5251, "timestamp_epoch": "1634913264.335970000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63862, "tcp_stream": null, "udp_stream": 172, "fields": { "dns.a": "173.223.109.212", "dns.cname": "storeedgefd.xbetservices.akadns.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net,e16646.dscg.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f2a1fe7f259798324490db70", "kind": "dns", "frame_number": 5300, "timestamp_epoch": "1634913272.337897000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 53018, "dst_port": 53, "tcp_stream": null, "udp_stream": 173, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9d93623ef9b342a913fa04b7", "kind": "dns", "frame_number": 5301, "timestamp_epoch": "1634913272.338257000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53018, "tcp_stream": null, "udp_stream": 173, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-496cf4a3f492e63d8e7c4997", "kind": "dns", "frame_number": 5375, "timestamp_epoch": "1634913273.648231000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53193, "dst_port": 53, "tcp_stream": null, "udp_stream": 175, "fields": { "dns.flags.response": "False", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-7038b86fd7007953ff92e248", "kind": "dns", "frame_number": 5376, "timestamp_epoch": "1634913273.648646000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53193, "tcp_stream": null, "udp_stream": 175, "fields": { "dns.a": "173.223.109.212", "dns.cname": "storeedgefd.xbetservices.akadns.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net,storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net,e16646.dscg.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "storeedgefd.dsx.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-5a9670197b8e8d78b7ddc0a8", "kind": "dns", "frame_number": 5388, "timestamp_epoch": "1634913273.879123000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 60359, "dst_port": 53, "tcp_stream": null, "udp_stream": 176, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-842b1f3a7618a53df279c332", "kind": "dns", "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60359, "tcp_stream": null, "udp_stream": 176, "fields": { "dns.a": "8.249.245.254,8.249.123.254,8.248.163.254,8.253.131.120,8.253.156.120", "dns.cname": "wu-shim.trafficmanager.net,fg.download.windowsupdate.com.c.footprint.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-b9a902d66959d571a38d4cc0", "kind": "dns", "frame_number": 5438, "timestamp_epoch": "1634913274.450842000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60675, "dst_port": 53, "tcp_stream": null, "udp_stream": 177, "fields": { "dns.flags.response": "False", "dns.qry.name": "img-prod-cms-rt-microsoft-com.akamaized.net", "dns.qry.type": "1" } }, { "event_id": "evt-2ba67aeeca4d2557dfdc0dba", "kind": "dns", "frame_number": 5439, "timestamp_epoch": "1634913274.533129000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60675, "tcp_stream": null, "udp_stream": 177, "fields": { "dns.a": "23.47.50.180,23.47.50.172", "dns.cname": "a1449.dscg2.akamai.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "img-prod-cms-rt-microsoft-com.akamaized.net", "dns.qry.type": "1" } }, { "event_id": "evt-281e2809e628527d3f72e692", "kind": "dns", "frame_number": 5543, "timestamp_epoch": "1634913288.195693000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52542, "dst_port": 53, "tcp_stream": null, "udp_stream": 178, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-6a0c0bdb3843422d33084260", "kind": "dns", "frame_number": 5546, "timestamp_epoch": "1634913288.266102000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52542, "tcp_stream": null, "udp_stream": 178, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-233d855763c1329743b383fb", "kind": "dns", "frame_number": 5572, "timestamp_epoch": "1634913292.208363000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56119, "dst_port": 53, "tcp_stream": null, "udp_stream": 179, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-86ce1f10d154f5f9c504d350", "kind": "dns", "frame_number": 5573, "timestamp_epoch": "1634913292.333084000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56119, "tcp_stream": null, "udp_stream": 179, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-0479bac8ebd80b8baeb5ac95", "kind": "dns", "frame_number": 5604, "timestamp_epoch": "1634913293.255230000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50958, "dst_port": 53, "tcp_stream": null, "udp_stream": 180, "fields": { "dns.flags.response": "False", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c7c881d7b43b02921edb904d", "kind": "dns", "frame_number": 5605, "timestamp_epoch": "1634913293.357296000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50958, "tcp_stream": null, "udp_stream": 180, "fields": { "dns.a": "40.90.64.59", "dns.cname": "sfd-production.azurefd.net,global-geo-afdthirdparty-unicast.trafficmanager.net,dfw30r3a.msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-0f5eb01b88b8eba5a2762b35", "kind": "dns", "frame_number": 5642, "timestamp_epoch": "1634913296.194174000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62318, "dst_port": 53, "tcp_stream": null, "udp_stream": 181, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d35312b27827d49456771f70", "kind": "dns", "frame_number": 5643, "timestamp_epoch": "1634913296.292206000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62318, "tcp_stream": null, "udp_stream": 181, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c908869d2430e5cdf783c16d", "kind": "dns", "frame_number": 5664, "timestamp_epoch": "1634913299.936637000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63477, "dst_port": 53, "tcp_stream": null, "udp_stream": 182, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-7ab079795949da2b946b19e7", "kind": "dns", "frame_number": 5665, "timestamp_epoch": "1634913299.937014000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63477, "tcp_stream": null, "udp_stream": 182, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5db095655902e680d0a63025", "kind": "dns", "frame_number": 6124, "timestamp_epoch": "1634913305.869014000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63830, "dst_port": 53, "tcp_stream": null, "udp_stream": 184, "fields": { "dns.flags.response": "False", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-beb3fd5986c708ce0c8d6a2f", "kind": "dns", "frame_number": 6127, "timestamp_epoch": "1634913305.970879000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63830, "tcp_stream": null, "udp_stream": 184, "fields": { "dns.a": "104.94.77.31", "dns.cname": "crl.root-x1.letsencrypt.org.edgekey.net,e8652.dscx.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-43f3e1f5241de39e819828eb", "kind": "dns", "frame_number": 6216, "timestamp_epoch": "1634913345.771037000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50868, "dst_port": 53, "tcp_stream": null, "udp_stream": 185, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4dcb9d8d496e9d984233d0e2", "kind": "dns", "frame_number": 6217, "timestamp_epoch": "1634913345.771390000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50868, "tcp_stream": null, "udp_stream": 185, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-a02a8a66866c6bc031adf8ff", "kind": "dns", "frame_number": 6218, "timestamp_epoch": "1634913345.806290000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64801, "dst_port": 53, "tcp_stream": null, "udp_stream": 186, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f2f3d0531a45b66418c59bf2", "kind": "dns", "frame_number": 6219, "timestamp_epoch": "1634913345.806553000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64801, "tcp_stream": null, "udp_stream": 186, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-3fd1cfb1d50bb9507446372d", "kind": "dns", "frame_number": 6220, "timestamp_epoch": "1634913345.833536000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64283, "dst_port": 53, "tcp_stream": null, "udp_stream": 187, "fields": { "dns.flags.response": "False", "dns.qry.name": "config.edge.skype.com", "dns.qry.type": "1" } }, { "event_id": "evt-e3267dcd4bd8f6fa596b3bee", "kind": "dns", "frame_number": 6221, "timestamp_epoch": "1634913345.875498000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64283, "tcp_stream": null, "udp_stream": 187, "fields": { "dns.a": "13.107.42.16", "dns.cname": "config.edge.skype.com.trafficmanager.net,l-0007.config.skype.com,config-edge-skype.l-0007.l-msedge.net,l-0007.l-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "config.edge.skype.com", "dns.qry.type": "1" } }, { "event_id": "evt-f105f57cf7b406caba1f1ccd", "kind": "dns", "frame_number": 6223, "timestamp_epoch": "1634913345.933401000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54289, "dst_port": 53, "tcp_stream": null, "udp_stream": 189, "fields": { "dns.flags.response": "False", "dns.qry.name": "edge.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-9b96a330056d72ec5b2ff3d6", "kind": "dns", "frame_number": 6224, "timestamp_epoch": "1634913345.985706000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54289, "tcp_stream": null, "udp_stream": 189, "fields": { "dns.a": "204.79.197.219", "dns.cname": "edge-microsoft-com.a-0016.a-msedge.net,a-0016.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "edge.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-bf0fc5d1c6a3941c6458a72a", "kind": "dns", "frame_number": 6264, "timestamp_epoch": "1634913346.286105000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63679, "dst_port": 53, "tcp_stream": null, "udp_stream": 190, "fields": { "dns.flags.response": "False", "dns.qry.name": "edge.activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-5eaae51da6661fbc25b81f4a", "kind": "dns", "frame_number": 6282, "timestamp_epoch": "1634913346.409737000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63679, "tcp_stream": null, "udp_stream": 190, "fields": { "dns.a": "52.232.226.150", "dns.cname": "edge.activity.windows.com.akadns.net,edge-global.activity.windows.com.akadns.net,edge-americas1.activity.windows.com.akadns.net,pf2bn3-edge.activity.windows.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "edge.activity.windows.com", "dns.qry.type": "1" } }, { "event_id": "evt-1fa129b1bd1eba4a129cdfd3", "kind": "dns", "frame_number": 6298, "timestamp_epoch": "1634913346.523396000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58214, "dst_port": 53, "tcp_stream": null, "udp_stream": 191, "fields": { "dns.flags.response": "False", "dns.qry.name": "pingosip.top", "dns.qry.type": "1" } }, { "event_id": "evt-95542d1e2e6e1dff27b346be", "kind": "dns", "frame_number": 6325, "timestamp_epoch": "1634913346.586626000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58214, "tcp_stream": null, "udp_stream": 191, "fields": { "dns.a": "104.21.32.95,172.67.150.172", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "pingosip.top", "dns.qry.type": "1" } }, { "event_id": "evt-599118e734829797b061bcc2", "kind": "dns", "frame_number": 6394, "timestamp_epoch": "1634913347.646137000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52629, "dst_port": 53, "tcp_stream": null, "udp_stream": 193, "fields": { "dns.flags.response": "False", "dns.qry.name": "a.nel.cloudflare.com", "dns.qry.type": "1" } }, { "event_id": "evt-daa9764f8c78a587ac7fe567", "kind": "dns", "frame_number": 6395, "timestamp_epoch": "1634913347.646483000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52629, "tcp_stream": null, "udp_stream": 193, "fields": { "dns.a": "35.190.80.1", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "a.nel.cloudflare.com", "dns.qry.type": "1" } }, { "event_id": "evt-72a179a1196514711ddf52da", "kind": "dns", "frame_number": 6481, "timestamp_epoch": "1634913352.280027000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64275, "dst_port": 53, "tcp_stream": null, "udp_stream": 194, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-60761626440f5a8a3243527c", "kind": "dns", "frame_number": 6482, "timestamp_epoch": "1634913352.280362000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64275, "tcp_stream": null, "udp_stream": 194, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "znkbmknmqyvbxi.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-42d94686e8f31c20c66ab986", "kind": "dns", "frame_number": 6483, "timestamp_epoch": "1634913352.280647000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59176, "dst_port": 53, "tcp_stream": null, "udp_stream": 195, "fields": { "dns.flags.response": "False", "dns.qry.name": "zuczbdyvfzio.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2668728bd30840b4675ac043", "kind": "dns", "frame_number": 6484, "timestamp_epoch": "1634913352.280694000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65519, "dst_port": 53, "tcp_stream": null, "udp_stream": 196, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-ef76e3e87a7fd283b98c1444", "kind": "dns", "frame_number": 6485, "timestamp_epoch": "1634913352.280857000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59176, "tcp_stream": null, "udp_stream": 195, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "zuczbdyvfzio.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-44862250a911b3abe2633930", "kind": "dns", "frame_number": 6486, "timestamp_epoch": "1634913352.280907000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 65519, "tcp_stream": null, "udp_stream": 196, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "grtovxn.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-a4799486901a77402ebaf0f9", "kind": "dns", "frame_number": 6487, "timestamp_epoch": "1634913352.280991000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56239, "dst_port": 53, "tcp_stream": null, "udp_stream": 197, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-dadb0c83fbf35175e4df4bc8", "kind": "dns", "frame_number": 6488, "timestamp_epoch": "1634913352.281218000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60389, "dst_port": 53, "tcp_stream": null, "udp_stream": 198, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-30120c37b057668af7739ade", "kind": "dns", "frame_number": 6489, "timestamp_epoch": "1634913352.281289000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64275, "dst_port": 53, "tcp_stream": null, "udp_stream": 194, "fields": { "dns.flags.response": "False", "dns.qry.name": "zuczbdyvfzio.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9d17988ef347e30459b6c46d", "kind": "dns", "frame_number": 6490, "timestamp_epoch": "1634913352.384410000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64275, "tcp_stream": null, "udp_stream": 194, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "zuczbdyvfzio.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d76b45664058b2741f6cdd92", "kind": "dns", "frame_number": 6497, "timestamp_epoch": "1634913353.295438000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60389, "dst_port": 53, "tcp_stream": null, "udp_stream": 198, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9d37137cbfd427af78357d28", "kind": "dns", "frame_number": 6498, "timestamp_epoch": "1634913353.295573000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56239, "dst_port": 53, "tcp_stream": null, "udp_stream": 197, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6ae33d37ce17707eab912f5e", "kind": "dns", "frame_number": 6500, "timestamp_epoch": "1634913353.813416000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57541, "dst_port": 53, "tcp_stream": null, "udp_stream": 200, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-8f0c565b87ce85340fd03990", "kind": "dns", "frame_number": 6501, "timestamp_epoch": "1634913353.813711000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57541, "tcp_stream": null, "udp_stream": 200, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-9ffe0af9365f382e11970c40", "kind": "dns", "frame_number": 6502, "timestamp_epoch": "1634913353.814161000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50787, "dst_port": 53, "tcp_stream": null, "udp_stream": 201, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-b4cb73c6d4218ea77c8b52c8", "kind": "dns", "frame_number": 6503, "timestamp_epoch": "1634913353.814338000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50787, "tcp_stream": null, "udp_stream": 201, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-48cc1a0641fae685b8d3c49f", "kind": "dns", "frame_number": 6512, "timestamp_epoch": "1634913355.310505000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56239, "dst_port": 53, "tcp_stream": null, "udp_stream": 197, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2e55f76c78ee6134862e6e8a", "kind": "dns", "frame_number": 6513, "timestamp_epoch": "1634913355.310620000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 60389, "dst_port": 53, "tcp_stream": null, "udp_stream": 198, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-c4d2bb03cab1a0f1ee9ef5d8", "kind": "dns", "frame_number": 6522, "timestamp_epoch": "1634913356.501436000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 60389, "tcp_stream": null, "udp_stream": 198, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-df37ca35aa78573c45d97b69", "kind": "dns", "frame_number": 6526, "timestamp_epoch": "1634913356.514066000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56239, "tcp_stream": null, "udp_stream": 197, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1ad3d631cfdc9e91ddce8fcf", "kind": "dns", "frame_number": 6537, "timestamp_epoch": "1634913358.296018000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63254, "dst_port": 53, "tcp_stream": null, "udp_stream": 204, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-651f2f4542591ae739a7256c", "kind": "dns", "frame_number": 6538, "timestamp_epoch": "1634913358.296122000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57171, "dst_port": 53, "tcp_stream": null, "udp_stream": 205, "fields": { "dns.flags.response": "False", "dns.qry.name": "zuczbdyvfzio.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-97f8568ef4965f82cf4ab97d", "kind": "dns", "frame_number": 6539, "timestamp_epoch": "1634913358.296464000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63254, "tcp_stream": null, "udp_stream": 204, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "znkbmknmqyvbxi.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-ee6a7d5830e1e92366a912a9", "kind": "dns", "frame_number": 6540, "timestamp_epoch": "1634913358.296547000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57171, "tcp_stream": null, "udp_stream": 205, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "zuczbdyvfzio.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-9d9efb00035a324d0398a8e8", "kind": "dns", "frame_number": 6541, "timestamp_epoch": "1634913358.297022000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54117, "dst_port": 53, "tcp_stream": null, "udp_stream": 206, "fields": { "dns.flags.response": "False", "dns.qry.name": "zuczbdyvfzio.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a555a7c8e016719378bfa32a", "kind": "dns", "frame_number": 6542, "timestamp_epoch": "1634913358.297103000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61395, "dst_port": 53, "tcp_stream": null, "udp_stream": 207, "fields": { "dns.flags.response": "False", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-3cf762ed5a7d38150ca6b9b6", "kind": "dns", "frame_number": 6543, "timestamp_epoch": "1634913358.297365000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54117, "tcp_stream": null, "udp_stream": 206, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "zuczbdyvfzio.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-076bcbb442f07583f8fa1272", "kind": "dns", "frame_number": 6544, "timestamp_epoch": "1634913358.297515000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61395, "tcp_stream": null, "udp_stream": 207, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "znkbmknmqyvbxi.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1977c795f254c92fbf72344b", "kind": "dns", "frame_number": 6545, "timestamp_epoch": "1634913358.297520000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49205, "dst_port": 53, "tcp_stream": null, "udp_stream": 208, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4629f6f7be1249381ac7d90d", "kind": "dns", "frame_number": 6546, "timestamp_epoch": "1634913358.297833000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49205, "tcp_stream": null, "udp_stream": 208, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "grtovxn.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4e488c362be5e0bed31937e7", "kind": "dns", "frame_number": 6550, "timestamp_epoch": "1634913358.298674000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59932, "dst_port": 53, "tcp_stream": null, "udp_stream": 209, "fields": { "dns.flags.response": "False", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-b04297acb14af322e188f0a9", "kind": "dns", "frame_number": 6551, "timestamp_epoch": "1634913358.298836000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59932, "tcp_stream": null, "udp_stream": 209, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "grtovxn.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e3c60540293e13caaaa8f1f3", "kind": "dns", "frame_number": 6568, "timestamp_epoch": "1634913359.408177000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 51839, "dst_port": 53, "tcp_stream": null, "udp_stream": 213, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-88a76028dc9f2f04bb6e920d", "kind": "dns", "frame_number": 6569, "timestamp_epoch": "1634913359.481300000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 51839, "tcp_stream": null, "udp_stream": 213, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-44ec87f806f890af25fa1daf", "kind": "dns", "frame_number": 6667, "timestamp_epoch": "1634913382.644738000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 54381, "dst_port": 53, "tcp_stream": null, "udp_stream": 214, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f5e6132c66bc2f29a6a159bd", "kind": "dns", "frame_number": 6668, "timestamp_epoch": "1634913382.690456000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54381, "tcp_stream": null, "udp_stream": 214, "fields": { "dns.a": "13.69.239.72", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdneu00.northeurope.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-2f4e6a00b11efdd17ad1e856", "kind": "dns", "frame_number": 6746, "timestamp_epoch": "1634913395.513700000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52272, "dst_port": 53, "tcp_stream": null, "udp_stream": 215, "fields": { "dns.flags.response": "False", "dns.qry.name": "sobolpand.top", "dns.qry.type": "1" } }, { "event_id": "evt-ae5c0c549c77a8d6e84420bd", "kind": "dns", "frame_number": 6747, "timestamp_epoch": "1634913395.641241000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52272, "tcp_stream": null, "udp_stream": 215, "fields": { "dns.a": "172.67.139.101,104.21.65.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "sobolpand.top", "dns.qry.type": "1" } }, { "event_id": "evt-45fd6b4d5cdecfa625178402", "kind": "dns", "frame_number": 7216, "timestamp_epoch": "1634913412.948359000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59343, "dst_port": 53, "tcp_stream": null, "udp_stream": 216, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-a6ecc6b83c5b953708b82d35", "kind": "dns", "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59343, "tcp_stream": null, "udp_stream": 216, "fields": { "dns.a": "40.126.29.5,40.126.29.9,40.126.29.8,40.126.29.7,40.126.29.15,20.190.157.11,40.126.29.13,40.126.29.10", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,san.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-6e2ad0026863284fd3aeddc2", "kind": "dns", "frame_number": 7267, "timestamp_epoch": "1634913422.794467000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50237, "dst_port": 53, "tcp_stream": null, "udp_stream": 217, "fields": { "dns.flags.response": "False", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-fde910bbec5463199d2ad59b", "kind": "dns", "frame_number": 7306, "timestamp_epoch": "1634913422.859470000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50237, "tcp_stream": null, "udp_stream": 217, "fields": { "dns.a": "20.44.10.123", "dns.cname": "self-events-data.trafficmanager.net,onedscolprdcus05.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "self.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-6a65083246ebfa46457fa03b", "kind": "dns", "frame_number": 10747, "timestamp_epoch": "1634913448.675969000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49429, "dst_port": 53, "tcp_stream": null, "udp_stream": 218, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-2d4c8a21bb83cd8040c76377", "kind": "dns", "frame_number": 10748, "timestamp_epoch": "1634913448.676309000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49429, "tcp_stream": null, "udp_stream": 218, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-46b2398bac90588626cedcde", "kind": "dns", "frame_number": 10751, "timestamp_epoch": "1634913451.458664000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57120, "dst_port": 53, "tcp_stream": null, "udp_stream": 220, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-84a977aaa097095ba3149281", "kind": "dns", "frame_number": 10752, "timestamp_epoch": "1634913451.458995000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57120, "tcp_stream": null, "udp_stream": 220, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-461e5eafce7d428f586d61b3", "kind": "dns", "frame_number": 10767, "timestamp_epoch": "1634913469.590767000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57514, "dst_port": 53, "tcp_stream": null, "udp_stream": 222, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6bb17e6becf8bd3c39626aa1", "kind": "dns", "frame_number": 10768, "timestamp_epoch": "1634913469.591097000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57514, "tcp_stream": null, "udp_stream": 222, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-3145a69e2413fa7921610502", "kind": "dns", "frame_number": 10775, "timestamp_epoch": "1634913472.276230000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64587, "dst_port": 53, "tcp_stream": null, "udp_stream": 224, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-37d2ecd68fecc83983fda35e", "kind": "dns", "frame_number": 10776, "timestamp_epoch": "1634913472.276525000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64587, "tcp_stream": null, "udp_stream": 224, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-045b49ca5add886ac3758edd", "kind": "dns", "frame_number": 10816, "timestamp_epoch": "1634913478.931063000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53897, "dst_port": 53, "tcp_stream": null, "udp_stream": 226, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-0f3f369794a21b51b284ccf8", "kind": "dns", "frame_number": 10817, "timestamp_epoch": "1634913479.015566000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53897, "tcp_stream": null, "udp_stream": 226, "fields": { "dns.a": "52.109.8.20", "dns.cname": "prod.nexusrules.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-42f42929369adb65328bfab4", "kind": "dns", "frame_number": 10841, "timestamp_epoch": "1634913489.528984000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51581, "dst_port": 53, "tcp_stream": null, "udp_stream": 227, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-912a4f8528a761c1036d7295", "kind": "dns", "frame_number": 10842, "timestamp_epoch": "1634913489.529491000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51581, "tcp_stream": null, "udp_stream": 227, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-27701df6efe81cd6714f2086", "kind": "dns", "frame_number": 10849, "timestamp_epoch": "1634913492.198005000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58846, "dst_port": 53, "tcp_stream": null, "udp_stream": 229, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-389d288bfe84e3ab2d806d98", "kind": "dns", "frame_number": 10850, "timestamp_epoch": "1634913492.198285000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58846, "tcp_stream": null, "udp_stream": 229, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4b9d93632dc1348917384c96", "kind": "dns", "frame_number": 10931, "timestamp_epoch": "1634913575.883637000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52844, "dst_port": 53, "tcp_stream": null, "udp_stream": 231, "fields": { "dns.flags.response": "False", "dns.qry.name": "tackleadvisors.com", "dns.qry.type": "1" } }, { "event_id": "evt-0a1844daf8dc2cbe6d9b897e", "kind": "dns", "frame_number": 10932, "timestamp_epoch": "1634913576.014453000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52844, "tcp_stream": null, "udp_stream": 231, "fields": { "dns.a": "198.136.61.225", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "tackleadvisors.com", "dns.qry.type": "1" } }, { "event_id": "evt-2230b681d2934c6eefacaa0b", "kind": "dns", "frame_number": 11036, "timestamp_epoch": "1634913608.448949000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59309, "dst_port": 53, "tcp_stream": null, "udp_stream": 232, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.oftheearth.ca", "dns.qry.type": "1" } }, { "event_id": "evt-0a4701b2e8759c83ed82930d", "kind": "dns", "frame_number": 11037, "timestamp_epoch": "1634913608.535240000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59309, "dst_port": 53, "tcp_stream": null, "udp_stream": 232, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.oftheearth.ca", "dns.qry.type": "1" } }, { "event_id": "evt-2804b01f8069c7dd79846747", "kind": "dns", "frame_number": 11038, "timestamp_epoch": "1634913608.680143000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59309, "tcp_stream": null, "udp_stream": 232, "fields": { "dns.a": "198.50.182.64", "dns.cname": "oftheearth.ca", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.oftheearth.ca", "dns.qry.type": "1" } }, { "event_id": "evt-e5e41b37add949cfd326182a", "kind": "dns", "frame_number": 11082, "timestamp_epoch": "1634913636.934027000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62067, "dst_port": 53, "tcp_stream": null, "udp_stream": 233, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9714ec175de62af5bfb0f5f7", "kind": "dns", "frame_number": 11083, "timestamp_epoch": "1634913637.017648000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62067, "tcp_stream": null, "udp_stream": 233, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-93137b3162cf5f2bd96cd6da", "kind": "dns", "frame_number": 11091, "timestamp_epoch": "1634913641.199748000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54700, "dst_port": 53, "tcp_stream": null, "udp_stream": 234, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.calacatta.com", "dns.qry.type": "1" } }, { "event_id": "evt-3228a90f62108c3ae91e2697", "kind": "dns", "frame_number": 11092, "timestamp_epoch": "1634913641.285938000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54700, "dst_port": 53, "tcp_stream": null, "udp_stream": 234, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.calacatta.com", "dns.qry.type": "1" } }, { "event_id": "evt-7a0d7931b35f34afd74013ec", "kind": "dns", "frame_number": 11093, "timestamp_epoch": "1634913641.321964000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54700, "tcp_stream": null, "udp_stream": 234, "fields": { "dns.a": "107.161.180.34", "dns.cname": "calacatta.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.calacatta.com", "dns.qry.type": "1" } }, { "event_id": "evt-b8c21b7210d4e003ff338f3b", "kind": "dns", "frame_number": 11095, "timestamp_epoch": "1634913641.388777000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56274, "dst_port": 53, "tcp_stream": null, "udp_stream": 235, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a1cecfdd13f159ee72e81d36", "kind": "dns", "frame_number": 11100, "timestamp_epoch": "1634913641.488218000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56274, "tcp_stream": null, "udp_stream": 235, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8cbf27d4e63492f96a9f2214", "kind": "dns", "frame_number": 11154, "timestamp_epoch": "1634913658.887387000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65316, "dst_port": 53, "tcp_stream": null, "udp_stream": 236, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b05441d8e7d414a26d36a10b", "kind": "dns", "frame_number": 11156, "timestamp_epoch": "1634913658.948540000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65316, "tcp_stream": null, "udp_stream": 236, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2423addd3aece0afb78b0c01", "kind": "dns", "frame_number": 11163, "timestamp_epoch": "1634913661.634897000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62016, "dst_port": 53, "tcp_stream": null, "udp_stream": 237, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-56ae8129340506a86c9bcc52", "kind": "dns", "frame_number": 11164, "timestamp_epoch": "1634913661.723929000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62016, "tcp_stream": null, "udp_stream": 237, "fields": { "dns.a": "20.83.81.162", "dns.cname": "fe2cr.update.microsoft.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-72c2da0c98ffa037f1814511", "kind": "dns", "frame_number": 11175, "timestamp_epoch": "1634913661.990984000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 65121, "dst_port": 53, "tcp_stream": null, "udp_stream": 238, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-2a7ef04343f5fefe5129104b", "kind": "dns", "frame_number": 11176, "timestamp_epoch": "1634913662.072508000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65121, "tcp_stream": null, "udp_stream": 238, "fields": { "dns.a": "104.46.162.226", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdaus02.australiasoutheast.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-51ec6eafcfbc97c5fea575fa", "kind": "dns", "frame_number": 11239, "timestamp_epoch": "1634913663.245893000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57389, "dst_port": 53, "tcp_stream": null, "udp_stream": 239, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3eba2a3c2be04057ad98ecc9", "kind": "dns", "frame_number": 11240, "timestamp_epoch": "1634913663.282614000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57389, "tcp_stream": null, "udp_stream": 239, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-44cbfd3f2dc752386fd5858a", "kind": "dns", "frame_number": 11311, "timestamp_epoch": "1634913664.651895000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64187, "dst_port": 53, "tcp_stream": null, "udp_stream": 240, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-3285cbec4f8c06e76850e4f4", "kind": "dns", "frame_number": 11315, "timestamp_epoch": "1634913665.668684000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64187, "dst_port": 53, "tcp_stream": null, "udp_stream": 240, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d1ed337bf84c1000aeb10f70", "kind": "dns", "frame_number": 11316, "timestamp_epoch": "1634913665.708126000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 65106, "dst_port": 53, "tcp_stream": null, "udp_stream": 241, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-960ffa1dfd9a978dd47547bb", "kind": "dns", "frame_number": 11317, "timestamp_epoch": "1634913665.767347000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65106, "tcp_stream": null, "udp_stream": 241, "fields": { "dns.a": "104.46.162.226", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdaus02.australiasoutheast.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-e51b327045bcb2b31c296b74", "kind": "dns", "frame_number": 11332, "timestamp_epoch": "1634913666.684042000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64187, "dst_port": 53, "tcp_stream": null, "udp_stream": 240, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-20450057c6792e71ebbb7041", "kind": "dns", "frame_number": 11341, "timestamp_epoch": "1634913667.590924000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53987, "dst_port": 53, "tcp_stream": null, "udp_stream": 242, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4d5dff08e6a5a64463ea62c6", "kind": "dns", "frame_number": 11342, "timestamp_epoch": "1634913667.660268000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53987, "tcp_stream": null, "udp_stream": 242, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b92882576a467c7e7beb5da6", "kind": "dns", "frame_number": 11350, "timestamp_epoch": "1634913667.882261000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64187, "tcp_stream": null, "udp_stream": 240, "fields": { "dns.a": "52.242.97.97,52.152.108.96", "dns.cname": "fe3.delivery.mp.microsoft.com,fe3.delivery.dsp.mp.microsoft.com.nsatc.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-001725d5d11300b65f4f9bc1", "kind": "dns", "frame_number": 11408, "timestamp_epoch": "1634913670.960744000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64932, "dst_port": 53, "tcp_stream": null, "udp_stream": 243, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-eebf3339d39d4f8ee2ea1820", "kind": "dns", "frame_number": 11409, "timestamp_epoch": "1634913671.018396000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64932, "tcp_stream": null, "udp_stream": 243, "fields": { "dns.a": "104.46.162.226", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdaus02.australiasoutheast.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-e337d66e459e1a3ee76cf50e", "kind": "dns", "frame_number": 11439, "timestamp_epoch": "1634913673.840744000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55413, "dst_port": 53, "tcp_stream": null, "udp_stream": 244, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-31f8bc98b6be6b349a796589", "kind": "dns", "frame_number": 11440, "timestamp_epoch": "1634913673.841064000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55413, "tcp_stream": null, "udp_stream": 244, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-948bcab96f2db17f663f7413", "kind": "dns", "frame_number": 11441, "timestamp_epoch": "1634913673.841854000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52503, "dst_port": 53, "tcp_stream": null, "udp_stream": 245, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8ad8f1a456431bcecded3eec", "kind": "dns", "frame_number": 11442, "timestamp_epoch": "1634913673.842037000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52503, "tcp_stream": null, "udp_stream": 245, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1891c7ff22d653c34666d8bd", "kind": "dns", "frame_number": 11443, "timestamp_epoch": "1634913673.874468000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57592, "dst_port": 53, "tcp_stream": null, "udp_stream": 246, "fields": { "dns.flags.response": "False", "dns.qry.name": "redinnovations.co.uk", "dns.qry.type": "1" } }, { "event_id": "evt-885f05bb11c16c80e62da1e1", "kind": "dns", "frame_number": 11444, "timestamp_epoch": "1634913673.959987000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57592, "dst_port": 53, "tcp_stream": null, "udp_stream": 246, "fields": { "dns.flags.response": "False", "dns.qry.name": "redinnovations.co.uk", "dns.qry.type": "1" } }, { "event_id": "evt-77c53a21d1f6d0f7033e7d52", "kind": "dns", "frame_number": 11445, "timestamp_epoch": "1634913674.048051000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57592, "tcp_stream": null, "udp_stream": 246, "fields": { "dns.a": "83.223.99.191", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "redinnovations.co.uk", "dns.qry.type": "1" } }, { "event_id": "evt-39645f96611240e17333388e", "kind": "dns", "frame_number": 11486, "timestamp_epoch": "1634913684.126102000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 51820, "dst_port": 53, "tcp_stream": null, "udp_stream": 247, "fields": { "dns.flags.response": "False", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-415a645a25e5e8cc045977be", "kind": "dns", "frame_number": 11488, "timestamp_epoch": "1634913684.191184000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 51820, "tcp_stream": null, "udp_stream": 247, "fields": { "dns.a": "40.90.64.61", "dns.cname": "sfd-production.azurefd.net,global-geo-afdthirdparty-unicast.trafficmanager.net,bna30r3a.msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "pti.store.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-65ac0eb8495a21f2bc41d07f", "kind": "dns", "frame_number": 11519, "timestamp_epoch": "1634913684.950783000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61115, "dst_port": 53, "tcp_stream": null, "udp_stream": 248, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a89d7a5bccc5a896ab108152", "kind": "dns", "frame_number": 11520, "timestamp_epoch": "1634913685.005902000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61115, "tcp_stream": null, "udp_stream": 248, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-840e4d3875eddbf2f6a55183", "kind": "dns", "frame_number": 11529, "timestamp_epoch": "1634913688.838151000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54302, "dst_port": 53, "tcp_stream": null, "udp_stream": 249, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-a621f4a3290eedf221d89fba", "kind": "dns", "frame_number": 11530, "timestamp_epoch": "1634913688.838516000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54302, "tcp_stream": null, "udp_stream": 249, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-25591cc85ce935d4e7aa89ff", "kind": "dns", "frame_number": 11531, "timestamp_epoch": "1634913688.838987000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63953, "dst_port": 53, "tcp_stream": null, "udp_stream": 250, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-b21cddc822aa14e0179bc34b", "kind": "dns", "frame_number": 11532, "timestamp_epoch": "1634913688.839222000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63953, "tcp_stream": null, "udp_stream": 250, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2dc3908d6b39f5be1be7e6c4", "kind": "dns", "frame_number": 11535, "timestamp_epoch": "1634913689.358333000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65411, "dst_port": 53, "tcp_stream": null, "udp_stream": 251, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8b701f1accf237d247c2ac0f", "kind": "dns", "frame_number": 11536, "timestamp_epoch": "1634913689.413549000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65411, "tcp_stream": null, "udp_stream": 251, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-be2eb28dfc8c9d85a2997f3b", "kind": "dns", "frame_number": 11543, "timestamp_epoch": "1634913693.749383000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60352, "dst_port": 53, "tcp_stream": null, "udp_stream": 252, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-155f2abbbd605ed93f6dfca3", "kind": "dns", "frame_number": 11544, "timestamp_epoch": "1634913693.798224000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60352, "tcp_stream": null, "udp_stream": 252, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f3959ab95a61350a8495f669", "kind": "dns", "frame_number": 11566, "timestamp_epoch": "1634913706.749970000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 63954, "dst_port": 53, "tcp_stream": null, "udp_stream": 253, "fields": { "dns.flags.response": "False", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-3fbb91e02f134f2901b6ec17", "kind": "dns", "frame_number": 11567, "timestamp_epoch": "1634913706.923733000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63954, "tcp_stream": null, "udp_stream": 253, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-ca6adb7188cdb7442c58b12c", "kind": "dns", "frame_number": 11568, "timestamp_epoch": "1634913706.932848000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 63955, "dst_port": 53, "tcp_stream": null, "udp_stream": 254, "fields": { "dns.flags.response": "False", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-715c8eddb66a8189550b9be2", "kind": "dns", "frame_number": 11569, "timestamp_epoch": "1634913707.082349000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63955, "tcp_stream": null, "udp_stream": 254, "fields": { "dns.a": "9.241.189.20", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-c7e16f6ed7976ee4401086e4", "kind": "dns", "frame_number": 11570, "timestamp_epoch": "1634913707.091618000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 63956, "dst_port": 53, "tcp_stream": null, "udp_stream": 255, "fields": { "dns.flags.response": "False", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-74934559736dabd30385ec55", "kind": "dns", "frame_number": 11571, "timestamp_epoch": "1634913707.255910000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63956, "tcp_stream": null, "udp_stream": 255, "fields": { "dns.a": "26.85.198.164", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-26479e2c542270d518241a15", "kind": "dns", "frame_number": 11572, "timestamp_epoch": "1634913708.233781000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 63957, "dst_port": 53, "tcp_stream": null, "udp_stream": 256, "fields": { "dns.flags.response": "False", "dns.qry.name": "aqsouhyw.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-17e139744ca99031c14fb3a7", "kind": "dns", "frame_number": 11573, "timestamp_epoch": "1634913708.406113000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63957, "tcp_stream": null, "udp_stream": 256, "fields": { "dns.a": "60.241.142.83", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "aqsouhyw.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-85d09cd7add44629d0e69eab", "kind": "dns", "frame_number": 11600, "timestamp_epoch": "1634913714.249814000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59849, "dst_port": 53, "tcp_stream": null, "udp_stream": 257, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4403c1b161f9c2dde5401dab", "kind": "dns", "frame_number": 11601, "timestamp_epoch": "1634913714.329369000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59849, "tcp_stream": null, "udp_stream": 257, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f77cc6db7e84c16cce4f3b2d", "kind": "dns", "frame_number": 11611, "timestamp_epoch": "1634913718.701512000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53141, "dst_port": 53, "tcp_stream": null, "udp_stream": 258, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fc975aa13ea846d3d2847f71", "kind": "dns", "frame_number": 11612, "timestamp_epoch": "1634913718.748556000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53141, "tcp_stream": null, "udp_stream": 258, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-03d42fe407744305e535c4f4", "kind": "dns", "frame_number": 11619, "timestamp_epoch": "1634913722.482391000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51775, "dst_port": 53, "tcp_stream": null, "udp_stream": 259, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-e099133232de9c4bf757d485", "kind": "dns", "frame_number": 11620, "timestamp_epoch": "1634913722.575867000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51775, "dst_port": 53, "tcp_stream": null, "udp_stream": 259, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f73fb46760db595a41c7b15f", "kind": "dns", "frame_number": 11621, "timestamp_epoch": "1634913722.624343000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51775, "tcp_stream": null, "udp_stream": 259, "fields": { "dns.a": "20.83.81.162", "dns.cname": "fe2cr.update.microsoft.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c85beb60dfb7e5d9d5049df5", "kind": "dns", "frame_number": 11627, "timestamp_epoch": "1634913722.814683000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62177, "dst_port": 53, "tcp_stream": null, "udp_stream": 260, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-368ef4b208075507b63485d6", "kind": "dns", "frame_number": 11628, "timestamp_epoch": "1634913722.853539000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62177, "tcp_stream": null, "udp_stream": 260, "fields": { "dns.a": "104.208.16.88", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus08.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-0ed7ef5169a18af4bd9e9ccf", "kind": "dns", "frame_number": 11656, "timestamp_epoch": "1634913723.061980000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60155, "dst_port": 53, "tcp_stream": null, "udp_stream": 261, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-de4e8858c37576d73e1be8c2", "kind": "dns", "frame_number": 11733, "timestamp_epoch": "1634913724.076375000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60155, "dst_port": 53, "tcp_stream": null, "udp_stream": 261, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-64c1bbafef2900f0fa8101b6", "kind": "dns", "frame_number": 11734, "timestamp_epoch": "1634913724.136789000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60155, "tcp_stream": null, "udp_stream": 261, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-54a33402173066057e8c7953", "kind": "dns", "frame_number": 11776, "timestamp_epoch": "1634913725.147746000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49308, "dst_port": 53, "tcp_stream": null, "udp_stream": 262, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-4a3751e51c52d246327926ba", "kind": "dns", "frame_number": 11777, "timestamp_epoch": "1634913725.148011000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49308, "tcp_stream": null, "udp_stream": 262, "fields": { "dns.a": "52.152.108.96,52.242.97.97", "dns.cname": "fe3.delivery.mp.microsoft.com,fe3.delivery.dsp.mp.microsoft.com.nsatc.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b9ab9659a17ffdd0c14c6963", "kind": "dns", "frame_number": 11884, "timestamp_epoch": "1634913727.898658000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64767, "dst_port": 53, "tcp_stream": null, "udp_stream": 263, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-cd3584a8ca9532d81ec70757", "kind": "dns", "frame_number": 11900, "timestamp_epoch": "1634913727.982022000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64767, "dst_port": 53, "tcp_stream": null, "udp_stream": 263, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-a6f2ec5bb7083ca47f3b927b", "kind": "dns", "frame_number": 11911, "timestamp_epoch": "1634913728.998529000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64767, "dst_port": 53, "tcp_stream": null, "udp_stream": 263, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-382f93112246b46a24532fd1", "kind": "dns", "frame_number": 11963, "timestamp_epoch": "1634913730.845381000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49401, "dst_port": 53, "tcp_stream": null, "udp_stream": 264, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5bf8cd9b7d642bf6759e1284", "kind": "dns", "frame_number": 11964, "timestamp_epoch": "1634913730.845643000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49401, "tcp_stream": null, "udp_stream": 264, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b97dbab31bfead64cf15ecf7", "kind": "dns", "frame_number": 11965, "timestamp_epoch": "1634913730.846078000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52181, "dst_port": 53, "tcp_stream": null, "udp_stream": 265, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-32d52eccdca762aa71d28fe2", "kind": "dns", "frame_number": 11966, "timestamp_epoch": "1634913730.846316000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52181, "tcp_stream": null, "udp_stream": 265, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8f37d1a434e7f5fd7bf2300a", "kind": "dns", "frame_number": 11983, "timestamp_epoch": "1634913730.998121000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64767, "dst_port": 53, "tcp_stream": null, "udp_stream": 263, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-8aee64c4eda39a272e477d70", "kind": "dns", "frame_number": 12075, "timestamp_epoch": "1634913732.334475000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64767, "tcp_stream": null, "udp_stream": 263, "fields": { "dns.a": "104.208.16.88", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus08.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b2f140e24a043d4816686ae0", "kind": "dns", "frame_number": 12438, "timestamp_epoch": "1634913741.452396000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58281, "dst_port": 53, "tcp_stream": null, "udp_stream": 266, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7e73c67de97f6ab019907b99", "kind": "dns", "frame_number": 12444, "timestamp_epoch": "1634913741.546153000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58281, "tcp_stream": null, "udp_stream": 266, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-86f1f42ae2f1cc136b08d803", "kind": "dns", "frame_number": 12719, "timestamp_epoch": "1634913745.906004000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52201, "dst_port": 53, "tcp_stream": null, "udp_stream": 267, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b747f5a711b96bf183aead11", "kind": "dns", "frame_number": 12724, "timestamp_epoch": "1634913745.965159000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52201, "tcp_stream": null, "udp_stream": 267, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-313cc30abbcbfc0714db6af1", "kind": "dns", "frame_number": 12934, "timestamp_epoch": "1634913748.852977000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61367, "dst_port": 53, "tcp_stream": null, "udp_stream": 268, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-0b9ebf8539d7628434438c72", "kind": "dns", "frame_number": 12935, "timestamp_epoch": "1634913748.853338000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61367, "tcp_stream": null, "udp_stream": 268, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-a672bcdafb815cf4c39d32fa", "kind": "dns", "frame_number": 12936, "timestamp_epoch": "1634913748.853803000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52054, "dst_port": 53, "tcp_stream": null, "udp_stream": 269, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6421cf298179b2e4ccb448fc", "kind": "dns", "frame_number": 12937, "timestamp_epoch": "1634913748.854012000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52054, "tcp_stream": null, "udp_stream": 269, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-33207628137ff0efda588631", "kind": "dns", "frame_number": 13029, "timestamp_epoch": "1634913750.296884000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51919, "dst_port": 53, "tcp_stream": null, "udp_stream": 270, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9f338c2cb3b4ef980c1731a7", "kind": "dns", "frame_number": 13034, "timestamp_epoch": "1634913750.511809000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51919, "tcp_stream": null, "udp_stream": 270, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5a47ce1579fee7aee9615146", "kind": "dns", "frame_number": 13321, "timestamp_epoch": "1634913753.568408000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58034, "dst_port": 53, "tcp_stream": null, "udp_stream": 271, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-77f2a80c32bbc5df4f1ad4de", "kind": "dns", "frame_number": 13322, "timestamp_epoch": "1634913753.568654000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58034, "tcp_stream": null, "udp_stream": 271, "fields": { "dns.a": "20.83.81.162", "dns.cname": "fe2cr.update.microsoft.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe2cr.update.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-3d5d06cf04eee59eed35192c", "kind": "dns", "frame_number": 13364, "timestamp_epoch": "1634913754.184769000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57922, "dst_port": 53, "tcp_stream": null, "udp_stream": 272, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-649d3d95155c2f0b5f7891d8", "kind": "dns", "frame_number": 13366, "timestamp_epoch": "1634913754.254531000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57922, "tcp_stream": null, "udp_stream": 272, "fields": { "dns.a": "13.89.179.10", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus12.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-5ab50aace539eaeb95294d6d", "kind": "dns", "frame_number": 13632, "timestamp_epoch": "1634913756.715872000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54574, "dst_port": 53, "tcp_stream": null, "udp_stream": 273, "fields": { "dns.flags.response": "False", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c63d1b23ad9a5cd90c087574", "kind": "dns", "frame_number": 13633, "timestamp_epoch": "1634913756.716158000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54574, "tcp_stream": null, "udp_stream": 273, "fields": { "dns.a": "52.242.97.97,52.152.108.96", "dns.cname": "fe3.delivery.mp.microsoft.com,fe3.delivery.dsp.mp.microsoft.com.nsatc.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "fe3cr.delivery.mp.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-89459bb309e6a903e86b1d7b", "kind": "dns", "frame_number": 13768, "timestamp_epoch": "1634913759.690822000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57645, "dst_port": 53, "tcp_stream": null, "udp_stream": 274, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-4b17b71c125dfeac567d31ce", "kind": "dns", "frame_number": 13769, "timestamp_epoch": "1634913759.691266000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57645, "tcp_stream": null, "udp_stream": 274, "fields": { "dns.a": "13.89.179.10", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus12.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-0bd2073f66467cdd781b8c86", "kind": "dns", "frame_number": 14006, "timestamp_epoch": "1634913767.906578000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54789, "dst_port": 53, "tcp_stream": null, "udp_stream": 275, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7e1be18bfc004a305c3b7cf0", "kind": "dns", "frame_number": 14007, "timestamp_epoch": "1634913767.972288000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54789, "tcp_stream": null, "udp_stream": 275, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d958d86612fb2360da1e3a6d", "kind": "dns", "frame_number": 14287, "timestamp_epoch": "1634913772.360461000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57169, "dst_port": 53, "tcp_stream": null, "udp_stream": 276, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4a4561077f25397649ed7911", "kind": "dns", "frame_number": 14293, "timestamp_epoch": "1634913772.439196000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57169, "tcp_stream": null, "udp_stream": 276, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ec1afc9e0ef6977bc216f814", "kind": "dns", "frame_number": 14407, "timestamp_epoch": "1634913776.766388000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58257, "dst_port": 53, "tcp_stream": null, "udp_stream": 277, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2e3e0735053ce4f7c813d376", "kind": "dns", "frame_number": 14421, "timestamp_epoch": "1634913776.842208000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58257, "tcp_stream": null, "udp_stream": 277, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4746fa3df309a85c11771536", "kind": "dns", "frame_number": 15028, "timestamp_epoch": "1634913789.924025000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57652, "dst_port": 53, "tcp_stream": null, "udp_stream": 278, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-d2022a442d97f96da03fe22a", "kind": "dns", "frame_number": 15029, "timestamp_epoch": "1634913789.924426000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57652, "tcp_stream": null, "udp_stream": 278, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-d820cf91ef6d4ef74bdb66e7", "kind": "dns", "frame_number": 15030, "timestamp_epoch": "1634913789.925902000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62364, "dst_port": 53, "tcp_stream": null, "udp_stream": 279, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f9f0c521a646985569abdb22", "kind": "dns", "frame_number": 15031, "timestamp_epoch": "1634913789.926143000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62364, "tcp_stream": null, "udp_stream": 279, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a124b9b0d1dd0ee9524d2b82", "kind": "dns", "frame_number": 15277, "timestamp_epoch": "1634913794.141179000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54053, "dst_port": 53, "tcp_stream": null, "udp_stream": 280, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d8e12777c00144fe9260b61", "kind": "dns", "frame_number": 15278, "timestamp_epoch": "1634913794.192362000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54053, "tcp_stream": null, "udp_stream": 280, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d20fbb66195b23b26b82cb94", "kind": "dns", "frame_number": 15361, "timestamp_epoch": "1634913798.501134000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58650, "dst_port": 53, "tcp_stream": null, "udp_stream": 281, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fab904a8a4a000c4f301510c", "kind": "dns", "frame_number": 15373, "timestamp_epoch": "1634913798.580555000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58650, "tcp_stream": null, "udp_stream": 281, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-78129c33acb40ab3780047aa", "kind": "dns", "frame_number": 15607, "timestamp_epoch": "1634913802.954061000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52560, "dst_port": 53, "tcp_stream": null, "udp_stream": 282, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-14904aa4c122f0fcd3b33055", "kind": "dns", "frame_number": 15608, "timestamp_epoch": "1634913803.002259000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52560, "tcp_stream": null, "udp_stream": 282, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-193d3032ed7d0d0bff501c69", "kind": "dns", "frame_number": 15933, "timestamp_epoch": "1634913814.719076000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 53763, "dst_port": 53, "tcp_stream": null, "udp_stream": 283, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-8c7dfc4d47363b63f9a1191f", "kind": "dns", "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 53763, "tcp_stream": null, "udp_stream": 283, "fields": { "dns.a": "8.248.163.254,8.253.156.120,8.253.45.214,8.249.219.254,8.249.239.254", "dns.cname": "wu-shim.trafficmanager.net,fg.download.windowsupdate.com.c.footprint.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-812d669d6ae68a3e3a4e396e", "kind": "dns", "frame_number": 16162, "timestamp_epoch": "1634913820.282464000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57471, "dst_port": 53, "tcp_stream": null, "udp_stream": 284, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-288d4c8fa16df82f049a632f", "kind": "dns", "frame_number": 16163, "timestamp_epoch": "1634913820.336680000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57471, "tcp_stream": null, "udp_stream": 284, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ecd183f77c59e79438ac0a8a", "kind": "dns", "frame_number": 16170, "timestamp_epoch": "1634913824.641789000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56351, "dst_port": 53, "tcp_stream": null, "udp_stream": 285, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9ea7c9b2154dc22fe06c87c9", "kind": "dns", "frame_number": 16171, "timestamp_epoch": "1634913824.694829000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56351, "tcp_stream": null, "udp_stream": 285, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d67918829da5d74f7fe54c20", "kind": "dns", "frame_number": 16178, "timestamp_epoch": "1634913829.032799000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56137, "dst_port": 53, "tcp_stream": null, "udp_stream": 286, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9365dd1c4b097ee932b5328e", "kind": "dns", "frame_number": 16179, "timestamp_epoch": "1634913829.140072000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56137, "tcp_stream": null, "udp_stream": 286, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5fc22095178ce13a7ca1e38d", "kind": "dns", "frame_number": 16221, "timestamp_epoch": "1634913846.533211000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64697, "dst_port": 53, "tcp_stream": null, "udp_stream": 287, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0e892e0d9f6281b1ecaa3faa", "kind": "dns", "frame_number": 16222, "timestamp_epoch": "1634913846.633200000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64697, "tcp_stream": null, "udp_stream": 287, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e677bc2747a7d422d23b3ea6", "kind": "dns", "frame_number": 16232, "timestamp_epoch": "1634913850.923735000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61718, "dst_port": 53, "tcp_stream": null, "udp_stream": 288, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fe8682fe4c8692825a060c11", "kind": "dns", "frame_number": 16233, "timestamp_epoch": "1634913850.989339000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61718, "tcp_stream": null, "udp_stream": 288, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-353c6a70d67c8589266c7fa0", "kind": "dns", "frame_number": 16243, "timestamp_epoch": "1634913855.034084000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56105, "dst_port": 53, "tcp_stream": null, "udp_stream": 289, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d66f76dec1ec3722faa0c880", "kind": "dns", "frame_number": 16244, "timestamp_epoch": "1634913855.075475000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56105, "tcp_stream": null, "udp_stream": 289, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d8d9a9f7bb4c95a950562579", "kind": "dns", "frame_number": 16245, "timestamp_epoch": "1634913855.315162000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49496, "dst_port": 53, "tcp_stream": null, "udp_stream": 290, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d16765d54dea811ad0d79dc1", "kind": "dns", "frame_number": 16246, "timestamp_epoch": "1634913855.370470000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49496, "tcp_stream": null, "udp_stream": 290, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9af2291b2f48f87936e721e9", "kind": "dns", "frame_number": 16290, "timestamp_epoch": "1634913872.643764000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65030, "dst_port": 53, "tcp_stream": null, "udp_stream": 291, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e0621cf949ca64c7593f520e", "kind": "dns", "frame_number": 16291, "timestamp_epoch": "1634913872.712766000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65030, "tcp_stream": null, "udp_stream": 291, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ef34ca19d158faae889f8b48", "kind": "dns", "frame_number": 16305, "timestamp_epoch": "1634913877.017532000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60694, "dst_port": 53, "tcp_stream": null, "udp_stream": 292, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4f6d03487fe253013b935006", "kind": "dns", "frame_number": 16306, "timestamp_epoch": "1634913877.079643000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60694, "tcp_stream": null, "udp_stream": 292, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-12f2ea3616047e66b5052f8e", "kind": "dns", "frame_number": 16315, "timestamp_epoch": "1634913881.377234000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56165, "dst_port": 53, "tcp_stream": null, "udp_stream": 293, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cd4709043bdfaf3dfe1b391e", "kind": "dns", "frame_number": 16316, "timestamp_epoch": "1634913881.435714000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56165, "tcp_stream": null, "udp_stream": 293, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-505d07d87f9c5c5b28a80b67", "kind": "dns", "frame_number": 16326, "timestamp_epoch": "1634913884.427646000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59382, "dst_port": 53, "tcp_stream": null, "udp_stream": 294, "fields": { "dns.flags.response": "False", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-8d54fd6e3854da01abea1728", "kind": "dns", "frame_number": 16327, "timestamp_epoch": "1634913884.510546000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59382, "dst_port": 53, "tcp_stream": null, "udp_stream": 294, "fields": { "dns.flags.response": "False", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-9f7fe8510463f93a56befcfb", "kind": "dns", "frame_number": 16328, "timestamp_epoch": "1634913884.626038000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59382, "tcp_stream": null, "udp_stream": 294, "fields": { "dns.a": "13.107.21.200,204.79.197.200", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-573eaafc1ad616970c1b8a89", "kind": "dns", "frame_number": 16352, "timestamp_epoch": "1634913884.925424000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50611, "dst_port": 53, "tcp_stream": null, "udp_stream": 296, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-4c6b956203ed9a573fecf03e", "kind": "dns", "frame_number": 16354, "timestamp_epoch": "1634913885.011357000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50611, "dst_port": 53, "tcp_stream": null, "udp_stream": 296, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-6564d3176c6ed012db6f1be8", "kind": "dns", "frame_number": 16355, "timestamp_epoch": "1634913885.075636000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50611, "tcp_stream": null, "udp_stream": 296, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-1ee4626acf48704f7fb3c69b", "kind": "dns", "frame_number": 17273, "timestamp_epoch": "1634913888.971528000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55816, "dst_port": 53, "tcp_stream": null, "udp_stream": 297, "fields": { "dns.flags.response": "False", "dns.qry.name": "microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-380c5f3afef11e5285831663", "kind": "dns", "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55816, "tcp_stream": null, "udp_stream": 297, "fields": { "dns.a": "104.215.148.63,40.76.4.15,40.112.72.205,40.113.200.201,13.77.161.179", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c5714e87428b993617a237b9", "kind": "dns", "frame_number": 17307, "timestamp_epoch": "1634913890.447037000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 53887, "dst_port": 53, "tcp_stream": null, "udp_stream": 298, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b324704ab504d6dfd6b35f21", "kind": "dns", "frame_number": 17308, "timestamp_epoch": "1634913890.481288000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 53887, "tcp_stream": null, "udp_stream": 298, "fields": { "dns.a": "23.47.169.181", "dns.cname": "www.microsoft.com-c-3.edgekey.net,www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net,e13678.dscb.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-e543b8fd51a7a9ad690c8055", "kind": "dns", "frame_number": 17350, "timestamp_epoch": "1634913898.691654000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62359, "dst_port": 53, "tcp_stream": null, "udp_stream": 299, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-78a2d5c3e7be16c599c46728", "kind": "dns", "frame_number": 17351, "timestamp_epoch": "1634913898.750784000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62359, "tcp_stream": null, "udp_stream": 299, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c6d2ea557f484f872bb05a08", "kind": "dns", "frame_number": 17368, "timestamp_epoch": "1634913903.112922000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56336, "dst_port": 53, "tcp_stream": null, "udp_stream": 300, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-be04d6fbb58b7e6ff510c19a", "kind": "dns", "frame_number": 17369, "timestamp_epoch": "1634913903.178214000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56336, "tcp_stream": null, "udp_stream": 300, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-54ff4f67f332b338f0b9aefc", "kind": "dns", "frame_number": 17381, "timestamp_epoch": "1634913907.536086000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60934, "dst_port": 53, "tcp_stream": null, "udp_stream": 301, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ddea4e46d6dbf265dbc480d1", "kind": "dns", "frame_number": 17382, "timestamp_epoch": "1634913907.608531000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60934, "tcp_stream": null, "udp_stream": 301, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c866f7be988f38c55e4b0756", "kind": "dns", "frame_number": 17431, "timestamp_epoch": "1634913920.085184000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50892, "dst_port": 53, "tcp_stream": null, "udp_stream": 302, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1533f746df8caa7f855a5e46", "kind": "dns", "frame_number": 17432, "timestamp_epoch": "1634913920.085523000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50892, "tcp_stream": null, "udp_stream": 302, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-54cd69a49723dae93cdb1cd3", "kind": "dns", "frame_number": 17433, "timestamp_epoch": "1634913920.085970000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52135, "dst_port": 53, "tcp_stream": null, "udp_stream": 303, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4252210b6f3a2749afcc8f2c", "kind": "dns", "frame_number": 17435, "timestamp_epoch": "1634913920.155227000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52135, "tcp_stream": null, "udp_stream": 303, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-ed6c9f01551e25fcec0c59a9", "kind": "dns", "frame_number": 17447, "timestamp_epoch": "1634913924.926852000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51959, "dst_port": 53, "tcp_stream": null, "udp_stream": 304, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-33720efa20341325b4850ea3", "kind": "dns", "frame_number": 17448, "timestamp_epoch": "1634913925.038051000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51959, "tcp_stream": null, "udp_stream": 304, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9020e6430bd746d3bdc2370f", "kind": "dns", "frame_number": 17460, "timestamp_epoch": "1634913929.394111000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49780, "dst_port": 53, "tcp_stream": null, "udp_stream": 305, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1bdc391c23055da376dc33f5", "kind": "dns", "frame_number": 17461, "timestamp_epoch": "1634913929.514233000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49780, "tcp_stream": null, "udp_stream": 305, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f348b738dbdf1debaff446e5", "kind": "dns", "frame_number": 17468, "timestamp_epoch": "1634913930.037393000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53126, "dst_port": 53, "tcp_stream": null, "udp_stream": 306, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-266e54beadb0ec8771350b1d", "kind": "dns", "frame_number": 17469, "timestamp_epoch": "1634913930.122659000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53126, "tcp_stream": null, "udp_stream": 306, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-c14e6e53482d2f8d97b2d0ff", "kind": "dns", "frame_number": 17470, "timestamp_epoch": "1634913933.895234000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51447, "dst_port": 53, "tcp_stream": null, "udp_stream": 307, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-63361d24cdb1a7f809922842", "kind": "dns", "frame_number": 17471, "timestamp_epoch": "1634913933.985148000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51447, "tcp_stream": null, "udp_stream": 307, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-be178afb6c2cd2673bebe0bc", "kind": "dns", "frame_number": 17479, "timestamp_epoch": "1634913935.162981000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51426, "dst_port": 53, "tcp_stream": null, "udp_stream": 308, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2a47d1ae9bb9e37daf61bf55", "kind": "dns", "frame_number": 17480, "timestamp_epoch": "1634913935.163297000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51426, "tcp_stream": null, "udp_stream": 308, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-37edd62496abac4beaef394d", "kind": "dns", "frame_number": 17481, "timestamp_epoch": "1634913935.163946000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51771, "dst_port": 53, "tcp_stream": null, "udp_stream": 309, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a47b1e984fe262eac03c8e21", "kind": "dns", "frame_number": 17482, "timestamp_epoch": "1634913935.164180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51771, "tcp_stream": null, "udp_stream": 309, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-04c4429e97f185f392a351d9", "kind": "dns", "frame_number": 17537, "timestamp_epoch": "1634913951.302344000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61766, "dst_port": 53, "tcp_stream": null, "udp_stream": 311, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-820c90aadc9060b61d7d6de7", "kind": "dns", "frame_number": 17538, "timestamp_epoch": "1634913951.360308000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61766, "tcp_stream": null, "udp_stream": 311, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-eb1c8c9066ba5da5ed2c30b2", "kind": "dns", "frame_number": 17575, "timestamp_epoch": "1634913955.677476000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49722, "dst_port": 53, "tcp_stream": null, "udp_stream": 312, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-677dd432f9d92c438e32058a", "kind": "dns", "frame_number": 17576, "timestamp_epoch": "1634913955.746543000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49722, "tcp_stream": null, "udp_stream": 312, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cdc7e5e3712a02269bcd6152", "kind": "dns", "frame_number": 17592, "timestamp_epoch": "1634913956.149084000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 61156, "dst_port": 53, "tcp_stream": null, "udp_stream": 313, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-40f422de99f2cba27dcbf145", "kind": "dns", "frame_number": 17593, "timestamp_epoch": "1634913956.149484000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61156, "tcp_stream": null, "udp_stream": 313, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-3793d1a3fbdb75381dc88724", "kind": "dns", "frame_number": 17594, "timestamp_epoch": "1634913956.151353000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52322, "dst_port": 53, "tcp_stream": null, "udp_stream": 314, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-320f26f1ddbf1c4c683059a1", "kind": "dns", "frame_number": 17595, "timestamp_epoch": "1634913956.152393000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52322, "tcp_stream": null, "udp_stream": 314, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-23e48691c6304ece24bce36a", "kind": "dns", "frame_number": 17618, "timestamp_epoch": "1634913960.068526000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55910, "dst_port": 53, "tcp_stream": null, "udp_stream": 315, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-651dc7600b2b2939fea3882a", "kind": "dns", "frame_number": 17620, "timestamp_epoch": "1634913960.122073000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55910, "tcp_stream": null, "udp_stream": 315, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4a8efde6a6c45ca5bbc7b33b", "kind": "dns", "frame_number": 17663, "timestamp_epoch": "1634913977.506098000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55207, "dst_port": 53, "tcp_stream": null, "udp_stream": 316, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c91dc3e4a376ab70344cdf2c", "kind": "dns", "frame_number": 17664, "timestamp_epoch": "1634913977.592526000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55207, "tcp_stream": null, "udp_stream": 316, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e81da1d20706e782399ecdfa", "kind": "dns", "frame_number": 17685, "timestamp_epoch": "1634913981.974176000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64131, "dst_port": 53, "tcp_stream": null, "udp_stream": 317, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-08048af13675b6184a5825b9", "kind": "dns", "frame_number": 17686, "timestamp_epoch": "1634913982.036159000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64131, "tcp_stream": null, "udp_stream": 317, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e500549ff433265fddec3acf", "kind": "dns", "frame_number": 17700, "timestamp_epoch": "1634913986.333823000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55431, "dst_port": 53, "tcp_stream": null, "udp_stream": 318, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b9415d61b9b23d001d797cbf", "kind": "dns", "frame_number": 17701, "timestamp_epoch": "1634913986.385488000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55431, "tcp_stream": null, "udp_stream": 318, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1fbfc579f0d21c72dd682f69", "kind": "dns", "frame_number": 17755, "timestamp_epoch": "1634913995.164237000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64097, "dst_port": 53, "tcp_stream": null, "udp_stream": 319, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1decc5b32cc3f35ac61a0faa", "kind": "dns", "frame_number": 17756, "timestamp_epoch": "1634913995.164584000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64097, "tcp_stream": null, "udp_stream": 319, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-56b1296719df1175bdf505d9", "kind": "dns", "frame_number": 17757, "timestamp_epoch": "1634913995.165336000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50150, "dst_port": 53, "tcp_stream": null, "udp_stream": 160, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2e78c6f46da06bc3975f75fc", "kind": "dns", "frame_number": 17758, "timestamp_epoch": "1634913995.165577000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50150, "tcp_stream": null, "udp_stream": 160, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2505e8a4c3f4ebcf41d65c70", "kind": "dns", "frame_number": 17780, "timestamp_epoch": "1634914003.648641000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54431, "dst_port": 53, "tcp_stream": null, "udp_stream": 320, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-205d092a23bfd15ca7f76644", "kind": "dns", "frame_number": 17781, "timestamp_epoch": "1634914003.719330000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54431, "tcp_stream": null, "udp_stream": 320, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-60d393c3710dfee3c1cbc229", "kind": "dns", "frame_number": 17790, "timestamp_epoch": "1634914005.040970000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49436, "dst_port": 53, "tcp_stream": null, "udp_stream": 321, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-4c61b63f51350291957f63c6", "kind": "dns", "frame_number": 17791, "timestamp_epoch": "1634914005.091181000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49436, "tcp_stream": null, "udp_stream": 321, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-4ff27c3371a619410681c2db", "kind": "dns", "frame_number": 17793, "timestamp_epoch": "1634914008.039259000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63367, "dst_port": 53, "tcp_stream": null, "udp_stream": 322, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ffcf920bb94e9b602d836938", "kind": "dns", "frame_number": 17794, "timestamp_epoch": "1634914008.102752000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63367, "tcp_stream": null, "udp_stream": 322, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f4db1d6c0ccb729975cc2e7e", "kind": "dns", "frame_number": 17862, "timestamp_epoch": "1634914016.820511000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50183, "dst_port": 53, "tcp_stream": null, "udp_stream": 324, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-ba062c07a9f8dea6d39906e7", "kind": "dns", "frame_number": 17863, "timestamp_epoch": "1634914016.820832000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50183, "tcp_stream": null, "udp_stream": 324, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-a09f86bed8ffb116870bd24d", "kind": "dns", "frame_number": 17864, "timestamp_epoch": "1634914016.822158000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54366, "dst_port": 53, "tcp_stream": null, "udp_stream": 325, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-bf3dd3469f7f47cd093da37c", "kind": "dns", "frame_number": 17865, "timestamp_epoch": "1634914016.823164000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54366, "tcp_stream": null, "udp_stream": 325, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-8dcb2f744537570e27959f92", "kind": "dns", "frame_number": 17876, "timestamp_epoch": "1634914025.414534000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61470, "dst_port": 53, "tcp_stream": null, "udp_stream": 326, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e6fd9f78c4310c84a0d0d2a6", "kind": "dns", "frame_number": 17877, "timestamp_epoch": "1634914025.414938000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61470, "tcp_stream": null, "udp_stream": 326, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-9ff6dd39df61ac762d038b7c", "kind": "dns", "frame_number": 17879, "timestamp_epoch": "1634914025.415500000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62573, "dst_port": 53, "tcp_stream": null, "udp_stream": 327, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-54afe500b8221a2e0f4f6f6c", "kind": "dns", "frame_number": 17880, "timestamp_epoch": "1634914025.415749000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62573, "tcp_stream": null, "udp_stream": 327, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f02f414b0e2615ed6b4ff1e8", "kind": "dns", "frame_number": 17928, "timestamp_epoch": "1634914040.416102000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59035, "dst_port": 53, "tcp_stream": null, "udp_stream": 328, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-346bf4a42d4486330dd68b82", "kind": "dns", "frame_number": 17929, "timestamp_epoch": "1634914040.416494000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59035, "tcp_stream": null, "udp_stream": 328, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-de3e7e0aeabde3dd77ae55b3", "kind": "dns", "frame_number": 17930, "timestamp_epoch": "1634914040.417328000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58567, "dst_port": 53, "tcp_stream": null, "udp_stream": 329, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-20dd824b637dc8b3e6df61c3", "kind": "dns", "frame_number": 17931, "timestamp_epoch": "1634914040.417565000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58567, "tcp_stream": null, "udp_stream": 329, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-fae34624473e36801c0f1112", "kind": "dns", "frame_number": 17944, "timestamp_epoch": "1634914043.532544000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61466, "dst_port": 53, "tcp_stream": null, "udp_stream": 331, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-739ad0d60811e1597efd8344", "kind": "dns", "frame_number": 17945, "timestamp_epoch": "1634914043.532829000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61466, "tcp_stream": null, "udp_stream": 331, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-93e0f1c6451051879d1aba1a", "kind": "dns", "frame_number": 17946, "timestamp_epoch": "1634914043.534134000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56819, "dst_port": 53, "tcp_stream": null, "udp_stream": 332, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-1025f1680508a23e4c468692", "kind": "dns", "frame_number": 17947, "timestamp_epoch": "1634914043.535101000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56819, "tcp_stream": null, "udp_stream": 332, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-c021469e30ae2e13d63e9bd8", "kind": "dns", "frame_number": 19681, "timestamp_epoch": "1634914069.469918000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56820, "dst_port": 53, "tcp_stream": null, "udp_stream": 333, "fields": { "dns.flags.response": "False", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-7fa7433c4119168db8635df3", "kind": "dns", "frame_number": 19683, "timestamp_epoch": "1634914069.970793000", "src_ip": "10.10.22.158", "dst_ip": "51.158.108.203", "src_port": 56821, "dst_port": 53, "tcp_stream": null, "udp_stream": 334, "fields": { "dns.flags.response": "False", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-697082383dd6057a415aa658", "kind": "dns", "frame_number": 19684, "timestamp_epoch": "1634914070.054483000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56820, "tcp_stream": null, "udp_stream": 333, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-596d2c3eab5bdd723eeca543", "kind": "dns", "frame_number": 19685, "timestamp_epoch": "1634914070.054621000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 53, "dst_port": 56820, "tcp_stream": null, "udp_stream": 333, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-08aab8f327fdad4910d84cf7", "kind": "dns", "frame_number": 19686, "timestamp_epoch": "1634914070.383727000", "src_ip": "51.158.108.203", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56821, "tcp_stream": null, "udp_stream": 334, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-d0550f981666dcf88794909e", "kind": "dns", "frame_number": 19687, "timestamp_epoch": "1634914070.388946000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56822, "dst_port": 53, "tcp_stream": null, "udp_stream": 335, "fields": { "dns.flags.response": "False", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-bb7611549f2f53bb266adbb8", "kind": "dns", "frame_number": 19688, "timestamp_epoch": "1634914070.638520000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56822, "tcp_stream": null, "udp_stream": 335, "fields": { "dns.a": "9.241.189.20", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-f7125f1b6c8656b494bd86e5", "kind": "dns", "frame_number": 19689, "timestamp_epoch": "1634914070.642877000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56823, "dst_port": 53, "tcp_stream": null, "udp_stream": 336, "fields": { "dns.flags.response": "False", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-108b9427f53014d0e46273e5", "kind": "dns", "frame_number": 19690, "timestamp_epoch": "1634914070.897720000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56823, "tcp_stream": null, "udp_stream": 336, "fields": { "dns.a": "26.85.198.164", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-7e5c1ded5069a57e3717a468", "kind": "dns", "frame_number": 19726, "timestamp_epoch": "1634914080.040183000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55266, "dst_port": 53, "tcp_stream": null, "udp_stream": 337, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-66d6868a2164673e3511e9d2", "kind": "dns", "frame_number": 19727, "timestamp_epoch": "1634914080.080250000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55266, "tcp_stream": null, "udp_stream": 337, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-a5a3fb58ef4647138d61b4ad", "kind": "dns", "frame_number": 20566, "timestamp_epoch": "1634914100.417669000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63028, "dst_port": 53, "tcp_stream": null, "udp_stream": 338, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-f540e5de6e38bad5b8e77279", "kind": "dns", "frame_number": 20567, "timestamp_epoch": "1634914100.418112000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63028, "tcp_stream": null, "udp_stream": 338, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c2814746c045e6227b7b9a33", "kind": "dns", "frame_number": 20568, "timestamp_epoch": "1634914100.418753000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54172, "dst_port": 53, "tcp_stream": null, "udp_stream": 339, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-99fade362274ded72b94d1a2", "kind": "dns", "frame_number": 20569, "timestamp_epoch": "1634914100.418985000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54172, "tcp_stream": null, "udp_stream": 339, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f8c28cb1a355373fc49e1a6b", "kind": "dns", "frame_number": 20641, "timestamp_epoch": "1634914120.769729000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54469, "dst_port": 53, "tcp_stream": null, "udp_stream": 340, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5043fff43da5470b90be7a92", "kind": "dns", "frame_number": 20642, "timestamp_epoch": "1634914120.770109000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54469, "tcp_stream": null, "udp_stream": 340, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c3d1c4ff46d755f11c5cb94", "kind": "dns", "frame_number": 20644, "timestamp_epoch": "1634914120.770773000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50217, "dst_port": 53, "tcp_stream": null, "udp_stream": 341, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-bbf5bb6909d1cd01f7597070", "kind": "dns", "frame_number": 20645, "timestamp_epoch": "1634914120.771013000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50217, "tcp_stream": null, "udp_stream": 341, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e20205da0060781c4f96178a", "kind": "dns", "frame_number": 20659, "timestamp_epoch": "1634914125.043411000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61341, "dst_port": 53, "tcp_stream": null, "udp_stream": 342, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-4fb821391aa9f77f60ed9185", "kind": "dns", "frame_number": 20660, "timestamp_epoch": "1634914125.091553000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61341, "tcp_stream": null, "udp_stream": 342, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-7c3cc5732410407434c3ded6", "kind": "dns", "frame_number": 20686, "timestamp_epoch": "1634914135.778296000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55265, "dst_port": 53, "tcp_stream": null, "udp_stream": 343, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b6b51129414dc1ca798273c6", "kind": "dns", "frame_number": 20687, "timestamp_epoch": "1634914135.778712000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55265, "tcp_stream": null, "udp_stream": 343, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-dd8f189118e77841f2f02d67", "kind": "dns", "frame_number": 20688, "timestamp_epoch": "1634914135.779607000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61378, "dst_port": 53, "tcp_stream": null, "udp_stream": 344, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e40a33e0e01802ccb3eb2ad1", "kind": "dns", "frame_number": 20689, "timestamp_epoch": "1634914135.779841000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61378, "tcp_stream": null, "udp_stream": 344, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a3b2a92e147a888b1cd912b5", "kind": "dns", "frame_number": 22281, "timestamp_epoch": "1634914183.668871000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62968, "dst_port": 53, "tcp_stream": null, "udp_stream": 345, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-306579bc41295f89e01aa3bf", "kind": "dns", "frame_number": 22282, "timestamp_epoch": "1634914183.765010000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62968, "tcp_stream": null, "udp_stream": 345, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5e103d20ecfd5ed7e3ff500e", "kind": "dns", "frame_number": 22289, "timestamp_epoch": "1634914185.046057000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63913, "dst_port": 53, "tcp_stream": null, "udp_stream": 346, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-95fbd4623f7022f03d16a1ea", "kind": "dns", "frame_number": 22290, "timestamp_epoch": "1634914185.098419000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63913, "tcp_stream": null, "udp_stream": 346, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-aa32933e23fc0520c91f923f", "kind": "dns", "frame_number": 22340, "timestamp_epoch": "1634914195.796761000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58939, "dst_port": 53, "tcp_stream": null, "udp_stream": 347, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4da15e710f8b9d7270f58bf7", "kind": "dns", "frame_number": 22341, "timestamp_epoch": "1634914195.797190000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58939, "tcp_stream": null, "udp_stream": 347, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-d1b2975180dd82c471559f26", "kind": "dns", "frame_number": 22342, "timestamp_epoch": "1634914195.797783000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54014, "dst_port": 53, "tcp_stream": null, "udp_stream": 348, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9b6fecf14bd3fe3c7b454a46", "kind": "dns", "frame_number": 22343, "timestamp_epoch": "1634914195.798004000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54014, "tcp_stream": null, "udp_stream": 348, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-ec706f5d20bba97add4a525f", "kind": "dns", "frame_number": 22357, "timestamp_epoch": "1634914204.074272000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59517, "dst_port": 53, "tcp_stream": null, "udp_stream": 349, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7937727c6b35716604ae37f5", "kind": "dns", "frame_number": 22358, "timestamp_epoch": "1634914204.143386000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59517, "tcp_stream": null, "udp_stream": 349, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-af2d3aaac76bafe1e0013a39", "kind": "dns", "frame_number": 22385, "timestamp_epoch": "1634914208.480196000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63896, "dst_port": 53, "tcp_stream": null, "udp_stream": 350, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-342fd249387d6323f3533663", "kind": "dns", "frame_number": 22386, "timestamp_epoch": "1634914208.729228000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63896, "tcp_stream": null, "udp_stream": 350, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-31b5db141f49824554c6477d", "kind": "dns", "frame_number": 22395, "timestamp_epoch": "1634914213.060306000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64277, "dst_port": 53, "tcp_stream": null, "udp_stream": 351, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ed73ed6d978af0ad2fb785c8", "kind": "dns", "frame_number": 22396, "timestamp_epoch": "1634914213.336672000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64277, "tcp_stream": null, "udp_stream": 351, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8efcfd6ac81ed6e49cc8dc6b", "kind": "dns", "frame_number": 22404, "timestamp_epoch": "1634914214.343325000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60664, "dst_port": 53, "tcp_stream": null, "udp_stream": 352, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-ac8be51317c02248831c11a2", "kind": "dns", "frame_number": 22405, "timestamp_epoch": "1634914214.343673000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60664, "tcp_stream": null, "udp_stream": 352, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-a41eb77b619d955046cc08c7", "kind": "dns", "frame_number": 22407, "timestamp_epoch": "1634914214.344206000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52366, "dst_port": 53, "tcp_stream": null, "udp_stream": 353, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-753aaf9bbc608a011c009c82", "kind": "dns", "frame_number": 22408, "timestamp_epoch": "1634914214.344439000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52366, "tcp_stream": null, "udp_stream": 353, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1e8ead3d5186b17ee53d74ca", "kind": "dns", "frame_number": 22458, "timestamp_epoch": "1634914228.426721000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56824, "dst_port": 53, "tcp_stream": null, "udp_stream": 354, "fields": { "dns.flags.response": "False", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-b575ad552d383cfbef4a5b8f", "kind": "dns", "frame_number": 22459, "timestamp_epoch": "1634914228.610736000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56824, "tcp_stream": null, "udp_stream": 354, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-de6f3c066c9b893cfbf2fdc3", "kind": "dns", "frame_number": 22460, "timestamp_epoch": "1634914228.615943000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56825, "dst_port": 53, "tcp_stream": null, "udp_stream": 355, "fields": { "dns.flags.response": "False", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-2998db629ecb83c5516932e0", "kind": "dns", "frame_number": 22461, "timestamp_epoch": "1634914228.793138000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56825, "tcp_stream": null, "udp_stream": 355, "fields": { "dns.a": "9.241.189.20", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-9d0b018c6ffcf10c2cf378d9", "kind": "dns", "frame_number": 22462, "timestamp_epoch": "1634914228.798254000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56826, "dst_port": 53, "tcp_stream": null, "udp_stream": 356, "fields": { "dns.flags.response": "False", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-0520ed27d1477a9f5b2bc246", "kind": "dns", "frame_number": 22463, "timestamp_epoch": "1634914228.968942000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56826, "tcp_stream": null, "udp_stream": 356, "fields": { "dns.a": "26.85.198.164", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-6b0f49b889a0d521e16578c6", "kind": "dns", "frame_number": 22487, "timestamp_epoch": "1634914229.358867000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61199, "dst_port": 53, "tcp_stream": null, "udp_stream": 357, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-df332942ff000d5b2836c42a", "kind": "dns", "frame_number": 22488, "timestamp_epoch": "1634914229.359261000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61199, "tcp_stream": null, "udp_stream": 357, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-02312e78dc2e01f2ab56eee7", "kind": "dns", "frame_number": 22489, "timestamp_epoch": "1634914229.360627000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52423, "dst_port": 53, "tcp_stream": null, "udp_stream": 358, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8a464fb4c3c727ce0b7e0683", "kind": "dns", "frame_number": 22490, "timestamp_epoch": "1634914229.360861000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52423, "tcp_stream": null, "udp_stream": 358, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-401f73bcc8c09016e34be293", "kind": "dns", "frame_number": 22492, "timestamp_epoch": "1634914230.982725000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51517, "dst_port": 53, "tcp_stream": null, "udp_stream": 359, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dee40117e71f6009d1dc3cbc", "kind": "dns", "frame_number": 22493, "timestamp_epoch": "1634914231.086240000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51517, "tcp_stream": null, "udp_stream": 359, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1bb9b047dde2a948b81b3726", "kind": "dns", "frame_number": 22504, "timestamp_epoch": "1634914235.450364000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64220, "dst_port": 53, "tcp_stream": null, "udp_stream": 360, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-64fc65d0adaae2726df3c0ed", "kind": "dns", "frame_number": 22505, "timestamp_epoch": "1634914235.559285000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64220, "tcp_stream": null, "udp_stream": 360, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dd779d48f8d8718249623fce", "kind": "dns", "frame_number": 22517, "timestamp_epoch": "1634914242.934815000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58351, "dst_port": 53, "tcp_stream": null, "udp_stream": 361, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2ecde99e0df92d029f9d4a0d", "kind": "dns", "frame_number": 22518, "timestamp_epoch": "1634914243.004538000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58351, "tcp_stream": null, "udp_stream": 361, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-102b09023d53bfa93dc36685", "kind": "dns", "frame_number": 22584, "timestamp_epoch": "1634914260.296679000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65322, "dst_port": 53, "tcp_stream": null, "udp_stream": 362, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6b82dc802847b21fdef4bbd9", "kind": "dns", "frame_number": 22586, "timestamp_epoch": "1634914260.355732000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65322, "tcp_stream": null, "udp_stream": 362, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d72e37b819937f8bdad739dc", "kind": "dns", "frame_number": 22594, "timestamp_epoch": "1634914264.670534000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64369, "dst_port": 53, "tcp_stream": null, "udp_stream": 363, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b64075033a79b8d9adec7988", "kind": "dns", "frame_number": 22595, "timestamp_epoch": "1634914264.742365000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64369, "tcp_stream": null, "udp_stream": 363, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e9dc784a2c5368e1baca1442", "kind": "dns", "frame_number": 22605, "timestamp_epoch": "1634914269.046576000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53650, "dst_port": 53, "tcp_stream": null, "udp_stream": 364, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f7300364a9224958500fce88", "kind": "dns", "frame_number": 22606, "timestamp_epoch": "1634914269.105521000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53650, "tcp_stream": null, "udp_stream": 364, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f97a747d0d42150ffe5352df", "kind": "dns", "frame_number": 22623, "timestamp_epoch": "1634914275.047966000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49609, "dst_port": 53, "tcp_stream": null, "udp_stream": 365, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-40f91405ff4908b69c8e38de", "kind": "dns", "frame_number": 22624, "timestamp_epoch": "1634914275.140675000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49609, "tcp_stream": null, "udp_stream": 365, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-b247d38d2aaf7705ce105e19", "kind": "dns", "frame_number": 22669, "timestamp_epoch": "1634914286.343088000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60469, "dst_port": 53, "tcp_stream": null, "udp_stream": 366, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1f215e62697bcd5fbe783e1d", "kind": "dns", "frame_number": 22670, "timestamp_epoch": "1634914286.411598000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60469, "tcp_stream": null, "udp_stream": 366, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a57fe3f399e7bb9de2f4720b", "kind": "dns", "frame_number": 22698, "timestamp_epoch": "1634914289.360244000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55924, "dst_port": 53, "tcp_stream": null, "udp_stream": 367, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-fbbc3733b817e893ec301546", "kind": "dns", "frame_number": 22699, "timestamp_epoch": "1634914289.360718000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55924, "tcp_stream": null, "udp_stream": 367, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c854dc145ed064c1cfe49a3", "kind": "dns", "frame_number": 22700, "timestamp_epoch": "1634914289.361570000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55965, "dst_port": 53, "tcp_stream": null, "udp_stream": 368, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-bbaff8cddc16e2594e1fcc8b", "kind": "dns", "frame_number": 22701, "timestamp_epoch": "1634914289.361806000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55965, "tcp_stream": null, "udp_stream": 368, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d872d94cd5e7e5621c597bca", "kind": "dns", "frame_number": 22704, "timestamp_epoch": "1634914290.716642000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56419, "dst_port": 53, "tcp_stream": null, "udp_stream": 369, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ec69b35e0cbe4fdfc9fa5bb5", "kind": "dns", "frame_number": 22705, "timestamp_epoch": "1634914290.805632000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56419, "tcp_stream": null, "udp_stream": 369, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f3ebe77ae3e9c991dc56de2f", "kind": "dns", "frame_number": 22714, "timestamp_epoch": "1634914295.156707000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51481, "dst_port": 53, "tcp_stream": null, "udp_stream": 370, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-980ae86a1cb651defb86b354", "kind": "dns", "frame_number": 22715, "timestamp_epoch": "1634914295.258487000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51481, "tcp_stream": null, "udp_stream": 370, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-744c7eaee3994b7e7a20de33", "kind": "dns", "frame_number": 22750, "timestamp_epoch": "1634914312.609155000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62552, "dst_port": 53, "tcp_stream": null, "udp_stream": 371, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-28250fa1222c8b08204122b5", "kind": "dns", "frame_number": 22751, "timestamp_epoch": "1634914312.684432000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62552, "tcp_stream": null, "udp_stream": 371, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-918ef02abf43d7dec869c2bb", "kind": "dns", "frame_number": 22768, "timestamp_epoch": "1634914316.999774000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58580, "dst_port": 53, "tcp_stream": null, "udp_stream": 372, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-93e94ae33564265f9e0304ae", "kind": "dns", "frame_number": 22769, "timestamp_epoch": "1634914317.051871000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58580, "tcp_stream": null, "udp_stream": 372, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-43e9c1f8d9102469479a6acb", "kind": "dns", "frame_number": 22778, "timestamp_epoch": "1634914321.374829000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62932, "dst_port": 53, "tcp_stream": null, "udp_stream": 373, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3e07d0264b3d6de2d474c2b1", "kind": "dns", "frame_number": 22780, "timestamp_epoch": "1634914321.418517000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62932, "tcp_stream": null, "udp_stream": 373, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7c9e6a1b5fc7f3231249fb67", "kind": "dns", "frame_number": 22827, "timestamp_epoch": "1634914329.873916000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64712, "dst_port": 53, "tcp_stream": null, "udp_stream": 374, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b43ff0e7655613e3b5c91dff", "kind": "dns", "frame_number": 22828, "timestamp_epoch": "1634914329.874275000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64712, "tcp_stream": null, "udp_stream": 374, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-3799b5eac797e2c9505df3fd", "kind": "dns", "frame_number": 22830, "timestamp_epoch": "1634914329.874582000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52254, "dst_port": 53, "tcp_stream": null, "udp_stream": 375, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6fccf6923c1754a27bbb45d7", "kind": "dns", "frame_number": 22831, "timestamp_epoch": "1634914329.874791000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52254, "tcp_stream": null, "udp_stream": 375, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-0b6af849954f762a0ae9cb3d", "kind": "dns", "frame_number": 22839, "timestamp_epoch": "1634914330.907860000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62283, "dst_port": 53, "tcp_stream": null, "udp_stream": 376, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1345c98f61fff417168950bc", "kind": "dns", "frame_number": 22840, "timestamp_epoch": "1634914330.908117000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62283, "tcp_stream": null, "udp_stream": 376, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-6a23d7e485340793072c461c", "kind": "dns", "frame_number": 22841, "timestamp_epoch": "1634914330.908533000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 57173, "dst_port": 53, "tcp_stream": null, "udp_stream": 377, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-5198a25dfbf3c8a2a3e630c7", "kind": "dns", "frame_number": 22842, "timestamp_epoch": "1634914330.908691000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57173, "tcp_stream": null, "udp_stream": 377, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-b32bf3775ef33750da1ac14a", "kind": "dns", "frame_number": 22872, "timestamp_epoch": "1634914338.749658000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60847, "dst_port": 53, "tcp_stream": null, "udp_stream": 378, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-45b8506f19464088e86da318", "kind": "dns", "frame_number": 22873, "timestamp_epoch": "1634914338.816178000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60847, "tcp_stream": null, "udp_stream": 378, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f2af8c20bb85e6388c27e877", "kind": "dns", "frame_number": 22884, "timestamp_epoch": "1634914343.156309000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59027, "dst_port": 53, "tcp_stream": null, "udp_stream": 379, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ffb55866d2533aba96808e60", "kind": "dns", "frame_number": 22885, "timestamp_epoch": "1634914343.220553000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59027, "tcp_stream": null, "udp_stream": 379, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f4e8e10f032f82fd65d8e9c7", "kind": "dns", "frame_number": 22901, "timestamp_epoch": "1634914344.875580000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50823, "dst_port": 53, "tcp_stream": null, "udp_stream": 380, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-d21d6f1c34b5da2e8e3f9c7d", "kind": "dns", "frame_number": 22902, "timestamp_epoch": "1634914344.875954000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50823, "tcp_stream": null, "udp_stream": 380, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4f7ec80de3f3141bdfe7cb5a", "kind": "dns", "frame_number": 22903, "timestamp_epoch": "1634914344.876484000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60013, "dst_port": 53, "tcp_stream": null, "udp_stream": 381, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-18fc2737f4e41c90b83b9ed3", "kind": "dns", "frame_number": 22904, "timestamp_epoch": "1634914344.876688000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60013, "tcp_stream": null, "udp_stream": 381, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-daba8eaed1db3b90f12b30df", "kind": "dns", "frame_number": 22908, "timestamp_epoch": "1634914347.516710000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52055, "dst_port": 53, "tcp_stream": null, "udp_stream": 382, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-729e99171c6a2dc40e53133d", "kind": "dns", "frame_number": 22909, "timestamp_epoch": "1634914347.579612000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52055, "tcp_stream": null, "udp_stream": 382, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ef9ca6fba3dd0d42833e9a8b", "kind": "dns", "frame_number": 22918, "timestamp_epoch": "1634914348.871422000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54106, "dst_port": 53, "tcp_stream": null, "udp_stream": 383, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-093826897bd2e974e97cf4ea", "kind": "dns", "frame_number": 22919, "timestamp_epoch": "1634914348.871719000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54106, "tcp_stream": null, "udp_stream": 383, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b4eac37d3cf14e6b68253067", "kind": "dns", "frame_number": 22920, "timestamp_epoch": "1634914348.872120000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56386, "dst_port": 53, "tcp_stream": null, "udp_stream": 384, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1b2c1ae06024e9a053733be1", "kind": "dns", "frame_number": 22921, "timestamp_epoch": "1634914348.872293000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56386, "tcp_stream": null, "udp_stream": 384, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-783c009acb4af0ecfde2dc89", "kind": "dns", "frame_number": 22924, "timestamp_epoch": "1634914350.048071000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58169, "dst_port": 53, "tcp_stream": null, "udp_stream": 385, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-592d7a5b97ebfc35797a623a", "kind": "dns", "frame_number": 22925, "timestamp_epoch": "1634914350.102554000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58169, "tcp_stream": null, "udp_stream": 385, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-2503d718db82686056e62307", "kind": "dns", "frame_number": 22986, "timestamp_epoch": "1634914377.203005000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61310, "dst_port": 53, "tcp_stream": null, "udp_stream": 386, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-96da0bb04b9f41385e741b2e", "kind": "dns", "frame_number": 22987, "timestamp_epoch": "1634914377.285576000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61310, "tcp_stream": null, "udp_stream": 386, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7776bbbb875ab5ff8dce9352", "kind": "dns", "frame_number": 23000, "timestamp_epoch": "1634914381.640890000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52178, "dst_port": 53, "tcp_stream": null, "udp_stream": 387, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7b83d8237baf7f0588fe79e6", "kind": "dns", "frame_number": 23001, "timestamp_epoch": "1634914381.692467000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52178, "tcp_stream": null, "udp_stream": 387, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5e5ec957c8ea9b5037f20597", "kind": "dns", "frame_number": 23012, "timestamp_epoch": "1634914385.985262000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49465, "dst_port": 53, "tcp_stream": null, "udp_stream": 388, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7299967273496ea9cf523da7", "kind": "dns", "frame_number": 23013, "timestamp_epoch": "1634914386.057185000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49465, "tcp_stream": null, "udp_stream": 388, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e237c27bed5a6518c8fcc634", "kind": "dns", "frame_number": 23060, "timestamp_epoch": "1634914403.361170000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58541, "dst_port": 53, "tcp_stream": null, "udp_stream": 389, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-977c55534d806829bd59a5d2", "kind": "dns", "frame_number": 23061, "timestamp_epoch": "1634914403.421650000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58541, "tcp_stream": null, "udp_stream": 389, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4ba3f6227e8a9e416a37f949", "kind": "dns", "frame_number": 23073, "timestamp_epoch": "1634914404.879515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62043, "dst_port": 53, "tcp_stream": null, "udp_stream": 390, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-509200189c0c449e06637f34", "kind": "dns", "frame_number": 23074, "timestamp_epoch": "1634914404.879988000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62043, "tcp_stream": null, "udp_stream": 390, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-02ed4b378693a530afafc16c", "kind": "dns", "frame_number": 23075, "timestamp_epoch": "1634914404.881478000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49567, "dst_port": 53, "tcp_stream": null, "udp_stream": 391, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-dc34dc5df86d5404685049e0", "kind": "dns", "frame_number": 23076, "timestamp_epoch": "1634914404.881718000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49567, "tcp_stream": null, "udp_stream": 391, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6a0e31a471b6f638c7c13fdb", "kind": "dns", "frame_number": 23081, "timestamp_epoch": "1634914407.736616000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49172, "dst_port": 53, "tcp_stream": null, "udp_stream": 392, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b4eb55443bfeedef47eaf852", "kind": "dns", "frame_number": 23083, "timestamp_epoch": "1634914408.750775000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49172, "dst_port": 53, "tcp_stream": null, "udp_stream": 392, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-66af71f8976e4ce1a0ccab6c", "kind": "dns", "frame_number": 23084, "timestamp_epoch": "1634914408.839192000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49172, "tcp_stream": null, "udp_stream": 392, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2aa2fa34b2ea059b1f363b91", "kind": "dns", "frame_number": 23090, "timestamp_epoch": "1634914410.050467000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53668, "dst_port": 53, "tcp_stream": null, "udp_stream": 393, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-38e9dd5266da40e12c468165", "kind": "dns", "frame_number": 23091, "timestamp_epoch": "1634914410.104502000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53668, "tcp_stream": null, "udp_stream": 393, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-598389f635634a1a4d218338", "kind": "dns", "frame_number": 23104, "timestamp_epoch": "1634914416.268347000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54737, "dst_port": 53, "tcp_stream": null, "udp_stream": 394, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-eb37f16652817fdc96b27c2d", "kind": "dns", "frame_number": 23105, "timestamp_epoch": "1634914416.342137000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54737, "tcp_stream": null, "udp_stream": 394, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f1dff70476c26aa89d2fdbaf", "kind": "dns", "frame_number": 23141, "timestamp_epoch": "1634914433.658880000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65503, "dst_port": 53, "tcp_stream": null, "udp_stream": 395, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1dae00f597db1a851a64b521", "kind": "dns", "frame_number": 23142, "timestamp_epoch": "1634914433.706208000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65503, "tcp_stream": null, "udp_stream": 395, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c7fc8980506aad901c86d59", "kind": "dns", "frame_number": 23170, "timestamp_epoch": "1634914438.001567000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62076, "dst_port": 53, "tcp_stream": null, "udp_stream": 396, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dd01f3873a778bbb41efff22", "kind": "dns", "frame_number": 23171, "timestamp_epoch": "1634914438.158584000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62076, "tcp_stream": null, "udp_stream": 396, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-aaf4163e7e9a41d34a944029", "kind": "dns", "frame_number": 23179, "timestamp_epoch": "1634914442.533119000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52423, "dst_port": 53, "tcp_stream": null, "udp_stream": 397, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c2a1fd914b47ab7579dd0d6f", "kind": "dns", "frame_number": 23180, "timestamp_epoch": "1634914442.597151000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55048, "dst_port": 53, "tcp_stream": null, "udp_stream": 398, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-abafcd661ddaf6db65258556", "kind": "dns", "frame_number": 23181, "timestamp_epoch": "1634914442.597449000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55048, "tcp_stream": null, "udp_stream": 398, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-103e6537d5755c7a7600e963", "kind": "dns", "frame_number": 23183, "timestamp_epoch": "1634914442.597884000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65405, "dst_port": 53, "tcp_stream": null, "udp_stream": 399, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e87b8870e7a3e24cff054f66", "kind": "dns", "frame_number": 23184, "timestamp_epoch": "1634914442.598088000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65405, "tcp_stream": null, "udp_stream": 399, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-c1d1cd9661b7dc102b4ac14f", "kind": "dns", "frame_number": 23185, "timestamp_epoch": "1634914442.602988000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52423, "tcp_stream": null, "udp_stream": 397, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1ef65440341c3a6658e4b338", "kind": "dns", "frame_number": 23223, "timestamp_epoch": "1634914457.599081000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64390, "dst_port": 53, "tcp_stream": null, "udp_stream": 400, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2c9176b5dea419de85986a68", "kind": "dns", "frame_number": 23224, "timestamp_epoch": "1634914457.599390000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64390, "tcp_stream": null, "udp_stream": 400, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5518477c492722661d37d6c6", "kind": "dns", "frame_number": 23225, "timestamp_epoch": "1634914457.599827000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53584, "dst_port": 53, "tcp_stream": null, "udp_stream": 401, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-c3f3724ad52865874ee1f8a8", "kind": "dns", "frame_number": 23226, "timestamp_epoch": "1634914457.600047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53584, "tcp_stream": null, "udp_stream": 401, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e659488250a8ee2c5579caeb", "kind": "dns", "frame_number": 23228, "timestamp_epoch": "1634914459.910379000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57499, "dst_port": 53, "tcp_stream": null, "udp_stream": 402, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7522f88b869a2ff56382c198", "kind": "dns", "frame_number": 23229, "timestamp_epoch": "1634914459.960568000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57499, "tcp_stream": null, "udp_stream": 402, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-95f7daa7d44d9d3ee1c60620", "kind": "dns", "frame_number": 23239, "timestamp_epoch": "1634914464.299237000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57786, "dst_port": 53, "tcp_stream": null, "udp_stream": 403, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-42338ba7c54d17c36b42e973", "kind": "dns", "frame_number": 23240, "timestamp_epoch": "1634914464.364806000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57786, "tcp_stream": null, "udp_stream": 403, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9c029678b72550ad63d82e08", "kind": "dns", "frame_number": 23255, "timestamp_epoch": "1634914467.941439000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56387, "dst_port": 53, "tcp_stream": null, "udp_stream": 404, "fields": { "dns.flags.response": "False", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-70705a23bbeca1041f464d48", "kind": "dns", "frame_number": 23256, "timestamp_epoch": "1634914468.093909000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56387, "tcp_stream": null, "udp_stream": 404, "fields": { "dns.a": "129.246.14.238", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "reddew28c.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-c85399f513a5c9792cba7e8a", "kind": "dns", "frame_number": 23257, "timestamp_epoch": "1634914468.097708000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56388, "dst_port": 53, "tcp_stream": null, "udp_stream": 405, "fields": { "dns.flags.response": "False", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-0696b152cb07cbf251f4ad38", "kind": "dns", "frame_number": 23258, "timestamp_epoch": "1634914468.243632000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56388, "tcp_stream": null, "udp_stream": 405, "fields": { "dns.a": "9.241.189.20", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bluehail.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-344569ba1fc630ebf2a3aa81", "kind": "dns", "frame_number": 23259, "timestamp_epoch": "1634914468.247672000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56389, "dst_port": 53, "tcp_stream": null, "udp_stream": 406, "fields": { "dns.flags.response": "False", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-627b78b45ab48b983939af53", "kind": "dns", "frame_number": 23260, "timestamp_epoch": "1634914468.391909000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56389, "tcp_stream": null, "udp_stream": 406, "fields": { "dns.a": "26.85.198.164", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "whitestorm9p.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-f0d549dc5e4a1d30df23a3cd", "kind": "dns", "frame_number": 23266, "timestamp_epoch": "1634914471.703428000", "src_ip": "10.10.22.158", "dst_ip": "130.61.64.122", "src_port": 56390, "dst_port": 53, "tcp_stream": null, "udp_stream": 407, "fields": { "dns.flags.response": "False", "dns.qry.name": "aqsouhyw.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-25bb5c3784ff6ac691759326", "kind": "dns", "frame_number": 23267, "timestamp_epoch": "1634914471.800919000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60554, "dst_port": 53, "tcp_stream": null, "udp_stream": 408, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c46334cb29c65da39e2b011f", "kind": "dns", "frame_number": 23268, "timestamp_epoch": "1634914471.872656000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60554, "tcp_stream": null, "udp_stream": 408, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2b59bd57166902a9b310f295", "kind": "dns", "frame_number": 23269, "timestamp_epoch": "1634914471.872828000", "src_ip": "130.61.64.122", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56390, "tcp_stream": null, "udp_stream": 407, "fields": { "dns.a": "60.241.142.83", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "aqsouhyw.bazar", "dns.qry.type": "1" } }, { "event_id": "evt-a69bd3a4a3ed0f1e475812c1", "kind": "dns", "frame_number": 23324, "timestamp_epoch": "1634914485.052676000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59003, "dst_port": 53, "tcp_stream": null, "udp_stream": 409, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-ddec2315bfe1f13b4caeadb7", "kind": "dns", "frame_number": 23325, "timestamp_epoch": "1634914485.097975000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59003, "tcp_stream": null, "udp_stream": 409, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-dbe8cddeb6957ae47277f44d", "kind": "dns", "frame_number": 23345, "timestamp_epoch": "1634914489.144834000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60385, "dst_port": 53, "tcp_stream": null, "udp_stream": 410, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5224d7ccb8fd8f9914dfce07", "kind": "dns", "frame_number": 23346, "timestamp_epoch": "1634914489.225606000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60385, "tcp_stream": null, "udp_stream": 410, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b23b0b616c3908c9e3377349", "kind": "dns", "frame_number": 23357, "timestamp_epoch": "1634914493.551629000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53929, "dst_port": 53, "tcp_stream": null, "udp_stream": 411, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dc2e29c8e5fbc2346692da79", "kind": "dns", "frame_number": 23358, "timestamp_epoch": "1634914493.624284000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53929, "tcp_stream": null, "udp_stream": 411, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-339acc678ee019adb2bd4898", "kind": "dns", "frame_number": 23376, "timestamp_epoch": "1634914497.926175000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63967, "dst_port": 53, "tcp_stream": null, "udp_stream": 412, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d1dba61992eb0de104553703", "kind": "dns", "frame_number": 23377, "timestamp_epoch": "1634914498.010723000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63967, "tcp_stream": null, "udp_stream": 412, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cb667684886227a996faea0f", "kind": "dns", "frame_number": 23555, "timestamp_epoch": "1634914507.489178000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50308, "dst_port": 53, "tcp_stream": null, "udp_stream": 415, "fields": { "dns.flags.response": "False", "dns.qry.name": "myexternalip.com", "dns.qry.type": "1" } }, { "event_id": "evt-d7c76058a0f6499184225370", "kind": "dns", "frame_number": 23556, "timestamp_epoch": "1634914507.544364000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50308, "tcp_stream": null, "udp_stream": 415, "fields": { "dns.a": "34.117.59.81", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "myexternalip.com", "dns.qry.type": "1" } }, { "event_id": "evt-53a0fede3b369e026a29703e", "kind": "dns", "frame_number": 23614, "timestamp_epoch": "1634914515.380801000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51682, "dst_port": 53, "tcp_stream": null, "udp_stream": 416, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bb1c23cd504b1c8042835fac", "kind": "dns", "frame_number": 23615, "timestamp_epoch": "1634914515.437114000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51682, "tcp_stream": null, "udp_stream": 416, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9793814c14089619bb722a22", "kind": "dns", "frame_number": 23623, "timestamp_epoch": "1634914517.616724000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56724, "dst_port": 53, "tcp_stream": null, "udp_stream": 417, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-79641791d971679ca15550ce", "kind": "dns", "frame_number": 23624, "timestamp_epoch": "1634914517.617138000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56724, "tcp_stream": null, "udp_stream": 417, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4d86047ea6479f37d9b97aee", "kind": "dns", "frame_number": 23625, "timestamp_epoch": "1634914517.617816000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56304, "dst_port": 53, "tcp_stream": null, "udp_stream": 418, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-7346a954b61d377f7aa5ee27", "kind": "dns", "frame_number": 23626, "timestamp_epoch": "1634914517.618070000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56304, "tcp_stream": null, "udp_stream": 418, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6396a40b457cb489c007e6aa", "kind": "dns", "frame_number": 23633, "timestamp_epoch": "1634914519.754500000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62690, "dst_port": 53, "tcp_stream": null, "udp_stream": 419, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e21aaf6c763d2d42b46d6ec3", "kind": "dns", "frame_number": 23634, "timestamp_epoch": "1634914519.805555000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62690, "tcp_stream": null, "udp_stream": 419, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5c6358dbf4e0c66322a05f7a", "kind": "dns", "frame_number": 23657, "timestamp_epoch": "1634914524.145685000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65038, "dst_port": 53, "tcp_stream": null, "udp_stream": 420, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8d5ed2cfd2fda389ed9a1533", "kind": "dns", "frame_number": 23658, "timestamp_epoch": "1634914524.215233000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65038, "tcp_stream": null, "udp_stream": 420, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a46f4743c111fa66e94b719d", "kind": "dns", "frame_number": 23692, "timestamp_epoch": "1634914541.490415000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62276, "dst_port": 53, "tcp_stream": null, "udp_stream": 421, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b85ad26b6772acd76c186e2a", "kind": "dns", "frame_number": 23693, "timestamp_epoch": "1634914541.546506000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62276, "tcp_stream": null, "udp_stream": 421, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9c191964fec7bec3123e00dd", "kind": "dns", "frame_number": 23703, "timestamp_epoch": "1634914545.849030000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49570, "dst_port": 53, "tcp_stream": null, "udp_stream": 422, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-45c67b2cf25ff989f4c0a67b", "kind": "dns", "frame_number": 23704, "timestamp_epoch": "1634914545.913789000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49570, "tcp_stream": null, "udp_stream": 422, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6174e07a251c3f3a670b4e6b", "kind": "dns", "frame_number": 23716, "timestamp_epoch": "1634914550.208315000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54059, "dst_port": 53, "tcp_stream": null, "udp_stream": 423, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a3be63394cf668c746bd788f", "kind": "dns", "frame_number": 23717, "timestamp_epoch": "1634914550.266149000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54059, "tcp_stream": null, "udp_stream": 423, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7419a43cd3e85ac4415cb7e3", "kind": "dns", "frame_number": 23724, "timestamp_epoch": "1634914550.883692000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49461, "dst_port": 53, "tcp_stream": null, "udp_stream": 424, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-00715b880cf48ad83bf03102", "kind": "dns", "frame_number": 23725, "timestamp_epoch": "1634914550.884098000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49461, "tcp_stream": null, "udp_stream": 424, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-eb58f3ab392c8bd5c6b223eb", "kind": "dns", "frame_number": 23726, "timestamp_epoch": "1634914550.884845000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55613, "dst_port": 53, "tcp_stream": null, "udp_stream": 425, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-505eb38cb8668e5bc8c25fb8", "kind": "dns", "frame_number": 23727, "timestamp_epoch": "1634914550.885082000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55613, "tcp_stream": null, "udp_stream": 425, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-515db24be828236439e3838a", "kind": "dns", "frame_number": 23751, "timestamp_epoch": "1634914560.054347000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61921, "dst_port": 53, "tcp_stream": null, "udp_stream": 426, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-98d2ada30183296c888fbe6a", "kind": "dns", "frame_number": 23752, "timestamp_epoch": "1634914560.107824000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61921, "tcp_stream": null, "udp_stream": 426, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-a2da55fb7ba84f5b2532a51e", "kind": "dns", "frame_number": 23765, "timestamp_epoch": "1634914565.898515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53148, "dst_port": 53, "tcp_stream": null, "udp_stream": 427, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-b877a00b2f2fc0147bdf9bb1", "kind": "dns", "frame_number": 23766, "timestamp_epoch": "1634914565.898876000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53148, "tcp_stream": null, "udp_stream": 427, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c9fa0e5af08255cde7b2f377", "kind": "dns", "frame_number": 23767, "timestamp_epoch": "1634914565.899709000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50103, "dst_port": 53, "tcp_stream": null, "udp_stream": 428, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8e4d4af9044d14b2974c1797", "kind": "dns", "frame_number": 23768, "timestamp_epoch": "1634914565.899945000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50103, "tcp_stream": null, "udp_stream": 428, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-0b4717048e27a2e6d287ce2c", "kind": "dns", "frame_number": 23772, "timestamp_epoch": "1634914567.537551000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50444, "dst_port": 53, "tcp_stream": null, "udp_stream": 429, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1de64ed53f8a72d69ffe634e", "kind": "dns", "frame_number": 23773, "timestamp_epoch": "1634914567.623201000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50444, "tcp_stream": null, "udp_stream": 429, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3a498ed54c04a986890b4f79", "kind": "dns", "frame_number": 23782, "timestamp_epoch": "1634914571.927976000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63645, "dst_port": 53, "tcp_stream": null, "udp_stream": 430, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b8d6037728cb2bbd1c57a008", "kind": "dns", "frame_number": 23783, "timestamp_epoch": "1634914571.988347000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63645, "tcp_stream": null, "udp_stream": 430, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d24ad53d03275e22933e3934", "kind": "dns", "frame_number": 23795, "timestamp_epoch": "1634914576.302311000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64431, "dst_port": 53, "tcp_stream": null, "udp_stream": 431, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bf68a891437a82847d809a8e", "kind": "dns", "frame_number": 23796, "timestamp_epoch": "1634914576.357418000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64431, "tcp_stream": null, "udp_stream": 431, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c7f06e79ba87ef805fe0f43b", "kind": "dns", "frame_number": 23838, "timestamp_epoch": "1634914593.647863000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57182, "dst_port": 53, "tcp_stream": null, "udp_stream": 432, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-15621c9f66fcf5993282ac1c", "kind": "dns", "frame_number": 23839, "timestamp_epoch": "1634914593.761400000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57182, "tcp_stream": null, "udp_stream": 432, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1a9ff124f08e0cae576bfa57", "kind": "dns", "frame_number": 23846, "timestamp_epoch": "1634914598.069119000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51522, "dst_port": 53, "tcp_stream": null, "udp_stream": 433, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3693dd1207230f1c835048c8", "kind": "dns", "frame_number": 23847, "timestamp_epoch": "1634914598.164685000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51522, "tcp_stream": null, "udp_stream": 433, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a898cafe5339e838d61029ab", "kind": "dns", "frame_number": 23857, "timestamp_epoch": "1634914602.460457000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51962, "dst_port": 53, "tcp_stream": null, "udp_stream": 434, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b1fc5988f69da1747ff6ad22", "kind": "dns", "frame_number": 23858, "timestamp_epoch": "1634914602.524781000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51962, "tcp_stream": null, "udp_stream": 434, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d8157e504bc474954cdcb15", "kind": "dns", "frame_number": 23899, "timestamp_epoch": "1634914619.850694000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60818, "dst_port": 53, "tcp_stream": null, "udp_stream": 435, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ec2e30d18456201509672e1a", "kind": "dns", "frame_number": 23900, "timestamp_epoch": "1634914619.906244000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60818, "tcp_stream": null, "udp_stream": 435, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c1889c48a944f9afa89adfdb", "kind": "dns", "frame_number": 23910, "timestamp_epoch": "1634914624.209858000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50255, "dst_port": 53, "tcp_stream": null, "udp_stream": 436, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a8986e7f49a3bc46cd286db4", "kind": "dns", "frame_number": 23911, "timestamp_epoch": "1634914624.258371000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50255, "tcp_stream": null, "udp_stream": 436, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2bb8451372a5db2e38390235", "kind": "dns", "frame_number": 23921, "timestamp_epoch": "1634914625.900194000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49330, "dst_port": 53, "tcp_stream": null, "udp_stream": 437, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-7adaa441561b2bd462b5e328", "kind": "dns", "frame_number": 23922, "timestamp_epoch": "1634914625.900650000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49330, "tcp_stream": null, "udp_stream": 437, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-f1a4d9e86b8d2a702008d870", "kind": "dns", "frame_number": 23923, "timestamp_epoch": "1634914625.901247000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64274, "dst_port": 53, "tcp_stream": null, "udp_stream": 438, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-30e7d2349085faf0e8d598fe", "kind": "dns", "frame_number": 23924, "timestamp_epoch": "1634914625.901471000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64274, "tcp_stream": null, "udp_stream": 438, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9124831d3350d8ec71dd31af", "kind": "dns", "frame_number": 23926, "timestamp_epoch": "1634914628.554786000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58065, "dst_port": 53, "tcp_stream": null, "udp_stream": 439, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a730b07b09afbe0aed328365", "kind": "dns", "frame_number": 23927, "timestamp_epoch": "1634914628.754898000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58065, "tcp_stream": null, "udp_stream": 439, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-49e0ee360cacc4937138c98e", "kind": "dns", "frame_number": 23947, "timestamp_epoch": "1634914635.055933000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53439, "dst_port": 53, "tcp_stream": null, "udp_stream": 440, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-42cc24308804ced451d3c18b", "kind": "dns", "frame_number": 23948, "timestamp_epoch": "1634914635.115197000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53439, "tcp_stream": null, "udp_stream": 440, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-7c5bca664ec3b88fc6b2e5bf", "kind": "dns", "frame_number": 23969, "timestamp_epoch": "1634914646.070616000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64919, "dst_port": 53, "tcp_stream": null, "udp_stream": 441, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-52da3632cc94261acdab6805", "kind": "dns", "frame_number": 23970, "timestamp_epoch": "1634914646.127539000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64919, "tcp_stream": null, "udp_stream": 441, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fa8e9f571bfaaebce3b3c1f4", "kind": "dns", "frame_number": 23983, "timestamp_epoch": "1634914650.430369000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54050, "dst_port": 53, "tcp_stream": null, "udp_stream": 442, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-439b4bf0d865e2acb863e7f8", "kind": "dns", "frame_number": 23984, "timestamp_epoch": "1634914650.501931000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54050, "tcp_stream": null, "udp_stream": 442, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4dcc404ef98c531cfe367fc8", "kind": "dns", "frame_number": 23999, "timestamp_epoch": "1634914654.852534000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54544, "dst_port": 53, "tcp_stream": null, "udp_stream": 443, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a86ece4a74f5889f2061df73", "kind": "dns", "frame_number": 24000, "timestamp_epoch": "1634914654.916546000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54544, "tcp_stream": null, "udp_stream": 443, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ea25348322e2fa5ff608e9f6", "kind": "dns", "frame_number": 24008, "timestamp_epoch": "1634914656.213062000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61695, "dst_port": 53, "tcp_stream": null, "udp_stream": 444, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5d36d33b47945f5dd6498bd8", "kind": "dns", "frame_number": 24009, "timestamp_epoch": "1634914656.213481000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61695, "tcp_stream": null, "udp_stream": 444, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-223b6bbcbbf00c3937514aff", "kind": "dns", "frame_number": 24011, "timestamp_epoch": "1634914656.214359000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51308, "dst_port": 53, "tcp_stream": null, "udp_stream": 445, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e1568c97063bb5695d45a4bb", "kind": "dns", "frame_number": 24012, "timestamp_epoch": "1634914656.214597000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51308, "tcp_stream": null, "udp_stream": 445, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4eb69593dc2454a8cde74eda", "kind": "dns", "frame_number": 24038, "timestamp_epoch": "1634914671.229286000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51532, "dst_port": 53, "tcp_stream": null, "udp_stream": 446, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-65dea31b4f32f36d914753d2", "kind": "dns", "frame_number": 24039, "timestamp_epoch": "1634914671.229754000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51532, "tcp_stream": null, "udp_stream": 446, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4c15deadd0047826b68561ea", "kind": "dns", "frame_number": 24040, "timestamp_epoch": "1634914671.230546000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64098, "dst_port": 53, "tcp_stream": null, "udp_stream": 447, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-cbadf1766db9d4c762ea4791", "kind": "dns", "frame_number": 24041, "timestamp_epoch": "1634914671.230734000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64098, "tcp_stream": null, "udp_stream": 447, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-0d10673503789ceae6d9c686", "kind": "dns", "frame_number": 24043, "timestamp_epoch": "1634914672.258965000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56825, "dst_port": 53, "tcp_stream": null, "udp_stream": 448, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-44a3071abfda61e47f01d787", "kind": "dns", "frame_number": 24044, "timestamp_epoch": "1634914672.329774000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56825, "tcp_stream": null, "udp_stream": 448, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-574266e9e7380aef8a351b77", "kind": "dns", "frame_number": 24057, "timestamp_epoch": "1634914676.665460000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57309, "dst_port": 53, "tcp_stream": null, "udp_stream": 449, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dfe1844f9fbbe2f535a890af", "kind": "dns", "frame_number": 24058, "timestamp_epoch": "1634914676.731362000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57309, "tcp_stream": null, "udp_stream": 449, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cad130c787bbe3ba097f2ef2", "kind": "dns", "frame_number": 24079, "timestamp_epoch": "1634914681.040471000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60634, "dst_port": 53, "tcp_stream": null, "udp_stream": 450, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d6ddceed4852c05e6e3a2e01", "kind": "dns", "frame_number": 24081, "timestamp_epoch": "1634914681.116517000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60634, "tcp_stream": null, "udp_stream": 450, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4d41fe0b034c9d757d16af28", "kind": "dns", "frame_number": 24139, "timestamp_epoch": "1634914695.058142000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59105, "dst_port": 53, "tcp_stream": null, "udp_stream": 451, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-fe2cf8c8e7bdf357ce298ea0", "kind": "dns", "frame_number": 24140, "timestamp_epoch": "1634914695.104356000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59105, "tcp_stream": null, "udp_stream": 451, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-70c6020d8a07887e3c82e818", "kind": "dns", "frame_number": 24145, "timestamp_epoch": "1634914698.588864000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65425, "dst_port": 53, "tcp_stream": null, "udp_stream": 452, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8d009a9454e5692af0c22825", "kind": "dns", "frame_number": 24147, "timestamp_epoch": "1634914698.648802000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65425, "tcp_stream": null, "udp_stream": 452, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8a654354e2b199edf1583d55", "kind": "dns", "frame_number": 24160, "timestamp_epoch": "1634914702.962937000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58099, "dst_port": 53, "tcp_stream": null, "udp_stream": 453, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-da5ea417dbc6e874bead063f", "kind": "dns", "frame_number": 24161, "timestamp_epoch": "1634914703.042778000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58099, "tcp_stream": null, "udp_stream": 453, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-98d24f74d6a0aea2d2897808", "kind": "dns", "frame_number": 24170, "timestamp_epoch": "1634914704.263857000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50216, "dst_port": 53, "tcp_stream": null, "udp_stream": 454, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-cf4216153881fdcdfbdf42ae", "kind": "dns", "frame_number": 24171, "timestamp_epoch": "1634914704.264229000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50216, "tcp_stream": null, "udp_stream": 454, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-df6077b4998bf7486b4a4b7b", "kind": "dns", "frame_number": 24173, "timestamp_epoch": "1634914704.265529000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59262, "dst_port": 53, "tcp_stream": null, "udp_stream": 455, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d6f9976d3c3500390b17f1f1", "kind": "dns", "frame_number": 24174, "timestamp_epoch": "1634914704.265783000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59262, "tcp_stream": null, "udp_stream": 455, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-85aafc7bf4871a7620865b6c", "kind": "dns", "frame_number": 24179, "timestamp_epoch": "1634914707.353674000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60584, "dst_port": 53, "tcp_stream": null, "udp_stream": 456, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-64a563fed3669bfce33ae08e", "kind": "dns", "frame_number": 24180, "timestamp_epoch": "1634914707.405047000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60584, "tcp_stream": null, "udp_stream": 456, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-188fbee9abe0c75a520c56c0", "kind": "dns", "frame_number": 24214, "timestamp_epoch": "1634914719.262008000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53430, "dst_port": 53, "tcp_stream": null, "udp_stream": 457, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-420abb47bd74661942d46f73", "kind": "dns", "frame_number": 24215, "timestamp_epoch": "1634914719.262326000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53430, "tcp_stream": null, "udp_stream": 457, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c5f2b5e6fddb10df3203582", "kind": "dns", "frame_number": 24216, "timestamp_epoch": "1634914719.262930000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65527, "dst_port": 53, "tcp_stream": null, "udp_stream": 458, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-0ae2d1e39d444311989fb18f", "kind": "dns", "frame_number": 24217, "timestamp_epoch": "1634914719.263165000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65527, "tcp_stream": null, "udp_stream": 458, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-df27596f8e6c8947e7ccef92", "kind": "dns", "frame_number": 24232, "timestamp_epoch": "1634914724.667291000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57664, "dst_port": 53, "tcp_stream": null, "udp_stream": 459, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a0a3b014a181797342d528cf", "kind": "dns", "frame_number": 24233, "timestamp_epoch": "1634914724.728318000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57664, "tcp_stream": null, "udp_stream": 459, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1903211ac56128b77a9d4af2", "kind": "dns", "frame_number": 24244, "timestamp_epoch": "1634914725.058995000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59551, "dst_port": 53, "tcp_stream": null, "udp_stream": 460, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-c647090a8fb7e4a34999d35b", "kind": "dns", "frame_number": 24245, "timestamp_epoch": "1634914725.108946000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59551, "tcp_stream": null, "udp_stream": 460, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-5b6418e4f3970095bce0a16f", "kind": "dns", "frame_number": 24250, "timestamp_epoch": "1634914729.058192000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59191, "dst_port": 53, "tcp_stream": null, "udp_stream": 461, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b78e326a1870ccfe83400368", "kind": "dns", "frame_number": 24251, "timestamp_epoch": "1634914729.118299000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59191, "tcp_stream": null, "udp_stream": 461, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d0e6d7650ca42aa4511934ed", "kind": "dns", "frame_number": 24263, "timestamp_epoch": "1634914733.448996000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51721, "dst_port": 53, "tcp_stream": null, "udp_stream": 462, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fd71f1d067b68ce18737bc3a", "kind": "dns", "frame_number": 24265, "timestamp_epoch": "1634914733.541105000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51721, "tcp_stream": null, "udp_stream": 462, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7401e0717dd94d95b60a3424", "kind": "dns", "frame_number": 24302, "timestamp_epoch": "1634914750.963986000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64444, "dst_port": 53, "tcp_stream": null, "udp_stream": 463, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bfb8e51caf8bb425cf9c1583", "kind": "dns", "frame_number": 24303, "timestamp_epoch": "1634914751.025778000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64444, "tcp_stream": null, "udp_stream": 463, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f61ea1817cf44c209956df29", "kind": "dns", "frame_number": 24312, "timestamp_epoch": "1634914755.322795000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52705, "dst_port": 53, "tcp_stream": null, "udp_stream": 464, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-277357e7568ba509ce1706c3", "kind": "dns", "frame_number": 24313, "timestamp_epoch": "1634914755.408217000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52705, "tcp_stream": null, "udp_stream": 464, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bce24b9697f2b34b35e103a6", "kind": "dns", "frame_number": 24326, "timestamp_epoch": "1634914759.777763000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60894, "dst_port": 53, "tcp_stream": null, "udp_stream": 465, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-382fd4287378066795d9e0d9", "kind": "dns", "frame_number": 24327, "timestamp_epoch": "1634914759.852247000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60894, "tcp_stream": null, "udp_stream": 465, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-22b49efc5c4bff3e161cc0e3", "kind": "dns", "frame_number": 24365, "timestamp_epoch": "1634914770.058961000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59608, "dst_port": 53, "tcp_stream": null, "udp_stream": 466, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-aaff7dc7e8a5efaddba1d10a", "kind": "dns", "frame_number": 24366, "timestamp_epoch": "1634914770.119866000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59608, "dst_port": 53, "tcp_stream": null, "udp_stream": 466, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-80034000527b9cbbff3d4a9d", "kind": "dns", "frame_number": 24369, "timestamp_epoch": "1634914771.135958000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59608, "dst_port": 53, "tcp_stream": null, "udp_stream": 466, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-a51a41896d353efe420f37d4", "kind": "dns", "frame_number": 24376, "timestamp_epoch": "1634914773.136587000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59608, "dst_port": 53, "tcp_stream": null, "udp_stream": 466, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-11161f36e60dcc91bd96b89a", "kind": "dns", "frame_number": 24379, "timestamp_epoch": "1634914773.172415000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59608, "tcp_stream": null, "udp_stream": 466, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-8c5d98463ab7c9e6fab8bc60", "kind": "dns", "frame_number": 24388, "timestamp_epoch": "1634914777.262213000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54402, "dst_port": 53, "tcp_stream": null, "udp_stream": 467, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7b0efdaaa19f594d701293aa", "kind": "dns", "frame_number": 24389, "timestamp_epoch": "1634914777.363535000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54402, "tcp_stream": null, "udp_stream": 467, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-abb8977327f56ad4dfee6172", "kind": "dns", "frame_number": 24400, "timestamp_epoch": "1634914779.280959000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63297, "dst_port": 53, "tcp_stream": null, "udp_stream": 468, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-9142fa41e33163feb0bfc48d", "kind": "dns", "frame_number": 24401, "timestamp_epoch": "1634914779.281281000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63297, "tcp_stream": null, "udp_stream": 468, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-3060a88d7f0f45b2af2c7b16", "kind": "dns", "frame_number": 24402, "timestamp_epoch": "1634914779.281978000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55037, "dst_port": 53, "tcp_stream": null, "udp_stream": 469, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f90708f8fc3f2f8d84627fe9", "kind": "dns", "frame_number": 24403, "timestamp_epoch": "1634914779.282226000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55037, "tcp_stream": null, "udp_stream": 469, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-fdc829254d5081002b4118c0", "kind": "dns", "frame_number": 24408, "timestamp_epoch": "1634914781.997548000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57359, "dst_port": 53, "tcp_stream": null, "udp_stream": 470, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-514ea17581e92d906848e1ad", "kind": "dns", "frame_number": 24409, "timestamp_epoch": "1634914782.046361000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57359, "tcp_stream": null, "udp_stream": 470, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7e663972648d7c1d7950eeca", "kind": "dns", "frame_number": 24418, "timestamp_epoch": "1634914784.232618000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61316, "dst_port": 53, "tcp_stream": null, "udp_stream": 471, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-8ba16d0f7c7523a4228bd203", "kind": "dns", "frame_number": 24419, "timestamp_epoch": "1634914784.233039000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61316, "tcp_stream": null, "udp_stream": 471, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-774508f01147450d5b925bc1", "kind": "dns", "frame_number": 24420, "timestamp_epoch": "1634914784.233905000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63654, "dst_port": 53, "tcp_stream": null, "udp_stream": 472, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-675ca7d1c1b078c7664d9225", "kind": "dns", "frame_number": 24421, "timestamp_epoch": "1634914784.234191000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63654, "tcp_stream": null, "udp_stream": 472, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f5304d6fa085af4901582d48", "kind": "dns", "frame_number": 24424, "timestamp_epoch": "1634914786.387714000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49244, "dst_port": 53, "tcp_stream": null, "udp_stream": 473, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7a10ec1e62d9297bb5329a98", "kind": "dns", "frame_number": 24425, "timestamp_epoch": "1634914786.433525000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49244, "tcp_stream": null, "udp_stream": 473, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b73d5f29500d81c1cea5653e", "kind": "dns", "frame_number": 24459, "timestamp_epoch": "1634914799.232644000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54301, "dst_port": 53, "tcp_stream": null, "udp_stream": 474, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2738e899bea68d1888863a91", "kind": "dns", "frame_number": 24460, "timestamp_epoch": "1634914799.233036000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54301, "tcp_stream": null, "udp_stream": 474, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-28cb6a7cad207133691e5752", "kind": "dns", "frame_number": 24461, "timestamp_epoch": "1634914799.233859000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62173, "dst_port": 53, "tcp_stream": null, "udp_stream": 475, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9df2dc144a0057a569b0e7a6", "kind": "dns", "frame_number": 24462, "timestamp_epoch": "1634914799.234105000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62173, "tcp_stream": null, "udp_stream": 475, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f5f9e798491bd7861e2c7fbc", "kind": "dns", "frame_number": 24471, "timestamp_epoch": "1634914803.811119000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49594, "dst_port": 53, "tcp_stream": null, "udp_stream": 476, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-93fc9e5725e9df71770d0875", "kind": "dns", "frame_number": 24472, "timestamp_epoch": "1634914803.891991000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49594, "tcp_stream": null, "udp_stream": 476, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-910ac2a41f7abffee227936b", "kind": "dns", "frame_number": 24482, "timestamp_epoch": "1634914808.246922000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62548, "dst_port": 53, "tcp_stream": null, "udp_stream": 477, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-eb3fddba51beaa1e31cc09b6", "kind": "dns", "frame_number": 24483, "timestamp_epoch": "1634914808.297963000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62548, "tcp_stream": null, "udp_stream": 477, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-89511aa82725659a90dd8041", "kind": "dns", "frame_number": 24490, "timestamp_epoch": "1634914812.638408000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56485, "dst_port": 53, "tcp_stream": null, "udp_stream": 478, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8bb422659f344634e4f85739", "kind": "dns", "frame_number": 24491, "timestamp_epoch": "1634914812.717757000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56485, "tcp_stream": null, "udp_stream": 478, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c82ff38fbdd58e4b5250841a", "kind": "dns", "frame_number": 24546, "timestamp_epoch": "1634914829.997662000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65426, "dst_port": 53, "tcp_stream": null, "udp_stream": 479, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-91fdf5ab6f1e7c9bcb3efffc", "kind": "dns", "frame_number": 24547, "timestamp_epoch": "1634914830.088341000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65426, "tcp_stream": null, "udp_stream": 479, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0a5458e84f55764bcc0d14c2", "kind": "dns", "frame_number": 24558, "timestamp_epoch": "1634914834.388972000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52270, "dst_port": 53, "tcp_stream": null, "udp_stream": 480, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-57b4186eba5cb2275a34805e", "kind": "dns", "frame_number": 24559, "timestamp_epoch": "1634914834.451060000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52270, "tcp_stream": null, "udp_stream": 480, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ed6ff70bb284431c0cb03646", "kind": "dns", "frame_number": 24585, "timestamp_epoch": "1634914851.166472000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62570, "dst_port": 53, "tcp_stream": null, "udp_stream": 481, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-31fd0556bad149fda99d8f62", "kind": "dns", "frame_number": 24587, "timestamp_epoch": "1634914851.166836000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62570, "tcp_stream": null, "udp_stream": 481, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-ff92bd12c66c1a64aad34696", "kind": "dns", "frame_number": 24590, "timestamp_epoch": "1634914851.167979000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52061, "dst_port": 53, "tcp_stream": null, "udp_stream": 483, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-33795f1ee0cfd8b295006374", "kind": "dns", "frame_number": 24591, "timestamp_epoch": "1634914851.168976000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52061, "tcp_stream": null, "udp_stream": 483, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-a71407100f7d9b5ea0b76188", "kind": "dns", "frame_number": 24629, "timestamp_epoch": "1634914859.224037000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49641, "dst_port": 53, "tcp_stream": null, "udp_stream": 484, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e0fca9962168704ab25e2d43", "kind": "dns", "frame_number": 24630, "timestamp_epoch": "1634914859.224438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49641, "tcp_stream": null, "udp_stream": 484, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-47ab9d532900be164ddde806", "kind": "dns", "frame_number": 24631, "timestamp_epoch": "1634914859.224922000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63950, "dst_port": 53, "tcp_stream": null, "udp_stream": 485, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-f1916f5ad9424c78b91aca87", "kind": "dns", "frame_number": 24632, "timestamp_epoch": "1634914859.280742000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63950, "tcp_stream": null, "udp_stream": 485, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9394dde45ebc5b3614e3b818", "kind": "dns", "frame_number": 24661, "timestamp_epoch": "1634914872.367380000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52012, "dst_port": 53, "tcp_stream": null, "udp_stream": 486, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-bfe34a9b99831d69d9cbf766", "kind": "dns", "frame_number": 24662, "timestamp_epoch": "1634914872.367876000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52012, "tcp_stream": null, "udp_stream": 486, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2b2616f497fc8c197463aa2f", "kind": "dns", "frame_number": 24663, "timestamp_epoch": "1634914872.368374000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64510, "dst_port": 53, "tcp_stream": null, "udp_stream": 487, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-74c897ac392695b09e196e53", "kind": "dns", "frame_number": 24664, "timestamp_epoch": "1634914872.368608000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64510, "tcp_stream": null, "udp_stream": 487, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-867b3b60c94567a5f789c322", "kind": "dns", "frame_number": 24713, "timestamp_epoch": "1634914887.359326000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59387, "dst_port": 53, "tcp_stream": null, "udp_stream": 488, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-7641e01354518c92c866a7bc", "kind": "dns", "frame_number": 24714, "timestamp_epoch": "1634914887.359843000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59387, "tcp_stream": null, "udp_stream": 488, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4b25cbe093b993bbdbaf7b2a", "kind": "dns", "frame_number": 24715, "timestamp_epoch": "1634914887.360530000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64653, "dst_port": 53, "tcp_stream": null, "udp_stream": 489, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-126bfb9777c708f38ef56a4b", "kind": "dns", "frame_number": 24716, "timestamp_epoch": "1634914887.360763000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64653, "tcp_stream": null, "udp_stream": 489, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-dabbb1a1121c517609f0ee5d", "kind": "dns", "frame_number": 24769, "timestamp_epoch": "1634914905.031554000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58092, "dst_port": 53, "tcp_stream": null, "udp_stream": 490, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-6a51b9856aaadeac129a0822", "kind": "dns", "frame_number": 24770, "timestamp_epoch": "1634914905.079895000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58092, "tcp_stream": null, "udp_stream": 490, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d361e17a5aa04594ee88a289", "kind": "dns", "frame_number": 24787, "timestamp_epoch": "1634914911.840865000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51597, "dst_port": 53, "tcp_stream": null, "udp_stream": 491, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-157f2fe847942be1d659c8ab", "kind": "dns", "frame_number": 24790, "timestamp_epoch": "1634914911.841181000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51597, "tcp_stream": null, "udp_stream": 491, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-bed0cf84d72057012300ec92", "kind": "dns", "frame_number": 24795, "timestamp_epoch": "1634914911.844792000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53937, "dst_port": 53, "tcp_stream": null, "udp_stream": 493, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-0ae1f4fa2e3a342778d86f77", "kind": "dns", "frame_number": 24796, "timestamp_epoch": "1634914911.845809000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53937, "tcp_stream": null, "udp_stream": 493, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-53d59ae4bdb62eb9d7364bbe", "kind": "dns", "frame_number": 24861, "timestamp_epoch": "1634914930.936664000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 57951, "dst_port": 53, "tcp_stream": null, "udp_stream": 494, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2e00c9112bf24e1b47ea1e25", "kind": "dns", "frame_number": 24862, "timestamp_epoch": "1634914930.937051000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57951, "tcp_stream": null, "udp_stream": 494, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-fc2dedb07f7b4171519b413e", "kind": "dns", "frame_number": 24863, "timestamp_epoch": "1634914930.937510000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55444, "dst_port": 53, "tcp_stream": null, "udp_stream": 495, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-ce4de8db63602fce893d529c", "kind": "dns", "frame_number": 24864, "timestamp_epoch": "1634914930.937711000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55444, "tcp_stream": null, "udp_stream": 495, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-731441c76eecaa0b1a565069", "kind": "dns", "frame_number": 25085, "timestamp_epoch": "1634914943.549678000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50859, "dst_port": 53, "tcp_stream": null, "udp_stream": 496, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-36afb1324fc029a30388aa6a", "kind": "dns", "frame_number": 25086, "timestamp_epoch": "1634914943.549966000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50859, "tcp_stream": null, "udp_stream": 496, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-4e9b79a3af16598760c034a1", "kind": "dns", "frame_number": 25092, "timestamp_epoch": "1634914943.551261000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56784, "dst_port": 53, "tcp_stream": null, "udp_stream": 498, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-d18f2ba860d442293befa145", "kind": "dns", "frame_number": 25093, "timestamp_epoch": "1634914943.552065000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56784, "tcp_stream": null, "udp_stream": 498, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-7e03fbed9863a193d1b61564", "kind": "dns", "frame_number": 25941, "timestamp_epoch": "1634914947.372907000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56589, "dst_port": 53, "tcp_stream": null, "udp_stream": 499, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5c704ce28eb414cbb0a68d27", "kind": "dns", "frame_number": 25942, "timestamp_epoch": "1634914947.373433000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56589, "tcp_stream": null, "udp_stream": 499, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c0ffa44b75b1d1e21d89699e", "kind": "dns", "frame_number": 25943, "timestamp_epoch": "1634914947.374201000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52000, "dst_port": 53, "tcp_stream": null, "udp_stream": 500, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1f2bc04435ea21db00218a16", "kind": "dns", "frame_number": 25944, "timestamp_epoch": "1634914947.374424000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52000, "tcp_stream": null, "udp_stream": 500, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8e3bc64668e0bd330417882b", "kind": "dns", "frame_number": 25950, "timestamp_epoch": "1634914948.901586000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49686, "dst_port": 53, "tcp_stream": null, "udp_stream": 501, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-63270463fcb3f1586812a796", "kind": "dns", "frame_number": 25951, "timestamp_epoch": "1634914948.901928000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49686, "tcp_stream": null, "udp_stream": 501, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-72b011951028d571b180d5dd", "kind": "dns", "frame_number": 25952, "timestamp_epoch": "1634914948.902470000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49267, "dst_port": 53, "tcp_stream": null, "udp_stream": 502, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-c4d84328c838d6a136ca5e1b", "kind": "dns", "frame_number": 25953, "timestamp_epoch": "1634914948.902740000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49267, "tcp_stream": null, "udp_stream": 502, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-71cae627b0f4752fe175c0bc", "kind": "dns", "frame_number": 25955, "timestamp_epoch": "1634914950.030901000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58594, "dst_port": 53, "tcp_stream": null, "udp_stream": 503, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-43d53a9b2538166b0837d24a", "kind": "dns", "frame_number": 25956, "timestamp_epoch": "1634914950.075065000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58594, "dst_port": 53, "tcp_stream": null, "udp_stream": 503, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d47f8cd621888e5575c6f240", "kind": "dns", "frame_number": 25957, "timestamp_epoch": "1634914950.088184000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58594, "tcp_stream": null, "udp_stream": 503, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-1aa945dc42dec7483441fb5c", "kind": "dns", "frame_number": 26150, "timestamp_epoch": "1634914986.188846000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 50671, "dst_port": 53, "tcp_stream": null, "udp_stream": 505, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-4f01fd0445f5b3a69e55a5d6", "kind": "dns", "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 50671, "tcp_stream": null, "udp_stream": 505, "fields": { "dns.a": "40.126.29.11,40.126.29.15,40.126.29.12,40.126.29.9,40.126.29.7,40.126.29.8,40.126.29.5,40.126.29.14", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,san.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-12358d718d63caaee727fe97", "kind": "dns", "frame_number": 26197, "timestamp_epoch": "1634914995.224941000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58595, "dst_port": 53, "tcp_stream": null, "udp_stream": 508, "fields": { "dns.flags.response": "False", "dns.qry.name": "22.22.10.10.in-addr.arpa", "dns.qry.type": "12" } }, { "event_id": "evt-51f7907e98a8ba0e0afcc057", "kind": "dns", "frame_number": 26198, "timestamp_epoch": "1634914995.225313000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58595, "tcp_stream": null, "udp_stream": 508, "fields": { "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "22.22.10.10.in-addr.arpa", "dns.qry.type": "12" } }, { "event_id": "evt-9b6ccef9e7948d4277ce9eb9", "kind": "dns", "frame_number": 26199, "timestamp_epoch": "1634914995.227977000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58596, "dst_port": 53, "tcp_stream": null, "udp_stream": 509, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.ENEMYWATCH.enemywatch.net", "dns.qry.type": "255" } }, { "event_id": "evt-0709a6c1b2a721a21d372440", "kind": "dns", "frame_number": 26200, "timestamp_epoch": "1634914995.228221000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58596, "tcp_stream": null, "udp_stream": 509, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.ENEMYWATCH.enemywatch.net", "dns.qry.type": "255" } }, { "event_id": "evt-6205905deb3c53e08bc48b14", "kind": "dns", "frame_number": 26201, "timestamp_epoch": "1634914995.228528000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58597, "dst_port": 53, "tcp_stream": null, "udp_stream": 510, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.dc._msdcs.ENEMYWATCH", "dns.qry.type": "255" } }, { "event_id": "evt-7af9520a24945aec5bd905c3", "kind": "dns", "frame_number": 26202, "timestamp_epoch": "1634914995.292294000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58597, "tcp_stream": null, "udp_stream": 510, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.dc._msdcs.ENEMYWATCH", "dns.qry.type": "255" } }, { "event_id": "evt-fd355077447170d14607a3f3", "kind": "dns", "frame_number": 29041, "timestamp_epoch": "1634915003.536401000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51650, "dst_port": 53, "tcp_stream": null, "udp_stream": 511, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9468e0d5f733dc8237bf07e0", "kind": "dns", "frame_number": 29042, "timestamp_epoch": "1634915003.536696000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51650, "tcp_stream": null, "udp_stream": 511, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ca4e3570a517445a541a79ab", "kind": "dns", "frame_number": 29045, "timestamp_epoch": "1634915005.889025000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56611, "dst_port": 53, "tcp_stream": null, "udp_stream": 513, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a1b5082a97c557f24bcfa4bc", "kind": "dns", "frame_number": 29046, "timestamp_epoch": "1634915005.889413000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56611, "tcp_stream": null, "udp_stream": 513, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bbc4958d9e63b702282cb393", "kind": "dns", "frame_number": 29179, "timestamp_epoch": "1634915013.197718000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59813, "dst_port": 53, "tcp_stream": null, "udp_stream": 516, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-38a0c023e555f2fdd18e4c2c", "kind": "dns", "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59813, "tcp_stream": null, "udp_stream": 516, "fields": { "dns.a": "40.126.29.15,40.126.29.12,40.126.29.9,40.126.29.7,40.126.29.8,40.126.29.5,40.126.29.14,40.126.29.11", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,san.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-947e1ebf54a120a35d02bed2", "kind": "dns", "frame_number": 29342, "timestamp_epoch": "1634915040.620279000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60620, "dst_port": 53, "tcp_stream": null, "udp_stream": 518, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-612d684b50d78200fecd2249", "kind": "dns", "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60620, "tcp_stream": null, "udp_stream": 518, "fields": { "dns.a": "40.126.29.12,40.126.29.9,40.126.29.7,40.126.29.8,40.126.29.5,40.126.29.14,40.126.29.11,40.126.29.15", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,san.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-929579a16cb1abbbfdcdb713", "kind": "dns", "frame_number": 29942, "timestamp_epoch": "1634915146.452494000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59039, "dst_port": 53, "tcp_stream": null, "udp_stream": 519, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-63948beffee544b5bdeb7f99", "kind": "dns", "frame_number": 29943, "timestamp_epoch": "1634915146.452914000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59039, "tcp_stream": null, "udp_stream": 519, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-b3bc6b62484cab267a538c1a", "kind": "dns", "frame_number": 29950, "timestamp_epoch": "1634915146.580837000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52270, "dst_port": 53, "tcp_stream": null, "udp_stream": 521, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4b6c934ead282048fbe8d821", "kind": "dns", "frame_number": 29951, "timestamp_epoch": "1634915146.581180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52270, "tcp_stream": null, "udp_stream": 521, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bd8d19c185a542a060bec8db", "kind": "dns", "frame_number": 29982, "timestamp_epoch": "1634915169.223385000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63321, "dst_port": 53, "tcp_stream": null, "udp_stream": 523, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3c8e8e5bba265b39c047843c", "kind": "dns", "frame_number": 29984, "timestamp_epoch": "1634915169.318743000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63321, "tcp_stream": null, "udp_stream": 523, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-55995faa98083739db740755", "kind": "dns", "frame_number": 30020, "timestamp_epoch": "1634915186.612498000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51503, "dst_port": 53, "tcp_stream": null, "udp_stream": 524, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c7b526bf8acf8a45e1d3ce49", "kind": "dns", "frame_number": 30022, "timestamp_epoch": "1634915186.702691000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51503, "tcp_stream": null, "udp_stream": 524, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0af0e843d2a32b099a35f700", "kind": "dns", "frame_number": 30031, "timestamp_epoch": "1634915191.035484000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63592, "dst_port": 53, "tcp_stream": null, "udp_stream": 525, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c5f7b48f270cdcae2a9c5e9d", "kind": "dns", "frame_number": 30032, "timestamp_epoch": "1634915191.100763000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63592, "tcp_stream": null, "udp_stream": 525, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0975486163dd7aec2d51258d", "kind": "dns", "frame_number": 30043, "timestamp_epoch": "1634915195.395287000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51484, "dst_port": 53, "tcp_stream": null, "udp_stream": 526, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-435ca4217efe895e38d7b090", "kind": "dns", "frame_number": 30044, "timestamp_epoch": "1634915195.492299000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51484, "tcp_stream": null, "udp_stream": 526, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4e8ce6f79104e74b9cae4fc5", "kind": "dns", "frame_number": 30051, "timestamp_epoch": "1634915196.896412000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59619, "dst_port": 53, "tcp_stream": null, "udp_stream": 527, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-482aae98e1725fdb19799c35", "kind": "dns", "frame_number": 30052, "timestamp_epoch": "1634915196.896782000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59619, "tcp_stream": null, "udp_stream": 527, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-1d14ae97936adb2516fc6cf5", "kind": "dns", "frame_number": 30055, "timestamp_epoch": "1634915197.440065000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53493, "dst_port": 53, "tcp_stream": null, "udp_stream": 529, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-2647b1cc4c143d5038f771f9", "kind": "dns", "frame_number": 30056, "timestamp_epoch": "1634915197.470830000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53493, "dst_port": 53, "tcp_stream": null, "udp_stream": 529, "fields": { "dns.flags.response": "False", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-8428b6cf544753f2411f3ca1", "kind": "dns", "frame_number": 30057, "timestamp_epoch": "1634915197.555154000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53493, "tcp_stream": null, "udp_stream": 529, "fields": { "dns.a": "52.109.76.31", "dns.cname": "prod.nexusrules.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "nexusrules.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-0ce0814393fc5ab34ea1f6d5", "kind": "dns", "frame_number": 30059, "timestamp_epoch": "1634915197.637794000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65183, "dst_port": 53, "tcp_stream": null, "udp_stream": 530, "fields": { "dns.flags.response": "False", "dns.qry.name": "odc.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-1ba5a7ffe4653e701014dbaf", "kind": "dns", "frame_number": 30060, "timestamp_epoch": "1634915197.659518000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65183, "dst_port": 53, "tcp_stream": null, "udp_stream": 530, "fields": { "dns.flags.response": "False", "dns.qry.name": "odc.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-e4dc45ad64a9556fd397d905", "kind": "dns", "frame_number": 30061, "timestamp_epoch": "1634915197.737111000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65183, "tcp_stream": null, "udp_stream": 530, "fields": { "dns.a": "52.109.2.1", "dns.cname": "prod.odcsm1.live.com.akadns.net,us2.odcsm1.live.com.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "odc.officeapps.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-cceb7f531535a3dc323164a1", "kind": "dns", "frame_number": 30149, "timestamp_epoch": "1634915204.264412000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60460, "dst_port": 53, "tcp_stream": null, "udp_stream": 531, "fields": { "dns.flags.response": "False", "dns.qry.name": "outlook.office365.com", "dns.qry.type": "1" } }, { "event_id": "evt-3d466b86f5e94bc9ef43b594", "kind": "dns", "frame_number": 30150, "timestamp_epoch": "1634915204.283515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60460, "dst_port": 53, "tcp_stream": null, "udp_stream": 531, "fields": { "dns.flags.response": "False", "dns.qry.name": "outlook.office365.com", "dns.qry.type": "1" } }, { "event_id": "evt-0acea564b49597e20b2d2eb3", "kind": "dns", "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60460, "tcp_stream": null, "udp_stream": 531, "fields": { "dns.a": "52.96.55.242,52.96.57.82,40.97.120.66,52.96.90.18", "dns.cname": "outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "outlook.office365.com", "dns.qry.type": "1" } }, { "event_id": "evt-a01a4fc209de774b1ae97166", "kind": "dns", "frame_number": 30180, "timestamp_epoch": "1634915205.196753000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54958, "dst_port": 53, "tcp_stream": null, "udp_stream": 532, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-5fd5bb56568c1221bf550461", "kind": "dns", "frame_number": 30181, "timestamp_epoch": "1634915205.221475000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54958, "dst_port": 53, "tcp_stream": null, "udp_stream": 532, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-db04c5af06a377497173b0c8", "kind": "dns", "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54958, "tcp_stream": null, "udp_stream": 532, "fields": { "dns.a": "20.190.157.11,40.126.29.10,40.126.29.7,40.126.29.15,40.126.29.13,40.126.29.5,40.126.29.14,40.126.29.9", "dns.cname": "login.msa.msidentity.com,www.tm.lg.prod.aadmsa.akadns.net,prda.aadg.msidentity.com,www.tm.a.prd.aadg.trafficmanager.net,san.current.a.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-d8d8072fcf2cb7630cbcef90", "kind": "dns", "frame_number": 30682, "timestamp_epoch": "1634915212.862770000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64200, "dst_port": 53, "tcp_stream": null, "udp_stream": 533, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-900031a625bc527f6b5a3f4d", "kind": "dns", "frame_number": 30683, "timestamp_epoch": "1634915212.914226000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64200, "tcp_stream": null, "udp_stream": 533, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-afb020b9eb0149bed576384e", "kind": "dns", "frame_number": 30694, "timestamp_epoch": "1634915217.224262000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65033, "dst_port": 53, "tcp_stream": null, "udp_stream": 534, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e98fd665be0efa5a26c05b63", "kind": "dns", "frame_number": 30695, "timestamp_epoch": "1634915217.282715000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65033, "tcp_stream": null, "udp_stream": 534, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a3c793d4d5b85252bfcff440", "kind": "dns", "frame_number": 30706, "timestamp_epoch": "1634915221.598540000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51874, "dst_port": 53, "tcp_stream": null, "udp_stream": 535, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-db63d4d94baa4019820e10fa", "kind": "dns", "frame_number": 30707, "timestamp_epoch": "1634915221.661700000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51874, "tcp_stream": null, "udp_stream": 535, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c0106977f0dc4cd175c96b20", "kind": "dns", "frame_number": 30740, "timestamp_epoch": "1634915239.239857000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53519, "dst_port": 53, "tcp_stream": null, "udp_stream": 536, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bca0fcfe645b85c39ed091a8", "kind": "dns", "frame_number": 30741, "timestamp_epoch": "1634915239.335827000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53519, "tcp_stream": null, "udp_stream": 536, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-161fe77caa3c906a11169131", "kind": "dns", "frame_number": 30750, "timestamp_epoch": "1634915243.708954000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52562, "dst_port": 53, "tcp_stream": null, "udp_stream": 537, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3d6368d99feaf2b8286ab9d1", "kind": "dns", "frame_number": 30751, "timestamp_epoch": "1634915243.814701000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52562, "tcp_stream": null, "udp_stream": 537, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-65438e9232baa1c7d1e5d1df", "kind": "dns", "frame_number": 30766, "timestamp_epoch": "1634915248.162523000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62082, "dst_port": 53, "tcp_stream": null, "udp_stream": 538, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3b076d7ddf75060e9ab0e819", "kind": "dns", "frame_number": 30767, "timestamp_epoch": "1634915248.220775000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62082, "tcp_stream": null, "udp_stream": 538, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-af0fcd986300c7f5e8066d86", "kind": "dns", "frame_number": 31693, "timestamp_epoch": "1634915263.463718000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59993, "dst_port": 53, "tcp_stream": null, "udp_stream": 539, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6c2751794ad9475aa83410ce", "kind": "dns", "frame_number": 31694, "timestamp_epoch": "1634915263.464085000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59993, "tcp_stream": null, "udp_stream": 539, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-650931b43a47db2b7ee32c49", "kind": "dns", "frame_number": 31701, "timestamp_epoch": "1634915263.584728000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56170, "dst_port": 53, "tcp_stream": null, "udp_stream": 541, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-94b617089fc219909ccbbd98", "kind": "dns", "frame_number": 31702, "timestamp_epoch": "1634915263.585025000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56170, "tcp_stream": null, "udp_stream": 541, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a063138de796c66d3619a0d8", "kind": "dns", "frame_number": 31715, "timestamp_epoch": "1634915265.474483000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63995, "dst_port": 53, "tcp_stream": null, "udp_stream": 543, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d42b22bc5d1fd5893593878c", "kind": "dns", "frame_number": 31716, "timestamp_epoch": "1634915265.561801000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63995, "tcp_stream": null, "udp_stream": 543, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b1f8683b44de01165190a47f", "kind": "dns", "frame_number": 31724, "timestamp_epoch": "1634915266.373501000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50762, "dst_port": 53, "tcp_stream": null, "udp_stream": 545, "fields": { "dns.flags.response": "False", "dns.qry.name": "112.146.66.173.in-addr.arpa", "dns.qry.type": "12" } }, { "event_id": "evt-2b76a53a13b33a7ead205372", "kind": "dns", "frame_number": 31727, "timestamp_epoch": "1634915266.394697000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50762, "dst_port": 53, "tcp_stream": null, "udp_stream": 545, "fields": { "dns.flags.response": "False", "dns.qry.name": "112.146.66.173.in-addr.arpa", "dns.qry.type": "12" } }, { "event_id": "evt-638d9254ec2ed96a7477e6cb", "kind": "dns", "frame_number": 31728, "timestamp_epoch": "1634915266.455724000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50762, "tcp_stream": null, "udp_stream": 545, "fields": { "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "112.146.66.173.in-addr.arpa", "dns.qry.type": "12" } }, { "event_id": "evt-d1c83c333407c7df57d46056", "kind": "dns", "frame_number": 31729, "timestamp_epoch": "1634915266.480525000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60196, "dst_port": 53, "tcp_stream": null, "udp_stream": 546, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.openssl.org", "dns.qry.type": "1" } }, { "event_id": "evt-324d3656935c374e12e5e955", "kind": "dns", "frame_number": 31730, "timestamp_epoch": "1634915266.505327000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60196, "dst_port": 53, "tcp_stream": null, "udp_stream": 546, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.openssl.org", "dns.qry.type": "1" } }, { "event_id": "evt-c1214fa19420c6a75ee4e7e8", "kind": "dns", "frame_number": 31731, "timestamp_epoch": "1634915266.693490000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60196, "tcp_stream": null, "udp_stream": 546, "fields": { "dns.a": "72.247.207.22", "dns.cname": "www-ds.openssl.org.edgekey.net,e3102.dscx.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.openssl.org", "dns.qry.type": "1" } }, { "event_id": "evt-6fa0ceb5f33e63fffd55b88f", "kind": "dns", "frame_number": 33102, "timestamp_epoch": "1634915269.866616000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65392, "dst_port": 53, "tcp_stream": null, "udp_stream": 547, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1007f1cbf3288f460b45c747", "kind": "dns", "frame_number": 33169, "timestamp_epoch": "1634915270.122876000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65392, "tcp_stream": null, "udp_stream": 547, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f915c9b4f76a17a70e990579", "kind": "dns", "frame_number": 38638, "timestamp_epoch": "1634915274.849359000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49397, "dst_port": 53, "tcp_stream": null, "udp_stream": 548, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-63612d45c3387674a80a188c", "kind": "dns", "frame_number": 38841, "timestamp_epoch": "1634915274.921813000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49397, "tcp_stream": null, "udp_stream": 548, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d231fd63955ff1ebe3b3186f", "kind": "dns", "frame_number": 42907, "timestamp_epoch": "1634915295.367445000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57903, "dst_port": 53, "tcp_stream": null, "udp_stream": 549, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-608d0404e2a4b4051e828316", "kind": "dns", "frame_number": 42908, "timestamp_epoch": "1634915295.459335000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57903, "tcp_stream": null, "udp_stream": 549, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f0137b663c4566fe8537a1ea", "kind": "dns", "frame_number": 42927, "timestamp_epoch": "1634915298.359593000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58019, "dst_port": 53, "tcp_stream": null, "udp_stream": 550, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-6cbd5130117b6a115e06ac5a", "kind": "dns", "frame_number": 42928, "timestamp_epoch": "1634915298.380806000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58019, "dst_port": 53, "tcp_stream": null, "udp_stream": 550, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-6ef07d36e0a2bc65559cbb8a", "kind": "dns", "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58019, "tcp_stream": null, "udp_stream": 550, "fields": { "dns.a": "54.243.29.214,50.19.92.180,54.243.250.193,54.243.253.71,23.23.138.107,23.21.76.7,23.23.229.175,50.17.218.95", "dns.cname": "nagano-19599.herokussl.com,elb097307-934924932.us-east-1.elb.amazonaws.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-593a35a35b551d03a2446320", "kind": "dns", "frame_number": 43037, "timestamp_epoch": "1634915299.757331000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50868, "dst_port": 53, "tcp_stream": null, "udp_stream": 551, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e4c6486484cd3cb7025602fe", "kind": "dns", "frame_number": 43057, "timestamp_epoch": "1634915299.813569000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50868, "tcp_stream": null, "udp_stream": 551, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b89ca8d5d84116b521c1fc8c", "kind": "dns", "frame_number": 43087, "timestamp_epoch": "1634915301.498808000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64109, "dst_port": 53, "tcp_stream": null, "udp_stream": 552, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-b507052e8934276c3fbebce8", "kind": "dns", "frame_number": 43088, "timestamp_epoch": "1634915301.521808000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64109, "dst_port": 53, "tcp_stream": null, "udp_stream": 552, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-9a1bac830d8ac81c72531129", "kind": "dns", "frame_number": 43089, "timestamp_epoch": "1634915301.536026000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64109, "tcp_stream": null, "udp_stream": 552, "fields": { "dns.a": "142.250.114.28", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-3e19db994aefe5d2f03fe742", "kind": "dns", "frame_number": 43091, "timestamp_epoch": "1634915301.537594000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59614, "dst_port": 53, "tcp_stream": null, "udp_stream": 553, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-7d77a985b06f2652307ecb96", "kind": "dns", "frame_number": 43093, "timestamp_epoch": "1634915301.569141000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59614, "dst_port": 53, "tcp_stream": null, "udp_stream": 553, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-573bbee6a67f8bbf74146a1e", "kind": "dns", "frame_number": 43096, "timestamp_epoch": "1634915301.574987000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59614, "tcp_stream": null, "udp_stream": 553, "fields": { "dns.a": "64.29.151.102", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-0e28e731d68de36f766fecc6", "kind": "dns", "frame_number": 43152, "timestamp_epoch": "1634915304.117676000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60311, "dst_port": 53, "tcp_stream": null, "udp_stream": 554, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fa8a1d428d7843a0104a7a6d", "kind": "dns", "frame_number": 43154, "timestamp_epoch": "1634915304.186652000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60311, "tcp_stream": null, "udp_stream": 554, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-588bbb79ecceae8203d16eec", "kind": "dns", "frame_number": 43209, "timestamp_epoch": "1634915321.508376000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50811, "dst_port": 53, "tcp_stream": null, "udp_stream": 555, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a24de68b837753dcabca7c8b", "kind": "dns", "frame_number": 43210, "timestamp_epoch": "1634915321.559997000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50811, "tcp_stream": null, "udp_stream": 555, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ff43f2f07c6c2d1b6516952b", "kind": "dns", "frame_number": 43225, "timestamp_epoch": "1634915325.883027000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52666, "dst_port": 53, "tcp_stream": null, "udp_stream": 556, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d57571b75e80c1a41c131cd0", "kind": "dns", "frame_number": 43226, "timestamp_epoch": "1634915325.952170000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52666, "tcp_stream": null, "udp_stream": 556, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fd8803cffe3bf85206d75abc", "kind": "dns", "frame_number": 44267, "timestamp_epoch": "1634915329.150086000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56899, "dst_port": 53, "tcp_stream": null, "udp_stream": 557, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c33f9b9691e5ea5d6e0a60ef", "kind": "dns", "frame_number": 44268, "timestamp_epoch": "1634915329.150455000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56899, "tcp_stream": null, "udp_stream": 557, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-3b5959ce7d196e726a9bc9cd", "kind": "dns", "frame_number": 44276, "timestamp_epoch": "1634915329.261887000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55219, "dst_port": 53, "tcp_stream": null, "udp_stream": 559, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-851a09a0fdac3985bcd89539", "kind": "dns", "frame_number": 44277, "timestamp_epoch": "1634915329.262199000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55219, "tcp_stream": null, "udp_stream": 559, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-d788fa0fc55ebd175894648e", "kind": "dns", "frame_number": 44291, "timestamp_epoch": "1634915330.258826000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57259, "dst_port": 53, "tcp_stream": null, "udp_stream": 561, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1093ee6c401ede6ccb5e4f07", "kind": "dns", "frame_number": 44292, "timestamp_epoch": "1634915330.315083000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57259, "tcp_stream": null, "udp_stream": 561, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bcdd7921666856737d979e41", "kind": "dns", "frame_number": 44310, "timestamp_epoch": "1634915332.088412000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61457, "dst_port": 53, "tcp_stream": null, "udp_stream": 562, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-8bee1f2e552881e07ebaf9a9", "kind": "dns", "frame_number": 44311, "timestamp_epoch": "1634915332.117423000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61457, "dst_port": 53, "tcp_stream": null, "udp_stream": 562, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-819f640dd7492440e1b394aa", "kind": "dns", "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61457, "tcp_stream": null, "udp_stream": 562, "fields": { "dns.a": "54.243.250.193,54.243.41.12,50.19.250.64,50.19.92.180,50.16.216.118,50.19.104.221,54.243.253.71,50.19.81.52", "dns.cname": "nagano-19599.herokussl.com,elb097307-934924932.us-east-1.elb.amazonaws.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-6f6c45756d909f2b12ea7032", "kind": "dns", "frame_number": 44492, "timestamp_epoch": "1634915335.222160000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57712, "dst_port": 53, "tcp_stream": null, "udp_stream": 563, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-43533ff4edd1cc8482345179", "kind": "dns", "frame_number": 44494, "timestamp_epoch": "1634915335.241483000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57712, "dst_port": 53, "tcp_stream": null, "udp_stream": 563, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-fc3323a60427c7fc823a1ff9", "kind": "dns", "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57712, "tcp_stream": null, "udp_stream": 563, "fields": { "dns.a": "66.228.43.14,45.79.71.155,45.33.53.153,45.79.170.99,173.255.233.87,45.79.114.202", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-e6cd96856decf95f07419fae", "kind": "dns", "frame_number": 44498, "timestamp_epoch": "1634915335.284248000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53364, "dst_port": 53, "tcp_stream": null, "udp_stream": 564, "fields": { "dns.flags.response": "False", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-54567e6cb564f2a79c85fbb4", "kind": "dns", "frame_number": 44499, "timestamp_epoch": "1634915335.320222000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53364, "dst_port": 53, "tcp_stream": null, "udp_stream": 564, "fields": { "dns.flags.response": "False", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-920944a429f498044a69b189", "kind": "dns", "frame_number": 44500, "timestamp_epoch": "1634915335.347911000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53364, "tcp_stream": null, "udp_stream": 564, "fields": { "dns.a": "142.250.114.109,142.250.114.108", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-55d81943f300bfb1ab4af03a", "kind": "dns", "frame_number": 44664, "timestamp_epoch": "1634915347.790624000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55253, "dst_port": 53, "tcp_stream": null, "udp_stream": 565, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0532694c72b13c60c07af40c", "kind": "dns", "frame_number": 44722, "timestamp_epoch": "1634915347.980530000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55253, "tcp_stream": null, "udp_stream": 565, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-57b1e12b65e7bf432611ee4c", "kind": "dns", "frame_number": 44903, "timestamp_epoch": "1634915352.290937000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63722, "dst_port": 53, "tcp_stream": null, "udp_stream": 566, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-468a8bf52866bf1f3da2820b", "kind": "dns", "frame_number": 44904, "timestamp_epoch": "1634915352.342324000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63722, "tcp_stream": null, "udp_stream": 566, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f3c3b867cfa2ca8995ef2c7f", "kind": "dns", "frame_number": 44922, "timestamp_epoch": "1634915355.155639000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51839, "dst_port": 53, "tcp_stream": null, "udp_stream": 567, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-7d319f34de4ca39c0dababe8", "kind": "dns", "frame_number": 44923, "timestamp_epoch": "1634915355.180491000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51839, "dst_port": 53, "tcp_stream": null, "udp_stream": 567, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-642736906b794aaa147f75b9", "kind": "dns", "frame_number": 44926, "timestamp_epoch": "1634915355.503845000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51839, "tcp_stream": null, "udp_stream": 567, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-c855017dc69052c6f3765db6", "kind": "dns", "frame_number": 44930, "timestamp_epoch": "1634915356.649682000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61664, "dst_port": 53, "tcp_stream": null, "udp_stream": 568, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b9ffb04ee9093be020cea710", "kind": "dns", "frame_number": 44931, "timestamp_epoch": "1634915356.707839000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61664, "tcp_stream": null, "udp_stream": 568, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-57a3af9eea93e811caaa55aa", "kind": "dns", "frame_number": 45018, "timestamp_epoch": "1634915357.704362000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49861, "dst_port": 53, "tcp_stream": null, "udp_stream": 570, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-a187c316e152132f7428eac2", "kind": "dns", "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49861, "tcp_stream": null, "udp_stream": 570, "fields": { "dns.a": "40.126.28.22,40.126.28.12,40.126.28.14,40.126.28.23,40.126.7.32,40.126.7.35,40.126.28.13,40.126.28.19", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,chi.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-fc25163d9134c4ddf3dbe253", "kind": "dns", "frame_number": 45132, "timestamp_epoch": "1634915359.720788000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59256, "dst_port": 53, "tcp_stream": null, "udp_stream": 572, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-3eb602d73146c07f4566a327", "kind": "dns", "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59256, "tcp_stream": null, "udp_stream": 572, "fields": { "dns.a": "40.126.28.12,40.126.28.14,40.126.28.23,40.126.7.32,40.126.7.35,40.126.28.13,40.126.28.19,40.126.28.22", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net,chi.a.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-18413097de2bb20f63e9898d", "kind": "dns", "frame_number": 45308, "timestamp_epoch": "1634915370.665053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54350, "dst_port": 53, "tcp_stream": null, "udp_stream": 573, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tetranergy.com", "dns.qry.type": "1" } }, { "event_id": "evt-7e2c7ddf943a0c6240491461", "kind": "dns", "frame_number": 45309, "timestamp_epoch": "1634915370.695690000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54350, "dst_port": 53, "tcp_stream": null, "udp_stream": 573, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tetranergy.com", "dns.qry.type": "1" } }, { "event_id": "evt-722d3b2152eb4c4c0a8cfdc1", "kind": "dns", "frame_number": 45316, "timestamp_epoch": "1634915371.695705000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54350, "dst_port": 53, "tcp_stream": null, "udp_stream": 573, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tetranergy.com", "dns.qry.type": "1" } }, { "event_id": "evt-f3bc5ba72c7ba12b1813c1f2", "kind": "dns", "frame_number": 45323, "timestamp_epoch": "1634915373.695893000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54350, "dst_port": 53, "tcp_stream": null, "udp_stream": 573, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tetranergy.com", "dns.qry.type": "1" } }, { "event_id": "evt-e8cb0e1637d48af8144f3197", "kind": "dns", "frame_number": 45324, "timestamp_epoch": "1634915374.009177000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52170, "dst_port": 53, "tcp_stream": null, "udp_stream": 574, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1f9a07721d8223189250f391", "kind": "dns", "frame_number": 45325, "timestamp_epoch": "1634915374.074224000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52170, "tcp_stream": null, "udp_stream": 574, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a61588827db701992771a0c4", "kind": "dns", "frame_number": 45328, "timestamp_epoch": "1634915374.223619000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54350, "tcp_stream": null, "udp_stream": 573, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.tetranergy.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7fb3619ac96e632c5e025bf", "kind": "dns", "frame_number": 45361, "timestamp_epoch": "1634915374.974570000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56363, "dst_port": 53, "tcp_stream": null, "udp_stream": 575, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-7ed073562dba7ebcc65414cf", "kind": "dns", "frame_number": 45362, "timestamp_epoch": "1634915375.008581000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56363, "dst_port": 53, "tcp_stream": null, "udp_stream": 575, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-de0cbb7f17bd5837db9fcb90", "kind": "dns", "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56363, "tcp_stream": null, "udp_stream": 575, "fields": { "dns.a": "23.21.76.7,54.243.41.12,50.17.226.156,54.243.51.135,50.19.104.221,50.16.216.118,50.19.250.64,54.243.250.193", "dns.cname": "nagano-19599.herokussl.com,elb097307-934924932.us-east-1.elb.amazonaws.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-2a8a673fb0efa22d336f9b8b", "kind": "dns", "frame_number": 45648, "timestamp_epoch": "1634915378.400545000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53396, "dst_port": 53, "tcp_stream": null, "udp_stream": 576, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-509327946fc4474143498055", "kind": "dns", "frame_number": 45652, "timestamp_epoch": "1634915378.446599000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53396, "tcp_stream": null, "udp_stream": 576, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cd889c15a1ae3ad79bfaa00a", "kind": "dns", "frame_number": 45754, "timestamp_epoch": "1634915382.743623000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60774, "dst_port": 53, "tcp_stream": null, "udp_stream": 577, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8cfd13d7478f3bc3624b65ca", "kind": "dns", "frame_number": 45756, "timestamp_epoch": "1634915382.786044000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60774, "tcp_stream": null, "udp_stream": 577, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6ee08182e1279ba417dad61c", "kind": "dns", "frame_number": 46719, "timestamp_epoch": "1634915392.727800000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50789, "dst_port": 53, "tcp_stream": null, "udp_stream": 578, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-780509b7f48384a7e6b750a4", "kind": "dns", "frame_number": 46720, "timestamp_epoch": "1634915392.728211000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50789, "tcp_stream": null, "udp_stream": 578, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6ca7742361a59aaa0b843583", "kind": "dns", "frame_number": 46727, "timestamp_epoch": "1634915392.851965000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60360, "dst_port": 53, "tcp_stream": null, "udp_stream": 580, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-69c09d3325b795de5c024d3d", "kind": "dns", "frame_number": 46728, "timestamp_epoch": "1634915392.852309000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60360, "tcp_stream": null, "udp_stream": 580, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4d739b9a8399e5f87a0c96c5", "kind": "dns", "frame_number": 46735, "timestamp_epoch": "1634915393.000091000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58870, "dst_port": 53, "tcp_stream": null, "udp_stream": 582, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-8ad48828a09c1fa6945b1670", "kind": "dns", "frame_number": 46736, "timestamp_epoch": "1634915393.000387000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58870, "tcp_stream": null, "udp_stream": 582, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-2ef36eb65fedfe653925576d", "kind": "dns", "frame_number": 46739, "timestamp_epoch": "1634915393.030731000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60040, "dst_port": 53, "tcp_stream": null, "udp_stream": 584, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f0918e49d9c37c910d9992a7", "kind": "dns", "frame_number": 46740, "timestamp_epoch": "1634915393.031045000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60040, "tcp_stream": null, "udp_stream": 584, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-27700d2c0971a3ea38ad035f", "kind": "dns", "frame_number": 46747, "timestamp_epoch": "1634915393.046553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58452, "dst_port": 53, "tcp_stream": null, "udp_stream": 586, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6aa79d7d7bcbd486bc4467df", "kind": "dns", "frame_number": 46748, "timestamp_epoch": "1634915393.046827000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58452, "tcp_stream": null, "udp_stream": 586, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-017ca470f9c5166e2df1d97c", "kind": "dns", "frame_number": 46751, "timestamp_epoch": "1634915393.063333000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51324, "dst_port": 53, "tcp_stream": null, "udp_stream": 588, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0a5c5507bb9c40b2acebbdf4", "kind": "dns", "frame_number": 46752, "timestamp_epoch": "1634915393.063626000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51324, "tcp_stream": null, "udp_stream": 588, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-79d55f09ffdd4bbd12b8169c", "kind": "dns", "frame_number": 46755, "timestamp_epoch": "1634915393.075325000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63492, "dst_port": 53, "tcp_stream": null, "udp_stream": 590, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-cdff5fa7f1522d23b9efae73", "kind": "dns", "frame_number": 46756, "timestamp_epoch": "1634915393.075598000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63492, "tcp_stream": null, "udp_stream": 590, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-76f8de9171d86d95d836532e", "kind": "dns", "frame_number": 46759, "timestamp_epoch": "1634915393.093741000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58875, "dst_port": 53, "tcp_stream": null, "udp_stream": 592, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-888d70e422ba5cd22e361fd5", "kind": "dns", "frame_number": 46760, "timestamp_epoch": "1634915393.094028000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58875, "tcp_stream": null, "udp_stream": 592, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-1f981f536e245204e9f6de24", "kind": "dns", "frame_number": 46763, "timestamp_epoch": "1634915393.108196000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65453, "dst_port": 53, "tcp_stream": null, "udp_stream": 594, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-cdf5096386a29c0cca7a4054", "kind": "dns", "frame_number": 46764, "timestamp_epoch": "1634915393.108464000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65453, "tcp_stream": null, "udp_stream": 594, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-278d35a0d96568b64da776ad", "kind": "dns", "frame_number": 46767, "timestamp_epoch": "1634915393.124385000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53016, "dst_port": 53, "tcp_stream": null, "udp_stream": 596, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-047da63bad148b93f69a6717", "kind": "dns", "frame_number": 46768, "timestamp_epoch": "1634915393.124710000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53016, "tcp_stream": null, "udp_stream": 596, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0f49a385cd7905bf9ceba7b3", "kind": "dns", "frame_number": 46771, "timestamp_epoch": "1634915393.158392000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54211, "dst_port": 53, "tcp_stream": null, "udp_stream": 598, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-b156d7627c5ddf950316e7d2", "kind": "dns", "frame_number": 46772, "timestamp_epoch": "1634915393.158707000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54211, "tcp_stream": null, "udp_stream": 598, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-546805596b09a6fb32745578", "kind": "dns", "frame_number": 46775, "timestamp_epoch": "1634915393.198976000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52084, "dst_port": 53, "tcp_stream": null, "udp_stream": 600, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-767fbf8696c51d3ef14170ad", "kind": "dns", "frame_number": 46776, "timestamp_epoch": "1634915393.199365000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52084, "tcp_stream": null, "udp_stream": 600, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9a9ec8f038935e0c19ef2aa6", "kind": "dns", "frame_number": 46779, "timestamp_epoch": "1634915393.218897000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52097, "dst_port": 53, "tcp_stream": null, "udp_stream": 602, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-972ef5691becde454dae5210", "kind": "dns", "frame_number": 46780, "timestamp_epoch": "1634915393.219171000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52097, "tcp_stream": null, "udp_stream": 602, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-36f72b9a81e4c9f87d08f334", "kind": "dns", "frame_number": 46783, "timestamp_epoch": "1634915393.240060000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57250, "dst_port": 53, "tcp_stream": null, "udp_stream": 604, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-29bda210b6fd5648013cea6c", "kind": "dns", "frame_number": 46784, "timestamp_epoch": "1634915393.240331000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57250, "tcp_stream": null, "udp_stream": 604, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bd8ea9a5b1a0d5df883a552a", "kind": "dns", "frame_number": 46788, "timestamp_epoch": "1634915393.278750000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54014, "dst_port": 53, "tcp_stream": null, "udp_stream": 348, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-15fbfa9cab68a467dc81b5c4", "kind": "dns", "frame_number": 46789, "timestamp_epoch": "1634915393.279010000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54014, "tcp_stream": null, "udp_stream": 348, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0c52b9abf4c4ca2ca76e8983", "kind": "dns", "frame_number": 46792, "timestamp_epoch": "1634915393.317054000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49394, "dst_port": 53, "tcp_stream": null, "udp_stream": 607, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-72439ccf63bc422b7123cdd0", "kind": "dns", "frame_number": 46793, "timestamp_epoch": "1634915393.317369000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49394, "tcp_stream": null, "udp_stream": 607, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-61dc9b3699d76438f5d0c5b4", "kind": "dns", "frame_number": 46798, "timestamp_epoch": "1634915393.336710000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65461, "dst_port": 53, "tcp_stream": null, "udp_stream": 609, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9ed44e9b15619987960e023f", "kind": "dns", "frame_number": 46799, "timestamp_epoch": "1634915393.337021000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65461, "tcp_stream": null, "udp_stream": 609, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-2d2a64742fb349d8a403d316", "kind": "dns", "frame_number": 46802, "timestamp_epoch": "1634915393.372864000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64123, "dst_port": 53, "tcp_stream": null, "udp_stream": 611, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c3b90ce96c019013b2f0ab5a", "kind": "dns", "frame_number": 46803, "timestamp_epoch": "1634915393.373103000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64123, "tcp_stream": null, "udp_stream": 611, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6000ec7f388e19f6ecd5b37d", "kind": "dns", "frame_number": 46822, "timestamp_epoch": "1634915400.072320000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59870, "dst_port": 53, "tcp_stream": null, "udp_stream": 613, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2b7f203c5f589cf3ca71ee17", "kind": "dns", "frame_number": 46823, "timestamp_epoch": "1634915400.172358000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59870, "tcp_stream": null, "udp_stream": 613, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c3b9ec56e6db8b78138b48e3", "kind": "dns", "frame_number": 46837, "timestamp_epoch": "1634915404.478824000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54767, "dst_port": 53, "tcp_stream": null, "udp_stream": 614, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c04f7a862611503ece07eaca", "kind": "dns", "frame_number": 46838, "timestamp_epoch": "1634915404.540182000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54767, "tcp_stream": null, "udp_stream": 614, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-062819bc8a199a3c99663f05", "kind": "dns", "frame_number": 46849, "timestamp_epoch": "1634915408.902203000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57884, "dst_port": 53, "tcp_stream": null, "udp_stream": 615, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-28035e17f53f8b6ce5fad635", "kind": "dns", "frame_number": 46850, "timestamp_epoch": "1634915409.046393000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57884, "tcp_stream": null, "udp_stream": 615, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2dbb1c4e08274ef7fba108fb", "kind": "dns", "frame_number": 46969, "timestamp_epoch": "1634915426.760572000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62824, "dst_port": 53, "tcp_stream": null, "udp_stream": 616, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e5abf649cc6ad8f397936993", "kind": "dns", "frame_number": 46970, "timestamp_epoch": "1634915426.822945000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62824, "tcp_stream": null, "udp_stream": 616, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1ab4a8c2d6fff8fff2beef33", "kind": "dns", "frame_number": 46988, "timestamp_epoch": "1634915427.246847000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49397, "dst_port": 53, "tcp_stream": null, "udp_stream": 617, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-38bab46cc7303e0309c77156", "kind": "dns", "frame_number": 46989, "timestamp_epoch": "1634915427.274688000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49397, "dst_port": 53, "tcp_stream": null, "udp_stream": 617, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-954fdd357a8fdfb1eeac5edc", "kind": "dns", "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49397, "tcp_stream": null, "udp_stream": 617, "fields": { "dns.a": "52.96.121.210,52.96.8.130,52.96.55.242,52.96.121.114", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-c87c9d81c3332a3aa490e7c0", "kind": "dns", "frame_number": 47073, "timestamp_epoch": "1634915431.152211000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63901, "dst_port": 53, "tcp_stream": null, "udp_stream": 618, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b3054e77f7862e4f1f366841", "kind": "dns", "frame_number": 47074, "timestamp_epoch": "1634915431.213422000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63901, "tcp_stream": null, "udp_stream": 618, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-53d00aec6400a20c1b368896", "kind": "dns", "frame_number": 47102, "timestamp_epoch": "1634915435.526122000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57679, "dst_port": 53, "tcp_stream": null, "udp_stream": 619, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1628124e8cfc53bd1ae38051", "kind": "dns", "frame_number": 47103, "timestamp_epoch": "1634915435.595713000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57679, "tcp_stream": null, "udp_stream": 619, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c979fd7e535d51a95338ee1c", "kind": "dns", "frame_number": 47193, "timestamp_epoch": "1634915452.871221000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64025, "dst_port": 53, "tcp_stream": null, "udp_stream": 620, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3e56693fc7c44b7297efc2c4", "kind": "dns", "frame_number": 47194, "timestamp_epoch": "1634915452.943520000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64025, "tcp_stream": null, "udp_stream": 620, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3de054805470c24b565e8367", "kind": "dns", "frame_number": 48249, "timestamp_epoch": "1634915457.107015000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57696, "dst_port": 53, "tcp_stream": null, "udp_stream": 621, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e28da26a7bb0b2532098daf6", "kind": "dns", "frame_number": 48250, "timestamp_epoch": "1634915457.107343000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57696, "tcp_stream": null, "udp_stream": 621, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-84d669baaabf72d1537791a1", "kind": "dns", "frame_number": 48257, "timestamp_epoch": "1634915457.221548000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62504, "dst_port": 53, "tcp_stream": null, "udp_stream": 623, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-043e81a03cd92cfbe37c05b5", "kind": "dns", "frame_number": 48258, "timestamp_epoch": "1634915457.221831000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62504, "tcp_stream": null, "udp_stream": 623, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ca71d39ca6e4d181a5c9c2f0", "kind": "dns", "frame_number": 48262, "timestamp_epoch": "1634915457.261332000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54947, "dst_port": 53, "tcp_stream": null, "udp_stream": 625, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f2613acb9164e76807c4af91", "kind": "dns", "frame_number": 48267, "timestamp_epoch": "1634915457.314776000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54947, "tcp_stream": null, "udp_stream": 625, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-791b16b31f588f781106e1ba", "kind": "dns", "frame_number": 48284, "timestamp_epoch": "1634915461.651754000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57699, "dst_port": 53, "tcp_stream": null, "udp_stream": 626, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-08ee3315b18aec3977625561", "kind": "dns", "frame_number": 48285, "timestamp_epoch": "1634915461.744642000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57699, "tcp_stream": null, "udp_stream": 626, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6e8315e6720a95e1675b2500", "kind": "dns", "frame_number": 48392, "timestamp_epoch": "1634915472.242241000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49182, "dst_port": 53, "tcp_stream": null, "udp_stream": 628, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-468e3da34b2c06681ac7bec1", "kind": "dns", "frame_number": 48394, "timestamp_epoch": "1634915472.259547000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49182, "dst_port": 53, "tcp_stream": null, "udp_stream": 628, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-c567e361d6eb56b0582d7073", "kind": "dns", "frame_number": 48395, "timestamp_epoch": "1634915472.278702000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57723, "dst_port": 53, "tcp_stream": null, "udp_stream": 629, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-1517ee911a69debdc0f4690d", "kind": "dns", "frame_number": 48396, "timestamp_epoch": "1634915472.278982000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57723, "tcp_stream": null, "udp_stream": 629, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-508f11ae2bb54092d65a29f2", "kind": "dns", "frame_number": 48399, "timestamp_epoch": "1634915472.296004000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57662, "dst_port": 53, "tcp_stream": null, "udp_stream": 631, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-02941b3f4b0c43bbd1764627", "kind": "dns", "frame_number": 48400, "timestamp_epoch": "1634915472.296287000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57662, "tcp_stream": null, "udp_stream": 631, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e72cf3b82bc02c4108b55c2b", "kind": "dns", "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49182, "tcp_stream": null, "udp_stream": 628, "fields": { "dns.a": "40.126.28.11,40.126.7.32,40.126.7.35,40.126.28.12,40.126.28.14,40.126.28.21,40.126.28.22,40.126.28.19", "dns.cname": "ak.privatelink.msidentity.com,www.tm.ak.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.microsoftonline.com", "dns.qry.type": "1" } }, { "event_id": "evt-56feb8918e990bf4a47bd295", "kind": "dns", "frame_number": 48426, "timestamp_epoch": "1634915473.459094000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59129, "dst_port": 53, "tcp_stream": null, "udp_stream": 633, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-d29569d8a9b6d66eb67cd8aa", "kind": "dns", "frame_number": 48427, "timestamp_epoch": "1634915473.459396000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59129, "tcp_stream": null, "udp_stream": 633, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-761845f9810e2aee8fb9f39d", "kind": "dns", "frame_number": 48441, "timestamp_epoch": "1634915479.090276000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49532, "dst_port": 53, "tcp_stream": null, "udp_stream": 635, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-503c059dcd284dfeb5fd0cb3", "kind": "dns", "frame_number": 48442, "timestamp_epoch": "1634915479.193874000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49532, "tcp_stream": null, "udp_stream": 635, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e1b1435d7d1529644acc35f3", "kind": "dns", "frame_number": 49009, "timestamp_epoch": "1634915483.513221000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59931, "dst_port": 53, "tcp_stream": null, "udp_stream": 636, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-65832b030f1d8ea618a2f046", "kind": "dns", "frame_number": 49010, "timestamp_epoch": "1634915483.567843000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59931, "tcp_stream": null, "udp_stream": 636, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8897438370301f591398ce44", "kind": "dns", "frame_number": 49034, "timestamp_epoch": "1634915486.773687000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61190, "dst_port": 53, "tcp_stream": null, "udp_stream": 637, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-3f6dc21e0c341925b51e497c", "kind": "dns", "frame_number": 49035, "timestamp_epoch": "1634915486.793236000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61190, "dst_port": 53, "tcp_stream": null, "udp_stream": 637, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-d438e8171dd730cae8a5e30e", "kind": "dns", "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61190, "tcp_stream": null, "udp_stream": 637, "fields": { "dns.a": "54.243.29.214,50.16.239.65,50.16.235.219,50.17.226.156,23.21.76.7,50.19.104.221,54.243.253.71,23.23.229.175", "dns.cname": "nagano-19599.herokussl.com,elb097307-934924932.us-east-1.elb.amazonaws.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-be7fd7579ff2bdc62ac53edb", "kind": "dns", "frame_number": 49147, "timestamp_epoch": "1634915487.904066000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51334, "dst_port": 53, "tcp_stream": null, "udp_stream": 638, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-58444ed1f89376a2bedd9585", "kind": "dns", "frame_number": 49148, "timestamp_epoch": "1634915487.949808000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51334, "tcp_stream": null, "udp_stream": 638, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-671017cf75e08218dc0eb326", "kind": "dns", "frame_number": 49366, "timestamp_epoch": "1634915490.867160000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54455, "dst_port": 53, "tcp_stream": null, "udp_stream": 639, "fields": { "dns.flags.response": "False", "dns.qry.name": "inbound.att.net", "dns.qry.type": "1" } }, { "event_id": "evt-d9c7804a5aebb05e104154f4", "kind": "dns", "frame_number": 49367, "timestamp_epoch": "1634915490.885831000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54455, "dst_port": 53, "tcp_stream": null, "udp_stream": 639, "fields": { "dns.flags.response": "False", "dns.qry.name": "inbound.att.net", "dns.qry.type": "1" } }, { "event_id": "evt-0bc0bbff6f0470fec4f25f4a", "kind": "dns", "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54455, "tcp_stream": null, "udp_stream": 639, "fields": { "dns.a": "66.218.88.149,66.218.88.158,66.218.88.152,66.218.88.150,66.163.170.35,66.218.88.157,66.218.88.155,66.218.88.154", "dns.cname": "pop-att.mail.yahoo.com,global-jpop.mail.gm0.yahoodns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "inbound.att.net", "dns.qry.type": "1" } }, { "event_id": "evt-aec9d2eb06751cb5babe4029", "kind": "dns", "frame_number": 49389, "timestamp_epoch": "1634915492.152219000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64616, "dst_port": 53, "tcp_stream": null, "udp_stream": 640, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.isoldry.com", "dns.qry.type": "1" } }, { "event_id": "evt-80ed4f72243ee8ba7d2931c3", "kind": "dns", "frame_number": 49390, "timestamp_epoch": "1634915492.182843000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64616, "dst_port": 53, "tcp_stream": null, "udp_stream": 640, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.isoldry.com", "dns.qry.type": "1" } }, { "event_id": "evt-30b7dab8927b45bc54d237f7", "kind": "dns", "frame_number": 49394, "timestamp_epoch": "1634915492.456666000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64616, "tcp_stream": null, "udp_stream": 640, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.isoldry.com", "dns.qry.type": "1" } }, { "event_id": "evt-788e38cfed8a319b8697000c", "kind": "dns", "frame_number": 49513, "timestamp_epoch": "1634915505.325702000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61117, "dst_port": 53, "tcp_stream": null, "udp_stream": 641, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3893a9ea7a23128a0477dce0", "kind": "dns", "frame_number": 49514, "timestamp_epoch": "1634915505.393410000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61117, "tcp_stream": null, "udp_stream": 641, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f0ddd36f70749a312288f797", "kind": "dns", "frame_number": 49531, "timestamp_epoch": "1634915512.856370000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54429, "dst_port": 53, "tcp_stream": null, "udp_stream": 642, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bef1481d88283e0aa56459ab", "kind": "dns", "frame_number": 49532, "timestamp_epoch": "1634915512.941604000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54429, "tcp_stream": null, "udp_stream": 642, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3b84f559e3a1977adec729e7", "kind": "dns", "frame_number": 50009, "timestamp_epoch": "1634915517.247298000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56380, "dst_port": 53, "tcp_stream": null, "udp_stream": 643, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2fdaaf405538cd1766991406", "kind": "dns", "frame_number": 50089, "timestamp_epoch": "1634915517.337963000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56380, "tcp_stream": null, "udp_stream": 643, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d0ee6303893f592da7dcff8f", "kind": "dns", "frame_number": 50847, "timestamp_epoch": "1634915519.961941000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61789, "dst_port": 53, "tcp_stream": null, "udp_stream": 644, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-d9067358ab4559055910a256", "kind": "dns", "frame_number": 50848, "timestamp_epoch": "1634915519.962205000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61789, "tcp_stream": null, "udp_stream": 644, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5c6713265001cb5d90230a12", "kind": "dns", "frame_number": 50855, "timestamp_epoch": "1634915520.094046000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60998, "dst_port": 53, "tcp_stream": null, "udp_stream": 646, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6a98ea8aac96a43969cafb4f", "kind": "dns", "frame_number": 50856, "timestamp_epoch": "1634915520.094319000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60998, "tcp_stream": null, "udp_stream": 646, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-dd7d19e5ccec195a3a0fe367", "kind": "dns", "frame_number": 50906, "timestamp_epoch": "1634915529.167235000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59700, "dst_port": 53, "tcp_stream": null, "udp_stream": 648, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-69527daf4a3ea5a6f71067f6", "kind": "dns", "frame_number": 50909, "timestamp_epoch": "1634915529.199564000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59700, "dst_port": 53, "tcp_stream": null, "udp_stream": 648, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-75b0aac10cdfc8237eea60da", "kind": "dns", "frame_number": 50913, "timestamp_epoch": "1634915529.455777000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59700, "tcp_stream": null, "udp_stream": 648, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-0ca67ecf04f995be8ad1b5cd", "kind": "dns", "frame_number": 50932, "timestamp_epoch": "1634915531.001095000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63444, "dst_port": 53, "tcp_stream": null, "udp_stream": 649, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-32e13441b43606595088e4d3", "kind": "dns", "frame_number": 50933, "timestamp_epoch": "1634915531.001414000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63444, "tcp_stream": null, "udp_stream": 649, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-d267bcc82c23fbc68f48c515", "kind": "dns", "frame_number": 50934, "timestamp_epoch": "1634915531.001880000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 58575, "dst_port": 53, "tcp_stream": null, "udp_stream": 650, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d0cfd74f7e6c6ff7ab3f8c21", "kind": "dns", "frame_number": 50935, "timestamp_epoch": "1634915531.002113000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58575, "tcp_stream": null, "udp_stream": 650, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9ae1393a7d2ae9317cc3e77b", "kind": "dns", "frame_number": 51023, "timestamp_epoch": "1634915535.203142000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64076, "dst_port": 53, "tcp_stream": null, "udp_stream": 651, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-06ce75de2e799e164a33c267", "kind": "dns", "frame_number": 51024, "timestamp_epoch": "1634915535.203404000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64076, "tcp_stream": null, "udp_stream": 651, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c4e4e53e7ca9b903c090be10", "kind": "dns", "frame_number": 51027, "timestamp_epoch": "1634915535.217976000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57434, "dst_port": 53, "tcp_stream": null, "udp_stream": 653, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ec24a3315df30dd7f5752ac4", "kind": "dns", "frame_number": 51028, "timestamp_epoch": "1634915535.218273000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57434, "tcp_stream": null, "udp_stream": 653, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bcfde60e8997f587d247f1da", "kind": "dns", "frame_number": 51040, "timestamp_epoch": "1634915537.622613000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53962, "dst_port": 53, "tcp_stream": null, "udp_stream": 655, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ab4e3ed18bbefae8d9485a39", "kind": "dns", "frame_number": 51042, "timestamp_epoch": "1634915537.678265000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53962, "tcp_stream": null, "udp_stream": 655, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-40d06d4f80b9862cd9fa3e73", "kind": "dns", "frame_number": 51056, "timestamp_epoch": "1634915541.998357000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49835, "dst_port": 53, "tcp_stream": null, "udp_stream": 656, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c57d439605acfebe8ef051e", "kind": "dns", "frame_number": 51057, "timestamp_epoch": "1634915542.056761000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49835, "tcp_stream": null, "udp_stream": 656, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-80826389c6aae35ed68bf802", "kind": "dns", "frame_number": 51083, "timestamp_epoch": "1634915543.490135000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49214, "dst_port": 53, "tcp_stream": null, "udp_stream": 657, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-ce6aa8d886d64948e4ea669f", "kind": "dns", "frame_number": 51084, "timestamp_epoch": "1634915543.514172000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49214, "dst_port": 53, "tcp_stream": null, "udp_stream": 657, "fields": { "dns.flags.response": "False", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-ee7ec37bcc8829da684313a4", "kind": "dns", "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49214, "tcp_stream": null, "udp_stream": 657, "fields": { "dns.a": "50.17.218.95,50.19.92.180,54.243.29.214,50.16.235.219,23.21.76.7,50.19.104.221,50.16.239.65,54.243.51.135", "dns.cname": "nagano-19599.herokussl.com,elb097307-934924932.us-east-1.elb.amazonaws.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "api.ipify.org", "dns.qry.type": "1" } }, { "event_id": "evt-e2629b6a2866345a9de928e8", "kind": "dns", "frame_number": 51117, "timestamp_epoch": "1634915543.670036000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49917, "dst_port": 53, "tcp_stream": null, "udp_stream": 658, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.qualityms.com.mx", "dns.qry.type": "1" } }, { "event_id": "evt-b64a06415b24f714906474a0", "kind": "dns", "frame_number": 51118, "timestamp_epoch": "1634915543.700839000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49917, "dst_port": 53, "tcp_stream": null, "udp_stream": 658, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.qualityms.com.mx", "dns.qry.type": "1" } }, { "event_id": "evt-3868d93743bb4b5cb886566d", "kind": "dns", "frame_number": 51120, "timestamp_epoch": "1634915543.738770000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49917, "tcp_stream": null, "udp_stream": 658, "fields": { "dns.a": "108.168.133.76", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.qualityms.com.mx", "dns.qry.type": "1" } }, { "event_id": "evt-331b42e7b0aaeff7b9ab6e78", "kind": "dns", "frame_number": 51406, "timestamp_epoch": "1634915546.374750000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61289, "dst_port": 53, "tcp_stream": null, "udp_stream": 659, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7b35ec6f39d42eed3206b10b", "kind": "dns", "frame_number": 51409, "timestamp_epoch": "1634915546.386041000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62881, "dst_port": 53, "tcp_stream": null, "udp_stream": 660, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-39a93292689e83f6fb4ca1cf", "kind": "dns", "frame_number": 51410, "timestamp_epoch": "1634915546.419553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62881, "dst_port": 53, "tcp_stream": null, "udp_stream": 660, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-4d239df240237d43819bf510", "kind": "dns", "frame_number": 51413, "timestamp_epoch": "1634915546.425969000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61289, "tcp_stream": null, "udp_stream": 659, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-df3fc8d9e98aaa8dd8ae71cf", "kind": "dns", "frame_number": 51415, "timestamp_epoch": "1634915546.430128000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62881, "tcp_stream": null, "udp_stream": 660, "fields": { "dns.a": "64.29.151.102", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.myfairpoint.net", "dns.qry.type": "1" } }, { "event_id": "evt-838b7798bbd151ff8fc8d8b2", "kind": "dns", "frame_number": 51449, "timestamp_epoch": "1634915547.030252000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62832, "dst_port": 53, "tcp_stream": null, "udp_stream": 661, "fields": { "dns.flags.response": "False", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-bf7896cf2b0c36df70ceb896", "kind": "dns", "frame_number": 51450, "timestamp_epoch": "1634915547.059466000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62832, "dst_port": 53, "tcp_stream": null, "udp_stream": 661, "fields": { "dns.flags.response": "False", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-f37954114425ea94a5172ed9", "kind": "dns", "frame_number": 51452, "timestamp_epoch": "1634915547.102831000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62832, "tcp_stream": null, "udp_stream": 661, "fields": { "dns.a": "142.250.114.109,142.250.114.108", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "imap.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-e5a25e3cba25cbcd568769c8", "kind": "dns", "frame_number": 51486, "timestamp_epoch": "1634915547.390996000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49968, "dst_port": 53, "tcp_stream": null, "udp_stream": 662, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-61554a023201efe94ebbf84d", "kind": "dns", "frame_number": 51487, "timestamp_epoch": "1634915547.391306000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49968, "tcp_stream": null, "udp_stream": 662, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-10b64874edb2f8e5b096ed04", "kind": "dns", "frame_number": 51488, "timestamp_epoch": "1634915547.394327000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52213, "dst_port": 53, "tcp_stream": null, "udp_stream": 663, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-90de32bccb5803a78e930e3d", "kind": "dns", "frame_number": 51489, "timestamp_epoch": "1634915547.394619000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52213, "tcp_stream": null, "udp_stream": 663, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8cc28037a50a1394e13f71b4", "kind": "dns", "frame_number": 51513, "timestamp_epoch": "1634915548.731525000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65446, "dst_port": 53, "tcp_stream": null, "udp_stream": 664, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-664aca79c04750f218e6806d", "kind": "dns", "frame_number": 51514, "timestamp_epoch": "1634915548.764180000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65446, "dst_port": 53, "tcp_stream": null, "udp_stream": 664, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-a12a646b62b87d5e7a7e88fd", "kind": "dns", "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65446, "tcp_stream": null, "udp_stream": 664, "fields": { "dns.a": "66.228.43.14,45.79.114.202,173.255.233.87,45.79.71.155,45.79.170.99,45.33.53.153", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.smtp2go.com", "dns.qry.type": "1" } }, { "event_id": "evt-1fe59936e5819822768b9223", "kind": "dns", "frame_number": 51540, "timestamp_epoch": "1634915548.962584000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58588, "dst_port": 53, "tcp_stream": null, "udp_stream": 665, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-fa75c5cfcb79d5bb7f516da4", "kind": "dns", "frame_number": 51541, "timestamp_epoch": "1634915548.962889000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58588, "tcp_stream": null, "udp_stream": 665, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-331eaf87e830de8a0b4bd20f", "kind": "dns", "frame_number": 51542, "timestamp_epoch": "1634915548.963372000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63706, "dst_port": 53, "tcp_stream": null, "udp_stream": 666, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-68d9323344b9c31376f9214d", "kind": "dns", "frame_number": 51543, "timestamp_epoch": "1634915548.963577000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63706, "tcp_stream": null, "udp_stream": 666, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a3d3614b630565712da5fcc8", "kind": "dns", "frame_number": 51635, "timestamp_epoch": "1634915558.169085000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57852, "dst_port": 53, "tcp_stream": null, "udp_stream": 667, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.loosefoot.com", "dns.qry.type": "1" } }, { "event_id": "evt-d9f9a23aeb1a133b0d64208a", "kind": "dns", "frame_number": 51636, "timestamp_epoch": "1634915558.201608000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57852, "dst_port": 53, "tcp_stream": null, "udp_stream": 667, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.loosefoot.com", "dns.qry.type": "1" } }, { "event_id": "evt-73957eb7d82a179a83ea5b4c", "kind": "dns", "frame_number": 51639, "timestamp_epoch": "1634915558.288115000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57852, "tcp_stream": null, "udp_stream": 667, "fields": { "dns.a": "208.68.106.6", "dns.cname": "mail.lfchosting.com,smtp-1.loosefoot.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.loosefoot.com", "dns.qry.type": "1" } }, { "event_id": "evt-2e98c1b111f46fbcb234b047", "kind": "dns", "frame_number": 51701, "timestamp_epoch": "1634915563.732948000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53709, "dst_port": 53, "tcp_stream": null, "udp_stream": 668, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d04597f88c08a6e05de0431f", "kind": "dns", "frame_number": 51705, "timestamp_epoch": "1634915563.814827000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53709, "tcp_stream": null, "udp_stream": 668, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6f1d40f518fa8a6b8f74d262", "kind": "dns", "frame_number": 51719, "timestamp_epoch": "1634915568.154298000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61304, "dst_port": 53, "tcp_stream": null, "udp_stream": 669, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-498172f52041cf334e038279", "kind": "dns", "frame_number": 51720, "timestamp_epoch": "1634915568.217897000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61304, "tcp_stream": null, "udp_stream": 669, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-38f7b3b823399ad0e656f5b5", "kind": "dns", "frame_number": 51755, "timestamp_epoch": "1634915572.516734000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50377, "dst_port": 53, "tcp_stream": null, "udp_stream": 670, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6a6863a3cfa08d1853542d8d", "kind": "dns", "frame_number": 51756, "timestamp_epoch": "1634915572.600310000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50377, "tcp_stream": null, "udp_stream": 670, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2c6287e8423baddc4b5476c6", "kind": "dns", "frame_number": 51808, "timestamp_epoch": "1634915579.258302000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65343, "dst_port": 53, "tcp_stream": null, "udp_stream": 671, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-644537ff588cad9cfcf483b2", "kind": "dns", "frame_number": 51809, "timestamp_epoch": "1634915579.258589000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65343, "tcp_stream": null, "udp_stream": 671, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c3c74e1392bef8e3ac6f8090", "kind": "dns", "frame_number": 51818, "timestamp_epoch": "1634915579.498326000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55073, "dst_port": 53, "tcp_stream": null, "udp_stream": 673, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-6486035242cd1725c76f3deb", "kind": "dns", "frame_number": 51819, "timestamp_epoch": "1634915579.528752000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55073, "dst_port": 53, "tcp_stream": null, "udp_stream": 673, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-d5cfdc273bb5d6ee5abc773e", "kind": "dns", "frame_number": 51821, "timestamp_epoch": "1634915579.753138000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55073, "tcp_stream": null, "udp_stream": 673, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-3573ec40c9b8dd74c63d1893", "kind": "dns", "frame_number": 53946, "timestamp_epoch": "1634915612.140267000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64028, "dst_port": 53, "tcp_stream": null, "udp_stream": 674, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.debtmend.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-8222571ee6d47caafd035cb2", "kind": "dns", "frame_number": 53947, "timestamp_epoch": "1634915612.171172000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64028, "dst_port": 53, "tcp_stream": null, "udp_stream": 674, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.debtmend.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-833048cb29f084a83429d7c4", "kind": "dns", "frame_number": 53950, "timestamp_epoch": "1634915613.187411000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64028, "dst_port": 53, "tcp_stream": null, "udp_stream": 674, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.debtmend.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-62961e1c2850f31fedc29bf9", "kind": "dns", "frame_number": 53954, "timestamp_epoch": "1634915615.203091000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64028, "dst_port": 53, "tcp_stream": null, "udp_stream": 674, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.debtmend.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-5bebfd7d6e93b81e265dcf28", "kind": "dns", "frame_number": 53956, "timestamp_epoch": "1634915616.071020000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64028, "tcp_stream": null, "udp_stream": 674, "fields": { "dns.a": "197.221.10.57", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.debtmend.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-d97de853c6cdc1694358a829", "kind": "dns", "frame_number": 54177, "timestamp_epoch": "1634915629.222240000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49836, "dst_port": 53, "tcp_stream": null, "udp_stream": 675, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.nazarioconstruction.com", "dns.qry.type": "1" } }, { "event_id": "evt-947e826434c171fa165eed7b", "kind": "dns", "frame_number": 54179, "timestamp_epoch": "1634915629.249852000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49836, "dst_port": 53, "tcp_stream": null, "udp_stream": 675, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.nazarioconstruction.com", "dns.qry.type": "1" } }, { "event_id": "evt-6e8ca4377399b3a4300fd040", "kind": "dns", "frame_number": 54181, "timestamp_epoch": "1634915629.326249000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49836, "tcp_stream": null, "udp_stream": 675, "fields": { "dns.a": "65.254.248.195", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.nazarioconstruction.com", "dns.qry.type": "1" } }, { "event_id": "evt-67a52c686dd083bd5391584a", "kind": "dns", "frame_number": 54347, "timestamp_epoch": "1634915639.507085000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58511, "dst_port": 53, "tcp_stream": null, "udp_stream": 676, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta-01.webnode.com", "dns.qry.type": "1" } }, { "event_id": "evt-804534f44d7667f69c8251df", "kind": "dns", "frame_number": 54348, "timestamp_epoch": "1634915639.530707000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58511, "dst_port": 53, "tcp_stream": null, "udp_stream": 676, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta-01.webnode.com", "dns.qry.type": "1" } }, { "event_id": "evt-3083acaa59b7fcc87aacac77", "kind": "dns", "frame_number": 54351, "timestamp_epoch": "1634915640.547806000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58511, "dst_port": 53, "tcp_stream": null, "udp_stream": 676, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta-01.webnode.com", "dns.qry.type": "1" } }, { "event_id": "evt-c390f5e4432c5019338e47c2", "kind": "dns", "frame_number": 54359, "timestamp_epoch": "1634915642.562422000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58511, "dst_port": 53, "tcp_stream": null, "udp_stream": 676, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta-01.webnode.com", "dns.qry.type": "1" } }, { "event_id": "evt-46967ca2246d79fa5931cf57", "kind": "dns", "frame_number": 54361, "timestamp_epoch": "1634915643.830713000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58511, "tcp_stream": null, "udp_stream": 676, "fields": { "dns.a": "217.11.242.15,217.11.242.6,217.11.242.81", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mta-01.webnode.com", "dns.qry.type": "1" } }, { "event_id": "evt-73b32150d9a7cb27c111111c", "kind": "dns", "frame_number": 54427, "timestamp_epoch": "1634915647.142244000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61093, "dst_port": 53, "tcp_stream": null, "udp_stream": 677, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.akinao-lab.com", "dns.qry.type": "1" } }, { "event_id": "evt-d31bf2c17c4fef0ac0c26ddb", "kind": "dns", "frame_number": 54428, "timestamp_epoch": "1634915647.171963000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61093, "dst_port": 53, "tcp_stream": null, "udp_stream": 677, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.akinao-lab.com", "dns.qry.type": "1" } }, { "event_id": "evt-2abce26f2e6901ee0e93f77f", "kind": "dns", "frame_number": 54431, "timestamp_epoch": "1634915647.306081000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61093, "tcp_stream": null, "udp_stream": 677, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.akinao-lab.com", "dns.qry.type": "1" } }, { "event_id": "evt-3b252b6f0241a9c377d6b1df", "kind": "dns", "frame_number": 54595, "timestamp_epoch": "1634915655.861428000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65320, "dst_port": 53, "tcp_stream": null, "udp_stream": 678, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-e7daa2dbc07799f52228d8bf", "kind": "dns", "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65320, "tcp_stream": null, "udp_stream": 678, "fields": { "dns.a": "52.96.22.178,52.96.121.178,40.97.121.2,52.96.55.242", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-dd09138123732528f5ad1dfe", "kind": "dns", "frame_number": 54921, "timestamp_epoch": "1634915685.499305000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50215, "dst_port": 53, "tcp_stream": null, "udp_stream": 679, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-805feeacb8217aeec1377879", "kind": "dns", "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50215, "tcp_stream": null, "udp_stream": 679, "fields": { "dns.a": "40.97.121.18,52.96.57.50,40.97.121.34,52.96.57.98", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-75613dbf276fa74dfd819a8a", "kind": "dns", "frame_number": 55080, "timestamp_epoch": "1634915700.708092000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 51337, "dst_port": 53, "tcp_stream": null, "udp_stream": 680, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-91428e0e13215b4b5e499e9a", "kind": "dns", "frame_number": 55081, "timestamp_epoch": "1634915700.708374000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51337, "tcp_stream": null, "udp_stream": 680, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-dce8cc7c3de43f15e8bd2b08", "kind": "dns", "frame_number": 55207, "timestamp_epoch": "1634915711.706754000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56831, "dst_port": 53, "tcp_stream": null, "udp_stream": 682, "fields": { "dns.flags.response": "False", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-56ee46e174e008f7abeaca83", "kind": "dns", "frame_number": 55211, "timestamp_epoch": "1634915711.752283000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56831, "dst_port": 53, "tcp_stream": null, "udp_stream": 682, "fields": { "dns.flags.response": "False", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-c5305a0eeb21c631e4c18cd3", "kind": "dns", "frame_number": 55212, "timestamp_epoch": "1634915711.820815000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56831, "tcp_stream": null, "udp_stream": 682, "fields": { "dns.a": "70.39.150.220", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-56ce84cbe7aa1cd6086687fb", "kind": "dns", "frame_number": 55418, "timestamp_epoch": "1634915720.446277000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-47572de7d3894eef791700f9", "kind": "dns", "frame_number": 55419, "timestamp_epoch": "1634915720.485158000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-a517e23b14d0775effb36e2a", "kind": "dns", "frame_number": 55422, "timestamp_epoch": "1634915721.487199000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-1cb615ea2215e85dbfea0771", "kind": "dns", "frame_number": 55427, "timestamp_epoch": "1634915723.501882000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-b790c6438c30e1de68d1032e", "kind": "dns", "frame_number": 55440, "timestamp_epoch": "1634915727.518777000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54297, "dst_port": 53, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-d8020bcd3fd9ad4de41a0680", "kind": "dns", "frame_number": 55443, "timestamp_epoch": "1634915728.597238000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54297, "tcp_stream": null, "udp_stream": 683, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-99f22c2583eb6c53becbff14", "kind": "dns", "frame_number": 55513, "timestamp_epoch": "1634915734.730177000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60011, "dst_port": 53, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-1d75efdf16231a16b1d667af", "kind": "dns", "frame_number": 55514, "timestamp_epoch": "1634915734.752397000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60011, "dst_port": 53, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-f208187798ea811d6efa2302", "kind": "dns", "frame_number": 55517, "timestamp_epoch": "1634915735.752567000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60011, "dst_port": 53, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2fb124d0f90efb0a460b8ed9", "kind": "dns", "frame_number": 55522, "timestamp_epoch": "1634915737.769096000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60011, "dst_port": 53, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-dce3a5526ba5e9dd911de509", "kind": "dns", "frame_number": 55536, "timestamp_epoch": "1634915741.769434000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60011, "dst_port": 53, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-67f1d571404bef0a852f3c1d", "kind": "dns", "frame_number": 55538, "timestamp_epoch": "1634915743.112516000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60011, "tcp_stream": null, "udp_stream": 684, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-cd4e99e4a05a201b1332d194", "kind": "dns", "frame_number": 55547, "timestamp_epoch": "1634915744.549818000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64975, "dst_port": 53, "tcp_stream": null, "udp_stream": 685, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-ead1cc62f11198e26299b4db", "kind": "dns", "frame_number": 55549, "timestamp_epoch": "1634915744.596180000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64975, "dst_port": 53, "tcp_stream": null, "udp_stream": 685, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-144f49ee52e8a71662d2ce4d", "kind": "dns", "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64975, "tcp_stream": null, "udp_stream": 685, "fields": { "dns.a": "52.96.121.194,40.97.96.2,52.96.57.66,52.96.8.130", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7103ecc1631fdd26b39161a", "kind": "dns", "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64975, "tcp_stream": null, "udp_stream": 685, "fields": { "dns.a": "40.97.96.2,52.96.57.66,52.96.8.130,52.96.121.194", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-1645568f4f4140edd9591826", "kind": "dns", "frame_number": 55651, "timestamp_epoch": "1634915751.209680000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52934, "dst_port": 53, "tcp_stream": null, "udp_stream": 686, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-b62048e34406af484ff9b673", "kind": "dns", "frame_number": 55652, "timestamp_epoch": "1634915751.209906000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52934, "tcp_stream": null, "udp_stream": 686, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-75b3d7055254d342c9686757", "kind": "dns", "frame_number": 55654, "timestamp_epoch": "1634915751.211365000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64545, "dst_port": 53, "tcp_stream": null, "udp_stream": 688, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-9fed0fb1f1fd9f3d30dd5e83", "kind": "dns", "frame_number": 55655, "timestamp_epoch": "1634915751.212115000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64545, "tcp_stream": null, "udp_stream": 688, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-0a07029adedc7c256ba86686", "kind": "dns", "frame_number": 55720, "timestamp_epoch": "1634915757.323029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59551, "dst_port": 53, "tcp_stream": null, "udp_stream": 689, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-3ff53fc597f88d87b85bd577", "kind": "dns", "frame_number": 55721, "timestamp_epoch": "1634915757.379603000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59551, "dst_port": 53, "tcp_stream": null, "udp_stream": 689, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-8214db1000cc76b0ed386cff", "kind": "dns", "frame_number": 55722, "timestamp_epoch": "1634915757.416872000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59551, "tcp_stream": null, "udp_stream": 689, "fields": { "dns.a": "13.89.178.27", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus03.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-e5db9e50f8306b26daa88451", "kind": "dns", "frame_number": 55847, "timestamp_epoch": "1634915788.551718000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65278, "dst_port": 53, "tcp_stream": null, "udp_stream": 690, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.lecmg.fr", "dns.qry.type": "1" } }, { "event_id": "evt-70f144a284e46b2a1f2b623f", "kind": "dns", "frame_number": 55849, "timestamp_epoch": "1634915788.598499000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65278, "dst_port": 53, "tcp_stream": null, "udp_stream": 690, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.lecmg.fr", "dns.qry.type": "1" } }, { "event_id": "evt-709be9cb8c1aaa4cf68e7cb7", "kind": "dns", "frame_number": 55850, "timestamp_epoch": "1634915788.989651000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65278, "tcp_stream": null, "udp_stream": 690, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.lecmg.fr", "dns.qry.type": "1" } }, { "event_id": "evt-f413f8b4fb1b9e6f2ede95ca", "kind": "dns", "frame_number": 55891, "timestamp_epoch": "1634915790.804635000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55051, "dst_port": 53, "tcp_stream": null, "udp_stream": 691, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.goldmarkconsultants.com", "dns.qry.type": "1" } }, { "event_id": "evt-3e9e2cb89c03b93acbdf3d10", "kind": "dns", "frame_number": 55893, "timestamp_epoch": "1634915790.848443000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55051, "dst_port": 53, "tcp_stream": null, "udp_stream": 691, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.goldmarkconsultants.com", "dns.qry.type": "1" } }, { "event_id": "evt-6fd446281813997ab6f78d53", "kind": "dns", "frame_number": 55894, "timestamp_epoch": "1634915790.948301000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55051, "tcp_stream": null, "udp_stream": 691, "fields": { "dns.a": "34.193.71.224", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.goldmarkconsultants.com", "dns.qry.type": "1" } }, { "event_id": "evt-8d9e42f63b9ef74d906691f3", "kind": "dns", "frame_number": 56013, "timestamp_epoch": "1634915811.896350000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60664, "dst_port": 53, "tcp_stream": null, "udp_stream": 352, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-138d69cf486dd2e3b85b7931", "kind": "dns", "frame_number": 56014, "timestamp_epoch": "1634915811.896726000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60664, "tcp_stream": null, "udp_stream": 352, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-611ef6434f46f9ecf55486fe", "kind": "dns", "frame_number": 56016, "timestamp_epoch": "1634915811.899276000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63533, "dst_port": 53, "tcp_stream": null, "udp_stream": 692, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-f8a1c51e448d554c679d253f", "kind": "dns", "frame_number": 56020, "timestamp_epoch": "1634915811.900450000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63533, "tcp_stream": null, "udp_stream": 692, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-8eecf60e2ff79e8793276695", "kind": "dns", "frame_number": 56068, "timestamp_epoch": "1634915817.067518000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55510, "dst_port": 53, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-3bc61fac835375f8f8f4f423", "kind": "dns", "frame_number": 56069, "timestamp_epoch": "1634915817.098940000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55510, "dst_port": 53, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-b7ebda396a82d7ff4a3d49af", "kind": "dns", "frame_number": 56075, "timestamp_epoch": "1634915818.089794000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60687, "dst_port": 53, "tcp_stream": null, "udp_stream": 695, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-7993057c2c32254af67e2724", "kind": "dns", "frame_number": 56076, "timestamp_epoch": "1634915818.113621000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55510, "dst_port": 53, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2cb8c61b54a9b06ad02e1f33", "kind": "dns", "frame_number": 56077, "timestamp_epoch": "1634915818.129590000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60687, "dst_port": 53, "tcp_stream": null, "udp_stream": 695, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-5fd38f48dd3108d02540abaf", "kind": "dns", "frame_number": 56078, "timestamp_epoch": "1634915818.130774000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60687, "tcp_stream": null, "udp_stream": 695, "fields": { "dns.a": "20.50.80.210", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdneu05.northeurope.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-03fbe871ae0de8bb6754db3f", "kind": "dns", "frame_number": 56111, "timestamp_epoch": "1634915820.128854000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55510, "dst_port": 53, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-7ad697a39a86c12bcd3563a2", "kind": "dns", "frame_number": 56131, "timestamp_epoch": "1634915824.129672000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55510, "dst_port": 53, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-809cc224e38d5466e2f72ba3", "kind": "dns", "frame_number": 56135, "timestamp_epoch": "1634915824.915652000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55510, "tcp_stream": null, "udp_stream": 694, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-d344dc81f3b9412aadc0bcac", "kind": "dns", "frame_number": 56145, "timestamp_epoch": "1634915825.580857000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60220, "dst_port": 53, "tcp_stream": null, "udp_stream": 696, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail04.l4email.com", "dns.qry.type": "1" } }, { "event_id": "evt-368bb1c92c6252b494b8c92e", "kind": "dns", "frame_number": 56146, "timestamp_epoch": "1634915825.598859000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60220, "dst_port": 53, "tcp_stream": null, "udp_stream": 696, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail04.l4email.com", "dns.qry.type": "1" } }, { "event_id": "evt-dcaca4b48b6da553bcf84d5f", "kind": "dns", "frame_number": 56147, "timestamp_epoch": "1634915825.621000000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60220, "tcp_stream": null, "udp_stream": 696, "fields": { "dns.a": "65.111.191.196", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail04.l4email.com", "dns.qry.type": "1" } }, { "event_id": "evt-2a29c40913bd317f0667df51", "kind": "dns", "frame_number": 56310, "timestamp_epoch": "1634915835.053840000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55358, "dst_port": 53, "tcp_stream": null, "udp_stream": 697, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-57a1bb230b4670f6a969d0e0", "kind": "dns", "frame_number": 56311, "timestamp_epoch": "1634915835.097845000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55358, "dst_port": 53, "tcp_stream": null, "udp_stream": 697, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-243431bb0562ca74e26a52f5", "kind": "dns", "frame_number": 56314, "timestamp_epoch": "1634915835.125936000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55358, "tcp_stream": null, "udp_stream": 697, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-0fdce38c96c3d4ce0c6512bf", "kind": "dns", "frame_number": 56343, "timestamp_epoch": "1634915843.577936000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61733, "dst_port": 53, "tcp_stream": null, "udp_stream": 698, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-892ca22f5097daa31f9e1b2f", "kind": "dns", "frame_number": 56345, "timestamp_epoch": "1634915843.578231000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61733, "tcp_stream": null, "udp_stream": 698, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-7c10fade5742f9d58bb77793", "kind": "dns", "frame_number": 56349, "timestamp_epoch": "1634915843.580566000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64611, "dst_port": 53, "tcp_stream": null, "udp_stream": 700, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-d5acefa822427469db08b40f", "kind": "dns", "frame_number": 56351, "timestamp_epoch": "1634915843.581725000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64611, "tcp_stream": null, "udp_stream": 700, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-0d3db8ea013ec3dd28204155", "kind": "dns", "frame_number": 56388, "timestamp_epoch": "1634915849.019882000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62517, "dst_port": 53, "tcp_stream": null, "udp_stream": 701, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c3d4182d1cdf6178c613e935", "kind": "dns", "frame_number": 56389, "timestamp_epoch": "1634915849.071661000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62517, "tcp_stream": null, "udp_stream": 701, "fields": { "dns.a": "20.50.80.210", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdneu05.northeurope.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b587b3de029e0746e441062e", "kind": "dns", "frame_number": 56592, "timestamp_epoch": "1634915863.166672000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62299, "dst_port": 53, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-66027fbd433054246ee4a77d", "kind": "dns", "frame_number": 56594, "timestamp_epoch": "1634915863.209259000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62299, "dst_port": 53, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-fc84c21a2cb96213ff0406e8", "kind": "dns", "frame_number": 56597, "timestamp_epoch": "1634915864.209635000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62299, "dst_port": 53, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-e13d390e97e754c398a2f54e", "kind": "dns", "frame_number": 56616, "timestamp_epoch": "1634915866.224503000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62299, "dst_port": 53, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-b0db63b84af6e16cd9f522f6", "kind": "dns", "frame_number": 56637, "timestamp_epoch": "1634915870.240083000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62299, "dst_port": 53, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-8c3e57c44d62a8adf63cb975", "kind": "dns", "frame_number": 56641, "timestamp_epoch": "1634915871.126057000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62299, "tcp_stream": null, "udp_stream": 704, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-a5e02eb95ecd0848e984860a", "kind": "dns", "frame_number": 56651, "timestamp_epoch": "1634915872.127710000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53726, "dst_port": 53, "tcp_stream": null, "udp_stream": 705, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.bethnet.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-80e75cf6f5fcdeef7bb8b4b8", "kind": "dns", "frame_number": 56652, "timestamp_epoch": "1634915872.146369000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53726, "dst_port": 53, "tcp_stream": null, "udp_stream": 705, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.bethnet.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-112f36790aeaadc96916741e", "kind": "dns", "frame_number": 56655, "timestamp_epoch": "1634915872.519220000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53726, "tcp_stream": null, "udp_stream": 705, "fields": { "dns.a": "197.242.67.121", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.bethnet.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-42da58c270b91bf5bb28e50f", "kind": "dns", "frame_number": 56681, "timestamp_epoch": "1634915875.903759000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63923, "dst_port": 53, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-186f5a3c1d9f73c11bff8b54", "kind": "dns", "frame_number": 56682, "timestamp_epoch": "1634915875.928199000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63923, "dst_port": 53, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-d011c9ef6334a55d079a9d72", "kind": "dns", "frame_number": 56686, "timestamp_epoch": "1634915876.928464000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63923, "dst_port": 53, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-66cbb8a2d822f5311d05ffce", "kind": "dns", "frame_number": 56691, "timestamp_epoch": "1634915878.928692000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63923, "dst_port": 53, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-a353ff87d34c0aa680916d0c", "kind": "dns", "frame_number": 56703, "timestamp_epoch": "1634915882.943670000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63923, "dst_port": 53, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-0dcaa990ad30941c0433d327", "kind": "dns", "frame_number": 56707, "timestamp_epoch": "1634915883.975322000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63923, "tcp_stream": null, "udp_stream": 706, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-c8e35dfe8f3729ebc2f5c5f5", "kind": "dns", "frame_number": 56718, "timestamp_epoch": "1634915884.753429000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55917, "dst_port": 53, "tcp_stream": null, "udp_stream": 707, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.xenium-partners.fr", "dns.qry.type": "1" } }, { "event_id": "evt-4faa607e51641b0ff92806ac", "kind": "dns", "frame_number": 56720, "timestamp_epoch": "1634915884.803916000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55917, "dst_port": 53, "tcp_stream": null, "udp_stream": 707, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.xenium-partners.fr", "dns.qry.type": "1" } }, { "event_id": "evt-797168bf65c5a5f1654e6c5f", "kind": "dns", "frame_number": 56721, "timestamp_epoch": "1634915884.889335000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55917, "tcp_stream": null, "udp_stream": 707, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.xenium-partners.fr", "dns.qry.type": "1" } }, { "event_id": "evt-34175100a7bd1fe1617a40de", "kind": "dns", "frame_number": 56964, "timestamp_epoch": "1634915893.752985000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53707, "dst_port": 53, "tcp_stream": null, "udp_stream": 708, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-fa37a02fe4ddf1b6cf4e35ca", "kind": "dns", "frame_number": 56965, "timestamp_epoch": "1634915893.803459000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53707, "dst_port": 53, "tcp_stream": null, "udp_stream": 708, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-fb348e75f1bee7ec7304ffe9", "kind": "dns", "frame_number": 56966, "timestamp_epoch": "1634915893.822917000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53707, "tcp_stream": null, "udp_stream": 708, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-bd2aba3a51ad8a8393d7425b", "kind": "dns", "frame_number": 57446, "timestamp_epoch": "1634915924.227907000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49696, "dst_port": 53, "tcp_stream": null, "udp_stream": 709, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cc0b25eb5247fd3615d11a8f", "kind": "dns", "frame_number": 57448, "timestamp_epoch": "1634915924.332745000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49696, "tcp_stream": null, "udp_stream": 709, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2e19cb4d9354c971550cbb84", "kind": "dns", "frame_number": 57635, "timestamp_epoch": "1634915931.822036000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57770, "dst_port": 53, "tcp_stream": null, "udp_stream": 710, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-18ff72034f77aea1abd6ac92", "kind": "dns", "frame_number": 57637, "timestamp_epoch": "1634915931.912642000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57770, "tcp_stream": null, "udp_stream": 710, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-db397ff92873712e8124adf1", "kind": "dns", "frame_number": 57665, "timestamp_epoch": "1634915936.258767000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54796, "dst_port": 53, "tcp_stream": null, "udp_stream": 711, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2a2585c01495c7d8c28a2884", "kind": "dns", "frame_number": 57667, "timestamp_epoch": "1634915936.325824000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54796, "tcp_stream": null, "udp_stream": 711, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4393c5936477ecc89cabd4b9", "kind": "dns", "frame_number": 57720, "timestamp_epoch": "1634915953.618068000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55111, "dst_port": 53, "tcp_stream": null, "udp_stream": 712, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4377e3aac63f00ab4823e80f", "kind": "dns", "frame_number": 57721, "timestamp_epoch": "1634915953.687284000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55111, "tcp_stream": null, "udp_stream": 712, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1c95b5c80b8e71b862933791", "kind": "dns", "frame_number": 57734, "timestamp_epoch": "1634915958.087086000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63650, "dst_port": 53, "tcp_stream": null, "udp_stream": 713, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-365e26c83797bb9bf941c92b", "kind": "dns", "frame_number": 57735, "timestamp_epoch": "1634915958.153284000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63650, "tcp_stream": null, "udp_stream": 713, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7988fc39d41a676d5f8bbc7e", "kind": "dns", "frame_number": 57749, "timestamp_epoch": "1634915962.494873000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60195, "dst_port": 53, "tcp_stream": null, "udp_stream": 714, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e12f5917845cba47000344a1", "kind": "dns", "frame_number": 57750, "timestamp_epoch": "1634915962.579221000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60195, "tcp_stream": null, "udp_stream": 714, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-404aad0b2054a6bbba1a9b66", "kind": "dns", "frame_number": 57799, "timestamp_epoch": "1634915971.437623000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60100, "dst_port": 53, "tcp_stream": null, "udp_stream": 715, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-6ea9b4cca05cbccf1ffe878d", "kind": "dns", "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60100, "tcp_stream": null, "udp_stream": 715, "fields": { "dns.a": "52.96.55.242,52.96.191.114,52.96.10.242,52.96.57.34", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-14f9d279b8e13a90eed24bab", "kind": "dns", "frame_number": 57902, "timestamp_epoch": "1634915979.869481000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54314, "dst_port": 53, "tcp_stream": null, "udp_stream": 716, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6f4cb7f29934365bd3c5ca9b", "kind": "dns", "frame_number": 57903, "timestamp_epoch": "1634915979.926263000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54314, "tcp_stream": null, "udp_stream": 716, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-59a7197dba2409ff395615f7", "kind": "dns", "frame_number": 57926, "timestamp_epoch": "1634915984.213613000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54990, "dst_port": 53, "tcp_stream": null, "udp_stream": 717, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5eb0140908a83de8b01e74cb", "kind": "dns", "frame_number": 57927, "timestamp_epoch": "1634915984.266132000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54990, "tcp_stream": null, "udp_stream": 717, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b06c22df7138be0dab933b67", "kind": "dns", "frame_number": 57935, "timestamp_epoch": "1634915984.476336000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51737, "dst_port": 53, "tcp_stream": null, "udp_stream": 718, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.come-paris.fr", "dns.qry.type": "1" } }, { "event_id": "evt-9b4df9f3caf429037ae1568e", "kind": "dns", "frame_number": 57938, "timestamp_epoch": "1634915984.555221000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51737, "dst_port": 53, "tcp_stream": null, "udp_stream": 718, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.come-paris.fr", "dns.qry.type": "1" } }, { "event_id": "evt-ed20f3d3985a137b1cc9a747", "kind": "dns", "frame_number": 57939, "timestamp_epoch": "1634915984.768572000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51737, "tcp_stream": null, "udp_stream": 718, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.come-paris.fr", "dns.qry.type": "1" } }, { "event_id": "evt-3914cba4192cf5e01c1975c7", "kind": "dns", "frame_number": 57998, "timestamp_epoch": "1634915988.558556000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63847, "dst_port": 53, "tcp_stream": null, "udp_stream": 719, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-30d9491ae4cb05d5860e34c6", "kind": "dns", "frame_number": 57999, "timestamp_epoch": "1634915988.614487000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63847, "tcp_stream": null, "udp_stream": 719, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-953cec8977559aa039c2f473", "kind": "dns", "frame_number": 58021, "timestamp_epoch": "1634915989.434794000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63455, "dst_port": 53, "tcp_stream": null, "udp_stream": 720, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-36a9a676b5537bfa08a810b0", "kind": "dns", "frame_number": 58025, "timestamp_epoch": "1634915989.494389000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63455, "dst_port": 53, "tcp_stream": null, "udp_stream": 720, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-195852cfa7210e9499307ead", "kind": "dns", "frame_number": 58026, "timestamp_epoch": "1634915989.502323000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63455, "tcp_stream": null, "udp_stream": 720, "fields": { "dns.a": "52.183.220.149", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-a550802761fe4747a57b31ca", "kind": "dns", "frame_number": 58161, "timestamp_epoch": "1634916001.036727000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53259, "dst_port": 53, "tcp_stream": null, "udp_stream": 721, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.eolas.fr", "dns.qry.type": "1" } }, { "event_id": "evt-eb89227a5ca1c532a47d5b33", "kind": "dns", "frame_number": 58163, "timestamp_epoch": "1634916001.087612000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53259, "dst_port": 53, "tcp_stream": null, "udp_stream": 721, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.eolas.fr", "dns.qry.type": "1" } }, { "event_id": "evt-64776f6d0a35eb28dbc655ea", "kind": "dns", "frame_number": 58164, "timestamp_epoch": "1634916001.176536000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53259, "tcp_stream": null, "udp_stream": 721, "fields": { "dns.a": "31.193.50.122,31.193.50.2", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.eolas.fr", "dns.qry.type": "1" } }, { "event_id": "evt-0c5249ab4bb591bc9284185e", "kind": "dns", "frame_number": 58183, "timestamp_epoch": "1634916005.870223000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52956, "dst_port": 53, "tcp_stream": null, "udp_stream": 722, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bcc5123aff74aa1b378ed992", "kind": "dns", "frame_number": 58184, "timestamp_epoch": "1634916005.945531000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52956, "tcp_stream": null, "udp_stream": 722, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-63189cc2e9a34afab2e0f952", "kind": "dns", "frame_number": 58245, "timestamp_epoch": "1634916010.245828000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57838, "dst_port": 53, "tcp_stream": null, "udp_stream": 723, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2e72ef0ea5e978c41940636f", "kind": "dns", "frame_number": 58251, "timestamp_epoch": "1634916010.308034000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57838, "tcp_stream": null, "udp_stream": 723, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c79a2dab438ec08d2c9db401", "kind": "dns", "frame_number": 58316, "timestamp_epoch": "1634916014.605498000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63997, "dst_port": 53, "tcp_stream": null, "udp_stream": 724, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-564f594dee8dbf9fac696d0b", "kind": "dns", "frame_number": 58317, "timestamp_epoch": "1634916014.662693000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63997, "tcp_stream": null, "udp_stream": 724, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cbbb00093d8e1e4f85e081af", "kind": "dns", "frame_number": 58328, "timestamp_epoch": "1634916015.113510000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57838, "dst_port": 53, "tcp_stream": null, "udp_stream": 725, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8f6ab4efdce47d48b06263f1", "kind": "dns", "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57838, "tcp_stream": null, "udp_stream": 725, "fields": { "dns.a": "40.97.199.114,40.97.121.34,40.97.121.18,52.96.121.146", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-299b031ef11d3ff0012f0c6a", "kind": "dns", "frame_number": 58500, "timestamp_epoch": "1634916032.168693000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56008, "dst_port": 53, "tcp_stream": null, "udp_stream": 726, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-feda1d32eef7d1ebf996a46f", "kind": "dns", "frame_number": 58501, "timestamp_epoch": "1634916032.248286000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56008, "tcp_stream": null, "udp_stream": 726, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c071ac4ef8e0eb5080decad2", "kind": "dns", "frame_number": 58529, "timestamp_epoch": "1634916036.557513000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55657, "dst_port": 53, "tcp_stream": null, "udp_stream": 727, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-43cf98e2ebebe5e5cd0ced20", "kind": "dns", "frame_number": 58534, "timestamp_epoch": "1634916036.607542000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55657, "tcp_stream": null, "udp_stream": 727, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-60e2622d26702a52f36224d3", "kind": "dns", "frame_number": 58618, "timestamp_epoch": "1634916040.902294000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62498, "dst_port": 53, "tcp_stream": null, "udp_stream": 728, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bd1c0c185a3494bd2b9a117f", "kind": "dns", "frame_number": 58619, "timestamp_epoch": "1634916040.947783000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62498, "tcp_stream": null, "udp_stream": 728, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-46e9a25c5ed9fd9d58f9c194", "kind": "dns", "frame_number": 58656, "timestamp_epoch": "1634916045.058882000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57567, "dst_port": 53, "tcp_stream": null, "udp_stream": 729, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-56b07eee5d6e3fb7456c3a01", "kind": "dns", "frame_number": 58657, "timestamp_epoch": "1634916045.100546000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57567, "tcp_stream": null, "udp_stream": 729, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-882c4d4fe724378b89c02224", "kind": "dns", "frame_number": 58716, "timestamp_epoch": "1634916058.497618000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65131, "dst_port": 53, "tcp_stream": null, "udp_stream": 730, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-df37307c21a5a94c04be5b00", "kind": "dns", "frame_number": 58721, "timestamp_epoch": "1634916058.559426000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65131, "tcp_stream": null, "udp_stream": 730, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bae89804b55369d3f4190d71", "kind": "dns", "frame_number": 58734, "timestamp_epoch": "1634916059.942415000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62245, "dst_port": 53, "tcp_stream": null, "udp_stream": 731, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-cfd09f50fe1ad32f4634963b", "kind": "dns", "frame_number": 58735, "timestamp_epoch": "1634916060.014151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62245, "tcp_stream": null, "udp_stream": 731, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-6efe541cc4a35b3865d6e84d", "kind": "dns", "frame_number": 58764, "timestamp_epoch": "1634916062.871359000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61546, "dst_port": 53, "tcp_stream": null, "udp_stream": 732, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-58eaf0c935d68f9da4fbf08d", "kind": "dns", "frame_number": 58765, "timestamp_epoch": "1634916062.936141000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61546, "tcp_stream": null, "udp_stream": 732, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2db8d6a614c7f4886b487588", "kind": "dns", "frame_number": 58806, "timestamp_epoch": "1634916067.230260000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54410, "dst_port": 53, "tcp_stream": null, "udp_stream": 733, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3fe6777d286978b8b6737f30", "kind": "dns", "frame_number": 58808, "timestamp_epoch": "1634916067.297551000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54410, "tcp_stream": null, "udp_stream": 733, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fa44d9b68993bc5cb9ffc8c3", "kind": "dns", "frame_number": 58909, "timestamp_epoch": "1634916075.061602000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49536, "dst_port": 53, "tcp_stream": null, "udp_stream": 734, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-dd42756949199e3ca5eac18c", "kind": "dns", "frame_number": 58910, "timestamp_epoch": "1634916075.138058000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49536, "dst_port": 53, "tcp_stream": null, "udp_stream": 734, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-4057ee0c21f95adbd437d791", "kind": "dns", "frame_number": 58911, "timestamp_epoch": "1634916075.171514000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49536, "tcp_stream": null, "udp_stream": 734, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-71ad5cee837c0543f3026a9c", "kind": "dns", "frame_number": 58938, "timestamp_epoch": "1634916080.399713000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62534, "dst_port": 53, "tcp_stream": null, "udp_stream": 735, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ptolemee.com", "dns.qry.type": "1" } }, { "event_id": "evt-0a2dd1019f6f2298feac7b1c", "kind": "dns", "frame_number": 58944, "timestamp_epoch": "1634916080.447739000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62534, "dst_port": 53, "tcp_stream": null, "udp_stream": 735, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ptolemee.com", "dns.qry.type": "1" } }, { "event_id": "evt-a1d7cf92ed08295f6f0853ad", "kind": "dns", "frame_number": 58946, "timestamp_epoch": "1634916080.627397000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62534, "tcp_stream": null, "udp_stream": 735, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.ptolemee.com", "dns.qry.type": "1" } }, { "event_id": "evt-24a37f47c0dbe2269edb88c2", "kind": "dns", "frame_number": 58953, "timestamp_epoch": "1634916080.780532000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56290, "dst_port": 53, "tcp_stream": null, "udp_stream": 736, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-da8fa4c91dee0b390b77d381", "kind": "dns", "frame_number": 58954, "timestamp_epoch": "1634916080.833762000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56290, "tcp_stream": null, "udp_stream": 736, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-5224c28aeaf81e204610050b", "kind": "dns", "frame_number": 59284, "timestamp_epoch": "1634916084.590390000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54475, "dst_port": 53, "tcp_stream": null, "udp_stream": 737, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-95f348a684de13d6a3d85bdb", "kind": "dns", "frame_number": 59285, "timestamp_epoch": "1634916084.681504000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54475, "tcp_stream": null, "udp_stream": 737, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-65e53aac7c20b00e5dfee37b", "kind": "dns", "frame_number": 59298, "timestamp_epoch": "1634916085.312045000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49982, "dst_port": 53, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-56eeb158a2292b51d408113d", "kind": "dns", "frame_number": 59300, "timestamp_epoch": "1634916085.385549000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49982, "dst_port": 53, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2e30b72d3e697a4c5bddb96c", "kind": "dns", "frame_number": 59308, "timestamp_epoch": "1634916086.388470000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49982, "dst_port": 53, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2d83654782b3daf45c826e19", "kind": "dns", "frame_number": 59316, "timestamp_epoch": "1634916088.402581000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49982, "dst_port": 53, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-4d33471ac3b640b94edcfdb8", "kind": "dns", "frame_number": 59317, "timestamp_epoch": "1634916088.981313000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58765, "dst_port": 53, "tcp_stream": null, "udp_stream": 739, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6586ee96b637f1289947a07c", "kind": "dns", "frame_number": 59318, "timestamp_epoch": "1634916089.037163000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58765, "tcp_stream": null, "udp_stream": 739, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-226185d767894365da6a84ce", "kind": "dns", "frame_number": 59334, "timestamp_epoch": "1634916092.419447000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49982, "dst_port": 53, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2e1548aebb48a6c51d2559b1", "kind": "dns", "frame_number": 59335, "timestamp_epoch": "1634916092.653365000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49982, "tcp_stream": null, "udp_stream": 738, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-69329aad340fbc26d0f71319", "kind": "dns", "frame_number": 59351, "timestamp_epoch": "1634916093.326035000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53898, "dst_port": 53, "tcp_stream": null, "udp_stream": 740, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2a5da9ffc794a355b37e7e10", "kind": "dns", "frame_number": 59355, "timestamp_epoch": "1634916093.366474000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53898, "tcp_stream": null, "udp_stream": 740, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3cc5fc7218a13c40fec19dee", "kind": "dns", "frame_number": 59419, "timestamp_epoch": "1634916105.060129000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50790, "dst_port": 53, "tcp_stream": null, "udp_stream": 741, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-e08ebf0b231a1cac228c90ed", "kind": "dns", "frame_number": 59420, "timestamp_epoch": "1634916105.121053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50790, "dst_port": 53, "tcp_stream": null, "udp_stream": 741, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-dae216a2b9e58f69d4be5e5b", "kind": "dns", "frame_number": 59421, "timestamp_epoch": "1634916105.133991000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50790, "tcp_stream": null, "udp_stream": 741, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-41db897376c09e387f247385", "kind": "dns", "frame_number": 59459, "timestamp_epoch": "1634916110.670870000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51385, "dst_port": 53, "tcp_stream": null, "udp_stream": 742, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a06b4f751eb0a234d460e003", "kind": "dns", "frame_number": 59460, "timestamp_epoch": "1634916110.727284000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51385, "tcp_stream": null, "udp_stream": 742, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-32fa6cec84e1265507b76f53", "kind": "dns", "frame_number": 59480, "timestamp_epoch": "1634916115.045263000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51208, "dst_port": 53, "tcp_stream": null, "udp_stream": 743, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d76943f7c6687251bc801039", "kind": "dns", "frame_number": 59481, "timestamp_epoch": "1634916115.089298000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51208, "tcp_stream": null, "udp_stream": 743, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b710d4c47f74278197034823", "kind": "dns", "frame_number": 59508, "timestamp_epoch": "1634916117.526733000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54968, "dst_port": 53, "tcp_stream": null, "udp_stream": 744, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.corteo.fr", "dns.qry.type": "1" } }, { "event_id": "evt-b82bfd211c92dc0141183242", "kind": "dns", "frame_number": 59510, "timestamp_epoch": "1634916117.591164000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54968, "dst_port": 53, "tcp_stream": null, "udp_stream": 744, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.corteo.fr", "dns.qry.type": "1" } }, { "event_id": "evt-afd925b28437cd1a271913d0", "kind": "dns", "frame_number": 59513, "timestamp_epoch": "1634916117.969330000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54968, "tcp_stream": null, "udp_stream": 744, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.corteo.fr", "dns.qry.type": "1" } }, { "event_id": "evt-f00e15f84882ae524673d381", "kind": "dns", "frame_number": 59536, "timestamp_epoch": "1634916119.388777000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50944, "dst_port": 53, "tcp_stream": null, "udp_stream": 745, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f8846593224dea85d998e161", "kind": "dns", "frame_number": 59537, "timestamp_epoch": "1634916119.448015000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50944, "tcp_stream": null, "udp_stream": 745, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3192d7aeaa2b9e693eb692c9", "kind": "dns", "frame_number": 59675, "timestamp_epoch": "1634916131.048088000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 52762, "dst_port": 53, "tcp_stream": null, "udp_stream": 746, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-bd54add5aa86da27b5e95d8d", "kind": "dns", "frame_number": 59676, "timestamp_epoch": "1634916131.048404000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52762, "tcp_stream": null, "udp_stream": 746, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c78a12fb5bb1d57fb1090465", "kind": "dns", "frame_number": 59677, "timestamp_epoch": "1634916131.048888000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 57369, "dst_port": 53, "tcp_stream": null, "udp_stream": 747, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-444168db0b64bc2708ad19b8", "kind": "dns", "frame_number": 59678, "timestamp_epoch": "1634916131.103842000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57369, "tcp_stream": null, "udp_stream": 747, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-52ea1b4b81e92b5ee60fcf99", "kind": "dns", "frame_number": 59701, "timestamp_epoch": "1634916136.716541000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49564, "dst_port": 53, "tcp_stream": null, "udp_stream": 748, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-32ac76979b279cf14f678d93", "kind": "dns", "frame_number": 59702, "timestamp_epoch": "1634916136.777678000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49564, "tcp_stream": null, "udp_stream": 748, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0c14cb58760fa54d56624f06", "kind": "dns", "frame_number": 59719, "timestamp_epoch": "1634916141.077676000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56611, "dst_port": 53, "tcp_stream": null, "udp_stream": 749, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7ebaba18966a51a0daee0c13", "kind": "dns", "frame_number": 59722, "timestamp_epoch": "1634916141.138441000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56611, "tcp_stream": null, "udp_stream": 749, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ee7c58c480a10b25bf09ab86", "kind": "dns", "frame_number": 59742, "timestamp_epoch": "1634916145.436371000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60341, "dst_port": 53, "tcp_stream": null, "udp_stream": 750, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-508160821b5aa5bc772c891c", "kind": "dns", "frame_number": 59743, "timestamp_epoch": "1634916145.507748000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60341, "tcp_stream": null, "udp_stream": 750, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c0e5bd8415bd13da1a50f53a", "kind": "dns", "frame_number": 59763, "timestamp_epoch": "1634916147.455802000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61229, "dst_port": 53, "tcp_stream": null, "udp_stream": 751, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c6a30813e95e67cfe4341667", "kind": "dns", "frame_number": 59764, "timestamp_epoch": "1634916147.456162000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61229, "tcp_stream": null, "udp_stream": 751, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c57acaf3056190b60a902a87", "kind": "dns", "frame_number": 59765, "timestamp_epoch": "1634916147.457095000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57133, "dst_port": 53, "tcp_stream": null, "udp_stream": 752, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d6a802de2d6b6162f101fd4e", "kind": "dns", "frame_number": 59766, "timestamp_epoch": "1634916147.457337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57133, "tcp_stream": null, "udp_stream": 752, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-76b0827f2955dd799357076a", "kind": "dns", "frame_number": 59768, "timestamp_epoch": "1634916147.493073000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58207, "dst_port": 53, "tcp_stream": null, "udp_stream": 753, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-f6afa763a6e307dca9ac0b28", "kind": "dns", "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58207, "tcp_stream": null, "udp_stream": 753, "fields": { "dns.a": "40.97.120.226,52.96.121.242,40.97.212.18,52.96.122.242", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-ac54c8f894c085d39e07a584", "kind": "dns", "frame_number": 59825, "timestamp_epoch": "1634916149.027420000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61412, "dst_port": 53, "tcp_stream": null, "udp_stream": 754, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-077d27283e13d7712195506f", "kind": "dns", "frame_number": 59826, "timestamp_epoch": "1634916149.027760000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61412, "tcp_stream": null, "udp_stream": 754, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-eb588ee4f43fc7351309802f", "kind": "dns", "frame_number": 59827, "timestamp_epoch": "1634916149.028310000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 62533, "dst_port": 53, "tcp_stream": null, "udp_stream": 755, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e9a391c41dfadd7849857a80", "kind": "dns", "frame_number": 59828, "timestamp_epoch": "1634916149.028590000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 62533, "tcp_stream": null, "udp_stream": 755, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-9caeebf439c2a6a6977ec981", "kind": "dns", "frame_number": 59873, "timestamp_epoch": "1634916150.714325000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60556, "dst_port": 53, "tcp_stream": null, "udp_stream": 756, "fields": { "dns.flags.response": "False", "dns.qry.name": "vchbbq.com", "dns.qry.type": "1" } }, { "event_id": "evt-b6b420a6155eb3b8cd12f54f", "kind": "dns", "frame_number": 59875, "timestamp_epoch": "1634916150.780878000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60556, "dst_port": 53, "tcp_stream": null, "udp_stream": 756, "fields": { "dns.flags.response": "False", "dns.qry.name": "vchbbq.com", "dns.qry.type": "1" } }, { "event_id": "evt-28eebc5756fbf12a19dc13a5", "kind": "dns", "frame_number": 59876, "timestamp_epoch": "1634916150.782954000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60556, "tcp_stream": null, "udp_stream": 756, "fields": { "dns.a": "192.185.57.27", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "vchbbq.com", "dns.qry.type": "1" } }, { "event_id": "evt-605945ff5233d21427523033", "kind": "dns", "frame_number": 59897, "timestamp_epoch": "1634916153.252792000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 51788, "dst_port": 53, "tcp_stream": null, "udp_stream": 757, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4add9a307f67a332ad4b1d0f", "kind": "dns", "frame_number": 59898, "timestamp_epoch": "1634916153.253123000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 51788, "tcp_stream": null, "udp_stream": 757, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9103dcf06629c80faceb51db", "kind": "dns", "frame_number": 60180, "timestamp_epoch": "1634916164.953616000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60305, "dst_port": 53, "tcp_stream": null, "udp_stream": 759, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.songazine.fr", "dns.qry.type": "1" } }, { "event_id": "evt-fe2420201c637e7546a65685", "kind": "dns", "frame_number": 60182, "timestamp_epoch": "1634916165.030815000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60305, "dst_port": 53, "tcp_stream": null, "udp_stream": 759, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.songazine.fr", "dns.qry.type": "1" } }, { "event_id": "evt-4b93a170a877a89164b3b026", "kind": "dns", "frame_number": 60185, "timestamp_epoch": "1634916165.251220000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60305, "tcp_stream": null, "udp_stream": 759, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.songazine.fr", "dns.qry.type": "1" } }, { "event_id": "evt-c254518be232663bcab39410", "kind": "dns", "frame_number": 60205, "timestamp_epoch": "1634916165.858069000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51721, "dst_port": 53, "tcp_stream": null, "udp_stream": 462, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-085fbbc12a31b85b07f494b7", "kind": "dns", "frame_number": 60206, "timestamp_epoch": "1634916165.940003000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51721, "tcp_stream": null, "udp_stream": 462, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f5c7cf70b04ec45d6944b495", "kind": "dns", "frame_number": 60322, "timestamp_epoch": "1634916170.250238000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54342, "dst_port": 53, "tcp_stream": null, "udp_stream": 760, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0547a726077a2decc5fbef8f", "kind": "dns", "frame_number": 60328, "timestamp_epoch": "1634916170.337923000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54342, "tcp_stream": null, "udp_stream": 760, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-16a672bebff8ad5c646e21ca", "kind": "dns", "frame_number": 60362, "timestamp_epoch": "1634916174.704136000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59024, "dst_port": 53, "tcp_stream": null, "udp_stream": 761, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-96c4b971cefd1d000699d79d", "kind": "dns", "frame_number": 60363, "timestamp_epoch": "1634916174.800523000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59024, "tcp_stream": null, "udp_stream": 761, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b9c4f8e7a1b18edfa421db28", "kind": "dns", "frame_number": 60460, "timestamp_epoch": "1634916192.156186000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55415, "dst_port": 53, "tcp_stream": null, "udp_stream": 762, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-50cbe62f64c2cf04b2289cc4", "kind": "dns", "frame_number": 60462, "timestamp_epoch": "1634916192.228486000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55415, "tcp_stream": null, "udp_stream": 762, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-03feb3730e845f8b29541db8", "kind": "dns", "frame_number": 60477, "timestamp_epoch": "1634916195.064811000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57795, "dst_port": 53, "tcp_stream": null, "udp_stream": 763, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-5475d3fb47a9adaf8e0678eb", "kind": "dns", "frame_number": 60478, "timestamp_epoch": "1634916195.114033000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57795, "tcp_stream": null, "udp_stream": 763, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-3e2b61f0459326c84315a85e", "kind": "dns", "frame_number": 60481, "timestamp_epoch": "1634916196.563668000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51074, "dst_port": 53, "tcp_stream": null, "udp_stream": 764, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d16fbc2a2e6f15cb981f1b0", "kind": "dns", "frame_number": 60482, "timestamp_epoch": "1634916196.620752000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51074, "tcp_stream": null, "udp_stream": 764, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-33c2f489534e1bf8e25e7cec", "kind": "dns", "frame_number": 60497, "timestamp_epoch": "1634916200.923222000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56957, "dst_port": 53, "tcp_stream": null, "udp_stream": 765, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e77a45b8c670837ba3470299", "kind": "dns", "frame_number": 60498, "timestamp_epoch": "1634916200.970764000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56957, "tcp_stream": null, "udp_stream": 765, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a35c834c1b8500776ade983c", "kind": "dns", "frame_number": 60639, "timestamp_epoch": "1634916218.360593000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58991, "dst_port": 53, "tcp_stream": null, "udp_stream": 766, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fe9f257ba1d80e30ca475e1d", "kind": "dns", "frame_number": 60640, "timestamp_epoch": "1634916218.449267000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58991, "tcp_stream": null, "udp_stream": 766, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-678131bcd7e7780514c1c7e8", "kind": "dns", "frame_number": 60660, "timestamp_epoch": "1634916222.829696000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57401, "dst_port": 53, "tcp_stream": null, "udp_stream": 767, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f9fbfcc14b989ed6dfa187e9", "kind": "dns", "frame_number": 60661, "timestamp_epoch": "1634916222.910694000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57401, "tcp_stream": null, "udp_stream": 767, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1d980434dfbcd49ae7b7cc63", "kind": "dns", "frame_number": 60677, "timestamp_epoch": "1634916227.203754000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51226, "dst_port": 53, "tcp_stream": null, "udp_stream": 768, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1f1f54dac615b4d02014c963", "kind": "dns", "frame_number": 60679, "timestamp_epoch": "1634916227.300313000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51226, "tcp_stream": null, "udp_stream": 768, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e72f3223a493eef849b2e33b", "kind": "dns", "frame_number": 60734, "timestamp_epoch": "1634916236.458815000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64065, "dst_port": 53, "tcp_stream": null, "udp_stream": 769, "fields": { "dns.flags.response": "False", "dns.qry.name": "mx02.colt-engine.it", "dns.qry.type": "1" } }, { "event_id": "evt-a1b9f25d059af74ed12269c7", "kind": "dns", "frame_number": 60736, "timestamp_epoch": "1634916236.532245000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64065, "dst_port": 53, "tcp_stream": null, "udp_stream": 769, "fields": { "dns.flags.response": "False", "dns.qry.name": "mx02.colt-engine.it", "dns.qry.type": "1" } }, { "event_id": "evt-226cb8cff10e44aca4e0987e", "kind": "dns", "frame_number": 60737, "timestamp_epoch": "1634916236.759885000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64065, "tcp_stream": null, "udp_stream": 769, "fields": { "dns.a": "81.31.145.216,81.31.145.212", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mx02.colt-engine.it", "dns.qry.type": "1" } }, { "event_id": "evt-2deb345a1bc6eac5479c1042", "kind": "dns", "frame_number": 60829, "timestamp_epoch": "1634916241.823013000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60656, "dst_port": 53, "tcp_stream": null, "udp_stream": 770, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-ab4c2c6318f50f8d1a2e55a6", "kind": "dns", "frame_number": 60831, "timestamp_epoch": "1634916241.891322000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60656, "dst_port": 53, "tcp_stream": null, "udp_stream": 770, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-202dd3149cc333b7a2682fbe", "kind": "dns", "frame_number": 60832, "timestamp_epoch": "1634916241.962512000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60656, "tcp_stream": null, "udp_stream": 770, "fields": { "dns.a": "142.250.114.28", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp-relay.gmail.com", "dns.qry.type": "1" } }, { "event_id": "evt-2a374f1d2739fd02d6e978fd", "kind": "dns", "frame_number": 60871, "timestamp_epoch": "1634916244.939495000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52847, "dst_port": 53, "tcp_stream": null, "udp_stream": 771, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d9a8d41b61cdb377f8b2f4fe", "kind": "dns", "frame_number": 60872, "timestamp_epoch": "1634916245.023427000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52847, "tcp_stream": null, "udp_stream": 771, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1e6483fc24d77807674f144d", "kind": "dns", "frame_number": 60887, "timestamp_epoch": "1634916249.315360000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65386, "dst_port": 53, "tcp_stream": null, "udp_stream": 772, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-11b8fb59f57875dd1111bdcc", "kind": "dns", "frame_number": 60888, "timestamp_epoch": "1634916249.386750000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65386, "tcp_stream": null, "udp_stream": 772, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-132fd0b848d816f4a7cdac0a", "kind": "dns", "frame_number": 60964, "timestamp_epoch": "1634916253.735564000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55278, "dst_port": 53, "tcp_stream": null, "udp_stream": 773, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c4e7dd5becab0b9974d4fe08", "kind": "dns", "frame_number": 60968, "timestamp_epoch": "1634916253.791870000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55278, "tcp_stream": null, "udp_stream": 773, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-261f138527681e7d3254ab0e", "kind": "dns", "frame_number": 61062, "timestamp_epoch": "1634916271.033879000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57327, "dst_port": 53, "tcp_stream": null, "udp_stream": 774, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a5f1c9aac66237f5a8598a03", "kind": "dns", "frame_number": 61063, "timestamp_epoch": "1634916271.101017000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57327, "tcp_stream": null, "udp_stream": 774, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a8f7b263e44c05570070c927", "kind": "dns", "frame_number": 61079, "timestamp_epoch": "1634916275.394237000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50659, "dst_port": 53, "tcp_stream": null, "udp_stream": 775, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c55af452494021c16fff7d41", "kind": "dns", "frame_number": 61080, "timestamp_epoch": "1634916275.442987000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50659, "tcp_stream": null, "udp_stream": 775, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4380a6c27f9e6244c2da9d1b", "kind": "dns", "frame_number": 61095, "timestamp_epoch": "1634916279.783596000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51394, "dst_port": 53, "tcp_stream": null, "udp_stream": 776, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-66e3befd30c7239c84f84761", "kind": "dns", "frame_number": 61096, "timestamp_epoch": "1634916279.849420000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51394, "tcp_stream": null, "udp_stream": 776, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f7a13bada5e0db161d9baf81", "kind": "dns", "frame_number": 61170, "timestamp_epoch": "1634916295.817023000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56180, "dst_port": 53, "tcp_stream": null, "udp_stream": 777, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-ce5c3111d36e5fc84edf80eb", "kind": "dns", "frame_number": 61172, "timestamp_epoch": "1634916295.892768000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56180, "dst_port": 53, "tcp_stream": null, "udp_stream": 777, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-fc5cc7a932aabf988a8bffa8", "kind": "dns", "frame_number": 61174, "timestamp_epoch": "1634916296.118791000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56180, "tcp_stream": null, "udp_stream": 777, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-8ae9f85fe425e1783ad4f2ba", "kind": "dns", "frame_number": 61176, "timestamp_epoch": "1634916296.120407000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50409, "dst_port": 53, "tcp_stream": null, "udp_stream": 778, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.maclen.fr", "dns.qry.type": "1" } }, { "event_id": "evt-f927046034f905f46295bb60", "kind": "dns", "frame_number": 61177, "timestamp_epoch": "1634916296.173965000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50409, "dst_port": 53, "tcp_stream": null, "udp_stream": 778, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.maclen.fr", "dns.qry.type": "1" } }, { "event_id": "evt-0f10e363348c3374a2ba4970", "kind": "dns", "frame_number": 61182, "timestamp_epoch": "1634916296.419248000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50409, "tcp_stream": null, "udp_stream": 778, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.maclen.fr", "dns.qry.type": "1" } }, { "event_id": "evt-16fa11a4a89c4e94119eb398", "kind": "dns", "frame_number": 61203, "timestamp_epoch": "1634916297.112308000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61404, "dst_port": 53, "tcp_stream": null, "udp_stream": 779, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ccb7305fe31f027241a38af9", "kind": "dns", "frame_number": 61208, "timestamp_epoch": "1634916297.162161000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61404, "tcp_stream": null, "udp_stream": 779, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ba9d0f8cdc3f6fd6c3de55f2", "kind": "dns", "frame_number": 61346, "timestamp_epoch": "1634916301.455710000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60168, "dst_port": 53, "tcp_stream": null, "udp_stream": 780, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-06318317e32dbc392b0208fb", "kind": "dns", "frame_number": 61347, "timestamp_epoch": "1634916301.507567000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60168, "tcp_stream": null, "udp_stream": 780, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-dae5824057f99cfca1ac6b70", "kind": "dns", "frame_number": 61385, "timestamp_epoch": "1634916305.800419000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57108, "dst_port": 53, "tcp_stream": null, "udp_stream": 781, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cd8f9bf102024b97b7e8ab1a", "kind": "dns", "frame_number": 61386, "timestamp_epoch": "1634916305.873602000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57108, "tcp_stream": null, "udp_stream": 781, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b336728f57a88a6f09b5f77e", "kind": "dns", "frame_number": 61640, "timestamp_epoch": "1634916328.820489000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55530, "dst_port": 53, "tcp_stream": null, "udp_stream": 782, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-e101b3415f7cdfdceb7c8b80", "kind": "dns", "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55530, "tcp_stream": null, "udp_stream": 782, "fields": { "dns.a": "52.96.16.162,52.96.57.82,52.96.103.34,52.96.121.194", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-aa8b76a239110643db46ba25", "kind": "dns", "frame_number": 62000, "timestamp_epoch": "1634916348.676153000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53794, "dst_port": 53, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-7637f5480a2401ba536779cb", "kind": "dns", "frame_number": 62002, "timestamp_epoch": "1634916348.737268000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53794, "dst_port": 53, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-b3c880133c38b053a61dd534", "kind": "dns", "frame_number": 62006, "timestamp_epoch": "1634916349.737514000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53794, "dst_port": 53, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-8f37c926fcc518c73ac151f3", "kind": "dns", "frame_number": 62012, "timestamp_epoch": "1634916351.737938000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53794, "dst_port": 53, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-5cb7745b5d1fc0ff2719b73f", "kind": "dns", "frame_number": 62027, "timestamp_epoch": "1634916355.753911000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53794, "dst_port": 53, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-6cd356694e0df5729faefa95", "kind": "dns", "frame_number": 62031, "timestamp_epoch": "1634916356.905207000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53794, "tcp_stream": null, "udp_stream": 783, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-d9eb7d95db90753285a879a0", "kind": "dns", "frame_number": 62084, "timestamp_epoch": "1634916360.230809000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56960, "dst_port": 53, "tcp_stream": null, "udp_stream": 784, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f4ed86de77883d6fd07fff2d", "kind": "dns", "frame_number": 62085, "timestamp_epoch": "1634916360.231211000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56960, "tcp_stream": null, "udp_stream": 784, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e3d43f0199d971b23991ac6c", "kind": "dns", "frame_number": 62201, "timestamp_epoch": "1634916375.069866000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55284, "dst_port": 53, "tcp_stream": null, "udp_stream": 786, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-065cae137fb868706358c579", "kind": "dns", "frame_number": 62202, "timestamp_epoch": "1634916375.145647000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55284, "dst_port": 53, "tcp_stream": null, "udp_stream": 786, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-8abe238b905c91f7d023b292", "kind": "dns", "frame_number": 62203, "timestamp_epoch": "1634916375.150726000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55284, "tcp_stream": null, "udp_stream": 786, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-e7a4143fe7d3d963d6d949e7", "kind": "dns", "frame_number": 64206, "timestamp_epoch": "1634916402.422053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49321, "dst_port": 53, "tcp_stream": null, "udp_stream": 787, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5fdd6bbb066e33310fc23405", "kind": "dns", "frame_number": 64207, "timestamp_epoch": "1634916402.422514000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49321, "tcp_stream": null, "udp_stream": 787, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-7e70e83f0207b540c5f91fe0", "kind": "dns", "frame_number": 64216, "timestamp_epoch": "1634916402.551816000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49840, "dst_port": 53, "tcp_stream": null, "udp_stream": 789, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a653d03bad37decead015c98", "kind": "dns", "frame_number": 64217, "timestamp_epoch": "1634916402.552106000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49840, "tcp_stream": null, "udp_stream": 789, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5b224eaed15dbbfe1e39b87b", "kind": "dns", "frame_number": 64228, "timestamp_epoch": "1634916402.711511000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52178, "dst_port": 53, "tcp_stream": null, "udp_stream": 791, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9eda08cc37c451c8c699bea5", "kind": "dns", "frame_number": 64229, "timestamp_epoch": "1634916402.711823000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52178, "tcp_stream": null, "udp_stream": 791, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c08ebe136ddb6dee74d5e75a", "kind": "dns", "frame_number": 64232, "timestamp_epoch": "1634916402.729941000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64456, "dst_port": 53, "tcp_stream": null, "udp_stream": 793, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-6491454ac6c5b3dfa5050f85", "kind": "dns", "frame_number": 64233, "timestamp_epoch": "1634916402.730249000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64456, "tcp_stream": null, "udp_stream": 793, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0b923f7fff973716bd4c6a0e", "kind": "dns", "frame_number": 64236, "timestamp_epoch": "1634916402.753226000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56091, "dst_port": 53, "tcp_stream": null, "udp_stream": 795, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0129a783da484040ffd09b46", "kind": "dns", "frame_number": 64237, "timestamp_epoch": "1634916402.753532000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56091, "tcp_stream": null, "udp_stream": 795, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-879f725495272d5ba88955e4", "kind": "dns", "frame_number": 64240, "timestamp_epoch": "1634916402.783421000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55156, "dst_port": 53, "tcp_stream": null, "udp_stream": 797, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-b2243d70b7e0d2792dd0e71f", "kind": "dns", "frame_number": 64241, "timestamp_epoch": "1634916402.783715000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55156, "tcp_stream": null, "udp_stream": 797, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ecec3c410620bac3793c65aa", "kind": "dns", "frame_number": 64244, "timestamp_epoch": "1634916402.829498000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50818, "dst_port": 53, "tcp_stream": null, "udp_stream": 799, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-937a1aa9d08f04b43487006a", "kind": "dns", "frame_number": 64245, "timestamp_epoch": "1634916402.829820000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50818, "tcp_stream": null, "udp_stream": 799, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e46818b224dcc759e60108fa", "kind": "dns", "frame_number": 64248, "timestamp_epoch": "1634916402.845877000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63598, "dst_port": 53, "tcp_stream": null, "udp_stream": 801, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-bf68c6c46dc53c06e966035c", "kind": "dns", "frame_number": 64249, "timestamp_epoch": "1634916402.846172000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63598, "tcp_stream": null, "udp_stream": 801, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-1fa7b01b8a8bdb6c12c32581", "kind": "dns", "frame_number": 64252, "timestamp_epoch": "1634916402.874715000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56448, "dst_port": 53, "tcp_stream": null, "udp_stream": 803, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-3698face606a06dc0ff06273", "kind": "dns", "frame_number": 64253, "timestamp_epoch": "1634916402.875022000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56448, "tcp_stream": null, "udp_stream": 803, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f01f14b13e48cb15df0480bf", "kind": "dns", "frame_number": 64256, "timestamp_epoch": "1634916402.951619000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56204, "dst_port": 53, "tcp_stream": null, "udp_stream": 805, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-627a8b112c813292ac88b444", "kind": "dns", "frame_number": 64257, "timestamp_epoch": "1634916402.951911000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56204, "tcp_stream": null, "udp_stream": 805, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-0a7dc7bd57ecb2f2f656f83b", "kind": "dns", "frame_number": 64260, "timestamp_epoch": "1634916403.040915000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54334, "dst_port": 53, "tcp_stream": null, "udp_stream": 807, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-f5ae23568d1836c0792ea9ee", "kind": "dns", "frame_number": 64261, "timestamp_epoch": "1634916403.041189000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54334, "tcp_stream": null, "udp_stream": 807, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-ff5ea1effae12292e2228700", "kind": "dns", "frame_number": 64264, "timestamp_epoch": "1634916403.080410000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53711, "dst_port": 53, "tcp_stream": null, "udp_stream": 809, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-87139504a138158b44925367", "kind": "dns", "frame_number": 64265, "timestamp_epoch": "1634916403.080680000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53711, "tcp_stream": null, "udp_stream": 809, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-22742afdb62f218a2a122d22", "kind": "dns", "frame_number": 64268, "timestamp_epoch": "1634916403.159357000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55723, "dst_port": 53, "tcp_stream": null, "udp_stream": 811, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-c1ce74154d08ee3594cdf4ba", "kind": "dns", "frame_number": 64269, "timestamp_epoch": "1634916403.159676000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55723, "tcp_stream": null, "udp_stream": 811, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-e47c7af5f4531743c9234543", "kind": "dns", "frame_number": 64272, "timestamp_epoch": "1634916403.254167000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62503, "dst_port": 53, "tcp_stream": null, "udp_stream": 813, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-761dca55e856082443b21170", "kind": "dns", "frame_number": 64273, "timestamp_epoch": "1634916403.254458000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62503, "tcp_stream": null, "udp_stream": 813, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4a0115eb6fafb4449c77f30c", "kind": "dns", "frame_number": 64281, "timestamp_epoch": "1634916403.380922000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58671, "dst_port": 53, "tcp_stream": null, "udp_stream": 815, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-5bac7e7c1353de8249f2a780", "kind": "dns", "frame_number": 64282, "timestamp_epoch": "1634916403.381271000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58671, "tcp_stream": null, "udp_stream": 815, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-12b19aa883ffb9311a7a7406", "kind": "dns", "frame_number": 64285, "timestamp_epoch": "1634916403.426759000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50872, "dst_port": 53, "tcp_stream": null, "udp_stream": 817, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-24eef21842f08615d6312e87", "kind": "dns", "frame_number": 64286, "timestamp_epoch": "1634916403.427051000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50872, "tcp_stream": null, "udp_stream": 817, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-44ab6e56b9852b53f53c55f9", "kind": "dns", "frame_number": 64289, "timestamp_epoch": "1634916403.553995000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63434, "dst_port": 53, "tcp_stream": null, "udp_stream": 819, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-47bc4972e9f721ea30cb8573", "kind": "dns", "frame_number": 64290, "timestamp_epoch": "1634916403.554272000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63434, "tcp_stream": null, "udp_stream": 819, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-b61b64ab395188083d0a7af0", "kind": "dns", "frame_number": 64293, "timestamp_epoch": "1634916403.592513000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52072, "dst_port": 53, "tcp_stream": null, "udp_stream": 821, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-70d88873cd15b4536347cb23", "kind": "dns", "frame_number": 64294, "timestamp_epoch": "1634916403.592859000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52072, "tcp_stream": null, "udp_stream": 821, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-db11ac2a63a316c0c1679f50", "kind": "dns", "frame_number": 64418, "timestamp_epoch": "1634916461.486699000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52062, "dst_port": 53, "tcp_stream": null, "udp_stream": 823, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.microvistatech.com", "dns.qry.type": "1" } }, { "event_id": "evt-6c673cbea78e1af5569b7b13", "kind": "dns", "frame_number": 64420, "timestamp_epoch": "1634916461.538651000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52062, "dst_port": 53, "tcp_stream": null, "udp_stream": 823, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.microvistatech.com", "dns.qry.type": "1" } }, { "event_id": "evt-b46eaf78041b20c9674663ca", "kind": "dns", "frame_number": 64421, "timestamp_epoch": "1634916461.695322000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52062, "tcp_stream": null, "udp_stream": 823, "fields": { "dns.a": "173.249.53.15", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.microvistatech.com", "dns.qry.type": "1" } }, { "event_id": "evt-b92e2bf07105684b7c935e07", "kind": "dns", "frame_number": 64576, "timestamp_epoch": "1634916472.805230000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55744, "dst_port": 53, "tcp_stream": null, "udp_stream": 824, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-57192d33dbbd0f05fb10deb1", "kind": "dns", "frame_number": 64577, "timestamp_epoch": "1634916472.861320000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55744, "tcp_stream": null, "udp_stream": 824, "fields": { "dns.a": "52.96.57.18,52.96.57.66,52.96.122.242,52.96.122.98", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-55181612c4e53b4ed6924303", "kind": "dns", "frame_number": 64697, "timestamp_epoch": "1634916483.815052000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58115, "dst_port": 53, "tcp_stream": null, "udp_stream": 825, "fields": { "dns.flags.response": "False", "dns.qry.name": "mx1.mail.139.com", "dns.qry.type": "1" } }, { "event_id": "evt-339fc97bf870866dec8b519d", "kind": "dns", "frame_number": 64698, "timestamp_epoch": "1634916483.852171000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58115, "tcp_stream": null, "udp_stream": 825, "fields": { "dns.a": "221.176.66.188", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mx1.mail.139.com", "dns.qry.type": "1" } }, { "event_id": "evt-78b100dd0b7ae4e078905fc3", "kind": "dns", "frame_number": 64868, "timestamp_epoch": "1634916507.659138000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49497, "dst_port": 53, "tcp_stream": null, "udp_stream": 826, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ipage.com", "dns.qry.type": "1" } }, { "event_id": "evt-dedd39c281971bc156f97750", "kind": "dns", "frame_number": 64869, "timestamp_epoch": "1634916507.707543000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49497, "tcp_stream": null, "udp_stream": 826, "fields": { "dns.a": "66.96.147.96", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.ipage.com", "dns.qry.type": "1" } }, { "event_id": "evt-db68d739c76a9f6089bbe751", "kind": "dns", "frame_number": 65025, "timestamp_epoch": "1634916530.578947000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63560, "dst_port": 53, "tcp_stream": null, "udp_stream": 827, "fields": { "dns.flags.response": "False", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-09e5696a6ef0a4a56e3c40c5", "kind": "dns", "frame_number": 65027, "timestamp_epoch": "1634916530.647434000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63560, "dst_port": 53, "tcp_stream": null, "udp_stream": 827, "fields": { "dns.flags.response": "False", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-fd991ed1dfa6d0661ead053f", "kind": "dns", "frame_number": 65028, "timestamp_epoch": "1634916530.966581000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63560, "tcp_stream": null, "udp_stream": 827, "fields": { "dns.a": "197.97.195.226", "dns.cname": "vmail.dial-up.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-0d60ed1ad0faf43df85d3044", "kind": "dns", "frame_number": 65070, "timestamp_epoch": "1634916539.198314000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49697, "dst_port": 53, "tcp_stream": null, "udp_stream": 828, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-548291dbab210c652d62249b", "kind": "dns", "frame_number": 65072, "timestamp_epoch": "1634916539.273940000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49697, "dst_port": 53, "tcp_stream": null, "udp_stream": 828, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-2e30722395d0b5f1db3e8642", "kind": "dns", "frame_number": 65074, "timestamp_epoch": "1634916539.281605000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49697, "tcp_stream": null, "udp_stream": 828, "fields": { "dns.a": "52.96.103.34,40.97.120.226,40.97.212.18,52.96.57.82", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-940d22b6e1dc5cb4bde604d1", "kind": "dns", "frame_number": 65253, "timestamp_epoch": "1634916559.022681000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61291, "dst_port": 53, "tcp_stream": null, "udp_stream": 829, "fields": { "dns.flags.response": "False", "dns.qry.name": "w00d8b4e.kasserver.com", "dns.qry.type": "1" } }, { "event_id": "evt-0896047414a0627a0e529fce", "kind": "dns", "frame_number": 65255, "timestamp_epoch": "1634916559.101233000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61291, "dst_port": 53, "tcp_stream": null, "udp_stream": 829, "fields": { "dns.flags.response": "False", "dns.qry.name": "w00d8b4e.kasserver.com", "dns.qry.type": "1" } }, { "event_id": "evt-ff01c54e00556032f0c6c22b", "kind": "dns", "frame_number": 65256, "timestamp_epoch": "1634916559.204440000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61291, "tcp_stream": null, "udp_stream": 829, "fields": { "dns.a": "85.13.132.2", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "w00d8b4e.kasserver.com", "dns.qry.type": "1" } }, { "event_id": "evt-7e7d8176d0b0e3844408f64e", "kind": "dns", "frame_number": 65453, "timestamp_epoch": "1634916592.696650000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49423, "dst_port": 53, "tcp_stream": null, "udp_stream": 830, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tecsindia.com", "dns.qry.type": "1" } }, { "event_id": "evt-fba1b65672deaad774fb02b2", "kind": "dns", "frame_number": 65454, "timestamp_epoch": "1634916592.747574000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49423, "dst_port": 53, "tcp_stream": null, "udp_stream": 830, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tecsindia.com", "dns.qry.type": "1" } }, { "event_id": "evt-46a77f7df6c4df1e5c6fe99d", "kind": "dns", "frame_number": 65457, "timestamp_epoch": "1634916593.108750000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49423, "tcp_stream": null, "udp_stream": 830, "fields": { "dns.a": "115.112.78.166", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.tecsindia.com", "dns.qry.type": "1" } }, { "event_id": "evt-64d352193889f68ef360a266", "kind": "dns", "frame_number": 65615, "timestamp_epoch": "1634916651.224305000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 51637, "dst_port": 53, "tcp_stream": null, "udp_stream": 831, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-69c9c477238ee128bc6e8d9e", "kind": "dns", "frame_number": 65617, "timestamp_epoch": "1634916651.224658000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51637, "tcp_stream": null, "udp_stream": 831, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-c3f6a2bb8c01f184e187890b", "kind": "dns", "frame_number": 65622, "timestamp_epoch": "1634916651.227721000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55904, "dst_port": 53, "tcp_stream": null, "udp_stream": 833, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-9105109b0d7c20400784e36d", "kind": "dns", "frame_number": 65623, "timestamp_epoch": "1634916651.228384000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55904, "tcp_stream": null, "udp_stream": 833, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-de9263495ee913db26c39455", "kind": "dns", "frame_number": 65646, "timestamp_epoch": "1634916653.913882000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49817, "dst_port": 53, "tcp_stream": null, "udp_stream": 834, "fields": { "dns.flags.response": "False", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-f49ec771729153cecd473538", "kind": "dns", "frame_number": 65648, "timestamp_epoch": "1634916653.976477000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49817, "dst_port": 53, "tcp_stream": null, "udp_stream": 834, "fields": { "dns.flags.response": "False", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-c8acd62a8e9e0355800726a9", "kind": "dns", "frame_number": 65649, "timestamp_epoch": "1634916654.032955000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49817, "tcp_stream": null, "udp_stream": 834, "fields": { "dns.a": "123.58.177.213,123.58.177.220,123.58.177.214", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-43d586f3774530f0f0fd3fbe", "kind": "dns", "frame_number": 65658, "timestamp_epoch": "1634916655.027139000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55023, "dst_port": 53, "tcp_stream": null, "udp_stream": 835, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-56c4d68efe3629ac9e8c2f9e", "kind": "dns", "frame_number": 65659, "timestamp_epoch": "1634916655.027546000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55023, "tcp_stream": null, "udp_stream": 835, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-666db6edce1d50844dbca31e", "kind": "dns", "frame_number": 65700, "timestamp_epoch": "1634916656.680969000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60648, "dst_port": 53, "tcp_stream": null, "udp_stream": 836, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b22796cae61df16a0402c2f2", "kind": "dns", "frame_number": 65705, "timestamp_epoch": "1634916656.758320000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60648, "tcp_stream": null, "udp_stream": 836, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ce3633fda5190bda3e056707", "kind": "dns", "frame_number": 65751, "timestamp_epoch": "1634916661.068870000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64596, "dst_port": 53, "tcp_stream": null, "udp_stream": 837, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b8b1959019fd3074b86a6ab8", "kind": "dns", "frame_number": 65752, "timestamp_epoch": "1634916661.182586000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64596, "tcp_stream": null, "udp_stream": 837, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4013496122535ccb56ea50c3", "kind": "dns", "frame_number": 65800, "timestamp_epoch": "1634916665.492322000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63912, "dst_port": 53, "tcp_stream": null, "udp_stream": 838, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-82c147632504deb2f14dcc3d", "kind": "dns", "frame_number": 65804, "timestamp_epoch": "1634916665.563536000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63912, "tcp_stream": null, "udp_stream": 838, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e5d6800385186d06b921846a", "kind": "dns", "frame_number": 65854, "timestamp_epoch": "1634916671.267416000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64670, "dst_port": 53, "tcp_stream": null, "udp_stream": 839, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-9ed9fbed9cb8ff63c8e8b4b5", "kind": "dns", "frame_number": 65856, "timestamp_epoch": "1634916671.334009000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64670, "dst_port": 53, "tcp_stream": null, "udp_stream": 839, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-c507cfc81f3651b5575f9bdc", "kind": "dns", "frame_number": 65857, "timestamp_epoch": "1634916671.628154000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64670, "tcp_stream": null, "udp_stream": 839, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-eda7ace6eb9a59dbfb926a55", "kind": "dns", "frame_number": 65993, "timestamp_epoch": "1634916682.868973000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60903, "dst_port": 53, "tcp_stream": null, "udp_stream": 840, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7380335740099866dcfc4e80", "kind": "dns", "frame_number": 65994, "timestamp_epoch": "1634916682.902695000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60903, "tcp_stream": null, "udp_stream": 840, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6a5ab4405f7009933b999aab", "kind": "dns", "frame_number": 66051, "timestamp_epoch": "1634916687.196670000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64873, "dst_port": 53, "tcp_stream": null, "udp_stream": 841, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f19126269afb07e6aaeb6ec1", "kind": "dns", "frame_number": 66053, "timestamp_epoch": "1634916687.251446000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64873, "tcp_stream": null, "udp_stream": 841, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-81aedef01e0348cd348bc7bb", "kind": "dns", "frame_number": 66123, "timestamp_epoch": "1634916691.570709000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59711, "dst_port": 53, "tcp_stream": null, "udp_stream": 842, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-88dea7ca7c17fadc25f61d74", "kind": "dns", "frame_number": 66124, "timestamp_epoch": "1634916691.627791000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59711, "tcp_stream": null, "udp_stream": 842, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f67b59df9fbfb91eba9a8dff", "kind": "dns", "frame_number": 66172, "timestamp_epoch": "1634916698.150802000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50670, "dst_port": 53, "tcp_stream": null, "udp_stream": 843, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.vox.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-11d301b22d5b940b84fb1f7e", "kind": "dns", "frame_number": 66174, "timestamp_epoch": "1634916698.226095000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50670, "dst_port": 53, "tcp_stream": null, "udp_stream": 843, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.vox.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-e4e9703f4f0c81e668bc6516", "kind": "dns", "frame_number": 66176, "timestamp_epoch": "1634916698.559572000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50670, "tcp_stream": null, "udp_stream": 843, "fields": { "dns.a": "209.203.34.199", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.vox.co.za", "dns.qry.type": "1" } }, { "event_id": "evt-1efbdd6787e514a53adde43a", "kind": "dns", "frame_number": 66209, "timestamp_epoch": "1634916708.869411000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53805, "dst_port": 53, "tcp_stream": null, "udp_stream": 844, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-74300596cbedf0c087e3011e", "kind": "dns", "frame_number": 66210, "timestamp_epoch": "1634916708.922591000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53805, "tcp_stream": null, "udp_stream": 844, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e16e6b76a5f1925376bd9dc4", "kind": "dns", "frame_number": 66223, "timestamp_epoch": "1634916711.897566000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49904, "dst_port": 53, "tcp_stream": null, "udp_stream": 845, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-aeeb2303428434cb1ac1a11f", "kind": "dns", "frame_number": 66226, "timestamp_epoch": "1634916711.898055000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49904, "tcp_stream": null, "udp_stream": 845, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-860886a8a8ae96b842855943", "kind": "dns", "frame_number": 66231, "timestamp_epoch": "1634916711.901387000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59352, "dst_port": 53, "tcp_stream": null, "udp_stream": 847, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-00ec46f3e0cd469b2dd86c7e", "kind": "dns", "frame_number": 66232, "timestamp_epoch": "1634916711.902427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59352, "tcp_stream": null, "udp_stream": 847, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-8af5d312f47c4ce254034b56", "kind": "dns", "frame_number": 66235, "timestamp_epoch": "1634916713.229058000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63314, "dst_port": 53, "tcp_stream": null, "udp_stream": 848, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-67814c55b5dc3dd99f859bb7", "kind": "dns", "frame_number": 66237, "timestamp_epoch": "1634916713.292617000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63314, "tcp_stream": null, "udp_stream": 848, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fb06ffd61f412da0f4004517", "kind": "dns", "frame_number": 66248, "timestamp_epoch": "1634916715.105701000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58181, "dst_port": 53, "tcp_stream": null, "udp_stream": 849, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-6e85095754d9e8b8bc18429d", "kind": "dns", "frame_number": 66249, "timestamp_epoch": "1634916715.106019000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58181, "tcp_stream": null, "udp_stream": 849, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-8fa7586847e89afb83930db3", "kind": "dns", "frame_number": 66283, "timestamp_epoch": "1634916717.603185000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52986, "dst_port": 53, "tcp_stream": null, "udp_stream": 850, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a67c1b49b4afd3195385e655", "kind": "dns", "frame_number": 66284, "timestamp_epoch": "1634916717.654111000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52986, "tcp_stream": null, "udp_stream": 850, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ddac0b5a66797ba229e5bf7d", "kind": "dns", "frame_number": 66338, "timestamp_epoch": "1634916731.074763000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62983, "dst_port": 53, "tcp_stream": null, "udp_stream": 851, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-3d94741d64a2daddbc7f9a06", "kind": "dns", "frame_number": 66339, "timestamp_epoch": "1634916731.075094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62983, "tcp_stream": null, "udp_stream": 851, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-cc2ec4777b030db9c88e7ade", "kind": "dns", "frame_number": 66340, "timestamp_epoch": "1634916731.075590000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59159, "dst_port": 53, "tcp_stream": null, "udp_stream": 852, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-eac9232f7ddba11f52a020b4", "kind": "dns", "frame_number": 66341, "timestamp_epoch": "1634916731.075832000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59159, "tcp_stream": null, "udp_stream": 852, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2e90b36c01c9c8d255c45634", "kind": "dns", "frame_number": 66346, "timestamp_epoch": "1634916735.011579000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49410, "dst_port": 53, "tcp_stream": null, "udp_stream": 853, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ae0a81db4600b62491d797b8", "kind": "dns", "frame_number": 66347, "timestamp_epoch": "1634916735.109496000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49410, "tcp_stream": null, "udp_stream": 853, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-022acc8614fae4ab7e4f16b1", "kind": "dns", "frame_number": 66361, "timestamp_epoch": "1634916739.431286000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52643, "dst_port": 53, "tcp_stream": null, "udp_stream": 854, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1e00fec03175ffc7ff693d76", "kind": "dns", "frame_number": 66362, "timestamp_epoch": "1634916739.629171000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52643, "tcp_stream": null, "udp_stream": 854, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-446f451dc8b2eaeb594031ae", "kind": "dns", "frame_number": 66381, "timestamp_epoch": "1634916743.597755000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55006, "dst_port": 53, "tcp_stream": null, "udp_stream": 855, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-7dab6af6c98a5ea83b53574a", "kind": "dns", "frame_number": 66383, "timestamp_epoch": "1634916743.598056000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55006, "tcp_stream": null, "udp_stream": 855, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-03e76e796d0d19209258ae9d", "kind": "dns", "frame_number": 66386, "timestamp_epoch": "1634916743.599382000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58505, "dst_port": 53, "tcp_stream": null, "udp_stream": 856, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-18edc3ac365d93fdc4374498", "kind": "dns", "frame_number": 66389, "timestamp_epoch": "1634916743.600644000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58505, "tcp_stream": null, "udp_stream": 856, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-66d793f2194a325b2ed1bf26", "kind": "dns", "frame_number": 66390, "timestamp_epoch": "1634916743.962971000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53555, "dst_port": 53, "tcp_stream": null, "udp_stream": 858, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-929ab8c47eda0eb0f8346fe5", "kind": "dns", "frame_number": 66392, "timestamp_epoch": "1634916744.014508000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53555, "tcp_stream": null, "udp_stream": 858, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-991d2b35e0a9d574418cb840", "kind": "dns", "frame_number": 66406, "timestamp_epoch": "1634916746.007359000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 58203, "dst_port": 53, "tcp_stream": null, "udp_stream": 859, "fields": { "dns.flags.response": "False", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-ddbfba6ec59e9a631b2b26a2", "kind": "dns", "frame_number": 66407, "timestamp_epoch": "1634916746.007694000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 58203, "tcp_stream": null, "udp_stream": 859, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ENEMYWATCH-DC.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-104d0efd40d423799285b2f7", "kind": "dns", "frame_number": 66439, "timestamp_epoch": "1634916747.482631000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60311, "dst_port": 53, "tcp_stream": null, "udp_stream": 860, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-5cc7ed4f401ae9a47c53cc37", "kind": "dns", "frame_number": 66440, "timestamp_epoch": "1634916747.482971000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60311, "tcp_stream": null, "udp_stream": 860, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-83cc6e7154f44b92e1851443", "kind": "dns", "frame_number": 66441, "timestamp_epoch": "1634916747.483471000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63629, "dst_port": 53, "tcp_stream": null, "udp_stream": 861, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d73b258402f488390de3cf82", "kind": "dns", "frame_number": 66442, "timestamp_epoch": "1634916747.483707000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63629, "tcp_stream": null, "udp_stream": 861, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-0e2fac06e252a5f71c03ffa3", "kind": "dns", "frame_number": 66450, "timestamp_epoch": "1634916749.071172000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65299, "dst_port": 53, "tcp_stream": null, "udp_stream": 862, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-f8b4459038f7e19385cdfc30", "kind": "dns", "frame_number": 66451, "timestamp_epoch": "1634916749.071493000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 65299, "tcp_stream": null, "udp_stream": 862, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1a1bb38dd32a63987c327ef9", "kind": "dns", "frame_number": 66452, "timestamp_epoch": "1634916749.071885000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56796, "dst_port": 53, "tcp_stream": null, "udp_stream": 863, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-91690da00dab63c0e9e6945e", "kind": "dns", "frame_number": 66453, "timestamp_epoch": "1634916749.072134000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56796, "tcp_stream": null, "udp_stream": 863, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a8a801504b6b766aba6da117", "kind": "dns", "frame_number": 66491, "timestamp_epoch": "1634916761.415862000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52788, "dst_port": 53, "tcp_stream": null, "udp_stream": 864, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-14e68b16974466e324a4a6ab", "kind": "dns", "frame_number": 66492, "timestamp_epoch": "1634916761.516805000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52788, "tcp_stream": null, "udp_stream": 864, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0acd6653d16d4e951fae0744", "kind": "dns", "frame_number": 66513, "timestamp_epoch": "1634916765.807396000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64274, "dst_port": 53, "tcp_stream": null, "udp_stream": 865, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8895d0b9e611d35d1c88c404", "kind": "dns", "frame_number": 66514, "timestamp_epoch": "1634916765.861680000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64274, "tcp_stream": null, "udp_stream": 865, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-79411119d9bf7ee8315ad601", "kind": "dns", "frame_number": 66536, "timestamp_epoch": "1634916770.198737000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55052, "dst_port": 53, "tcp_stream": null, "udp_stream": 866, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1e47b5489af1e259b4676391", "kind": "dns", "frame_number": 66537, "timestamp_epoch": "1634916770.294219000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55052, "tcp_stream": null, "udp_stream": 866, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6c3519cff3715c4932f30461", "kind": "dns", "frame_number": 66580, "timestamp_epoch": "1634916776.490423000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53835, "dst_port": 53, "tcp_stream": null, "udp_stream": 867, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-949ab5b176e214ae0a211d63", "kind": "dns", "frame_number": 66581, "timestamp_epoch": "1634916776.538279000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53835, "tcp_stream": null, "udp_stream": 867, "fields": { "dns.a": "40.97.120.242,40.97.212.2,52.96.22.2,40.97.121.18", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-b1efe80317a6be3eb9a2bb3c", "kind": "dns", "frame_number": 67480, "timestamp_epoch": "1634916787.650615000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60858, "dst_port": 53, "tcp_stream": null, "udp_stream": 868, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-baf5e3f54173f812cbea6afe", "kind": "dns", "frame_number": 67481, "timestamp_epoch": "1634916787.666872000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53831, "dst_port": 53, "tcp_stream": null, "udp_stream": 869, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-de94c06118fd9b02612f6b9e", "kind": "dns", "frame_number": 67482, "timestamp_epoch": "1634916787.667210000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53831, "tcp_stream": null, "udp_stream": 869, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-9bbe334d740d8e69728c469e", "kind": "dns", "frame_number": 67485, "timestamp_epoch": "1634916787.726446000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60858, "tcp_stream": null, "udp_stream": 868, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b705afd84f9074d93fd61479", "kind": "dns", "frame_number": 67491, "timestamp_epoch": "1634916787.791191000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61778, "dst_port": 53, "tcp_stream": null, "udp_stream": 871, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-70bd44fb29a88365f1d77b5a", "kind": "dns", "frame_number": 67492, "timestamp_epoch": "1634916787.791526000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61778, "tcp_stream": null, "udp_stream": 871, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-06b260e79b5f02f880b87a13", "kind": "dns", "frame_number": 67522, "timestamp_epoch": "1634916791.927739000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58622, "dst_port": 53, "tcp_stream": null, "udp_stream": 873, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-008e4c6ea6f2dfe4c3a76907", "kind": "dns", "frame_number": 67523, "timestamp_epoch": "1634916791.928026000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58622, "tcp_stream": null, "udp_stream": 873, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-086d089d02a02b7d718114f8", "kind": "dns", "frame_number": 67526, "timestamp_epoch": "1634916792.088136000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53118, "dst_port": 53, "tcp_stream": null, "udp_stream": 875, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bb772e05ee987ffcdaa6e1ee", "kind": "dns", "frame_number": 67531, "timestamp_epoch": "1634916792.157266000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53118, "tcp_stream": null, "udp_stream": 875, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8346c50c033084ed228fdec4", "kind": "dns", "frame_number": 67558, "timestamp_epoch": "1634916794.254198000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59322, "dst_port": 53, "tcp_stream": null, "udp_stream": 876, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-78c6e1c44feaa53e0133df5c", "kind": "dns", "frame_number": 67559, "timestamp_epoch": "1634916794.307488000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59322, "dst_port": 53, "tcp_stream": null, "udp_stream": 876, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d12b47f9c4ae44117969f841", "kind": "dns", "frame_number": 67560, "timestamp_epoch": "1634916794.330090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59322, "tcp_stream": null, "udp_stream": 876, "fields": { "dns.a": "52.183.220.149", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-069010dfce5f25693a580cbd", "kind": "dns", "frame_number": 67586, "timestamp_epoch": "1634916796.495719000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57884, "dst_port": 53, "tcp_stream": null, "udp_stream": 615, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c256846ccbfb04d9d7b18cbc", "kind": "dns", "frame_number": 67587, "timestamp_epoch": "1634916796.584492000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57884, "tcp_stream": null, "udp_stream": 615, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6b895965c2323454194081b7", "kind": "dns", "frame_number": 67618, "timestamp_epoch": "1634916809.753004000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57802, "dst_port": 53, "tcp_stream": null, "udp_stream": 877, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.verificalitasoca.es", "dns.qry.type": "1" } }, { "event_id": "evt-ed2f626b855483a49b6e1d3f", "kind": "dns", "frame_number": 67624, "timestamp_epoch": "1634916809.822577000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57802, "dst_port": 53, "tcp_stream": null, "udp_stream": 877, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.verificalitasoca.es", "dns.qry.type": "1" } }, { "event_id": "evt-eda1b570177c04a66b4ca4a9", "kind": "dns", "frame_number": 67626, "timestamp_epoch": "1634916810.052780000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57802, "tcp_stream": null, "udp_stream": 877, "fields": { "dns.a": "82.98.154.100", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.verificalitasoca.es", "dns.qry.type": "1" } }, { "event_id": "evt-dabf30c2774e584ce6f0b286", "kind": "dns", "frame_number": 67689, "timestamp_epoch": "1634916813.949956000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53684, "dst_port": 53, "tcp_stream": null, "udp_stream": 878, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d4bbb17c299508dd918f143e", "kind": "dns", "frame_number": 67690, "timestamp_epoch": "1634916814.011316000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53684, "tcp_stream": null, "udp_stream": 878, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f2f58ad037d6149d85c059af", "kind": "dns", "frame_number": 67746, "timestamp_epoch": "1634916818.308882000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51213, "dst_port": 53, "tcp_stream": null, "udp_stream": 879, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5e425c99f189c2b4d447719b", "kind": "dns", "frame_number": 67747, "timestamp_epoch": "1634916818.354857000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51213, "tcp_stream": null, "udp_stream": 879, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-202db55e06ea77c5d36ddb57", "kind": "dns", "frame_number": 67758, "timestamp_epoch": "1634916822.668313000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64869, "dst_port": 53, "tcp_stream": null, "udp_stream": 880, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7be31116a3404a9231ccf700", "kind": "dns", "frame_number": 67759, "timestamp_epoch": "1634916822.772799000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64869, "tcp_stream": null, "udp_stream": 880, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9247013d324bae8d4b42d835", "kind": "dns", "frame_number": 67781, "timestamp_epoch": "1634916828.026126000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53935, "dst_port": 53, "tcp_stream": null, "udp_stream": 881, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-23bf32a69f1532d3e6854b6f", "kind": "dns", "frame_number": 67782, "timestamp_epoch": "1634916828.065732000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53935, "tcp_stream": null, "udp_stream": 881, "fields": { "dns.a": "52.96.121.98,52.96.121.242,52.96.103.34,52.96.121.162", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-a5c2d3fa8f1aefb6be724c90", "kind": "dns", "frame_number": 67887, "timestamp_epoch": "1634916840.028315000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56988, "dst_port": 53, "tcp_stream": null, "udp_stream": 882, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6896e970c669a61493cc1b29", "kind": "dns", "frame_number": 67888, "timestamp_epoch": "1634916840.332601000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56988, "tcp_stream": null, "udp_stream": 882, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1b28593477ab42c20fc94f44", "kind": "dns", "frame_number": 67895, "timestamp_epoch": "1634916844.684963000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54611, "dst_port": 53, "tcp_stream": null, "udp_stream": 883, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2d4b165b881a7619f6394291", "kind": "dns", "frame_number": 67899, "timestamp_epoch": "1634916844.741476000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54611, "tcp_stream": null, "udp_stream": 883, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7f27ef5dec842c7ee7168867", "kind": "dns", "frame_number": 67937, "timestamp_epoch": "1634916849.075132000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50837, "dst_port": 53, "tcp_stream": null, "udp_stream": 884, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d3e7948498ac889c4ad67d7d", "kind": "dns", "frame_number": 67938, "timestamp_epoch": "1634916849.151280000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50837, "tcp_stream": null, "udp_stream": 884, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-91d6a06bf5f46730aff22167", "kind": "dns", "frame_number": 67975, "timestamp_epoch": "1634916866.434905000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52011, "dst_port": 53, "tcp_stream": null, "udp_stream": 885, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7cbca0138ae3000288054111", "kind": "dns", "frame_number": 67976, "timestamp_epoch": "1634916866.502752000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52011, "tcp_stream": null, "udp_stream": 885, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f19f1df01ce47d189d76e9c2", "kind": "dns", "frame_number": 67986, "timestamp_epoch": "1634916870.824872000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52790, "dst_port": 53, "tcp_stream": null, "udp_stream": 886, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d9c1edb0ea795d5696c17044", "kind": "dns", "frame_number": 67987, "timestamp_epoch": "1634916870.898943000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52790, "tcp_stream": null, "udp_stream": 886, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-98aa1298aed1fb8dab043910", "kind": "dns", "frame_number": 67996, "timestamp_epoch": "1634916875.201230000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64485, "dst_port": 53, "tcp_stream": null, "udp_stream": 887, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-831d8afb03bf50f59c6b7289", "kind": "dns", "frame_number": 67997, "timestamp_epoch": "1634916875.259659000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64485, "tcp_stream": null, "udp_stream": 887, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-67815e0736a3a47e1e977cde", "kind": "dns", "frame_number": 68022, "timestamp_epoch": "1634916889.837479000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49226, "dst_port": 53, "tcp_stream": null, "udp_stream": 888, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-39694c0a49d094f4dda0ec1a", "kind": "dns", "frame_number": 68023, "timestamp_epoch": "1634916889.855693000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49226, "dst_port": 53, "tcp_stream": null, "udp_stream": 888, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-4595dfe31d029f2bf0dad89a", "kind": "dns", "frame_number": 68024, "timestamp_epoch": "1634916889.922590000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49226, "tcp_stream": null, "udp_stream": 888, "fields": { "dns.a": "52.183.220.149", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-30432fd785e87d7d34aa3d93", "kind": "dns", "frame_number": 68055, "timestamp_epoch": "1634916892.842097000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61695, "dst_port": 53, "tcp_stream": null, "udp_stream": 889, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e17b600829c4775280b56317", "kind": "dns", "frame_number": 68056, "timestamp_epoch": "1634916892.926379000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61695, "tcp_stream": null, "udp_stream": 889, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-41bb8de3cee0c75a13f69514", "kind": "dns", "frame_number": 68070, "timestamp_epoch": "1634916897.279787000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53050, "dst_port": 53, "tcp_stream": null, "udp_stream": 890, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3e7d3c6ca6925146d7ad6d90", "kind": "dns", "frame_number": 68071, "timestamp_epoch": "1634916897.375902000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53050, "tcp_stream": null, "udp_stream": 890, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-72dd13f4b4649d2f88df97ad", "kind": "dns", "frame_number": 68078, "timestamp_epoch": "1634916901.716961000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58301, "dst_port": 53, "tcp_stream": null, "udp_stream": 891, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f1b5956f1ca250af79669c73", "kind": "dns", "frame_number": 68079, "timestamp_epoch": "1634916901.773539000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58301, "tcp_stream": null, "udp_stream": 891, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bccf6c0366f72120260e0c38", "kind": "dns", "frame_number": 68095, "timestamp_epoch": "1634916905.476321000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60794, "dst_port": 53, "tcp_stream": null, "udp_stream": 892, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.perpetualplaques.com", "dns.qry.type": "1" } }, { "event_id": "evt-bf846876f54595f1786ac8f9", "kind": "dns", "frame_number": 68097, "timestamp_epoch": "1634916905.528705000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60794, "dst_port": 53, "tcp_stream": null, "udp_stream": 892, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.perpetualplaques.com", "dns.qry.type": "1" } }, { "event_id": "evt-ebb92c4c88755ccec3e1f8a0", "kind": "dns", "frame_number": 68098, "timestamp_epoch": "1634916905.566833000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60794, "tcp_stream": null, "udp_stream": 892, "fields": { "dns.a": "64.87.23.16", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.perpetualplaques.com", "dns.qry.type": "1" } }, { "event_id": "evt-538c2642253ceff29d500063", "kind": "dns", "frame_number": 68234, "timestamp_epoch": "1634916919.015205000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52249, "dst_port": 53, "tcp_stream": null, "udp_stream": 893, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5cd3a2b7e9918248b7457bcc", "kind": "dns", "frame_number": 68235, "timestamp_epoch": "1634916919.086962000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52249, "tcp_stream": null, "udp_stream": 893, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-59ae3e4d546e1bf64aa1c872", "kind": "dns", "frame_number": 68242, "timestamp_epoch": "1634916923.436083000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52267, "dst_port": 53, "tcp_stream": null, "udp_stream": 894, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c566142eb4cabd94881562f0", "kind": "dns", "frame_number": 68243, "timestamp_epoch": "1634916923.535494000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52267, "tcp_stream": null, "udp_stream": 894, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-71e147172afdd67d0d9ae62f", "kind": "dns", "frame_number": 68250, "timestamp_epoch": "1634916927.842317000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59326, "dst_port": 53, "tcp_stream": null, "udp_stream": 895, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7499f2334766bff93fa5ef53", "kind": "dns", "frame_number": 68251, "timestamp_epoch": "1634916927.944428000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59326, "tcp_stream": null, "udp_stream": 895, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4bc2928b740772e8d0a145ce", "kind": "dns", "frame_number": 68278, "timestamp_epoch": "1634916945.530539000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56029, "dst_port": 53, "tcp_stream": null, "udp_stream": 896, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f77f3f2e3b6934c6a9b9dc9d", "kind": "dns", "frame_number": 68279, "timestamp_epoch": "1634916945.654387000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56029, "tcp_stream": null, "udp_stream": 896, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d3c81da71ddb280e158cd107", "kind": "dns", "frame_number": 68286, "timestamp_epoch": "1634916949.967315000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55389, "dst_port": 53, "tcp_stream": null, "udp_stream": 897, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a1fe85421772302938edfa94", "kind": "dns", "frame_number": 68287, "timestamp_epoch": "1634916950.159695000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55389, "tcp_stream": null, "udp_stream": 897, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9a8fce95bbe4c6c0a1ef10f8", "kind": "dns", "frame_number": 68289, "timestamp_epoch": "1634916950.170866000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63435, "dst_port": 53, "tcp_stream": null, "udp_stream": 898, "fields": { "dns.flags.response": "False", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-c74d12534423209b21a13864", "kind": "dns", "frame_number": 68290, "timestamp_epoch": "1634916950.201498000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 63435, "dst_port": 53, "tcp_stream": null, "udp_stream": 898, "fields": { "dns.flags.response": "False", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-3a9c1abd7d70afb0ea7adf98", "kind": "dns", "frame_number": 68291, "timestamp_epoch": "1634916950.227634000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63435, "tcp_stream": null, "udp_stream": 898, "fields": { "dns.a": "104.94.77.31", "dns.cname": "crl.root-x1.letsencrypt.org.edgekey.net,e8652.dscx.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-4f1033b2b2ca9d77c9312c13", "kind": "dns", "frame_number": 68302, "timestamp_epoch": "1634916950.343151000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62398, "dst_port": 53, "tcp_stream": null, "udp_stream": 899, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-6ff57fdad35709cf42e32b34", "kind": "dns", "frame_number": 68304, "timestamp_epoch": "1634916950.374240000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62398, "dst_port": 53, "tcp_stream": null, "udp_stream": 899, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-a949c716aa9beaba426a604e", "kind": "dns", "frame_number": 68305, "timestamp_epoch": "1634916950.388940000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62398, "tcp_stream": null, "udp_stream": 899, "fields": { "dns.a": "13.107.4.50", "dns.cname": "wu-shim.trafficmanager.net,b1ns.au-msedge.net,b1ns.c-0001.c-msedge.net,c-0001.c-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-a75db602c2298b431a743cf9", "kind": "dns", "frame_number": 68309, "timestamp_epoch": "1634916954.468130000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62645, "dst_port": 53, "tcp_stream": null, "udp_stream": 900, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f6ce35439b70ebe4b1b3437f", "kind": "dns", "frame_number": 68310, "timestamp_epoch": "1634916954.563178000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62645, "tcp_stream": null, "udp_stream": 900, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7f79c97cc477efab6d3b0041", "kind": "dns", "frame_number": 68334, "timestamp_epoch": "1634916960.375305000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 51978, "dst_port": 53, "tcp_stream": null, "udp_stream": 901, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f5409a187d16cde637bc682b", "kind": "dns", "frame_number": 68335, "timestamp_epoch": "1634916960.449014000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 51978, "tcp_stream": null, "udp_stream": 901, "fields": { "dns.a": "52.185.211.133", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-62c4800974c565eb43bb0cec", "kind": "dns", "frame_number": 68377, "timestamp_epoch": "1634916972.031919000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61637, "dst_port": 53, "tcp_stream": null, "udp_stream": 902, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a73325807b8579a44058831d", "kind": "dns", "frame_number": 68378, "timestamp_epoch": "1634916972.107107000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61637, "tcp_stream": null, "udp_stream": 902, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-659f5cf78477772f5dd6ba91", "kind": "dns", "frame_number": 68409, "timestamp_epoch": "1634916976.407290000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64506, "dst_port": 53, "tcp_stream": null, "udp_stream": 903, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3cf96dbd6dfef6dceccada49", "kind": "dns", "frame_number": 68411, "timestamp_epoch": "1634916976.478528000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64506, "tcp_stream": null, "udp_stream": 903, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d79c30c428f2fa94db9078ba", "kind": "dns", "frame_number": 68418, "timestamp_epoch": "1634916980.766524000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49291, "dst_port": 53, "tcp_stream": null, "udp_stream": 904, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4ac63bd42547c998ae7a77e0", "kind": "dns", "frame_number": 68419, "timestamp_epoch": "1634916980.835794000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49291, "tcp_stream": null, "udp_stream": 904, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a0892cf9213c037a84a1d035", "kind": "dns", "frame_number": 68449, "timestamp_epoch": "1634916998.157912000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65437, "dst_port": 53, "tcp_stream": null, "udp_stream": 905, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e9235d08a57d07360cbc9be7", "kind": "dns", "frame_number": 68450, "timestamp_epoch": "1634916998.216356000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65437, "tcp_stream": null, "udp_stream": 905, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6486d966c8d0386240f60e6d", "kind": "dns", "frame_number": 68459, "timestamp_epoch": "1634917002.516775000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53488, "dst_port": 53, "tcp_stream": null, "udp_stream": 906, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-822c050d4406ced367aa9c5b", "kind": "dns", "frame_number": 68460, "timestamp_epoch": "1634917002.581340000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53488, "tcp_stream": null, "udp_stream": 906, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-86a086489c2d604b85c00a25", "kind": "dns", "frame_number": 68468, "timestamp_epoch": "1634917006.891483000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59234, "dst_port": 53, "tcp_stream": null, "udp_stream": 907, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c25f444dc5cbc182be4e9650", "kind": "dns", "frame_number": 68469, "timestamp_epoch": "1634917006.972444000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59234, "tcp_stream": null, "udp_stream": 907, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a9511fcd2d91f5c69bfda7bd", "kind": "dns", "frame_number": 68497, "timestamp_epoch": "1634917013.135912000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60444, "dst_port": 53, "tcp_stream": null, "udp_stream": 908, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-e32fd0cff78f5d08a62498cb", "kind": "dns", "frame_number": 68499, "timestamp_epoch": "1634917013.187179000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60444, "tcp_stream": null, "udp_stream": 908, "fields": { "dns.a": "52.96.16.162,52.96.57.2,52.96.121.162,40.97.212.18", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8fa2522db9226028693227d7", "kind": "dns", "frame_number": 68533, "timestamp_epoch": "1634917014.646205000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62939, "dst_port": 53, "tcp_stream": null, "udp_stream": 909, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.monquartier.com.br", "dns.qry.type": "1" } }, { "event_id": "evt-6862f6be31487b3b3779e990", "kind": "dns", "frame_number": 68535, "timestamp_epoch": "1634917014.718364000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62939, "dst_port": 53, "tcp_stream": null, "udp_stream": 909, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.monquartier.com.br", "dns.qry.type": "1" } }, { "event_id": "evt-f90c3e7c15f75027406a42cd", "kind": "dns", "frame_number": 68538, "timestamp_epoch": "1634917014.998659000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62939, "tcp_stream": null, "udp_stream": 909, "fields": { "dns.a": "168.196.133.84", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.monquartier.com.br", "dns.qry.type": "1" } }, { "event_id": "evt-4a3d6f00a029796ff2805401", "kind": "dns", "frame_number": 68651, "timestamp_epoch": "1634917020.637946000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52431, "dst_port": 53, "tcp_stream": null, "udp_stream": 910, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-4fdbfb75cd0d4c5f7e7beb6b", "kind": "dns", "frame_number": 68658, "timestamp_epoch": "1634917020.693186000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52431, "tcp_stream": null, "udp_stream": 910, "fields": { "dns.a": "13.107.4.50", "dns.cname": "wu-shim.trafficmanager.net,b1ns.au-msedge.net,b1ns.c-0001.c-msedge.net,c-0001.c-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-cbfb7abd231530ce98e9660e", "kind": "dns", "frame_number": 68666, "timestamp_epoch": "1634917024.345025000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54789, "dst_port": 53, "tcp_stream": null, "udp_stream": 275, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-014beaafe1ed6dcfe7ea4d4c", "kind": "dns", "frame_number": 68667, "timestamp_epoch": "1634917024.398070000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54789, "tcp_stream": null, "udp_stream": 275, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-36a36f1079e094af53715baa", "kind": "dns", "frame_number": 68678, "timestamp_epoch": "1634917028.690254000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59478, "dst_port": 53, "tcp_stream": null, "udp_stream": 911, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c1d459959aa14654f9b4a5a8", "kind": "dns", "frame_number": 68679, "timestamp_epoch": "1634917028.752860000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59478, "tcp_stream": null, "udp_stream": 911, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-91fb05c2ec82b090029b1499", "kind": "dns", "frame_number": 68694, "timestamp_epoch": "1634917033.064851000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52012, "dst_port": 53, "tcp_stream": null, "udp_stream": 912, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4ae9ebda3540849f187a36ad", "kind": "dns", "frame_number": 68695, "timestamp_epoch": "1634917033.120421000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52012, "tcp_stream": null, "udp_stream": 912, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f6baaf2229bcee4f08d2dc42", "kind": "dns", "frame_number": 68711, "timestamp_epoch": "1634917034.798675000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50861, "dst_port": 53, "tcp_stream": null, "udp_stream": 913, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.medicinafutura.it", "dns.qry.type": "1" } }, { "event_id": "evt-53d9ed3c61608dc20c81b0bb", "kind": "dns", "frame_number": 68713, "timestamp_epoch": "1634917034.875900000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50861, "dst_port": 53, "tcp_stream": null, "udp_stream": 913, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.medicinafutura.it", "dns.qry.type": "1" } }, { "event_id": "evt-fb1d3b9ad2a0e6124bd26599", "kind": "dns", "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50861, "tcp_stream": null, "udp_stream": 913, "fields": { "dns.a": "62.149.128.203,62.149.128.200,62.149.128.202,62.149.128.201", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.medicinafutura.it", "dns.qry.type": "1" } }, { "event_id": "evt-f7d7ae9c159a145d160a8151", "kind": "dns", "frame_number": 68841, "timestamp_epoch": "1634917050.376983000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62801, "dst_port": 53, "tcp_stream": null, "udp_stream": 914, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e79adce6c9b0591cdaaadb91", "kind": "dns", "frame_number": 68842, "timestamp_epoch": "1634917050.431078000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62801, "tcp_stream": null, "udp_stream": 914, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-44885d56c8565996d3dc1178", "kind": "dns", "frame_number": 68860, "timestamp_epoch": "1634917054.463571000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51925, "dst_port": 53, "tcp_stream": null, "udp_stream": 915, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta.21cn.com", "dns.qry.type": "1" } }, { "event_id": "evt-d7e9cc359dd2d881dea59d4f", "kind": "dns", "frame_number": 68862, "timestamp_epoch": "1634917054.517241000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51925, "dst_port": 53, "tcp_stream": null, "udp_stream": 915, "fields": { "dns.flags.response": "False", "dns.qry.name": "mta.21cn.com", "dns.qry.type": "1" } }, { "event_id": "evt-94a12ad4be1cc0e76015449d", "kind": "dns", "frame_number": 68863, "timestamp_epoch": "1634917054.536701000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51925, "tcp_stream": null, "udp_stream": 915, "fields": { "dns.a": "183.61.185.83", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mta.21cn.com", "dns.qry.type": "1" } }, { "event_id": "evt-0b805a920201347362489b80", "kind": "dns", "frame_number": 68865, "timestamp_epoch": "1634917054.752020000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61100, "dst_port": 53, "tcp_stream": null, "udp_stream": 916, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-93b73974d295a3f0264bc35d", "kind": "dns", "frame_number": 68866, "timestamp_epoch": "1634917054.805597000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61100, "tcp_stream": null, "udp_stream": 916, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4aac737f34ef20cd5cea2f37", "kind": "dns", "frame_number": 68887, "timestamp_epoch": "1634917059.126234000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56692, "dst_port": 53, "tcp_stream": null, "udp_stream": 917, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1a21f70ff666d919e0ebd844", "kind": "dns", "frame_number": 68888, "timestamp_epoch": "1634917059.186045000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56692, "tcp_stream": null, "udp_stream": 917, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cd0bb6845880299dd559026a", "kind": "dns", "frame_number": 68938, "timestamp_epoch": "1634917076.675112000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50210, "dst_port": 53, "tcp_stream": null, "udp_stream": 918, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cf07a124f7c229e2bad8acc8", "kind": "dns", "frame_number": 68939, "timestamp_epoch": "1634917076.730459000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50210, "tcp_stream": null, "udp_stream": 918, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6500bcd8d014bd51beacfa36", "kind": "dns", "frame_number": 68957, "timestamp_epoch": "1634917079.726839000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60396, "dst_port": 53, "tcp_stream": null, "udp_stream": 919, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.pangia.biz", "dns.qry.type": "1" } }, { "event_id": "evt-fde27f12c64cfc487db871f0", "kind": "dns", "frame_number": 68959, "timestamp_epoch": "1634917079.779900000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60396, "tcp_stream": null, "udp_stream": 919, "fields": { "dns.a": "74.202.142.20", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.pangia.biz", "dns.qry.type": "1" } }, { "event_id": "evt-8c56db94356bb7a5b81d7333", "kind": "dns", "frame_number": 68983, "timestamp_epoch": "1634917081.033328000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51199, "dst_port": 53, "tcp_stream": null, "udp_stream": 920, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6cf9c855265c36040a5c053c", "kind": "dns", "frame_number": 68987, "timestamp_epoch": "1634917081.089185000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51199, "tcp_stream": null, "udp_stream": 920, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4cd76960f9852b9c567d77ec", "kind": "dns", "frame_number": 68999, "timestamp_epoch": "1634917081.268640000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59095, "dst_port": 53, "tcp_stream": null, "udp_stream": 921, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-4d0b4714ec7f09948ef0c740", "kind": "dns", "frame_number": 69001, "timestamp_epoch": "1634917081.345981000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59095, "dst_port": 53, "tcp_stream": null, "udp_stream": 921, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-04119ae9a701e92740eb13cc", "kind": "dns", "frame_number": 69004, "timestamp_epoch": "1634917081.519715000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59095, "tcp_stream": null, "udp_stream": 921, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-02be2bb00efe3e03839525c5", "kind": "dns", "frame_number": 69091, "timestamp_epoch": "1634917085.425334000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 58282, "dst_port": 53, "tcp_stream": null, "udp_stream": 922, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0519b9eb0db49e1ca3cbe3d7", "kind": "dns", "frame_number": 69092, "timestamp_epoch": "1634917085.481814000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 58282, "tcp_stream": null, "udp_stream": 922, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3d6ea4c42c100d1918b20cfe", "kind": "dns", "frame_number": 69174, "timestamp_epoch": "1634917102.721748000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 64879, "dst_port": 53, "tcp_stream": null, "udp_stream": 923, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c916bf8f615a6e294489e99b", "kind": "dns", "frame_number": 69175, "timestamp_epoch": "1634917102.787971000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64879, "tcp_stream": null, "udp_stream": 923, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-23e938770425ab02038e5bf7", "kind": "dns", "frame_number": 69189, "timestamp_epoch": "1634917107.080969000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60757, "dst_port": 53, "tcp_stream": null, "udp_stream": 924, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8c9cb8d99cb8d053649660c7", "kind": "dns", "frame_number": 69190, "timestamp_epoch": "1634917107.131865000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60757, "tcp_stream": null, "udp_stream": 924, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9f0f711f1efd38296227aa6e", "kind": "dns", "frame_number": 69206, "timestamp_epoch": "1634917109.395921000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57720, "dst_port": 53, "tcp_stream": null, "udp_stream": 925, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.hrctunisia.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7a1531e7a4907b3fcf77e4b", "kind": "dns", "frame_number": 69208, "timestamp_epoch": "1634917109.455953000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57720, "dst_port": 53, "tcp_stream": null, "udp_stream": 925, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.hrctunisia.com", "dns.qry.type": "1" } }, { "event_id": "evt-214991e3ec1c14d8d926f73b", "kind": "dns", "frame_number": 69209, "timestamp_epoch": "1634917109.702372000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57720, "tcp_stream": null, "udp_stream": 925, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ssl0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.hrctunisia.com", "dns.qry.type": "1" } }, { "event_id": "evt-2628737f1a840fcc6925dfff", "kind": "dns", "frame_number": 69238, "timestamp_epoch": "1634917111.661114000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56897, "dst_port": 53, "tcp_stream": null, "udp_stream": 926, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c8064678d73c0c52b1bea2df", "kind": "dns", "frame_number": 69239, "timestamp_epoch": "1634917111.750742000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56897, "tcp_stream": null, "udp_stream": 926, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-867290cfb875ebfc870dfac4", "kind": "dns", "frame_number": 69333, "timestamp_epoch": "1634917122.214648000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52207, "dst_port": 53, "tcp_stream": null, "udp_stream": 927, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-ca628f0822e09532bce043c3", "kind": "dns", "frame_number": 69334, "timestamp_epoch": "1634917122.261173000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52207, "tcp_stream": null, "udp_stream": 927, "fields": { "dns.a": "52.96.191.98,40.97.96.2,52.96.122.242,52.96.121.210", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-5eee099d395cf26bc5d02653", "kind": "dns", "frame_number": 69419, "timestamp_epoch": "1634917129.020295000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 53876, "dst_port": 53, "tcp_stream": null, "udp_stream": 928, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0d605c4b1f7cdfd39cba11b4", "kind": "dns", "frame_number": 69420, "timestamp_epoch": "1634917129.158899000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 53876, "tcp_stream": null, "udp_stream": 928, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-9bf0fd3f2177525bfac9ffef", "kind": "dns", "frame_number": 69429, "timestamp_epoch": "1634917133.457902000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56958, "dst_port": 53, "tcp_stream": null, "udp_stream": 929, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7b657804c574fcf5aaa0c6dc", "kind": "dns", "frame_number": 69430, "timestamp_epoch": "1634917133.663643000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56958, "tcp_stream": null, "udp_stream": 929, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-50c437fdaa7f7d9e51b66420", "kind": "dns", "frame_number": 69457, "timestamp_epoch": "1634917137.357962000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61864, "dst_port": 53, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-72415766eb01e19cc36f502a", "kind": "dns", "frame_number": 69459, "timestamp_epoch": "1634917137.456473000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61864, "dst_port": 53, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-c758af879820c827340d2bc5", "kind": "dns", "frame_number": 69460, "timestamp_epoch": "1634917137.987752000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59853, "dst_port": 53, "tcp_stream": null, "udp_stream": 931, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-45ed93eb769f7974c1e6dfb2", "kind": "dns", "frame_number": 69461, "timestamp_epoch": "1634917138.052638000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59853, "tcp_stream": null, "udp_stream": 931, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-435dfc439225475932415246", "kind": "dns", "frame_number": 69470, "timestamp_epoch": "1634917138.471334000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61864, "dst_port": 53, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-75b5c614a88d3f4e7d806fd9", "kind": "dns", "frame_number": 69471, "timestamp_epoch": "1634917140.486272000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61864, "dst_port": 53, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-2e82e77caf113aafd8c7a00a", "kind": "dns", "frame_number": 69482, "timestamp_epoch": "1634917144.501939000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61864, "dst_port": 53, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-8244b41c26b8a4a553d7c099", "kind": "dns", "frame_number": 69483, "timestamp_epoch": "1634917145.722044000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61864, "tcp_stream": null, "udp_stream": 930, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-0ae10f909f11dd5560db432d", "kind": "dns", "frame_number": 69524, "timestamp_epoch": "1634917150.228182000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65246, "dst_port": 53, "tcp_stream": null, "udp_stream": 932, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.csnert.fr", "dns.qry.type": "1" } }, { "event_id": "evt-faccca969339a9af6208620b", "kind": "dns", "frame_number": 69526, "timestamp_epoch": "1634917150.330561000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65246, "dst_port": 53, "tcp_stream": null, "udp_stream": 932, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.csnert.fr", "dns.qry.type": "1" } }, { "event_id": "evt-8dfde2373572fafc7fe202a6", "kind": "dns", "frame_number": 69531, "timestamp_epoch": "1634917150.663411000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65246, "tcp_stream": null, "udp_stream": 932, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.csnert.fr", "dns.qry.type": "1" } }, { "event_id": "evt-f7660bdc014b398a9a659b1f", "kind": "dns", "frame_number": 69723, "timestamp_epoch": "1634917189.939416000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51414, "dst_port": 53, "tcp_stream": null, "udp_stream": 933, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.ulpianocarrasco.com", "dns.qry.type": "1" } }, { "event_id": "evt-255b42563380cef08ab0256b", "kind": "dns", "frame_number": 69725, "timestamp_epoch": "1634917190.021095000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51414, "dst_port": 53, "tcp_stream": null, "udp_stream": 933, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.ulpianocarrasco.com", "dns.qry.type": "1" } }, { "event_id": "evt-371a238aa7a6f74b014b91d6", "kind": "dns", "frame_number": 69726, "timestamp_epoch": "1634917190.196662000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51414, "tcp_stream": null, "udp_stream": 933, "fields": { "dns.a": "217.116.0.228", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.ulpianocarrasco.com", "dns.qry.type": "1" } }, { "event_id": "evt-bc5f5d81285ec27fd09e64f3", "kind": "dns", "frame_number": 69867, "timestamp_epoch": "1634917200.840510000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59675, "dst_port": 53, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-bb2d996ee9a158948c91a0b9", "kind": "dns", "frame_number": 69869, "timestamp_epoch": "1634917200.942670000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59675, "dst_port": 53, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-55180c2e4b5bc8bde806e0c7", "kind": "dns", "frame_number": 69870, "timestamp_epoch": "1634917201.942894000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59675, "dst_port": 53, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-ad13aff24950589601e42aba", "kind": "dns", "frame_number": 69875, "timestamp_epoch": "1634917203.958394000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59675, "dst_port": 53, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-ddf2210d01c0d2e91752014e", "kind": "dns", "frame_number": 69876, "timestamp_epoch": "1634917207.958673000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59675, "dst_port": 53, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-7b305498823db2b540cb4226", "kind": "dns", "frame_number": 69879, "timestamp_epoch": "1634917209.208653000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59675, "tcp_stream": null, "udp_stream": 934, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-7e6bba56e6965a778189476e", "kind": "dns", "frame_number": 69885, "timestamp_epoch": "1634917209.631693000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51939, "dst_port": 53, "tcp_stream": null, "udp_stream": 935, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.juno.com", "dns.qry.type": "1" } }, { "event_id": "evt-479e6f56d6e86e03285d5699", "kind": "dns", "frame_number": 69886, "timestamp_epoch": "1634917209.673251000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51939, "tcp_stream": null, "udp_stream": 935, "fields": { "dns.a": "64.136.52.45,64.136.44.45", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.juno.com", "dns.qry.type": "1" } }, { "event_id": "evt-3e5de37b467bbb6252283dfd", "kind": "dns", "frame_number": 69986, "timestamp_epoch": "1634917217.429368000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65337, "dst_port": 53, "tcp_stream": null, "udp_stream": 936, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.chokshiandchokshi.in", "dns.qry.type": "1" } }, { "event_id": "evt-08ce93b9ee8af63279611610", "kind": "dns", "frame_number": 69988, "timestamp_epoch": "1634917217.516688000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65337, "tcp_stream": null, "udp_stream": 936, "fields": { "dns.a": "180.149.244.81", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.chokshiandchokshi.in", "dns.qry.type": "1" } }, { "event_id": "evt-569a1cc1dcd5a2553093b10e", "kind": "dns", "frame_number": 70031, "timestamp_epoch": "1634917221.441465000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52918, "dst_port": 53, "tcp_stream": null, "udp_stream": 937, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-67bff004ba4e7fe0927c92ed", "kind": "dns", "frame_number": 70034, "timestamp_epoch": "1634917221.491585000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52918, "tcp_stream": null, "udp_stream": 937, "fields": { "dns.a": "52.96.10.242,40.97.121.34,40.97.120.146,52.96.122.226", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-c4252b959465b15d7a2bb5e7", "kind": "dns", "frame_number": 70189, "timestamp_epoch": "1634917225.073589000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49355, "dst_port": 53, "tcp_stream": null, "udp_stream": 938, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.unisanraffaele.gov.it", "dns.qry.type": "1" } }, { "event_id": "evt-4997cb9a61f9815748e3d7d3", "kind": "dns", "frame_number": 70192, "timestamp_epoch": "1634917225.162487000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49355, "dst_port": 53, "tcp_stream": null, "udp_stream": 938, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.unisanraffaele.gov.it", "dns.qry.type": "1" } }, { "event_id": "evt-88d6dc270a618b7c79e63486", "kind": "dns", "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49355, "tcp_stream": null, "udp_stream": 938, "fields": { "dns.a": "62.149.128.203,62.149.128.200,62.149.128.201,62.149.128.202", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.unisanraffaele.gov.it", "dns.qry.type": "1" } }, { "event_id": "evt-874a00986c62645eb7f445d4", "kind": "dns", "frame_number": 70267, "timestamp_epoch": "1634917226.948965000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59589, "dst_port": 53, "tcp_stream": null, "udp_stream": 939, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-99fd62fceba0f87aedb817bc", "kind": "dns", "frame_number": 70270, "timestamp_epoch": "1634917227.053063000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59589, "dst_port": 53, "tcp_stream": null, "udp_stream": 939, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-1424990c2befeef361a9b539", "kind": "dns", "frame_number": 70275, "timestamp_epoch": "1634917228.053388000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59589, "dst_port": 53, "tcp_stream": null, "udp_stream": 939, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-610ec846a988baaf6042335e", "kind": "dns", "frame_number": 70276, "timestamp_epoch": "1634917228.307217000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59589, "tcp_stream": null, "udp_stream": 939, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-325953f233c2b16381bd6dd2", "kind": "dns", "frame_number": 70852, "timestamp_epoch": "1634917264.562033000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60776, "dst_port": 53, "tcp_stream": null, "udp_stream": 940, "fields": { "dns.flags.response": "False", "dns.qry.name": "mx.celleno.it", "dns.qry.type": "1" } }, { "event_id": "evt-251e46a1fab8f0077cc01132", "kind": "dns", "frame_number": 70854, "timestamp_epoch": "1634917264.663288000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60776, "dst_port": 53, "tcp_stream": null, "udp_stream": 940, "fields": { "dns.flags.response": "False", "dns.qry.name": "mx.celleno.it", "dns.qry.type": "1" } }, { "event_id": "evt-1adb03dfe9c7e819a214aeb6", "kind": "dns", "frame_number": 70857, "timestamp_epoch": "1634917264.766583000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60776, "tcp_stream": null, "udp_stream": 940, "fields": { "dns.a": "94.143.155.83", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mx.celleno.it", "dns.qry.type": "1" } }, { "event_id": "evt-0446b392a8e1f2b964174808", "kind": "dns", "frame_number": 71101, "timestamp_epoch": "1634917286.960839000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50550, "dst_port": 53, "tcp_stream": null, "udp_stream": 941, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-4a36195628395a50359d8d45", "kind": "dns", "frame_number": 71102, "timestamp_epoch": "1634917286.961286000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50550, "tcp_stream": null, "udp_stream": 941, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-93ec817970888fa67bf6166d", "kind": "dns", "frame_number": 71361, "timestamp_epoch": "1634917301.726066000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54504, "dst_port": 53, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-ba10fa74e9a4bbdc05a3fd7c", "kind": "dns", "frame_number": 71363, "timestamp_epoch": "1634917301.819024000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54504, "dst_port": 53, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-8c3f6a1501ef476d9ff79bd2", "kind": "dns", "frame_number": 71364, "timestamp_epoch": "1634917302.819220000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54504, "dst_port": 53, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-357991aa08f0f1899ee1be2b", "kind": "dns", "frame_number": 71371, "timestamp_epoch": "1634917304.835195000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54504, "dst_port": 53, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-497f1db51403ae4bde09084c", "kind": "dns", "frame_number": 71374, "timestamp_epoch": "1634917308.849663000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54504, "dst_port": 53, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-341e58e757bf64b2506a89d0", "kind": "dns", "frame_number": 71377, "timestamp_epoch": "1634917309.929561000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54504, "tcp_stream": null, "udp_stream": 942, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-7b6a92f8a15e8b3652bf8287", "kind": "dns", "frame_number": 71386, "timestamp_epoch": "1634917311.024440000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63695, "dst_port": 53, "tcp_stream": null, "udp_stream": 943, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-4f0a783e35d378bfb15e4faa", "kind": "dns", "frame_number": 71388, "timestamp_epoch": "1634917311.131492000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63695, "dst_port": 53, "tcp_stream": null, "udp_stream": 943, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-7b14e8692db97c096e85a886", "kind": "dns", "frame_number": 71389, "timestamp_epoch": "1634917311.330942000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63695, "tcp_stream": null, "udp_stream": 943, "fields": { "dns.a": "123.126.45.161", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.sina.com.cn", "dns.qry.type": "1" } }, { "event_id": "evt-8e9aa23e8485b061202844ac", "kind": "dns", "frame_number": 71444, "timestamp_epoch": "1634917326.100452000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52094, "dst_port": 53, "tcp_stream": null, "udp_stream": 944, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ajeel.fr", "dns.qry.type": "1" } }, { "event_id": "evt-a23a5868b4ac7e320f9d8eaa", "kind": "dns", "frame_number": 71446, "timestamp_epoch": "1634917326.211393000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52094, "dst_port": 53, "tcp_stream": null, "udp_stream": 944, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ajeel.fr", "dns.qry.type": "1" } }, { "event_id": "evt-14bb31a3273ea0aa2a7350a3", "kind": "dns", "frame_number": 71451, "timestamp_epoch": "1634917327.227173000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52094, "dst_port": 53, "tcp_stream": null, "udp_stream": 944, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ajeel.fr", "dns.qry.type": "1" } }, { "event_id": "evt-cb039ac3d89157cd4c3ca68d", "kind": "dns", "frame_number": 71457, "timestamp_epoch": "1634917329.241501000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52094, "dst_port": 53, "tcp_stream": null, "udp_stream": 944, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ajeel.fr", "dns.qry.type": "1" } }, { "event_id": "evt-d60f7d98886a8d24c58e2188", "kind": "dns", "frame_number": 71458, "timestamp_epoch": "1634917329.864858000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52094, "tcp_stream": null, "udp_stream": 944, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.ajeel.fr", "dns.qry.type": "1" } }, { "event_id": "evt-c41d7c081082cc39b28dac9d", "kind": "dns", "frame_number": 71477, "timestamp_epoch": "1634917330.547013000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51797, "dst_port": 53, "tcp_stream": null, "udp_stream": 945, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-183c07cbed8cfd29731922e0", "kind": "dns", "frame_number": 71478, "timestamp_epoch": "1634917330.593824000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51797, "tcp_stream": null, "udp_stream": 945, "fields": { "dns.a": "52.96.121.194,52.96.8.130,52.96.57.34,40.97.120.226", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-f1654725b0e507bb0960d44c", "kind": "dns", "frame_number": 71491, "timestamp_epoch": "1634917331.152147000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59143, "dst_port": 53, "tcp_stream": null, "udp_stream": 946, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2678f52aadf0c0a1f8a899e5", "kind": "dns", "frame_number": 71492, "timestamp_epoch": "1634917331.152513000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59143, "tcp_stream": null, "udp_stream": 946, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-3f085d5e61e94cbc11112c62", "kind": "dns", "frame_number": 71493, "timestamp_epoch": "1634917331.153034000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 60636, "dst_port": 53, "tcp_stream": null, "udp_stream": 947, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8ee8802a2fc66771a5f523d6", "kind": "dns", "frame_number": 71495, "timestamp_epoch": "1634917331.202920000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60636, "tcp_stream": null, "udp_stream": 947, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-c7e4961dcb91ad89ffe979ee", "kind": "dns", "frame_number": 71703, "timestamp_epoch": "1634917335.483162000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52681, "dst_port": 53, "tcp_stream": null, "udp_stream": 948, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.netzero.com", "dns.qry.type": "1" } }, { "event_id": "evt-f7c4c4a1a1652174a6af4af5", "kind": "dns", "frame_number": 71705, "timestamp_epoch": "1634917335.545942000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52681, "tcp_stream": null, "udp_stream": 948, "fields": { "dns.a": "64.136.52.50,64.136.44.50", "dns.cname": "smtp-com.netzero.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.netzero.com", "dns.qry.type": "1" } }, { "event_id": "evt-a75034f3391f25162570a980", "kind": "dns", "frame_number": 71949, "timestamp_epoch": "1634917347.560377000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59303, "dst_port": 53, "tcp_stream": null, "udp_stream": 949, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-2fbf29c210af2bf9100e3daf", "kind": "dns", "frame_number": 71950, "timestamp_epoch": "1634917347.560843000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59303, "tcp_stream": null, "udp_stream": 949, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-abd7e621e5aba97138985476", "kind": "dns", "frame_number": 71951, "timestamp_epoch": "1634917347.561402000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54772, "dst_port": 53, "tcp_stream": null, "udp_stream": 950, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4ace65cc164ba6dee223ae1f", "kind": "dns", "frame_number": 71952, "timestamp_epoch": "1634917347.561640000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54772, "tcp_stream": null, "udp_stream": 950, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-8f2de8022fab3abd968c01ea", "kind": "dns", "frame_number": 71968, "timestamp_epoch": "1634917349.148502000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57904, "dst_port": 53, "tcp_stream": null, "udp_stream": 951, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e36f549eba6905b0927ab83d", "kind": "dns", "frame_number": 71969, "timestamp_epoch": "1634917349.148818000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57904, "tcp_stream": null, "udp_stream": 951, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-01216cc0ac7d2e8d5a38bce0", "kind": "dns", "frame_number": 71970, "timestamp_epoch": "1634917349.149338000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 52945, "dst_port": 53, "tcp_stream": null, "udp_stream": 952, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-3745ca16a129ef0a9664d744", "kind": "dns", "frame_number": 71971, "timestamp_epoch": "1634917349.149599000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 52945, "tcp_stream": null, "udp_stream": 952, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a0b9f92c7ffc117098de8102", "kind": "dns", "frame_number": 71989, "timestamp_epoch": "1634917355.855992000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53955, "dst_port": 53, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-d8e8e17a3f39707fa1ed7533", "kind": "dns", "frame_number": 71991, "timestamp_epoch": "1634917355.945800000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53955, "dst_port": 53, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-1e73657d556df192f8b95dfb", "kind": "dns", "frame_number": 71994, "timestamp_epoch": "1634917356.947519000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53955, "dst_port": 53, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-56b6b68061a29b8fe20b3f6d", "kind": "dns", "frame_number": 71995, "timestamp_epoch": "1634917358.962358000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53955, "dst_port": 53, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-c102f1ad048c658a255a6d59", "kind": "dns", "frame_number": 71998, "timestamp_epoch": "1634917362.976772000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53955, "dst_port": 53, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-cdd96f4a985e9e87bca6825b", "kind": "dns", "frame_number": 71999, "timestamp_epoch": "1634917364.399117000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53955, "tcp_stream": null, "udp_stream": 953, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-09fc79a11e296ac3d37f32a9", "kind": "dns", "frame_number": 72037, "timestamp_epoch": "1634917373.591663000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49332, "dst_port": 53, "tcp_stream": null, "udp_stream": 954, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.isoldry.com", "dns.qry.type": "1" } }, { "event_id": "evt-89846126b5bdeba2e5eb8a5e", "kind": "dns", "frame_number": 72038, "timestamp_epoch": "1634917373.592036000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49332, "tcp_stream": null, "udp_stream": 954, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.isoldry.com", "dns.qry.type": "1" } }, { "event_id": "evt-e2e04f30c65fdf3fd992c9a1", "kind": "dns", "frame_number": 72054, "timestamp_epoch": "1634917374.648741000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63026, "dst_port": 53, "tcp_stream": null, "udp_stream": 955, "fields": { "dns.flags.response": "False", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-ee05adb8f3bf8a8ea771ad8d", "kind": "dns", "frame_number": 72060, "timestamp_epoch": "1634917374.706361000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 63026, "dst_port": 53, "tcp_stream": null, "udp_stream": 955, "fields": { "dns.flags.response": "False", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-f3e3f80a09a18e9b7605e15b", "kind": "dns", "frame_number": 72061, "timestamp_epoch": "1634917374.725026000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 63026, "tcp_stream": null, "udp_stream": 955, "fields": { "dns.a": "13.107.21.200,204.79.197.200", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-039a59f3216888dec80f048b", "kind": "dns", "frame_number": 72773, "timestamp_epoch": "1634917379.407846000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55416, "dst_port": 53, "tcp_stream": null, "udp_stream": 956, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.backmarket.com", "dns.qry.type": "1" } }, { "event_id": "evt-a83c2e920b47ba3f19d8de25", "kind": "dns", "frame_number": 72775, "timestamp_epoch": "1634917379.487372000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55416, "dst_port": 53, "tcp_stream": null, "udp_stream": 956, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.backmarket.com", "dns.qry.type": "1" } }, { "event_id": "evt-9e0e8d4fb9d9c2b64cb5192c", "kind": "dns", "frame_number": 72776, "timestamp_epoch": "1634917379.487559000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55416, "tcp_stream": null, "udp_stream": 956, "fields": { "dns.a": "104.16.10.88,104.17.201.57", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.backmarket.com", "dns.qry.type": "1" } }, { "event_id": "evt-cea812e5e9fb978a6bceedbe", "kind": "dns", "frame_number": 72777, "timestamp_epoch": "1634917379.488011000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55416, "tcp_stream": null, "udp_stream": 956, "fields": { "dns.a": "104.17.201.57,104.16.10.88", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.backmarket.com", "dns.qry.type": "1" } }, { "event_id": "evt-875634459bbcce467be951b9", "kind": "dns", "frame_number": 72801, "timestamp_epoch": "1634917380.182309000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50290, "dst_port": 53, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-e834a7fd2f05192bf46e2af3", "kind": "dns", "frame_number": 72803, "timestamp_epoch": "1634917380.275775000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50290, "dst_port": 53, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-e984e86e4d20599438ccec51", "kind": "dns", "frame_number": 73424, "timestamp_epoch": "1634917381.275953000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50290, "dst_port": 53, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-569b5c90cfc3a4046b9b3ae3", "kind": "dns", "frame_number": 73429, "timestamp_epoch": "1634917383.290294000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50290, "dst_port": 53, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-87c2124c6198f9ebc610c9d1", "kind": "dns", "frame_number": 73430, "timestamp_epoch": "1634917387.290776000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 50290, "dst_port": 53, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-5d24b75ded05330094913a0f", "kind": "dns", "frame_number": 73433, "timestamp_epoch": "1634917388.083004000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 50290, "tcp_stream": null, "udp_stream": 957, "fields": { "dns.flags.rcode": "2", "dns.flags.response": "True", "dns.qry.name": "mail.austinjournls.com", "dns.qry.type": "1" } }, { "event_id": "evt-a5215b6c72879ebf09cae775", "kind": "dns", "frame_number": 73466, "timestamp_epoch": "1634917410.059916000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65144, "dst_port": 53, "tcp_stream": null, "udp_stream": 958, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-763ed57041db967e205e50dc", "kind": "dns", "frame_number": 73467, "timestamp_epoch": "1634917410.150675000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65144, "dst_port": 53, "tcp_stream": null, "udp_stream": 958, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-8858ff8f63a94c69aeaf8ef8", "kind": "dns", "frame_number": 73468, "timestamp_epoch": "1634917410.206214000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65144, "tcp_stream": null, "udp_stream": 958, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-76c222ca38edff5bbc40ce63", "kind": "dns", "frame_number": 73506, "timestamp_epoch": "1634917417.522280000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54355, "dst_port": 53, "tcp_stream": null, "udp_stream": 959, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8c9e9145b0f9135a0dad8f6f", "kind": "dns", "frame_number": 73507, "timestamp_epoch": "1634917417.580238000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54355, "tcp_stream": null, "udp_stream": 959, "fields": { "dns.a": "52.96.122.242,52.96.103.18,40.97.121.2,40.97.121.34", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-3c7ffe08b573923462842691", "kind": "dns", "frame_number": 73611, "timestamp_epoch": "1634917432.410989000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55661, "dst_port": 53, "tcp_stream": null, "udp_stream": 960, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-489025de298a72abe0859dbc", "kind": "dns", "frame_number": 73612, "timestamp_epoch": "1634917432.451328000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55661, "tcp_stream": null, "udp_stream": 960, "fields": { "dns.a": "52.96.57.2,52.96.121.162,52.96.121.194,52.96.121.242", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-4c9c4f8ad8828765bc539ac8", "kind": "dns", "frame_number": 73614, "timestamp_epoch": "1634917432.452958000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56013, "dst_port": 53, "tcp_stream": null, "udp_stream": 961, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.burgers.cc", "dns.qry.type": "1" } }, { "event_id": "evt-ac217bd23f0efa356b1e9ec8", "kind": "dns", "frame_number": 73619, "timestamp_epoch": "1634917432.558070000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56013, "dst_port": 53, "tcp_stream": null, "udp_stream": 961, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.burgers.cc", "dns.qry.type": "1" } }, { "event_id": "evt-d7da8a0bad242ed480047cbb", "kind": "dns", "frame_number": 73621, "timestamp_epoch": "1634917433.086568000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56013, "tcp_stream": null, "udp_stream": 961, "fields": { "dns.a": "41.86.105.101", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.burgers.cc", "dns.qry.type": "1" } }, { "event_id": "evt-aaeaf3bc38fd0ec166d29179", "kind": "dns", "frame_number": 74442, "timestamp_epoch": "1634917455.672827000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51941, "dst_port": 53, "tcp_stream": null, "udp_stream": 962, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-db4ad02e3c22e0de83cc68ea", "kind": "dns", "frame_number": 74444, "timestamp_epoch": "1634917455.719712000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51941, "tcp_stream": null, "udp_stream": 962, "fields": { "dns.a": "52.96.103.2,40.97.120.210,40.97.121.2,40.97.92.34", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-81f37406f4b553af5b0a37a3", "kind": "dns", "frame_number": 74552, "timestamp_epoch": "1634917462.904094000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54117, "dst_port": 53, "tcp_stream": null, "udp_stream": 963, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tcgasociados.com", "dns.qry.type": "1" } }, { "event_id": "evt-1eac5593955a972383da2d7b", "kind": "dns", "frame_number": 74554, "timestamp_epoch": "1634917462.996211000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54117, "dst_port": 53, "tcp_stream": null, "udp_stream": 963, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tcgasociados.com", "dns.qry.type": "1" } }, { "event_id": "evt-9153016948664f19a8cafd06", "kind": "dns", "frame_number": 74555, "timestamp_epoch": "1634917463.044740000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54117, "tcp_stream": null, "udp_stream": 963, "fields": { "dns.a": "66.96.162.198", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.tcgasociados.com", "dns.qry.type": "1" } }, { "event_id": "evt-3b65ed45cd9a67db50c2f670", "kind": "dns", "frame_number": 74639, "timestamp_epoch": "1634917467.264390000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51187, "dst_port": 53, "tcp_stream": null, "udp_stream": 964, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-419de8be3fe43390758a7ca4", "kind": "dns", "frame_number": 74640, "timestamp_epoch": "1634917467.264716000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51187, "tcp_stream": null, "udp_stream": 964, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-a824a272f940ad00d9ac8b87", "kind": "dns", "frame_number": 74686, "timestamp_epoch": "1634917472.377018000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61656, "dst_port": 53, "tcp_stream": null, "udp_stream": 966, "fields": { "dns.flags.response": "False", "dns.qry.name": "umwatson.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-c900a957cb49ba036eada519", "kind": "dns", "frame_number": 74687, "timestamp_epoch": "1634917472.439528000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61656, "tcp_stream": null, "udp_stream": 966, "fields": { "dns.a": "104.208.16.94", "dns.cname": "blobcollector.events.data.trafficmanager.net,onedsblobprdcus16.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "umwatson.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-1add9dc3ee52e50b38d821a0", "kind": "dns", "frame_number": 74712, "timestamp_epoch": "1634917473.116898000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65467, "dst_port": 53, "tcp_stream": null, "udp_stream": 967, "fields": { "dns.flags.response": "False", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-24079d6accc7f15539687821", "kind": "dns", "frame_number": 74713, "timestamp_epoch": "1634917473.117213000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65467, "tcp_stream": null, "udp_stream": 967, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "_ldap._tcp.pdc._msdcs.enemywatch.net", "dns.qry.type": "33" } }, { "event_id": "evt-4df2042e01464ce76dd14ef0", "kind": "dns", "frame_number": 74767, "timestamp_epoch": "1634917480.878971000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56238, "dst_port": 53, "tcp_stream": null, "udp_stream": 969, "fields": { "dns.flags.response": "False", "dns.qry.name": "hzmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-10b613bbab90910f75e02317", "kind": "dns", "frame_number": 74769, "timestamp_epoch": "1634917480.965230000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56238, "dst_port": 53, "tcp_stream": null, "udp_stream": 969, "fields": { "dns.flags.response": "False", "dns.qry.name": "hzmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-39dd5903ad173d1e99a14ef4", "kind": "dns", "frame_number": 74770, "timestamp_epoch": "1634917480.997903000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56238, "tcp_stream": null, "udp_stream": 969, "fields": { "dns.a": "103.129.255.250,103.129.255.251", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "hzmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-fc8cc9c1696b23d4490d9170", "kind": "dns", "frame_number": 74844, "timestamp_epoch": "1634917486.420741000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57061, "dst_port": 53, "tcp_stream": null, "udp_stream": 970, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0f2c9050a8df26e9176c604d", "kind": "dns", "frame_number": 74846, "timestamp_epoch": "1634917486.492765000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57061, "tcp_stream": null, "udp_stream": 970, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4020df188b439bbb60567697", "kind": "dns", "frame_number": 74935, "timestamp_epoch": "1634917490.810269000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55156, "dst_port": 53, "tcp_stream": null, "udp_stream": 971, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-aaa0f7f400505aa240c57220", "kind": "dns", "frame_number": 74939, "timestamp_epoch": "1634917490.880535000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55156, "tcp_stream": null, "udp_stream": 971, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-150e6108c7e1668b1721bc82", "kind": "dns", "frame_number": 74941, "timestamp_epoch": "1634917491.023270000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64254, "dst_port": 53, "tcp_stream": null, "udp_stream": 972, "fields": { "dns.flags.response": "False", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-8f631deb4a40da7f90800977", "kind": "dns", "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64254, "tcp_stream": null, "udp_stream": 972, "fields": { "dns.a": "40.126.29.8,40.126.29.11,40.126.29.9,40.126.29.15,20.190.157.11,40.126.29.10,40.126.29.7,40.126.29.14", "dns.cname": "login.msa.msidentity.com,www.tm.lg.prod.aadmsa.akadns.net,prda.aadg.msidentity.com,www.tm.a.prd.aadg.trafficmanager.net,san.current.a.prd.aadg.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "login.live.com", "dns.qry.type": "1" } }, { "event_id": "evt-b5d084dbcecf2283743884a1", "kind": "dns", "frame_number": 74991, "timestamp_epoch": "1634917491.530973000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55649, "dst_port": 53, "tcp_stream": null, "udp_stream": 973, "fields": { "dns.flags.response": "False", "dns.qry.name": "umwatson.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-0ccf2d37f70bc28ae95582a9", "kind": "dns", "frame_number": 74992, "timestamp_epoch": "1634917491.611280000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55649, "tcp_stream": null, "udp_stream": 973, "fields": { "dns.a": "104.208.16.94", "dns.cname": "blobcollector.events.data.trafficmanager.net,onedsblobprdcus16.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "umwatson.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-f9f1f1ed66ecfd9f98ccfebf", "kind": "dns", "frame_number": 75027, "timestamp_epoch": "1634917495.231744000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49898, "dst_port": 53, "tcp_stream": null, "udp_stream": 974, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a57f763decaaacccf41eddc7", "kind": "dns", "frame_number": 75028, "timestamp_epoch": "1634917495.283780000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49898, "tcp_stream": null, "udp_stream": 974, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-80ed563ff6ae536a738cbe5b", "kind": "dns", "frame_number": 75060, "timestamp_epoch": "1634917513.031011000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65455, "dst_port": 53, "tcp_stream": null, "udp_stream": 975, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-57873f599872a91936f5c26b", "kind": "dns", "frame_number": 75061, "timestamp_epoch": "1634917513.107376000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65455, "tcp_stream": null, "udp_stream": 975, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7d311404360a82182bdf9481", "kind": "dns", "frame_number": 75068, "timestamp_epoch": "1634917517.451981000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 63921, "dst_port": 53, "tcp_stream": null, "udp_stream": 976, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ba1b37e736761a692c4b26f7", "kind": "dns", "frame_number": 75069, "timestamp_epoch": "1634917517.515396000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 63921, "tcp_stream": null, "udp_stream": 976, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7e82c132e739919301f90fda", "kind": "dns", "frame_number": 75076, "timestamp_epoch": "1634917521.827030000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57575, "dst_port": 53, "tcp_stream": null, "udp_stream": 977, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cf5dffced0f4e3be84be28a3", "kind": "dns", "frame_number": 75077, "timestamp_epoch": "1634917521.887530000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57575, "tcp_stream": null, "udp_stream": 977, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6d3348eb43b94fb5a9016ae3", "kind": "dns", "frame_number": 75109, "timestamp_epoch": "1634917531.267706000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64030, "dst_port": 53, "tcp_stream": null, "udp_stream": 978, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-10e9c42a6244bea3774bc110", "kind": "dns", "frame_number": 75111, "timestamp_epoch": "1634917531.371701000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64030, "dst_port": 53, "tcp_stream": null, "udp_stream": 978, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-f2fddcb117bfaa71dd8a6808", "kind": "dns", "frame_number": 75112, "timestamp_epoch": "1634917531.441008000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64030, "tcp_stream": null, "udp_stream": 978, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.kbcrawl.net", "dns.qry.type": "1" } }, { "event_id": "evt-40bfb286f74f3f1397a1b98c", "kind": "dns", "frame_number": 75138, "timestamp_epoch": "1634917532.951928000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64318, "dst_port": 53, "tcp_stream": null, "udp_stream": 979, "fields": { "dns.flags.response": "False", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-1bbc02594aafd405c2bd595e", "kind": "dns", "frame_number": 75139, "timestamp_epoch": "1634917533.012812000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64318, "tcp_stream": null, "udp_stream": 979, "fields": { "dns.a": "104.94.77.31", "dns.cname": "crl.root-x1.letsencrypt.org.edgekey.net,e8652.dscx.akamaiedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "x1.c.lencr.org", "dns.qry.type": "1" } }, { "event_id": "evt-d5d8429d4be31a855fa5849f", "kind": "dns", "frame_number": 75146, "timestamp_epoch": "1634917533.096883000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60681, "dst_port": 53, "tcp_stream": null, "udp_stream": 980, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-ea183ef71511ebf3cf8aec9d", "kind": "dns", "frame_number": 75150, "timestamp_epoch": "1634917533.142513000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60681, "tcp_stream": null, "udp_stream": 980, "fields": { "dns.a": "13.107.4.50", "dns.cname": "wu-shim.trafficmanager.net,b1ns.au-msedge.net,b1ns.c-0001.c-msedge.net,c-0001.c-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-3d984a5cc6938e9268bf1339", "kind": "dns", "frame_number": 75213, "timestamp_epoch": "1634917539.232645000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52332, "dst_port": 53, "tcp_stream": null, "udp_stream": 981, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-02c43d7e01c73f49156a749f", "kind": "dns", "frame_number": 75214, "timestamp_epoch": "1634917539.408654000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52332, "tcp_stream": null, "udp_stream": 981, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-852683e7ab25a245662a648a", "kind": "dns", "frame_number": 75231, "timestamp_epoch": "1634917543.717527000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51664, "dst_port": 53, "tcp_stream": null, "udp_stream": 982, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cc7da29c8aad6b7639786b65", "kind": "dns", "frame_number": 75232, "timestamp_epoch": "1634917543.887039000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51664, "tcp_stream": null, "udp_stream": 982, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ddfe4bf71b25da88da7c4868", "kind": "dns", "frame_number": 75239, "timestamp_epoch": "1634917548.201951000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52944, "dst_port": 53, "tcp_stream": null, "udp_stream": 983, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-fef49d3913a952a334ea9803", "kind": "dns", "frame_number": 75240, "timestamp_epoch": "1634917548.390760000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52944, "tcp_stream": null, "udp_stream": 983, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1ceabb3036b8a200f6140543", "kind": "dns", "frame_number": 75252, "timestamp_epoch": "1634917551.265096000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 62461, "dst_port": 53, "tcp_stream": null, "udp_stream": 984, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-13e3eaf772758753fcffdd2a", "kind": "dns", "frame_number": 75254, "timestamp_epoch": "1634917551.265471000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62461, "tcp_stream": null, "udp_stream": 984, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-b0e847ae335a600c420dc026", "kind": "dns", "frame_number": 75256, "timestamp_epoch": "1634917551.267075000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 55918, "dst_port": 53, "tcp_stream": null, "udp_stream": 985, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-1bd5bbee4e0d621033fc1138", "kind": "dns", "frame_number": 75257, "timestamp_epoch": "1634917551.267916000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55918, "tcp_stream": null, "udp_stream": 985, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-49a531bb58d7a63cc014853a", "kind": "dns", "frame_number": 75258, "timestamp_epoch": "1634917551.320799000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54353, "dst_port": 53, "tcp_stream": null, "udp_stream": 986, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-19bfcc35c7084069b1f2b5f2", "kind": "dns", "frame_number": 75259, "timestamp_epoch": "1634917551.419368000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54353, "dst_port": 53, "tcp_stream": null, "udp_stream": 986, "fields": { "dns.flags.response": "False", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-562b1f62301508d8793122dd", "kind": "dns", "frame_number": 75260, "timestamp_epoch": "1634917551.564701000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54353, "tcp_stream": null, "udp_stream": 986, "fields": { "dns.a": "13.107.4.50", "dns.cname": "wu-shim.trafficmanager.net,b1ns.au-msedge.net,b1ns.c-0001.c-msedge.net,c-0001.c-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ctldl.windowsupdate.com", "dns.qry.type": "1" } }, { "event_id": "evt-93b2dfcca8c9f44e315b068d", "kind": "dns", "frame_number": 75740, "timestamp_epoch": "1634917555.755522000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58948, "dst_port": 53, "tcp_stream": null, "udp_stream": 987, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-b655432d63ba330faca41262", "kind": "dns", "frame_number": 75742, "timestamp_epoch": "1634917555.841452000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58948, "dst_port": 53, "tcp_stream": null, "udp_stream": 987, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-4ea1dc29cc216dbee66ca6a6", "kind": "dns", "frame_number": 75745, "timestamp_epoch": "1634917556.072346000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58948, "tcp_stream": null, "udp_stream": 987, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.anberman.es", "dns.qry.type": "1" } }, { "event_id": "evt-0c30eb4ce20599565b3aaf28", "kind": "dns", "frame_number": 75898, "timestamp_epoch": "1634917557.346980000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59823, "dst_port": 53, "tcp_stream": null, "udp_stream": 988, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-b494bc088306dd0f1c85822b", "kind": "dns", "frame_number": 75918, "timestamp_epoch": "1634917557.388230000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59823, "dst_port": 53, "tcp_stream": null, "udp_stream": 988, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-7905032635ef0ac43c1536b6", "kind": "dns", "frame_number": 75924, "timestamp_epoch": "1634917557.392527000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59823, "tcp_stream": null, "udp_stream": 988, "fields": { "dns.a": "52.178.17.3", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdweu05.westeurope.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d736ec13931cf2a13997adb2", "kind": "dns", "frame_number": 76217, "timestamp_epoch": "1634917565.639631000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59722, "dst_port": 53, "tcp_stream": null, "udp_stream": 989, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b286b5cbcd6b2907abf80621", "kind": "dns", "frame_number": 76218, "timestamp_epoch": "1634917565.697195000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59722, "tcp_stream": null, "udp_stream": 989, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-1e15a0c60a485af3bf06a8a5", "kind": "dns", "frame_number": 76232, "timestamp_epoch": "1634917569.999945000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52683, "dst_port": 53, "tcp_stream": null, "udp_stream": 990, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a2943922e8893833c339c6fe", "kind": "dns", "frame_number": 76233, "timestamp_epoch": "1634917570.063243000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52683, "tcp_stream": null, "udp_stream": 990, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4ef017caf17f6bb2e21843a4", "kind": "dns", "frame_number": 76260, "timestamp_epoch": "1634917574.374153000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52409, "dst_port": 53, "tcp_stream": null, "udp_stream": 991, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4d0b7bfef3fdc44c6b2b6dc5", "kind": "dns", "frame_number": 76261, "timestamp_epoch": "1634917574.435037000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52409, "tcp_stream": null, "udp_stream": 991, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-880cba728b623aeede94635a", "kind": "dns", "frame_number": 76298, "timestamp_epoch": "1634917591.687674000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59050, "dst_port": 53, "tcp_stream": null, "udp_stream": 992, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0748d0dfb05c94078017beb7", "kind": "dns", "frame_number": 76299, "timestamp_epoch": "1634917591.737490000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59050, "tcp_stream": null, "udp_stream": 992, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-cc752bdae410335a7f29ca35", "kind": "dns", "frame_number": 76306, "timestamp_epoch": "1634917596.032163000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61315, "dst_port": 53, "tcp_stream": null, "udp_stream": 993, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-babdf6e5ccfa026239b4ef03", "kind": "dns", "frame_number": 76307, "timestamp_epoch": "1634917596.101682000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61315, "tcp_stream": null, "udp_stream": 993, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-65afb8159353a360c33aa116", "kind": "dns", "frame_number": 76334, "timestamp_epoch": "1634917600.453446000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54491, "dst_port": 53, "tcp_stream": null, "udp_stream": 994, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-b3c29e8d718e4aedd735192f", "kind": "dns", "frame_number": 76335, "timestamp_epoch": "1634917600.523861000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54491, "tcp_stream": null, "udp_stream": 994, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a732c623a3a0a113b36beaab", "kind": "dns", "frame_number": 76363, "timestamp_epoch": "1634917611.951027000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60136, "dst_port": 53, "tcp_stream": null, "udp_stream": 995, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-18e3509484e2eed85c24616b", "kind": "dns", "frame_number": 76366, "timestamp_epoch": "1634917611.951492000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60136, "tcp_stream": null, "udp_stream": 995, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-609c605d5d354d67745608ff", "kind": "dns", "frame_number": 76368, "timestamp_epoch": "1634917611.952688000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59177, "dst_port": 53, "tcp_stream": null, "udp_stream": 997, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-e6e893f00ff1976ad340399e", "kind": "dns", "frame_number": 76369, "timestamp_epoch": "1634917611.953658000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59177, "tcp_stream": null, "udp_stream": 997, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-d4649194f740040a1670d971", "kind": "dns", "frame_number": 76402, "timestamp_epoch": "1634917617.828927000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54917, "dst_port": 53, "tcp_stream": null, "udp_stream": 998, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bb6e1782e5dad695289cec8f", "kind": "dns", "frame_number": 76403, "timestamp_epoch": "1634917617.909785000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54917, "tcp_stream": null, "udp_stream": 998, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-30a2cc6067cbe8bf9974a7d1", "kind": "dns", "frame_number": 76410, "timestamp_epoch": "1634917618.094197000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 51225, "dst_port": 53, "tcp_stream": null, "udp_stream": 999, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d9b6fd60d426e44e3eba7a18", "kind": "dns", "frame_number": 76411, "timestamp_epoch": "1634917618.132695000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 51225, "tcp_stream": null, "udp_stream": 999, "fields": { "dns.a": "20.44.10.123", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus05.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-567cd9a2b5e4f80e51405154", "kind": "dns", "frame_number": 76448, "timestamp_epoch": "1634917622.220081000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49481, "dst_port": 53, "tcp_stream": null, "udp_stream": 1000, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-87f1f6951c5f99850fcc846e", "kind": "dns", "frame_number": 76449, "timestamp_epoch": "1634917622.268115000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49481, "tcp_stream": null, "udp_stream": 1000, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-594819e8d2a2ea4bd9f96db1", "kind": "dns", "frame_number": 76462, "timestamp_epoch": "1634917626.579572000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54717, "dst_port": 53, "tcp_stream": null, "udp_stream": 1001, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-aa63b196c27f6eb6b544f472", "kind": "dns", "frame_number": 76463, "timestamp_epoch": "1634917626.645474000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54717, "tcp_stream": null, "udp_stream": 1001, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a0a96433ed27b280e8d22dd2", "kind": "dns", "frame_number": 76488, "timestamp_epoch": "1634917635.125626000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57884, "dst_port": 53, "tcp_stream": null, "udp_stream": 1002, "fields": { "dns.flags.response": "False", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-396338d7cbaeeab77d66a5a2", "kind": "dns", "frame_number": 76490, "timestamp_epoch": "1634917635.219208000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57884, "dst_port": 53, "tcp_stream": null, "udp_stream": 1002, "fields": { "dns.flags.response": "False", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-612f6e699380baf393bc5ca4", "kind": "dns", "frame_number": 76497, "timestamp_epoch": "1634917636.219298000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57884, "dst_port": 53, "tcp_stream": null, "udp_stream": 1002, "fields": { "dns.flags.response": "False", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-06649a3101b971fc68342ab2", "kind": "dns", "frame_number": 76498, "timestamp_epoch": "1634917636.367594000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57884, "tcp_stream": null, "udp_stream": 1002, "fields": { "dns.a": "70.39.150.220", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "ultimatecuisinecatering.com", "dns.qry.type": "1" } }, { "event_id": "evt-c8ec8b060c64043cc2c3ef9b", "kind": "dns", "frame_number": 76623, "timestamp_epoch": "1634917643.637827000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56086, "dst_port": 53, "tcp_stream": null, "udp_stream": 1003, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-8ec8ee0d4dfda0b4e3ff942a", "kind": "dns", "frame_number": 76624, "timestamp_epoch": "1634917643.638037000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56086, "tcp_stream": null, "udp_stream": 1003, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-29f8cd2e93950373baeade96", "kind": "dns", "frame_number": 76626, "timestamp_epoch": "1634917643.640229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 55693, "dst_port": 53, "tcp_stream": null, "udp_stream": 1005, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-77a35e01caba80870499a52b", "kind": "dns", "frame_number": 76627, "timestamp_epoch": "1634917643.641240000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 55693, "tcp_stream": null, "udp_stream": 1005, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-e833f8ecf9b132b4dc223519", "kind": "dns", "frame_number": 76628, "timestamp_epoch": "1634917643.922936000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 57033, "dst_port": 53, "tcp_stream": null, "udp_stream": 1006, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-94dc7aa83fb6b0ebc6c226b9", "kind": "dns", "frame_number": 76629, "timestamp_epoch": "1634917643.985581000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 57033, "tcp_stream": null, "udp_stream": 1006, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-56f133370e4bb57d13426314", "kind": "dns", "frame_number": 76661, "timestamp_epoch": "1634917648.283586000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59234, "dst_port": 53, "tcp_stream": null, "udp_stream": 907, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d67c4599d07f95de5a982dc7", "kind": "dns", "frame_number": 76662, "timestamp_epoch": "1634917648.343693000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59234, "tcp_stream": null, "udp_stream": 907, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-68d28cbcb93a8272b2612c55", "kind": "dns", "frame_number": 76669, "timestamp_epoch": "1634917649.030395000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49493, "dst_port": 53, "tcp_stream": null, "udp_stream": 1007, "fields": { "dns.flags.response": "False", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d2b06ebf5418c49ec119172d", "kind": "dns", "frame_number": 76670, "timestamp_epoch": "1634917649.092285000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49493, "tcp_stream": null, "udp_stream": 1007, "fields": { "dns.a": "20.44.10.123", "dns.cname": "global.asimov.events.data.trafficmanager.net,onedscolprdcus05.centralus.cloudapp.azure.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "v10.events.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-15288864313164b9e729b910", "kind": "dns", "frame_number": 76695, "timestamp_epoch": "1634917652.643329000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54252, "dst_port": 53, "tcp_stream": null, "udp_stream": 1008, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2c5886f98a0de2e4e001557a", "kind": "dns", "frame_number": 76697, "timestamp_epoch": "1634917652.701783000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54252, "tcp_stream": null, "udp_stream": 1008, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3ee79dbd19525dfb6ceff322", "kind": "dns", "frame_number": 76731, "timestamp_epoch": "1634917669.986091000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60507, "dst_port": 53, "tcp_stream": null, "udp_stream": 1009, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-133b69ff366330afc941ba09", "kind": "dns", "frame_number": 76732, "timestamp_epoch": "1634917670.054984000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60507, "tcp_stream": null, "udp_stream": 1009, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-37f9f37792fb3db83f6e44df", "kind": "dns", "frame_number": 76744, "timestamp_epoch": "1634917674.393914000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 54290, "dst_port": 53, "tcp_stream": null, "udp_stream": 1010, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-177aa1daa0904de156b7e6dd", "kind": "dns", "frame_number": 76745, "timestamp_epoch": "1634917674.457074000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 54290, "tcp_stream": null, "udp_stream": 1010, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2692a4bae8ce699334258676", "kind": "dns", "frame_number": 76754, "timestamp_epoch": "1634917678.751851000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50089, "dst_port": 53, "tcp_stream": null, "udp_stream": 1011, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-a80e08f5d2d625b4127f9e96", "kind": "dns", "frame_number": 76755, "timestamp_epoch": "1634917678.949216000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50089, "tcp_stream": null, "udp_stream": 1011, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-aa3fa01c4e805c599bd8b868", "kind": "dns", "frame_number": 76782, "timestamp_epoch": "1634917696.345742000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49809, "dst_port": 53, "tcp_stream": null, "udp_stream": 1012, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-f56a88a5ee27b19d1b5f0092", "kind": "dns", "frame_number": 76783, "timestamp_epoch": "1634917696.397530000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49809, "tcp_stream": null, "udp_stream": 1012, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-56022c6c2b1c5dd70785d9f0", "kind": "dns", "frame_number": 76790, "timestamp_epoch": "1634917700.722245000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60433, "dst_port": 53, "tcp_stream": null, "udp_stream": 1013, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-33906f17415311e16d5043a8", "kind": "dns", "frame_number": 76791, "timestamp_epoch": "1634917700.790467000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60433, "tcp_stream": null, "udp_stream": 1013, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-12bbb00eb18a866f49821b9b", "kind": "dns", "frame_number": 76798, "timestamp_epoch": "1634917705.111972000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 59230, "dst_port": 53, "tcp_stream": null, "udp_stream": 1014, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-000e2d5f0a16c3708dff5e41", "kind": "dns", "frame_number": 76799, "timestamp_epoch": "1634917705.187454000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59230, "tcp_stream": null, "udp_stream": 1014, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-23f1d6b53f738779c8ad4285", "kind": "dns", "frame_number": 76828, "timestamp_epoch": "1634917715.511186000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53441, "dst_port": 53, "tcp_stream": null, "udp_stream": 1015, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.lecmg.fr", "dns.qry.type": "1" } }, { "event_id": "evt-4ff6bd3ce6cbf097e2589605", "kind": "dns", "frame_number": 76829, "timestamp_epoch": "1634917715.511717000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53441, "tcp_stream": null, "udp_stream": 1015, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.lecmg.fr", "dns.qry.type": "1" } }, { "event_id": "evt-10171007e2142f9853af77fd", "kind": "dns", "frame_number": 77125, "timestamp_epoch": "1634917769.638059000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65522, "dst_port": 53, "tcp_stream": null, "udp_stream": 1016, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kalivet.com", "dns.qry.type": "1" } }, { "event_id": "evt-9e24751bf1b7ea9125f00884", "kind": "dns", "frame_number": 77127, "timestamp_epoch": "1634917769.738385000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65522, "dst_port": 53, "tcp_stream": null, "udp_stream": 1016, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.kalivet.com", "dns.qry.type": "1" } }, { "event_id": "evt-41560f07df1a71b6e58cf8dc", "kind": "dns", "frame_number": 77128, "timestamp_epoch": "1634917769.838468000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65522, "tcp_stream": null, "udp_stream": 1016, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ssl0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.kalivet.com", "dns.qry.type": "1" } }, { "event_id": "evt-853561d85841a6675713b5dc", "kind": "dns", "frame_number": 77263, "timestamp_epoch": "1634917788.058447000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54228, "dst_port": 53, "tcp_stream": null, "udp_stream": 1017, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.atelierscalin.fr", "dns.qry.type": "1" } }, { "event_id": "evt-b79284f47d64900bdbafd881", "kind": "dns", "frame_number": 77267, "timestamp_epoch": "1634917788.144291000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54228, "dst_port": 53, "tcp_stream": null, "udp_stream": 1017, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.atelierscalin.fr", "dns.qry.type": "1" } }, { "event_id": "evt-23ef06203610bfca168df54e", "kind": "dns", "frame_number": 77268, "timestamp_epoch": "1634917788.420012000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54228, "tcp_stream": null, "udp_stream": 1017, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.atelierscalin.fr", "dns.qry.type": "1" } }, { "event_id": "evt-579a6a292ebe1f73f20c7951", "kind": "dns", "frame_number": 78071, "timestamp_epoch": "1634917828.562404000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54903, "dst_port": 53, "tcp_stream": null, "udp_stream": 1018, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-3571c756e74015e7d9397ceb", "kind": "dns", "frame_number": 78073, "timestamp_epoch": "1634917828.660346000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54903, "tcp_stream": null, "udp_stream": 1018, "fields": { "dns.a": "40.97.120.146,52.96.121.98,52.96.121.178,40.97.120.194", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-2ac7e4b88846ce1e062ea8bc", "kind": "dns", "frame_number": 78074, "timestamp_epoch": "1634917828.660529000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54903, "dst_port": 53, "tcp_stream": null, "udp_stream": 1018, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-2001a41b6b5a2a5d43de919d", "kind": "dns", "frame_number": 78075, "timestamp_epoch": "1634917828.660958000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54903, "tcp_stream": null, "udp_stream": 1018, "fields": { "dns.a": "52.96.121.98,52.96.121.178,40.97.120.194,40.97.120.146", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-34471dc81def9d0798e0b491", "kind": "dns", "frame_number": 78076, "timestamp_epoch": "1634917828.661276000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53, "dst_port": 54903, "tcp_stream": null, "udp_stream": 1018, "fields": { "dns.a": "52.96.121.98,52.96.121.178,40.97.120.194,40.97.120.146", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-fbd40804a4b4182efcfba11a", "kind": "dns", "frame_number": 78236, "timestamp_epoch": "1634917860.786777000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49255, "dst_port": 53, "tcp_stream": null, "udp_stream": 1019, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-d8e193491baf0c8d4756e0dd", "kind": "dns", "frame_number": 78237, "timestamp_epoch": "1634917860.844102000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49255, "dst_port": 53, "tcp_stream": null, "udp_stream": 1019, "fields": { "dns.flags.response": "False", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-971971eeb00b09fd7e08b17c", "kind": "dns", "frame_number": 78238, "timestamp_epoch": "1634917860.884313000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49255, "tcp_stream": null, "udp_stream": 1019, "fields": { "dns.a": "52.183.220.149", "dns.cname": "settingsfd-geo.trafficmanager.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "settings-win.data.microsoft.com", "dns.qry.type": "1" } }, { "event_id": "evt-5689608b583a172279058ffb", "kind": "dns", "frame_number": 78338, "timestamp_epoch": "1634917928.063707000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58699, "dst_port": 53, "tcp_stream": null, "udp_stream": 1020, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-37025a826b206d3803d8905a", "kind": "dns", "frame_number": 78339, "timestamp_epoch": "1634917928.099537000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58699, "tcp_stream": null, "udp_stream": 1020, "fields": { "dns.a": "52.96.121.114,52.96.91.66,52.96.57.18,52.96.57.2", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-0c5a194888821da537fddd8a", "kind": "dns", "frame_number": 78403, "timestamp_epoch": "1634917931.214637000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 64986, "dst_port": 53, "tcp_stream": null, "udp_stream": 1021, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-655cd1ef3f603c45138ed7a2", "kind": "dns", "frame_number": 78404, "timestamp_epoch": "1634917931.214967000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 64986, "tcp_stream": null, "udp_stream": 1021, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-c10dee41edc3bdb8cc945fe8", "kind": "dns", "frame_number": 78405, "timestamp_epoch": "1634917931.215402000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 61469, "dst_port": 53, "tcp_stream": null, "udp_stream": 1022, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-bc31272957b27d5f608b5b6c", "kind": "dns", "frame_number": 78406, "timestamp_epoch": "1634917931.215639000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61469, "tcp_stream": null, "udp_stream": 1022, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-1f22ba401f07efddd0126aad", "kind": "dns", "frame_number": 78477, "timestamp_epoch": "1634917947.652981000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63224, "dst_port": 53, "tcp_stream": null, "udp_stream": 1023, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-82c1836b3370698f4e2d53c3", "kind": "dns", "frame_number": 78478, "timestamp_epoch": "1634917947.653388000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63224, "tcp_stream": null, "udp_stream": 1023, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-82255aeb9d48ca81ec492384", "kind": "dns", "frame_number": 78479, "timestamp_epoch": "1634917947.653857000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62235, "dst_port": 53, "tcp_stream": null, "udp_stream": 1024, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-e06808ce7136a3613f786d2f", "kind": "dns", "frame_number": 78480, "timestamp_epoch": "1634917947.654090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62235, "tcp_stream": null, "udp_stream": 1024, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a819e3439bb5bb49559a4bbc", "kind": "dns", "frame_number": 78481, "timestamp_epoch": "1634917949.225810000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54180, "dst_port": 53, "tcp_stream": null, "udp_stream": 1025, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-f718e5a18e3d7a9c35c39d01", "kind": "dns", "frame_number": 78482, "timestamp_epoch": "1634917949.226193000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54180, "tcp_stream": null, "udp_stream": 1025, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-4f8cec30680380106e536f2b", "kind": "dns", "frame_number": 78483, "timestamp_epoch": "1634917949.226753000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 56796, "dst_port": 53, "tcp_stream": null, "udp_stream": 863, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-a23c23a7c78e3fdd96b0e675", "kind": "dns", "frame_number": 78484, "timestamp_epoch": "1634917949.226998000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 56796, "tcp_stream": null, "udp_stream": 863, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-ee4ebf68b629eebfaa4d8d75", "kind": "dns", "frame_number": 78500, "timestamp_epoch": "1634917954.938449000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53748, "dst_port": 53, "tcp_stream": null, "udp_stream": 1026, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-9f33ed787ea9398fc40cc36b", "kind": "dns", "frame_number": 78501, "timestamp_epoch": "1634917954.975773000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53748, "tcp_stream": null, "udp_stream": 1026, "fields": { "dns.a": "52.96.10.242,52.96.191.114,52.96.122.226,52.96.121.146", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-9643b8bb609686ec78c4dfe9", "kind": "dns", "frame_number": 78997, "timestamp_epoch": "1634918020.328674000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65232, "dst_port": 53, "tcp_stream": null, "udp_stream": 1027, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-029fb8398598ada13b19cc2f", "kind": "dns", "frame_number": 78998, "timestamp_epoch": "1634918020.366852000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65232, "tcp_stream": null, "udp_stream": 1027, "fields": { "dns.a": "52.96.121.162,52.96.103.34,52.96.103.18,52.96.55.242", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-ea57caeb38ca59c765d1b91c", "kind": "dns", "frame_number": 79141, "timestamp_epoch": "1634918051.080942000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 56394, "dst_port": 53, "tcp_stream": null, "udp_stream": 1028, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.yourwebsitemail.com", "dns.qry.type": "1" } }, { "event_id": "evt-94a5bb0c1c68fb82dd360cd3", "kind": "dns", "frame_number": 79143, "timestamp_epoch": "1634918051.168288000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 56394, "tcp_stream": null, "udp_stream": 1028, "fields": { "dns.a": "64.98.36.176", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.yourwebsitemail.com", "dns.qry.type": "1" } }, { "event_id": "evt-2a217eb7175a61aab56290e5", "kind": "dns", "frame_number": 79252, "timestamp_epoch": "1634918058.543458000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51651, "dst_port": 53, "tcp_stream": null, "udp_stream": 1029, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c8c62a76a579620550cefc0e", "kind": "dns", "frame_number": 79254, "timestamp_epoch": "1634918058.598533000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51651, "tcp_stream": null, "udp_stream": 1029, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2381bad8012c6a1148a43d24", "kind": "dns", "frame_number": 79282, "timestamp_epoch": "1634918060.709840000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57268, "dst_port": 53, "tcp_stream": null, "udp_stream": 1030, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-dda6657bffafc657b0e55028", "kind": "dns", "frame_number": 79283, "timestamp_epoch": "1634918060.763284000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57268, "tcp_stream": null, "udp_stream": 1030, "fields": { "dns.a": "204.79.197.200,13.107.21.200", "dns.cname": "a-0001.a-afdentry.net.trafficmanager.net,www-bing-com.dual-a-0001.a-msedge.net,dual-a-0001.a-msedge.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.bing.com", "dns.qry.type": "1" } }, { "event_id": "evt-4ee89a55e4c35bc9b0b04c96", "kind": "dns", "frame_number": 79843, "timestamp_epoch": "1634918062.917019000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61876, "dst_port": 53, "tcp_stream": null, "udp_stream": 1031, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-c7431ba34a3541acb14d0de2", "kind": "dns", "frame_number": 79844, "timestamp_epoch": "1634918062.978290000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61876, "tcp_stream": null, "udp_stream": 1031, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-ab8caf3806013944f2615f96", "kind": "dns", "frame_number": 80412, "timestamp_epoch": "1634918065.765731000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59902, "dst_port": 53, "tcp_stream": null, "udp_stream": 1032, "fields": { "dns.flags.response": "False", "dns.qry.name": "slickdeals.net", "dns.qry.type": "1" } }, { "event_id": "evt-1161110cc41e111aee80c9f6", "kind": "dns", "frame_number": 80413, "timestamp_epoch": "1634918065.817559000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 59902, "dst_port": 53, "tcp_stream": null, "udp_stream": 1032, "fields": { "dns.flags.response": "False", "dns.qry.name": "slickdeals.net", "dns.qry.type": "1" } }, { "event_id": "evt-8b24db46f2d31f103a6e1609", "kind": "dns", "frame_number": 80414, "timestamp_epoch": "1634918065.853495000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 59902, "tcp_stream": null, "udp_stream": 1032, "fields": { "dns.a": "23.222.241.43,23.222.241.55", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "slickdeals.net", "dns.qry.type": "1" } }, { "event_id": "evt-624ac4e057dc41ad8fb81215", "kind": "dns", "frame_number": 80437, "timestamp_epoch": "1634918066.174480000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49914, "dst_port": 53, "tcp_stream": null, "udp_stream": 1033, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.kqzyfj.com", "dns.qry.type": "1" } }, { "event_id": "evt-9c50c0cd1153493ac214781e", "kind": "dns", "frame_number": 80438, "timestamp_epoch": "1634918066.239575000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49914, "dst_port": 53, "tcp_stream": null, "udp_stream": 1033, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.kqzyfj.com", "dns.qry.type": "1" } }, { "event_id": "evt-1c69a8b5a8bc3b5385aad975", "kind": "dns", "frame_number": 80439, "timestamp_epoch": "1634918066.250031000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 49914, "tcp_stream": null, "udp_stream": 1033, "fields": { "dns.a": "159.127.40.144", "dns.cname": "track.cj.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.kqzyfj.com", "dns.qry.type": "1" } }, { "event_id": "evt-4af3f57d2dc00d1ba6399eb8", "kind": "dns", "frame_number": 80449, "timestamp_epoch": "1634918066.427700000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61063, "dst_port": 53, "tcp_stream": null, "udp_stream": 1034, "fields": { "dns.flags.response": "False", "dns.qry.name": "cj.dotomi.com", "dns.qry.type": "1" } }, { "event_id": "evt-5fb765d4a3716ddfd978f2db", "kind": "dns", "frame_number": 80450, "timestamp_epoch": "1634918066.487552000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 61063, "dst_port": 53, "tcp_stream": null, "udp_stream": 1034, "fields": { "dns.flags.response": "False", "dns.qry.name": "cj.dotomi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d7be101ba1991e710b6e8df2", "kind": "dns", "frame_number": 80451, "timestamp_epoch": "1634918066.495120000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 61063, "tcp_stream": null, "udp_stream": 1034, "fields": { "dns.a": "159.127.40.144", "dns.cname": "track.cj.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "cj.dotomi.com", "dns.qry.type": "1" } }, { "event_id": "evt-ca546d9f389e34157dc18c47", "kind": "dns", "frame_number": 80477, "timestamp_epoch": "1634918066.829689000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65125, "dst_port": 53, "tcp_stream": null, "udp_stream": 1035, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.emjcd.com", "dns.qry.type": "1" } }, { "event_id": "evt-ec26a460568f7ebd99170f54", "kind": "dns", "frame_number": 80480, "timestamp_epoch": "1634918066.879752000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65125, "dst_port": 53, "tcp_stream": null, "udp_stream": 1035, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.emjcd.com", "dns.qry.type": "1" } }, { "event_id": "evt-7af94384de92197c1415eefe", "kind": "dns", "frame_number": 80481, "timestamp_epoch": "1634918066.882943000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 65125, "tcp_stream": null, "udp_stream": 1035, "fields": { "dns.a": "159.127.40.144", "dns.cname": "track.cj.akadns.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.emjcd.com", "dns.qry.type": "1" } }, { "event_id": "evt-71f47777dc88dc09c6de7cce", "kind": "dns", "frame_number": 80505, "timestamp_epoch": "1634918067.205406000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64333, "dst_port": 53, "tcp_stream": null, "udp_stream": 1036, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.dellrefurbished.com", "dns.qry.type": "1" } }, { "event_id": "evt-74ea28c551fc9976b7b2e277", "kind": "dns", "frame_number": 80506, "timestamp_epoch": "1634918067.254176000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 64333, "dst_port": 53, "tcp_stream": null, "udp_stream": 1036, "fields": { "dns.flags.response": "False", "dns.qry.name": "www.dellrefurbished.com", "dns.qry.type": "1" } }, { "event_id": "evt-9c7d9590c7eb192b385ef6af", "kind": "dns", "frame_number": 80507, "timestamp_epoch": "1634918067.292194000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56537, "dst_port": 53, "tcp_stream": null, "udp_stream": 1037, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d8f4e5c61961fdf00f3ae3a7", "kind": "dns", "frame_number": 80508, "timestamp_epoch": "1634918067.295588000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 64333, "tcp_stream": null, "udp_stream": 1036, "fields": { "dns.a": "34.120.119.232", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "www.dellrefurbished.com", "dns.qry.type": "1" } }, { "event_id": "evt-95eb375f051f696036df0a78", "kind": "dns", "frame_number": 80514, "timestamp_epoch": "1634918067.346709000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56537, "tcp_stream": null, "udp_stream": 1037, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-8654920d2e762d53a3988192", "kind": "dns", "frame_number": 80686, "timestamp_epoch": "1634918076.913428000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54991, "dst_port": 53, "tcp_stream": null, "udp_stream": 1038, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.suddenlink.net", "dns.qry.type": "1" } }, { "event_id": "evt-c010d53108220962182e9b40", "kind": "dns", "frame_number": 80688, "timestamp_epoch": "1634918076.969050000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54991, "tcp_stream": null, "udp_stream": 1038, "fields": { "dns.a": "208.180.40.68", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.suddenlink.net", "dns.qry.type": "1" } }, { "event_id": "evt-871bd2e4b78457494000c634", "kind": "dns", "frame_number": 80773, "timestamp_epoch": "1634918084.716787000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 60943, "dst_port": 53, "tcp_stream": null, "udp_stream": 1039, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e7a0ce3a6b2e267eb12d0b9a", "kind": "dns", "frame_number": 80774, "timestamp_epoch": "1634918084.775897000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 60943, "tcp_stream": null, "udp_stream": 1039, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-867216daf9565b08512523d6", "kind": "dns", "frame_number": 80781, "timestamp_epoch": "1634918089.091168000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56617, "dst_port": 53, "tcp_stream": null, "udp_stream": 1040, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5f7f769258794e892530f831", "kind": "dns", "frame_number": 80782, "timestamp_epoch": "1634918089.147253000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56617, "tcp_stream": null, "udp_stream": 1040, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-e565deb2e60e719168eceb67", "kind": "dns", "frame_number": 80817, "timestamp_epoch": "1634918093.465267000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52427, "dst_port": 53, "tcp_stream": null, "udp_stream": 1041, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d27cb37cff688001db066390", "kind": "dns", "frame_number": 80819, "timestamp_epoch": "1634918093.529402000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52427, "tcp_stream": null, "udp_stream": 1041, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-4379ac1e2530876df03092e7", "kind": "dns", "frame_number": 80852, "timestamp_epoch": "1634918110.905062000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 61600, "dst_port": 53, "tcp_stream": null, "udp_stream": 1042, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-7c8a6867026a00e36911b95c", "kind": "dns", "frame_number": 80853, "timestamp_epoch": "1634918110.981223000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61600, "tcp_stream": null, "udp_stream": 1042, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-79022187785c426eab7ba0f2", "kind": "dns", "frame_number": 80874, "timestamp_epoch": "1634918112.276282000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61702, "dst_port": 53, "tcp_stream": null, "udp_stream": 1043, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.abchk.net", "dns.qry.type": "1" } }, { "event_id": "evt-1af21b25810f5864d0e8a248", "kind": "dns", "frame_number": 80882, "timestamp_epoch": "1634918112.371714000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61702, "dst_port": 53, "tcp_stream": null, "udp_stream": 1043, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.abchk.net", "dns.qry.type": "1" } }, { "event_id": "evt-3c9e4bcfd7ee774b74562681", "kind": "dns", "frame_number": 80885, "timestamp_epoch": "1634918112.495866000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61702, "tcp_stream": null, "udp_stream": 1043, "fields": { "dns.a": "223.29.248.111", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.abchk.net", "dns.qry.type": "1" } }, { "event_id": "evt-2fb84e1de804f1d71dfefbcf", "kind": "dns", "frame_number": 80929, "timestamp_epoch": "1634918115.309563000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 51466, "dst_port": 53, "tcp_stream": null, "udp_stream": 1044, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-d3f56c222f0d6d7f021ab0d3", "kind": "dns", "frame_number": 80930, "timestamp_epoch": "1634918115.362681000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 51466, "tcp_stream": null, "udp_stream": 1044, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-711a5ef038d33df52902b73a", "kind": "dns", "frame_number": 80981, "timestamp_epoch": "1634918119.655140000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 49645, "dst_port": 53, "tcp_stream": null, "udp_stream": 1045, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5ea1977417450179b2f4683a", "kind": "dns", "frame_number": 80982, "timestamp_epoch": "1634918119.708387000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 49645, "tcp_stream": null, "udp_stream": 1045, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-bbfd6ab9f4738fd93a33c35e", "kind": "dns", "frame_number": 81040, "timestamp_epoch": "1634918137.012996000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 65319, "dst_port": 53, "tcp_stream": null, "udp_stream": 1046, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-12301dc5c82d9c6af238353b", "kind": "dns", "frame_number": 81041, "timestamp_epoch": "1634918137.074709000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 65319, "tcp_stream": null, "udp_stream": 1046, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-3d5b771ff91e89f985c15fc1", "kind": "dns", "frame_number": 81048, "timestamp_epoch": "1634918141.388581000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 52115, "dst_port": 53, "tcp_stream": null, "udp_stream": 1047, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-24dec8be664057be3441564b", "kind": "dns", "frame_number": 81049, "timestamp_epoch": "1634918141.449891000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 52115, "tcp_stream": null, "udp_stream": 1047, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-0add15ab991b7d4d1da0deef", "kind": "dns", "frame_number": 81066, "timestamp_epoch": "1634918143.858014000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 62779, "dst_port": 53, "tcp_stream": null, "udp_stream": 1048, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-4d5e80ba287fb401fe530344", "kind": "dns", "frame_number": 81067, "timestamp_epoch": "1634918143.898692000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 62779, "tcp_stream": null, "udp_stream": 1048, "fields": { "dns.a": "52.96.57.82,52.96.122.98,52.96.121.146,52.96.103.34", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-683a8e8ea16e78d9378e585f", "kind": "dns", "frame_number": 81369, "timestamp_epoch": "1634918206.810516000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58152, "dst_port": 53, "tcp_stream": null, "udp_stream": 1049, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.tiretracksusa.com", "dns.qry.type": "1" } }, { "event_id": "evt-86e178d864204efb9bbdc4d8", "kind": "dns", "frame_number": 81371, "timestamp_epoch": "1634918206.876873000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58152, "tcp_stream": null, "udp_stream": 1049, "fields": { "dns.a": "50.77.156.245", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.tiretracksusa.com", "dns.qry.type": "1" } }, { "event_id": "evt-177ad3db04f20412b37d0b18", "kind": "dns", "frame_number": 81411, "timestamp_epoch": "1634918235.081162000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60202, "dst_port": 53, "tcp_stream": null, "udp_stream": 1050, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-d66c80d2398937feca43c5f6", "kind": "dns", "frame_number": 81412, "timestamp_epoch": "1634918235.186321000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 60202, "dst_port": 53, "tcp_stream": null, "udp_stream": 1050, "fields": { "dns.flags.response": "False", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-3640abca6ef2634868026752", "kind": "dns", "frame_number": 81413, "timestamp_epoch": "1634918235.239591000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 60202, "tcp_stream": null, "udp_stream": 1050, "fields": { "dns.a": "131.107.255.255", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "dns.msftncsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-84bc864cbd10a9ccaf030a66", "kind": "dns", "frame_number": 81445, "timestamp_epoch": "1634918255.119250000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49329, "dst_port": 53, "tcp_stream": null, "udp_stream": 1051, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8b377c722bce8e006387239f", "kind": "dns", "frame_number": 81446, "timestamp_epoch": "1634918255.159839000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49329, "tcp_stream": null, "udp_stream": 1051, "fields": { "dns.a": "40.97.199.114,52.96.121.162,52.96.57.34,52.96.22.2", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-37dbe2faaef6aff61ab242df", "kind": "dns", "frame_number": 81548, "timestamp_epoch": "1634918268.680350000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53214, "dst_port": 53, "tcp_stream": null, "udp_stream": 1052, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-90482ec902246ab817e332dc", "kind": "dns", "frame_number": 81550, "timestamp_epoch": "1634918268.785263000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53214, "dst_port": 53, "tcp_stream": null, "udp_stream": 1052, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-35d4d87a6af32dd6df76d177", "kind": "dns", "frame_number": 81551, "timestamp_epoch": "1634918268.842171000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53214, "tcp_stream": null, "udp_stream": 1052, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.brins-d-eveil.fr", "dns.qry.type": "1" } }, { "event_id": "evt-3b65f2004dcffa82b596f406", "kind": "dns", "frame_number": 81784, "timestamp_epoch": "1634918299.075994000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65310, "dst_port": 53, "tcp_stream": null, "udp_stream": 1053, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-9b11ff45ce930acc3812d13c", "kind": "dns", "frame_number": 81786, "timestamp_epoch": "1634918299.158717000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65310, "tcp_stream": null, "udp_stream": 1053, "fields": { "dns.a": "52.96.57.2,52.96.121.210,40.97.212.18,40.97.120.194", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-02226a90ed363045239b1b04", "kind": "dns", "frame_number": 82053, "timestamp_epoch": "1634918327.622647000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57250, "dst_port": 53, "tcp_stream": null, "udp_stream": 604, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-a2c87181ec889bf052156b82", "kind": "dns", "frame_number": 82055, "timestamp_epoch": "1634918327.681047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57250, "tcp_stream": null, "udp_stream": 604, "fields": { "dns.a": "52.96.121.194,52.96.121.130,40.97.120.130,52.96.55.242", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-ebd9a7fc0874c6c196ea3012", "kind": "dns", "frame_number": 82153, "timestamp_epoch": "1634918337.989056000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 53878, "dst_port": 53, "tcp_stream": null, "udp_stream": 1054, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8511557bf3d7a714936797b7", "kind": "dns", "frame_number": 82154, "timestamp_epoch": "1634918338.028376000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 53878, "tcp_stream": null, "udp_stream": 1054, "fields": { "dns.a": "52.96.191.98,40.97.120.178,52.96.90.18,40.97.121.18", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-cc326536e9cb5408a3f52a39", "kind": "dns", "frame_number": 82247, "timestamp_epoch": "1634918343.030324000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55138, "dst_port": 53, "tcp_stream": null, "udp_stream": 1055, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-8d14e31cd5c1fb050c3df5a3", "kind": "dns", "frame_number": 82249, "timestamp_epoch": "1634918343.134350000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 55138, "dst_port": 53, "tcp_stream": null, "udp_stream": 1055, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-46e00347c37b79649f9c5ca6", "kind": "dns", "frame_number": 82250, "timestamp_epoch": "1634918343.212380000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 55138, "tcp_stream": null, "udp_stream": 1055, "fields": { "dns.a": "52.96.122.226,52.96.90.18,52.96.91.66,52.96.121.162", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-e6528e2230e09e1d7aaaa788", "kind": "dns", "frame_number": 82397, "timestamp_epoch": "1634918357.567053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58153, "dst_port": 53, "tcp_stream": null, "udp_stream": 1056, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-e17b933247e380b7edb0ad5d", "kind": "dns", "frame_number": 82399, "timestamp_epoch": "1634918357.613079000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58153, "tcp_stream": null, "udp_stream": 1056, "fields": { "dns.a": "52.96.103.18,40.97.120.50,52.96.10.242,52.96.121.146", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-70214fb83f68f0e9f32f0aa6", "kind": "dns", "frame_number": 82534, "timestamp_epoch": "1634918375.162553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54847, "dst_port": 53, "tcp_stream": null, "udp_stream": 1057, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-f5f2c799df4bf28564cfac4b", "kind": "dns", "frame_number": 82536, "timestamp_epoch": "1634918375.217778000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54847, "tcp_stream": null, "udp_stream": 1057, "fields": { "dns.a": "52.96.91.66,40.97.120.66,52.96.121.114,40.97.199.114", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-a0146f0cd3198b3f238bdc1a", "kind": "dns", "frame_number": 82647, "timestamp_epoch": "1634918382.745958000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57063, "dst_port": 53, "tcp_stream": null, "udp_stream": 1058, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-9faad92b071334d6d7fb151a", "kind": "dns", "frame_number": 82649, "timestamp_epoch": "1634918382.817371000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57063, "tcp_stream": null, "udp_stream": 1058, "fields": { "dns.a": "52.96.90.18,40.97.121.2,52.96.91.66,52.96.191.114", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-6bed350d5e82c14a15c99994", "kind": "dns", "frame_number": 82776, "timestamp_epoch": "1634918395.715644000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65161, "dst_port": 53, "tcp_stream": null, "udp_stream": 1059, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.forpsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-af4299bd71126a4c6fdc6059", "kind": "dns", "frame_number": 82778, "timestamp_epoch": "1634918395.808157000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65161, "dst_port": 53, "tcp_stream": null, "udp_stream": 1059, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.forpsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-ba7703a6d526568a76749caf", "kind": "dns", "frame_number": 82781, "timestamp_epoch": "1634918396.035657000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65161, "tcp_stream": null, "udp_stream": 1059, "fields": { "dns.a": "81.2.195.204", "dns.cname": "smtpa.forpsi.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.forpsi.com", "dns.qry.type": "1" } }, { "event_id": "evt-65578e790041082baaff6bbb", "kind": "dns", "frame_number": 82936, "timestamp_epoch": "1634918417.753855000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58188, "dst_port": 53, "tcp_stream": null, "udp_stream": 1060, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.be-daventure.fr", "dns.qry.type": "1" } }, { "event_id": "evt-d62613a2e6fbd2a651ef6036", "kind": "dns", "frame_number": 82938, "timestamp_epoch": "1634918417.839174000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 58188, "dst_port": 53, "tcp_stream": null, "udp_stream": 1060, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.be-daventure.fr", "dns.qry.type": "1" } }, { "event_id": "evt-a9ff4cf65c471d11a55c76b5", "kind": "dns", "frame_number": 82939, "timestamp_epoch": "1634918418.059868000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 58188, "tcp_stream": null, "udp_stream": 1060, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.be-daventure.fr", "dns.qry.type": "1" } }, { "event_id": "evt-8cb598684200c9af12e9f367", "kind": "dns", "frame_number": 82993, "timestamp_epoch": "1634918422.574642000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64221, "dst_port": 53, "tcp_stream": null, "udp_stream": 1061, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.doctor-healthcare.com", "dns.qry.type": "1" } }, { "event_id": "evt-48e2b1f87f3ecdbec0ea7147", "kind": "dns", "frame_number": 82995, "timestamp_epoch": "1634918422.681019000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 64221, "dst_port": 53, "tcp_stream": null, "udp_stream": 1061, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.doctor-healthcare.com", "dns.qry.type": "1" } }, { "event_id": "evt-c32a508658e2dbc659af1cd8", "kind": "dns", "frame_number": 82998, "timestamp_epoch": "1634918422.878020000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 64221, "tcp_stream": null, "udp_stream": 1061, "fields": { "dns.a": "111.223.52.28", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.doctor-healthcare.com", "dns.qry.type": "1" } }, { "event_id": "evt-69df07e5e4361300fd0ab763", "kind": "dns", "frame_number": 83016, "timestamp_epoch": "1634918423.328802000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63473, "dst_port": 53, "tcp_stream": null, "udp_stream": 1062, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.verificalitas.es", "dns.qry.type": "1" } }, { "event_id": "evt-ffb232f4aec2b0c601110f0a", "kind": "dns", "frame_number": 83018, "timestamp_epoch": "1634918423.432816000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 63473, "dst_port": 53, "tcp_stream": null, "udp_stream": 1062, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.verificalitas.es", "dns.qry.type": "1" } }, { "event_id": "evt-0d40adcc074d1e8d3ae75ef0", "kind": "dns", "frame_number": 83021, "timestamp_epoch": "1634918423.640951000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 63473, "tcp_stream": null, "udp_stream": 1062, "fields": { "dns.a": "82.98.154.100", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.verificalitas.es", "dns.qry.type": "1" } }, { "event_id": "evt-18c7ae08000e4bc86d6f51dd", "kind": "dns", "frame_number": 83305, "timestamp_epoch": "1634918451.277359000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 61910, "dst_port": 53, "tcp_stream": null, "udp_stream": 1063, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-904b5bfdfd9020faf85e2b96", "kind": "dns", "frame_number": 83306, "timestamp_epoch": "1634918451.277724000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 61910, "tcp_stream": null, "udp_stream": 1063, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-NZ875R4.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-b4332ac6bc5a3e07b0d62ca6", "kind": "dns", "frame_number": 83310, "timestamp_epoch": "1634918451.279871000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59302, "dst_port": 53, "tcp_stream": null, "udp_stream": 1065, "fields": { "dns.a": "10.10.22.157", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-fb8320c287c0bab520911d99", "kind": "dns", "frame_number": 83311, "timestamp_epoch": "1634918451.280595000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59302, "tcp_stream": null, "udp_stream": 1065, "fields": { "dns.a": "10.10.22.157", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-9f1c41307caff0aba650b3ef", "kind": "dns", "frame_number": 83360, "timestamp_epoch": "1634918459.346607000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65102, "dst_port": 53, "tcp_stream": null, "udp_stream": 1066, "fields": { "dns.flags.response": "False", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-c0dad0c67e44cb75731a5a51", "kind": "dns", "frame_number": 83362, "timestamp_epoch": "1634918459.449870000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 65102, "dst_port": 53, "tcp_stream": null, "udp_stream": 1066, "fields": { "dns.flags.response": "False", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-4f1f9472fcb4540c62ed0396", "kind": "dns", "frame_number": 83363, "timestamp_epoch": "1634918459.527553000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 65102, "tcp_stream": null, "udp_stream": 1066, "fields": { "dns.a": "197.97.195.226", "dns.cname": "vmail.dial-up.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "av.dial-up.net", "dns.qry.type": "1" } }, { "event_id": "evt-acdcfaaa88cbbd8688c7b8d5", "kind": "dns", "frame_number": 83417, "timestamp_epoch": "1634918468.026099000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59853, "dst_port": 53, "tcp_stream": null, "udp_stream": 1067, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ma-communication.com", "dns.qry.type": "1" } }, { "event_id": "evt-73ef285327b392aa58581583", "kind": "dns", "frame_number": 83419, "timestamp_epoch": "1634918468.121070000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 59853, "dst_port": 53, "tcp_stream": null, "udp_stream": 1067, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.ma-communication.com", "dns.qry.type": "1" } }, { "event_id": "evt-5442376655c8d72a8d0bc420", "kind": "dns", "frame_number": 83422, "timestamp_epoch": "1634918468.197715000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 59853, "tcp_stream": null, "udp_stream": 1067, "fields": { "dns.a": "193.70.18.144", "dns.cname": "ns0.ovh.net", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.ma-communication.com", "dns.qry.type": "1" } }, { "event_id": "evt-c79f6dd67ec9f9846619bf55", "kind": "dns", "frame_number": 83577, "timestamp_epoch": "1634918477.216323000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 55164, "dst_port": 53, "tcp_stream": null, "udp_stream": 1068, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-2dfb00f65b428bcffb5dbc61", "kind": "dns", "frame_number": 83578, "timestamp_epoch": "1634918477.279586000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 55164, "tcp_stream": null, "udp_stream": 1068, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6024276f259dba407d0705b0", "kind": "dns", "frame_number": 83735, "timestamp_epoch": "1634918494.545347000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 50013, "dst_port": 53, "tcp_stream": null, "udp_stream": 1069, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-6d3dbdc728ae35bf60888e02", "kind": "dns", "frame_number": 83739, "timestamp_epoch": "1634918494.601647000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50013, "tcp_stream": null, "udp_stream": 1069, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-5f18f7f88062849dce6c7c2c", "kind": "dns", "frame_number": 83751, "timestamp_epoch": "1634918498.920852000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 56154, "dst_port": 53, "tcp_stream": null, "udp_stream": 1070, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-91a5f115622fed567b4a8e7e", "kind": "dns", "frame_number": 83752, "timestamp_epoch": "1634918498.990116000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 56154, "tcp_stream": null, "udp_stream": 1070, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-df18a2711b001b18ffb90846", "kind": "dns", "frame_number": 83764, "timestamp_epoch": "1634918503.281923000", "src_ip": "10.10.22.157", "dst_ip": "8.8.8.8", "src_port": 62086, "dst_port": 53, "tcp_stream": null, "udp_stream": 1071, "fields": { "dns.flags.response": "False", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-93f4d0a8dc176d8e1a4b4dae", "kind": "dns", "frame_number": 83765, "timestamp_epoch": "1634918503.387693000", "src_ip": "8.8.8.8", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 62086, "tcp_stream": null, "udp_stream": 1071, "fields": { "dns.a": "37.0.10.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "kamuchehddhgfgf.ddns.net", "dns.qry.type": "1" } }, { "event_id": "evt-96a584df7ead307ab4118bf5", "kind": "dns", "frame_number": 83827, "timestamp_epoch": "1634918511.967510000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57673, "dst_port": 53, "tcp_stream": null, "udp_stream": 1072, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-128b5b4655fab0f073ee4f9d", "kind": "dns", "frame_number": 83828, "timestamp_epoch": "1634918511.967816000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57673, "tcp_stream": null, "udp_stream": 1072, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-CFA3367.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-e9e5c6a2aaee1973540b0553", "kind": "dns", "frame_number": 83834, "timestamp_epoch": "1634918511.970888000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54166, "dst_port": 53, "tcp_stream": null, "udp_stream": 1074, "fields": { "dns.a": "10.10.22.156", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-06ee24125246d2ffcd4870f6", "kind": "dns", "frame_number": 83836, "timestamp_epoch": "1634918511.971977000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54166, "tcp_stream": null, "udp_stream": 1074, "fields": { "dns.a": "10.10.22.156", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-095bc4d01ef8127249d93dfb", "kind": "dns", "frame_number": 83957, "timestamp_epoch": "1634918522.601973000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49883, "dst_port": 53, "tcp_stream": null, "udp_stream": 1075, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.juno.com", "dns.qry.type": "1" } }, { "event_id": "evt-0af39645c1f0ee71a158182f", "kind": "dns", "frame_number": 83958, "timestamp_epoch": "1634918522.646651000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 49883, "tcp_stream": null, "udp_stream": 1075, "fields": { "dns.a": "64.136.52.45,64.136.44.45", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.juno.com", "dns.qry.type": "1" } }, { "event_id": "evt-2b5027e9cc54dba4438eba63", "kind": "dns", "frame_number": 84051, "timestamp_epoch": "1634918531.252694000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 50038, "dst_port": 53, "tcp_stream": null, "udp_stream": 1076, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-ada84d9a899b3c66ff7feeb5", "kind": "dns", "frame_number": 84052, "timestamp_epoch": "1634918531.253039000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 50038, "tcp_stream": null, "udp_stream": 1076, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-e9b85a17cdd13ce911107c32", "kind": "dns", "frame_number": 84053, "timestamp_epoch": "1634918531.253516000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 59614, "dst_port": 53, "tcp_stream": null, "udp_stream": 1077, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d3c5216c810bee44c0285baa", "kind": "dns", "frame_number": 84054, "timestamp_epoch": "1634918531.328141000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 53, "dst_port": 59614, "tcp_stream": null, "udp_stream": 1077, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-4591bf8af3190bd6729c6537", "kind": "dns", "frame_number": 84064, "timestamp_epoch": "1634918543.664285000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 57786, "dst_port": 53, "tcp_stream": null, "udp_stream": 1078, "fields": { "dns.flags.response": "False", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-9d8729af5b5eb895f9d35d9c", "kind": "dns", "frame_number": 84066, "timestamp_epoch": "1634918543.664706000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 57786, "tcp_stream": null, "udp_stream": 1078, "fields": { "dns.a": "10.10.22.22", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "DESKTOP-87WCE26.enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-33cb011ab8be181a548a414b", "kind": "dns", "frame_number": 84068, "timestamp_epoch": "1634918543.666253000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 51117, "dst_port": 53, "tcp_stream": null, "udp_stream": 1079, "fields": { "dns.a": "10.10.22.158", "dns.flags.response": "False", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-1f9abeb1e2c08f95d7f23bc5", "kind": "dns", "frame_number": 84072, "timestamp_epoch": "1634918543.667247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 51117, "tcp_stream": null, "udp_stream": 1079, "fields": { "dns.a": "10.10.22.158", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "enemywatch.net", "dns.qry.type": "6" } }, { "event_id": "evt-6ac727c2786b4dbd69ac2df3", "kind": "dns", "frame_number": 84126, "timestamp_epoch": "1634918547.689794000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 54536, "dst_port": 53, "tcp_stream": null, "udp_stream": 1081, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1630a07a69b309ce39e842ed", "kind": "dns", "frame_number": 84127, "timestamp_epoch": "1634918547.690116000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 54536, "tcp_stream": null, "udp_stream": 1081, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-7ce766c02603e433e72be80b", "kind": "dns", "frame_number": 84128, "timestamp_epoch": "1634918547.690546000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 57125, "dst_port": 53, "tcp_stream": null, "udp_stream": 1082, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-d2233fcddf2f573fc8e3e2ba", "kind": "dns", "frame_number": 84129, "timestamp_epoch": "1634918547.690773000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 57125, "tcp_stream": null, "udp_stream": 1082, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-6e296906d3b82da0679c3b9c", "kind": "dns", "frame_number": 84137, "timestamp_epoch": "1634918548.491385000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 52660, "dst_port": 53, "tcp_stream": null, "udp_stream": 1083, "fields": { "dns.flags.response": "False", "dns.qry.name": "mail.otenet.gr", "dns.qry.type": "1" } }, { "event_id": "evt-9cc918b23562db5c35640ca1", "kind": "dns", "frame_number": 84140, "timestamp_epoch": "1634918548.529465000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 52660, "tcp_stream": null, "udp_stream": 1083, "fields": { "dns.a": "62.103.147.201", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "mail.otenet.gr", "dns.qry.type": "1" } }, { "event_id": "evt-c12cf44851b57829b94ac34a", "kind": "dns", "frame_number": 84147, "timestamp_epoch": "1634918549.277602000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 54326, "dst_port": 53, "tcp_stream": null, "udp_stream": 1084, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-1633fd92c344d1c89cff9a5a", "kind": "dns", "frame_number": 84148, "timestamp_epoch": "1634918549.277947000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 54326, "tcp_stream": null, "udp_stream": 1084, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.enemywatch.net", "dns.qry.type": "1" } }, { "event_id": "evt-9b9e2e09e7bac1c2be2cdf10", "kind": "dns", "frame_number": 84149, "timestamp_epoch": "1634918549.278484000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 65187, "dst_port": 53, "tcp_stream": null, "udp_stream": 1085, "fields": { "dns.flags.response": "False", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-2cf97553a822590247ae8406", "kind": "dns", "frame_number": 84150, "timestamp_epoch": "1634918549.278737000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 53, "dst_port": 65187, "tcp_stream": null, "udp_stream": 1085, "fields": { "dns.flags.rcode": "3", "dns.flags.response": "True", "dns.qry.name": "wpad.localdomain", "dns.qry.type": "1" } }, { "event_id": "evt-5630bad12002978578149a1a", "kind": "dns", "frame_number": 84239, "timestamp_epoch": "1634918554.991350000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61111, "dst_port": 53, "tcp_stream": null, "udp_stream": 1086, "fields": { "dns.flags.response": "False", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-2f519ec66e961483e9d3c405", "kind": "dns", "frame_number": 84241, "timestamp_epoch": "1634918555.091802000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61111, "dst_port": 53, "tcp_stream": null, "udp_stream": 1086, "fields": { "dns.flags.response": "False", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-14934a04a56d949b4879fbcd", "kind": "dns", "frame_number": 84245, "timestamp_epoch": "1634918556.108602000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61111, "dst_port": 53, "tcp_stream": null, "udp_stream": 1086, "fields": { "dns.flags.response": "False", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-96ca1255b93d6a0b401b1dba", "kind": "dns", "frame_number": 84246, "timestamp_epoch": "1634918556.203293000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61111, "tcp_stream": null, "udp_stream": 1086, "fields": { "dns.a": "123.58.177.213,123.58.177.214,123.58.177.220", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "yeahmx01.mxmail.netease.com", "dns.qry.type": "1" } }, { "event_id": "evt-59cab4a9c777758af0c8b025", "kind": "dns", "frame_number": 84425, "timestamp_epoch": "1634918586.379793000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 61955, "dst_port": 53, "tcp_stream": null, "udp_stream": 1087, "fields": { "dns.flags.response": "False", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } }, { "event_id": "evt-b7166c2ac7692faacce21e35", "kind": "dns", "frame_number": 84427, "timestamp_epoch": "1634918586.460066000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 53, "dst_port": 61955, "tcp_stream": null, "udp_stream": 1087, "fields": { "dns.a": "40.97.212.2,52.96.122.98,52.96.121.114,52.96.8.130", "dns.cname": "outlook.office365.com,outlook.ms-acdc.office.com,SAT-efz.ms-acdc.office.com", "dns.flags.rcode": "0", "dns.flags.response": "True", "dns.qry.name": "smtp.outlook.com", "dns.qry.type": "1" } } ], "http_request": [ { "event_id": "evt-442cc104684d47e334f741b8", "kind": "http_request", "frame_number": 1387, "timestamp_epoch": "1634913117.132050000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8c59840a06d328f663512c01", "kind": "http_request", "frame_number": 1388, "timestamp_epoch": "1634913117.150434000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-d8d06d90d9f5237d0bb989d2", "kind": "http_request", "frame_number": 1406, "timestamp_epoch": "1634913117.376079000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-1075e0ebc758e7ab38563f7a", "kind": "http_request", "frame_number": 1407, "timestamp_epoch": "1634913117.424672000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-6167c6a4c979963b51b9b1e0", "kind": "http_request", "frame_number": 1422, "timestamp_epoch": "1634913117.542247000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-bec3a35ab782bd9fdd7ceed3", "kind": "http_request", "frame_number": 1508, "timestamp_epoch": "1634913120.141815000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8edca39ac3fe8929b7932278", "kind": "http_request", "frame_number": 1509, "timestamp_epoch": "1634913120.142125000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-e3ef5047fb621db8b8c33dac", "kind": "http_request", "frame_number": 1512, "timestamp_epoch": "1634913120.424227000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-92d0c9412690c0a8cd1ef07e", "kind": "http_request", "frame_number": 1513, "timestamp_epoch": "1634913120.454306000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-d2568bacc716579d585868e8", "kind": "http_request", "frame_number": 1514, "timestamp_epoch": "1634913120.533908000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-52e3d4572b0a31dd76833049", "kind": "http_request", "frame_number": 1519, "timestamp_epoch": "1634913123.142501000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-ad8b9737e45185ad642d2294", "kind": "http_request", "frame_number": 1520, "timestamp_epoch": "1634913123.142903000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-c74c981f0bf6a92c9c11d6d0", "kind": "http_request", "frame_number": 1521, "timestamp_epoch": "1634913123.537260000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-2eb4a841c47fe266cbaf777a", "kind": "http_request", "frame_number": 1636, "timestamp_epoch": "1634913126.538098000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-5f7ccf279e276aae766fad33", "kind": "http_request", "frame_number": 1637, "timestamp_epoch": "1634913129.548547000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-a6451831621d67c7b6682641", "kind": "http_request", "frame_number": 1646, "timestamp_epoch": "1634913132.548982000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-67eede7c1025cef37db6ad6a", "kind": "http_request", "frame_number": 5034, "timestamp_epoch": "1634913245.508732000", "src_ip": "10.10.22.156", "dst_ip": "8.253.156.120", "src_port": 49748, "dst_port": 80, "tcp_stream": 213, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?84945a395c830399", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?84945a395c830399", "http.response_in": "5107", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-a07cca80baa9f6f869b17696", "kind": "http_request", "frame_number": 5109, "timestamp_epoch": "1634913245.625982000", "src_ip": "10.10.22.156", "dst_ip": "8.253.156.120", "src_port": 49748, "dst_port": 80, "tcp_stream": 213, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?29290d2fe073e937", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/authrootstl.cab?29290d2fe073e937", "http.response_in": "5114", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-886de3c092bdfb611989c62d", "kind": "http_request", "frame_number": 5115, "timestamp_epoch": "1634913245.711787000", "src_ip": "10.10.22.156", "dst_ip": "8.253.156.120", "src_port": 49748, "dst_port": 80, "tcp_stream": 213, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?f57f77bab08ee07e", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?f57f77bab08ee07e", "http.response_in": "5125", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-1ba551a25b9a356db2b14e9e", "kind": "http_request", "frame_number": 5393, "timestamp_epoch": "1634913273.971119000", "src_ip": "10.10.22.157", "dst_ip": "8.249.245.254", "src_port": 49741, "dst_port": 80, "tcp_stream": 227, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?069916a09ccd9a98", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?069916a09ccd9a98", "http.response_in": "5395", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-e2e9fe8d1425be5d8fe44501", "kind": "http_request", "frame_number": 6131, "timestamp_epoch": "1634913306.067606000", "src_ip": "10.10.22.156", "dst_ip": "104.94.77.31", "src_port": 49759, "dst_port": 80, "tcp_stream": 237, "udp_stream": null, "fields": { "http.host": "x1.c.lencr.org", "http.request.full_uri": "http://x1.c.lencr.org/", "http.request.method": "GET", "http.request.uri": "/", "http.response_in": "6133", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-f61a0204057cb62cca9aae87", "kind": "http_request", "frame_number": 6143, "timestamp_epoch": "1634913307.242763000", "src_ip": "10.10.22.156", "dst_ip": "8.253.156.120", "src_port": 49760, "dst_port": 80, "tcp_stream": 238, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c073614b94536784", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c073614b94536784", "http.response_in": "6145", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-fddb1cc4979f05f59581b7f0", "kind": "http_request", "frame_number": 6146, "timestamp_epoch": "1634913307.325299000", "src_ip": "10.10.22.156", "dst_ip": "8.253.156.120", "src_port": 49760, "dst_port": 80, "tcp_stream": 238, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?88af6d736a9e15f4", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?88af6d736a9e15f4", "http.response_in": "6148", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-290dc0e3629b29f0529a3b01", "kind": "http_request", "frame_number": 6222, "timestamp_epoch": "1634913345.915901000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*", "http.user_agent": "Microsoft Edge/95.0.1020.30 Windows" } }, { "event_id": "evt-29262004aa881c4fde95c5a2", "kind": "http_request", "frame_number": 6374, "timestamp_epoch": "1634913346.920570000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*", "http.user_agent": "Microsoft Edge/95.0.1020.30 Windows" } }, { "event_id": "evt-41101c608bf2ecf393e0b2e0", "kind": "http_request", "frame_number": 6428, "timestamp_epoch": "1634913347.935448000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*", "http.user_agent": "Microsoft Edge/95.0.1020.30 Windows" } }, { "event_id": "evt-174221096e731d29e73ae919", "kind": "http_request", "frame_number": 6444, "timestamp_epoch": "1634913348.938407000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*", "http.user_agent": "Microsoft Edge/95.0.1020.30 Windows" } }, { "event_id": "evt-a230df131bd6e0141e2af1b6", "kind": "http_request", "frame_number": 6751, "timestamp_epoch": "1634913395.707500000", "src_ip": "10.10.22.158", "dst_ip": "172.67.139.101", "src_port": 49758, "dst_port": 80, "tcp_stream": 248, "udp_stream": null, "fields": { "http.host": "sobolpand.top", "http.request.full_uri": "http://sobolpand.top/034g100/index.php", "http.request.method": "GET", "http.request.uri": "/034g100/index.php", "http.response_in": "6755" } }, { "event_id": "evt-d7c770026c4dc3e4bdbc01ab", "kind": "http_request", "frame_number": 6756, "timestamp_epoch": "1634913397.426689000", "src_ip": "10.10.22.158", "dst_ip": "172.67.139.101", "src_port": 49758, "dst_port": 80, "tcp_stream": 248, "udp_stream": null, "fields": { "http.host": "sobolpand.top", "http.request.full_uri": "http://sobolpand.top/034g100/main.php", "http.request.method": "GET", "http.request.uri": "/034g100/main.php", "http.response_in": "7119" } }, { "event_id": "evt-5435b4f27b2b33ca4f2d2f2a", "kind": "http_request", "frame_number": 7250, "timestamp_epoch": "1634913421.654401000", "src_ip": "10.10.22.156", "dst_ip": "190.14.37.244", "src_port": 49766, "dst_port": 80, "tcp_stream": 254, "udp_stream": null, "fields": { "http.host": "190.14.37.244", "http.request.full_uri": "http://190.14.37.244/44491.6090605324.dat", "http.request.method": "GET", "http.request.uri": "/44491.6090605324.dat", "http.response_in": "8443", "http.user_agent": "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" } }, { "event_id": "evt-85ecaf5750e93b6db6356114", "kind": "http_request", "frame_number": 8450, "timestamp_epoch": "1634913426.801894000", "src_ip": "10.10.22.156", "dst_ip": "194.36.191.35", "src_port": 49768, "dst_port": 80, "tcp_stream": 256, "udp_stream": null, "fields": { "http.host": "194.36.191.35", "http.request.full_uri": "http://194.36.191.35/44491.6090605324.dat", "http.request.method": "GET", "http.request.uri": "/44491.6090605324.dat", "http.response_in": "9646", "http.user_agent": "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" } }, { "event_id": "evt-8e9595caf175e1d35a53673d", "kind": "http_request", "frame_number": 9651, "timestamp_epoch": "1634913428.775164000", "src_ip": "10.10.22.156", "dst_ip": "178.23.190.8", "src_port": 49769, "dst_port": 80, "tcp_stream": 257, "udp_stream": null, "fields": { "http.host": "178.23.190.8", "http.request.full_uri": "http://178.23.190.8/44491.6090605324.dat", "http.request.method": "GET", "http.request.uri": "/44491.6090605324.dat", "http.response_in": "10698", "http.user_agent": "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" } }, { "event_id": "evt-1299e64ba651cb414720686e", "kind": "http_request", "frame_number": 15954, "timestamp_epoch": "1634913814.849469000", "src_ip": "10.10.22.158", "dst_ip": "8.248.163.254", "src_port": 49771, "dst_port": 80, "tcp_stream": 324, "udp_stream": null, "fields": { "http.host": "ctldl.windowsupdate.com", "http.request.full_uri": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?c6f9855cb9e658e6", "http.request.method": "GET", "http.request.uri": "/msdownload/update/v3/static/trustedr/en/authrootstl.cab?c6f9855cb9e658e6", "http.response_in": "15972", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-efdb14ea401b3f151c379c00", "kind": "http_request", "frame_number": 16335, "timestamp_epoch": "1634913884.722579000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-3484b836b14ec4243743719d", "kind": "http_request", "frame_number": 16336, "timestamp_epoch": "1634913884.727742000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-7b752ffecc0a254c47af31b6", "kind": "http_request", "frame_number": 16353, "timestamp_epoch": "1634913884.933226000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-07f85e92d1e2a06690c50289", "kind": "http_request", "frame_number": 17248, "timestamp_epoch": "1634913887.731204000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-03ac0f2378b3feb8f599b2b1", "kind": "http_request", "frame_number": 17249, "timestamp_epoch": "1634913887.731987000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-97c7f17d40acc1bef1017728", "kind": "http_request", "frame_number": 17250, "timestamp_epoch": "1634913887.934170000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-1c78d2ab899550f152114ad7", "kind": "http_request", "frame_number": 17327, "timestamp_epoch": "1634913890.746383000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-9a5d947beb2f8924968be5e6", "kind": "http_request", "frame_number": 17328, "timestamp_epoch": "1634913890.747298000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f1e923a3ff63055b86156b0d", "kind": "http_request", "frame_number": 17812, "timestamp_epoch": "1634914011.820296000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-b6f339440c0d3514513129d5", "kind": "http_request", "frame_number": 17819, "timestamp_epoch": "1634914014.818920000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-5b862cdfcd48255c8c4a439b", "kind": "http_request", "frame_number": 17866, "timestamp_epoch": "1634914017.819418000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-5eafe57d7db13ada0148dec1", "kind": "http_request", "frame_number": 17869, "timestamp_epoch": "1634914020.823413000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-ce87b198f9e9bd534cc5b811", "kind": "http_request", "frame_number": 17874, "timestamp_epoch": "1634914023.835104000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f02185be9b45e40800a5677a", "kind": "http_request", "frame_number": 17889, "timestamp_epoch": "1634914026.835266000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-189b21100581160e8e2da765", "kind": "http_request", "frame_number": 17940, "timestamp_epoch": "1634914043.530018000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f533b66c7538daef78752782", "kind": "http_request", "frame_number": 17970, "timestamp_epoch": "1634914046.532444000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8eaba73c2b9c1eff341e5c51", "kind": "http_request", "frame_number": 18338, "timestamp_epoch": "1634914049.546192000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f0825bac2453211d11b204b3", "kind": "http_request", "frame_number": 18654, "timestamp_epoch": "1634914052.551745000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-a6e949ccdb58fb5c04b4973f", "kind": "http_request", "frame_number": 18848, "timestamp_epoch": "1634914055.548901000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-560b43bb20da665a8a55d6a2", "kind": "http_request", "frame_number": 19465, "timestamp_epoch": "1634914058.562177000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-367164aadf0c7d722ec47d72", "kind": "http_request", "frame_number": 24794, "timestamp_epoch": "1634914911.843293000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-5d7e31eb6c6c05d14fef2867", "kind": "http_request", "frame_number": 24809, "timestamp_epoch": "1634914914.855696000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8758c2cd135146aa368ce349", "kind": "http_request", "frame_number": 24832, "timestamp_epoch": "1634914917.856883000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-86acef9e20873cb579a7ff67", "kind": "http_request", "frame_number": 24838, "timestamp_epoch": "1634914920.873359000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-bd99c9d283628eaa568d7522", "kind": "http_request", "frame_number": 24847, "timestamp_epoch": "1634914923.870960000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-a8a68290b3d4d2cf50461dcc", "kind": "http_request", "frame_number": 24857, "timestamp_epoch": "1634914926.871444000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-fa39d69179f7f7df6155858b", "kind": "http_request", "frame_number": 25095, "timestamp_epoch": "1634914943.554879000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-9070210397b96894a97c1632", "kind": "http_request", "frame_number": 25940, "timestamp_epoch": "1634914946.553706000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-6df66eb24f9be9af6123455f", "kind": "http_request", "frame_number": 25954, "timestamp_epoch": "1634914949.569745000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-d1ab3d0df57a9941cffd3377", "kind": "http_request", "frame_number": 25959, "timestamp_epoch": "1634914952.573662000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-a269277991764a6392c5d65f", "kind": "http_request", "frame_number": 25964, "timestamp_epoch": "1634914955.584436000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f53de7f5ae3a60a1aa8ed2c3", "kind": "http_request", "frame_number": 25972, "timestamp_epoch": "1634914958.601111000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-cafd6c7f4860319adedbfa64", "kind": "http_request", "frame_number": 31723, "timestamp_epoch": "1634915266.355183000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f1a1f727bd18a6bb7f3eb403", "kind": "http_request", "frame_number": 32241, "timestamp_epoch": "1634915268.349623000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-14cf9d3b0525af50bc6e5f63", "kind": "http_request", "frame_number": 33292, "timestamp_epoch": "1634915270.365798000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f63175a3e6e965ec24520390", "kind": "http_request", "frame_number": 34463, "timestamp_epoch": "1634915272.380086000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-45c71bf574c5e114c031c432", "kind": "http_request", "frame_number": 56015, "timestamp_epoch": "1634915811.897013000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-9a9217f6f373bc4a83f684dc", "kind": "http_request", "frame_number": 56034, "timestamp_epoch": "1634915814.895175000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-108743f49d653ef7b87241f1", "kind": "http_request", "frame_number": 56074, "timestamp_epoch": "1634915817.911343000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-3bfd338d4bfb54f16d5ecbe6", "kind": "http_request", "frame_number": 56120, "timestamp_epoch": "1634915820.915146000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-411a171d708c3b2fae66022f", "kind": "http_request", "frame_number": 56130, "timestamp_epoch": "1634915823.926956000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-354c183ef576dc3c22220903", "kind": "http_request", "frame_number": 56184, "timestamp_epoch": "1634915826.942766000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-f78e072a7b325a46c8fe57cc", "kind": "http_request", "frame_number": 56350, "timestamp_epoch": "1634915843.580971000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-2b76ce9e6d7a65b13b7bcc20", "kind": "http_request", "frame_number": 56383, "timestamp_epoch": "1634915846.578793000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8f3d14251c263b848ebbbb4a", "kind": "http_request", "frame_number": 56406, "timestamp_epoch": "1634915849.591686000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-3905cf43c013437d82e4c940", "kind": "http_request", "frame_number": 56538, "timestamp_epoch": "1634915852.594189000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-c4ddc3ed02bf1f876e845a9e", "kind": "http_request", "frame_number": 56553, "timestamp_epoch": "1634915855.593157000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-cccbb1ee31e94c2d03e5256e", "kind": "http_request", "frame_number": 56565, "timestamp_epoch": "1634915858.593238000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-ce1e5d4ab7e04bac6f9991d6", "kind": "http_request", "frame_number": 66230, "timestamp_epoch": "1634916711.899633000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-ccc575653a89ac46dcd59566", "kind": "http_request", "frame_number": 66246, "timestamp_epoch": "1634916714.900101000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8c757514553eedecc6cbac95", "kind": "http_request", "frame_number": 66292, "timestamp_epoch": "1634916717.914689000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-312a276b72aba094446bc513", "kind": "http_request", "frame_number": 66299, "timestamp_epoch": "1634916720.933540000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-c0dbeaf603a1c43300233e5c", "kind": "http_request", "frame_number": 66309, "timestamp_epoch": "1634916723.944090000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-8ad6646e1fc41706c8464dec", "kind": "http_request", "frame_number": 66325, "timestamp_epoch": "1634916726.946607000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-e1f0f23e83611242d6f298f3", "kind": "http_request", "frame_number": 66380, "timestamp_epoch": "1634916743.595720000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-4fd02d7046d0812133a377d9", "kind": "http_request", "frame_number": 66436, "timestamp_epoch": "1634916746.597582000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-fb1a53a842eba1822842de7b", "kind": "http_request", "frame_number": 66455, "timestamp_epoch": "1634916749.610871000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-098ad61dca72602c313ad24f", "kind": "http_request", "frame_number": 66459, "timestamp_epoch": "1634916752.630997000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-575ee9a0d3f41903dce98e2d", "kind": "http_request", "frame_number": 66472, "timestamp_epoch": "1634916755.627544000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-11d37e7a29e8486d5ccec2e6", "kind": "http_request", "frame_number": 66487, "timestamp_epoch": "1634916758.630084000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-aaf428cc32194a59148fbfbd", "kind": "http_request", "frame_number": 68295, "timestamp_epoch": "1634916950.282522000", "src_ip": "10.10.22.157", "dst_ip": "104.94.77.31", "src_port": 50257, "dst_port": 80, "tcp_stream": 1391, "udp_stream": null, "fields": { "http.host": "x1.c.lencr.org", "http.request.full_uri": "http://x1.c.lencr.org/", "http.request.method": "GET", "http.request.uri": "/", "http.response_in": "68301", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-d63f5f6da342184b71589282", "kind": "http_request", "frame_number": 75143, "timestamp_epoch": "1634917533.050761000", "src_ip": "10.10.22.156", "dst_ip": "104.94.77.31", "src_port": 50165, "dst_port": 80, "tcp_stream": 1505, "udp_stream": null, "fields": { "http.host": "x1.c.lencr.org", "http.request.full_uri": "http://x1.c.lencr.org/", "http.request.method": "GET", "http.request.uri": "/", "http.response_in": "75145", "http.user_agent": "Microsoft-CryptoAPI/10.0" } }, { "event_id": "evt-eecc865377eae7d7c8aa686f", "kind": "http_request", "frame_number": 76370, "timestamp_epoch": "1634917611.954720000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-6b49398f6de65af4a1bba676", "kind": "http_request", "frame_number": 76379, "timestamp_epoch": "1634917614.954467000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-82f7c9fdf94e9fbf4b93be9d", "kind": "http_request", "frame_number": 76405, "timestamp_epoch": "1634917617.969092000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-34b05780858b9450551af5e5", "kind": "http_request", "frame_number": 76444, "timestamp_epoch": "1634917620.987137000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-47b8fa9dbc9a1ca5b6bc32bb", "kind": "http_request", "frame_number": 76456, "timestamp_epoch": "1634917624.000379000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-c6e8c039b2f0c8630f74eefe", "kind": "http_request", "frame_number": 76470, "timestamp_epoch": "1634917627.030595000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-5a6744e6cbb4eb8f79600e0d", "kind": "http_request", "frame_number": 76620, "timestamp_epoch": "1634917643.636663000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-3131de9780f7c5c0c5db23f2", "kind": "http_request", "frame_number": 76659, "timestamp_epoch": "1634917646.634633000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-ce82f184ca3e7b138a7003a0", "kind": "http_request", "frame_number": 76692, "timestamp_epoch": "1634917649.635539000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-b5100cdf6688a50fc0fcd599", "kind": "http_request", "frame_number": 76696, "timestamp_epoch": "1634917652.654781000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-527c39a69a4a1a26b801230a", "kind": "http_request", "frame_number": 76704, "timestamp_epoch": "1634917655.666380000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-3e9b1806965680422165d8a6", "kind": "http_request", "frame_number": 76718, "timestamp_epoch": "1634917658.666508000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-e0021dc629845adf2f2a0a4c", "kind": "http_request", "frame_number": 80443, "timestamp_epoch": "1634918066.335618000", "src_ip": "10.10.22.158", "dst_ip": "159.127.40.144", "src_port": 49879, "dst_port": 80, "tcp_stream": 1583, "udp_stream": null, "fields": { "http.host": "www.kqzyfj.com", "http.request.full_uri": "http://www.kqzyfj.com/click-1225267-10537174-1463076242000?sid=552795f4335011ec81850e774cf9d6690INT", "http.request.method": "GET", "http.request.uri": "/click-1225267-10537174-1463076242000?sid=552795f4335011ec81850e774cf9d6690INT", "http.response_in": "80445", "http.user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Edg/85.0.564.67" } }, { "event_id": "evt-f3563a297c5e185413e0e78f", "kind": "http_request", "frame_number": 83835, "timestamp_epoch": "1634918511.971597000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-b0b33c5bcb3cd223d2f45c07", "kind": "http_request", "frame_number": 83895, "timestamp_epoch": "1634918514.966745000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-54a89fd0486d8d7e08f4ec39", "kind": "http_request", "frame_number": 83942, "timestamp_epoch": "1634918517.981817000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-773751b7981fd6511396e26e", "kind": "http_request", "frame_number": 83945, "timestamp_epoch": "1634918520.985032000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-a60dc2f8d128f79ad6b64263", "kind": "http_request", "frame_number": 83977, "timestamp_epoch": "1634918523.998482000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-96e7b888f50d8a31d1befa97", "kind": "http_request", "frame_number": 84048, "timestamp_epoch": "1634918527.030110000", "src_ip": "10.10.22.156", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-612cd5cd13989bbe210038e0", "kind": "http_request", "frame_number": 84065, "timestamp_epoch": "1634918543.664458000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-11165ec0ebf4e14659ccb621", "kind": "http_request", "frame_number": 84109, "timestamp_epoch": "1634918546.664424000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-02d95e378a99a3ef79016aae", "kind": "http_request", "frame_number": 84151, "timestamp_epoch": "1634918549.681839000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-deb1bffe408c9d1cb6485d23", "kind": "http_request", "frame_number": 84208, "timestamp_epoch": "1634918552.699933000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-89118df0205ab83cf0ee2538", "kind": "http_request", "frame_number": 84244, "timestamp_epoch": "1634918555.712417000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } }, { "event_id": "evt-7455d38b374b5893916b1cfa", "kind": "http_request", "frame_number": 84300, "timestamp_epoch": "1634918558.727872000", "src_ip": "10.10.22.158", "dst_ip": "239.255.255.250", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "http.host": "239.255.255.250:1900", "http.request.full_uri": "http://239.255.255.250:1900*", "http.request.method": "M-SEARCH", "http.request.uri": "*" } } ], "http_response": [ { "event_id": "evt-ed10efa0a10b59f8edcf4423", "kind": "http_response", "frame_number": 5107, "timestamp_epoch": "1634913245.580567000", "src_ip": "8.253.156.120", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49748, "tcp_stream": 213, "udp_stream": null, "fields": { "http.request_in": "5034", "http.response.code": "304" } }, { "event_id": "evt-e04039bf4e8c5d73dc95a0dc", "kind": "http_response", "frame_number": 5114, "timestamp_epoch": "1634913245.698820000", "src_ip": "8.253.156.120", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49748, "tcp_stream": 213, "udp_stream": null, "fields": { "http.request_in": "5109", "http.response.code": "304" } }, { "event_id": "evt-80e08a91a91193db3b6b3cdd", "kind": "http_response", "frame_number": 5125, "timestamp_epoch": "1634913245.790257000", "src_ip": "8.253.156.120", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49748, "tcp_stream": 213, "udp_stream": null, "fields": { "http.request_in": "5115", "http.response.code": "304" } }, { "event_id": "evt-f020cbff595b996f462d0591", "kind": "http_response", "frame_number": 5395, "timestamp_epoch": "1634913274.052171000", "src_ip": "8.249.245.254", "dst_ip": "10.10.22.157", "src_port": 80, "dst_port": 49741, "tcp_stream": 227, "udp_stream": null, "fields": { "http.request_in": "5393", "http.response.code": "304" } }, { "event_id": "evt-5c2f3d9870c928c88d5caf7c", "kind": "http_response", "frame_number": 6133, "timestamp_epoch": "1634913306.131107000", "src_ip": "104.94.77.31", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49759, "tcp_stream": 237, "udp_stream": null, "fields": { "http.content_type": "application/pkix-crl", "http.request_in": "6131", "http.response.code": "304" } }, { "event_id": "evt-76a39efe4c87cf59684ee9b3", "kind": "http_response", "frame_number": 6145, "timestamp_epoch": "1634913307.315718000", "src_ip": "8.253.156.120", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49760, "tcp_stream": 238, "udp_stream": null, "fields": { "http.request_in": "6143", "http.response.code": "304" } }, { "event_id": "evt-e569d9e52181f7bc6370cb3f", "kind": "http_response", "frame_number": 6148, "timestamp_epoch": "1634913307.413322000", "src_ip": "8.253.156.120", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49760, "tcp_stream": 238, "udp_stream": null, "fields": { "http.request_in": "6146", "http.response.code": "304" } }, { "event_id": "evt-a7b180f1ccb61162edc0ef01", "kind": "http_response", "frame_number": 6755, "timestamp_epoch": "1634913397.400034000", "src_ip": "172.67.139.101", "dst_ip": "10.10.22.158", "src_port": 80, "dst_port": 49758, "tcp_stream": 248, "udp_stream": null, "fields": { "http.content_type": "text/html; charset=UTF-8", "http.request_in": "6751", "http.response.code": "200" } }, { "event_id": "evt-3fdf02deb65c7864a2821a72", "kind": "http_response", "frame_number": 7119, "timestamp_epoch": "1634913399.351352000", "src_ip": "172.67.139.101", "dst_ip": "10.10.22.158", "src_port": 80, "dst_port": 49758, "tcp_stream": 248, "udp_stream": null, "fields": { "http.content_type": "application/octet-stream", "http.request_in": "6756", "http.response.code": "200" } }, { "event_id": "evt-004e74dcdee24da9c6cbd3c4", "kind": "http_response", "frame_number": 8443, "timestamp_epoch": "1634913426.634289000", "src_ip": "190.14.37.244", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49766, "tcp_stream": 254, "udp_stream": null, "fields": { "http.content_length": "911360", "http.content_type": "application/octet-stream", "http.request_in": "7250", "http.response.code": "200" } }, { "event_id": "evt-9ee449c4e8a6317020fa7e9f", "kind": "http_response", "frame_number": 9646, "timestamp_epoch": "1634913428.609897000", "src_ip": "194.36.191.35", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49768, "tcp_stream": 256, "udp_stream": null, "fields": { "http.content_length": "911360", "http.content_type": "application/octet-stream", "http.request_in": "8450", "http.response.code": "200" } }, { "event_id": "evt-4c5ae1c537e5578ae584b962", "kind": "http_response", "frame_number": 10698, "timestamp_epoch": "1634913431.056928000", "src_ip": "178.23.190.8", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 49769, "tcp_stream": 257, "udp_stream": null, "fields": { "http.content_length": "911360", "http.content_type": "application/octet-stream", "http.request_in": "9651", "http.response.code": "200" } }, { "event_id": "evt-0200988a21b0e6fb4bc674ad", "kind": "http_response", "frame_number": 15972, "timestamp_epoch": "1634913814.918617000", "src_ip": "8.248.163.254", "dst_ip": "10.10.22.158", "src_port": 80, "dst_port": 49771, "tcp_stream": 324, "udp_stream": null, "fields": { "http.request_in": "15954", "http.response.code": "304" } }, { "event_id": "evt-cd73ab1fb1c7ea76f56c0534", "kind": "http_response", "frame_number": 68301, "timestamp_epoch": "1634916950.331727000", "src_ip": "104.94.77.31", "dst_ip": "10.10.22.157", "src_port": 80, "dst_port": 50257, "tcp_stream": 1391, "udp_stream": null, "fields": { "http.content_type": "application/pkix-crl", "http.request_in": "68295", "http.response.code": "304" } }, { "event_id": "evt-78fd449d7369ff8d428128d7", "kind": "http_response", "frame_number": 75145, "timestamp_epoch": "1634917533.087601000", "src_ip": "104.94.77.31", "dst_ip": "10.10.22.156", "src_port": 80, "dst_port": 50165, "tcp_stream": 1505, "udp_stream": null, "fields": { "http.content_type": "application/pkix-crl", "http.request_in": "75143", "http.response.code": "304" } }, { "event_id": "evt-c0e79013075ea81998cde8aa", "kind": "http_response", "frame_number": 80445, "timestamp_epoch": "1634918066.423441000", "src_ip": "159.127.40.144", "dst_ip": "10.10.22.158", "src_port": 80, "dst_port": 49879, "tcp_stream": 1583, "udp_stream": null, "fields": { "http.content_type": "text/html; charset=UTF-8", "http.request_in": "80443", "http.response.code": "302" } } ], "tls_client_hello": [ { "event_id": "evt-eb0b72382af57cb815e4ecc4", "kind": "tls_client_hello", "frame_number": 720, "timestamp_epoch": "1634913064.905067000", "src_ip": "10.10.22.157", "dst_ip": "20.189.173.7", "src_port": 49706, "dst_port": 443, "tcp_stream": 34, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-928b72a051e37af543949816", "kind": "tls_client_hello", "frame_number": 1384, "timestamp_epoch": "1634913117.006088000", "src_ip": "10.10.22.157", "dst_ip": "52.109.76.32", "src_port": 49707, "dst_port": 443, "tcp_stream": 68, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "nexusrules.officeapps.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-6435cf4b00a433f0a18f1293", "kind": "tls_client_hello", "frame_number": 1612, "timestamp_epoch": "1634913126.000863000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 49713, "dst_port": 443, "tcp_stream": 78, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-88080f16e0ef087adc62a173", "kind": "tls_client_hello", "frame_number": 2488, "timestamp_epoch": "1634913160.604351000", "src_ip": "10.10.22.158", "dst_ip": "52.182.143.210", "src_port": 49714, "dst_port": 443, "tcp_stream": 120, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-5ab1c1b3050e6b610f019c7c", "kind": "tls_client_hello", "frame_number": 2567, "timestamp_epoch": "1634913176.687495000", "src_ip": "10.10.22.156", "dst_ip": "52.109.76.32", "src_port": 49714, "dst_port": 443, "tcp_stream": 121, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "nexusrules.officeapps.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-161cc6a4c0c2011f5aa420b0", "kind": "tls_client_hello", "frame_number": 2738, "timestamp_epoch": "1634913184.692326000", "src_ip": "10.10.22.156", "dst_ip": "20.189.173.12", "src_port": 49715, "dst_port": 443, "tcp_stream": 129, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-9f6b2aa8c8bbc29dc3c55cbe", "kind": "tls_client_hello", "frame_number": 2855, "timestamp_epoch": "1634913186.156521000", "src_ip": "10.10.22.158", "dst_ip": "20.189.173.12", "src_port": 49727, "dst_port": 443, "tcp_stream": 135, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v20.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-b5d9342ca24225c42c254dbe", "kind": "tls_client_hello", "frame_number": 2859, "timestamp_epoch": "1634913186.208956000", "src_ip": "10.10.22.158", "dst_ip": "13.64.180.106", "src_port": 49728, "dst_port": 443, "tcp_stream": 136, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "client.wns.windows.com", "tls.handshake.ja3": "3b5074b1b5d032e5620f69f9f700ff0e" } }, { "event_id": "evt-c39dcf607f4fcb792d8d2ae1", "kind": "tls_client_hello", "frame_number": 2908, "timestamp_epoch": "1634913187.490745000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.203", "src_port": 49729, "dst_port": 443, "tcp_stream": 137, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-01075d773f9ab47bf44b4a93", "kind": "tls_client_hello", "frame_number": 2933, "timestamp_epoch": "1634913189.732047000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49730, "dst_port": 443, "tcp_stream": 138, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-adafdc237a09dbe70e5bdda7", "kind": "tls_client_hello", "frame_number": 2968, "timestamp_epoch": "1634913189.939818000", "src_ip": "10.10.22.158", "dst_ip": "13.107.4.254", "src_port": 49731, "dst_port": 443, "tcp_stream": 139, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "c-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-4ad88788f49b4c3e8a562a38", "kind": "tls_client_hello", "frame_number": 2990, "timestamp_epoch": "1634913190.063908000", "src_ip": "10.10.22.158", "dst_ip": "52.113.196.254", "src_port": 49732, "dst_port": 443, "tcp_stream": 140, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "teams-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-2b6f3f651c83d6ae2aea407e", "kind": "tls_client_hello", "frame_number": 2996, "timestamp_epoch": "1634913190.112726000", "src_ip": "10.10.22.158", "dst_ip": "13.107.18.254", "src_port": 49733, "dst_port": 443, "tcp_stream": 141, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "k-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-69ab1d63afe810167bc3d945", "kind": "tls_client_hello", "frame_number": 3002, "timestamp_epoch": "1634913190.164263000", "src_ip": "10.10.22.158", "dst_ip": "131.253.33.254", "src_port": 49734, "dst_port": 443, "tcp_stream": 142, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "a-ring-fallback.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-72ce673b94660c2f2d661fb4", "kind": "tls_client_hello", "frame_number": 3064, "timestamp_epoch": "1634913190.909874000", "src_ip": "10.10.22.158", "dst_ip": "13.86.61.82", "src_port": 49735, "dst_port": 443, "tcp_stream": 143, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "continuum.dds.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-d21ee8b685d5941badda15bf", "kind": "tls_client_hello", "frame_number": 3068, "timestamp_epoch": "1634913190.947146000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.203", "src_port": 49736, "dst_port": 443, "tcp_stream": 144, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-5b6aa30a1be13a7cc7ac1e96", "kind": "tls_client_hello", "frame_number": 3093, "timestamp_epoch": "1634913191.072852000", "src_ip": "10.10.22.158", "dst_ip": "40.126.28.23", "src_port": 49737, "dst_port": 443, "tcp_stream": 145, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-2b62adac67c81f6860781dfe", "kind": "tls_client_hello", "frame_number": 3189, "timestamp_epoch": "1634913191.842161000", "src_ip": "10.10.22.158", "dst_ip": "20.69.137.228", "src_port": 49738, "dst_port": 443, "tcp_stream": 146, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "activity.windows.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-85e55287c2ccb1521aafc33d", "kind": "tls_client_hello", "frame_number": 3217, "timestamp_epoch": "1634913193.385799000", "src_ip": "10.10.22.156", "dst_ip": "52.185.211.133", "src_port": 49716, "dst_port": 443, "tcp_stream": 147, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-a2792c6d8b1c2f5528729c10", "kind": "tls_client_hello", "frame_number": 3270, "timestamp_epoch": "1634913202.473612000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49740, "dst_port": 443, "tcp_stream": 148, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-a91579bc041893960ab7d908", "kind": "tls_client_hello", "frame_number": 3287, "timestamp_epoch": "1634913202.730695000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49741, "dst_port": 443, "tcp_stream": 149, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-eca8d2347d05b0f850477f8e", "kind": "tls_client_hello", "frame_number": 3312, "timestamp_epoch": "1634913203.512762000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49742, "dst_port": 443, "tcp_stream": 150, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-b9287665c6ee0b608992e1d9", "kind": "tls_client_hello", "frame_number": 3341, "timestamp_epoch": "1634913207.335788000", "src_ip": "10.10.22.158", "dst_ip": "52.109.76.32", "src_port": 49743, "dst_port": 443, "tcp_stream": 151, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "nexusrules.officeapps.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-ccfdb03011dbd95f2e7f085c", "kind": "tls_client_hello", "frame_number": 3580, "timestamp_epoch": "1634913212.651868000", "src_ip": "10.10.22.157", "dst_ip": "13.64.180.106", "src_port": 49721, "dst_port": 443, "tcp_stream": 165, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "client.wns.windows.com", "tls.handshake.ja3": "3b5074b1b5d032e5620f69f9f700ff0e" } }, { "event_id": "evt-fafcc08da496a6a31b22eef0", "kind": "tls_client_hello", "frame_number": 3604, "timestamp_epoch": "1634913213.031340000", "src_ip": "10.10.22.157", "dst_ip": "13.89.179.9", "src_port": 49722, "dst_port": 443, "tcp_stream": 166, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v20.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-cca74e85182a181521ed1b8e", "kind": "tls_client_hello", "frame_number": 3636, "timestamp_epoch": "1634913214.102834000", "src_ip": "10.10.22.157", "dst_ip": "204.79.197.203", "src_port": 49723, "dst_port": 443, "tcp_stream": 167, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-c180b8a779dccf929c808fa6", "kind": "tls_client_hello", "frame_number": 3676, "timestamp_epoch": "1634913218.775235000", "src_ip": "10.10.22.157", "dst_ip": "204.79.197.203", "src_port": 49726, "dst_port": 443, "tcp_stream": 170, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-85b16ec4afacbc88da65e2e2", "kind": "tls_client_hello", "frame_number": 3681, "timestamp_epoch": "1634913218.797333000", "src_ip": "10.10.22.157", "dst_ip": "40.126.28.22", "src_port": 49725, "dst_port": 443, "tcp_stream": 169, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-0853bafaa26aced82f99ae03", "kind": "tls_client_hello", "frame_number": 3686, "timestamp_epoch": "1634913218.874677000", "src_ip": "10.10.22.157", "dst_ip": "13.107.21.200", "src_port": 49727, "dst_port": 443, "tcp_stream": 171, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-86273eba39810fbf6d367514", "kind": "tls_client_hello", "frame_number": 3705, "timestamp_epoch": "1634913218.910484000", "src_ip": "10.10.22.157", "dst_ip": "13.107.21.200", "src_port": 49728, "dst_port": 443, "tcp_stream": 172, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-845f8d1ecaa079468f99625b", "kind": "tls_client_hello", "frame_number": 3821, "timestamp_epoch": "1634913221.611780000", "src_ip": "10.10.22.157", "dst_ip": "13.86.61.82", "src_port": 49724, "dst_port": 443, "tcp_stream": 168, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "continuum.dds.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-898306799645237a7cadd646", "kind": "tls_client_hello", "frame_number": 3848, "timestamp_epoch": "1634913223.123881000", "src_ip": "10.10.22.157", "dst_ip": "20.69.137.228", "src_port": 49729, "dst_port": 443, "tcp_stream": 173, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "activity.windows.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-6cfe26f964f0b87306f41c11", "kind": "tls_client_hello", "frame_number": 3884, "timestamp_epoch": "1634913224.865279000", "src_ip": "10.10.22.158", "dst_ip": "173.223.109.212", "src_port": 49744, "dst_port": 443, "tcp_stream": 174, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "storeedgefd.dsx.mp.microsoft.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-6dbc775dcb77c463671d7851", "kind": "tls_client_hello", "frame_number": 3940, "timestamp_epoch": "1634913230.587526000", "src_ip": "10.10.22.157", "dst_ip": "52.185.211.133", "src_port": 49730, "dst_port": 443, "tcp_stream": 175, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-d75117c4896ea275af3b7028", "kind": "tls_client_hello", "frame_number": 3956, "timestamp_epoch": "1634913230.824034000", "src_ip": "10.10.22.158", "dst_ip": "51.132.193.105", "src_port": 49745, "dst_port": 443, "tcp_stream": 176, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-32b2c64a20b609a3d936ea2d", "kind": "tls_client_hello", "frame_number": 3964, "timestamp_epoch": "1634913230.935693000", "src_ip": "10.10.22.157", "dst_ip": "52.185.211.133", "src_port": 49731, "dst_port": 443, "tcp_stream": 177, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-046f506ebf976948f92de936", "kind": "tls_client_hello", "frame_number": 4036, "timestamp_epoch": "1634913232.813293000", "src_ip": "10.10.22.157", "dst_ip": "40.90.64.98", "src_port": 49734, "dst_port": 443, "tcp_stream": 180, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "pti.store.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-57c3a19d236be131d63a1b13", "kind": "tls_client_hello", "frame_number": 4040, "timestamp_epoch": "1634913232.854657000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49746, "dst_port": 443, "tcp_stream": 181, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-c2fd52c9aeae9cbe7c59c578", "kind": "tls_client_hello", "frame_number": 4104, "timestamp_epoch": "1634913234.629068000", "src_ip": "10.10.22.157", "dst_ip": "52.185.211.133", "src_port": 49732, "dst_port": 443, "tcp_stream": 178, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-8b1fb1106109d5aa7ee39414", "kind": "tls_client_hello", "frame_number": 4364, "timestamp_epoch": "1634913240.600539000", "src_ip": "10.10.22.156", "dst_ip": "13.64.180.106", "src_port": 49730, "dst_port": 443, "tcp_stream": 195, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "client.wns.windows.com", "tls.handshake.ja3": "3b5074b1b5d032e5620f69f9f700ff0e" } }, { "event_id": "evt-bdfecf7cea405b96a247b894", "kind": "tls_client_hello", "frame_number": 4368, "timestamp_epoch": "1634913240.693665000", "src_ip": "10.10.22.156", "dst_ip": "51.132.193.105", "src_port": 49731, "dst_port": 443, "tcp_stream": 196, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v20.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-0fa7211c55eebd2b8ddfae32", "kind": "tls_client_hello", "frame_number": 4404, "timestamp_epoch": "1634913241.534477000", "src_ip": "10.10.22.156", "dst_ip": "204.79.197.203", "src_port": 49732, "dst_port": 443, "tcp_stream": 197, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-006ce44b83ad0fad2d65e1cb", "kind": "tls_client_hello", "frame_number": 4443, "timestamp_epoch": "1634913243.763110000", "src_ip": "10.10.22.156", "dst_ip": "204.79.197.200", "src_port": 49733, "dst_port": 443, "tcp_stream": 198, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9052584cc4bd33040c03edf5", "kind": "tls_client_hello", "frame_number": 4470, "timestamp_epoch": "1634913243.924546000", "src_ip": "10.10.22.156", "dst_ip": "23.47.52.13", "src_port": 49734, "dst_port": 443, "tcp_stream": 199, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fp-as.azureedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-c282acbb28ae20a9380e43d2", "kind": "tls_client_hello", "frame_number": 4487, "timestamp_epoch": "1634913243.981064000", "src_ip": "10.10.22.156", "dst_ip": "13.107.6.254", "src_port": 49735, "dst_port": 443, "tcp_stream": 200, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "b-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-2eb08c037a3f5b74c2c52674", "kind": "tls_client_hello", "frame_number": 4543, "timestamp_epoch": "1634913244.025703000", "src_ip": "10.10.22.156", "dst_ip": "13.107.42.254", "src_port": 49737, "dst_port": 443, "tcp_stream": 202, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "l-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9dbc7b2e1a4611b115a6a6b3", "kind": "tls_client_hello", "frame_number": 4545, "timestamp_epoch": "1634913244.027393000", "src_ip": "10.10.22.156", "dst_ip": "72.21.81.200", "src_port": 49736, "dst_port": 443, "tcp_stream": 201, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fp-vs-nocache.azureedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-54d2834ce134499b8cb8f1ff", "kind": "tls_client_hello", "frame_number": 4569, "timestamp_epoch": "1634913244.058059000", "src_ip": "10.10.22.156", "dst_ip": "13.107.18.254", "src_port": 49738, "dst_port": 443, "tcp_stream": 203, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "k-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-f6c8359da1608a3839056544", "kind": "tls_client_hello", "frame_number": 4641, "timestamp_epoch": "1634913244.142343000", "src_ip": "10.10.22.156", "dst_ip": "13.107.43.14", "src_port": 49741, "dst_port": 443, "tcp_stream": 206, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "rum18.perf.linkedin.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-fc2f80b91ccfbb191c066f6b", "kind": "tls_client_hello", "frame_number": 4645, "timestamp_epoch": "1634913244.147981000", "src_ip": "10.10.22.156", "dst_ip": "13.107.136.254", "src_port": 49740, "dst_port": 443, "tcp_stream": 205, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "spo-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-023efd3aca5d5b430532a846", "kind": "tls_client_hello", "frame_number": 4649, "timestamp_epoch": "1634913244.150529000", "src_ip": "10.10.22.156", "dst_ip": "52.113.196.254", "src_port": 49739, "dst_port": 443, "tcp_stream": 204, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "teams-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-65555287bdc78ea71e2ad06f", "kind": "tls_client_hello", "frame_number": 4707, "timestamp_epoch": "1634913244.236286000", "src_ip": "10.10.22.156", "dst_ip": "204.79.197.254", "src_port": 49742, "dst_port": 443, "tcp_stream": 207, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "a-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-57c62e98414637028242e9f6", "kind": "tls_client_hello", "frame_number": 4718, "timestamp_epoch": "1634913244.251332000", "src_ip": "10.10.22.156", "dst_ip": "20.140.56.70", "src_port": 49744, "dst_port": 443, "tcp_stream": 209, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fp-afd.azurefd.us", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9ac88a471db5f43c5b89bad0", "kind": "tls_client_hello", "frame_number": 4747, "timestamp_epoch": "1634913244.310009000", "src_ip": "10.10.22.156", "dst_ip": "13.107.246.254", "src_port": 49743, "dst_port": 443, "tcp_stream": 208, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "t-ring.msedge.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9bd465a94fbd78360bb28f36", "kind": "tls_client_hello", "frame_number": 4824, "timestamp_epoch": "1634913245.001034000", "src_ip": "10.10.22.156", "dst_ip": "204.79.197.203", "src_port": 49747, "dst_port": 443, "tcp_stream": 212, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.msn.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-d95fef72adbf93b1f680c59e", "kind": "tls_client_hello", "frame_number": 4828, "timestamp_epoch": "1634913245.011484000", "src_ip": "10.10.22.156", "dst_ip": "20.190.4.251", "src_port": 49745, "dst_port": 443, "tcp_stream": 210, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "continuum.dds.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-831630fa073c149c78c3490d", "kind": "tls_client_hello", "frame_number": 4832, "timestamp_epoch": "1634913245.029627000", "src_ip": "10.10.22.156", "dst_ip": "40.126.28.20", "src_port": 49746, "dst_port": 443, "tcp_stream": 211, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-fa8775d25bef3cda1e488ad5", "kind": "tls_client_hello", "frame_number": 5119, "timestamp_epoch": "1634913245.729864000", "src_ip": "10.10.22.156", "dst_ip": "20.69.137.228", "src_port": 49749, "dst_port": 443, "tcp_stream": 218, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "activity.windows.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-0c7626117f08911d85368a3b", "kind": "tls_client_hello", "frame_number": 5153, "timestamp_epoch": "1634913246.350437000", "src_ip": "10.10.22.156", "dst_ip": "20.69.137.228", "src_port": 49750, "dst_port": 443, "tcp_stream": 219, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "activity.windows.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-4a1e5742d28a4990461ab7f1", "kind": "tls_client_hello", "frame_number": 5216, "timestamp_epoch": "1634913261.891146000", "src_ip": "10.10.22.157", "dst_ip": "204.79.197.200", "src_port": 49735, "dst_port": 443, "tcp_stream": 220, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-dabd5c523cc2803a0e241535", "kind": "tls_client_hello", "frame_number": 5255, "timestamp_epoch": "1634913264.433424000", "src_ip": "10.10.22.157", "dst_ip": "173.223.109.212", "src_port": 49736, "dst_port": 443, "tcp_stream": 221, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "storeedgefd.dsx.mp.microsoft.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-f382d3cc3dbd1d0dbcbbd010", "kind": "tls_client_hello", "frame_number": 5380, "timestamp_epoch": "1634913273.718043000", "src_ip": "10.10.22.156", "dst_ip": "173.223.109.212", "src_port": 49751, "dst_port": 443, "tcp_stream": 226, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "storeedgefd.dsx.mp.microsoft.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-d43dc9ed0745f449864490f7", "kind": "tls_client_hello", "frame_number": 5443, "timestamp_epoch": "1634913274.633074000", "src_ip": "10.10.22.156", "dst_ip": "23.47.50.180", "src_port": 49752, "dst_port": 443, "tcp_stream": 228, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "img-prod-cms-rt-microsoft-com.akamaized.net", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-e11943405b183c602c34c60c", "kind": "tls_client_hello", "frame_number": 5550, "timestamp_epoch": "1634913288.311396000", "src_ip": "10.10.22.157", "dst_ip": "52.185.211.133", "src_port": 49742, "dst_port": 443, "tcp_stream": 229, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-1730c533f404d34bd111e688", "kind": "tls_client_hello", "frame_number": 5577, "timestamp_epoch": "1634913292.407655000", "src_ip": "10.10.22.156", "dst_ip": "204.79.197.200", "src_port": 49753, "dst_port": 443, "tcp_stream": 230, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-7cbb5df0e9a4d48d558f224f", "kind": "tls_client_hello", "frame_number": 5609, "timestamp_epoch": "1634913293.441652000", "src_ip": "10.10.22.156", "dst_ip": "40.90.64.59", "src_port": 49754, "dst_port": 443, "tcp_stream": 231, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "pti.store.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-081d6ba5307114f382218a9b", "kind": "tls_client_hello", "frame_number": 6231, "timestamp_epoch": "1634913346.147147000", "src_ip": "10.10.22.158", "dst_ip": "13.107.42.16", "src_port": 49751, "dst_port": 443, "tcp_stream": 239, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "config.edge.skype.com", "tls.handshake.ja3": "cd08e31494f9531f560d64c695473da9" } }, { "event_id": "evt-3a078f8c62f70305c94aaf76", "kind": "tls_client_hello", "frame_number": 6233, "timestamp_epoch": "1634913346.150945000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.219", "src_port": 49752, "dst_port": 443, "tcp_stream": 240, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "edge.microsoft.com", "tls.handshake.ja3": "cd08e31494f9531f560d64c695473da9" } }, { "event_id": "evt-b086ff0d87cb07f05888332b", "kind": "tls_client_hello", "frame_number": 6278, "timestamp_epoch": "1634913346.385875000", "src_ip": "10.10.22.158", "dst_ip": "40.126.28.23", "src_port": 49753, "dst_port": 443, "tcp_stream": 241, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-38c099dc2abd2028eb2bebfe", "kind": "tls_client_hello", "frame_number": 6294, "timestamp_epoch": "1634913346.481890000", "src_ip": "10.10.22.158", "dst_ip": "52.232.226.150", "src_port": 49754, "dst_port": 443, "tcp_stream": 242, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "edge.activity.windows.com", "tls.handshake.ja3": "cd08e31494f9531f560d64c695473da9" } }, { "event_id": "evt-0d29241b61e241eff880540c", "kind": "tls_client_hello", "frame_number": 6326, "timestamp_epoch": "1634913346.593116000", "src_ip": "10.10.22.158", "dst_ip": "104.21.32.95", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "pingosip.top", "tls.handshake.ja3": "29a54baac595d45c6a62225f7cde467b" } }, { "event_id": "evt-0b65288926d1247876692670", "kind": "tls_client_hello", "frame_number": 6400, "timestamp_epoch": "1634913347.696545000", "src_ip": "10.10.22.158", "dst_ip": "35.190.80.1", "src_port": 49755, "dst_port": 443, "tcp_stream": 243, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "a.nel.cloudflare.com", "tls.handshake.ja3": "cd08e31494f9531f560d64c695473da9" } }, { "event_id": "evt-b5effcfd58a7c78a6f0b2f29", "kind": "tls_client_hello", "frame_number": 6448, "timestamp_epoch": "1634913349.127511000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.219", "src_port": 49756, "dst_port": 443, "tcp_stream": 244, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "edge.microsoft.com", "tls.handshake.ja3": "cd08e31494f9531f560d64c695473da9" } }, { "event_id": "evt-4b9b69766b2a3507c79eb02f", "kind": "tls_client_hello", "frame_number": 6573, "timestamp_epoch": "1634913359.528244000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49757, "dst_port": 443, "tcp_stream": 245, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-96b36cc3001f8e0a7095e0cc", "kind": "tls_client_hello", "frame_number": 6672, "timestamp_epoch": "1634913382.839654000", "src_ip": "10.10.22.157", "dst_ip": "13.69.239.72", "src_port": 49744, "dst_port": 443, "tcp_stream": 246, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-0c06d31390b0e67c2fa67dcf", "kind": "tls_client_hello", "frame_number": 6710, "timestamp_epoch": "1634913385.195104000", "src_ip": "10.10.22.157", "dst_ip": "20.189.173.7", "src_port": 49745, "dst_port": 443, "tcp_stream": 247, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-e12fa5075b8c1004bbd0df94", "kind": "tls_client_hello", "frame_number": 7221, "timestamp_epoch": "1634913413.058572000", "src_ip": "10.10.22.156", "dst_ip": "40.126.29.5", "src_port": 49765, "dst_port": 443, "tcp_stream": 253, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9d6434b77a1a0e40ff26e018", "kind": "tls_client_hello", "frame_number": 7321, "timestamp_epoch": "1634913422.955558000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 49767, "dst_port": 443, "tcp_stream": 255, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-1b9be17aaae3e387ff1b9def", "kind": "tls_client_hello", "frame_number": 10716, "timestamp_epoch": "1634913445.874969000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 49770, "dst_port": 443, "tcp_stream": 258, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-62d17d5f0a2e1fbf033cd6d4", "kind": "tls_client_hello", "frame_number": 10785, "timestamp_epoch": "1634913476.914835000", "src_ip": "10.10.22.158", "dst_ip": "52.182.143.210", "src_port": 49759, "dst_port": 443, "tcp_stream": 259, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-db4548dc858f365766725076", "kind": "tls_client_hello", "frame_number": 10821, "timestamp_epoch": "1634913479.081253000", "src_ip": "10.10.22.156", "dst_ip": "52.109.8.20", "src_port": 49771, "dst_port": 443, "tcp_stream": 260, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "nexusrules.officeapps.live.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-09cde5158be25f16fdfdd881", "kind": "tls_client_hello", "frame_number": 10937, "timestamp_epoch": "1634913576.100868000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49760, "dst_port": 443, "tcp_stream": 261, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-4b03737316ebc72c71d7cb05", "kind": "tls_client_hello", "frame_number": 10971, "timestamp_epoch": "1634913583.175376000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 49772, "dst_port": 443, "tcp_stream": 262, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-f28e629a69e1565ee40ad797", "kind": "tls_client_hello", "frame_number": 10975, "timestamp_epoch": "1634913583.229531000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 49773, "dst_port": 443, "tcp_stream": 263, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "self.events.data.microsoft.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-0c4a8be7ddbc56d31fb5aa2f", "kind": "tls_client_hello", "frame_number": 11042, "timestamp_epoch": "1634913608.762943000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49761, "dst_port": 443, "tcp_stream": 264, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-a78c9806eed09f09ebc24893", "kind": "tls_client_hello", "frame_number": 11098, "timestamp_epoch": "1634913641.402723000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49762, "dst_port": 443, "tcp_stream": 266, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-7692130eebd2c61729859335", "kind": "tls_client_hello", "frame_number": 11168, "timestamp_epoch": "1634913661.857264000", "src_ip": "10.10.22.157", "dst_ip": "20.83.81.162", "src_port": 49752, "dst_port": 443, "tcp_stream": 272, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe2cr.update.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-3eca0b70ab3060bc26dafd9d", "kind": "tls_client_hello", "frame_number": 11191, "timestamp_epoch": "1634913662.314495000", "src_ip": "10.10.22.157", "dst_ip": "104.46.162.226", "src_port": 49753, "dst_port": 443, "tcp_stream": 273, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-fdf3eae715291bbc6becd6d5", "kind": "tls_client_hello", "frame_number": 11323, "timestamp_epoch": "1634913666.105554000", "src_ip": "10.10.22.157", "dst_ip": "104.46.162.226", "src_port": 49755, "dst_port": 443, "tcp_stream": 275, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-ee7424e9b10fdc2edb9f68f0", "kind": "tls_client_hello", "frame_number": 11354, "timestamp_epoch": "1634913667.961386000", "src_ip": "10.10.22.157", "dst_ip": "52.242.97.97", "src_port": 49757, "dst_port": 443, "tcp_stream": 277, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe3cr.delivery.mp.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-30ebaeb4cf9787b43e0bfa99", "kind": "tls_client_hello", "frame_number": 11413, "timestamp_epoch": "1634913671.325172000", "src_ip": "10.10.22.157", "dst_ip": "104.46.162.226", "src_port": 49758, "dst_port": 443, "tcp_stream": 278, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-25dfe8feee18cabb8644a9ee", "kind": "tls_client_hello", "frame_number": 11449, "timestamp_epoch": "1634913674.196253000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49763, "dst_port": 443, "tcp_stream": 280, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-b6b6508bb55f14da34198d21", "kind": "tls_client_hello", "frame_number": 11492, "timestamp_epoch": "1634913684.263513000", "src_ip": "10.10.22.158", "dst_ip": "40.90.64.61", "src_port": 49764, "dst_port": 443, "tcp_stream": 283, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "pti.store.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-63a009068717e84554857562", "kind": "tls_client_hello", "frame_number": 11577, "timestamp_epoch": "1634913708.624194000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49765, "dst_port": 443, "tcp_stream": 289, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-bb4e4bb0cc18bb91f4dfb638", "kind": "tls_client_hello", "frame_number": 11625, "timestamp_epoch": "1634913722.773922000", "src_ip": "10.10.22.156", "dst_ip": "20.83.81.162", "src_port": 49774, "dst_port": 443, "tcp_stream": 293, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe2cr.update.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-2983ee244196f95ef23a728b", "kind": "tls_client_hello", "frame_number": 11637, "timestamp_epoch": "1634913722.933646000", "src_ip": "10.10.22.156", "dst_ip": "104.208.16.88", "src_port": 49775, "dst_port": 443, "tcp_stream": 294, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-0c5d4d369c079bf40c73d219", "kind": "tls_client_hello", "frame_number": 11781, "timestamp_epoch": "1634913725.209566000", "src_ip": "10.10.22.156", "dst_ip": "52.152.108.96", "src_port": 49776, "dst_port": 443, "tcp_stream": 296, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe3cr.delivery.mp.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-c4da16f691029b01bd71ac45", "kind": "tls_client_hello", "frame_number": 11839, "timestamp_epoch": "1634913726.400536000", "src_ip": "10.10.22.156", "dst_ip": "104.208.16.88", "src_port": 49777, "dst_port": 443, "tcp_stream": 297, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-ca4ddf31fb300242f00dfee0", "kind": "tls_client_hello", "frame_number": 12079, "timestamp_epoch": "1634913732.408590000", "src_ip": "10.10.22.156", "dst_ip": "104.208.16.88", "src_port": 49778, "dst_port": 443, "tcp_stream": 299, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-1a483f77de5189db1389a5d9", "kind": "tls_client_hello", "frame_number": 13326, "timestamp_epoch": "1634913753.697005000", "src_ip": "10.10.22.158", "dst_ip": "20.83.81.162", "src_port": 49766, "dst_port": 443, "tcp_stream": 305, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe2cr.update.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-22d120e128cb009eeee72ecb", "kind": "tls_client_hello", "frame_number": 13371, "timestamp_epoch": "1634913754.344756000", "src_ip": "10.10.22.158", "dst_ip": "13.89.179.10", "src_port": 49767, "dst_port": 443, "tcp_stream": 306, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-c359741ec61a42f56257ee13", "kind": "tls_client_hello", "frame_number": 13637, "timestamp_epoch": "1634913756.800112000", "src_ip": "10.10.22.158", "dst_ip": "52.242.97.97", "src_port": 49768, "dst_port": 443, "tcp_stream": 308, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "fe3cr.delivery.mp.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-05c3f24ea4c88a5b0046a19c", "kind": "tls_client_hello", "frame_number": 13710, "timestamp_epoch": "1634913757.855006000", "src_ip": "10.10.22.158", "dst_ip": "13.89.179.10", "src_port": 49769, "dst_port": 443, "tcp_stream": 309, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-0acb53a23fa2ccd65faa7d83", "kind": "tls_client_hello", "frame_number": 13773, "timestamp_epoch": "1634913759.777086000", "src_ip": "10.10.22.158", "dst_ip": "13.89.179.10", "src_port": 49770, "dst_port": 443, "tcp_stream": 311, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-a285fc9344d820a3b060aced", "kind": "tls_client_hello", "frame_number": 16333, "timestamp_epoch": "1634913884.673915000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49772, "dst_port": 443, "tcp_stream": 345, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-dd5ff6cecaa7e97ea39e2247", "kind": "tls_client_hello", "frame_number": 16359, "timestamp_epoch": "1634913885.112277000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49775, "dst_port": 443, "tcp_stream": 346, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-d89de72933c406b0c9b1ec31", "kind": "tls_client_hello", "frame_number": 17278, "timestamp_epoch": "1634913889.341157000", "src_ip": "10.10.22.158", "dst_ip": "104.215.148.63", "src_port": 49779, "dst_port": 443, "tcp_stream": 350, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-3e076de94118015d828e17bd", "kind": "tls_client_hello", "frame_number": 17313, "timestamp_epoch": "1634913890.539503000", "src_ip": "10.10.22.158", "dst_ip": "23.47.169.181", "src_port": 49780, "dst_port": 443, "tcp_stream": 352, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-f4ad0771fc7f546a01185662", "kind": "tls_client_hello", "frame_number": 17413, "timestamp_epoch": "1634913919.116053000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49781, "dst_port": 443, "tcp_stream": 360, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-c7b304a527cc6b2fd37144de", "kind": "tls_client_hello", "frame_number": 17499, "timestamp_epoch": "1634913938.918134000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49782, "dst_port": 443, "tcp_stream": 368, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-5cc5961e76ea7c9d89e844d6", "kind": "tls_client_hello", "frame_number": 17598, "timestamp_epoch": "1634913956.159803000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49783, "dst_port": 443, "tcp_stream": 375, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-8edce7984b7689b7025d1745", "kind": "tls_client_hello", "frame_number": 17661, "timestamp_epoch": "1634913977.505485000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49784, "dst_port": 443, "tcp_stream": 381, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-615da0d90c626a2a20a2bdb4", "kind": "tls_client_hello", "frame_number": 17726, "timestamp_epoch": "1634913991.945984000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49785, "dst_port": 443, "tcp_stream": 387, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-e313cb803f08ffa58d4a298b", "kind": "tls_client_hello", "frame_number": 17847, "timestamp_epoch": "1634914016.025401000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49786, "dst_port": 443, "tcp_stream": 394, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-3bfd974f5e59a2c7c23bf5cb", "kind": "tls_client_hello", "frame_number": 17903, "timestamp_epoch": "1634914033.833405000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49787, "dst_port": 443, "tcp_stream": 396, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-886d16340f065abb3e571947", "kind": "tls_client_hello", "frame_number": 17973, "timestamp_epoch": "1634914046.554376000", "src_ip": "10.10.22.156", "dst_ip": "140.82.49.12", "src_port": 49792, "dst_port": 443, "tcp_stream": 398, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-e591bc3975f86b524a627ea4", "kind": "tls_client_hello", "frame_number": 17993, "timestamp_epoch": "1634914048.248941000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49789, "dst_port": 443, "tcp_stream": 399, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-96d4cf9645bee257de05a135", "kind": "tls_client_hello", "frame_number": 18006, "timestamp_epoch": "1634914048.475056000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49790, "dst_port": 443, "tcp_stream": 400, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-5d6b438f32f523b422e48748", "kind": "tls_client_hello", "frame_number": 19051, "timestamp_epoch": "1634914056.729387000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49791, "dst_port": 443, "tcp_stream": 401, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-90129d18f6caef312bb1c52f", "kind": "tls_client_hello", "frame_number": 19694, "timestamp_epoch": "1634914071.007343000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49792, "dst_port": 443, "tcp_stream": 406, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-175fe28abed9d4ff921242c2", "kind": "tls_client_hello", "frame_number": 20550, "timestamp_epoch": "1634914098.352224000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49793, "dst_port": 443, "tcp_stream": 416, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-7aa57b7cc83a5b9fe9f0fa91", "kind": "tls_client_hello", "frame_number": 20624, "timestamp_epoch": "1634914117.697808000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49794, "dst_port": 443, "tcp_stream": 421, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-6cc0939fbdc7f7963a447e69", "kind": "tls_client_hello", "frame_number": 20707, "timestamp_epoch": "1634914140.904772000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49795, "dst_port": 443, "tcp_stream": 430, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-2f8d24e1ac5a79a7d4eeb135", "kind": "tls_client_hello", "frame_number": 20751, "timestamp_epoch": "1634914158.803667000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49796, "dst_port": 443, "tcp_stream": 434, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-754b3d5bd77fd418bec602bc", "kind": "tls_client_hello", "frame_number": 20782, "timestamp_epoch": "1634914168.667953000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49797, "dst_port": 443, "tcp_stream": 436, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-0ba495934d0b501c3cc70d33", "kind": "tls_client_hello", "frame_number": 20803, "timestamp_epoch": "1634914169.006667000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49798, "dst_port": 443, "tcp_stream": 437, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-8dd9fa966eeaed9080368790", "kind": "tls_client_hello", "frame_number": 21678, "timestamp_epoch": "1634914174.741243000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49799, "dst_port": 443, "tcp_stream": 438, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-16b59455941462e16fcbb55a", "kind": "tls_client_hello", "frame_number": 22318, "timestamp_epoch": "1634914193.299379000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49800, "dst_port": 443, "tcp_stream": 442, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-2f7b5fcf5ecb43adda75af50", "kind": "tls_client_hello", "frame_number": 22373, "timestamp_epoch": "1634914207.626227000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49801, "dst_port": 443, "tcp_stream": 447, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-1b748736fa15dd3b6f541a9f", "kind": "tls_client_hello", "frame_number": 22469, "timestamp_epoch": "1634914229.098963000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49802, "dst_port": 443, "tcp_stream": 454, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-c4950bc72b39961d54387351", "kind": "tls_client_hello", "frame_number": 22552, "timestamp_epoch": "1634914252.564983000", "src_ip": "10.10.22.158", "dst_ip": "107.161.180.34", "src_port": 49803, "dst_port": 443, "tcp_stream": 461, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.calacatta.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-b24e163ba33a9ed75582ac30", "kind": "tls_client_hello", "frame_number": 22630, "timestamp_epoch": "1634914275.675437000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49804, "dst_port": 443, "tcp_stream": 468, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-3aa28caad51d5f69c3fdf0a6", "kind": "tls_client_hello", "frame_number": 22684, "timestamp_epoch": "1634914288.741971000", "src_ip": "10.10.22.158", "dst_ip": "83.223.99.191", "src_port": 49805, "dst_port": 443, "tcp_stream": 473, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "redinnovations.co.uk", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-7cfb5b4228bc04b97dc85cb8", "kind": "tls_client_hello", "frame_number": 22784, "timestamp_epoch": "1634914321.479209000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49806, "dst_port": 443, "tcp_stream": 483, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-2fd754ba2faa1987e2ba8cc2", "kind": "tls_client_hello", "frame_number": 22968, "timestamp_epoch": "1634914370.838600000", "src_ip": "10.10.22.158", "dst_ip": "198.136.61.225", "src_port": 49807, "dst_port": 443, "tcp_stream": 507, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "tackleadvisors.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-b07329559339f781e7d19085", "kind": "tls_client_hello", "frame_number": 23048, "timestamp_epoch": "1634914403.060523000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49808, "dst_port": 443, "tcp_stream": 516, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-80c2504e2999877bbfb627bd", "kind": "tls_client_hello", "frame_number": 23158, "timestamp_epoch": "1634914435.503902000", "src_ip": "10.10.22.158", "dst_ip": "198.50.182.64", "src_port": 49809, "dst_port": 443, "tcp_stream": 526, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.oftheearth.ca", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-d5162a11fac8a079ceabc00d", "kind": "tls_client_hello", "frame_number": 23278, "timestamp_epoch": "1634914472.073751000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49810, "dst_port": 443, "tcp_stream": 537, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-357bb4e69752cf092244ec4e", "kind": "tls_client_hello", "frame_number": 23301, "timestamp_epoch": "1634914479.354747000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49811, "dst_port": 443, "tcp_stream": 539, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-783c33c2cc7ac86537e337e9", "kind": "tls_client_hello", "frame_number": 23337, "timestamp_epoch": "1634914487.663632000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49812, "dst_port": 443, "tcp_stream": 543, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-ad47379f7c561eda54397bef", "kind": "tls_client_hello", "frame_number": 23560, "timestamp_epoch": "1634914507.579332000", "src_ip": "10.10.22.158", "dst_ip": "34.117.59.81", "src_port": 49817, "dst_port": 443, "tcp_stream": 554, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "myexternalip.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-01d4d64e871c11fe14c5ac67", "kind": "tls_client_hello", "frame_number": 23583, "timestamp_epoch": "1634914508.249242000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49818, "dst_port": 443, "tcp_stream": 555, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-4a27a57a3befb34459a60557", "kind": "tls_client_hello", "frame_number": 24503, "timestamp_epoch": "1634914814.002945000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49819, "dst_port": 443, "tcp_stream": 684, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-18f9f2b7e7f6b67a28bad0c1", "kind": "tls_client_hello", "frame_number": 24875, "timestamp_epoch": "1634914942.293169000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49820, "dst_port": 443, "tcp_stream": 737, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-71c5acd079a2166e35e4db76", "kind": "tls_client_hello", "frame_number": 24896, "timestamp_epoch": "1634914942.547094000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49821, "dst_port": 443, "tcp_stream": 738, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-7cd8a472799a56d7701f2ae7", "kind": "tls_client_hello", "frame_number": 26007, "timestamp_epoch": "1634914982.699683000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49858, "dst_port": 443, "tcp_stream": 742, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-fdce7c5d72c1125a27f550d7", "kind": "tls_client_hello", "frame_number": 26155, "timestamp_epoch": "1634914986.312129000", "src_ip": "10.10.22.158", "dst_ip": "40.126.29.11", "src_port": 49829, "dst_port": 443, "tcp_stream": 751, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-14e2206012e1c67deadca6e8", "kind": "tls_client_hello", "frame_number": 26206, "timestamp_epoch": "1634914997.442247000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49861, "dst_port": 443, "tcp_stream": 752, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-a068447bc343ca7a8f235fb3", "kind": "tls_client_hello", "frame_number": 26383, "timestamp_epoch": "1634914999.151076000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49862, "dst_port": 443, "tcp_stream": 753, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-1d7eb3f5e65b1fda14de05b3", "kind": "tls_client_hello", "frame_number": 29056, "timestamp_epoch": "1634915006.132318000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49863, "dst_port": 443, "tcp_stream": 754, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-693683379f3ad73bd3e873f3", "kind": "tls_client_hello", "frame_number": 29184, "timestamp_epoch": "1634915013.249336000", "src_ip": "10.10.22.157", "dst_ip": "40.126.29.15", "src_port": 49988, "dst_port": 443, "tcp_stream": 761, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-58fe14ff603a2ecf0daa9420", "kind": "tls_client_hello", "frame_number": 29347, "timestamp_epoch": "1634915040.790506000", "src_ip": "10.10.22.156", "dst_ip": "40.126.29.12", "src_port": 49870, "dst_port": 443, "tcp_stream": 768, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-aa25fb31af4e3ba2db88b5a7", "kind": "tls_client_hello", "frame_number": 29436, "timestamp_epoch": "1634915118.024017000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49830, "dst_port": 443, "tcp_stream": 769, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-955e032027413a6c2590a3cd", "kind": "tls_client_hello", "frame_number": 29459, "timestamp_epoch": "1634915137.454311000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49871, "dst_port": 443, "tcp_stream": 770, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-79cd06508d0eaf4619401b68", "kind": "tls_client_hello", "frame_number": 29948, "timestamp_epoch": "1634915146.526118000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49872, "dst_port": 443, "tcp_stream": 771, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-7b9f38d2dfe16bd055f24c8c", "kind": "tls_client_hello", "frame_number": 30065, "timestamp_epoch": "1634915197.755998000", "src_ip": "10.10.22.156", "dst_ip": "52.109.76.31", "src_port": 49873, "dst_port": 443, "tcp_stream": 779, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "nexusrules.officeapps.live.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-25cc9a577b09130a0126b9ec", "kind": "tls_client_hello", "frame_number": 30069, "timestamp_epoch": "1634915197.830866000", "src_ip": "10.10.22.156", "dst_ip": "52.109.2.1", "src_port": 49874, "dst_port": 443, "tcp_stream": 780, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "odc.officeapps.live.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-038d0926b8a2cea021608277", "kind": "tls_client_hello", "frame_number": 30115, "timestamp_epoch": "1634915201.676161000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49875, "dst_port": 443, "tcp_stream": 782, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-25bff3224afe452319a5b080", "kind": "tls_client_hello", "frame_number": 30136, "timestamp_epoch": "1634915202.336301000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49876, "dst_port": 443, "tcp_stream": 783, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-6277110b9b3bc05d4f5aa557", "kind": "tls_client_hello", "frame_number": 30161, "timestamp_epoch": "1634915204.479552000", "src_ip": "10.10.22.156", "dst_ip": "52.96.55.242", "src_port": 49877, "dst_port": 443, "tcp_stream": 785, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "outlook.office365.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-b9fe40dcb4ffeaa94658254f", "kind": "tls_client_hello", "frame_number": 30186, "timestamp_epoch": "1634915205.550487000", "src_ip": "10.10.22.156", "dst_ip": "20.190.157.11", "src_port": 49878, "dst_port": 443, "tcp_stream": 786, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-86dab6b3acec8ebc2bca466a", "kind": "tls_client_hello", "frame_number": 30263, "timestamp_epoch": "1634915207.224235000", "src_ip": "10.10.22.156", "dst_ip": "37.252.0.102", "src_port": 49879, "dst_port": 443, "tcp_stream": 787, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-9c369a2b3294182da8d8893a", "kind": "tls_client_hello", "frame_number": 30288, "timestamp_epoch": "1634915208.978042000", "src_ip": "10.10.22.156", "dst_ip": "37.252.0.102", "src_port": 49880, "dst_port": 443, "tcp_stream": 789, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-a1744465435eb97e5aedc3ce", "kind": "tls_client_hello", "frame_number": 30789, "timestamp_epoch": "1634915254.426540000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49831, "dst_port": 443, "tcp_stream": 800, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-bedae9242eb11750d92853b2", "kind": "tls_client_hello", "frame_number": 30810, "timestamp_epoch": "1634915254.704187000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49832, "dst_port": 443, "tcp_stream": 801, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-d8577637cb8ecfe44c557880", "kind": "tls_client_hello", "frame_number": 31460, "timestamp_epoch": "1634915261.837766000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49881, "dst_port": 443, "tcp_stream": 804, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-5237493f4e1eafaf12ca2eed", "kind": "tls_client_hello", "frame_number": 31699, "timestamp_epoch": "1634915263.539918000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49882, "dst_port": 443, "tcp_stream": 805, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-d48a94a1ff288e4039fc463b", "kind": "tls_client_hello", "frame_number": 31735, "timestamp_epoch": "1634915266.920294000", "src_ip": "10.10.22.156", "dst_ip": "72.247.207.22", "src_port": 49883, "dst_port": 443, "tcp_stream": 807, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.openssl.org", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-863d0901dddee05f7a0fd488", "kind": "tls_client_hello", "frame_number": 42947, "timestamp_epoch": "1634915298.770161000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49886, "dst_port": 443, "tcp_stream": 816, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-91b8405cf08c08eb1804de75", "kind": "tls_client_hello", "frame_number": 42968, "timestamp_epoch": "1634915298.943065000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49885, "dst_port": 443, "tcp_stream": 815, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-8d9a29c4b578e7daa5a21064", "kind": "tls_client_hello", "frame_number": 42970, "timestamp_epoch": "1634915298.943203000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49887, "dst_port": 443, "tcp_stream": 817, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a7842f8badf05029276e2549", "kind": "tls_client_hello", "frame_number": 43235, "timestamp_epoch": "1634915326.079508000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49892, "dst_port": 443, "tcp_stream": 829, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-8c675b624d152dfb3d2d34aa", "kind": "tls_client_hello", "frame_number": 44273, "timestamp_epoch": "1634915329.217753000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49893, "dst_port": 443, "tcp_stream": 830, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-01fa3bf2b14f11e4c9f56843", "kind": "tls_client_hello", "frame_number": 44329, "timestamp_epoch": "1634915332.518484000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49896, "dst_port": 443, "tcp_stream": 834, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-761ec92ff4d2b669c1c71a1b", "kind": "tls_client_hello", "frame_number": 44351, "timestamp_epoch": "1634915332.695793000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49894, "dst_port": 443, "tcp_stream": 832, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1bcb594b37a383cf9714ceb0", "kind": "tls_client_hello", "frame_number": 44353, "timestamp_epoch": "1634915332.695921000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49895, "dst_port": 443, "tcp_stream": 833, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-944a83a69d8abfeb8c360468", "kind": "tls_client_hello", "frame_number": 44637, "timestamp_epoch": "1634915347.404007000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49902, "dst_port": 443, "tcp_stream": 843, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ca4a5eb94f083e2e3405d49e", "kind": "tls_client_hello", "frame_number": 44658, "timestamp_epoch": "1634915347.753667000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49903, "dst_port": 443, "tcp_stream": 844, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-4cf23a5eda09ae86e6a2e679", "kind": "tls_client_hello", "frame_number": 44660, "timestamp_epoch": "1634915347.753847000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49904, "dst_port": 443, "tcp_stream": 845, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-bbaaed4f695723052c496d0f", "kind": "tls_client_hello", "frame_number": 44662, "timestamp_epoch": "1634915347.754206000", "src_ip": "10.10.22.156", "dst_ip": "54.243.250.193", "src_port": 49905, "dst_port": 443, "tcp_stream": 846, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-2f55f5c73eb2beaf2ca4dc98", "kind": "tls_client_hello", "frame_number": 45023, "timestamp_epoch": "1634915357.827716000", "src_ip": "10.10.22.158", "dst_ip": "40.126.28.22", "src_port": 49837, "dst_port": 443, "tcp_stream": 860, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-ada7782e6ab6ea50bc2f001c", "kind": "tls_client_hello", "frame_number": 45140, "timestamp_epoch": "1634915359.804946000", "src_ip": "10.10.22.157", "dst_ip": "40.126.28.12", "src_port": 50036, "dst_port": 443, "tcp_stream": 865, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-1db86f05ce344940c6a7c5b3", "kind": "tls_client_hello", "frame_number": 45166, "timestamp_epoch": "1634915360.499781000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 49911, "dst_port": 25, "tcp_stream": 854, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3e198eff3e3462f5882fd0fb", "kind": "tls_client_hello", "frame_number": 45403, "timestamp_epoch": "1634915375.511044000", "src_ip": "10.10.22.156", "dst_ip": "23.21.76.7", "src_port": 49915, "dst_port": 443, "tcp_stream": 873, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1165c555bf61507e53c60ff4", "kind": "tls_client_hello", "frame_number": 45405, "timestamp_epoch": "1634915375.511387000", "src_ip": "10.10.22.156", "dst_ip": "23.21.76.7", "src_port": 49916, "dst_port": 443, "tcp_stream": 874, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-8377e6abb356ce29f391db62", "kind": "tls_client_hello", "frame_number": 45449, "timestamp_epoch": "1634915375.686710000", "src_ip": "10.10.22.156", "dst_ip": "23.21.76.7", "src_port": 49917, "dst_port": 443, "tcp_stream": 875, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-85a15dbc155a30287c53b52d", "kind": "tls_client_hello", "frame_number": 45451, "timestamp_epoch": "1634915375.686918000", "src_ip": "10.10.22.156", "dst_ip": "23.21.76.7", "src_port": 49918, "dst_port": 443, "tcp_stream": 876, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-febc80ac46aea007927f2eed", "kind": "tls_client_hello", "frame_number": 45519, "timestamp_epoch": "1634915376.311344000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 49912, "dst_port": 25, "tcp_stream": 868, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3063880b32a2f33c38cdc7d6", "kind": "tls_client_hello", "frame_number": 45520, "timestamp_epoch": "1634915376.311423000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 49913, "dst_port": 25, "tcp_stream": 870, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d9697dd49081a8d50af03c63", "kind": "tls_client_hello", "frame_number": 45554, "timestamp_epoch": "1634915376.683405000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49914, "dst_port": 25, "tcp_stream": 872, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.tetranergy.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-f058fb2963d248b340608350", "kind": "tls_client_hello", "frame_number": 45826, "timestamp_epoch": "1634915390.325813000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49919, "dst_port": 443, "tcp_stream": 880, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-ece29df1032fa4bde5b2c1f8", "kind": "tls_client_hello", "frame_number": 46725, "timestamp_epoch": "1634915392.799649000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49920, "dst_port": 443, "tcp_stream": 882, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-d3f67ff0ada39b1e69bfe32e", "kind": "tls_client_hello", "frame_number": 46866, "timestamp_epoch": "1634915410.892566000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49921, "dst_port": 443, "tcp_stream": 887, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-e288792a8eec2e74751b3675", "kind": "tls_client_hello", "frame_number": 46887, "timestamp_epoch": "1634915412.735900000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49922, "dst_port": 443, "tcp_stream": 888, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-cc4861d9e9396f45dd4eaa22", "kind": "tls_client_hello", "frame_number": 46983, "timestamp_epoch": "1634915427.118397000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49838, "dst_port": 443, "tcp_stream": 893, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-6ad6e4f776dff24976c8b5cc", "kind": "tls_client_hello", "frame_number": 47027, "timestamp_epoch": "1634915428.590683000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.210", "src_port": 49923, "dst_port": 25, "tcp_stream": 894, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-7eca9fdefd674a15583275c6", "kind": "tls_client_hello", "frame_number": 47120, "timestamp_epoch": "1634915438.426680000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49839, "dst_port": 443, "tcp_stream": 897, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-0e34ebb2bc6b332fa0d55806", "kind": "tls_client_hello", "frame_number": 47211, "timestamp_epoch": "1634915454.539323000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49924, "dst_port": 443, "tcp_stream": 902, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-b55c316d3c166716024478d4", "kind": "tls_client_hello", "frame_number": 48255, "timestamp_epoch": "1634915457.201926000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49925, "dst_port": 443, "tcp_stream": 903, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-9cb65495fa0bbd0ada962175", "kind": "tls_client_hello", "frame_number": 48407, "timestamp_epoch": "1634915472.428457000", "src_ip": "10.10.22.156", "dst_ip": "40.126.28.11", "src_port": 49930, "dst_port": 443, "tcp_stream": 912, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.microsoftonline.com", "tls.handshake.ja3": "6271f898ce5be7dd52b0fc260d0662b3" } }, { "event_id": "evt-9b6b1beb6a1dfc9867e24b73", "kind": "tls_client_hello", "frame_number": 48454, "timestamp_epoch": "1634915480.377120000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49840, "dst_port": 443, "tcp_stream": 915, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-80a6b5c52f629bacba83b95b", "kind": "tls_client_hello", "frame_number": 48472, "timestamp_epoch": "1634915480.625984000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49841, "dst_port": 443, "tcp_stream": 916, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-0462d4397af1a47650ebd8fa", "kind": "tls_client_hello", "frame_number": 49063, "timestamp_epoch": "1634915487.245943000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49931, "dst_port": 443, "tcp_stream": 918, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-e2f1770ce81822858ac32f0d", "kind": "tls_client_hello", "frame_number": 49085, "timestamp_epoch": "1634915487.435837000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49932, "dst_port": 443, "tcp_stream": 919, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ce51cb26a1851c6606728ea2", "kind": "tls_client_hello", "frame_number": 49087, "timestamp_epoch": "1634915487.436012000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49933, "dst_port": 443, "tcp_stream": 920, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1991a20ad66d5d02c62e3345", "kind": "tls_client_hello", "frame_number": 49089, "timestamp_epoch": "1634915487.436219000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49934, "dst_port": 443, "tcp_stream": 921, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-f451e2d5185c0b938eb4a849", "kind": "tls_client_hello", "frame_number": 49208, "timestamp_epoch": "1634915488.634268000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49935, "dst_port": 443, "tcp_stream": 923, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1b2b744fdac6dd1f832130b0", "kind": "tls_client_hello", "frame_number": 49235, "timestamp_epoch": "1634915488.899714000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49936, "dst_port": 443, "tcp_stream": 924, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0ea9ecf0ecc44e0c4d1852ab", "kind": "tls_client_hello", "frame_number": 49237, "timestamp_epoch": "1634915488.899871000", "src_ip": "10.10.22.156", "dst_ip": "54.243.29.214", "src_port": 49937, "dst_port": 443, "tcp_stream": 925, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c3d924585b7bb10c8be53307", "kind": "tls_client_hello", "frame_number": 49429, "timestamp_epoch": "1634915494.474794000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49939, "dst_port": 25, "tcp_stream": 928, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.isoldry.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-abc0341a302b34bcaf97653d", "kind": "tls_client_hello", "frame_number": 49551, "timestamp_epoch": "1634915514.765717000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49940, "dst_port": 443, "tcp_stream": 933, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-b9a4bd4daf1b090d35b0bf23", "kind": "tls_client_hello", "frame_number": 50853, "timestamp_epoch": "1634915520.045640000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49941, "dst_port": 443, "tcp_stream": 935, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-68275f76f23874201c7c8107", "kind": "tls_client_hello", "frame_number": 50946, "timestamp_epoch": "1634915531.672705000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49942, "dst_port": 25, "tcp_stream": 938, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.anberman.es", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c03d85b9ef3257420a6920ec", "kind": "tls_client_hello", "frame_number": 51127, "timestamp_epoch": "1634915543.868091000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49943, "dst_port": 443, "tcp_stream": 942, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9e2b346e60489eac8306a854", "kind": "tls_client_hello", "frame_number": 51149, "timestamp_epoch": "1634915544.057236000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49944, "dst_port": 443, "tcp_stream": 943, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a3fc8dccbf63c0d26531413e", "kind": "tls_client_hello", "frame_number": 51151, "timestamp_epoch": "1634915544.057494000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49945, "dst_port": 443, "tcp_stream": 944, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-468846061791f9ca73921758", "kind": "tls_client_hello", "frame_number": 51153, "timestamp_epoch": "1634915544.057729000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49946, "dst_port": 443, "tcp_stream": 945, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-e2a8d990ad2a794eb0b0e73e", "kind": "tls_client_hello", "frame_number": 51155, "timestamp_epoch": "1634915544.057876000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49947, "dst_port": 443, "tcp_stream": 946, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-e74de70c1dd90f4d2d5d7c65", "kind": "tls_client_hello", "frame_number": 51157, "timestamp_epoch": "1634915544.058177000", "src_ip": "10.10.22.156", "dst_ip": "50.17.218.95", "src_port": 49948, "dst_port": 443, "tcp_stream": 947, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "api.ipify.org", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a15743b3173d478747c53310", "kind": "tls_client_hello", "frame_number": 51375, "timestamp_epoch": "1634915545.445901000", "src_ip": "10.10.22.156", "dst_ip": "108.168.133.76", "src_port": 49949, "dst_port": 25, "tcp_stream": 948, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.qualityms.com.mx", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ae3463e2dacdd009b6c06560", "kind": "tls_client_hello", "frame_number": 51799, "timestamp_epoch": "1634915579.110351000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49959, "dst_port": 443, "tcp_stream": 966, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-7d5ccd864a21782707052185", "kind": "tls_client_hello", "frame_number": 52423, "timestamp_epoch": "1634915582.283873000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49960, "dst_port": 25, "tcp_stream": 967, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.kbcrawl.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-36173997f970d7ac725f5ae3", "kind": "tls_client_hello", "frame_number": 53112, "timestamp_epoch": "1634915600.679672000", "src_ip": "10.10.22.156", "dst_ip": "68.186.192.69", "src_port": 49961, "dst_port": 443, "tcp_stream": 969, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-371b6c6c6cc27b6db7060567", "kind": "tls_client_hello", "frame_number": 53129, "timestamp_epoch": "1634915602.438493000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49962, "dst_port": 443, "tcp_stream": 970, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-5e97e5a2b211140573fcedc9", "kind": "tls_client_hello", "frame_number": 53283, "timestamp_epoch": "1634915603.689262000", "src_ip": "10.10.22.156", "dst_ip": "201.137.10.225", "src_port": 49963, "dst_port": 443, "tcp_stream": 971, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-f4812475a9e3d8f27184b7a9", "kind": "tls_client_hello", "frame_number": 54015, "timestamp_epoch": "1634915622.535511000", "src_ip": "10.10.22.156", "dst_ip": "197.221.10.57", "src_port": 49965, "dst_port": 25, "tcp_stream": 973, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.debtmend.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-582638005a6680996d083e60", "kind": "tls_client_hello", "frame_number": 54119, "timestamp_epoch": "1634915627.685297000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49966, "dst_port": 25, "tcp_stream": 974, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.kbcrawl.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-33c931f5bc36ba3842052296", "kind": "tls_client_hello", "frame_number": 54231, "timestamp_epoch": "1634915631.569230000", "src_ip": "10.10.22.156", "dst_ip": "65.254.248.195", "src_port": 49968, "dst_port": 25, "tcp_stream": 976, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.nazarioconstruction.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c07bc5483c5b9c54c4557a92", "kind": "tls_client_hello", "frame_number": 54396, "timestamp_epoch": "1634915646.439950000", "src_ip": "10.10.22.156", "dst_ip": "217.11.242.15", "src_port": 49969, "dst_port": 25, "tcp_stream": 977, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mta-01.webnode.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-153e126d5e8b89d0ff93a5e1", "kind": "tls_client_hello", "frame_number": 54485, "timestamp_epoch": "1634915649.179773000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49971, "dst_port": 25, "tcp_stream": 979, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.akinao-lab.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3ef0d5ba892360a2e3cb1cfe", "kind": "tls_client_hello", "frame_number": 54629, "timestamp_epoch": "1634915657.178723000", "src_ip": "10.10.22.156", "dst_ip": "52.96.22.178", "src_port": 49972, "dst_port": 25, "tcp_stream": 980, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-aa57a1b80388d8d99fe0a5e7", "kind": "tls_client_hello", "frame_number": 54721, "timestamp_epoch": "1634915660.447273000", "src_ip": "10.10.22.156", "dst_ip": "52.96.22.178", "src_port": 49973, "dst_port": 25, "tcp_stream": 981, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0974e24384c61892b61c2671", "kind": "tls_client_hello", "frame_number": 54954, "timestamp_epoch": "1634915687.277778000", "src_ip": "10.10.22.156", "dst_ip": "40.97.121.18", "src_port": 49976, "dst_port": 25, "tcp_stream": 984, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0505f94a59340707b76d6b3c", "kind": "tls_client_hello", "frame_number": 55243, "timestamp_epoch": "1634915713.508518000", "src_ip": "10.10.22.156", "dst_ip": "70.39.150.220", "src_port": 49979, "dst_port": 25, "tcp_stream": 997, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "ultimatecuisinecatering.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1cb2de5ccce53d823726ef88", "kind": "tls_client_hello", "frame_number": 55344, "timestamp_epoch": "1634915718.294098000", "src_ip": "10.10.22.156", "dst_ip": "70.39.150.220", "src_port": 49981, "dst_port": 25, "tcp_stream": 1000, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "ultimatecuisinecatering.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9897216410a676143b6a2950", "kind": "tls_client_hello", "frame_number": 55582, "timestamp_epoch": "1634915746.695676000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.194", "src_port": 49983, "dst_port": 25, "tcp_stream": 1005, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a2a252febfc12fbdef9358de", "kind": "tls_client_hello", "frame_number": 55676, "timestamp_epoch": "1634915754.955197000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49842, "dst_port": 443, "tcp_stream": 1007, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-f279176b96600f2ddf59a7f1", "kind": "tls_client_hello", "frame_number": 55726, "timestamp_epoch": "1634915757.531919000", "src_ip": "10.10.22.157", "dst_ip": "13.89.178.27", "src_port": 50092, "dst_port": 443, "tcp_stream": 1009, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-336fb840d85b1b66bf96b429", "kind": "tls_client_hello", "frame_number": 55899, "timestamp_epoch": "1634915791.018857000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 49987, "dst_port": 25, "tcp_stream": 1012, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.lecmg.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-42892975f98c723cd3c6006d", "kind": "tls_client_hello", "frame_number": 56086, "timestamp_epoch": "1634915818.285323000", "src_ip": "10.10.22.156", "dst_ip": "20.50.80.210", "src_port": 49991, "dst_port": 443, "tcp_stream": 1017, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-cc3334af0f0985192e6520da", "kind": "tls_client_hello", "frame_number": 56181, "timestamp_epoch": "1634915826.871337000", "src_ip": "10.10.22.156", "dst_ip": "65.111.191.196", "src_port": 49993, "dst_port": 25, "tcp_stream": 1021, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail04.l4email.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3a6056043e3970cfe250d722", "kind": "tls_client_hello", "frame_number": 56393, "timestamp_epoch": "1634915849.252421000", "src_ip": "10.10.22.158", "dst_ip": "20.50.80.210", "src_port": 49844, "dst_port": 443, "tcp_stream": 1030, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-7d5f3bfa014bc4e313fdf3a0", "kind": "tls_client_hello", "frame_number": 56777, "timestamp_epoch": "1634915887.166702000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50005, "dst_port": 25, "tcp_stream": 1045, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.xenium-partners.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-030d6b61e87360200fc0d057", "kind": "tls_client_hello", "frame_number": 56834, "timestamp_epoch": "1634915888.802467000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50007, "dst_port": 25, "tcp_stream": 1047, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.xenium-partners.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1aff04fdeec9797c8fdd3f5e", "kind": "tls_client_hello", "frame_number": 56947, "timestamp_epoch": "1634915893.158558000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50006, "dst_port": 25, "tcp_stream": 1046, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-057fcb9768ab928b6f8357d5", "kind": "tls_client_hello", "frame_number": 56970, "timestamp_epoch": "1634915893.888567000", "src_ip": "10.10.22.156", "dst_ip": "52.185.211.133", "src_port": 50009, "dst_port": 443, "tcp_stream": 1049, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-816de0f331c445560833a45f", "kind": "tls_client_hello", "frame_number": 57138, "timestamp_epoch": "1634915910.065939000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50010, "dst_port": 25, "tcp_stream": 1050, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-cb99e22ea14d92c31c234df6", "kind": "tls_client_hello", "frame_number": 57318, "timestamp_epoch": "1634915919.941397000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50012, "dst_port": 25, "tcp_stream": 1052, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b2f8ff476e785b20905431df", "kind": "tls_client_hello", "frame_number": 57370, "timestamp_epoch": "1634915921.567272000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50013, "dst_port": 25, "tcp_stream": 1053, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-f92f781da6331f345d491f3a", "kind": "tls_client_hello", "frame_number": 57474, "timestamp_epoch": "1634915925.104288000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50014, "dst_port": 25, "tcp_stream": 1054, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-19fa5f6a7496187b2c7fa959", "kind": "tls_client_hello", "frame_number": 57830, "timestamp_epoch": "1634915972.750415000", "src_ip": "10.10.22.156", "dst_ip": "52.96.55.242", "src_port": 50018, "dst_port": 25, "tcp_stream": 1070, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b6a876d19bcc872a81f02196", "kind": "tls_client_hello", "frame_number": 57975, "timestamp_epoch": "1634915987.005842000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50020, "dst_port": 25, "tcp_stream": 1075, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.come-paris.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a9e15546e0e3656af9e85f17", "kind": "tls_client_hello", "frame_number": 58031, "timestamp_epoch": "1634915989.551992000", "src_ip": "10.10.22.157", "dst_ip": "52.183.220.149", "src_port": 50111, "dst_port": 443, "tcp_stream": 1077, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-56c9f003e31be565fbab15a8", "kind": "tls_client_hello", "frame_number": 58217, "timestamp_epoch": "1634916009.006971000", "src_ip": "10.10.22.156", "dst_ip": "31.193.50.122", "src_port": 50022, "dst_port": 25, "tcp_stream": 1081, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.eolas.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-5a07c4e585a091cc32c14072", "kind": "tls_client_hello", "frame_number": 58358, "timestamp_epoch": "1634916016.380230000", "src_ip": "10.10.22.156", "dst_ip": "40.97.199.114", "src_port": 50024, "dst_port": 25, "tcp_stream": 1087, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-338586bcff8530f39885e542", "kind": "tls_client_hello", "frame_number": 58561, "timestamp_epoch": "1634916037.695014000", "src_ip": "10.10.22.156", "dst_ip": "31.193.50.122", "src_port": 50026, "dst_port": 25, "tcp_stream": 1092, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.eolas.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a610db8c3104de0806be3fd8", "kind": "tls_client_hello", "frame_number": 58714, "timestamp_epoch": "1634916058.347576000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49847, "dst_port": 443, "tcp_stream": 1101, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-2501bbc4bcbe9c88b361bf1e", "kind": "tls_client_hello", "frame_number": 58739, "timestamp_epoch": "1634916060.065472000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49848, "dst_port": 443, "tcp_stream": 1103, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-a30b6df22e77b20b515739fe", "kind": "tls_client_hello", "frame_number": 58833, "timestamp_epoch": "1634916068.323129000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50029, "dst_port": 25, "tcp_stream": 1105, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.come-paris.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-4ac5eb7e45de50f5dc20287c", "kind": "tls_client_hello", "frame_number": 58958, "timestamp_epoch": "1634916080.874732000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49849, "dst_port": 443, "tcp_stream": 1112, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-754650d30fb662c97cbf9560", "kind": "tls_client_hello", "frame_number": 59241, "timestamp_epoch": "1634916082.509346000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50031, "dst_port": 25, "tcp_stream": 1111, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.ptolemee.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b8b7cce6030d794c4b4b2239", "kind": "tls_client_hello", "frame_number": 59553, "timestamp_epoch": "1634916120.116913000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50035, "dst_port": 25, "tcp_stream": 1133, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.corteo.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-fcbce65f9b2314b1c14d7103", "kind": "tls_client_hello", "frame_number": 59803, "timestamp_epoch": "1634916148.755589000", "src_ip": "10.10.22.156", "dst_ip": "40.97.120.226", "src_port": 50038, "dst_port": 25, "tcp_stream": 1149, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c86be8bb7fe4a85496627b80", "kind": "tls_client_hello", "frame_number": 60000, "timestamp_epoch": "1634916157.194803000", "src_ip": "10.10.22.156", "dst_ip": "192.185.57.27", "src_port": 50040, "dst_port": 25, "tcp_stream": 1152, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "vchbbq.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3a0603f2a3e107a028a0f03b", "kind": "tls_client_hello", "frame_number": 60152, "timestamp_epoch": "1634916163.971055000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50042, "dst_port": 25, "tcp_stream": 1162, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.corteo.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-db6295d25514a9b71c9e6b69", "kind": "tls_client_hello", "frame_number": 60266, "timestamp_epoch": "1634916167.595501000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50043, "dst_port": 25, "tcp_stream": 1166, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.songazine.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-65a778c5be5e92bd70e29fdd", "kind": "tls_client_hello", "frame_number": 60536, "timestamp_epoch": "1634916205.385112000", "src_ip": "10.10.22.156", "dst_ip": "162.210.220.137", "src_port": 50048, "dst_port": 443, "tcp_stream": 1196, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-25bbc4012d21c72b03cd4d30", "kind": "tls_client_hello", "frame_number": 60551, "timestamp_epoch": "1634916205.532947000", "src_ip": "10.10.22.156", "dst_ip": "162.210.220.137", "src_port": 50049, "dst_port": 443, "tcp_stream": 1197, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-d45eb8a18816c7b2332d0306", "kind": "tls_client_hello", "frame_number": 60584, "timestamp_epoch": "1634916207.698250000", "src_ip": "10.10.22.156", "dst_ip": "162.210.220.137", "src_port": 50050, "dst_port": 443, "tcp_stream": 1198, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-f87e65f59094eadb6c933fa0", "kind": "tls_client_hello", "frame_number": 60595, "timestamp_epoch": "1634916207.854725000", "src_ip": "10.10.22.156", "dst_ip": "162.210.220.137", "src_port": 50051, "dst_port": 443, "tcp_stream": 1199, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-ca69108c22000f82a5ec96cd", "kind": "tls_client_hello", "frame_number": 60923, "timestamp_epoch": "1634916251.980614000", "src_ip": "10.10.22.156", "dst_ip": "34.149.19.242", "src_port": 50058, "dst_port": 25, "tcp_stream": 1221, "udp_stream": null, "fields": { "tls.handshake.ja3": "89be98bbd4f065fe510fca4893cf8d9b" } }, { "event_id": "evt-1b0c6fc1eb4213c5bac0d4d6", "kind": "tls_client_hello", "frame_number": 61229, "timestamp_epoch": "1634916297.604648000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50063, "dst_port": 25, "tcp_stream": 1249, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.brins-d-eveil.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-de7a8c577cff03f287dec68a", "kind": "tls_client_hello", "frame_number": 61262, "timestamp_epoch": "1634916298.407720000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50064, "dst_port": 25, "tcp_stream": 1250, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.maclen.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a279afddafc6a3b0751c62ed", "kind": "tls_client_hello", "frame_number": 61447, "timestamp_epoch": "1634916311.437816000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50066, "dst_port": 25, "tcp_stream": 1256, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.maclen.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-7fe577d66300cae88ddb44f4", "kind": "tls_client_hello", "frame_number": 61510, "timestamp_epoch": "1634916313.269112000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50067, "dst_port": 25, "tcp_stream": 1257, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.maclen.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c375ddfc5cd50b514e212414", "kind": "tls_client_hello", "frame_number": 61671, "timestamp_epoch": "1634916330.498843000", "src_ip": "10.10.22.156", "dst_ip": "52.96.16.162", "src_port": 50069, "dst_port": 25, "tcp_stream": 1259, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-f9b40fbe9dd5e134c4ef017c", "kind": "tls_client_hello", "frame_number": 61789, "timestamp_epoch": "1634916337.192237000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50070, "dst_port": 25, "tcp_stream": 1260, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.brins-d-eveil.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-11e40b5f26a7d468d5b051c1", "kind": "tls_client_hello", "frame_number": 61910, "timestamp_epoch": "1634916342.635349000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50072, "dst_port": 25, "tcp_stream": 1262, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.brins-d-eveil.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-750582f20d9a6b0dbf9c02cf", "kind": "tls_client_hello", "frame_number": 62173, "timestamp_epoch": "1634916365.157439000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49854, "dst_port": 443, "tcp_stream": 1268, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-387376f91e6c703ce915f8ad", "kind": "tls_client_hello", "frame_number": 62262, "timestamp_epoch": "1634916385.084730000", "src_ip": "10.10.22.156", "dst_ip": "72.252.201.69", "src_port": 50078, "dst_port": 443, "tcp_stream": 1269, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-b36526ef3260a68fa667cae6", "kind": "tls_client_hello", "frame_number": 62282, "timestamp_epoch": "1634916387.735887000", "src_ip": "10.10.22.156", "dst_ip": "72.252.201.69", "src_port": 50079, "dst_port": 443, "tcp_stream": 1270, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-90f038c3afa702b726462e1e", "kind": "tls_client_hello", "frame_number": 62308, "timestamp_epoch": "1634916393.231638000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50080, "dst_port": 443, "tcp_stream": 1271, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-10b335e1b39a1aaf67cc2f46", "kind": "tls_client_hello", "frame_number": 64214, "timestamp_epoch": "1634916402.504152000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50081, "dst_port": 443, "tcp_stream": 1272, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-11344552e5fdca83ed923f32", "kind": "tls_client_hello", "frame_number": 64451, "timestamp_epoch": "1634916463.458079000", "src_ip": "10.10.22.156", "dst_ip": "173.249.53.15", "src_port": 50082, "dst_port": 25, "tcp_stream": 1273, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.microvistatech.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-8961ad951e9f191115e072d8", "kind": "tls_client_hello", "frame_number": 64504, "timestamp_epoch": "1634916466.213403000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50083, "dst_port": 443, "tcp_stream": 1274, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-1998bc0e3b14c49696b25019", "kind": "tls_client_hello", "frame_number": 64608, "timestamp_epoch": "1634916474.389353000", "src_ip": "10.10.22.156", "dst_ip": "52.96.57.18", "src_port": 50084, "dst_port": 25, "tcp_stream": 1275, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-6ec8a72f296ac02b99fbe2f7", "kind": "tls_client_hello", "frame_number": 64731, "timestamp_epoch": "1634916486.624776000", "src_ip": "10.10.22.156", "dst_ip": "221.176.66.188", "src_port": 50085, "dst_port": 25, "tcp_stream": 1276, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mx1.mail.139.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-293a0dcadcce86f77bdf3981", "kind": "tls_client_hello", "frame_number": 64898, "timestamp_epoch": "1634916508.960032000", "src_ip": "10.10.22.156", "dst_ip": "66.96.147.96", "src_port": 50086, "dst_port": 25, "tcp_stream": 1277, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.ipage.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-fa88f1731e3a4a50823bd909", "kind": "tls_client_hello", "frame_number": 65114, "timestamp_epoch": "1634916541.492485000", "src_ip": "10.10.22.156", "dst_ip": "52.96.103.34", "src_port": 50088, "dst_port": 25, "tcp_stream": 1279, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-6fe274aa4093eac9dab9091e", "kind": "tls_client_hello", "frame_number": 65302, "timestamp_epoch": "1634916561.312986000", "src_ip": "10.10.22.156", "dst_ip": "85.13.132.2", "src_port": 50089, "dst_port": 25, "tcp_stream": 1280, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "w00d8b4e.kasserver.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9ffc1c8c9220b420ad1f690f", "kind": "tls_client_hello", "frame_number": 65722, "timestamp_epoch": "1634916657.698139000", "src_ip": "10.10.22.156", "dst_ip": "123.58.177.213", "src_port": 50094, "dst_port": 25, "tcp_stream": 1288, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "yeahmx01.mxmail.netease.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9c45e5e68f85bfd31f9ba84c", "kind": "tls_client_hello", "frame_number": 65827, "timestamp_epoch": "1634916669.272534000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49855, "dst_port": 443, "tcp_stream": 1293, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-ac82cabbd0ac7f38c8038f7b", "kind": "tls_client_hello", "frame_number": 65952, "timestamp_epoch": "1634916681.109246000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50095, "dst_port": 25, "tcp_stream": 1295, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-6705bce357b31979af020e72", "kind": "tls_client_hello", "frame_number": 65957, "timestamp_epoch": "1634916681.289740000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50096, "dst_port": 25, "tcp_stream": 1297, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0295c9202fcc0c22d3eacc66", "kind": "tls_client_hello", "frame_number": 66120, "timestamp_epoch": "1634916691.328385000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50097, "dst_port": 25, "tcp_stream": 1301, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d0d2f2c31b5a70ad6f35fdcd", "kind": "tls_client_hello", "frame_number": 66609, "timestamp_epoch": "1634916777.832745000", "src_ip": "10.10.22.156", "dst_ip": "40.97.120.242", "src_port": 50106, "dst_port": 25, "tcp_stream": 1340, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b94ddfc72af4b99b1cb3970d", "kind": "tls_client_hello", "frame_number": 66681, "timestamp_epoch": "1634916783.260597000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50109, "dst_port": 443, "tcp_stream": 1342, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-92493e7ce406a339aca560bc", "kind": "tls_client_hello", "frame_number": 67489, "timestamp_epoch": "1634916787.748022000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50110, "dst_port": 443, "tcp_stream": 1344, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-77ebf5834b1d6864688172bd", "kind": "tls_client_hello", "frame_number": 67564, "timestamp_epoch": "1634916794.392288000", "src_ip": "10.10.22.156", "dst_ip": "52.183.220.149", "src_port": 50113, "dst_port": 443, "tcp_stream": 1349, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-154d2417d29faad5b8d8f833", "kind": "tls_client_hello", "frame_number": 67655, "timestamp_epoch": "1634916811.993680000", "src_ip": "10.10.22.156", "dst_ip": "82.98.154.100", "src_port": 50114, "dst_port": 25, "tcp_stream": 1354, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.verificalitasoca.es", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ac97dceeacee7a05840a65e4", "kind": "tls_client_hello", "frame_number": 67810, "timestamp_epoch": "1634916829.280146000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.98", "src_port": 50115, "dst_port": 25, "tcp_stream": 1359, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-973034073c9fdae037e4bdae", "kind": "tls_client_hello", "frame_number": 67923, "timestamp_epoch": "1634916847.496686000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50116, "dst_port": 443, "tcp_stream": 1364, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-8c47759797e8644652bc4e5a", "kind": "tls_client_hello", "frame_number": 68028, "timestamp_epoch": "1634916889.999564000", "src_ip": "10.10.22.157", "dst_ip": "52.183.220.149", "src_port": 50242, "dst_port": 443, "tcp_stream": 1375, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-704eb32666bc643c4560cb7b", "kind": "tls_client_hello", "frame_number": 68131, "timestamp_epoch": "1634916906.735237000", "src_ip": "10.10.22.156", "dst_ip": "64.87.23.16", "src_port": 50117, "dst_port": 25, "tcp_stream": 1379, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.perpetualplaques.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0b9204e854996fca1c589aa2", "kind": "tls_client_hello", "frame_number": 68339, "timestamp_epoch": "1634916960.497286000", "src_ip": "10.10.22.158", "dst_ip": "52.185.211.133", "src_port": 49857, "dst_port": 443, "tcp_stream": 1394, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-7a0a29c3b5152b934a9722fb", "kind": "tls_client_hello", "frame_number": 68399, "timestamp_epoch": "1634916973.121759000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49858, "dst_port": 443, "tcp_stream": 1398, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-85d2277e0c7e8a0e7a4b8107", "kind": "tls_client_hello", "frame_number": 68540, "timestamp_epoch": "1634917014.999784000", "src_ip": "10.10.22.156", "dst_ip": "52.96.16.162", "src_port": 50118, "dst_port": 25, "tcp_stream": 1408, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ac344e05e7291c19061df000", "kind": "tls_client_hello", "frame_number": 68741, "timestamp_epoch": "1634917036.631625000", "src_ip": "10.10.22.156", "dst_ip": "62.149.128.203", "src_port": 50120, "dst_port": 25, "tcp_stream": 1415, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.medicinafutura.it", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b41008206af760830a7ba48c", "kind": "tls_client_hello", "frame_number": 68913, "timestamp_epoch": "1634917065.745555000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49860, "dst_port": 443, "tcp_stream": 1424, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-de0e76384a3434f511b24071", "kind": "tls_client_hello", "frame_number": 69006, "timestamp_epoch": "1634917081.520915000", "src_ip": "10.10.22.156", "dst_ip": "74.202.142.20", "src_port": 50122, "dst_port": 25, "tcp_stream": 1428, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.pangia.biz", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-5e5107c1f11a3b8b1c3c71f7", "kind": "tls_client_hello", "frame_number": 69112, "timestamp_epoch": "1634917088.152511000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50123, "dst_port": 25, "tcp_stream": 1430, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b9edd1c6c58a90ceae45279b", "kind": "tls_client_hello", "frame_number": 69241, "timestamp_epoch": "1634917111.751355000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50124, "dst_port": 25, "tcp_stream": 1437, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.hrctunisia.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-889050bfbb1b94ec13c5d9cd", "kind": "tls_client_hello", "frame_number": 69361, "timestamp_epoch": "1634917123.464220000", "src_ip": "10.10.22.156", "dst_ip": "52.96.191.98", "src_port": 50125, "dst_port": 25, "tcp_stream": 1441, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-dde78e59429a9b448c96dc34", "kind": "tls_client_hello", "frame_number": 69588, "timestamp_epoch": "1634917152.829721000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50126, "dst_port": 25, "tcp_stream": 1448, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.csnert.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-5253c569f919fa206a91e392", "kind": "tls_client_hello", "frame_number": 69663, "timestamp_epoch": "1634917158.204605000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49861, "dst_port": 443, "tcp_stream": 1451, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-724fb116c4bbc10d8ceb0163", "kind": "tls_client_hello", "frame_number": 69688, "timestamp_epoch": "1634917164.693011000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50128, "dst_port": 443, "tcp_stream": 1452, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-db0ebd3e777e6f7e95f59fe9", "kind": "tls_client_hello", "frame_number": 69771, "timestamp_epoch": "1634917192.469545000", "src_ip": "10.10.22.156", "dst_ip": "217.116.0.228", "src_port": 50129, "dst_port": 25, "tcp_stream": 1453, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.ulpianocarrasco.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-62795abc4226ea62bd9f745a", "kind": "tls_client_hello", "frame_number": 70097, "timestamp_epoch": "1634917223.011091000", "src_ip": "10.10.22.156", "dst_ip": "52.96.10.242", "src_port": 50132, "dst_port": 25, "tcp_stream": 1456, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-57ee0b5eb7265260ffcab6ed", "kind": "tls_client_hello", "frame_number": 70161, "timestamp_epoch": "1634917224.268325000", "src_ip": "10.10.22.156", "dst_ip": "52.96.10.242", "src_port": 50133, "dst_port": 25, "tcp_stream": 1457, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-2d306da1ee5493a2bf633a48", "kind": "tls_client_hello", "frame_number": 70278, "timestamp_epoch": "1634917228.308356000", "src_ip": "10.10.22.156", "dst_ip": "62.149.128.203", "src_port": 50134, "dst_port": 25, "tcp_stream": 1458, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.unisanraffaele.gov.it", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-4a453c0725023357efa6740a", "kind": "tls_client_hello", "frame_number": 70394, "timestamp_epoch": "1634917233.975397000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50135, "dst_port": 25, "tcp_stream": 1459, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-8a83eb286444e10116fe98ca", "kind": "tls_client_hello", "frame_number": 70512, "timestamp_epoch": "1634917244.235019000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50136, "dst_port": 25, "tcp_stream": 1460, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-2698f1ac9595d7b3757df5a0", "kind": "tls_client_hello", "frame_number": 70610, "timestamp_epoch": "1634917250.635767000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49862, "dst_port": 443, "tcp_stream": 1461, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-92b633969845f8a0c4a2c1e6", "kind": "tls_client_hello", "frame_number": 70687, "timestamp_epoch": "1634917255.112536000", "src_ip": "10.10.22.156", "dst_ip": "183.61.185.83", "src_port": 50138, "dst_port": 25, "tcp_stream": 1463, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mta.21cn.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-96e8c7a1c1f4a74c4934b1b2", "kind": "tls_client_hello", "frame_number": 70744, "timestamp_epoch": "1634917258.016410000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50137, "dst_port": 25, "tcp_stream": 1462, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ab82a995ab08751868b07af5", "kind": "tls_client_hello", "frame_number": 71011, "timestamp_epoch": "1634917280.693215000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50140, "dst_port": 25, "tcp_stream": 1465, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3b064c5342e3185507156ab4", "kind": "tls_client_hello", "frame_number": 71050, "timestamp_epoch": "1634917283.681137000", "src_ip": "10.10.22.156", "dst_ip": "183.61.185.83", "src_port": 50141, "dst_port": 25, "tcp_stream": 1466, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mta.21cn.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9e96c024a5c93649f7074157", "kind": "tls_client_hello", "frame_number": 71265, "timestamp_epoch": "1634917292.403788000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50142, "dst_port": 25, "tcp_stream": 1467, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c82b5c86e5551cc3a34e80d2", "kind": "tls_client_hello", "frame_number": 71532, "timestamp_epoch": "1634917332.274555000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50146, "dst_port": 25, "tcp_stream": 1471, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.ajeel.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-58f72d73a7bf8bc6a82f634f", "kind": "tls_client_hello", "frame_number": 71581, "timestamp_epoch": "1634917333.008309000", "src_ip": "10.10.22.156", "dst_ip": "183.61.185.83", "src_port": 50147, "dst_port": 25, "tcp_stream": 1472, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mta.21cn.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-f301569c3797f322568beee0", "kind": "tls_client_hello", "frame_number": 71593, "timestamp_epoch": "1634917333.248282000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.194", "src_port": 50148, "dst_port": 25, "tcp_stream": 1473, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-4e5b3a55984a3c81164c5c53", "kind": "tls_client_hello", "frame_number": 71623, "timestamp_epoch": "1634917333.425949000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50145, "dst_port": 25, "tcp_stream": 1470, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-29fa0da581a5eebbfa9da917", "kind": "tls_client_hello", "frame_number": 71819, "timestamp_epoch": "1634917338.086046000", "src_ip": "10.10.22.156", "dst_ip": "123.126.45.161", "src_port": 50149, "dst_port": 25, "tcp_stream": 1474, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.sina.com.cn", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-030edc775ab6efa9485f5f91", "kind": "tls_client_hello", "frame_number": 72065, "timestamp_epoch": "1634917374.790278000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49863, "dst_port": 443, "tcp_stream": 1477, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-6c3d4364995839c81b4ed753", "kind": "tls_client_hello", "frame_number": 72090, "timestamp_epoch": "1634917375.139317000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49864, "dst_port": 443, "tcp_stream": 1478, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-f504f93bf52c60c892c7545c", "kind": "tls_client_hello", "frame_number": 72111, "timestamp_epoch": "1634917375.741911000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50151, "dst_port": 25, "tcp_stream": 1476, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.isoldry.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d28e33a5c199392960393f93", "kind": "tls_client_hello", "frame_number": 72781, "timestamp_epoch": "1634917379.523883000", "src_ip": "10.10.22.158", "dst_ip": "104.16.10.88", "src_port": 49865, "dst_port": 443, "tcp_stream": 1479, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.backmarket.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-6b0d44a12f7edbbcb241aac9", "kind": "tls_client_hello", "frame_number": 73536, "timestamp_epoch": "1634917418.841204000", "src_ip": "10.10.22.156", "dst_ip": "52.96.122.242", "src_port": 50152, "dst_port": 25, "tcp_stream": 1480, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a8ec0b6ed480c30e84ae328b", "kind": "tls_client_hello", "frame_number": 73661, "timestamp_epoch": "1634917434.391229000", "src_ip": "10.10.22.156", "dst_ip": "52.96.57.2", "src_port": 50153, "dst_port": 25, "tcp_stream": 1481, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-8e245f49d2acc79a39f65407", "kind": "tls_client_hello", "frame_number": 73745, "timestamp_epoch": "1634917437.245202000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49866, "dst_port": 443, "tcp_stream": 1483, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-d10b62c3b3dca5ef2c4cd610", "kind": "tls_client_hello", "frame_number": 74471, "timestamp_epoch": "1634917457.032986000", "src_ip": "10.10.22.156", "dst_ip": "52.96.103.2", "src_port": 50155, "dst_port": 25, "tcp_stream": 1484, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-350cc7e4d0aee678b0288f0f", "kind": "tls_client_hello", "frame_number": 74583, "timestamp_epoch": "1634917464.270196000", "src_ip": "10.10.22.156", "dst_ip": "66.96.162.198", "src_port": 50157, "dst_port": 25, "tcp_stream": 1486, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.tcgasociados.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-5f3f73a4832b4c3ac5775927", "kind": "tls_client_hello", "frame_number": 74691, "timestamp_epoch": "1634917472.533719000", "src_ip": "10.10.22.156", "dst_ip": "104.208.16.94", "src_port": 50158, "dst_port": 443, "tcp_stream": 1487, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "umwatson.events.data.microsoft.com", "tls.handshake.ja3": "a0e9f5d64349fb13191bc781f81f42e1" } }, { "event_id": "evt-34b3a804c2a8c8f95c614f94", "kind": "tls_client_hello", "frame_number": 74744, "timestamp_epoch": "1634917477.861833000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50159, "dst_port": 443, "tcp_stream": 1488, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-a8a222a42920d8eb139923bc", "kind": "tls_client_hello", "frame_number": 74798, "timestamp_epoch": "1634917483.181105000", "src_ip": "10.10.22.156", "dst_ip": "103.129.255.250", "src_port": 50160, "dst_port": 25, "tcp_stream": 1489, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "hzmx01.mxmail.netease.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-36cbedc22c39dc6023694b6d", "kind": "tls_client_hello", "frame_number": 74950, "timestamp_epoch": "1634917491.155651000", "src_ip": "10.10.22.156", "dst_ip": "40.126.29.8", "src_port": 50162, "dst_port": 443, "tcp_stream": 1493, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "login.live.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-2cbb60aa80ebd28cfbb8f928", "kind": "tls_client_hello", "frame_number": 74996, "timestamp_epoch": "1634917491.711113000", "src_ip": "10.10.22.156", "dst_ip": "104.208.16.94", "src_port": 50163, "dst_port": 443, "tcp_stream": 1494, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "umwatson.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-9ac2e0e752847e3f3537ed09", "kind": "tls_client_hello", "frame_number": 75148, "timestamp_epoch": "1634917533.136799000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50164, "dst_port": 25, "tcp_stream": 1504, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.kbcrawl.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d671eee81903801641ebd1db", "kind": "tls_client_hello", "frame_number": 75266, "timestamp_epoch": "1634917552.548147000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49867, "dst_port": 443, "tcp_stream": 1510, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-1c651bca818aaab434bc16a7", "kind": "tls_client_hello", "frame_number": 75286, "timestamp_epoch": "1634917552.758541000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49868, "dst_port": 443, "tcp_stream": 1511, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-c39c1e10291f5f304b8d3be6", "kind": "tls_client_hello", "frame_number": 76002, "timestamp_epoch": "1634917557.575735000", "src_ip": "10.10.22.157", "dst_ip": "52.178.17.3", "src_port": 50323, "dst_port": 443, "tcp_stream": 1516, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-88ae34afa0b5c459171008d9", "kind": "tls_client_hello", "frame_number": 76046, "timestamp_epoch": "1634917557.664141000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50168, "dst_port": 25, "tcp_stream": 1514, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.anberman.es", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9b0fd6d7098ba90046d435a5", "kind": "tls_client_hello", "frame_number": 76199, "timestamp_epoch": "1634917563.548838000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49869, "dst_port": 443, "tcp_stream": 1518, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-bd178b037c7f5cb711e17797", "kind": "tls_client_hello", "frame_number": 76417, "timestamp_epoch": "1634917618.208668000", "src_ip": "10.10.22.156", "dst_ip": "20.44.10.123", "src_port": 50170, "dst_port": 443, "tcp_stream": 1533, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-787bd001a8dd0d275ca48f0c", "kind": "tls_client_hello", "frame_number": 76525, "timestamp_epoch": "1634917637.565627000", "src_ip": "10.10.22.156", "dst_ip": "70.39.150.220", "src_port": 50171, "dst_port": 25, "tcp_stream": 1538, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "ultimatecuisinecatering.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-892c6c79adf062944d206ac6", "kind": "tls_client_hello", "frame_number": 76674, "timestamp_epoch": "1634917649.173315000", "src_ip": "10.10.22.158", "dst_ip": "20.44.10.123", "src_port": 49871, "dst_port": 443, "tcp_stream": 1543, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "v10.events.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-67becc7944b73721c9ce05b8", "kind": "tls_client_hello", "frame_number": 76862, "timestamp_epoch": "1634917717.372777000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50172, "dst_port": 25, "tcp_stream": 1558, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.lecmg.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-b8f9abba190ee3467cf9d613", "kind": "tls_client_hello", "frame_number": 76974, "timestamp_epoch": "1634917728.350832000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50173, "dst_port": 25, "tcp_stream": 1560, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.lecmg.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-7f866caf379f7258c795f19f", "kind": "tls_client_hello", "frame_number": 77157, "timestamp_epoch": "1634917771.784659000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50174, "dst_port": 25, "tcp_stream": 1561, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.kalivet.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-64d143bbbff678c3c80c412c", "kind": "tls_client_hello", "frame_number": 77316, "timestamp_epoch": "1634917790.076972000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50176, "dst_port": 25, "tcp_stream": 1563, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.atelierscalin.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-062ff007e8a86e61768df82c", "kind": "tls_client_hello", "frame_number": 77334, "timestamp_epoch": "1634917790.275471000", "src_ip": "10.10.22.156", "dst_ip": "197.242.67.121", "src_port": 50175, "dst_port": 25, "tcp_stream": 1562, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.bethnet.co.za", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1e6643e71276b782ff22ecba", "kind": "tls_client_hello", "frame_number": 77357, "timestamp_epoch": "1634917790.950387000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49872, "dst_port": 443, "tcp_stream": 1564, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-25a48e525222fb73e64027b8", "kind": "tls_client_hello", "frame_number": 77386, "timestamp_epoch": "1634917791.210003000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49873, "dst_port": 443, "tcp_stream": 1565, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-b5be1bef9ce7254fb50e6c4d", "kind": "tls_client_hello", "frame_number": 77963, "timestamp_epoch": "1634917795.053109000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50177, "dst_port": 443, "tcp_stream": 1566, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-ec7b64b5341b62b2612a48a5", "kind": "tls_client_hello", "frame_number": 78107, "timestamp_epoch": "1634917830.222859000", "src_ip": "10.10.22.156", "dst_ip": "40.97.120.146", "src_port": 50178, "dst_port": 25, "tcp_stream": 1567, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9425af3c5e0064eddbe3159d", "kind": "tls_client_hello", "frame_number": 78242, "timestamp_epoch": "1634917860.929501000", "src_ip": "10.10.22.158", "dst_ip": "52.183.220.149", "src_port": 49874, "dst_port": 443, "tcp_stream": 1568, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "settings-win.data.microsoft.com", "tls.handshake.ja3": "28a2c9bd18a11de089ef85a160da29e4" } }, { "event_id": "evt-2a73dc59a97d5e0d98eddc6a", "kind": "tls_client_hello", "frame_number": 78277, "timestamp_epoch": "1634917875.521997000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49875, "dst_port": 443, "tcp_stream": 1569, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-c59c45ecf563436c121a5e6b", "kind": "tls_client_hello", "frame_number": 78366, "timestamp_epoch": "1634917929.359625000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.114", "src_port": 50179, "dst_port": 25, "tcp_stream": 1570, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-e9a0a212fac174b47fb0bc01", "kind": "tls_client_hello", "frame_number": 78528, "timestamp_epoch": "1634917956.185175000", "src_ip": "10.10.22.156", "dst_ip": "52.96.10.242", "src_port": 50180, "dst_port": 25, "tcp_stream": 1571, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-6f3489b9b20a4ba602b9c45b", "kind": "tls_client_hello", "frame_number": 78640, "timestamp_epoch": "1634917968.127131000", "src_ip": "10.10.22.156", "dst_ip": "31.193.50.122", "src_port": 50181, "dst_port": 25, "tcp_stream": 1572, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.eolas.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-4c399bc155f36f6691572a95", "kind": "tls_client_hello", "frame_number": 78694, "timestamp_epoch": "1634917969.701223000", "src_ip": "10.10.22.156", "dst_ip": "31.193.50.122", "src_port": 50182, "dst_port": 25, "tcp_stream": 1573, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.eolas.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a42dffcd46bd269988032b41", "kind": "tls_client_hello", "frame_number": 78882, "timestamp_epoch": "1634917983.534245000", "src_ip": "10.10.22.156", "dst_ip": "31.193.50.122", "src_port": 50183, "dst_port": 25, "tcp_stream": 1574, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.eolas.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-5318056e985df94a6429f406", "kind": "tls_client_hello", "frame_number": 79026, "timestamp_epoch": "1634918021.896420000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.162", "src_port": 50184, "dst_port": 25, "tcp_stream": 1575, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1eca7d9b534dfd6cbbb47ac7", "kind": "tls_client_hello", "frame_number": 79170, "timestamp_epoch": "1634918052.845155000", "src_ip": "10.10.22.156", "dst_ip": "64.98.36.176", "src_port": 50185, "dst_port": 25, "tcp_stream": 1576, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.yourwebsitemail.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-88a4f9563879c73e7d452e74", "kind": "tls_client_hello", "frame_number": 79265, "timestamp_epoch": "1634918060.499302000", "src_ip": "10.10.22.158", "dst_ip": "13.107.21.200", "src_port": 49876, "dst_port": 443, "tcp_stream": 1579, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-f962c0cd64ba35bbc13e6167", "kind": "tls_client_hello", "frame_number": 79287, "timestamp_epoch": "1634918060.809754000", "src_ip": "10.10.22.158", "dst_ip": "204.79.197.200", "src_port": 49877, "dst_port": 443, "tcp_stream": 1580, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.bing.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-2e086f6aa6ed1dc52b0efba6", "kind": "tls_client_hello", "frame_number": 80418, "timestamp_epoch": "1634918065.894205000", "src_ip": "10.10.22.158", "dst_ip": "23.222.241.43", "src_port": 49878, "dst_port": 443, "tcp_stream": 1582, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "slickdeals.net", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-e6f2b6f09ae86bf14f6b5fae", "kind": "tls_client_hello", "frame_number": 80457, "timestamp_epoch": "1634918066.569200000", "src_ip": "10.10.22.158", "dst_ip": "159.127.40.144", "src_port": 49880, "dst_port": 443, "tcp_stream": 1584, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "cj.dotomi.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-214ed8a7a58ae7618cc18064", "kind": "tls_client_hello", "frame_number": 80485, "timestamp_epoch": "1634918066.959915000", "src_ip": "10.10.22.158", "dst_ip": "159.127.40.144", "src_port": 49881, "dst_port": 443, "tcp_stream": 1585, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.emjcd.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-f3311aaac9fa838c45d5e164", "kind": "tls_client_hello", "frame_number": 80512, "timestamp_epoch": "1634918067.332687000", "src_ip": "10.10.22.158", "dst_ip": "34.120.119.232", "src_port": 49882, "dst_port": 443, "tcp_stream": 1586, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "www.dellrefurbished.com", "tls.handshake.ja3": "37f463bf4616ecd445d4a1937da06e19" } }, { "event_id": "evt-cff565b4ff3539d24620e3be", "kind": "tls_client_hello", "frame_number": 80713, "timestamp_epoch": "1634918078.196260000", "src_ip": "10.10.22.156", "dst_ip": "208.180.40.68", "src_port": 50186, "dst_port": 25, "tcp_stream": 1590, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.suddenlink.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-bc33959595de6d9029d30cbd", "kind": "tls_client_hello", "frame_number": 80871, "timestamp_epoch": "1634918112.207166000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50187, "dst_port": 443, "tcp_stream": 1599, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-b9fb61def5e009651f133ab5", "kind": "tls_client_hello", "frame_number": 80916, "timestamp_epoch": "1634918114.979374000", "src_ip": "10.10.22.156", "dst_ip": "223.29.248.111", "src_port": 50188, "dst_port": 25, "tcp_stream": 1600, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.abchk.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c82ce4c8e20f22abc4e29056", "kind": "tls_client_hello", "frame_number": 81093, "timestamp_epoch": "1634918145.125645000", "src_ip": "10.10.22.156", "dst_ip": "52.96.57.82", "src_port": 50189, "dst_port": 25, "tcp_stream": 1608, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-c9dabe44829ccc7baa926bfe", "kind": "tls_client_hello", "frame_number": 81212, "timestamp_epoch": "1634918181.139632000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49883, "dst_port": 443, "tcp_stream": 1609, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-a353dfe842fc710acd2ea142", "kind": "tls_client_hello", "frame_number": 81279, "timestamp_epoch": "1634918199.637923000", "src_ip": "10.10.22.156", "dst_ip": "208.180.40.68", "src_port": 50190, "dst_port": 25, "tcp_stream": 1610, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.suddenlink.net", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-ae5c3750ee0e3cfb9beefb45", "kind": "tls_client_hello", "frame_number": 81477, "timestamp_epoch": "1634918256.408610000", "src_ip": "10.10.22.156", "dst_ip": "40.97.199.114", "src_port": 50192, "dst_port": 25, "tcp_stream": 1616, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-35cbe7fd16ec669e48c5f064", "kind": "tls_client_hello", "frame_number": 81595, "timestamp_epoch": "1634918270.690807000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50193, "dst_port": 25, "tcp_stream": 1617, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.brins-d-eveil.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-52a9afae659769b4fe6e675c", "kind": "tls_client_hello", "frame_number": 81663, "timestamp_epoch": "1634918272.316146000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50194, "dst_port": 25, "tcp_stream": 1618, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.brins-d-eveil.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-3128160b5b29b15e52fb389c", "kind": "tls_client_hello", "frame_number": 81838, "timestamp_epoch": "1634918300.775689000", "src_ip": "10.10.22.156", "dst_ip": "52.96.57.2", "src_port": 50196, "dst_port": 25, "tcp_stream": 1620, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-948de51d1fa40c8dfd7b9670", "kind": "tls_client_hello", "frame_number": 81855, "timestamp_epoch": "1634918300.978141000", "src_ip": "10.10.22.156", "dst_ip": "52.96.57.2", "src_port": 50195, "dst_port": 25, "tcp_stream": 1619, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-1d4b514840e8d86b8e8bd6bf", "kind": "tls_client_hello", "frame_number": 82080, "timestamp_epoch": "1634918328.944815000", "src_ip": "10.10.22.156", "dst_ip": "52.96.121.194", "src_port": 50197, "dst_port": 25, "tcp_stream": 1621, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-0186e628536d4db6d66b3b6a", "kind": "tls_client_hello", "frame_number": 82181, "timestamp_epoch": "1634918339.333625000", "src_ip": "10.10.22.156", "dst_ip": "52.96.191.98", "src_port": 50198, "dst_port": 25, "tcp_stream": 1622, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-e2479ad805d72aa23c843c65", "kind": "tls_client_hello", "frame_number": 82285, "timestamp_epoch": "1634918345.153008000", "src_ip": "10.10.22.156", "dst_ip": "52.96.122.226", "src_port": 50199, "dst_port": 25, "tcp_stream": 1623, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-41899ad25a1b1dc12d3b3d3f", "kind": "tls_client_hello", "frame_number": 82432, "timestamp_epoch": "1634918358.891869000", "src_ip": "10.10.22.156", "dst_ip": "52.96.103.18", "src_port": 50200, "dst_port": 25, "tcp_stream": 1624, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-932bd8b3549ec538c1066da8", "kind": "tls_client_hello", "frame_number": 82563, "timestamp_epoch": "1634918376.416496000", "src_ip": "10.10.22.156", "dst_ip": "52.96.91.66", "src_port": 50201, "dst_port": 25, "tcp_stream": 1625, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-bc7bbb1d9dda81555bcae0b6", "kind": "tls_client_hello", "frame_number": 82676, "timestamp_epoch": "1634918385.455704000", "src_ip": "10.10.22.156", "dst_ip": "52.96.90.18", "src_port": 50202, "dst_port": 25, "tcp_stream": 1626, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-a5596ea7aa831d54df1037d0", "kind": "tls_client_hello", "frame_number": 82816, "timestamp_epoch": "1634918397.458205000", "src_ip": "10.10.22.156", "dst_ip": "81.2.195.204", "src_port": 50203, "dst_port": 25, "tcp_stream": 1627, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.forpsi.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-954eb07570e5ba0898c06efc", "kind": "tls_client_hello", "frame_number": 82970, "timestamp_epoch": "1634918421.746952000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50204, "dst_port": 25, "tcp_stream": 1628, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.be-daventure.fr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d8edc3f989eca2bdd0440f22", "kind": "tls_client_hello", "frame_number": 83089, "timestamp_epoch": "1634918426.001472000", "src_ip": "10.10.22.156", "dst_ip": "82.98.154.100", "src_port": 50206, "dst_port": 25, "tcp_stream": 1630, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.verificalitas.es", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-eac169d2421aef5bd6b17f9e", "kind": "tls_client_hello", "frame_number": 83101, "timestamp_epoch": "1634918426.195056000", "src_ip": "10.10.22.156", "dst_ip": "111.223.52.28", "src_port": 50205, "dst_port": 25, "tcp_stream": 1629, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.doctor-healthcare.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-178f95f35dc208781a72f56a", "kind": "tls_client_hello", "frame_number": 83199, "timestamp_epoch": "1634918429.183895000", "src_ip": "10.10.22.156", "dst_ip": "207.246.112.221", "src_port": 50207, "dst_port": 443, "tcp_stream": 1631, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-46cd368d856d9008ea7f0dc0", "kind": "tls_client_hello", "frame_number": 83469, "timestamp_epoch": "1634918470.205248000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50209, "dst_port": 25, "tcp_stream": 1634, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.ma-communication.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-15b2e680950c905c0ff4f7bb", "kind": "tls_client_hello", "frame_number": 83606, "timestamp_epoch": "1634918479.022103000", "src_ip": "10.10.22.156", "dst_ip": "111.223.52.28", "src_port": 50210, "dst_port": 25, "tcp_stream": 1635, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.doctor-healthcare.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-9f39e83f1957049880b1ca13", "kind": "tls_client_hello", "frame_number": 83713, "timestamp_epoch": "1634918490.053480000", "src_ip": "10.10.22.158", "dst_ip": "194.15.112.173", "src_port": 49884, "dst_port": 443, "tcp_stream": 1639, "udp_stream": null, "fields": { "tls.handshake.ja3": "51c64c77e60f3980eea90869b68c58a8" } }, { "event_id": "evt-5efcda8e5ee2a6bed25f7bb6", "kind": "tls_client_hello", "frame_number": 83847, "timestamp_epoch": "1634918512.475242000", "src_ip": "10.10.22.156", "dst_ip": "193.70.18.144", "src_port": 50212, "dst_port": 25, "tcp_stream": 1646, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.ma-communication.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-85628d3faf38e0994bc926f5", "kind": "tls_client_hello", "frame_number": 84192, "timestamp_epoch": "1634918551.905691000", "src_ip": "10.10.22.156", "dst_ip": "62.103.147.201", "src_port": 50216, "dst_port": 25, "tcp_stream": 1651, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "mail.otenet.gr", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-d18b895e47d97ae767a54526", "kind": "tls_client_hello", "frame_number": 84328, "timestamp_epoch": "1634918562.623510000", "src_ip": "10.10.22.156", "dst_ip": "123.58.177.213", "src_port": 50217, "dst_port": 25, "tcp_stream": 1652, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "yeahmx01.mxmail.netease.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } }, { "event_id": "evt-2bf6c2cf5aed134d25d9e142", "kind": "tls_client_hello", "frame_number": 84457, "timestamp_epoch": "1634918588.125004000", "src_ip": "10.10.22.156", "dst_ip": "40.97.212.2", "src_port": 50218, "dst_port": 25, "tcp_stream": 1653, "udp_stream": null, "fields": { "tls.handshake.extensions_server_name": "smtp.outlook.com", "tls.handshake.ja3": "df669e7ea913f1ac0c0cce9a201a2ec1" } } ], "dhcp": [ { "event_id": "evt-877e86dc1a18589c522f7e8b", "kind": "dhcp", "frame_number": 1, "timestamp_epoch": "1634913051.987411000", "src_ip": "0.0.0.0", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 0, "fields": { "dhcp.hw.mac_addr": "00:18:71:3b:a8:69,00:18:71:3b:a8:69", "dhcp.ip.your": "0.0.0.0", "dhcp.option.dhcp": "3", "dhcp.option.hostname": "DESKTOP-NZ875R4", "dhcp.option.requested_ip_address": "10.10.22.157", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a8693c4a735c585237520c54", "kind": "dhcp", "frame_number": 2, "timestamp_epoch": "1634913051.988002000", "src_ip": "10.10.22.22", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1, "fields": { "dhcp.hw.mac_addr": "00:18:71:3b:a8:69", "dhcp.ip.your": "10.10.22.157", "dhcp.option.dhcp": "5", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e287f3cc30453cce8d6716f5", "kind": "dhcp", "frame_number": 776, "timestamp_epoch": "1634913112.606848000", "src_ip": "0.0.0.0", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 0, "fields": { "dhcp.hw.mac_addr": "00:23:ae:fd:02:01,00:23:ae:fd:02:01", "dhcp.ip.your": "0.0.0.0", "dhcp.option.dhcp": "3", "dhcp.option.hostname": "DESKTOP-CFA3367", "dhcp.option.requested_ip_address": "10.10.22.156", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f6ea0cc9a9af5d87b2f6eed7", "kind": "dhcp", "frame_number": 777, "timestamp_epoch": "1634913112.607434000", "src_ip": "10.10.22.22", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1, "fields": { "dhcp.hw.mac_addr": "00:23:ae:fd:02:01", "dhcp.ip.your": "10.10.22.156", "dhcp.option.dhcp": "5", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4441a871aef4654c6e5958fb", "kind": "dhcp", "frame_number": 1667, "timestamp_epoch": "1634913143.408229000", "src_ip": "0.0.0.0", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 0, "fields": { "dhcp.hw.mac_addr": "00:0e:35:30:b7:21,00:0e:35:30:b7:21", "dhcp.ip.your": "0.0.0.0", "dhcp.option.dhcp": "3", "dhcp.option.hostname": "DESKTOP-87WCE26", "dhcp.option.requested_ip_address": "10.10.22.158", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3cef9338fdf56d30066e5cb4", "kind": "dhcp", "frame_number": 1668, "timestamp_epoch": "1634913143.408993000", "src_ip": "10.10.22.22", "dst_ip": "255.255.255.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1, "fields": { "dhcp.hw.mac_addr": "00:0e:35:30:b7:21", "dhcp.ip.your": "10.10.22.158", "dhcp.option.dhcp": "5", "eth.src": "a4:1f:72:c2:09:6a" } } ], "identity": [ { "event_id": "evt-17e487ec7e56508498a5c07f", "kind": "identity", "frame_number": 8, "timestamp_epoch": "1634913052.109869000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7c669008b2f30788efce823f", "kind": "identity", "frame_number": 9, "timestamp_epoch": "1634913052.110396000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ff95e4de03af5047cb135337", "kind": "identity", "frame_number": 10, "timestamp_epoch": "1634913052.113364000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 3, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0da62e80cc03983ccddb719e", "kind": "identity", "frame_number": 42, "timestamp_epoch": "1634913053.870688000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-22a24de2e17aa565b7e6fd16", "kind": "identity", "frame_number": 43, "timestamp_epoch": "1634913053.870984000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-e00d435016ed971152aaf1f0", "kind": "identity", "frame_number": 80, "timestamp_epoch": "1634913054.060291000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 4, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-e38899f8416b240e7f47a8ea", "kind": "identity", "frame_number": 81, "timestamp_epoch": "1634913054.060688000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 4, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-b7d26b0680cfec06a377ee4a", "kind": "identity", "frame_number": 98, "timestamp_epoch": "1634913054.070767000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 6, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-45f853477c98e7f1c753a1c6", "kind": "identity", "frame_number": 100, "timestamp_epoch": "1634913054.071481000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 6, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "11" } }, { "event_id": "evt-2cacf908927887ca38f77589", "kind": "identity", "frame_number": 109, "timestamp_epoch": "1634913054.074397000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 7, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-207279e5e2c3f90103314e75", "kind": "identity", "frame_number": 112, "timestamp_epoch": "1634913054.075197000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 7, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-d77d040e6ea3c7c45af165f7", "kind": "identity", "frame_number": 118, "timestamp_epoch": "1634913054.081929000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-a78d96462d4e745757dfcd1e", "kind": "identity", "frame_number": 120, "timestamp_epoch": "1634913054.081960000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-95745447f2441162080a1e86", "kind": "identity", "frame_number": 123, "timestamp_epoch": "1634913054.082826000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-1f16ebdcf25ffcfa46091ee2", "kind": "identity", "frame_number": 124, "timestamp_epoch": "1634913054.082974000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f2aa904987d2e1ea1ed1af63", "kind": "identity", "frame_number": 125, "timestamp_epoch": "1634913054.083166000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-0d24ab50576a2ad33a6256c6", "kind": "identity", "frame_number": 140, "timestamp_epoch": "1634913054.086772000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-6479a6167fcd65893afc7ff2", "kind": "identity", "frame_number": 142, "timestamp_epoch": "1634913054.087250000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-addfe98d9ca40046762f31cf", "kind": "identity", "frame_number": 143, "timestamp_epoch": "1634913054.087485000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-37cf66f39d4461e399c97514", "kind": "identity", "frame_number": 181, "timestamp_epoch": "1634913054.316090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-470243f74f9a26256d277b90", "kind": "identity", "frame_number": 182, "timestamp_epoch": "1634913054.316344000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-4d4f9e152f16ddbab0e3be8e", "kind": "identity", "frame_number": 183, "timestamp_epoch": "1634913054.316632000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cbc0d0fa3d522c473fab48e0", "kind": "identity", "frame_number": 197, "timestamp_epoch": "1634913054.364095000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 11, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-834ca1602d0723eae02c396c", "kind": "identity", "frame_number": 198, "timestamp_epoch": "1634913054.364998000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 11, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-19e937dd4d5f38344c4639d0", "kind": "identity", "frame_number": 207, "timestamp_epoch": "1634913054.373964000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 12, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-cba21024b9907763085c7148", "kind": "identity", "frame_number": 209, "timestamp_epoch": "1634913054.374917000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 12, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "11" } }, { "event_id": "evt-c0e4783a687c7211ef5a9d23", "kind": "identity", "frame_number": 218, "timestamp_epoch": "1634913054.388192000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 13, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-095e12c9c5d29ce51fd62057", "kind": "identity", "frame_number": 221, "timestamp_epoch": "1634913054.389337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 13, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-b3b96b0efe64b62cf05d29c6", "kind": "identity", "frame_number": 230, "timestamp_epoch": "1634913054.390286000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 14, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-5c2ec43f696c655ff6204a25", "kind": "identity", "frame_number": 233, "timestamp_epoch": "1634913054.390879000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 14, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-6d904de0a0f145a58075fc77", "kind": "identity", "frame_number": 240, "timestamp_epoch": "1634913054.391688000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-545a885dd58686d8f5cecd6e", "kind": "identity", "frame_number": 244, "timestamp_epoch": "1634913054.392454000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-03b2466b6ec3ab8096ba807d", "kind": "identity", "frame_number": 245, "timestamp_epoch": "1634913054.392805000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-8edc7db585a93240699f9a90", "kind": "identity", "frame_number": 246, "timestamp_epoch": "1634913054.392923000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-013861380e8d6ee957ff62a8", "kind": "identity", "frame_number": 247, "timestamp_epoch": "1634913054.393323000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-bc1ba3e6f392ebfb8cb35e6c", "kind": "identity", "frame_number": 248, "timestamp_epoch": "1634913054.393434000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cbd53f770537e0866e943c05", "kind": "identity", "frame_number": 251, "timestamp_epoch": "1634913054.428229000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-8f58355df2be433a432753c5", "kind": "identity", "frame_number": 252, "timestamp_epoch": "1634913054.428603000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0ffa26a4e87f7772c819d4bb", "kind": "identity", "frame_number": 280, "timestamp_epoch": "1634913054.707829000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 17, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-ee351c38134430bec14e2e48", "kind": "identity", "frame_number": 281, "timestamp_epoch": "1634913054.708422000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 17, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-b45f2f1ae3b3e1c6e6544fe0", "kind": "identity", "frame_number": 288, "timestamp_epoch": "1634913054.709117000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 18, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "desktop-nz875r4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-9518869421ae008e359e3e32", "kind": "identity", "frame_number": 290, "timestamp_epoch": "1634913054.709731000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 18, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "11" } }, { "event_id": "evt-f3c958db909ff9a726ecceab", "kind": "identity", "frame_number": 299, "timestamp_epoch": "1634913054.711085000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 19, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-f9a1d8773c54c6eb0179a024", "kind": "identity", "frame_number": 302, "timestamp_epoch": "1634913054.711963000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 19, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-7d15729c46ae1180eb014e8c", "kind": "identity", "frame_number": 308, "timestamp_epoch": "1634913054.713809000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-8cc2ee34f3de4273cfb58a71", "kind": "identity", "frame_number": 310, "timestamp_epoch": "1634913054.714640000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-db80b1f28ff2eaf10a67f0c2", "kind": "identity", "frame_number": 318, "timestamp_epoch": "1634913054.920525000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-a83e5452f55a17ec8805e0fd", "kind": "identity", "frame_number": 320, "timestamp_epoch": "1634913054.921122000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-1aab0877b8112a6fa8202a23", "kind": "identity", "frame_number": 321, "timestamp_epoch": "1634913054.921403000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-f1ddc4c76c8bcecfb0675236", "kind": "identity", "frame_number": 333, "timestamp_epoch": "1634913054.958211000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9399ab4098803f00c201e2c6", "kind": "identity", "frame_number": 334, "timestamp_epoch": "1634913054.969636000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-14a6dee2312f63fc5b2f54b8", "kind": "identity", "frame_number": 335, "timestamp_epoch": "1634913054.969991000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bfa770394f33b780cdfb4333", "kind": "identity", "frame_number": 342, "timestamp_epoch": "1634913055.363048000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-1f938e7ae5ad54b7b135a639", "kind": "identity", "frame_number": 343, "timestamp_epoch": "1634913055.363162000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6daa3a9349625fa5b44669f9", "kind": "identity", "frame_number": 352, "timestamp_epoch": "1634913055.634492000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-5e1d674340a84da762c8f009", "kind": "identity", "frame_number": 354, "timestamp_epoch": "1634913055.635128000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-50a36de7cf5625f9f7b7cd7a", "kind": "identity", "frame_number": 361, "timestamp_epoch": "1634913055.674241000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 21, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-88224677711d5f489ed66710", "kind": "identity", "frame_number": 364, "timestamp_epoch": "1634913055.675094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 21, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-a05b2789cb836bc4de7416dd", "kind": "identity", "frame_number": 375, "timestamp_epoch": "1634913055.691325000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-766f65c9bfe34a86a478e7bf", "kind": "identity", "frame_number": 377, "timestamp_epoch": "1634913055.692172000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-ea9eb84c2bc0dba4680d79bb", "kind": "identity", "frame_number": 392, "timestamp_epoch": "1634913055.740189000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 23, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-c84e6987c2b23f36a6d23b96", "kind": "identity", "frame_number": 395, "timestamp_epoch": "1634913055.741180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 23, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-8a48fd7c0ce95ae99430b38d", "kind": "identity", "frame_number": 404, "timestamp_epoch": "1634913055.743576000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 24, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-87fa3f4d9452cc3e66ba5ad0", "kind": "identity", "frame_number": 407, "timestamp_epoch": "1634913055.743870000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 24, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-1ddd21918f93043313bf4591", "kind": "identity", "frame_number": 414, "timestamp_epoch": "1634913055.746606000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-fc1b2da5c8e5d43def0c2f43", "kind": "identity", "frame_number": 416, "timestamp_epoch": "1634913055.747464000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-da8239d0f41aefd89097f3a0", "kind": "identity", "frame_number": 417, "timestamp_epoch": "1634913055.747974000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-38def59e9408e636ef0f2c66", "kind": "identity", "frame_number": 418, "timestamp_epoch": "1634913055.748194000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-29a5b2c966cf6cb4d4667c5b", "kind": "identity", "frame_number": 419, "timestamp_epoch": "1634913055.760847000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-4fa1dbbd62d07252bb813ee9", "kind": "identity", "frame_number": 420, "timestamp_epoch": "1634913055.761262000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8dc36b8ef6a62ae09c2525a8", "kind": "identity", "frame_number": 421, "timestamp_epoch": "1634913055.761929000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-cb11345b4b93fd8fb1e774a4", "kind": "identity", "frame_number": 422, "timestamp_epoch": "1634913055.762097000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b34db388b0b5e8481bae358f", "kind": "identity", "frame_number": 423, "timestamp_epoch": "1634913055.766252000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5f7eb6394d03da4de1106818", "kind": "identity", "frame_number": 424, "timestamp_epoch": "1634913055.766502000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-29eb138ad481b1a3db47f8fb", "kind": "identity", "frame_number": 425, "timestamp_epoch": "1634913055.766880000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-de912ca5826459e2c89762d8", "kind": "identity", "frame_number": 426, "timestamp_epoch": "1634913055.767062000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c0360314eadf7f563cf07d83", "kind": "identity", "frame_number": 427, "timestamp_epoch": "1634913055.771138000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-61a59543ea2dbd20fcb01c31", "kind": "identity", "frame_number": 428, "timestamp_epoch": "1634913055.771484000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f520cfe9815b27e62446612a", "kind": "identity", "frame_number": 429, "timestamp_epoch": "1634913055.772465000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7654bb37678f36da81336d87", "kind": "identity", "frame_number": 430, "timestamp_epoch": "1634913055.772688000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b6bd5edf2876716b29df22bf", "kind": "identity", "frame_number": 431, "timestamp_epoch": "1634913055.772853000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-70b5f8cd39eaf9748ab12f76", "kind": "identity", "frame_number": 432, "timestamp_epoch": "1634913055.773042000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a306574f85c71bd1534b9294", "kind": "identity", "frame_number": 433, "timestamp_epoch": "1634913055.773850000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-065dff2c9dcdcfd283732bba", "kind": "identity", "frame_number": 434, "timestamp_epoch": "1634913055.774106000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d6263118f08e66c46637dd0d", "kind": "identity", "frame_number": 435, "timestamp_epoch": "1634913055.774655000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-564a20c45b4d80b3e1147a93", "kind": "identity", "frame_number": 436, "timestamp_epoch": "1634913055.774807000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5431d427eb18c1bbb3554f02", "kind": "identity", "frame_number": 437, "timestamp_epoch": "1634913055.774954000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-96f7735fa6134e30a3c89028", "kind": "identity", "frame_number": 438, "timestamp_epoch": "1634913055.775335000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fde90e43dda4769de4bb537a", "kind": "identity", "frame_number": 439, "timestamp_epoch": "1634913055.776150000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ac1cbf7e094f15438e1af0a9", "kind": "identity", "frame_number": 440, "timestamp_epoch": "1634913055.776333000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-670d386cde3f615320266d00", "kind": "identity", "frame_number": 441, "timestamp_epoch": "1634913055.776565000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-cfb9a890b10487edb77b01ba", "kind": "identity", "frame_number": 442, "timestamp_epoch": "1634913055.776723000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-81c4471d27e52caf50583df5", "kind": "identity", "frame_number": 443, "timestamp_epoch": "1634913055.776957000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c5198b6ac2157cc40a8414c2", "kind": "identity", "frame_number": 444, "timestamp_epoch": "1634913055.777316000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4f4cdd404c8abcf246850488", "kind": "identity", "frame_number": 445, "timestamp_epoch": "1634913055.778329000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7387eb3d8cc3a33ffcdb900c", "kind": "identity", "frame_number": 446, "timestamp_epoch": "1634913055.778555000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-eb6a3aa52447a3152c816497", "kind": "identity", "frame_number": 447, "timestamp_epoch": "1634913055.778970000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-f0d984d8dac174f63ef0c8ec", "kind": "identity", "frame_number": 448, "timestamp_epoch": "1634913055.779081000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c2054a142c89eaf63ff8a4f4", "kind": "identity", "frame_number": 449, "timestamp_epoch": "1634913055.779212000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-797b021dd70cb209a470c73e", "kind": "identity", "frame_number": 450, "timestamp_epoch": "1634913055.779486000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f3e4d655e33851922a0bed6d", "kind": "identity", "frame_number": 451, "timestamp_epoch": "1634913055.779795000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7c49f22aecdc3f3738b14f10", "kind": "identity", "frame_number": 452, "timestamp_epoch": "1634913055.780012000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bc5429aae4dbfd64ddf629f3", "kind": "identity", "frame_number": 453, "timestamp_epoch": "1634913055.780203000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-82f37c7dd05013ae0f973ffa", "kind": "identity", "frame_number": 454, "timestamp_epoch": "1634913055.780314000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-075bc55558b4a83c7f016356", "kind": "identity", "frame_number": 455, "timestamp_epoch": "1634913055.780528000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ec9bb6a7599c30851c49b7ba", "kind": "identity", "frame_number": 456, "timestamp_epoch": "1634913055.780669000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-05b7a558068aede1b89bbdfc", "kind": "identity", "frame_number": 457, "timestamp_epoch": "1634913055.781775000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-96c457a4757575ca5990d80f", "kind": "identity", "frame_number": 458, "timestamp_epoch": "1634913055.781884000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ae4de94c33936955a21b99a8", "kind": "identity", "frame_number": 459, "timestamp_epoch": "1634913055.782189000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-8128c35d7a3f1121223ac31e", "kind": "identity", "frame_number": 460, "timestamp_epoch": "1634913055.782397000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4ae2866a6fb433cec9977439", "kind": "identity", "frame_number": 461, "timestamp_epoch": "1634913055.782743000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ec4c3b3f7c0595697841be37", "kind": "identity", "frame_number": 462, "timestamp_epoch": "1634913055.782842000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f85752f2c97766747c4beef0", "kind": "identity", "frame_number": 463, "timestamp_epoch": "1634913055.783001000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b22efb82afb706fa56795a38", "kind": "identity", "frame_number": 464, "timestamp_epoch": "1634913055.783153000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-071c4f8abdc6aa7d19c7b41f", "kind": "identity", "frame_number": 465, "timestamp_epoch": "1634913055.783371000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-00fd9b5674256e02158f3038", "kind": "identity", "frame_number": 466, "timestamp_epoch": "1634913055.783504000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4cd6bd05d762bc3d0ced8875", "kind": "identity", "frame_number": 467, "timestamp_epoch": "1634913055.783693000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-69fac9b272008a0a105a0eaa", "kind": "identity", "frame_number": 468, "timestamp_epoch": "1634913055.783827000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-da1815bcffe0cd64f87f2036", "kind": "identity", "frame_number": 469, "timestamp_epoch": "1634913055.784502000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b98708e68cd072ca1415c61f", "kind": "identity", "frame_number": 470, "timestamp_epoch": "1634913055.784605000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bac187417046986419fb15d5", "kind": "identity", "frame_number": 471, "timestamp_epoch": "1634913055.785464000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-f4a523aee59faef41dd872d0", "kind": "identity", "frame_number": 472, "timestamp_epoch": "1634913055.785615000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b87754d862394af717676e73", "kind": "identity", "frame_number": 473, "timestamp_epoch": "1634913055.786126000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b3206a0372b289a08e88a116", "kind": "identity", "frame_number": 474, "timestamp_epoch": "1634913055.786230000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dab8231b317d07ac7b7250b0", "kind": "identity", "frame_number": 475, "timestamp_epoch": "1634913055.786487000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-4be8aba84e7594a1ec01cb9e", "kind": "identity", "frame_number": 476, "timestamp_epoch": "1634913055.786633000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8895f088cab40471e4fcd580", "kind": "identity", "frame_number": 477, "timestamp_epoch": "1634913055.787063000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-f1a7c3c4655a704267d1c5b5", "kind": "identity", "frame_number": 478, "timestamp_epoch": "1634913055.787189000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c74ae82432fc01124998ad9e", "kind": "identity", "frame_number": 479, "timestamp_epoch": "1634913055.787610000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-54825aba1394e7ea63586826", "kind": "identity", "frame_number": 480, "timestamp_epoch": "1634913055.787839000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-de5b18c4ecbf1066578cac4b", "kind": "identity", "frame_number": 481, "timestamp_epoch": "1634913055.787984000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-159e5c304c5b68eccebf2758", "kind": "identity", "frame_number": 482, "timestamp_epoch": "1634913055.788089000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ae1679ef09d86614841b315d", "kind": "identity", "frame_number": 483, "timestamp_epoch": "1634913055.788324000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-40decc967725b0d997c61a82", "kind": "identity", "frame_number": 484, "timestamp_epoch": "1634913055.788422000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6619619f09960b59bcf26f49", "kind": "identity", "frame_number": 485, "timestamp_epoch": "1634913055.788575000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-063d4573e522c05e38673503", "kind": "identity", "frame_number": 486, "timestamp_epoch": "1634913055.788711000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-34555f19626245de010fd081", "kind": "identity", "frame_number": 487, "timestamp_epoch": "1634913055.789726000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-25c71fa8dc2d32e9d249943d", "kind": "identity", "frame_number": 488, "timestamp_epoch": "1634913055.789923000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3faf689f733d3d573f1bb59b", "kind": "identity", "frame_number": 489, "timestamp_epoch": "1634913055.790147000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-cb0bd64208b456af4dee2501", "kind": "identity", "frame_number": 490, "timestamp_epoch": "1634913055.790262000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-da9e6563c3df10c4f3f14513", "kind": "identity", "frame_number": 491, "timestamp_epoch": "1634913055.790388000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-fc58879fc2185299e61aa79a", "kind": "identity", "frame_number": 492, "timestamp_epoch": "1634913055.790526000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-61369d3881d85b58a588d0b0", "kind": "identity", "frame_number": 493, "timestamp_epoch": "1634913055.791052000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ce753e4a06dcc5937ac9154a", "kind": "identity", "frame_number": 494, "timestamp_epoch": "1634913055.791166000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4578e4a06260209ddfc0a740", "kind": "identity", "frame_number": 495, "timestamp_epoch": "1634913055.791372000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-f27292882be33cfd371b157d", "kind": "identity", "frame_number": 496, "timestamp_epoch": "1634913055.791487000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-afb94ad4e5ac75698cfc4c13", "kind": "identity", "frame_number": 497, "timestamp_epoch": "1634913055.792188000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b35c38ca3ba956cb580eafbe", "kind": "identity", "frame_number": 498, "timestamp_epoch": "1634913055.792296000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-44d00bf7444df5bcc75ef15b", "kind": "identity", "frame_number": 499, "timestamp_epoch": "1634913055.793275000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ca862736d89c965e0c48465f", "kind": "identity", "frame_number": 500, "timestamp_epoch": "1634913055.793399000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a679074ddeb3aa2d44748344", "kind": "identity", "frame_number": 501, "timestamp_epoch": "1634913055.793766000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-70fe7ff6c468fd3671dc99da", "kind": "identity", "frame_number": 503, "timestamp_epoch": "1634913055.793933000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1ff0efd8d60fa4fe287f9436", "kind": "identity", "frame_number": 505, "timestamp_epoch": "1634913055.794490000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-018f520a5523a3b7944c734f", "kind": "identity", "frame_number": 506, "timestamp_epoch": "1634913055.794607000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f9a2b90b9a29f69e94e429af", "kind": "identity", "frame_number": 507, "timestamp_epoch": "1634913055.794932000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-eed2d2d2850c6584dff1a158", "kind": "identity", "frame_number": 508, "timestamp_epoch": "1634913055.795135000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0fe9395f6159fa0fa84cff8c", "kind": "identity", "frame_number": 509, "timestamp_epoch": "1634913055.795535000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c57d283104154c8f723f7ba5", "kind": "identity", "frame_number": 510, "timestamp_epoch": "1634913055.795643000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2d5378c694e8e0f6c246e4af", "kind": "identity", "frame_number": 511, "timestamp_epoch": "1634913055.795804000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-386fc1620c38371bc31050ba", "kind": "identity", "frame_number": 512, "timestamp_epoch": "1634913055.795907000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7d4ea2d1fa245c1fb011b787", "kind": "identity", "frame_number": 513, "timestamp_epoch": "1634913055.796124000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-3e9d86985d43e65a6cdd129b", "kind": "identity", "frame_number": 514, "timestamp_epoch": "1634913055.796229000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aa09fb6f5ae6390820cd2f0a", "kind": "identity", "frame_number": 515, "timestamp_epoch": "1634913055.796443000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-59deb8002a87abba689d8ab0", "kind": "identity", "frame_number": 516, "timestamp_epoch": "1634913055.796552000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f789e846be63513c577cff96", "kind": "identity", "frame_number": 517, "timestamp_epoch": "1634913055.796786000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7553c24ef8f540923440c0bd", "kind": "identity", "frame_number": 518, "timestamp_epoch": "1634913055.796960000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4e94b078d2bed59e80e1677a", "kind": "identity", "frame_number": 519, "timestamp_epoch": "1634913055.797283000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e07bf857012c8c2768a465bc", "kind": "identity", "frame_number": 520, "timestamp_epoch": "1634913055.797386000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-460e285ce116218084b618b3", "kind": "identity", "frame_number": 521, "timestamp_epoch": "1634913055.797526000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-fdb3be9720a006f07b831ea7", "kind": "identity", "frame_number": 522, "timestamp_epoch": "1634913055.797660000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-13ce521a2321b423dd10f6b3", "kind": "identity", "frame_number": 523, "timestamp_epoch": "1634913055.797873000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-2e53dd38bdb889dd9797de7e", "kind": "identity", "frame_number": 524, "timestamp_epoch": "1634913055.797979000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-deae8356e43f732031a96e29", "kind": "identity", "frame_number": 525, "timestamp_epoch": "1634913055.798303000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7206417c87d0c452bb711f6e", "kind": "identity", "frame_number": 526, "timestamp_epoch": "1634913055.798439000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-32e6c47c8ca02a4e493a8501", "kind": "identity", "frame_number": 527, "timestamp_epoch": "1634913055.798547000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-90db65b90b2d9705d851ccc9", "kind": "identity", "frame_number": 528, "timestamp_epoch": "1634913055.798644000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-34ea73dc208718c4ad4cbfb2", "kind": "identity", "frame_number": 529, "timestamp_epoch": "1634913055.799323000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-42ff6a3cb1be663ca3cfe1d0", "kind": "identity", "frame_number": 530, "timestamp_epoch": "1634913055.799459000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4901c9126928ed4b606d9d4c", "kind": "identity", "frame_number": 531, "timestamp_epoch": "1634913055.804699000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-be4f70e9312cf8c0c28713a8", "kind": "identity", "frame_number": 532, "timestamp_epoch": "1634913055.804938000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4be32916fa0c69a7ab8412e6", "kind": "identity", "frame_number": 533, "timestamp_epoch": "1634913055.805997000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e2b8c78e9190246fdd33825b", "kind": "identity", "frame_number": 534, "timestamp_epoch": "1634913055.806182000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-69fbc0c3e1012d3b833b7c41", "kind": "identity", "frame_number": 545, "timestamp_epoch": "1634913056.488079000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fc1df81921d55ba7b33d400f", "kind": "identity", "frame_number": 546, "timestamp_epoch": "1634913056.878694000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-cfe651f39c77d4f701566276", "kind": "identity", "frame_number": 547, "timestamp_epoch": "1634913056.878752000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f5a6d54acf7e5afba5c11582", "kind": "identity", "frame_number": 563, "timestamp_epoch": "1634913057.664697000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-11d599dc3527ac05d913fe45", "kind": "identity", "frame_number": 565, "timestamp_epoch": "1634913057.665309000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-720807f37feb127ed5a1313a", "kind": "identity", "frame_number": 566, "timestamp_epoch": "1634913057.666570000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-f7edb5d90688489d866b3fb0", "kind": "identity", "frame_number": 590, "timestamp_epoch": "1634913057.675607000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-a23d7ae4bc5b15867c32eefc", "kind": "identity", "frame_number": 592, "timestamp_epoch": "1634913057.676331000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-6bdd247dfb651be708274bea", "kind": "identity", "frame_number": 603, "timestamp_epoch": "1634913057.679882000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-0ec7d90566705be8a32da108", "kind": "identity", "frame_number": 605, "timestamp_epoch": "1634913057.680537000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-9d238397f87de29595b39cb7", "kind": "identity", "frame_number": 623, "timestamp_epoch": "1634913057.988133000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-39da7d971588bdf7d76df9fe", "kind": "identity", "frame_number": 624, "timestamp_epoch": "1634913058.411946000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-aa76829a0796b11457a13270", "kind": "identity", "frame_number": 625, "timestamp_epoch": "1634913058.412198000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-5042cfe3ee15c18879e191ff", "kind": "identity", "frame_number": 626, "timestamp_epoch": "1634913059.175670000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-9c3504e4233d418470e50c39", "kind": "identity", "frame_number": 627, "timestamp_epoch": "1634913059.175815000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-14d66895b5a907b8ea09041d", "kind": "identity", "frame_number": 628, "timestamp_epoch": "1634913059.566278000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d24a4076d09a7028e6c07a93", "kind": "identity", "frame_number": 629, "timestamp_epoch": "1634913059.956931000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1eb7beef000e82f7040a868a", "kind": "identity", "frame_number": 630, "timestamp_epoch": "1634913059.957115000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-f3476d2258977743992174b2", "kind": "identity", "frame_number": 631, "timestamp_epoch": "1634913060.378814000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-118bd795031082a17ca8e964", "kind": "identity", "frame_number": 632, "timestamp_epoch": "1634913060.770870000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<00>,DESKTOP-NZ875R4<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6945f3c6ebce491eb911f3d0", "kind": "identity", "frame_number": 633, "timestamp_epoch": "1634913060.771156000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-08de07c4574825b22b630c58", "kind": "identity", "frame_number": 634, "timestamp_epoch": "1634913061.177107000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dbc0b52b70ffe379c76eb86d", "kind": "identity", "frame_number": 635, "timestamp_epoch": "1634913061.973600000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 26, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-72c6ad12f9b8a72e33c72f1b", "kind": "identity", "frame_number": 638, "timestamp_epoch": "1634913062.813903000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-14194c31a0c42f60b61078f1", "kind": "identity", "frame_number": 649, "timestamp_epoch": "1634913063.057256000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-73d4e57a52bdc8700a97412e", "kind": "identity", "frame_number": 651, "timestamp_epoch": "1634913063.058151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-ddd47a0896b498eca4795db6", "kind": "identity", "frame_number": 666, "timestamp_epoch": "1634913063.080613000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-20b6cb2744a73945dfa4bd2f", "kind": "identity", "frame_number": 668, "timestamp_epoch": "1634913063.081501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-4b5d553b910b8a6c99117538", "kind": "identity", "frame_number": 674, "timestamp_epoch": "1634913063.084470000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 31, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-499cef4ed2cfbe20182e8659", "kind": "identity", "frame_number": 675, "timestamp_epoch": "1634913063.084920000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 31, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-20ce4cde08a3cd31a41930c4", "kind": "identity", "frame_number": 682, "timestamp_epoch": "1634913063.085568000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 32, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "10" } }, { "event_id": "evt-a7f10ab2db18427a61a1366c", "kind": "identity", "frame_number": 684, "timestamp_epoch": "1634913063.086125000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 32, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "11" } }, { "event_id": "evt-7b00338fe1f65c59414326aa", "kind": "identity", "frame_number": 693, "timestamp_epoch": "1634913063.086962000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 33, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-fd34e237b36adb4857546c58", "kind": "identity", "frame_number": 696, "timestamp_epoch": "1634913063.087678000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 33, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-NZ875R4$", "kerberos.msg_type": "13" } }, { "event_id": "evt-56b223c235ee48a64455e2dd", "kind": "identity", "frame_number": 732, "timestamp_epoch": "1634913065.161812000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9830b3ad5a992ce7b0b576b8", "kind": "identity", "frame_number": 733, "timestamp_epoch": "1634913065.162091000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dbc9961e4596b72caee66708", "kind": "identity", "frame_number": 734, "timestamp_epoch": "1634913065.162468000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6ebeb9ced3b34422f7e7dae4", "kind": "identity", "frame_number": 735, "timestamp_epoch": "1634913065.162757000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7cfb29761556efae964f7a00", "kind": "identity", "frame_number": 783, "timestamp_epoch": "1634913112.821779000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0e1a271bcb6eb303b9df3c46", "kind": "identity", "frame_number": 784, "timestamp_epoch": "1634913112.822356000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4a498e63f2ee7b66d87c8ecd", "kind": "identity", "frame_number": 785, "timestamp_epoch": "1634913112.848322000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 35, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-541c3d447396ca68dbf15269", "kind": "identity", "frame_number": 797, "timestamp_epoch": "1634913113.386438000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-259150f435a6aca9d53f815a", "kind": "identity", "frame_number": 798, "timestamp_epoch": "1634913113.386499000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-7e237aca80da83eaf622e06c", "kind": "identity", "frame_number": 817, "timestamp_epoch": "1634913113.769427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-261ef8f756028c5ed2e33163", "kind": "identity", "frame_number": 818, "timestamp_epoch": "1634913113.769678000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-36f478c38b7479b0ef865450", "kind": "identity", "frame_number": 819, "timestamp_epoch": "1634913113.769981000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1153f0e1aec04a465af445da", "kind": "identity", "frame_number": 848, "timestamp_epoch": "1634913114.876916000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 39, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-150165c874981fb0b9c3e54c", "kind": "identity", "frame_number": 849, "timestamp_epoch": "1634913114.877334000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 39, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-e265152aef9d5b713b0e6220", "kind": "identity", "frame_number": 856, "timestamp_epoch": "1634913114.887524000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 40, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-25a897a92e768c8ad2d81e9f", "kind": "identity", "frame_number": 858, "timestamp_epoch": "1634913114.888225000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 40, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "11" } }, { "event_id": "evt-40d2c64c9170d52b4e926170", "kind": "identity", "frame_number": 870, "timestamp_epoch": "1634913114.891502000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-5bae5aaae0929d04c3019027", "kind": "identity", "frame_number": 871, "timestamp_epoch": "1634913114.891550000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-96daef691d0d9e1cb211481f", "kind": "identity", "frame_number": 883, "timestamp_epoch": "1634913114.893968000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 43, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-825740b7b2cce7a04ae8d51c", "kind": "identity", "frame_number": 885, "timestamp_epoch": "1634913114.894392000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 43, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-cdda19f7d5e120b24bf94543", "kind": "identity", "frame_number": 896, "timestamp_epoch": "1634913114.898720000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 45, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-a9d23d74cd564e383022fb4f", "kind": "identity", "frame_number": 899, "timestamp_epoch": "1634913114.899293000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 45, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "11" } }, { "event_id": "evt-0a41a9f73247feb5b9cf1aeb", "kind": "identity", "frame_number": 910, "timestamp_epoch": "1634913114.901972000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 47, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-baef2abdb709b312284f23bc", "kind": "identity", "frame_number": 913, "timestamp_epoch": "1634913114.902471000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 47, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-844a1639b0ff6002b95f80be", "kind": "identity", "frame_number": 921, "timestamp_epoch": "1634913114.902965000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 49, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-61bd4a60834cc133ed7343a6", "kind": "identity", "frame_number": 924, "timestamp_epoch": "1634913114.903053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 48, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-241ca000faba57d5a93cc72f", "kind": "identity", "frame_number": 927, "timestamp_epoch": "1634913114.903831000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 49, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-d94595bccd13fdfa3bb69f09", "kind": "identity", "frame_number": 929, "timestamp_epoch": "1634913114.903912000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 48, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-38aa5d86c5cbb22d19bc4bc2", "kind": "identity", "frame_number": 945, "timestamp_epoch": "1634913114.912201000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 51, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-c60f84009085c9ecd5ba28d5", "kind": "identity", "frame_number": 947, "timestamp_epoch": "1634913114.912442000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 50, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "desktop-cfa3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-e02d8c51f40147f6e1ea5a7a", "kind": "identity", "frame_number": 949, "timestamp_epoch": "1634913114.913042000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 51, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-f5a5be5d3e8f268ee22c1762", "kind": "identity", "frame_number": 953, "timestamp_epoch": "1634913114.913384000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 50, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "11" } }, { "event_id": "evt-897e3398adccc6ca6c0bd31a", "kind": "identity", "frame_number": 962, "timestamp_epoch": "1634913114.914034000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-337953e289f648221eeb76e6", "kind": "identity", "frame_number": 965, "timestamp_epoch": "1634913114.914826000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-ddd0ac700b29fb62fb32138b", "kind": "identity", "frame_number": 967, "timestamp_epoch": "1634913114.915268000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b541a1d348f216ede242a166", "kind": "identity", "frame_number": 968, "timestamp_epoch": "1634913114.915527000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-5073ccdb6955968173a027f4", "kind": "identity", "frame_number": 969, "timestamp_epoch": "1634913114.915888000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4239cb201230926ec2d083d4", "kind": "identity", "frame_number": 970, "timestamp_epoch": "1634913114.916094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-282de28c0f9e28218004219a", "kind": "identity", "frame_number": 971, "timestamp_epoch": "1634913114.916269000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7b037eb770342b92aa132694", "kind": "identity", "frame_number": 972, "timestamp_epoch": "1634913114.916427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c0be23b203b70ff644fdd3ef", "kind": "identity", "frame_number": 977, "timestamp_epoch": "1634913114.917398000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 52, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-cc8a3055d2caa7fe23cfa82e", "kind": "identity", "frame_number": 980, "timestamp_epoch": "1634913114.918262000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 52, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-95e8c93ddfdc0429c989c21f", "kind": "identity", "frame_number": 990, "timestamp_epoch": "1634913114.919521000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-72c32ea909d20b15811ea8dd", "kind": "identity", "frame_number": 992, "timestamp_epoch": "1634913114.920105000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-02d4e8854614d1d174a90f25", "kind": "identity", "frame_number": 993, "timestamp_epoch": "1634913114.920396000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-3cf561fc5342692d82979af6", "kind": "identity", "frame_number": 1008, "timestamp_epoch": "1634913114.923300000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-aca70bdfb0226f4d4b3c42a4", "kind": "identity", "frame_number": 1010, "timestamp_epoch": "1634913114.923870000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f5cd9731903d0750681a250b", "kind": "identity", "frame_number": 1011, "timestamp_epoch": "1634913114.924160000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-7920e2260408870549284d7e", "kind": "identity", "frame_number": 1023, "timestamp_epoch": "1634913114.933363000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-c2abd99694713ac21944d18a", "kind": "identity", "frame_number": 1026, "timestamp_epoch": "1634913114.933981000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-977eb36c2530189f8c97824e", "kind": "identity", "frame_number": 1028, "timestamp_epoch": "1634913114.934603000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-63144edb2ce54bc9e52afac6", "kind": "identity", "frame_number": 1069, "timestamp_epoch": "1634913114.967383000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-f539580b2f0ca2f9d26ea440", "kind": "identity", "frame_number": 1071, "timestamp_epoch": "1634913114.968094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-1ed3dfbeaf964ac13e84bba8", "kind": "identity", "frame_number": 1078, "timestamp_epoch": "1634913114.972304000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b0859884e2b4e11e6b05a4d0", "kind": "identity", "frame_number": 1079, "timestamp_epoch": "1634913114.972651000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cf5759978b3c87a06cabcdf5", "kind": "identity", "frame_number": 1097, "timestamp_epoch": "1634913115.037137000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-efef709b4a2bde69f3d9db7d", "kind": "identity", "frame_number": 1098, "timestamp_epoch": "1634913115.037560000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dd2a9964c5bf130ec24dde65", "kind": "identity", "frame_number": 1106, "timestamp_epoch": "1634913115.050285000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 58, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-ddfc10e42f9c4ef53ec16fb9", "kind": "identity", "frame_number": 1109, "timestamp_epoch": "1634913115.051423000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 58, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-e44ba39c3872072c60dd925d", "kind": "identity", "frame_number": 1115, "timestamp_epoch": "1634913115.052023000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-81cf3274c723553afb80f168", "kind": "identity", "frame_number": 1117, "timestamp_epoch": "1634913115.052509000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-6347cb51fb80e66d1f1b6652", "kind": "identity", "frame_number": 1118, "timestamp_epoch": "1634913115.053265000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-88ce6a29ade9509181aa56ba", "kind": "identity", "frame_number": 1183, "timestamp_epoch": "1634913116.001875000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5ee30a635f3a4576bb756e05", "kind": "identity", "frame_number": 1192, "timestamp_epoch": "1634913116.335888000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-07154ed328d795416dc138df", "kind": "identity", "frame_number": 1194, "timestamp_epoch": "1634913116.336673000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b4df3a9633576f4cb6b03c20", "kind": "identity", "frame_number": 1197, "timestamp_epoch": "1634913116.438441000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-915ed38ffc9416da0a7a0839", "kind": "identity", "frame_number": 1198, "timestamp_epoch": "1634913116.438503000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-8ce15b16af83e9380d9f8e7d", "kind": "identity", "frame_number": 1203, "timestamp_epoch": "1634913116.463295000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 64, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-8189db53d25517a24fd0a89c", "kind": "identity", "frame_number": 1206, "timestamp_epoch": "1634913116.464149000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 64, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-5451c0dee6df29dc61fd00a7", "kind": "identity", "frame_number": 1219, "timestamp_epoch": "1634913116.559484000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-f5f0d2203f093cc0aeda6a61", "kind": "identity", "frame_number": 1221, "timestamp_epoch": "1634913116.560239000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-c66bf2bcd4e1ad116602b57a", "kind": "identity", "frame_number": 1236, "timestamp_epoch": "1634913116.746953000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 66, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-2f03d8379b65344448e304a9", "kind": "identity", "frame_number": 1239, "timestamp_epoch": "1634913116.747935000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 66, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-1828fe193bd7c053207451c0", "kind": "identity", "frame_number": 1248, "timestamp_epoch": "1634913116.749209000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 67, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-68b2a967712bd6d8cd324211", "kind": "identity", "frame_number": 1251, "timestamp_epoch": "1634913116.749617000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 67, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-f91fcc5179e596c0f524a099", "kind": "identity", "frame_number": 1258, "timestamp_epoch": "1634913116.750019000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-b7ef1b6e18ac18fa129b360d", "kind": "identity", "frame_number": 1260, "timestamp_epoch": "1634913116.750856000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-ef874890fbb3c75f920c1c45", "kind": "identity", "frame_number": 1261, "timestamp_epoch": "1634913116.751259000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ec853a7a6bf440ff30af89c6", "kind": "identity", "frame_number": 1262, "timestamp_epoch": "1634913116.751409000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-24c992c77583eb780b85f73a", "kind": "identity", "frame_number": 1263, "timestamp_epoch": "1634913116.757771000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-329d54b6b26fa6d69b38eebd", "kind": "identity", "frame_number": 1264, "timestamp_epoch": "1634913116.758236000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-84b3d75fcbe27907cf0688d0", "kind": "identity", "frame_number": 1265, "timestamp_epoch": "1634913116.758818000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2ddfff774b33a538fdfb9c75", "kind": "identity", "frame_number": 1266, "timestamp_epoch": "1634913116.758991000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aadd44a1eb50caaffa281f68", "kind": "identity", "frame_number": 1267, "timestamp_epoch": "1634913116.759788000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-42a440594fc7dee3589c6a21", "kind": "identity", "frame_number": 1268, "timestamp_epoch": "1634913116.759963000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-704819b69b6408c6a2eec66a", "kind": "identity", "frame_number": 1269, "timestamp_epoch": "1634913116.761351000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8327bce5b140c7ed727edfe0", "kind": "identity", "frame_number": 1270, "timestamp_epoch": "1634913116.761580000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-60e26e29407b0f23c856f49e", "kind": "identity", "frame_number": 1271, "timestamp_epoch": "1634913116.771562000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d4f7219bac71ed6014b8f336", "kind": "identity", "frame_number": 1272, "timestamp_epoch": "1634913116.771970000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ab4857ba0113888a11a4bd4e", "kind": "identity", "frame_number": 1273, "timestamp_epoch": "1634913116.772396000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5d87fc794adf638c214af93c", "kind": "identity", "frame_number": 1274, "timestamp_epoch": "1634913116.772675000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-69e20800ade211a95626e12a", "kind": "identity", "frame_number": 1276, "timestamp_epoch": "1634913116.773049000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-040ec085d410a7aae0365b3a", "kind": "identity", "frame_number": 1277, "timestamp_epoch": "1634913116.773360000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a4dc96c7aa5aff5f7219c2f1", "kind": "identity", "frame_number": 1278, "timestamp_epoch": "1634913116.774341000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a1154064ef39ab47e5950163", "kind": "identity", "frame_number": 1279, "timestamp_epoch": "1634913116.774700000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7e311bc9803a94b2a2272173", "kind": "identity", "frame_number": 1280, "timestamp_epoch": "1634913116.774913000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-706b32af6229665daefd672d", "kind": "identity", "frame_number": 1281, "timestamp_epoch": "1634913116.775090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e77206fca64a3dcbb07ae368", "kind": "identity", "frame_number": 1282, "timestamp_epoch": "1634913116.775325000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5b42b0d7dd93d7cad7137e29", "kind": "identity", "frame_number": 1283, "timestamp_epoch": "1634913116.775774000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e7fae5951ab167e4b0b594cf", "kind": "identity", "frame_number": 1284, "timestamp_epoch": "1634913116.776944000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ab6b4e655dd9d0c6173f9d08", "kind": "identity", "frame_number": 1285, "timestamp_epoch": "1634913116.777263000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5c70f97b8b6afc69f624da8d", "kind": "identity", "frame_number": 1286, "timestamp_epoch": "1634913116.777511000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2427bcaa9d3bcc39f37ee463", "kind": "identity", "frame_number": 1287, "timestamp_epoch": "1634913116.777655000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-27c4b8697553ab0de6261c12", "kind": "identity", "frame_number": 1288, "timestamp_epoch": "1634913116.777974000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ed149d17f81f94dc27a60df3", "kind": "identity", "frame_number": 1289, "timestamp_epoch": "1634913116.778369000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ad66c82b24a15ab65c340720", "kind": "identity", "frame_number": 1290, "timestamp_epoch": "1634913116.795562000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8429c02f40ecdfbfc02d9c30", "kind": "identity", "frame_number": 1291, "timestamp_epoch": "1634913116.796149000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5f1e5e02977f86aafea35789", "kind": "identity", "frame_number": 1292, "timestamp_epoch": "1634913116.796649000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-508c19ce27c7b033fc88dd7e", "kind": "identity", "frame_number": 1293, "timestamp_epoch": "1634913116.796815000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0a3e7ef10aa804f3b1625ac7", "kind": "identity", "frame_number": 1294, "timestamp_epoch": "1634913116.797055000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-eb204502f96fd4d588d09cd0", "kind": "identity", "frame_number": 1295, "timestamp_epoch": "1634913116.797445000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8e693709b9785cdce738e92e", "kind": "identity", "frame_number": 1296, "timestamp_epoch": "1634913116.797731000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-433137323d776e874fd48e25", "kind": "identity", "frame_number": 1297, "timestamp_epoch": "1634913116.797979000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5294c048edb4292833b0686b", "kind": "identity", "frame_number": 1298, "timestamp_epoch": "1634913116.798234000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ee92afe6805a1d763668c83a", "kind": "identity", "frame_number": 1299, "timestamp_epoch": "1634913116.798394000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1f0ee3e5dba0eb9d81ce766a", "kind": "identity", "frame_number": 1300, "timestamp_epoch": "1634913116.798600000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6277cee52a0b330a17f7f901", "kind": "identity", "frame_number": 1301, "timestamp_epoch": "1634913116.798728000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-85a87894d29d748b1e4f834e", "kind": "identity", "frame_number": 1302, "timestamp_epoch": "1634913116.799196000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ef6504c604507d1c8338da42", "kind": "identity", "frame_number": 1303, "timestamp_epoch": "1634913116.799362000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-afd29aad7131ef99d086003c", "kind": "identity", "frame_number": 1304, "timestamp_epoch": "1634913116.799620000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d1f86fb65dfd74f3d1244f9c", "kind": "identity", "frame_number": 1305, "timestamp_epoch": "1634913116.799829000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1de81774195bc567f9d83079", "kind": "identity", "frame_number": 1306, "timestamp_epoch": "1634913116.799990000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-1bd7c7c7187e426019cba3bb", "kind": "identity", "frame_number": 1307, "timestamp_epoch": "1634913116.800132000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-38e8cc45767f4b4a03c6f79c", "kind": "identity", "frame_number": 1308, "timestamp_epoch": "1634913116.800274000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-38624170df1f0e03c42ce74f", "kind": "identity", "frame_number": 1309, "timestamp_epoch": "1634913116.800383000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2b9e219806e6720493a5ce5a", "kind": "identity", "frame_number": 1310, "timestamp_epoch": "1634913116.800650000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-72c30de5aed631316cfa0dcd", "kind": "identity", "frame_number": 1311, "timestamp_epoch": "1634913116.800779000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8bb9f057f71b783c3bce93a2", "kind": "identity", "frame_number": 1312, "timestamp_epoch": "1634913116.800922000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-c5a17ca83ef8ad9cbcf09972", "kind": "identity", "frame_number": 1313, "timestamp_epoch": "1634913116.801038000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-42a5a01c466dd8d82d1e8377", "kind": "identity", "frame_number": 1314, "timestamp_epoch": "1634913116.801507000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-93fe6a2005a8406482dd1afa", "kind": "identity", "frame_number": 1315, "timestamp_epoch": "1634913116.801658000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1594889fcc65d20787219b2c", "kind": "identity", "frame_number": 1316, "timestamp_epoch": "1634913116.804019000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4d77e33ae2457725bc42a0ce", "kind": "identity", "frame_number": 1317, "timestamp_epoch": "1634913116.804157000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4d496fd806141bb710e1e36d", "kind": "identity", "frame_number": 1318, "timestamp_epoch": "1634913116.804863000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7f58fce13a53e6e8cc2c11c8", "kind": "identity", "frame_number": 1319, "timestamp_epoch": "1634913116.804972000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e063e303fe80f4a2f703da5a", "kind": "identity", "frame_number": 1320, "timestamp_epoch": "1634913116.805488000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0748f9fa75f60ce15491d250", "kind": "identity", "frame_number": 1321, "timestamp_epoch": "1634913116.805641000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-327f187d0466d1dabed02527", "kind": "identity", "frame_number": 1322, "timestamp_epoch": "1634913116.805903000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4bd17a32db47455736facc04", "kind": "identity", "frame_number": 1323, "timestamp_epoch": "1634913116.806092000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aba0a89f8d892a62ff4e7958", "kind": "identity", "frame_number": 1324, "timestamp_epoch": "1634913116.806413000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8aaf46d2c79d3b087836e87f", "kind": "identity", "frame_number": 1325, "timestamp_epoch": "1634913116.806672000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-66c9ef7a37c6fabab6dd82c8", "kind": "identity", "frame_number": 1326, "timestamp_epoch": "1634913116.807216000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fb02c78ed81e7eee575bfdb3", "kind": "identity", "frame_number": 1327, "timestamp_epoch": "1634913116.807427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cdd0ed6ebdfa08b0cc345853", "kind": "identity", "frame_number": 1328, "timestamp_epoch": "1634913116.807943000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-653f220bbb19b7ec5fc9f223", "kind": "identity", "frame_number": 1329, "timestamp_epoch": "1634913116.808074000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1ae8008fcd3a1a59b5a0506f", "kind": "identity", "frame_number": 1330, "timestamp_epoch": "1634913116.808294000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-df2d35b332cb58874b2f8bd7", "kind": "identity", "frame_number": 1331, "timestamp_epoch": "1634913116.808460000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-367551cf61820bf9c066817c", "kind": "identity", "frame_number": 1332, "timestamp_epoch": "1634913116.808699000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-68823fc9afda7e0f65f2e73e", "kind": "identity", "frame_number": 1333, "timestamp_epoch": "1634913116.808873000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0d47e388c3cd623e63b71475", "kind": "identity", "frame_number": 1334, "timestamp_epoch": "1634913116.809089000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6e85032d5b66bad467dddec5", "kind": "identity", "frame_number": 1335, "timestamp_epoch": "1634913116.809202000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-faea4ced12d93cfe378312ee", "kind": "identity", "frame_number": 1336, "timestamp_epoch": "1634913116.809517000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4f1f0d9bff86de5447d0b7ad", "kind": "identity", "frame_number": 1337, "timestamp_epoch": "1634913116.809672000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9de1c111c2b33496561c8896", "kind": "identity", "frame_number": 1338, "timestamp_epoch": "1634913116.809838000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ec71babdd9200c6a5a6aa37a", "kind": "identity", "frame_number": 1339, "timestamp_epoch": "1634913116.809953000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-508ac52090dd81cf39698494", "kind": "identity", "frame_number": 1340, "timestamp_epoch": "1634913116.810086000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-91dfe1b4c3cf00ca0f9cc808", "kind": "identity", "frame_number": 1341, "timestamp_epoch": "1634913116.810255000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-26bd81e3e6b79e862f89d51e", "kind": "identity", "frame_number": 1342, "timestamp_epoch": "1634913116.810459000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-92b4fccbf6c81040059c33c1", "kind": "identity", "frame_number": 1343, "timestamp_epoch": "1634913116.810575000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-542b808a9fee0fb08b442fac", "kind": "identity", "frame_number": 1344, "timestamp_epoch": "1634913116.811324000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-06b2d787429a05a4b75182c2", "kind": "identity", "frame_number": 1345, "timestamp_epoch": "1634913116.811460000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ceb8e8e57da4da81342382f7", "kind": "identity", "frame_number": 1346, "timestamp_epoch": "1634913116.811704000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a2d18144042f29f5ceafefae", "kind": "identity", "frame_number": 1348, "timestamp_epoch": "1634913116.811872000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f711f488691cea20084b9ee4", "kind": "identity", "frame_number": 1350, "timestamp_epoch": "1634913116.812387000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d6654db329f8abe9def5bf1e", "kind": "identity", "frame_number": 1351, "timestamp_epoch": "1634913116.812509000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1b539ccba2b736ae5f836348", "kind": "identity", "frame_number": 1352, "timestamp_epoch": "1634913116.812719000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f0bd976a0cf26239d1bcc2f9", "kind": "identity", "frame_number": 1353, "timestamp_epoch": "1634913116.812917000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-642d20ec62993a174e1cc8f3", "kind": "identity", "frame_number": 1354, "timestamp_epoch": "1634913116.813104000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fec119166c5f13365fae3dd4", "kind": "identity", "frame_number": 1355, "timestamp_epoch": "1634913116.813266000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fa4df5fe3f84c8a8b2408bc6", "kind": "identity", "frame_number": 1356, "timestamp_epoch": "1634913116.813490000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a13d7c86a40d8fd9e80c9dc0", "kind": "identity", "frame_number": 1357, "timestamp_epoch": "1634913116.813594000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9306ebc9674c6f124ab12bed", "kind": "identity", "frame_number": 1358, "timestamp_epoch": "1634913116.814110000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-14b600ae5ebcfe63dfe7f86e", "kind": "identity", "frame_number": 1359, "timestamp_epoch": "1634913116.814260000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-507d089451e2cda1995a5d64", "kind": "identity", "frame_number": 1360, "timestamp_epoch": "1634913116.814429000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-98433a656e7e3558d6a44714", "kind": "identity", "frame_number": 1361, "timestamp_epoch": "1634913116.814558000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bbdd7b7caa15cd6f28a96792", "kind": "identity", "frame_number": 1362, "timestamp_epoch": "1634913116.814732000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8fdc3ee0bad94112615d1ad6", "kind": "identity", "frame_number": 1363, "timestamp_epoch": "1634913116.814967000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a11190c3b43d7a7ce7d3720c", "kind": "identity", "frame_number": 1364, "timestamp_epoch": "1634913116.815127000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-c711478625c3f0e5bd67e282", "kind": "identity", "frame_number": 1365, "timestamp_epoch": "1634913116.815235000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7127a6036e3fa39f5435593e", "kind": "identity", "frame_number": 1366, "timestamp_epoch": "1634913116.815736000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f94c21392e4c2534fd7c75a8", "kind": "identity", "frame_number": 1367, "timestamp_epoch": "1634913116.815879000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a53d9ceaa392e30d1e9e9a77", "kind": "identity", "frame_number": 1368, "timestamp_epoch": "1634913116.816004000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f1e6912ceddbf260445193ec", "kind": "identity", "frame_number": 1369, "timestamp_epoch": "1634913116.816115000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1a895f06e606d196312d276f", "kind": "identity", "frame_number": 1370, "timestamp_epoch": "1634913116.816476000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-00196a0cd21199573392a3c7", "kind": "identity", "frame_number": 1371, "timestamp_epoch": "1634913116.816684000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6ed80f73172264b6360f78dc", "kind": "identity", "frame_number": 1372, "timestamp_epoch": "1634913116.816852000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4ebf5e2384555f235b76193b", "kind": "identity", "frame_number": 1373, "timestamp_epoch": "1634913116.817017000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-62c64da09a275cdf3a18a006", "kind": "identity", "frame_number": 1374, "timestamp_epoch": "1634913116.817674000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2f311d520b247cf8229e4ee3", "kind": "identity", "frame_number": 1375, "timestamp_epoch": "1634913116.817829000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-800c05df356124dd19995e28", "kind": "identity", "frame_number": 1376, "timestamp_epoch": "1634913116.824884000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0ba3ba637f4a4d28dba09cdf", "kind": "identity", "frame_number": 1377, "timestamp_epoch": "1634913116.825119000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ff18e6a4648fa5224bedc436", "kind": "identity", "frame_number": 1408, "timestamp_epoch": "1634913117.482759000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-1fdb65af86aaba38aa23863f", "kind": "identity", "frame_number": 1409, "timestamp_epoch": "1634913117.483059000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-93a5e7a925f21f0f50b4693c", "kind": "identity", "frame_number": 1419, "timestamp_epoch": "1634913117.516621000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ca79463232c37ef286be85dc", "kind": "identity", "frame_number": 1426, "timestamp_epoch": "1634913117.969840000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-18a8468dd1f589661fa64b05", "kind": "identity", "frame_number": 1427, "timestamp_epoch": "1634913117.969941000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-e13bbe36899e4190b5e627b1", "kind": "identity", "frame_number": 1443, "timestamp_epoch": "1634913118.517548000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-ea5bd3df6927839bf73b383a", "kind": "identity", "frame_number": 1445, "timestamp_epoch": "1634913118.518202000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-45eb0dab8af2729006f5e350", "kind": "identity", "frame_number": 1446, "timestamp_epoch": "1634913118.518500000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-f494a25c342d3958f93a4a5e", "kind": "identity", "frame_number": 1470, "timestamp_epoch": "1634913118.529289000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-bd882d444379049f798cba8d", "kind": "identity", "frame_number": 1472, "timestamp_epoch": "1634913118.529887000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-d9c32dcc294d7bac80a7086e", "kind": "identity", "frame_number": 1483, "timestamp_epoch": "1634913118.537038000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-71c0c2c529bc2d78f30a0703", "kind": "identity", "frame_number": 1485, "timestamp_epoch": "1634913118.537755000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-248445aa4dacc0d208f5e1cd", "kind": "identity", "frame_number": 1503, "timestamp_epoch": "1634913118.735434000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-f81673cdeddb43180152ed8f", "kind": "identity", "frame_number": 1504, "timestamp_epoch": "1634913118.735645000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-efc23ac2e4cdb6cc47aca9f3", "kind": "identity", "frame_number": 1505, "timestamp_epoch": "1634913119.033900000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-55e8acbc3170227c8decb744", "kind": "identity", "frame_number": 1506, "timestamp_epoch": "1634913119.503076000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6266d8c9d0b56cc912242bd0", "kind": "identity", "frame_number": 1507, "timestamp_epoch": "1634913119.503246000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-a57d3253d991e11edebd1b17", "kind": "identity", "frame_number": 1510, "timestamp_epoch": "1634913120.298084000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<00>,DESKTOP-CFA3367<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-47eb30fb4a0a9b87fe395e5c", "kind": "identity", "frame_number": 1511, "timestamp_epoch": "1634913120.298200000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-ee0c88037180d7b5fa4259b0", "kind": "identity", "frame_number": 1515, "timestamp_epoch": "1634913120.594845000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-654227ee7d109bd9db399ca9", "kind": "identity", "frame_number": 1516, "timestamp_epoch": "1634913121.344879000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f910c6157856cf7274d9ad8f", "kind": "identity", "frame_number": 1517, "timestamp_epoch": "1634913122.157959000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fb70bdd17d539f2512fb604f", "kind": "identity", "frame_number": 1518, "timestamp_epoch": "1634913122.939445000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e09cd450aca889720184f89d", "kind": "identity", "frame_number": 1526, "timestamp_epoch": "1634913123.722599000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ae6337142b7bc0be3de532d3", "kind": "identity", "frame_number": 1535, "timestamp_epoch": "1634913123.733110000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-84403a069bd3fa5a73521b0f", "kind": "identity", "frame_number": 1537, "timestamp_epoch": "1634913123.733914000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-0b04008511616d860c1f29b4", "kind": "identity", "frame_number": 1556, "timestamp_epoch": "1634913124.232331000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-18ae1cc1829c685eacc53d91", "kind": "identity", "frame_number": 1558, "timestamp_epoch": "1634913124.233540000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-75ce8a8b56d57e826d4486cf", "kind": "identity", "frame_number": 1564, "timestamp_epoch": "1634913124.236684000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 75, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-d318aa5679cd2c97b4f1c73c", "kind": "identity", "frame_number": 1565, "timestamp_epoch": "1634913124.237146000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 75, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-6bef1bf93ffae754428eff77", "kind": "identity", "frame_number": 1572, "timestamp_epoch": "1634913124.237776000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 76, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "10" } }, { "event_id": "evt-c4ab81477a4c3f62b3d594fc", "kind": "identity", "frame_number": 1574, "timestamp_epoch": "1634913124.238388000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 76, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "11" } }, { "event_id": "evt-13512184918b267912ea344d", "kind": "identity", "frame_number": 1583, "timestamp_epoch": "1634913124.239193000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 77, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-e8c4390f4dcc0901ad20bf3a", "kind": "identity", "frame_number": 1586, "timestamp_epoch": "1634913124.239726000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 77, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-CFA3367$", "kerberos.msg_type": "13" } }, { "event_id": "evt-004be43eb025a7721dcedb29", "kind": "identity", "frame_number": 1601, "timestamp_epoch": "1634913125.721464000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9505a6deff705eb75e488c48", "kind": "identity", "frame_number": 1602, "timestamp_epoch": "1634913125.721692000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0ca6bab4210b0f84e7d54acc", "kind": "identity", "frame_number": 1603, "timestamp_epoch": "1634913125.722547000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-259bb1d8a6cda12600a5d525", "kind": "identity", "frame_number": 1604, "timestamp_epoch": "1634913125.722692000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d8ae285b5c9ccba3e4afd9fe", "kind": "identity", "frame_number": 1677, "timestamp_epoch": "1634913143.496627000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6bf1e065586aeb4b81b2861d", "kind": "identity", "frame_number": 1678, "timestamp_epoch": "1634913143.497112000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4bfc793e3e6d0151f96b82c8", "kind": "identity", "frame_number": 1679, "timestamp_epoch": "1634913143.497315000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 75, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-eb63a7752d0bdbdf00f34970", "kind": "identity", "frame_number": 1691, "timestamp_epoch": "1634913144.032979000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b54af79064ed5eab5c9d4662", "kind": "identity", "frame_number": 1692, "timestamp_epoch": "1634913144.033073000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-3744773db08cc6cf1283a302", "kind": "identity", "frame_number": 1710, "timestamp_epoch": "1634913144.412428000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fefb983ba256cc730000993c", "kind": "identity", "frame_number": 1711, "timestamp_epoch": "1634913144.412618000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-20fc2286843aeb95fadfcff9", "kind": "identity", "frame_number": 1712, "timestamp_epoch": "1634913144.412931000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cfde39af95c20d52c7782276", "kind": "identity", "frame_number": 1725, "timestamp_epoch": "1634913145.533372000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-2ce48b2614f1333f75c54acd", "kind": "identity", "frame_number": 1726, "timestamp_epoch": "1634913145.533441000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-70f673b1ef85ace42ef1b274", "kind": "identity", "frame_number": 1764, "timestamp_epoch": "1634913145.831706000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 83, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-ccca7392b864d2876352d3ea", "kind": "identity", "frame_number": 1765, "timestamp_epoch": "1634913145.832180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 83, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-113f358e6a684ff0efece12b", "kind": "identity", "frame_number": 1791, "timestamp_epoch": "1634913145.848618000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 87, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-94242b232a7afd65a8d35ddf", "kind": "identity", "frame_number": 1792, "timestamp_epoch": "1634913145.849044000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 87, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-7e9e6ea85cd3f7e64adb76f5", "kind": "identity", "frame_number": 1796, "timestamp_epoch": "1634913145.852967000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 85, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-a21f424e44493c4435582705", "kind": "identity", "frame_number": 1798, "timestamp_epoch": "1634913145.853587000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 85, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "11" } }, { "event_id": "evt-8e511c285240d5a0d62b4551", "kind": "identity", "frame_number": 1809, "timestamp_epoch": "1634913145.859061000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 88, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-2d273116355bc03e47b54a2f", "kind": "identity", "frame_number": 1810, "timestamp_epoch": "1634913145.859091000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 89, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-1d84e76e7a886ca3fa3cec0e", "kind": "identity", "frame_number": 1811, "timestamp_epoch": "1634913145.859501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 89, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-85d1d9373be2ff262f1c0481", "kind": "identity", "frame_number": 1814, "timestamp_epoch": "1634913145.859840000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 88, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "11" } }, { "event_id": "evt-2d93e231bfed373f3b136b74", "kind": "identity", "frame_number": 1826, "timestamp_epoch": "1634913145.865255000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 90, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-d0f4abd1323177d9088a3a6a", "kind": "identity", "frame_number": 1827, "timestamp_epoch": "1634913145.865848000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 90, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-b56523f0cc899ac760837387", "kind": "identity", "frame_number": 1834, "timestamp_epoch": "1634913145.868768000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 91, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-75c0424a8a68540efff6153b", "kind": "identity", "frame_number": 1840, "timestamp_epoch": "1634913145.869642000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 91, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "11" } }, { "event_id": "evt-628a940c4a10d38c93f18d4f", "kind": "identity", "frame_number": 1844, "timestamp_epoch": "1634913145.870168000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 92, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "desktop-87wce26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-cf15671cd05600c35e16532e", "kind": "identity", "frame_number": 1846, "timestamp_epoch": "1634913145.870622000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 92, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "11" } }, { "event_id": "evt-58d8d914c5f1ad53057b2898", "kind": "identity", "frame_number": 1860, "timestamp_epoch": "1634913145.875736000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 94, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-1b7189f0d44cadab05887418", "kind": "identity", "frame_number": 1866, "timestamp_epoch": "1634913145.876636000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 95, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-f9eb53b46aeec431eaaf50eb", "kind": "identity", "frame_number": 1868, "timestamp_epoch": "1634913145.876752000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 94, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-0be3eb8b3c88a66565123ed1", "kind": "identity", "frame_number": 1875, "timestamp_epoch": "1634913145.877659000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 95, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-d19cda459c0ed379e1eb026b", "kind": "identity", "frame_number": 1884, "timestamp_epoch": "1634913145.878793000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 96, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-6c812ee5aa525a4c2bc6313e", "kind": "identity", "frame_number": 1888, "timestamp_epoch": "1634913145.879102000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 96, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-a16d8c1855d9e0edcbd94bff", "kind": "identity", "frame_number": 1899, "timestamp_epoch": "1634913145.879909000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 97, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-d4ba7122ba6521affe257909", "kind": "identity", "frame_number": 1902, "timestamp_epoch": "1634913145.880060000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 98, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-121c5ea3afd965b1a98374d4", "kind": "identity", "frame_number": 1905, "timestamp_epoch": "1634913145.880204000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-3bc173c20bc241412282fa36", "kind": "identity", "frame_number": 1907, "timestamp_epoch": "1634913145.880301000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-649291276c83aca383f9af14", "kind": "identity", "frame_number": 1910, "timestamp_epoch": "1634913145.880667000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 97, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-2307832337df592db2f4c25d", "kind": "identity", "frame_number": 1919, "timestamp_epoch": "1634913145.881249000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 99, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-054fd95d74a2bbce64615120", "kind": "identity", "frame_number": 1921, "timestamp_epoch": "1634913145.881475000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-37296fc1521a86cfd31cd620", "kind": "identity", "frame_number": 1925, "timestamp_epoch": "1634913145.881932000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-3a0775be13afdb3093873387", "kind": "identity", "frame_number": 1927, "timestamp_epoch": "1634913145.881980000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 98, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-faf759db73a22718dd00678a", "kind": "identity", "frame_number": 1930, "timestamp_epoch": "1634913145.882504000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-94e8c2c31fa1a35dae08cdce", "kind": "identity", "frame_number": 1935, "timestamp_epoch": "1634913145.882910000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 99, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-ea55d3328fe04bed7e2f5357", "kind": "identity", "frame_number": 1938, "timestamp_epoch": "1634913145.883226000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-562e891da50fafc394dcc518", "kind": "identity", "frame_number": 1943, "timestamp_epoch": "1634913145.883520000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-bd303080260724a09b777fbc", "kind": "identity", "frame_number": 1946, "timestamp_epoch": "1634913145.883826000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-4e0f87d2157dc0dbcbb06168", "kind": "identity", "frame_number": 1947, "timestamp_epoch": "1634913145.884085000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-a0d1b76deb0d9c249e3a02df", "kind": "identity", "frame_number": 1949, "timestamp_epoch": "1634913145.884477000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-39c3bde1de7a912e6e40e9f7", "kind": "identity", "frame_number": 1950, "timestamp_epoch": "1634913145.884844000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f39036440ffab54848988458", "kind": "identity", "frame_number": 1952, "timestamp_epoch": "1634913145.885006000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5473c00ea9e160f67f0070d4", "kind": "identity", "frame_number": 1953, "timestamp_epoch": "1634913145.885140000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-83c187ae850292278e7e8154", "kind": "identity", "frame_number": 1955, "timestamp_epoch": "1634913145.885275000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-30f72cb9df9ba35b86229969", "kind": "identity", "frame_number": 1956, "timestamp_epoch": "1634913145.885351000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-523231b8bcd14c11da104856", "kind": "identity", "frame_number": 1958, "timestamp_epoch": "1634913145.885659000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c95fbe6b0d774dc90165dd42", "kind": "identity", "frame_number": 1976, "timestamp_epoch": "1634913145.888220000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-d86d7cd55b365454563b9de9", "kind": "identity", "frame_number": 1981, "timestamp_epoch": "1634913145.888710000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f4d1506512e015156acc514b", "kind": "identity", "frame_number": 1985, "timestamp_epoch": "1634913145.889403000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-5aefc9e063942c248634dad9", "kind": "identity", "frame_number": 1999, "timestamp_epoch": "1634913145.913366000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-00edd81df7cb54d8c991eb8e", "kind": "identity", "frame_number": 2000, "timestamp_epoch": "1634913145.913784000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-edc66d0275fe128c2fe711e9", "kind": "identity", "frame_number": 2009, "timestamp_epoch": "1634913145.947188000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f4da374e4311d2c1427b7eeb", "kind": "identity", "frame_number": 2010, "timestamp_epoch": "1634913145.947505000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9771664f2c22d429038660f9", "kind": "identity", "frame_number": 2025, "timestamp_epoch": "1634913145.966490000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 102, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-feabe96a36a4865a8b081623", "kind": "identity", "frame_number": 2028, "timestamp_epoch": "1634913145.967311000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 102, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-5ac2837ea173fc966c8cc3e8", "kind": "identity", "frame_number": 2034, "timestamp_epoch": "1634913145.967896000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-4ce317d1fa87e307458f6e02", "kind": "identity", "frame_number": 2036, "timestamp_epoch": "1634913145.968753000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-87b782a39707c8e6b5bd1c56", "kind": "identity", "frame_number": 2037, "timestamp_epoch": "1634913145.969540000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-81227ee6ac2a1df80f36f15d", "kind": "identity", "frame_number": 2106, "timestamp_epoch": "1634913146.785136000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f8e4db6393ba3b4f59868046", "kind": "identity", "frame_number": 2107, "timestamp_epoch": "1634913147.049038000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-455ba52c514967333f218b67", "kind": "identity", "frame_number": 2108, "timestamp_epoch": "1634913147.049101000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-440b35aaf942fd038dbb1288", "kind": "identity", "frame_number": 2117, "timestamp_epoch": "1634913147.183229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-44de74fc179462a91a37c801", "kind": "identity", "frame_number": 2119, "timestamp_epoch": "1634913147.183906000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-978ff20988010c0d6a0c7fb2", "kind": "identity", "frame_number": 2126, "timestamp_epoch": "1634913147.396789000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 108, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-90a811ede5e53dcfcbf4f4ed", "kind": "identity", "frame_number": 2129, "timestamp_epoch": "1634913147.397698000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 108, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-61a6572151cabde0ac72d90c", "kind": "identity", "frame_number": 2140, "timestamp_epoch": "1634913147.420786000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-82eca2c74514331988bf41aa", "kind": "identity", "frame_number": 2142, "timestamp_epoch": "1634913147.421577000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-9a1357d8a41764195fc28670", "kind": "identity", "frame_number": 2157, "timestamp_epoch": "1634913147.566505000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 110, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-a443f9258947cedb3e4b173e", "kind": "identity", "frame_number": 2160, "timestamp_epoch": "1634913147.567400000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 110, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-89db8f73a08436b39cbcb4c3", "kind": "identity", "frame_number": 2169, "timestamp_epoch": "1634913147.569457000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 111, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-feac01b3e639f2d8b618c5d1", "kind": "identity", "frame_number": 2172, "timestamp_epoch": "1634913147.569783000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 111, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-1d8020807dec899c4f38a63a", "kind": "identity", "frame_number": 2179, "timestamp_epoch": "1634913147.570392000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-1b3ac91938d9dc85d13fd85a", "kind": "identity", "frame_number": 2181, "timestamp_epoch": "1634913147.571266000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-dda9b969cb574aa6eae22e7f", "kind": "identity", "frame_number": 2182, "timestamp_epoch": "1634913147.571670000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cfb6b3b94aea3043a46b3896", "kind": "identity", "frame_number": 2183, "timestamp_epoch": "1634913147.571805000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-be1a561beff0ecf9c5286ff0", "kind": "identity", "frame_number": 2184, "timestamp_epoch": "1634913147.603029000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-da1cb9b9a14a2c139c0bf86d", "kind": "identity", "frame_number": 2185, "timestamp_epoch": "1634913147.603403000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a34ae7566a4f78054ea31c94", "kind": "identity", "frame_number": 2186, "timestamp_epoch": "1634913147.614229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8ec338be91693a3a2a843aa3", "kind": "identity", "frame_number": 2187, "timestamp_epoch": "1634913147.614484000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-be893a552a0f288f4928b2ee", "kind": "identity", "frame_number": 2188, "timestamp_epoch": "1634913147.640512000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8247669db5ccd32a38d77a7e", "kind": "identity", "frame_number": 2189, "timestamp_epoch": "1634913147.640852000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-940871a1f2c6e5f1ddac0506", "kind": "identity", "frame_number": 2190, "timestamp_epoch": "1634913147.658062000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-73de53a384fb3f9aa263d98c", "kind": "identity", "frame_number": 2191, "timestamp_epoch": "1634913147.658384000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ce73ae36714401de5605a066", "kind": "identity", "frame_number": 2192, "timestamp_epoch": "1634913147.663487000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-68656c8613bea6269b5b40f4", "kind": "identity", "frame_number": 2193, "timestamp_epoch": "1634913147.663885000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a3cd3fa74af2df0f02cc3d0e", "kind": "identity", "frame_number": 2194, "timestamp_epoch": "1634913147.665794000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3344aff14e9ff934017b416e", "kind": "identity", "frame_number": 2195, "timestamp_epoch": "1634913147.666013000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ada5e032ed97d10de083eff7", "kind": "identity", "frame_number": 2196, "timestamp_epoch": "1634913147.666529000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-11f98b921be38bc84bfd6b7e", "kind": "identity", "frame_number": 2197, "timestamp_epoch": "1634913147.667058000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-51206857a65e4c32f1916649", "kind": "identity", "frame_number": 2198, "timestamp_epoch": "1634913147.668182000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-366759cf923a24421f220402", "kind": "identity", "frame_number": 2199, "timestamp_epoch": "1634913147.668486000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9facf58c75fba4671ff108d1", "kind": "identity", "frame_number": 2200, "timestamp_epoch": "1634913147.668683000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-45354ffc03c4483bbf70be83", "kind": "identity", "frame_number": 2201, "timestamp_epoch": "1634913147.668861000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-962d0640c9882699c4b19a42", "kind": "identity", "frame_number": 2202, "timestamp_epoch": "1634913147.669407000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7b255527e8ba8e356f66e9a0", "kind": "identity", "frame_number": 2203, "timestamp_epoch": "1634913147.669868000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-293d48efc82d085aaa6aa587", "kind": "identity", "frame_number": 2204, "timestamp_epoch": "1634913147.670704000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-12bcc2f622a38c375182a775", "kind": "identity", "frame_number": 2205, "timestamp_epoch": "1634913147.670937000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c59903b03dc94a2d8a01b825", "kind": "identity", "frame_number": 2206, "timestamp_epoch": "1634913147.671310000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-55e1229b861b242c1c814eec", "kind": "identity", "frame_number": 2207, "timestamp_epoch": "1634913147.671427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-47568d9a53e4afbc42746835", "kind": "identity", "frame_number": 2208, "timestamp_epoch": "1634913147.672472000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cc0130a6352c9c21b24d23ca", "kind": "identity", "frame_number": 2209, "timestamp_epoch": "1634913147.672839000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-64ad1212fa0dc0e943ab2d2f", "kind": "identity", "frame_number": 2210, "timestamp_epoch": "1634913147.673837000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0366a38a315f31cbe2f6366d", "kind": "identity", "frame_number": 2211, "timestamp_epoch": "1634913147.674047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8c4a16fdabbbaef5fea90c6b", "kind": "identity", "frame_number": 2212, "timestamp_epoch": "1634913147.674384000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-be1a35d5786bc7c3f82e184c", "kind": "identity", "frame_number": 2213, "timestamp_epoch": "1634913147.674518000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-635aacc3abc9ac8a63dc76d2", "kind": "identity", "frame_number": 2214, "timestamp_epoch": "1634913147.674717000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-db007ab5f3d7d0c68b38a702", "kind": "identity", "frame_number": 2215, "timestamp_epoch": "1634913147.674990000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-40e894f203882059cf2a04f5", "kind": "identity", "frame_number": 2216, "timestamp_epoch": "1634913147.675555000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9d74c0c24fe17386b0b0ec52", "kind": "identity", "frame_number": 2217, "timestamp_epoch": "1634913147.675828000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1a6c1e4b7a788a8c4f923780", "kind": "identity", "frame_number": 2218, "timestamp_epoch": "1634913147.676217000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ebc9f770699b811c3d3f9557", "kind": "identity", "frame_number": 2219, "timestamp_epoch": "1634913147.676337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-57b2512c35530f660c3fa3bf", "kind": "identity", "frame_number": 2220, "timestamp_epoch": "1634913147.676496000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ade990fb58c4ea6cd68bddf9", "kind": "identity", "frame_number": 2221, "timestamp_epoch": "1634913147.676641000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ec338deabc0da0d07614d42d", "kind": "identity", "frame_number": 2222, "timestamp_epoch": "1634913147.677541000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f105427eeb9469507757e9f7", "kind": "identity", "frame_number": 2223, "timestamp_epoch": "1634913147.677653000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-47a95723e7919bcedd7bfa63", "kind": "identity", "frame_number": 2224, "timestamp_epoch": "1634913147.678001000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c03983bfa8f2b47e9714db20", "kind": "identity", "frame_number": 2225, "timestamp_epoch": "1634913147.678179000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b0803f0a7c792031bbc6ff70", "kind": "identity", "frame_number": 2226, "timestamp_epoch": "1634913147.678360000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-394b9260ffe8792601bb516a", "kind": "identity", "frame_number": 2227, "timestamp_epoch": "1634913147.678463000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-de1d752a62fec78b4e47a05d", "kind": "identity", "frame_number": 2228, "timestamp_epoch": "1634913147.678754000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-36a1a54c1f2c849d665677d5", "kind": "identity", "frame_number": 2229, "timestamp_epoch": "1634913147.678893000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-86268b93a710849ecd46f388", "kind": "identity", "frame_number": 2230, "timestamp_epoch": "1634913147.679091000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4f0cfcf9dd0e1fd7499491f0", "kind": "identity", "frame_number": 2231, "timestamp_epoch": "1634913147.679205000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-38cf2bb39894e3a0ad2704ee", "kind": "identity", "frame_number": 2232, "timestamp_epoch": "1634913147.679362000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a4530fd28180620cf1039194", "kind": "identity", "frame_number": 2233, "timestamp_epoch": "1634913147.679536000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-49e8235e5ec8956d405981d4", "kind": "identity", "frame_number": 2234, "timestamp_epoch": "1634913147.679845000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-33082f1853736cc51b283123", "kind": "identity", "frame_number": 2235, "timestamp_epoch": "1634913147.679968000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9a0f78fa3ac882fb03af8d8d", "kind": "identity", "frame_number": 2236, "timestamp_epoch": "1634913147.680630000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-77deb58e7fdf483f994f187c", "kind": "identity", "frame_number": 2237, "timestamp_epoch": "1634913147.680778000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-492b7ee5dbe887fee4b8e272", "kind": "identity", "frame_number": 2238, "timestamp_epoch": "1634913147.681379000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-70959179f3ab6f38a2808c87", "kind": "identity", "frame_number": 2239, "timestamp_epoch": "1634913147.681472000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-97cf72132a029777d5d0b101", "kind": "identity", "frame_number": 2240, "timestamp_epoch": "1634913147.681760000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5e5bdbc74957c94547c97949", "kind": "identity", "frame_number": 2241, "timestamp_epoch": "1634913147.681971000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-24aa50f8628435c402df3843", "kind": "identity", "frame_number": 2242, "timestamp_epoch": "1634913147.682332000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e018d104288e3cf92eb604ed", "kind": "identity", "frame_number": 2243, "timestamp_epoch": "1634913147.682453000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9a173f4a362b49854e76c5e3", "kind": "identity", "frame_number": 2244, "timestamp_epoch": "1634913147.682706000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a02acff2d09c8be8cca1d2e4", "kind": "identity", "frame_number": 2245, "timestamp_epoch": "1634913147.682964000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2c047d61969da3a3fa2387ab", "kind": "identity", "frame_number": 2246, "timestamp_epoch": "1634913147.683188000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3930d689588f088705d8058a", "kind": "identity", "frame_number": 2247, "timestamp_epoch": "1634913147.683299000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-86db330bdcdf7a382a947556", "kind": "identity", "frame_number": 2248, "timestamp_epoch": "1634913147.683425000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ff369f76e921faeede8769e9", "kind": "identity", "frame_number": 2249, "timestamp_epoch": "1634913147.683577000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c4591494770287b4bdccf3c5", "kind": "identity", "frame_number": 2250, "timestamp_epoch": "1634913147.683697000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-74620eab303cfa6c4c0c735f", "kind": "identity", "frame_number": 2251, "timestamp_epoch": "1634913147.683830000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-37cf6b6992f4ee98fbe4267c", "kind": "identity", "frame_number": 2252, "timestamp_epoch": "1634913147.684022000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-32620d9dba2eb5389d3a6034", "kind": "identity", "frame_number": 2253, "timestamp_epoch": "1634913147.684218000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e09ac436fb24c1e79c56ae61", "kind": "identity", "frame_number": 2254, "timestamp_epoch": "1634913147.684434000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d8e4999f495cd2700adf626c", "kind": "identity", "frame_number": 2255, "timestamp_epoch": "1634913147.684541000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1bf52bd3773a072036e33fac", "kind": "identity", "frame_number": 2256, "timestamp_epoch": "1634913147.684645000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-65e6631b404d016b1a4c7d0d", "kind": "identity", "frame_number": 2257, "timestamp_epoch": "1634913147.684791000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-50106e13ee5b696aa924ab6e", "kind": "identity", "frame_number": 2258, "timestamp_epoch": "1634913147.684929000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9b0681ecfab678424525f3d9", "kind": "identity", "frame_number": 2259, "timestamp_epoch": "1634913147.685033000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4384aa26990517293a18d87f", "kind": "identity", "frame_number": 2260, "timestamp_epoch": "1634913147.685119000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1a64adeb296f822c12b04316", "kind": "identity", "frame_number": 2261, "timestamp_epoch": "1634913147.685268000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6e0ea63fd4e2a47760a06009", "kind": "identity", "frame_number": 2262, "timestamp_epoch": "1634913147.685457000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-48bdef1216e6a44c02883a24", "kind": "identity", "frame_number": 2263, "timestamp_epoch": "1634913147.685552000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-54c760c79841fc5fa5034d61", "kind": "identity", "frame_number": 2264, "timestamp_epoch": "1634913147.686284000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2817067a6c06f5e71f9ffb95", "kind": "identity", "frame_number": 2265, "timestamp_epoch": "1634913147.686413000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9a0fef13794951251d0acf86", "kind": "identity", "frame_number": 2266, "timestamp_epoch": "1634913147.686594000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-be6e4e09373a025baaf48bc3", "kind": "identity", "frame_number": 2268, "timestamp_epoch": "1634913147.686770000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-701c20e065ffd5b53ebecd2b", "kind": "identity", "frame_number": 2270, "timestamp_epoch": "1634913147.687318000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ff82031ace556c7003ca66de", "kind": "identity", "frame_number": 2271, "timestamp_epoch": "1634913147.687413000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3e6a2b39c59ee47f3ed9e029", "kind": "identity", "frame_number": 2272, "timestamp_epoch": "1634913147.687738000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6dcae09495d60a1f79e04fec", "kind": "identity", "frame_number": 2273, "timestamp_epoch": "1634913147.687931000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5a0ccdbabef831f094c9c2c9", "kind": "identity", "frame_number": 2274, "timestamp_epoch": "1634913147.688448000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cda89a7722826b544881a81d", "kind": "identity", "frame_number": 2275, "timestamp_epoch": "1634913147.688557000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6ddbbda69a48c5db76614184", "kind": "identity", "frame_number": 2276, "timestamp_epoch": "1634913147.689183000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b304bb477d1c089fb099b7a9", "kind": "identity", "frame_number": 2277, "timestamp_epoch": "1634913147.689295000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-544b967ad450afe4c7f3e7b4", "kind": "identity", "frame_number": 2278, "timestamp_epoch": "1634913147.689400000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-47d17ed4949ad80b0e9d6ce1", "kind": "identity", "frame_number": 2279, "timestamp_epoch": "1634913147.689586000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2ed61490f73c8642a50687bc", "kind": "identity", "frame_number": 2280, "timestamp_epoch": "1634913147.689919000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-26ea2d54b874714b77f4347a", "kind": "identity", "frame_number": 2281, "timestamp_epoch": "1634913147.690026000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-06686459d7f184acb4dbce07", "kind": "identity", "frame_number": 2282, "timestamp_epoch": "1634913147.690161000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4cbd1802351c55e187461e8c", "kind": "identity", "frame_number": 2283, "timestamp_epoch": "1634913147.690350000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2b6a16634375e6394ca15128", "kind": "identity", "frame_number": 2284, "timestamp_epoch": "1634913147.690645000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-399ea58a0891a77569c3af5a", "kind": "identity", "frame_number": 2285, "timestamp_epoch": "1634913147.690744000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-35e639778ebdf72c4d55f0b1", "kind": "identity", "frame_number": 2286, "timestamp_epoch": "1634913147.690916000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2eba4bcb44b9086c3f39f2a1", "kind": "identity", "frame_number": 2287, "timestamp_epoch": "1634913147.691074000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-392c6ad20453b4b96ace154a", "kind": "identity", "frame_number": 2288, "timestamp_epoch": "1634913147.691240000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0cbe5018d441a37b8376fac9", "kind": "identity", "frame_number": 2289, "timestamp_epoch": "1634913147.691343000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bd5a509f0325b45c989d5f1d", "kind": "identity", "frame_number": 2290, "timestamp_epoch": "1634913147.691603000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3698522dbf6ab52a5d76bb29", "kind": "identity", "frame_number": 2291, "timestamp_epoch": "1634913147.691746000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fa50a60b2e72f6fa6e55c6aa", "kind": "identity", "frame_number": 2292, "timestamp_epoch": "1634913147.691856000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6acbfa46f3e0103f9585818d", "kind": "identity", "frame_number": 2293, "timestamp_epoch": "1634913147.691946000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3f92e97f51ab95d120faa53b", "kind": "identity", "frame_number": 2294, "timestamp_epoch": "1634913147.692261000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-92fcb8fff0f72ae6d7f0449e", "kind": "identity", "frame_number": 2295, "timestamp_epoch": "1634913147.692382000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-04fd4743afb4a0c1fab913b5", "kind": "identity", "frame_number": 2296, "timestamp_epoch": "1634913147.707429000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8f24e2ab8e5e92d16e4b2e60", "kind": "identity", "frame_number": 2297, "timestamp_epoch": "1634913147.707655000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3ae1c7501cfd68291f385758", "kind": "identity", "frame_number": 2298, "timestamp_epoch": "1634913147.708504000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7c822bdc0caf20569d04e3d4", "kind": "identity", "frame_number": 2299, "timestamp_epoch": "1634913147.708656000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d2fc2fd6e4259e7c2323de38", "kind": "identity", "frame_number": 2310, "timestamp_epoch": "1634913148.283485000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bda4cb01cda7493349c94811", "kind": "identity", "frame_number": 2315, "timestamp_epoch": "1634913148.596077000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-38cb1f0c8010a486c8ce673a", "kind": "identity", "frame_number": 2316, "timestamp_epoch": "1634913148.596271000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-5d4b89fc72cedc89605b2866", "kind": "identity", "frame_number": 2321, "timestamp_epoch": "1634913149.346507000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f5278e636eed432ca30b595c", "kind": "identity", "frame_number": 2322, "timestamp_epoch": "1634913149.346678000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-438747837e5dd929f2a6069a", "kind": "identity", "frame_number": 2334, "timestamp_epoch": "1634913149.361796000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-0e0b384414656b75d8de0955", "kind": "identity", "frame_number": 2336, "timestamp_epoch": "1634913149.362410000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-00b5459a3e042c1b2be93729", "kind": "identity", "frame_number": 2337, "timestamp_epoch": "1634913149.375577000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-11d6ffb739f6c4fa88227c7e", "kind": "identity", "frame_number": 2361, "timestamp_epoch": "1634913149.400779000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-5fecc7cb7bf5a97293a1d573", "kind": "identity", "frame_number": 2363, "timestamp_epoch": "1634913149.401647000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-8e300d7095050bf8c8e74c94", "kind": "identity", "frame_number": 2374, "timestamp_epoch": "1634913149.410923000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-e7f235f0a811ef8b9fd029ba", "kind": "identity", "frame_number": 2376, "timestamp_epoch": "1634913149.411898000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-a62ca8804ae998733141b851", "kind": "identity", "frame_number": 2398, "timestamp_epoch": "1634913149.814810000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-86d583b42adcf29919324286", "kind": "identity", "frame_number": 2399, "timestamp_epoch": "1634913150.143269000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7f87df3dcad468415962e348", "kind": "identity", "frame_number": 2400, "timestamp_epoch": "1634913150.143449000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-57951c06be4b88e9cb58a53d", "kind": "identity", "frame_number": 2401, "timestamp_epoch": "1634913150.939833000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<00>,ENEMYWATCH<00> (Workstation/Redirector)", "nbns.nb_flags.group": "True" } }, { "event_id": "evt-a5cf5f409731e7a8d02b0b68", "kind": "identity", "frame_number": 2402, "timestamp_epoch": "1634913150.939982000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<00>,DESKTOP-87WCE26<00> (Workstation/Redirector)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c69c2fb3af01eb7787652e80", "kind": "identity", "frame_number": 2403, "timestamp_epoch": "1634913151.361974000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4c32d2f6b0b6f1c1e8cefa54", "kind": "identity", "frame_number": 2404, "timestamp_epoch": "1634913152.158689000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0302671f35d86db83c2658db", "kind": "identity", "frame_number": 2405, "timestamp_epoch": "1634913152.956431000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4657027ab7ede7b3e90b3a5f", "kind": "identity", "frame_number": 2406, "timestamp_epoch": "1634913153.768683000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "5", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cb90c84634e1241305360193", "kind": "identity", "frame_number": 2419, "timestamp_epoch": "1634913154.534184000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-5e974d3d712bdf48fe9bc01f", "kind": "identity", "frame_number": 2421, "timestamp_epoch": "1634913154.535212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-883b9f4a6c5528d0f63dd167", "kind": "identity", "frame_number": 2422, "timestamp_epoch": "1634913154.545976000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2988129b11a4f95551c425af", "kind": "identity", "frame_number": 2436, "timestamp_epoch": "1634913154.569049000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 117, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-c14e5422de2b6f5a9ae87db0", "kind": "identity", "frame_number": 2437, "timestamp_epoch": "1634913154.569686000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 117, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-8bdaec13ec9377114be46a7b", "kind": "identity", "frame_number": 2444, "timestamp_epoch": "1634913154.570762000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 118, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "10" } }, { "event_id": "evt-f3be324fe1f7606021d8c571", "kind": "identity", "frame_number": 2446, "timestamp_epoch": "1634913154.571467000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 118, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "11" } }, { "event_id": "evt-33189f9fd0672e831ca76751", "kind": "identity", "frame_number": 2455, "timestamp_epoch": "1634913154.572389000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 119, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-12b1202004dd5a898b39d832", "kind": "identity", "frame_number": 2458, "timestamp_epoch": "1634913154.573196000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 119, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "DESKTOP-87WCE26$", "kerberos.msg_type": "13" } }, { "event_id": "evt-6dab9edb86ee86cdf2ba995d", "kind": "identity", "frame_number": 2474, "timestamp_epoch": "1634913156.675946000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-29cef429ad5a9c1f58ec1b3d", "kind": "identity", "frame_number": 2475, "timestamp_epoch": "1634913156.676233000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-09577a82c4580a6e63248d8d", "kind": "identity", "frame_number": 2476, "timestamp_epoch": "1634913156.676596000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3d53ec761ee92ed5213bc2ce", "kind": "identity", "frame_number": 2477, "timestamp_epoch": "1634913156.676869000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-deacf0a3a20e702b55d06076", "kind": "identity", "frame_number": 2533, "timestamp_epoch": "1634913172.023368000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8c446d6d0a838457a559fcfe", "kind": "identity", "frame_number": 2554, "timestamp_epoch": "1634913173.523345000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-22f6e230ac97d78ed4a4ade3", "kind": "identity", "frame_number": 2559, "timestamp_epoch": "1634913175.038600000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fdbdcb2db88345f613e3f7d1", "kind": "identity", "frame_number": 2596, "timestamp_epoch": "1634913184.474804000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 122, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "10" } }, { "event_id": "evt-cc9c89450068e5912229d9d2", "kind": "identity", "frame_number": 2597, "timestamp_epoch": "1634913184.475306000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 122, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-a73951fe6a2e9e966fb34143", "kind": "identity", "frame_number": 2604, "timestamp_epoch": "1634913184.482254000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 123, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "10" } }, { "event_id": "evt-0eaae99a39ed6023ab7439f1", "kind": "identity", "frame_number": 2606, "timestamp_epoch": "1634913184.482917000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 123, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "11" } }, { "event_id": "evt-19f32efd750ba4475facc9a0", "kind": "identity", "frame_number": 2615, "timestamp_epoch": "1634913184.484184000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 124, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-5fcd4c37b59962da0d19da83", "kind": "identity", "frame_number": 2618, "timestamp_epoch": "1634913184.484847000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 124, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "13" } }, { "event_id": "evt-b7cbc6b3ef74e3ce30688eda", "kind": "identity", "frame_number": 2637, "timestamp_epoch": "1634913184.582908000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3759e764b940d653670e5f26", "kind": "identity", "frame_number": 2638, "timestamp_epoch": "1634913184.583086000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-53348550be306ec750c0cf18", "kind": "identity", "frame_number": 2639, "timestamp_epoch": "1634913184.583383000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b5bec5cd440f4d1fe5e9df2d", "kind": "identity", "frame_number": 2644, "timestamp_epoch": "1634913184.589924000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 127, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-2167032ee5366862b856b217", "kind": "identity", "frame_number": 2646, "timestamp_epoch": "1634913184.590368000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 127, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-ef12e97cc997be45dff59c4f", "kind": "identity", "frame_number": 2656, "timestamp_epoch": "1634913184.593774000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 128, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-3bfe955a063f2b6ec7519ecb", "kind": "identity", "frame_number": 2659, "timestamp_epoch": "1634913184.594595000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 128, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "13" } }, { "event_id": "evt-b58dad60fd3ff688d68d1d16", "kind": "identity", "frame_number": 2665, "timestamp_epoch": "1634913184.595278000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-907635dea3fe40d43ddf5f8e", "kind": "identity", "frame_number": 2667, "timestamp_epoch": "1634913184.595901000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-6226e73c89be8446cf77314b", "kind": "identity", "frame_number": 2668, "timestamp_epoch": "1634913184.596631000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-95a67e3ae969880b7195669e", "kind": "identity", "frame_number": 2680, "timestamp_epoch": "1634913184.613195000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0421f03f049483eca79b5728", "kind": "identity", "frame_number": 2681, "timestamp_epoch": "1634913184.613715000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a2802d85e547b34f371fe0b5", "kind": "identity", "frame_number": 2682, "timestamp_epoch": "1634913184.615582000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-87WCE26", "ntlmssp.auth.username": "kevin.henderson" } }, { "event_id": "evt-a5a1bc0045577a990ac58980", "kind": "identity", "frame_number": 2683, "timestamp_epoch": "1634913184.616773000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2af2b6a1f3a25b742dd77c67", "kind": "identity", "frame_number": 2684, "timestamp_epoch": "1634913184.617600000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0088fbbafebc32a91a8a17a8", "kind": "identity", "frame_number": 2685, "timestamp_epoch": "1634913184.617868000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0b432b969458dd14166bb8ee", "kind": "identity", "frame_number": 2686, "timestamp_epoch": "1634913184.618941000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-93b247a38de6d9e0dfff5b87", "kind": "identity", "frame_number": 2687, "timestamp_epoch": "1634913184.619068000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-bfe4bd8669fee399c2845b54", "kind": "identity", "frame_number": 2688, "timestamp_epoch": "1634913184.619158000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-80f2e027199913ec2228c141", "kind": "identity", "frame_number": 2690, "timestamp_epoch": "1634913184.619421000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9d44cc817be3f1b99339ef8d", "kind": "identity", "frame_number": 2692, "timestamp_epoch": "1634913184.619761000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e6b53715b959ecba95845a16", "kind": "identity", "frame_number": 2693, "timestamp_epoch": "1634913184.619958000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6cd8b82581beae707e20beee", "kind": "identity", "frame_number": 2694, "timestamp_epoch": "1634913184.620562000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6c55ddd03343198317d25052", "kind": "identity", "frame_number": 2695, "timestamp_epoch": "1634913184.620772000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-697fc4c41be043eca566290f", "kind": "identity", "frame_number": 2696, "timestamp_epoch": "1634913184.621121000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5594921cff6ef5c65cbe1969", "kind": "identity", "frame_number": 2698, "timestamp_epoch": "1634913184.621356000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a559fd2e0f231c11a3f1fcef", "kind": "identity", "frame_number": 2699, "timestamp_epoch": "1634913184.621674000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6449a330b8a7a99ad0af28b1", "kind": "identity", "frame_number": 2700, "timestamp_epoch": "1634913184.622184000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e9ed169d17c685d4868554f2", "kind": "identity", "frame_number": 2701, "timestamp_epoch": "1634913184.622475000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-06601f8624637e67c1909410", "kind": "identity", "frame_number": 2702, "timestamp_epoch": "1634913184.622793000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2a9b8d812c62901e7a4b8b98", "kind": "identity", "frame_number": 2703, "timestamp_epoch": "1634913184.623727000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ace4f146262a102a083591ef", "kind": "identity", "frame_number": 2704, "timestamp_epoch": "1634913184.624214000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5fdfd422802efcb3d4f2fb6b", "kind": "identity", "frame_number": 2705, "timestamp_epoch": "1634913184.624481000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f8415c50fa3fa0b27e30eba4", "kind": "identity", "frame_number": 2706, "timestamp_epoch": "1634913184.624880000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b0247da8c2553e9bccacf59f", "kind": "identity", "frame_number": 2708, "timestamp_epoch": "1634913184.625209000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e81e2fd4820f8ed326d01308", "kind": "identity", "frame_number": 2709, "timestamp_epoch": "1634913184.625793000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dcb2d015bc9579e97d0e61fd", "kind": "identity", "frame_number": 2710, "timestamp_epoch": "1634913184.626066000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cb6344561ba04c6a8b90fc2c", "kind": "identity", "frame_number": 2711, "timestamp_epoch": "1634913184.626530000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-df4e61bac3862ac79790ae63", "kind": "identity", "frame_number": 2712, "timestamp_epoch": "1634913184.628349000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3e46110c579f5c5712b44643", "kind": "identity", "frame_number": 2713, "timestamp_epoch": "1634913184.629077000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-28a9059f17b79fbbe2ee1159", "kind": "identity", "frame_number": 2714, "timestamp_epoch": "1634913184.629308000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-19ce01999e19a232263311b8", "kind": "identity", "frame_number": 2715, "timestamp_epoch": "1634913184.629836000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "samr.samr_UserInfo21.account_name": "kevin.henderson", "samr.samr_UserInfo21.full_name": "Kevin Henderson" } }, { "event_id": "evt-8724e6720d67b3e85a505d88", "kind": "identity", "frame_number": 2716, "timestamp_epoch": "1634913184.630349000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e72381a9e947739c283e2a3f", "kind": "identity", "frame_number": 2717, "timestamp_epoch": "1634913184.630761000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8967dcdc59ec019383d151b0", "kind": "identity", "frame_number": 2718, "timestamp_epoch": "1634913184.630974000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-aab2956f322c0a114a9480d5", "kind": "identity", "frame_number": 2719, "timestamp_epoch": "1634913184.631320000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7cb726a135e5bffb6b8a7967", "kind": "identity", "frame_number": 2720, "timestamp_epoch": "1634913184.633648000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-52cbad66eb0f7db8b5633ab4", "kind": "identity", "frame_number": 2721, "timestamp_epoch": "1634913184.634069000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ea6ace15eae6896b39c73a17", "kind": "identity", "frame_number": 2722, "timestamp_epoch": "1634913184.634314000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-55622194c3f90fbafc9e9b1a", "kind": "identity", "frame_number": 2723, "timestamp_epoch": "1634913184.634622000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bc0b594c2e9837089b4eb3d7", "kind": "identity", "frame_number": 2726, "timestamp_epoch": "1634913184.640159000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-87ccaef8a55db9ed141e2e65", "kind": "identity", "frame_number": 2727, "timestamp_epoch": "1634913184.640596000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-893bd6496bbab14d2c455760", "kind": "identity", "frame_number": 2728, "timestamp_epoch": "1634913184.640873000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-fedaef81d4cc624b15993d29", "kind": "identity", "frame_number": 2729, "timestamp_epoch": "1634913184.641392000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ed6ff62eb7a578e1f8ed5b45", "kind": "identity", "frame_number": 2730, "timestamp_epoch": "1634913184.641959000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6eb0f81a0a3e014631ba23b6", "kind": "identity", "frame_number": 2731, "timestamp_epoch": "1634913184.642336000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a198a5389422874fcd81e87a", "kind": "identity", "frame_number": 2732, "timestamp_epoch": "1634913184.642560000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c54ba527922680a4617a86ba", "kind": "identity", "frame_number": 2733, "timestamp_epoch": "1634913184.642767000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-658b5022a874271e74c5abaa", "kind": "identity", "frame_number": 2751, "timestamp_epoch": "1634913184.832930000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8c251c60e4745d6ceb264ce1", "kind": "identity", "frame_number": 2752, "timestamp_epoch": "1634913184.833419000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6955b87bee683b0bbdf299a6", "kind": "identity", "frame_number": 2757, "timestamp_epoch": "1634913184.835373000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 131, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-3a89c3fe54be9006f6a50cc9", "kind": "identity", "frame_number": 2760, "timestamp_epoch": "1634913184.836361000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 131, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "13" } }, { "event_id": "evt-cfbd2d261ba052acde8a6877", "kind": "identity", "frame_number": 2769, "timestamp_epoch": "1634913184.837493000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 132, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-094de83bb84f12d87f2a0295", "kind": "identity", "frame_number": 2772, "timestamp_epoch": "1634913184.837806000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 132, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "13" } }, { "event_id": "evt-e0cd1af93eee7f4f616c7304", "kind": "identity", "frame_number": 2779, "timestamp_epoch": "1634913184.838870000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-19f78607467504ba8e7158ad", "kind": "identity", "frame_number": 2781, "timestamp_epoch": "1634913184.839738000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b3bf6801f0f56b052d7b3bb7", "kind": "identity", "frame_number": 2782, "timestamp_epoch": "1634913184.840393000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c8a6bcbb5c1892a2c7a95ddd", "kind": "identity", "frame_number": 2783, "timestamp_epoch": "1634913184.840732000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f8dd9cfaf2ec14b7aedd869b", "kind": "identity", "frame_number": 2784, "timestamp_epoch": "1634913184.840896000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-820caf2849123169ab77ecb9", "kind": "identity", "frame_number": 2785, "timestamp_epoch": "1634913184.841038000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e77cb28255957ba92d707daf", "kind": "identity", "frame_number": 2799, "timestamp_epoch": "1634913184.961165000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-b69f616c1b28cdf6bc9c0c24", "kind": "identity", "frame_number": 2801, "timestamp_epoch": "1634913184.961996000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-81f0a6dc8a8e3c53885d04f0", "kind": "identity", "frame_number": 2808, "timestamp_epoch": "1634913184.972998000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-f001c75b9cab738a09c2cfad", "kind": "identity", "frame_number": 2810, "timestamp_epoch": "1634913184.974053000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-bf47de6c77cf13d5a5bb9cc6", "kind": "identity", "frame_number": 3255, "timestamp_epoch": "1634913199.874867000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5b0c9d9f3aa63bff073dae69", "kind": "identity", "frame_number": 3256, "timestamp_epoch": "1634913199.875072000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5e10fa4ca7e8902b0e2d6099", "kind": "identity", "frame_number": 3257, "timestamp_epoch": "1634913199.875267000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7df82aa6af5efa4ad0ce802d", "kind": "identity", "frame_number": 3258, "timestamp_epoch": "1634913199.875466000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-55071c36ca61bb1a536e04d1", "kind": "identity", "frame_number": 3366, "timestamp_epoch": "1634913211.323482000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 152, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "10" } }, { "event_id": "evt-dea730c6e8f03ffa7d71cef0", "kind": "identity", "frame_number": 3367, "timestamp_epoch": "1634913211.324080000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 152, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-45cbb534cfba81a21faae318", "kind": "identity", "frame_number": 3374, "timestamp_epoch": "1634913211.333574000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 153, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "10" } }, { "event_id": "evt-575027c7c45f8d063cde3aab", "kind": "identity", "frame_number": 3376, "timestamp_epoch": "1634913211.334373000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 153, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "11" } }, { "event_id": "evt-70b5d19b00c90d2ebce6b245", "kind": "identity", "frame_number": 3385, "timestamp_epoch": "1634913211.335591000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 154, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-9480bdda471241aa756fa2af", "kind": "identity", "frame_number": 3388, "timestamp_epoch": "1634913211.336377000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 154, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "13" } }, { "event_id": "evt-fca9d9b0acab85f1a2d2b7c1", "kind": "identity", "frame_number": 3409, "timestamp_epoch": "1634913211.541960000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-52f73464e725ed4157b09770", "kind": "identity", "frame_number": 3410, "timestamp_epoch": "1634913211.542128000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a3f1093bc3dce514ebd673c4", "kind": "identity", "frame_number": 3411, "timestamp_epoch": "1634913211.542510000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-176df5c8e3d79d5906bd862c", "kind": "identity", "frame_number": 3421, "timestamp_epoch": "1634913211.569219000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 158, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-d19e4be355437040dfc47602", "kind": "identity", "frame_number": 3426, "timestamp_epoch": "1634913211.569436000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 159, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-bb7590b17a356773e0846574", "kind": "identity", "frame_number": 3428, "timestamp_epoch": "1634913211.569747000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 159, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-3cd3920ab6640aaf131a2ab3", "kind": "identity", "frame_number": 3431, "timestamp_epoch": "1634913211.570097000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 158, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "13" } }, { "event_id": "evt-365c09a94c14d71e8852d4a4", "kind": "identity", "frame_number": 3439, "timestamp_epoch": "1634913211.570871000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-90780f38285a706676705317", "kind": "identity", "frame_number": 3441, "timestamp_epoch": "1634913211.571413000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-bfc569f464596f1eff8d24ab", "kind": "identity", "frame_number": 3442, "timestamp_epoch": "1634913211.571872000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-c38abc4a41d850071d50846b", "kind": "identity", "frame_number": 3452, "timestamp_epoch": "1634913211.584903000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-006b88ab371d8470a3000986", "kind": "identity", "frame_number": 3453, "timestamp_epoch": "1634913211.585498000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-73099cc9bb21fe9f5aa12ea1", "kind": "identity", "frame_number": 3454, "timestamp_epoch": "1634913211.587306000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-NZ875R4", "ntlmssp.auth.username": "marcus.cobb" } }, { "event_id": "evt-5dff8149173a3b9f106fda31", "kind": "identity", "frame_number": 3455, "timestamp_epoch": "1634913211.588460000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0aa3393765f5b9e44a914057", "kind": "identity", "frame_number": 3456, "timestamp_epoch": "1634913211.589690000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6c1d32493a938d15b12fe94e", "kind": "identity", "frame_number": 3457, "timestamp_epoch": "1634913211.589893000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d7e43e82f6f308d7a9d7dc64", "kind": "identity", "frame_number": 3458, "timestamp_epoch": "1634913211.590200000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0ea9a07b4d3259653cc40046", "kind": "identity", "frame_number": 3459, "timestamp_epoch": "1634913211.590453000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-327effd5621f07920a16f809", "kind": "identity", "frame_number": 3460, "timestamp_epoch": "1634913211.590997000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-8012673b3da3ce00270d769b", "kind": "identity", "frame_number": 3461, "timestamp_epoch": "1634913211.591258000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1d471725a66aa3d119f21ea8", "kind": "identity", "frame_number": 3462, "timestamp_epoch": "1634913211.591740000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c8eb3f48378339f8e2bb29c6", "kind": "identity", "frame_number": 3463, "timestamp_epoch": "1634913211.591948000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c7511b8c1ab141b7b45b09ae", "kind": "identity", "frame_number": 3464, "timestamp_epoch": "1634913211.593084000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c58389ee962defbc24a4cd1f", "kind": "identity", "frame_number": 3465, "timestamp_epoch": "1634913211.593326000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7e6c2106014d94d2b80d126e", "kind": "identity", "frame_number": 3466, "timestamp_epoch": "1634913211.593553000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a901aaed05deacb76e685581", "kind": "identity", "frame_number": 3467, "timestamp_epoch": "1634913211.593734000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7880c7a0281181cb47ad0a21", "kind": "identity", "frame_number": 3468, "timestamp_epoch": "1634913211.594018000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-aee9f4b1a79ab990c5169660", "kind": "identity", "frame_number": 3469, "timestamp_epoch": "1634913211.594418000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-75351e0cfa82f19cf11a1d89", "kind": "identity", "frame_number": 3470, "timestamp_epoch": "1634913211.594705000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-506d15ec613b3612347d580e", "kind": "identity", "frame_number": 3471, "timestamp_epoch": "1634913211.595010000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0e676c5fea434891ac10fed6", "kind": "identity", "frame_number": 3472, "timestamp_epoch": "1634913211.595209000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-43f1c0e7ea92977aec9b3879", "kind": "identity", "frame_number": 3473, "timestamp_epoch": "1634913211.595531000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-062a770e47d7ba97f53fa466", "kind": "identity", "frame_number": 3474, "timestamp_epoch": "1634913211.595948000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c93477566de7baa5a4f99f9e", "kind": "identity", "frame_number": 3475, "timestamp_epoch": "1634913211.596471000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-09b20b09abd0526d8b16ed6b", "kind": "identity", "frame_number": 3476, "timestamp_epoch": "1634913211.596983000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a8b855d60ab99398e35a9c58", "kind": "identity", "frame_number": 3477, "timestamp_epoch": "1634913211.597346000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5b4770dc0ac645d875758d0c", "kind": "identity", "frame_number": 3478, "timestamp_epoch": "1634913211.597622000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-62eda8747cfdfc1c210151f0", "kind": "identity", "frame_number": 3479, "timestamp_epoch": "1634913211.598045000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-20fcb42ee5c24035c87fa5b2", "kind": "identity", "frame_number": 3480, "timestamp_epoch": "1634913211.598687000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ab4ba0adf15c9246988043b7", "kind": "identity", "frame_number": 3481, "timestamp_epoch": "1634913211.599136000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0370fd1a4857b0ece8bebf67", "kind": "identity", "frame_number": 3482, "timestamp_epoch": "1634913211.599526000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6a3c4a9dcd6c89b530513867", "kind": "identity", "frame_number": 3483, "timestamp_epoch": "1634913211.599905000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "samr.samr_UserInfo21.account_name": "marcus.cobb", "samr.samr_UserInfo21.full_name": "Marcus Cobb" } }, { "event_id": "evt-d5003b34cdf8e10d1a8cddf7", "kind": "identity", "frame_number": 3484, "timestamp_epoch": "1634913211.600051000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e7b5a3ba6f606ec925d75e50", "kind": "identity", "frame_number": 3485, "timestamp_epoch": "1634913211.600415000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-150fba96105c1cea3ef6d259", "kind": "identity", "frame_number": 3486, "timestamp_epoch": "1634913211.600749000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a5a5202a4ceac006bcbb434e", "kind": "identity", "frame_number": 3487, "timestamp_epoch": "1634913211.601102000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8882afb7873f6f39447e9a20", "kind": "identity", "frame_number": 3488, "timestamp_epoch": "1634913211.601372000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-371e81bc84066c7b6e3753c3", "kind": "identity", "frame_number": 3489, "timestamp_epoch": "1634913211.601660000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6c902bb26f8db722ced650d5", "kind": "identity", "frame_number": 3490, "timestamp_epoch": "1634913211.602813000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5e5013963e4d99d7ef1392b5", "kind": "identity", "frame_number": 3491, "timestamp_epoch": "1634913211.603062000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f2ca02aa09f2449c4a6c05b1", "kind": "identity", "frame_number": 3492, "timestamp_epoch": "1634913211.605607000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5701fe724b13362311aac0fc", "kind": "identity", "frame_number": 3493, "timestamp_epoch": "1634913211.605881000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c4757af31784e548ce6ac4ad", "kind": "identity", "frame_number": 3494, "timestamp_epoch": "1634913211.606071000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0b6dc7ff92ada0057276223d", "kind": "identity", "frame_number": 3495, "timestamp_epoch": "1634913211.606408000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d8068d912736393971ab74c8", "kind": "identity", "frame_number": 3496, "timestamp_epoch": "1634913211.606648000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-d7303db7ef62f25b30b35cd2", "kind": "identity", "frame_number": 3497, "timestamp_epoch": "1634913211.607068000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ad3bfbb0b685ca8917fbf48a", "kind": "identity", "frame_number": 3498, "timestamp_epoch": "1634913211.607398000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-336195839f79516019c3d36a", "kind": "identity", "frame_number": 3499, "timestamp_epoch": "1634913211.607643000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f19e38453eb73516d82f6ce6", "kind": "identity", "frame_number": 3506, "timestamp_epoch": "1634913211.654288000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-169e2ac20529f4477986cd9b", "kind": "identity", "frame_number": 3507, "timestamp_epoch": "1634913211.654884000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cc12b8905c8ab069f3a8bdde", "kind": "identity", "frame_number": 3512, "timestamp_epoch": "1634913211.656152000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 161, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-b87e34bdee42ea3b9fa889fb", "kind": "identity", "frame_number": 3515, "timestamp_epoch": "1634913211.657164000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 161, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "13" } }, { "event_id": "evt-ca78e591298b81639bdc16ff", "kind": "identity", "frame_number": 3523, "timestamp_epoch": "1634913211.658381000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 162, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-0038183ae3d0a0b1e078e6ab", "kind": "identity", "frame_number": 3525, "timestamp_epoch": "1634913211.658852000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 162, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "marcus.cobb", "kerberos.msg_type": "13" } }, { "event_id": "evt-8196e1c6b57c5d9304189e61", "kind": "identity", "frame_number": 3532, "timestamp_epoch": "1634913211.659371000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-bf31893c0ab67d2d519e76df", "kind": "identity", "frame_number": 3534, "timestamp_epoch": "1634913211.660266000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-9fe225fefb38c1af9f8d00da", "kind": "identity", "frame_number": 3535, "timestamp_epoch": "1634913211.660646000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a86b1bb036d7c1eaaf5266d7", "kind": "identity", "frame_number": 3536, "timestamp_epoch": "1634913211.660928000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d65d223c05c79fd887af4554", "kind": "identity", "frame_number": 3537, "timestamp_epoch": "1634913211.661126000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-fb6a5c4965a0bad21682dce8", "kind": "identity", "frame_number": 3538, "timestamp_epoch": "1634913211.661413000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-355363700f95ea03b68cc889", "kind": "identity", "frame_number": 3545, "timestamp_epoch": "1634913211.915528000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-ddba8392c0635298bf3aaecd", "kind": "identity", "frame_number": 3547, "timestamp_epoch": "1634913211.916395000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-e3947b99e5d391e176bf35b6", "kind": "identity", "frame_number": 3554, "timestamp_epoch": "1634913211.927868000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-4ee9cc1610dc081b0853e7e4", "kind": "identity", "frame_number": 3556, "timestamp_epoch": "1634913211.928846000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-542ab85b745231c01788102d", "kind": "identity", "frame_number": 3837, "timestamp_epoch": "1634913222.390995000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-3cbaaa1226297f4d8530df7a", "kind": "identity", "frame_number": 3838, "timestamp_epoch": "1634913222.391520000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5bfa5ed0a03c4f1830fcc7ba", "kind": "identity", "frame_number": 3839, "timestamp_epoch": "1634913222.392073000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-d09d8ea29010054b9be119a5", "kind": "identity", "frame_number": 3840, "timestamp_epoch": "1634913222.392537000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5cae68989ed69c8d8e4dd6cc", "kind": "identity", "frame_number": 3926, "timestamp_epoch": "1634913227.766409000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7ad69c2973ecb1e025a1f058", "kind": "identity", "frame_number": 3927, "timestamp_epoch": "1634913227.767010000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9b7c6c52793ad478731fead8", "kind": "identity", "frame_number": 3928, "timestamp_epoch": "1634913227.767626000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-290ca92392977eb041bbbf09", "kind": "identity", "frame_number": 3929, "timestamp_epoch": "1634913227.767925000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-68cd32c6343c9b38f1fe8cde", "kind": "identity", "frame_number": 3930, "timestamp_epoch": "1634913227.768369000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5f874c5f03a6731ff040ebeb", "kind": "identity", "frame_number": 3931, "timestamp_epoch": "1634913227.768690000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4bbec37fadd04e3f4afbbc0a", "kind": "identity", "frame_number": 3932, "timestamp_epoch": "1634913227.769130000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ae667f8aec231a925bd332a5", "kind": "identity", "frame_number": 3933, "timestamp_epoch": "1634913227.769521000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-93bb60d944c0e9dacdaca983", "kind": "identity", "frame_number": 4024, "timestamp_epoch": "1634913232.661605000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ecc982525fb08c0abf31c926", "kind": "identity", "frame_number": 4100, "timestamp_epoch": "1634913234.178031000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dd1acea16769bb71177cd586", "kind": "identity", "frame_number": 4122, "timestamp_epoch": "1634913235.692391000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ad6c1459c2b447a12bc3aefd", "kind": "identity", "frame_number": 4125, "timestamp_epoch": "1634913238.548289000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ab6c5ef59e3bfcb56433b4e1", "kind": "identity", "frame_number": 4126, "timestamp_epoch": "1634913238.548635000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ee15566ad127005fb13d7666", "kind": "identity", "frame_number": 4127, "timestamp_epoch": "1634913238.548910000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e6be9d39a18b48974c47bee0", "kind": "identity", "frame_number": 4128, "timestamp_epoch": "1634913238.549197000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 9, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7ebba67d28cf2754d2174336", "kind": "identity", "frame_number": 4153, "timestamp_epoch": "1634913238.912446000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 184, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "10" } }, { "event_id": "evt-e18f45f3a2950939cb46fca1", "kind": "identity", "frame_number": 4154, "timestamp_epoch": "1634913238.913047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 184, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-3f2bf738ee9aaece1b7d410c", "kind": "identity", "frame_number": 4161, "timestamp_epoch": "1634913238.920172000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 185, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "10" } }, { "event_id": "evt-58c3fc94b1285d7a7d506218", "kind": "identity", "frame_number": 4163, "timestamp_epoch": "1634913238.920739000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 185, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "11" } }, { "event_id": "evt-27d9346d05c7feb27e3f987f", "kind": "identity", "frame_number": 4172, "timestamp_epoch": "1634913238.921698000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 186, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-c01dfbdb090ecc4913b53b20", "kind": "identity", "frame_number": 4175, "timestamp_epoch": "1634913238.922317000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 186, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "13" } }, { "event_id": "evt-5ccefa7839298c02194b0dbb", "kind": "identity", "frame_number": 4188, "timestamp_epoch": "1634913239.042052000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b29e8d0b27d366604682f469", "kind": "identity", "frame_number": 4189, "timestamp_epoch": "1634913239.042419000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-830ca7ea7f26c93171e891a5", "kind": "identity", "frame_number": 4190, "timestamp_epoch": "1634913239.042733000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3c7a89a7b133abf6a5659b54", "kind": "identity", "frame_number": 4195, "timestamp_epoch": "1634913239.057881000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 188, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-2cd440bab407718652e08dcb", "kind": "identity", "frame_number": 4197, "timestamp_epoch": "1634913239.058202000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 188, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "30" } }, { "event_id": "evt-9e9c3757d935655b34e5eee0", "kind": "identity", "frame_number": 4205, "timestamp_epoch": "1634913239.060394000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 189, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-b8f7a9dd8071aac69619eb11", "kind": "identity", "frame_number": 4208, "timestamp_epoch": "1634913239.061306000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 189, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "13" } }, { "event_id": "evt-1f1fd780cd82ab2e726a374f", "kind": "identity", "frame_number": 4214, "timestamp_epoch": "1634913239.062049000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-a50b2e30874a5f2528115256", "kind": "identity", "frame_number": 4220, "timestamp_epoch": "1634913239.063017000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-7d2d1f76c2aa544e02d78fac", "kind": "identity", "frame_number": 4221, "timestamp_epoch": "1634913239.063739000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-57a023ed041cdafe121323c9", "kind": "identity", "frame_number": 4231, "timestamp_epoch": "1634913239.076948000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ea878e344900845aab08e7ab", "kind": "identity", "frame_number": 4232, "timestamp_epoch": "1634913239.077434000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-316cbf1d201aa45cead14468", "kind": "identity", "frame_number": 4233, "timestamp_epoch": "1634913239.078398000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-31d3a6b8cc8d22aac6ab5901", "kind": "identity", "frame_number": 4234, "timestamp_epoch": "1634913239.079458000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a301d65e3ee2b635da991bc8", "kind": "identity", "frame_number": 4235, "timestamp_epoch": "1634913239.079839000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a47b8364535059137d1ca243", "kind": "identity", "frame_number": 4236, "timestamp_epoch": "1634913239.080172000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-336cbe5085c2f74aaa7ee409", "kind": "identity", "frame_number": 4237, "timestamp_epoch": "1634913239.080493000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-04554c345e0b419b792854a5", "kind": "identity", "frame_number": 4238, "timestamp_epoch": "1634913239.080610000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-75fc24f34938f6912519d491", "kind": "identity", "frame_number": 4239, "timestamp_epoch": "1634913239.080718000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-95917657e43a72076153c651", "kind": "identity", "frame_number": 4241, "timestamp_epoch": "1634913239.080951000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-33885c4021a8cbd7b9150121", "kind": "identity", "frame_number": 4243, "timestamp_epoch": "1634913239.081294000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-3448904e25247f7c96ab69d5", "kind": "identity", "frame_number": 4244, "timestamp_epoch": "1634913239.081434000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0e7e5c27aa4b0393caf388cc", "kind": "identity", "frame_number": 4245, "timestamp_epoch": "1634913239.082036000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7fcfd3e9d96f31444535fbfb", "kind": "identity", "frame_number": 4246, "timestamp_epoch": "1634913239.082234000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-25d2e73e42351172207250a6", "kind": "identity", "frame_number": 4247, "timestamp_epoch": "1634913239.082715000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-86ce64c4687b11c986198300", "kind": "identity", "frame_number": 4248, "timestamp_epoch": "1634913239.082860000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ecb369f89d8fa76cbd14c9fa", "kind": "identity", "frame_number": 4249, "timestamp_epoch": "1634913239.083080000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-27ec9e1fa5a383197105f684", "kind": "identity", "frame_number": 4250, "timestamp_epoch": "1634913239.083436000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5a23799e6583a92ec7dca7be", "kind": "identity", "frame_number": 4251, "timestamp_epoch": "1634913239.083680000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-1e18ed139a91d20d850ad59e", "kind": "identity", "frame_number": 4252, "timestamp_epoch": "1634913239.083946000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7b84f4d8b793a28c03016e48", "kind": "identity", "frame_number": 4253, "timestamp_epoch": "1634913239.084963000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-3bba94e010d0593f88de3965", "kind": "identity", "frame_number": 4254, "timestamp_epoch": "1634913239.085353000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-37457a4b5585042afc3f2c7f", "kind": "identity", "frame_number": 4255, "timestamp_epoch": "1634913239.085566000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-03efc2933f7a9b0a0de81a18", "kind": "identity", "frame_number": 4256, "timestamp_epoch": "1634913239.085914000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-78d1aa5b5753ab4b7e1f0040", "kind": "identity", "frame_number": 4257, "timestamp_epoch": "1634913239.086347000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-967991e21bc13481c0baccb9", "kind": "identity", "frame_number": 4258, "timestamp_epoch": "1634913239.086645000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cfc27f099138b0cc999c1b57", "kind": "identity", "frame_number": 4259, "timestamp_epoch": "1634913239.086855000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-371c15eb3fcd3376b55a86b8", "kind": "identity", "frame_number": 4260, "timestamp_epoch": "1634913239.087200000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8ce3b875436fa581565d972b", "kind": "identity", "frame_number": 4261, "timestamp_epoch": "1634913239.087672000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-cf47979343584f340bcd86c6", "kind": "identity", "frame_number": 4262, "timestamp_epoch": "1634913239.088103000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e809ebb7259dc3ed045b6aef", "kind": "identity", "frame_number": 4263, "timestamp_epoch": "1634913239.088314000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-e0052bf1f92cefae23650a26", "kind": "identity", "frame_number": 4264, "timestamp_epoch": "1634913239.088685000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "samr.samr_UserInfo21.account_name": "agnes.warren", "samr.samr_UserInfo21.full_name": "Agnes Warren" } }, { "event_id": "evt-6938f4b1338d84c42a6bb9fd", "kind": "identity", "frame_number": 4265, "timestamp_epoch": "1634913239.089905000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ba358b344c1696fd072ac7a3", "kind": "identity", "frame_number": 4266, "timestamp_epoch": "1634913239.090347000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f8400475ae22525b8ef0febb", "kind": "identity", "frame_number": 4267, "timestamp_epoch": "1634913239.090589000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-bd9689bc11418e02d61c9cca", "kind": "identity", "frame_number": 4268, "timestamp_epoch": "1634913239.090898000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5b9ba3fa4ca7c55416659f90", "kind": "identity", "frame_number": 4269, "timestamp_epoch": "1634913239.091915000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-39eca401dd5b123313154421", "kind": "identity", "frame_number": 4270, "timestamp_epoch": "1634913239.092201000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ee67d6aa2c3e3c92be811020", "kind": "identity", "frame_number": 4271, "timestamp_epoch": "1634913239.092435000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f0e80888040131601f413091", "kind": "identity", "frame_number": 4272, "timestamp_epoch": "1634913239.092808000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c73c7bae4e3bb64fdf11c286", "kind": "identity", "frame_number": 4273, "timestamp_epoch": "1634913239.093342000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-e433093c4cbe0efa85e5faa9", "kind": "identity", "frame_number": 4275, "timestamp_epoch": "1634913239.093588000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b6d8b710d73f9cbf46a0a964", "kind": "identity", "frame_number": 4277, "timestamp_epoch": "1634913239.093845000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4225d5213f0e781d9b32cc6e", "kind": "identity", "frame_number": 4278, "timestamp_epoch": "1634913239.094151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fe2cb323f9c7b3ca8f0a0000", "kind": "identity", "frame_number": 4279, "timestamp_epoch": "1634913239.095806000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-73a4fe173248b6e45b654fdb", "kind": "identity", "frame_number": 4280, "timestamp_epoch": "1634913239.096150000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ef305578f51cab485223d36b", "kind": "identity", "frame_number": 4281, "timestamp_epoch": "1634913239.096374000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-24b105d4093531d329d692e3", "kind": "identity", "frame_number": 4282, "timestamp_epoch": "1634913239.096571000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9b4d257fe038be8a5628e318", "kind": "identity", "frame_number": 4288, "timestamp_epoch": "1634913239.274296000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5ea342130587d01ecf44f1fe", "kind": "identity", "frame_number": 4289, "timestamp_epoch": "1634913239.274834000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2f7f30383dc57394e2ba8266", "kind": "identity", "frame_number": 4294, "timestamp_epoch": "1634913239.275998000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 191, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-c1f362e4ba1a42f13e7801bf", "kind": "identity", "frame_number": 4297, "timestamp_epoch": "1634913239.277211000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 191, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "13" } }, { "event_id": "evt-2aca27847a1f1b1aaca4ae7b", "kind": "identity", "frame_number": 4306, "timestamp_epoch": "1634913239.278191000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 192, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-2468b43771f78448a1b89d12", "kind": "identity", "frame_number": 4309, "timestamp_epoch": "1634913239.278574000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 192, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "agnes.warren", "kerberos.msg_type": "13" } }, { "event_id": "evt-c62af6e55c6f6e1ec43e985c", "kind": "identity", "frame_number": 4316, "timestamp_epoch": "1634913239.279227000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-8cad510bdd83131bbdba9f18", "kind": "identity", "frame_number": 4318, "timestamp_epoch": "1634913239.280145000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-0e685516b96c904b56827b42", "kind": "identity", "frame_number": 4319, "timestamp_epoch": "1634913239.280515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-21f4d79bbc27a13c487ad8ab", "kind": "identity", "frame_number": 4320, "timestamp_epoch": "1634913239.280714000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fc7042c694d4c0746354c3b9", "kind": "identity", "frame_number": 4321, "timestamp_epoch": "1634913239.280865000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a62056d3a5a81281cd07a420", "kind": "identity", "frame_number": 4322, "timestamp_epoch": "1634913239.281018000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0c27de0c2892117b1cbdda7b", "kind": "identity", "frame_number": 4329, "timestamp_epoch": "1634913239.402534000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-64a3584f9f96a2474b0889f7", "kind": "identity", "frame_number": 4331, "timestamp_epoch": "1634913239.403407000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-c676e7f190921a138082c23d", "kind": "identity", "frame_number": 4338, "timestamp_epoch": "1634913239.430496000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-0b1c3aee5059745fa8c13e9a", "kind": "identity", "frame_number": 4340, "timestamp_epoch": "1634913239.431701000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-7a83b7ca891ca565a708b57f", "kind": "identity", "frame_number": 5047, "timestamp_epoch": "1634913245.548762000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-0020bcc3c6be962671ae1b60", "kind": "identity", "frame_number": 5049, "timestamp_epoch": "1634913245.549481000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-90e6117da8bc41abb44f66ab", "kind": "identity", "frame_number": 5050, "timestamp_epoch": "1634913245.549894000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-3166eefdf7eb25ed1491c33c", "kind": "identity", "frame_number": 5074, "timestamp_epoch": "1634913245.559977000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-c646bcf25caf9b16c663b52e", "kind": "identity", "frame_number": 5076, "timestamp_epoch": "1634913245.560736000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-9ecba796d041afb254e58cf1", "kind": "identity", "frame_number": 5087, "timestamp_epoch": "1634913245.565701000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-3bce3f206f46ea2f942b8b0e", "kind": "identity", "frame_number": 5089, "timestamp_epoch": "1634913245.566568000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-3aae4517e418a0d11a3c6e03", "kind": "identity", "frame_number": 5183, "timestamp_epoch": "1634913250.375593000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-1f329dea06ed755c0b855616", "kind": "identity", "frame_number": 5184, "timestamp_epoch": "1634913250.376037000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-35bc0ef96c07084e5b58dcdf", "kind": "identity", "frame_number": 5185, "timestamp_epoch": "1634913250.376479000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6a846c5932eb990872454849", "kind": "identity", "frame_number": 5186, "timestamp_epoch": "1634913250.376786000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-67402a83a70bd12368213137", "kind": "identity", "frame_number": 5194, "timestamp_epoch": "1634913251.393675000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-50359dd5bab79b9b516b97b5", "kind": "identity", "frame_number": 5195, "timestamp_epoch": "1634913251.393992000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-07f218a32afde1d8149f17da", "kind": "identity", "frame_number": 5196, "timestamp_epoch": "1634913251.395693000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9efe7aa3081f73ab1ca8118d", "kind": "identity", "frame_number": 5197, "timestamp_epoch": "1634913251.395961000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7e021192cec06febcee5b2b3", "kind": "identity", "frame_number": 5201, "timestamp_epoch": "1634913251.911457000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-20b7217f662531397c5603f7", "kind": "identity", "frame_number": 5202, "timestamp_epoch": "1634913251.911886000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5bd41ba5d9cf43060e9b52d1", "kind": "identity", "frame_number": 5203, "timestamp_epoch": "1634913251.912509000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-62bd3f35ed3de71f65e28e85", "kind": "identity", "frame_number": 5204, "timestamp_epoch": "1634913251.912750000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c763a693ee12580752432a9a", "kind": "identity", "frame_number": 5207, "timestamp_epoch": "1634913257.873625000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-92190064c3b11bd72f084b13", "kind": "identity", "frame_number": 5208, "timestamp_epoch": "1634913257.874005000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ac394597b9db6576ab65ecf6", "kind": "identity", "frame_number": 5245, "timestamp_epoch": "1634913263.456190000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b10622a86c1e2e67eabab892", "kind": "identity", "frame_number": 5272, "timestamp_epoch": "1634913264.971389000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-39387f9fd92da5f258413504", "kind": "identity", "frame_number": 5279, "timestamp_epoch": "1634913266.501732000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bbbbb822744f5c00f26df947", "kind": "identity", "frame_number": 5282, "timestamp_epoch": "1634913267.815283000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-da43280c235fe171281ff9e5", "kind": "identity", "frame_number": 5283, "timestamp_epoch": "1634913267.815667000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5ebacd3dddb58712442d8cd3", "kind": "identity", "frame_number": 5284, "timestamp_epoch": "1634913267.817428000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-83e69960c4efc9940ebf4246", "kind": "identity", "frame_number": 5285, "timestamp_epoch": "1634913267.817693000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bb60c3d090d2c9009d4802dc", "kind": "identity", "frame_number": 5288, "timestamp_epoch": "1634913268.332041000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4c9bfd94654b695ea895d601", "kind": "identity", "frame_number": 5289, "timestamp_epoch": "1634913268.332377000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4c7b56ba802edf6f414bdd59", "kind": "identity", "frame_number": 5290, "timestamp_epoch": "1634913268.332987000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b7f20bf0d89865fdb05e76fd", "kind": "identity", "frame_number": 5291, "timestamp_epoch": "1634913268.333174000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a88f5cef7c97f9a6b7576c99", "kind": "identity", "frame_number": 5315, "timestamp_epoch": "1634913272.473757000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-6e6aaab7dbb5e12b7511e7d2", "kind": "identity", "frame_number": 5317, "timestamp_epoch": "1634913272.474632000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-254a04f48236948936ac0d02", "kind": "identity", "frame_number": 5318, "timestamp_epoch": "1634913272.475252000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-759f2a208a66534e62505070", "kind": "identity", "frame_number": 5342, "timestamp_epoch": "1634913272.485732000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-106717a5ed9713c04118d6f5", "kind": "identity", "frame_number": 5344, "timestamp_epoch": "1634913272.486629000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-778f18c2fbad29c7e1bb9b0c", "kind": "identity", "frame_number": 5355, "timestamp_epoch": "1634913272.492155000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-49799e0195c83c26e7d9ba59", "kind": "identity", "frame_number": 5357, "timestamp_epoch": "1634913272.492997000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-ace77261856d5dbe9fa2f09b", "kind": "identity", "frame_number": 5520, "timestamp_epoch": "1634913276.811273000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e63ad1662b6a0ec56003b045", "kind": "identity", "frame_number": 5521, "timestamp_epoch": "1634913276.811642000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b50b62262b1b114f56223e58", "kind": "identity", "frame_number": 5535, "timestamp_epoch": "1634913288.158065000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-63b096d7d4530391a6e3adfe", "kind": "identity", "frame_number": 5536, "timestamp_epoch": "1634913288.158406000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-37faf8f03eb8344e25d8c0ab", "kind": "identity", "frame_number": 5537, "timestamp_epoch": "1634913288.158682000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-53177e0982a6094b5260d905", "kind": "identity", "frame_number": 5538, "timestamp_epoch": "1634913288.158870000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3a2b0a15d02b59aaa223f3f9", "kind": "identity", "frame_number": 5539, "timestamp_epoch": "1634913288.159190000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d2329745aa67176b0e501eb5", "kind": "identity", "frame_number": 5540, "timestamp_epoch": "1634913288.159408000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a86feb85fee19840a727717e", "kind": "identity", "frame_number": 5541, "timestamp_epoch": "1634913288.159641000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-585a4fbfa8087d563f5d7f24", "kind": "identity", "frame_number": 5542, "timestamp_epoch": "1634913288.159838000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8491cb3f818eccdefc1fad7b", "kind": "identity", "frame_number": 5571, "timestamp_epoch": "1634913292.033121000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-70e1072f15afc34508266aaa", "kind": "identity", "frame_number": 5611, "timestamp_epoch": "1634913293.547649000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bb1c005f88af92336806bf72", "kind": "identity", "frame_number": 5641, "timestamp_epoch": "1634913295.142658000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b9cd08560c9c86c5268349c2", "kind": "identity", "frame_number": 5646, "timestamp_epoch": "1634913298.938767000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-07d75f17c83bd18613569a8f", "kind": "identity", "frame_number": 5647, "timestamp_epoch": "1634913298.939039000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d65ff2c463f20ff2f0189a88", "kind": "identity", "frame_number": 5648, "timestamp_epoch": "1634913298.939333000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-bb754c6ba312697b19de1d29", "kind": "identity", "frame_number": 5649, "timestamp_epoch": "1634913298.939616000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 38, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8b32693f577862768df5047d", "kind": "identity", "frame_number": 5681, "timestamp_epoch": "1634913300.067493000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-ebfd1f4f32b6ff6ae89a3446", "kind": "identity", "frame_number": 5683, "timestamp_epoch": "1634913300.068233000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b9b63138f9866da780d1be87", "kind": "identity", "frame_number": 5684, "timestamp_epoch": "1634913300.068674000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-bfce373c258b27da5cc9ce01", "kind": "identity", "frame_number": 5708, "timestamp_epoch": "1634913300.081216000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-0d625a71292ee9c41217b266", "kind": "identity", "frame_number": 5710, "timestamp_epoch": "1634913300.082247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-71fd7d4333e127f55e772eac", "kind": "identity", "frame_number": 5721, "timestamp_epoch": "1634913300.088553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-f8e7c9584a37ee429e8e757a", "kind": "identity", "frame_number": 5723, "timestamp_epoch": "1634913300.089369000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-8f73dc75431b15172a7fdd90", "kind": "identity", "frame_number": 5741, "timestamp_epoch": "1634913300.309105000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e652cd01d7506ea88261be21", "kind": "identity", "frame_number": 6168, "timestamp_epoch": "1634913318.442123000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-58442e6735ad89092a2ad10c", "kind": "identity", "frame_number": 6169, "timestamp_epoch": "1634913318.442669000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0cd73bb26da461a4817e4cf1", "kind": "identity", "frame_number": 6170, "timestamp_epoch": "1634913318.443072000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b48d21bb9ee4eb1d5d360842", "kind": "identity", "frame_number": 6171, "timestamp_epoch": "1634913318.443363000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-07714604cb13bf76aa2549ff", "kind": "identity", "frame_number": 6172, "timestamp_epoch": "1634913318.443669000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f0d15cd7f413e5a83e7ae80d", "kind": "identity", "frame_number": 6173, "timestamp_epoch": "1634913318.443931000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e89b39c1f7cde79914f79435", "kind": "identity", "frame_number": 6174, "timestamp_epoch": "1634913318.444285000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-016020c158d816d327d32d34", "kind": "identity", "frame_number": 6175, "timestamp_epoch": "1634913318.444691000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-67c6cb1bce0d11ee588ed4f4", "kind": "identity", "frame_number": 6192, "timestamp_epoch": "1634913329.177538000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7f817ea3ceed9b71da956615", "kind": "identity", "frame_number": 6193, "timestamp_epoch": "1634913329.178019000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-843d4d68f1127df584233ea3", "kind": "identity", "frame_number": 6194, "timestamp_epoch": "1634913329.178670000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1e7253d054382b903fc34e6b", "kind": "identity", "frame_number": 6195, "timestamp_epoch": "1634913329.179264000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 80, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-752e5cfc9d6b5a1cc852541b", "kind": "identity", "frame_number": 6466, "timestamp_epoch": "1634913349.246092000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "_googlecast._tcp.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3574fd4bb09dcbab55ef5607", "kind": "identity", "frame_number": 6477, "timestamp_epoch": "1634913350.248206000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "_googlecast._tcp.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-075dc56e66d040b921e72f2f", "kind": "identity", "frame_number": 6480, "timestamp_epoch": "1634913352.251292000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "_googlecast._tcp.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5fece0c08bf76c6ce2f8af7a", "kind": "identity", "frame_number": 6491, "timestamp_epoch": "1634913352.385047000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-b0e7188a73401f6cf6756a5d", "kind": "identity", "frame_number": 6492, "timestamp_epoch": "1634913352.385392000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "zuczbdyvfzio.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-21f15e0cf35a4749899032f7", "kind": "identity", "frame_number": 6493, "timestamp_epoch": "1634913352.385860000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 199, "fields": { "dns.qry.name": "zuczbdyvfzio", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7c78e0d5a8d1739fc844746c", "kind": "identity", "frame_number": 6494, "timestamp_epoch": "1634913352.675041000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f87da1f0ccb0d3b2397d1899", "kind": "identity", "frame_number": 6496, "timestamp_epoch": "1634913352.809593000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 199, "fields": { "dns.qry.name": "zuczbdyvfzio", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cda1ca42a470f9cb98ac6701", "kind": "identity", "frame_number": 6499, "timestamp_epoch": "1634913353.388481000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "zuczbdyvfzio.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b22dae1f195c590c00cbca36", "kind": "identity", "frame_number": 6504, "timestamp_epoch": "1634913353.888610000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-6453470fc73b9a87449f721b", "kind": "identity", "frame_number": 6505, "timestamp_epoch": "1634913354.190265000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1284bc9fdafbd499bbc0d296", "kind": "identity", "frame_number": 6514, "timestamp_epoch": "1634913355.403744000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-075590649b390f339d1cbdf4", "kind": "identity", "frame_number": 6517, "timestamp_epoch": "1634913355.706542000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d283f5ebfb56d88b12ee7b8e", "kind": "identity", "frame_number": 6523, "timestamp_epoch": "1634913356.502578000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-982b817eda36d4bfac5aa440", "kind": "identity", "frame_number": 6524, "timestamp_epoch": "1634913356.503152000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "grtovxn.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-04e2f83843cc0305526a4444", "kind": "identity", "frame_number": 6525, "timestamp_epoch": "1634913356.503893000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 202, "fields": { "dns.qry.name": "grtovxn", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a9688046b062848700b81957", "kind": "identity", "frame_number": 6527, "timestamp_epoch": "1634913356.514767000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-b4c05fa5a1ed719e849f692e", "kind": "identity", "frame_number": 6528, "timestamp_epoch": "1634913356.515207000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "znkbmknmqyvbxi.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-bcf2154d61164fee2b484b62", "kind": "identity", "frame_number": 6529, "timestamp_epoch": "1634913356.515879000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 203, "fields": { "dns.qry.name": "znkbmknmqyvbxi", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7657588af6067dc743ced7bb", "kind": "identity", "frame_number": 6530, "timestamp_epoch": "1634913356.920664000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 202, "fields": { "dns.qry.name": "grtovxn", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0bda8c1486cd7db9958f42b6", "kind": "identity", "frame_number": 6531, "timestamp_epoch": "1634913356.936116000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 203, "fields": { "dns.qry.name": "znkbmknmqyvbxi", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-56828f68863063d417206746", "kind": "identity", "frame_number": 6532, "timestamp_epoch": "1634913356.951215000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-df728641dbc610ccdf7430b7", "kind": "identity", "frame_number": 6533, "timestamp_epoch": "1634913357.529462000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "znkbmknmqyvbxi.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9d0e41cf6f489524b5f94bc3", "kind": "identity", "frame_number": 6534, "timestamp_epoch": "1634913357.718173000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-040aaeaf46548b48855f8263", "kind": "identity", "frame_number": 6535, "timestamp_epoch": "1634913358.076608000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-a148cbbcd46fd87111b5afb1", "kind": "identity", "frame_number": 6536, "timestamp_epoch": "1634913358.076873000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-edc3b393e3ac70b812ba3307", "kind": "identity", "frame_number": 6547, "timestamp_epoch": "1634913358.297985000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-544b8144026832665246163a", "kind": "identity", "frame_number": 6548, "timestamp_epoch": "1634913358.298115000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-e5f9cd86994b9d1713f2117a", "kind": "identity", "frame_number": 6549, "timestamp_epoch": "1634913358.298473000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "zuczbdyvfzio.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-50ddf4419f48c8de13c82f71", "kind": "identity", "frame_number": 6552, "timestamp_epoch": "1634913358.298973000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "znkbmknmqyvbxi.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-518d0a58f83379dfc0ed70bc", "kind": "identity", "frame_number": 6553, "timestamp_epoch": "1634913358.299234000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 210, "fields": { "dns.qry.name": "zuczbdyvfzio", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f46b2f38bd6fcd2b5315c63c", "kind": "identity", "frame_number": 6554, "timestamp_epoch": "1634913358.299478000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 211, "fields": { "dns.qry.name": "znkbmknmqyvbxi", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b0d21bfdd01cf24cb2afe5c1", "kind": "identity", "frame_number": 6555, "timestamp_epoch": "1634913358.299763000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-c4c6bd5eafe4e3afd3b8b437", "kind": "identity", "frame_number": 6556, "timestamp_epoch": "1634913358.300079000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "grtovxn.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d427aed35621abb2a310afb9", "kind": "identity", "frame_number": 6557, "timestamp_epoch": "1634913358.300518000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 212, "fields": { "dns.qry.name": "grtovxn", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5aa74fc9f1cfb4569af57afe", "kind": "identity", "frame_number": 6558, "timestamp_epoch": "1634913358.498258000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-41d10e9cd5dac315dabc4e76", "kind": "identity", "frame_number": 6559, "timestamp_epoch": "1634913358.718327000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 212, "fields": { "dns.qry.name": "grtovxn", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b122dfde200fdc7352649054", "kind": "identity", "frame_number": 6560, "timestamp_epoch": "1634913358.718694000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 211, "fields": { "dns.qry.name": "znkbmknmqyvbxi", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e549f21cfcef955f2897d6e7", "kind": "identity", "frame_number": 6561, "timestamp_epoch": "1634913358.718894000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 210, "fields": { "dns.qry.name": "zuczbdyvfzio", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-40888dbf23065c0121973aa1", "kind": "identity", "frame_number": 6562, "timestamp_epoch": "1634913359.060509000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-21bf65148d4806936598895e", "kind": "identity", "frame_number": 6563, "timestamp_epoch": "1634913359.061036000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-086e502d4f91e48356893186", "kind": "identity", "frame_number": 6564, "timestamp_epoch": "1634913359.061265000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-a4beec809669c60cd6e68ca6", "kind": "identity", "frame_number": 6565, "timestamp_epoch": "1634913359.295944000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "grtovxn.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-329326dd945693eb32343880", "kind": "identity", "frame_number": 6579, "timestamp_epoch": "1634913359.590890000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-1bd8b9f1aba8054d876a46c0", "kind": "identity", "frame_number": 6580, "timestamp_epoch": "1634913359.590997000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-ca450ab631e6f32dabe55623", "kind": "identity", "frame_number": 6598, "timestamp_epoch": "1634913359.825796000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZUCZBDYVFZIO<00>" } }, { "event_id": "evt-6ec0b0ece7276a17c11bd394", "kind": "identity", "frame_number": 6599, "timestamp_epoch": "1634913359.826264000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-7d27a42c9d57696e41bfcd70", "kind": "identity", "frame_number": 6600, "timestamp_epoch": "1634913359.826661000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-244c6b0e69e804fb554b979f", "kind": "identity", "frame_number": 6605, "timestamp_epoch": "1634913361.217037000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-7b850d163d6c2a1e1337ee0a", "kind": "identity", "frame_number": 6606, "timestamp_epoch": "1634913361.217207000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-92966b037668abdedc213cad", "kind": "identity", "frame_number": 6607, "timestamp_epoch": "1634913361.217367000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a91edd01fdaf86501862f628", "kind": "identity", "frame_number": 6610, "timestamp_epoch": "1634913361.981685000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-05b51c8e4608dd025bd5a31a", "kind": "identity", "frame_number": 6611, "timestamp_epoch": "1634913361.981849000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-19359eccc3ea32cd6dd22e31", "kind": "identity", "frame_number": 6612, "timestamp_epoch": "1634913362.742841000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "GRTOVXN<00>" } }, { "event_id": "evt-aaf5f42c2748988491b92b7c", "kind": "identity", "frame_number": 6613, "timestamp_epoch": "1634913362.743051000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ZNKBMKNMQYVBXI<00>" } }, { "event_id": "evt-c6dc5973aedb73bfad1886ae", "kind": "identity", "frame_number": 6674, "timestamp_epoch": "1634913382.865352000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-410fd750ddec1be0a112bccf", "kind": "identity", "frame_number": 6675, "timestamp_epoch": "1634913382.865693000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e463a28ab6f747ec6c1cba52", "kind": "identity", "frame_number": 6695, "timestamp_epoch": "1634913383.465767000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9d2fb9492efdd2e89bf9bad4", "kind": "identity", "frame_number": 6706, "timestamp_epoch": "1634913384.981339000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1c789a7806ba9846e252818e", "kind": "identity", "frame_number": 6740, "timestamp_epoch": "1634913386.497108000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-df1138034a08f9e8eca8dabc", "kind": "identity", "frame_number": 6745, "timestamp_epoch": "1634913391.991249000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5afd09c2469a5ea39bd51679", "kind": "identity", "frame_number": 7126, "timestamp_epoch": "1634913406.737103000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-49b8c7823918940db3b0dcc8", "kind": "identity", "frame_number": 7127, "timestamp_epoch": "1634913406.737536000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a78bdceb269dd72bf8edff48", "kind": "identity", "frame_number": 7128, "timestamp_epoch": "1634913406.745551000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-afa95eca712b3442e205cc29", "kind": "identity", "frame_number": 7129, "timestamp_epoch": "1634913406.745949000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fd908d4600afb16822c37d99", "kind": "identity", "frame_number": 7131, "timestamp_epoch": "1634913407.239368000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9a37f4c434b1018c63198727", "kind": "identity", "frame_number": 7132, "timestamp_epoch": "1634913407.239772000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d0530531fd826c721438127f", "kind": "identity", "frame_number": 7133, "timestamp_epoch": "1634913407.240201000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4b9c09b521baf3e01b470cb6", "kind": "identity", "frame_number": 7134, "timestamp_epoch": "1634913407.240382000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5c1bd14d52a880337a24eb1f", "kind": "identity", "frame_number": 7140, "timestamp_epoch": "1634913412.052010000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-420df54f7e0eaacafb643189", "kind": "identity", "frame_number": 7152, "timestamp_epoch": "1634913412.849152000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-d28f900a4e82384d9552e903", "kind": "identity", "frame_number": 7154, "timestamp_epoch": "1634913412.849894000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-32dd9b25e2336729b3d94663", "kind": "identity", "frame_number": 7155, "timestamp_epoch": "1634913412.850285000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-5f647ae0489dcbb45b0bb0bf", "kind": "identity", "frame_number": 7179, "timestamp_epoch": "1634913412.869539000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-5422e9ab25c735b62b5f221f", "kind": "identity", "frame_number": 7181, "timestamp_epoch": "1634913412.870438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-19716e05125ca7b42bb194c1", "kind": "identity", "frame_number": 7192, "timestamp_epoch": "1634913412.878781000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-1aa0dc68c91cf420da64bb24", "kind": "identity", "frame_number": 7196, "timestamp_epoch": "1634913412.879738000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f9b8d59b992bf87dcb7c56d8", "kind": "identity", "frame_number": 7241, "timestamp_epoch": "1634913413.567418000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7c5acf7f8631cb1b72888b00", "kind": "identity", "frame_number": 7242, "timestamp_epoch": "1634913415.067535000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8332ea7ad4f4b517ce7fef68", "kind": "identity", "frame_number": 10779, "timestamp_epoch": "1634913472.692719000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-771475499a038563f7ad0e71", "kind": "identity", "frame_number": 10780, "timestamp_epoch": "1634913474.193767000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f9ee0795c3493072d52a9fb1", "kind": "identity", "frame_number": 10781, "timestamp_epoch": "1634913475.694057000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-391062bf0d356d40ff10a0a3", "kind": "identity", "frame_number": 10873, "timestamp_epoch": "1634913503.485000000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f1f5e2f91608f7d39ae98010", "kind": "identity", "frame_number": 10874, "timestamp_epoch": "1634913505.047262000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-314111b77eb767520b4331ec", "kind": "identity", "frame_number": 10875, "timestamp_epoch": "1634913506.673585000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7f434b08e1aa530df71f6246", "kind": "identity", "frame_number": 10902, "timestamp_epoch": "1634913532.070975000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-33433e8657b43e82e0145033", "kind": "identity", "frame_number": 10907, "timestamp_epoch": "1634913533.602775000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-123bf821def15edf6a3ada8a", "kind": "identity", "frame_number": 10908, "timestamp_epoch": "1634913535.164880000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b1b4b8eff4f635e60d4348bc", "kind": "identity", "frame_number": 11024, "timestamp_epoch": "1634913592.712444000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-11c63f0d82ace0b63ac989a4", "kind": "identity", "frame_number": 11025, "timestamp_epoch": "1634913594.212740000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9f8b9819b2a21a1d1b10b5b7", "kind": "identity", "frame_number": 11026, "timestamp_epoch": "1634913595.727804000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7aa9e1f2ce2fda5b5232103e", "kind": "identity", "frame_number": 11074, "timestamp_epoch": "1634913623.488868000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-da622961925563f409edb96e", "kind": "identity", "frame_number": 11075, "timestamp_epoch": "1634913625.005108000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5192581fc816fba3971995d3", "kind": "identity", "frame_number": 11076, "timestamp_epoch": "1634913626.535457000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d0548a09e58cec5fbc10129c", "kind": "identity", "frame_number": 11138, "timestamp_epoch": "1634913652.074415000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1ec29df8de4cd4864ec3cf1b", "kind": "identity", "frame_number": 11141, "timestamp_epoch": "1634913653.606121000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-81b0a380fb588f03d3a661f6", "kind": "identity", "frame_number": 11142, "timestamp_epoch": "1634913654.027505000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b3bfca8108d16bea7e4fb4e7", "kind": "identity", "frame_number": 11143, "timestamp_epoch": "1634913654.028188000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aaf8f06a3d3f1c9712ffa99c", "kind": "identity", "frame_number": 11153, "timestamp_epoch": "1634913655.106199000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7c2ef33b2019c498db6c1704", "kind": "identity", "frame_number": 11593, "timestamp_epoch": "1634913712.731489000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9f7eea5d373b7d9c79940ccc", "kind": "identity", "frame_number": 11594, "timestamp_epoch": "1634913713.700509000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-c13b9886ed90bbedfaf24c99", "kind": "identity", "frame_number": 11595, "timestamp_epoch": "1634913713.700989000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c99bcbb0400f7f1076e3ea84", "kind": "identity", "frame_number": 11599, "timestamp_epoch": "1634913714.231371000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4d6dd27aceb013d7122bcb76", "kind": "identity", "frame_number": 11608, "timestamp_epoch": "1634913715.731430000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-38bd9d52c423ba11b2033cf5", "kind": "identity", "frame_number": 12519, "timestamp_epoch": "1634913743.508015000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-eecab48467b56d5becfeade8", "kind": "identity", "frame_number": 12567, "timestamp_epoch": "1634913744.132517000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5c0b1074a5d0b5763873b46f", "kind": "identity", "frame_number": 12568, "timestamp_epoch": "1634913744.133055000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0bb47070c3f7c7d6200fe555", "kind": "identity", "frame_number": 12635, "timestamp_epoch": "1634913745.023494000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1d2a9c39e366fae11be9d169", "kind": "identity", "frame_number": 12782, "timestamp_epoch": "1634913746.539348000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3cffefa81987c16ca5832488", "kind": "identity", "frame_number": 14262, "timestamp_epoch": "1634913772.092268000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-21d4b451d24980245c09b008", "kind": "identity", "frame_number": 14366, "timestamp_epoch": "1634913773.592610000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-598b68406d33a1cf38fbd315", "kind": "identity", "frame_number": 14403, "timestamp_epoch": "1634913775.109332000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-32afd8d7763e30f52ce580de", "kind": "identity", "frame_number": 14544, "timestamp_epoch": "1634913778.963684000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-1d74c14679ddf1aee5f3f638", "kind": "identity", "frame_number": 16187, "timestamp_epoch": "1634913832.751352000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3461a37aa681589939253c2e", "kind": "identity", "frame_number": 16198, "timestamp_epoch": "1634913834.251320000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f87c5b5839b26710e7b6a828", "kind": "identity", "frame_number": 16199, "timestamp_epoch": "1634913835.782309000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8865b31abea73cfc9cd19b24", "kind": "identity", "frame_number": 16214, "timestamp_epoch": "1634913841.007291000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-327d72b02f9cf2e0377dfdd8", "kind": "identity", "frame_number": 16262, "timestamp_epoch": "1634913863.525582000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d2bcef344a768f9f36df9f4d", "kind": "identity", "frame_number": 16274, "timestamp_epoch": "1634913865.135172000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3c69462598f18b7910f56af6", "kind": "identity", "frame_number": 16275, "timestamp_epoch": "1634913866.666202000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c0eb95e82e4d7c98a414c64a", "kind": "identity", "frame_number": 16289, "timestamp_epoch": "1634913871.528482000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cb921e5a04419b7ab9b083cd", "kind": "identity", "frame_number": 17338, "timestamp_epoch": "1634913892.095739000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-635f93796b0e5a1845879874", "kind": "identity", "frame_number": 17339, "timestamp_epoch": "1634913893.612383000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-666968d3938a1ca1de597d35", "kind": "identity", "frame_number": 17348, "timestamp_epoch": "1634913895.112623000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d7b15ab8cf7ba602cec2874c", "kind": "identity", "frame_number": 17529, "timestamp_epoch": "1634913951.135250000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-74b39f6db1a3348b4350cbe1", "kind": "identity", "frame_number": 17534, "timestamp_epoch": "1634913951.146903000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9920feba1e3dbea198adfed3", "kind": "identity", "frame_number": 17535, "timestamp_epoch": "1634913951.147120000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-8603ff36312e16d6956fbe91", "kind": "identity", "frame_number": 17536, "timestamp_epoch": "1634913951.147301000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 310, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c051a0ff0f92acf7a971c82d", "kind": "identity", "frame_number": 17546, "timestamp_epoch": "1634913952.645877000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-616485e586f754d93403c62b", "kind": "identity", "frame_number": 17547, "timestamp_epoch": "1634913952.769507000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9bb6b8c95f3ade26239128dd", "kind": "identity", "frame_number": 17552, "timestamp_epoch": "1634913954.160335000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4e2a822756bbdff92acd6b9f", "kind": "identity", "frame_number": 17554, "timestamp_epoch": "1634913954.269332000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cf28dd8a3e2b2488ecde9441", "kind": "identity", "frame_number": 17559, "timestamp_epoch": "1634913954.995225000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-04cdf70fb73a8e46cb9eeba9", "kind": "identity", "frame_number": 17560, "timestamp_epoch": "1634913954.995504000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b28e4f0f52fae1f8d275fc3e", "kind": "identity", "frame_number": 17561, "timestamp_epoch": "1634913954.995887000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7baa61ea58bf23f9e13bb2f3", "kind": "identity", "frame_number": 17564, "timestamp_epoch": "1634913954.997205000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-d334cd3beda485d31f956bc2", "kind": "identity", "frame_number": 17566, "timestamp_epoch": "1634913954.998217000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-76a5f3f3aa1ae1c397bb376a", "kind": "identity", "frame_number": 17567, "timestamp_epoch": "1634913954.998767000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5fd7ee8e9c60ae3e26d1fd0a", "kind": "identity", "frame_number": 17568, "timestamp_epoch": "1634913954.998991000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4a3058778381043bb7621b42", "kind": "identity", "frame_number": 17569, "timestamp_epoch": "1634913954.999292000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-bd5a8617d669c526062c183d", "kind": "identity", "frame_number": 17570, "timestamp_epoch": "1634913954.999491000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-f38319b184d648aa48b28dde", "kind": "identity", "frame_number": 17571, "timestamp_epoch": "1634913954.999500000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4645bdd97f23b5de94cabffb", "kind": "identity", "frame_number": 17572, "timestamp_epoch": "1634913954.999767000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3acd9389d93e7d1bca1ec622", "kind": "identity", "frame_number": 17578, "timestamp_epoch": "1634913955.863839000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-12ab689c6d1537d44bbfdcb8", "kind": "identity", "frame_number": 17636, "timestamp_epoch": "1634913965.738238000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-993f531400b6fbcea5dc27eb", "kind": "identity", "frame_number": 17637, "timestamp_epoch": "1634913965.738681000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6efa74dcf3db2960f1e27f6c", "kind": "identity", "frame_number": 17638, "timestamp_epoch": "1634913965.739052000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ad45a753ab173eb016e5fdf6", "kind": "identity", "frame_number": 17639, "timestamp_epoch": "1634913965.739428000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 373, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2e4ed5fd434c7b0ccac409c2", "kind": "identity", "frame_number": 17696, "timestamp_epoch": "1634913983.530183000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3b540007730f14432a04caef", "kind": "identity", "frame_number": 17699, "timestamp_epoch": "1634913985.155738000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-21e9bcc587ca021bfa6d0d96", "kind": "identity", "frame_number": 17708, "timestamp_epoch": "1634913986.686971000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4b587711c160b003a620eab3", "kind": "identity", "frame_number": 17804, "timestamp_epoch": "1634914011.808255000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d5023b536169d758b23707cb", "kind": "identity", "frame_number": 17809, "timestamp_epoch": "1634914011.819239000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ef94785e61b1be80aa6f41e2", "kind": "identity", "frame_number": 17810, "timestamp_epoch": "1634914011.819410000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5d4e89bc7ddc1dddafddc369", "kind": "identity", "frame_number": 17811, "timestamp_epoch": "1634914011.819741000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 323, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4c6c9e00a825ff1ed9847790", "kind": "identity", "frame_number": 17816, "timestamp_epoch": "1634914013.380595000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-baa95eefc4fd90915678f561", "kind": "identity", "frame_number": 17820, "timestamp_epoch": "1634914014.958635000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-922358a252a2a533dc8477ba", "kind": "identity", "frame_number": 17827, "timestamp_epoch": "1634914015.075989000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6b25018ab4eb7ebab6edd9e9", "kind": "identity", "frame_number": 17828, "timestamp_epoch": "1634914015.076339000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-3ba4ab041623effd4c45d3ab", "kind": "identity", "frame_number": 17829, "timestamp_epoch": "1634914015.076731000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-73245814532872dbaf465cf9", "kind": "identity", "frame_number": 17832, "timestamp_epoch": "1634914015.078329000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-21023d5adc6731764be3b085", "kind": "identity", "frame_number": 17834, "timestamp_epoch": "1634914015.079293000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-cdcbeb28c003dde5cbbb1a4e", "kind": "identity", "frame_number": 17835, "timestamp_epoch": "1634914015.079915000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-77988d0855e1482116bd9290", "kind": "identity", "frame_number": 17836, "timestamp_epoch": "1634914015.080141000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-467af4643e4c60fad0b67aab", "kind": "identity", "frame_number": 17837, "timestamp_epoch": "1634914015.080448000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a85f429caaa3cb9ebf562f39", "kind": "identity", "frame_number": 17838, "timestamp_epoch": "1634914015.080642000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1aefe74f415ad1a3ee2445f5", "kind": "identity", "frame_number": 17839, "timestamp_epoch": "1634914015.080658000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-86586aaa3f6ae6ce9d4dfc19", "kind": "identity", "frame_number": 17840, "timestamp_epoch": "1634914015.080986000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-63be10252a64159cc1276bc9", "kind": "identity", "frame_number": 17881, "timestamp_epoch": "1634914025.959241000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-740faf78c38003a5bf3178c7", "kind": "identity", "frame_number": 17882, "timestamp_epoch": "1634914025.959844000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f50a8ea1afa5b9cec1801d5a", "kind": "identity", "frame_number": 17883, "timestamp_epoch": "1634914025.960457000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-c11137fddc0c987c802da544", "kind": "identity", "frame_number": 17884, "timestamp_epoch": "1634914025.960903000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 393, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d8866ababd767506097c9412", "kind": "identity", "frame_number": 17935, "timestamp_epoch": "1634914043.521735000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6e2756cd346ba069345782d7", "kind": "identity", "frame_number": 17941, "timestamp_epoch": "1634914043.530590000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8b7b9cdef1e72d13b12c5881", "kind": "identity", "frame_number": 17942, "timestamp_epoch": "1634914043.530762000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-45df989bf58f15ffb4cdf2c5", "kind": "identity", "frame_number": 17943, "timestamp_epoch": "1634914043.530947000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 330, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8b6b5a6ab0f8779ec9470d21", "kind": "identity", "frame_number": 17949, "timestamp_epoch": "1634914045.047934000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e428e4f512b17446e854b565", "kind": "identity", "frame_number": 17954, "timestamp_epoch": "1634914045.977438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6bac1e75f0db891fd3d1d82c", "kind": "identity", "frame_number": 17955, "timestamp_epoch": "1634914045.977745000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-37bed65651db2230c83639d0", "kind": "identity", "frame_number": 17956, "timestamp_epoch": "1634914045.978232000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d1ec60358969d2821edb4bca", "kind": "identity", "frame_number": 17959, "timestamp_epoch": "1634914045.979485000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-bab85f16c4374536ea84078c", "kind": "identity", "frame_number": 17961, "timestamp_epoch": "1634914045.980364000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-aae07292802e7a996dbd3898", "kind": "identity", "frame_number": 17962, "timestamp_epoch": "1634914045.980887000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2d85fc1e8740b0272f9c9b28", "kind": "identity", "frame_number": 17963, "timestamp_epoch": "1634914045.981105000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-61cb093b9a7328471954b41b", "kind": "identity", "frame_number": 17964, "timestamp_epoch": "1634914045.981394000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-94dced7b2a821aa1a626bf9c", "kind": "identity", "frame_number": 17965, "timestamp_epoch": "1634914045.981571000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5f1bd59e7ded80bef2c552de", "kind": "identity", "frame_number": 17966, "timestamp_epoch": "1634914045.981625000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-755fee93db3ede2925483b55", "kind": "identity", "frame_number": 17967, "timestamp_epoch": "1634914045.981791000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0cfdf3ca1396b3fb29ca7513", "kind": "identity", "frame_number": 17975, "timestamp_epoch": "1634914046.609986000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6a04bf2352ae51730d3acac0", "kind": "identity", "frame_number": 19053, "timestamp_epoch": "1634914056.749546000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d5aa1ccd84f56e93c1da037f", "kind": "identity", "frame_number": 19054, "timestamp_epoch": "1634914056.749727000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3bfc8a4f7fe004321cf543e5", "kind": "identity", "frame_number": 19055, "timestamp_epoch": "1634914056.753986000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3b12a23aed1b9142286779bf", "kind": "identity", "frame_number": 19056, "timestamp_epoch": "1634914056.754139000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 397, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3f25f39a2c64824873bcfbc1", "kind": "identity", "frame_number": 19702, "timestamp_epoch": "1634914071.148199000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e265ea959172aa70e5dfdcb0", "kind": "identity", "frame_number": 19709, "timestamp_epoch": "1634914072.649124000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6f1b3b88aaad1684b9d77b01", "kind": "identity", "frame_number": 19714, "timestamp_epoch": "1634914074.195958000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b1ba5020dab9e7120652097d", "kind": "identity", "frame_number": 20674, "timestamp_epoch": "1634914131.821768000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-770e3fe74c68a711115f06f9", "kind": "identity", "frame_number": 20678, "timestamp_epoch": "1634914133.446052000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-77080e93bee96a8ebdfaf35b", "kind": "identity", "frame_number": 20684, "timestamp_epoch": "1634914134.961913000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6e14f97c060c4ce098e4cd9b", "kind": "identity", "frame_number": 20771, "timestamp_epoch": "1634914163.521180000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d2594939bad3024e6c122ac6", "kind": "identity", "frame_number": 20773, "timestamp_epoch": "1634914165.035709000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b988ebef72814472502c2f56", "kind": "identity", "frame_number": 20775, "timestamp_epoch": "1634914166.660113000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-07037808a875dcc9856e721e", "kind": "identity", "frame_number": 22305, "timestamp_epoch": "1634914191.167056000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e2d8dd8103d95a53bb6c9444", "kind": "identity", "frame_number": 22311, "timestamp_epoch": "1634914192.683473000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4d97202e384b56b24ce4439d", "kind": "identity", "frame_number": 22332, "timestamp_epoch": "1634914194.245196000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fe742abf1132e514677b5c5d", "kind": "identity", "frame_number": 22539, "timestamp_epoch": "1634914251.841163000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c8a4ba3784fa76067d487850", "kind": "identity", "frame_number": 22564, "timestamp_epoch": "1634914253.355950000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-91f9b82f164a543698dc7d70", "kind": "identity", "frame_number": 22567, "timestamp_epoch": "1634914254.419446000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9b180b1c32deb7c256c7a64a", "kind": "identity", "frame_number": 22568, "timestamp_epoch": "1634914254.419852000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-88ed67eae7bc65f62daeceba", "kind": "identity", "frame_number": 22571, "timestamp_epoch": "1634914254.887309000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cafe08b6690676e2e9f6171a", "kind": "identity", "frame_number": 22663, "timestamp_epoch": "1634914283.524651000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-885f5126445c097c619e6294", "kind": "identity", "frame_number": 22668, "timestamp_epoch": "1634914285.070472000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ff0f66170ab1bcc1c987c28d", "kind": "identity", "frame_number": 22677, "timestamp_epoch": "1634914286.664639000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b89ba95a3af1d6402940760d", "kind": "identity", "frame_number": 22749, "timestamp_epoch": "1634914311.187667000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-380c9a8b321cb2c887a7031d", "kind": "identity", "frame_number": 22753, "timestamp_epoch": "1634914312.701800000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ae28a20727fadbeb69ec9193", "kind": "identity", "frame_number": 22761, "timestamp_epoch": "1634914314.092683000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6613ef2e3e99be3475ea6de2", "kind": "identity", "frame_number": 22762, "timestamp_epoch": "1634914314.093355000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-142af3348debe33f65bb8df9", "kind": "identity", "frame_number": 22764, "timestamp_epoch": "1634914314.265245000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ec71f0cc614df83026c95631", "kind": "identity", "frame_number": 22897, "timestamp_epoch": "1634914344.508941000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c0f421a5ce79be27fb019047", "kind": "identity", "frame_number": 22898, "timestamp_epoch": "1634914344.509306000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-32a41ac5bdb69c91efee4740", "kind": "identity", "frame_number": 22970, "timestamp_epoch": "1634914371.858834000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fc4617763780a4cf647a33c9", "kind": "identity", "frame_number": 22977, "timestamp_epoch": "1634914373.452725000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3bf34d2c8e9402aeeea6d674", "kind": "identity", "frame_number": 22985, "timestamp_epoch": "1634914374.967959000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e0de7ec8127304e8fb5c9a73", "kind": "identity", "frame_number": 23063, "timestamp_epoch": "1634914403.557204000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c71fd66329f2795aa0a0c625", "kind": "identity", "frame_number": 23077, "timestamp_epoch": "1634914405.119076000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5fd3fbe6839c386af4a9ec44", "kind": "identity", "frame_number": 23078, "timestamp_epoch": "1634914406.635358000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-93cd74018554adb262f5163b", "kind": "identity", "frame_number": 23138, "timestamp_epoch": "1634914431.219352000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-df99faffeaafafb5ccfaaba0", "kind": "identity", "frame_number": 23139, "timestamp_epoch": "1634914432.719752000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2a41267fdc5c52b559d86a69", "kind": "identity", "frame_number": 23151, "timestamp_epoch": "1634914434.220345000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-db147c74d6bd5d1410407cf5", "kind": "identity", "frame_number": 23355, "timestamp_epoch": "1634914491.878752000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3c3b18ab4334a96febb08f45", "kind": "identity", "frame_number": 23356, "timestamp_epoch": "1634914493.393293000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-23c5a2b8ec6d639740033f92", "kind": "identity", "frame_number": 23368, "timestamp_epoch": "1634914494.971972000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b46589f00ad7613a7be68c23", "kind": "identity", "frame_number": 23372, "timestamp_epoch": "1634914496.868629000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b520950edd7d7ea65537e976", "kind": "identity", "frame_number": 23373, "timestamp_epoch": "1634914497.000915000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-408430543f21ef4e8092a2e4", "kind": "identity", "frame_number": 23374, "timestamp_epoch": "1634914497.001051000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-c7acff813400440f0163503c", "kind": "identity", "frame_number": 23384, "timestamp_epoch": "1634914498.621743000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-24f0d45e61aadaf4482d26a6", "kind": "identity", "frame_number": 23388, "timestamp_epoch": "1634914500.246683000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-614678aca22be3b5e082c37c", "kind": "identity", "frame_number": 23390, "timestamp_epoch": "1634914501.809904000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-742227d477cd0f9cb24c4a7b", "kind": "identity", "frame_number": 23391, "timestamp_epoch": "1634914501.810481000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 413, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "nbns.flags.opcode": "0", "nbns.flags.response": "True", "nbns.name": "ENEMYWATCH<1b> (Domain Master Browser)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fe022899d432c78423827969", "kind": "identity", "frame_number": 23392, "timestamp_epoch": "1634914501.810834000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 414, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a6c64424da14c285612a77dd", "kind": "identity", "frame_number": 23400, "timestamp_epoch": "1634914502.825600000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-09dd12fefdc2a5efb96f59e1", "kind": "identity", "frame_number": 23401, "timestamp_epoch": "1634914502.825968000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 414, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1b55a32092e46aab4e66accf", "kind": "identity", "frame_number": 23402, "timestamp_epoch": "1634914503.825627000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-57763617da7f9938567adc05", "kind": "identity", "frame_number": 23403, "timestamp_epoch": "1634914503.825995000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 414, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f4aa4998139a90a59e4b3eb8", "kind": "identity", "frame_number": 23405, "timestamp_epoch": "1634914504.841547000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-246c679d52d81311c7abb583", "kind": "identity", "frame_number": 23406, "timestamp_epoch": "1634914505.591625000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-bdff889224b0dbcb0e649fd9", "kind": "identity", "frame_number": 23409, "timestamp_epoch": "1634914506.387933000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 102, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-5b2e53ee4ae3187aecdc0820", "kind": "identity", "frame_number": 23424, "timestamp_epoch": "1634914507.239560000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-83bae02aaa6fccabc89126d1", "kind": "identity", "frame_number": 23425, "timestamp_epoch": "1634914507.239820000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0cf963afcc93c5a31d50e7fb", "kind": "identity", "frame_number": 23426, "timestamp_epoch": "1634914507.240148000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5f7807ec143c64cff685c239", "kind": "identity", "frame_number": 23431, "timestamp_epoch": "1634914507.241996000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 551, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "12,14" } }, { "event_id": "evt-41a136f2a527d4ed843c8af8", "kind": "identity", "frame_number": 23434, "timestamp_epoch": "1634914507.243041000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 551, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.CNameString": "kevin.henderson", "kerberos.msg_type": "13" } }, { "event_id": "evt-783224bd60cc6272f2bb147b", "kind": "identity", "frame_number": 23441, "timestamp_epoch": "1634914507.243600000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-8f197a356c207838c54e060c", "kind": "identity", "frame_number": 23443, "timestamp_epoch": "1634914507.244416000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-a1b8ffde3573a45af175dca2", "kind": "identity", "frame_number": 23444, "timestamp_epoch": "1634914507.244950000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3b68745660e52b909e5b352c", "kind": "identity", "frame_number": 23445, "timestamp_epoch": "1634914507.245200000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a9e68eae71829c2737cdeed0", "kind": "identity", "frame_number": 23446, "timestamp_epoch": "1634914507.245489000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1a7a5f7c45e0d9d3b4d9d3fe", "kind": "identity", "frame_number": 23447, "timestamp_epoch": "1634914507.245665000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5d336aa18a4b66fb68f193ac", "kind": "identity", "frame_number": 23448, "timestamp_epoch": "1634914507.245686000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b9e6a927a4ac5328073ec72c", "kind": "identity", "frame_number": 23449, "timestamp_epoch": "1634914507.245937000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3aac303f215fb48581cdd4c1", "kind": "identity", "frame_number": 23451, "timestamp_epoch": "1634914507.246235000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-acf67f32dd6c16d10749e372", "kind": "identity", "frame_number": 23452, "timestamp_epoch": "1634914507.246379000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-928bed44ab32b49604b50ba2", "kind": "identity", "frame_number": 23453, "timestamp_epoch": "1634914507.246655000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3feb2aaedbec5824398e74ed", "kind": "identity", "frame_number": 23454, "timestamp_epoch": "1634914507.246872000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5b02e448f576dbf634775f4d", "kind": "identity", "frame_number": 23455, "timestamp_epoch": "1634914507.247224000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7646365fa37362d88603ade0", "kind": "identity", "frame_number": 23456, "timestamp_epoch": "1634914507.247426000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-af20ff8c143915b85d7735e1", "kind": "identity", "frame_number": 23457, "timestamp_epoch": "1634914507.247789000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-aa49d25c42e9173cfb463cdc", "kind": "identity", "frame_number": 23458, "timestamp_epoch": "1634914507.248180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-23dee789beb0dce17bbfe296", "kind": "identity", "frame_number": 23459, "timestamp_epoch": "1634914507.248606000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-dcbd51de2166c9cc624d24a7", "kind": "identity", "frame_number": 23460, "timestamp_epoch": "1634914507.248927000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7a349e66617d2c17e98ccac6", "kind": "identity", "frame_number": 23461, "timestamp_epoch": "1634914507.249274000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cae181f4e2dc28d9fdd1afbd", "kind": "identity", "frame_number": 23462, "timestamp_epoch": "1634914507.249569000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cb7c1fc1828d85af7092db26", "kind": "identity", "frame_number": 23463, "timestamp_epoch": "1634914507.249859000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-77d9a9a9c05a06b850e9b1cd", "kind": "identity", "frame_number": 23464, "timestamp_epoch": "1634914507.250289000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6a1607c79c628b1a54f62078", "kind": "identity", "frame_number": 23465, "timestamp_epoch": "1634914507.250590000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-481aa9299492e68ba814e802", "kind": "identity", "frame_number": 23466, "timestamp_epoch": "1634914507.250966000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3ccbe5b4c90f93b24cece7e2", "kind": "identity", "frame_number": 23467, "timestamp_epoch": "1634914507.252283000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4bc5642977c6eaeefe4a6135", "kind": "identity", "frame_number": 23468, "timestamp_epoch": "1634914507.252690000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-acb640a4a9e7a998fcf73e35", "kind": "identity", "frame_number": 23469, "timestamp_epoch": "1634914507.253047000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5fcdc6f2db26218158404099", "kind": "identity", "frame_number": 23470, "timestamp_epoch": "1634914507.254035000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-236a537c26fd70f64466a358", "kind": "identity", "frame_number": 23471, "timestamp_epoch": "1634914507.254456000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-836615e51afa3b661d016e9a", "kind": "identity", "frame_number": 23472, "timestamp_epoch": "1634914507.254744000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ee60bd9ecf3f561338cb3b92", "kind": "identity", "frame_number": 23473, "timestamp_epoch": "1634914507.254999000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f756e8392126a4d093dd2ce1", "kind": "identity", "frame_number": 23474, "timestamp_epoch": "1634914507.255232000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-615547edded9c9816ec47340", "kind": "identity", "frame_number": 23475, "timestamp_epoch": "1634914507.255512000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-15d389b15ebcfd15efc48f75", "kind": "identity", "frame_number": 23476, "timestamp_epoch": "1634914507.255737000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-439ca406968b951434060789", "kind": "identity", "frame_number": 23477, "timestamp_epoch": "1634914507.255992000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6784df75e89b77c64b2f3d97", "kind": "identity", "frame_number": 23478, "timestamp_epoch": "1634914507.256151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b41f703b206f237523d2c85f", "kind": "identity", "frame_number": 23479, "timestamp_epoch": "1634914507.257382000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ba36823c6eb9c836e897546a", "kind": "identity", "frame_number": 23480, "timestamp_epoch": "1634914507.257590000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-592f7f8a977a89f95e4bef2c", "kind": "identity", "frame_number": 23481, "timestamp_epoch": "1634914507.259754000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a43ba640b87140283dda2c9d", "kind": "identity", "frame_number": 23482, "timestamp_epoch": "1634914507.259868000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4bc1200b4dfe98797c5361e5", "kind": "identity", "frame_number": 23483, "timestamp_epoch": "1634914507.260160000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3f0404f081618290c6ec2efc", "kind": "identity", "frame_number": 23484, "timestamp_epoch": "1634914507.260363000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9b3a7757932c51d982a531be", "kind": "identity", "frame_number": 23485, "timestamp_epoch": "1634914507.260669000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9b10d4b3febeb0906b499dcc", "kind": "identity", "frame_number": 23486, "timestamp_epoch": "1634914507.260848000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3d4e56726926751f48df06c9", "kind": "identity", "frame_number": 23487, "timestamp_epoch": "1634914507.261197000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c5edecbf0abf71f4381cffb2", "kind": "identity", "frame_number": 23488, "timestamp_epoch": "1634914507.261559000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-03c158d47e56113736f6fa39", "kind": "identity", "frame_number": 23489, "timestamp_epoch": "1634914507.261818000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-70a376621c1bbe20121b86b2", "kind": "identity", "frame_number": 23490, "timestamp_epoch": "1634914507.262113000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6dff5b56360cffc39d62c716", "kind": "identity", "frame_number": 23491, "timestamp_epoch": "1634914507.262453000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8816a81860fa55ad2145c42c", "kind": "identity", "frame_number": 23492, "timestamp_epoch": "1634914507.262843000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fd32aac0ddc4fd6279374708", "kind": "identity", "frame_number": 23493, "timestamp_epoch": "1634914507.263186000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3b7d1183ba9db6efb5eb1fa5", "kind": "identity", "frame_number": 23494, "timestamp_epoch": "1634914507.263570000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-690d6a49bb894bea4f1845a4", "kind": "identity", "frame_number": 23495, "timestamp_epoch": "1634914507.263891000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2fef7a7f4a43738fc5e40fd6", "kind": "identity", "frame_number": 23496, "timestamp_epoch": "1634914507.264351000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1146c8789b700df2564560bf", "kind": "identity", "frame_number": 23497, "timestamp_epoch": "1634914507.264619000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4fe61afc9e815caa16523376", "kind": "identity", "frame_number": 23498, "timestamp_epoch": "1634914507.264954000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3754653751e5374e905cb101", "kind": "identity", "frame_number": 23499, "timestamp_epoch": "1634914507.265229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ab4deaa0e6022bfec25380e6", "kind": "identity", "frame_number": 23500, "timestamp_epoch": "1634914507.265674000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-596ca99022455e25450ed6ce", "kind": "identity", "frame_number": 23501, "timestamp_epoch": "1634914507.265925000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-819db141e954a758d181dc55", "kind": "identity", "frame_number": 23502, "timestamp_epoch": "1634914507.266247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-0374c8741ccc5e2ce1752655", "kind": "identity", "frame_number": 23503, "timestamp_epoch": "1634914507.266521000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a4ecd391d0a96c57b3ee1f06", "kind": "identity", "frame_number": 23504, "timestamp_epoch": "1634914507.266808000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7e9a73512616a7d3b6f62e4a", "kind": "identity", "frame_number": 23505, "timestamp_epoch": "1634914507.267052000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-93171380b28fc8415b63b012", "kind": "identity", "frame_number": 23506, "timestamp_epoch": "1634914507.267272000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6259a5000e3f6cc7064f635a", "kind": "identity", "frame_number": 23507, "timestamp_epoch": "1634914507.267509000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-092c1bcf60a071923b3b4dbf", "kind": "identity", "frame_number": 23508, "timestamp_epoch": "1634914507.267760000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-843cc172bc139a0be9c8d3a7", "kind": "identity", "frame_number": 23509, "timestamp_epoch": "1634914507.268000000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ff826ec4247ffb7114d8ee55", "kind": "identity", "frame_number": 23510, "timestamp_epoch": "1634914507.268143000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-164b7dcf226905238118eaca", "kind": "identity", "frame_number": 23530, "timestamp_epoch": "1634914507.430900000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-de9ed2b84ae2eb0f0fe39328", "kind": "identity", "frame_number": 23531, "timestamp_epoch": "1634914507.431270000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-604cfe6d2add3a2142100518", "kind": "identity", "frame_number": 23532, "timestamp_epoch": "1634914507.431485000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f15770da536ff1faa08e1bb1", "kind": "identity", "frame_number": 23533, "timestamp_epoch": "1634914507.431668000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cfa4f37f3565a9f6d5c7978e", "kind": "identity", "frame_number": 23534, "timestamp_epoch": "1634914507.431867000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-73c6e01668c9c71d9d18222a", "kind": "identity", "frame_number": 23535, "timestamp_epoch": "1634914507.432095000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fcce018115dff9fe0dd7ff22", "kind": "identity", "frame_number": 23536, "timestamp_epoch": "1634914507.432411000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4d364e10fe496bced0619d44", "kind": "identity", "frame_number": 23537, "timestamp_epoch": "1634914507.432576000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3a0d6f068676e295e9db76e0", "kind": "identity", "frame_number": 23538, "timestamp_epoch": "1634914507.432902000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f2c0515da40a2f58c4fa4200", "kind": "identity", "frame_number": 23539, "timestamp_epoch": "1634914507.433399000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a3d7a97101789eb98644fd67", "kind": "identity", "frame_number": 23540, "timestamp_epoch": "1634914507.433690000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-859cb327885cc3e3de62aa10", "kind": "identity", "frame_number": 23541, "timestamp_epoch": "1634914507.434112000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b0f917d44ece7a0237363167", "kind": "identity", "frame_number": 23542, "timestamp_epoch": "1634914507.434454000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3013f9d6b8360d42f764f152", "kind": "identity", "frame_number": 23543, "timestamp_epoch": "1634914507.434778000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3db060a634f940ab05459e0b", "kind": "identity", "frame_number": 23544, "timestamp_epoch": "1634914507.435097000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5e45843652c3bd4dd8a277f1", "kind": "identity", "frame_number": 23545, "timestamp_epoch": "1634914507.435436000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3571783a663d19727bd88d80", "kind": "identity", "frame_number": 23546, "timestamp_epoch": "1634914507.435755000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-a1aa10a441effeae829069d7", "kind": "identity", "frame_number": 23547, "timestamp_epoch": "1634914507.436179000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9a2715786c1c8aaeea992809", "kind": "identity", "frame_number": 23548, "timestamp_epoch": "1634914507.436463000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ff94e80c82426c604e7b5b70", "kind": "identity", "frame_number": 23549, "timestamp_epoch": "1634914507.436780000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-40a777bd6e80b522c6ddb6b3", "kind": "identity", "frame_number": 23550, "timestamp_epoch": "1634914507.437063000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f732120465926f32d2de38d9", "kind": "identity", "frame_number": 23551, "timestamp_epoch": "1634914507.437301000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e47915a18483e432ac725fd4", "kind": "identity", "frame_number": 23552, "timestamp_epoch": "1634914507.437562000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-94d40d9b6d97c4a12aae1062", "kind": "identity", "frame_number": 23553, "timestamp_epoch": "1634914507.437705000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4f74df1ef75e9383a6808e43", "kind": "identity", "frame_number": 23628, "timestamp_epoch": "1634914518.012892000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3aab04cf19ab7f0d114c713d", "kind": "identity", "frame_number": 23629, "timestamp_epoch": "1634914518.013351000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6a93ffe4eacb98354ba262ef", "kind": "identity", "frame_number": 23630, "timestamp_epoch": "1634914518.013820000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-42bab65f2c17c4251b937d53", "kind": "identity", "frame_number": 23631, "timestamp_epoch": "1634914518.014180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8ae80ddd8c33b8f112b3c3fb", "kind": "identity", "frame_number": 23656, "timestamp_epoch": "1634914523.560555000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d3266a21b7ebc83a24b326c6", "kind": "identity", "frame_number": 23665, "timestamp_epoch": "1634914525.092176000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6a021d41260be6af6f6d5d00", "kind": "identity", "frame_number": 23666, "timestamp_epoch": "1634914526.685357000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b6b53175db277e60c6762928", "kind": "identity", "frame_number": 23729, "timestamp_epoch": "1634914551.222640000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4613fc83bbb732aec4388788", "kind": "identity", "frame_number": 23731, "timestamp_epoch": "1634914552.739210000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c9fe7b189f574f6e1bbd6587", "kind": "identity", "frame_number": 23735, "timestamp_epoch": "1634914554.254456000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9561f11603cf0a6580c796f0", "kind": "identity", "frame_number": 23753, "timestamp_epoch": "1634914561.173186000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a44ab892da4b9dc895c674d3", "kind": "identity", "frame_number": 23833, "timestamp_epoch": "1634914589.589976000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-81a221aad07a671d24c71874", "kind": "identity", "frame_number": 23883, "timestamp_epoch": "1634914611.882053000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-02a70f837fe968b422f1b511", "kind": "identity", "frame_number": 23885, "timestamp_epoch": "1634914613.382015000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-84afe48cdb6f308ac77e2c62", "kind": "identity", "frame_number": 23890, "timestamp_epoch": "1634914614.944610000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e0c2a1c0e04c1e719a845b8d", "kind": "identity", "frame_number": 23965, "timestamp_epoch": "1634914643.579470000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-112fb2467a0699baeeba782c", "kind": "identity", "frame_number": 23968, "timestamp_epoch": "1634914645.095480000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-73096669856b366b7d609a49", "kind": "identity", "frame_number": 23977, "timestamp_epoch": "1634914646.703842000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c582bae8ff286c456227d919", "kind": "identity", "frame_number": 24037, "timestamp_epoch": "1634914671.226508000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5694d16a1ae36c166f6cab83", "kind": "identity", "frame_number": 24051, "timestamp_epoch": "1634914672.757264000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f734d2dce5b809b9a8729e3a", "kind": "identity", "frame_number": 24054, "timestamp_epoch": "1634914674.257767000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-259f50fd8ac148b4012d7cab", "kind": "identity", "frame_number": 24261, "timestamp_epoch": "1634914731.899846000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-afcdd35823636a0706af6abe", "kind": "identity", "frame_number": 24264, "timestamp_epoch": "1634914733.462482000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e1189044e83c8ab59af2efa2", "kind": "identity", "frame_number": 24275, "timestamp_epoch": "1634914734.977466000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c0bc6719778d141b851cf3be", "kind": "identity", "frame_number": 24342, "timestamp_epoch": "1634914763.598827000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b58ab73faf04c7e6e26a7174", "kind": "identity", "frame_number": 24349, "timestamp_epoch": "1634914765.207762000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-274e0c3c3d27cfcc5371939a", "kind": "identity", "frame_number": 24353, "timestamp_epoch": "1634914766.707877000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-da7e217a7a223764e5bc7667", "kind": "identity", "frame_number": 24444, "timestamp_epoch": "1634914791.229824000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a83b85f997ce3b5d71cf1c78", "kind": "identity", "frame_number": 24447, "timestamp_epoch": "1634914792.761305000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-021c1db682d5f9344366c25a", "kind": "identity", "frame_number": 24451, "timestamp_epoch": "1634914794.261645000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-26bdb25949a0c54722f330e7", "kind": "identity", "frame_number": 24580, "timestamp_epoch": "1634914851.156627000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-891bc0c3b75d403a7743d437", "kind": "identity", "frame_number": 24586, "timestamp_epoch": "1634914851.166707000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-55e18f050f5dbb1f6fdbe452", "kind": "identity", "frame_number": 24588, "timestamp_epoch": "1634914851.166901000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c8e258f4067a7bc4cc3875da", "kind": "identity", "frame_number": 24589, "timestamp_epoch": "1634914851.167306000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 482, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-71592e5f99d8675302fa63d3", "kind": "identity", "frame_number": 24594, "timestamp_epoch": "1634914851.883300000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e5bba5f27acf30dfc80418e3", "kind": "identity", "frame_number": 24595, "timestamp_epoch": "1634914852.664238000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-073f97010fdf645cdc05892e", "kind": "identity", "frame_number": 24596, "timestamp_epoch": "1634914853.398370000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fc61ff045be47baa39df6adf", "kind": "identity", "frame_number": 24597, "timestamp_epoch": "1634914854.163131000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cf618cd592e33ae35089850b", "kind": "identity", "frame_number": 24600, "timestamp_epoch": "1634914854.804100000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0741ed9f870353f1fd41324d", "kind": "identity", "frame_number": 24601, "timestamp_epoch": "1634914854.804583000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4b6cbceaf77e4437c6e824b5", "kind": "identity", "frame_number": 24604, "timestamp_epoch": "1634914854.897436000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2773a1f1ed741912b5ef63aa", "kind": "identity", "frame_number": 24609, "timestamp_epoch": "1634914854.998642000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1b9860b7dfb63008cd6eb788", "kind": "identity", "frame_number": 24610, "timestamp_epoch": "1634914854.998910000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-645a206d86a5858fabd6d8b0", "kind": "identity", "frame_number": 24611, "timestamp_epoch": "1634914854.999357000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dd444c7cc7dc14521d6ac953", "kind": "identity", "frame_number": 24614, "timestamp_epoch": "1634914855.000732000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-88c5153c31e7ae8185e51042", "kind": "identity", "frame_number": 24616, "timestamp_epoch": "1634914855.001763000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-28b01bf4140c4badc36f201f", "kind": "identity", "frame_number": 24617, "timestamp_epoch": "1634914855.002296000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9e6b32f95e78676e2ef89fd0", "kind": "identity", "frame_number": 24618, "timestamp_epoch": "1634914855.002529000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-24094ffd65fa1da4bba4d573", "kind": "identity", "frame_number": 24619, "timestamp_epoch": "1634914855.002844000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-12de4788699c44f41e1325bc", "kind": "identity", "frame_number": 24620, "timestamp_epoch": "1634914855.002950000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b2a333af1477a854505c2beb", "kind": "identity", "frame_number": 24621, "timestamp_epoch": "1634914855.003022000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e7b710de9aac38d6ecc189d5", "kind": "identity", "frame_number": 24622, "timestamp_epoch": "1634914855.003307000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f89a0d0af156a3af664f8cc2", "kind": "identity", "frame_number": 24644, "timestamp_epoch": "1634914865.734544000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-352c09388c8534492af45de8", "kind": "identity", "frame_number": 24645, "timestamp_epoch": "1634914865.735165000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-58eac5eb02450a1ab177ff56", "kind": "identity", "frame_number": 24646, "timestamp_epoch": "1634914865.735802000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-59261ef01f9e7ed8c114f2a2", "kind": "identity", "frame_number": 24647, "timestamp_epoch": "1634914865.736171000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 693, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b43e688cfe4c97c86b6db396", "kind": "identity", "frame_number": 24704, "timestamp_epoch": "1634914883.586052000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f4c8da63705013b43801aa29", "kind": "identity", "frame_number": 24709, "timestamp_epoch": "1634914885.131950000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f274d497759fd0286fac16ad", "kind": "identity", "frame_number": 24712, "timestamp_epoch": "1634914886.648448000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-52c071e26d894f1221110426", "kind": "identity", "frame_number": 24784, "timestamp_epoch": "1634914911.831616000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-be0d07b52056450d67862bfb", "kind": "identity", "frame_number": 24791, "timestamp_epoch": "1634914911.841545000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4fc128d352ca06b8847bb7e0", "kind": "identity", "frame_number": 24792, "timestamp_epoch": "1634914911.841817000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-e3f7bfb10616d19fdc0b16dd", "kind": "identity", "frame_number": 24793, "timestamp_epoch": "1634914911.842008000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 492, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0eb419ca8687dab48bf7c6d3", "kind": "identity", "frame_number": 24799, "timestamp_epoch": "1634914913.325183000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-47dc0c346f203b05841638ed", "kind": "identity", "frame_number": 24803, "timestamp_epoch": "1634914914.480762000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7512aa121f80ac7f1bb7d6ce", "kind": "identity", "frame_number": 24804, "timestamp_epoch": "1634914914.481067000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8c6c19049bc7631eba1c3234", "kind": "identity", "frame_number": 24806, "timestamp_epoch": "1634914914.825272000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e08bd04ce1d47a64f8ef4819", "kind": "identity", "frame_number": 24814, "timestamp_epoch": "1634914915.080458000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a77cd3484b32741df106737f", "kind": "identity", "frame_number": 24815, "timestamp_epoch": "1634914915.080733000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6b74ec2c1be74054cee34c74", "kind": "identity", "frame_number": 24816, "timestamp_epoch": "1634914915.081074000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8ddd37b1809d641a2a9a7c18", "kind": "identity", "frame_number": 24819, "timestamp_epoch": "1634914915.082678000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-10f181269dc898a79f92fced", "kind": "identity", "frame_number": 24821, "timestamp_epoch": "1634914915.083625000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-d4b87d00d91965c5f505ede7", "kind": "identity", "frame_number": 24822, "timestamp_epoch": "1634914915.084287000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b9b6beb6e0767ffdbe77d3be", "kind": "identity", "frame_number": 24823, "timestamp_epoch": "1634914915.084546000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-765bb3166cf91517480aecd8", "kind": "identity", "frame_number": 24824, "timestamp_epoch": "1634914915.084834000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-058d7f605fee90b432c94270", "kind": "identity", "frame_number": 24825, "timestamp_epoch": "1634914915.085017000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7ba03ecebc0e63d20e36c4d1", "kind": "identity", "frame_number": 24826, "timestamp_epoch": "1634914915.085258000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-620bff05dd47ba47f8e033f8", "kind": "identity", "frame_number": 24827, "timestamp_epoch": "1634914915.085474000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ac03da90b54f548eab0e3c34", "kind": "identity", "frame_number": 24849, "timestamp_epoch": "1634914925.887020000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b061e7513a0d7e1908cdcc5d", "kind": "identity", "frame_number": 24850, "timestamp_epoch": "1634914925.887280000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c5c9f4ccf479504053bb8560", "kind": "identity", "frame_number": 24851, "timestamp_epoch": "1634914925.887646000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fd48f1a87a15cc0fc42312bc", "kind": "identity", "frame_number": 24852, "timestamp_epoch": "1634914925.887943000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 735, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f77a82474917f884648ee533", "kind": "identity", "frame_number": 25058, "timestamp_epoch": "1634914943.540521000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-11c8390a806438cd900a2402", "kind": "identity", "frame_number": 25089, "timestamp_epoch": "1634914943.550565000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6f98adf2ca8c6a5f1831f426", "kind": "identity", "frame_number": 25090, "timestamp_epoch": "1634914943.550695000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1a86e3be6710d418958584fa", "kind": "identity", "frame_number": 25091, "timestamp_epoch": "1634914943.550852000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 497, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3b78b55b9fde02bf172f7947", "kind": "identity", "frame_number": 25913, "timestamp_epoch": "1634914944.864713000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-320e0eaed80c3355531bf387", "kind": "identity", "frame_number": 25914, "timestamp_epoch": "1634914944.864915000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9a5bf2ad4000090cf16ba31a", "kind": "identity", "frame_number": 25917, "timestamp_epoch": "1634914945.037471000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d93efadbe29596681ba00abc", "kind": "identity", "frame_number": 25923, "timestamp_epoch": "1634914945.980179000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-11195e36c66f1036917618e1", "kind": "identity", "frame_number": 25924, "timestamp_epoch": "1634914945.980313000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e46c555b5973d2daaa3b4bfb", "kind": "identity", "frame_number": 25925, "timestamp_epoch": "1634914945.980560000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-358d6309d21c04c1c62d93b9", "kind": "identity", "frame_number": 25928, "timestamp_epoch": "1634914945.981521000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-01f839a70fc5f41626748fd3", "kind": "identity", "frame_number": 25930, "timestamp_epoch": "1634914945.982191000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-27fae6ab48d46eb7d12336d9", "kind": "identity", "frame_number": 25931, "timestamp_epoch": "1634914945.982499000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-691e775757e54bdec3118f6f", "kind": "identity", "frame_number": 25932, "timestamp_epoch": "1634914945.982676000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-db8989f202ec3f3ea5792525", "kind": "identity", "frame_number": 25933, "timestamp_epoch": "1634914945.982837000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7181d40938c2cdb6c99a65ec", "kind": "identity", "frame_number": 25934, "timestamp_epoch": "1634914945.982934000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-40d3542406d0fd2861395b3a", "kind": "identity", "frame_number": 25935, "timestamp_epoch": "1634914945.983023000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-16eb524dcb9b357d5e3a743b", "kind": "identity", "frame_number": 25936, "timestamp_epoch": "1634914945.983236000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dfe6153d5015fd388a7b4969", "kind": "identity", "frame_number": 25939, "timestamp_epoch": "1634914946.538017000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4ac9a2440a2d17099328c88b", "kind": "identity", "frame_number": 25965, "timestamp_epoch": "1634914956.725678000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b162a950582bdbc4626821df", "kind": "identity", "frame_number": 25966, "timestamp_epoch": "1634914956.726004000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1bf42803bedac015401bd619", "kind": "identity", "frame_number": 25967, "timestamp_epoch": "1634914956.726483000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7e9d2a67a66b2eeaf081fa11", "kind": "identity", "frame_number": 25968, "timestamp_epoch": "1634914956.726820000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 740, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-343ed4aca54957fa9e91be54", "kind": "identity", "frame_number": 25984, "timestamp_epoch": "1634914971.153780000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-daff5c8d13416de14b4a4940", "kind": "identity", "frame_number": 25985, "timestamp_epoch": "1634914972.669962000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c8e229da5a260451a4b289a4", "kind": "identity", "frame_number": 25988, "timestamp_epoch": "1634914974.185107000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7ab6eccf45b8b738acd0095e", "kind": "identity", "frame_number": 26039, "timestamp_epoch": "1634914985.045428000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fa0c945bee663b2576da2228", "kind": "identity", "frame_number": 26040, "timestamp_epoch": "1634914985.045677000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-d5aee3a8e3a184a5a831816e", "kind": "identity", "frame_number": 26041, "timestamp_epoch": "1634914985.913905000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-55408fe717437e7f0b4feeda", "kind": "identity", "frame_number": 26042, "timestamp_epoch": "1634914985.914233000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-29b06a6e0eac5dfa11190325", "kind": "identity", "frame_number": 26043, "timestamp_epoch": "1634914985.914789000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-16128813e8f561368b35346b", "kind": "identity", "frame_number": 26044, "timestamp_epoch": "1634914985.915049000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-bc7b76b1fbf55db8791216e9", "kind": "identity", "frame_number": 26058, "timestamp_epoch": "1634914985.975177000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-83743d5aeff705669ebf2b22", "kind": "identity", "frame_number": 26060, "timestamp_epoch": "1634914985.975827000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-963f1c95223eec2acab825a6", "kind": "identity", "frame_number": 26061, "timestamp_epoch": "1634914985.976212000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-3b806f5dcdc38b8effc8eb7d", "kind": "identity", "frame_number": 26084, "timestamp_epoch": "1634914985.994701000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-7e8dabe3a0d3324aff27159c", "kind": "identity", "frame_number": 26086, "timestamp_epoch": "1634914985.995342000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-1458eb84e811262bdf1028a7", "kind": "identity", "frame_number": 26087, "timestamp_epoch": "1634914985.995772000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-ed9fe606fbff9d9902dc071b", "kind": "identity", "frame_number": 26121, "timestamp_epoch": "1634914986.119336000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-b68d9b5d20a765f4d3d2e41c", "kind": "identity", "frame_number": 26123, "timestamp_epoch": "1634914986.120044000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-4e652f1112f9d83aebf3d0e8", "kind": "identity", "frame_number": 26134, "timestamp_epoch": "1634914986.126481000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-a6a4a7b0e197edf2902cee60", "kind": "identity", "frame_number": 26136, "timestamp_epoch": "1634914986.127271000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-92e7691957b46a393580af9a", "kind": "identity", "frame_number": 26167, "timestamp_epoch": "1634914986.416780000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d504cb85a642ba6bbbaf27f1", "kind": "identity", "frame_number": 26168, "timestamp_epoch": "1634914986.417105000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-03ab40801d5fc4d79c31fee1", "kind": "identity", "frame_number": 26169, "timestamp_epoch": "1634914986.417528000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-11289571b07a6c97cae2703a", "kind": "identity", "frame_number": 26170, "timestamp_epoch": "1634914986.417744000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a3df55e6aa64110f575f9720", "kind": "identity", "frame_number": 26178, "timestamp_epoch": "1634914986.622254000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-0c53e5b2ba8935d7c4ed3b12", "kind": "identity", "frame_number": 26182, "timestamp_epoch": "1634914988.184415000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-35916e152630fef071ea4d3c", "kind": "identity", "frame_number": 26185, "timestamp_epoch": "1634914989.746853000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1b>" } }, { "event_id": "evt-00c7849bebfff806c22b8f8e", "kind": "identity", "frame_number": 26186, "timestamp_epoch": "1634914989.747212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 506, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "nbns.flags.opcode": "0", "nbns.flags.response": "True", "nbns.name": "ENEMYWATCH<1b> (Domain Master Browser)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a728f330c45d3a8328f7849d", "kind": "identity", "frame_number": 26187, "timestamp_epoch": "1634914989.747425000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-be7c7d21b1eea9ea4baba450", "kind": "identity", "frame_number": 26188, "timestamp_epoch": "1634914990.747841000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b787b35dcf8904ca75d5aae9", "kind": "identity", "frame_number": 26189, "timestamp_epoch": "1634914990.748093000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-187d1eb783f33ad900a1538e", "kind": "identity", "frame_number": 26190, "timestamp_epoch": "1634914991.748525000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-976ede3342fdedde2d5093e1", "kind": "identity", "frame_number": 26191, "timestamp_epoch": "1634914991.749222000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ec2418d1d525630801d5a414", "kind": "identity", "frame_number": 26192, "timestamp_epoch": "1634914992.763784000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-0fd400ae480b87fd9bdc7352", "kind": "identity", "frame_number": 26195, "timestamp_epoch": "1634914993.560931000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-09f9cda8835ced3056bffc37", "kind": "identity", "frame_number": 26196, "timestamp_epoch": "1634914994.358288000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-c482b76f01f3b6f59809deef", "kind": "identity", "frame_number": 29085, "timestamp_epoch": "1634915012.965473000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-88c02e3a2324abd6c6f57292", "kind": "identity", "frame_number": 29087, "timestamp_epoch": "1634915012.966335000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-a3654103c8823360a189add6", "kind": "identity", "frame_number": 29088, "timestamp_epoch": "1634915012.966625000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-325d9ebddef24b0de35093e5", "kind": "identity", "frame_number": 29113, "timestamp_epoch": "1634915012.988164000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-72a056bcd94bf461ccf9eea8", "kind": "identity", "frame_number": 29115, "timestamp_epoch": "1634915012.988797000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-11d740a3e8d49dfbb7e364fa", "kind": "identity", "frame_number": 29116, "timestamp_epoch": "1634915012.989204000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-02295ebcff86ce15574904cc", "kind": "identity", "frame_number": 29148, "timestamp_epoch": "1634915013.110781000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-9b16fcba897d5e30eac19f44", "kind": "identity", "frame_number": 29150, "timestamp_epoch": "1634915013.111398000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-7142c0745ba7aaa93aa64516", "kind": "identity", "frame_number": 29161, "timestamp_epoch": "1634915013.116822000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-31d9800589ac78b927c34f2d", "kind": "identity", "frame_number": 29163, "timestamp_epoch": "1634915013.117501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-ac3b1a67a29b126bcac2c438", "kind": "identity", "frame_number": 29222, "timestamp_epoch": "1634915031.842902000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-959316d8e983c8e79896fdb9", "kind": "identity", "frame_number": 29223, "timestamp_epoch": "1634915033.359149000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8a3c827c921f178506a4dfd8", "kind": "identity", "frame_number": 29228, "timestamp_epoch": "1634915034.951675000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1e4fef38ee4f94f7459d4eb5", "kind": "identity", "frame_number": 29249, "timestamp_epoch": "1634915040.433007000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-ac86740230e0f292f8e45f99", "kind": "identity", "frame_number": 29251, "timestamp_epoch": "1634915040.433820000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-56f35d5d58d15e345bdd7a11", "kind": "identity", "frame_number": 29252, "timestamp_epoch": "1634915040.434066000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-8234e4ae90e861c10e058351", "kind": "identity", "frame_number": 29275, "timestamp_epoch": "1634915040.447180000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-dc575a261d17319470471db5", "kind": "identity", "frame_number": 29277, "timestamp_epoch": "1634915040.447809000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-2b1d1b9977eb1207bb73cac2", "kind": "identity", "frame_number": 29278, "timestamp_epoch": "1634915040.448357000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-82c0b37a27d4d9ac8caa8c14", "kind": "identity", "frame_number": 29311, "timestamp_epoch": "1634915040.564548000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-f22497813a3eca33e4f14a62", "kind": "identity", "frame_number": 29313, "timestamp_epoch": "1634915040.565244000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-2f1d2ac7e971f3338c269bd5", "kind": "identity", "frame_number": 29324, "timestamp_epoch": "1634915040.572515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-b47428bb9c522afcad30ba76", "kind": "identity", "frame_number": 29326, "timestamp_epoch": "1634915040.573345000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-48962dd555fbe18382b80fcc", "kind": "identity", "frame_number": 29384, "timestamp_epoch": "1634915063.541970000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2b531270b442a45478955d86", "kind": "identity", "frame_number": 29387, "timestamp_epoch": "1634915065.056484000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a97f07aba98e2ff98f47f2cd", "kind": "identity", "frame_number": 29388, "timestamp_epoch": "1634915066.587824000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-04f8424610a9b7c5c1f9bb92", "kind": "identity", "frame_number": 29405, "timestamp_epoch": "1634915091.157044000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4eec7626776478da633a2501", "kind": "identity", "frame_number": 29408, "timestamp_epoch": "1634915092.673476000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c5c38dd9ffbe0fff6ca229b7", "kind": "identity", "frame_number": 29409, "timestamp_epoch": "1634915094.188249000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-03908c0dcd610d1595537929", "kind": "identity", "frame_number": 29972, "timestamp_epoch": "1634915151.862259000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f3b275411b19e563ba3b15f5", "kind": "identity", "frame_number": 29973, "timestamp_epoch": "1634915153.362326000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-849dd18227ed504245cae375", "kind": "identity", "frame_number": 29976, "timestamp_epoch": "1634915154.892654000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0a449b0266850c17de493160", "kind": "identity", "frame_number": 30018, "timestamp_epoch": "1634915183.575557000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4f502129a6ba2ef19caf6304", "kind": "identity", "frame_number": 30019, "timestamp_epoch": "1634915185.121934000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ba66c714224fde9d45ff7de3", "kind": "identity", "frame_number": 30021, "timestamp_epoch": "1634915186.683997000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ff5a4fafe28fd3ded7b8c515", "kind": "identity", "frame_number": 30675, "timestamp_epoch": "1634915211.176635000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f10ad3d0cdfc9b4c141259b9", "kind": "identity", "frame_number": 30681, "timestamp_epoch": "1634915212.691468000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8d6cc32348a084a1ac5ceae1", "kind": "identity", "frame_number": 30690, "timestamp_epoch": "1634915214.206644000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-26db78b02c4d660f34a7c2e8", "kind": "identity", "frame_number": 30693, "timestamp_epoch": "1634915216.469026000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-051b831207d02e3141f0bb39", "kind": "identity", "frame_number": 31725, "timestamp_epoch": "1634915266.387795000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-67d3144a252f76f60082ab71", "kind": "identity", "frame_number": 31726, "timestamp_epoch": "1634915266.387943000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-dee0ff978733fe41d86fe2c1", "kind": "identity", "frame_number": 31749, "timestamp_epoch": "1634915267.380106000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9ae1371c901cb64c0bffc074", "kind": "identity", "frame_number": 31750, "timestamp_epoch": "1634915267.380646000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fda1e78bd9eecfeacb725a0d", "kind": "identity", "frame_number": 32242, "timestamp_epoch": "1634915268.395965000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7d7ac64a2264c68e081f5067", "kind": "identity", "frame_number": 32243, "timestamp_epoch": "1634915268.396288000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 507, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b05d4f7c5755150eff037785", "kind": "identity", "frame_number": 32735, "timestamp_epoch": "1634915269.396462000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-3d67d948e764a7d9bdb3edb6", "kind": "identity", "frame_number": 33611, "timestamp_epoch": "1634915270.942028000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-7c00633a80616748e4fad516", "kind": "identity", "frame_number": 34010, "timestamp_epoch": "1634915271.865873000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-96413a79127615cf7ae6bba9", "kind": "identity", "frame_number": 34464, "timestamp_epoch": "1634915272.442826000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-7cd3ec93c5317b3a9f7ef0ce", "kind": "identity", "frame_number": 35631, "timestamp_epoch": "1634915273.410395000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-613028f8447c3866a7d9a0d0", "kind": "identity", "frame_number": 36604, "timestamp_epoch": "1634915273.988951000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-1619f2c8a028e2d05da62296", "kind": "identity", "frame_number": 38506, "timestamp_epoch": "1634915274.801329000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-65081f960d9196b6e9a61701", "kind": "identity", "frame_number": 38907, "timestamp_epoch": "1634915274.941976000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-84403c204c964f38a359b84f", "kind": "identity", "frame_number": 40452, "timestamp_epoch": "1634915275.567306000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 62, "fields": { "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "ENEMYWATCH<1e>" } }, { "event_id": "evt-8190676a5a01871f0f9c408e", "kind": "identity", "frame_number": 42882, "timestamp_epoch": "1634915284.142028000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-382860ab8872ce820bcd07c6", "kind": "identity", "frame_number": 43151, "timestamp_epoch": "1634915303.579073000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ef099a42b88b7b6a4f562551", "kind": "identity", "frame_number": 43162, "timestamp_epoch": "1634915305.171361000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c8d9d61f6597e5946e93c246", "kind": "identity", "frame_number": 43166, "timestamp_epoch": "1634915306.671836000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e13e3f4c0039beec858d4e5e", "kind": "identity", "frame_number": 43183, "timestamp_epoch": "1634915311.431636000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-67d65c1b38df410da88925a3", "kind": "identity", "frame_number": 44299, "timestamp_epoch": "1634915331.179869000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-aca82c3f5d668b8bd35cb14d", "kind": "identity", "frame_number": 44355, "timestamp_epoch": "1634915332.710546000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c0447b8b0960c9042cde779a", "kind": "identity", "frame_number": 44464, "timestamp_epoch": "1634915334.210717000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-da0b6306d6d54f741ab1ba53", "kind": "identity", "frame_number": 44956, "timestamp_epoch": "1634915357.644292000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-bd1ccf658df6afbb285a0488", "kind": "identity", "frame_number": 44958, "timestamp_epoch": "1634915357.645020000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-fcdd088dd019811ee39aa9e7", "kind": "identity", "frame_number": 44959, "timestamp_epoch": "1634915357.645525000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-cdd8a399b36a31963bb8d601", "kind": "identity", "frame_number": 44983, "timestamp_epoch": "1634915357.658347000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-597036cac548912ddf6c1153", "kind": "identity", "frame_number": 44985, "timestamp_epoch": "1634915357.659095000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-542c715d6f05a21c0adabcf3", "kind": "identity", "frame_number": 44996, "timestamp_epoch": "1634915357.665313000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-684c45426f5d7f0ce85665a1", "kind": "identity", "frame_number": 44998, "timestamp_epoch": "1634915357.666066000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-627c4626ae4eae55ad54c593", "kind": "identity", "frame_number": 45070, "timestamp_epoch": "1634915359.664324000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-4b565fe9fc744c1c051f39b8", "kind": "identity", "frame_number": 45072, "timestamp_epoch": "1634915359.665042000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-e5b197ca983ae6b03d2f09e9", "kind": "identity", "frame_number": 45073, "timestamp_epoch": "1634915359.665483000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-9799cebb3c700f6727881aad", "kind": "identity", "frame_number": 45097, "timestamp_epoch": "1634915359.677394000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-d7d3a9a0b0420874e15687e3", "kind": "identity", "frame_number": 45099, "timestamp_epoch": "1634915359.678157000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b8c735badb25c5eabbc259fd", "kind": "identity", "frame_number": 45110, "timestamp_epoch": "1634915359.684024000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-ba6cd360efe992f9b72bac7f", "kind": "identity", "frame_number": 45112, "timestamp_epoch": "1634915359.684779000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f6dbe3a21184ceb3fe604370", "kind": "identity", "frame_number": 45860, "timestamp_epoch": "1634915391.898022000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c7b42087f63c1d556ac274e7", "kind": "identity", "frame_number": 46806, "timestamp_epoch": "1634915393.414580000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-217a54691c901103cad25ead", "kind": "identity", "frame_number": 46810, "timestamp_epoch": "1634915394.914698000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6f38277f3c29aa1a3261d653", "kind": "identity", "frame_number": 46958, "timestamp_epoch": "1634915423.582372000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-75e5342ed6f303d205e78746", "kind": "identity", "frame_number": 46960, "timestamp_epoch": "1634915425.111963000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-82e3fe0b1091cbe7eecd7533", "kind": "identity", "frame_number": 46968, "timestamp_epoch": "1634915426.660480000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8fc90f1a1f8b36affd1f1121", "kind": "identity", "frame_number": 47189, "timestamp_epoch": "1634915451.197775000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bbf27211bccf0a4d26fcd540", "kind": "identity", "frame_number": 47192, "timestamp_epoch": "1634915452.697932000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2ece7d8cab6bac9684160b2c", "kind": "identity", "frame_number": 47202, "timestamp_epoch": "1634915454.229306000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cada56ac8e23d91b1eea48db", "kind": "identity", "frame_number": 47225, "timestamp_epoch": "1634915455.166968000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0be870525fb4af8ea001d116", "kind": "identity", "frame_number": 47226, "timestamp_epoch": "1634915455.167379000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8f81112977601b66a9ff0ac4", "kind": "identity", "frame_number": 48332, "timestamp_epoch": "1634915472.182584000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-1ab4b5647e9ecb56112a9f0a", "kind": "identity", "frame_number": 48334, "timestamp_epoch": "1634915472.183329000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-b8d2b8ce7c2b65d8db8c3f4a", "kind": "identity", "frame_number": 48335, "timestamp_epoch": "1634915472.183907000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-5bc77b93dbcbe9385e6e58d5", "kind": "identity", "frame_number": 48359, "timestamp_epoch": "1634915472.196979000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-5cbf34837aea6c8bd8352ece", "kind": "identity", "frame_number": 48361, "timestamp_epoch": "1634915472.197846000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-77ef9c68c4ce931b92e74870", "kind": "identity", "frame_number": 48372, "timestamp_epoch": "1634915472.204135000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-00af3571302d51d2b30df135", "kind": "identity", "frame_number": 48374, "timestamp_epoch": "1634915472.204857000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-f015aa33e47afa5c8239561e", "kind": "identity", "frame_number": 49529, "timestamp_epoch": "1634915511.902291000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1fa05c18215f8e4a12ba41d5", "kind": "identity", "frame_number": 49540, "timestamp_epoch": "1634915513.417805000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f5ad691b5bea7e854902ad7c", "kind": "identity", "frame_number": 49553, "timestamp_epoch": "1634915514.855575000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-32baffec5364b789523078be", "kind": "identity", "frame_number": 49554, "timestamp_epoch": "1634915514.856167000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d3b0e5c04ed3f871f33e74ed", "kind": "identity", "frame_number": 49560, "timestamp_epoch": "1634915514.949238000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-77eeaee23a30befa24fad20d", "kind": "identity", "frame_number": 51097, "timestamp_epoch": "1634915543.586503000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3122bc9fd007a507a4c75985", "kind": "identity", "frame_number": 51312, "timestamp_epoch": "1634915545.116260000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ae0dc0762d72a73b5b5157d9", "kind": "identity", "frame_number": 51335, "timestamp_epoch": "1634915545.242353000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d48519656b70c3b47b46436c", "kind": "identity", "frame_number": 51336, "timestamp_epoch": "1634915545.242928000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3528f58b9a636ecbe85758ff", "kind": "identity", "frame_number": 51436, "timestamp_epoch": "1634915546.632766000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4f414201e4f9225b86ef95e2", "kind": "identity", "frame_number": 51736, "timestamp_epoch": "1634915571.202306000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-edf8cc27c6740cd23020e0b2", "kind": "identity", "frame_number": 51758, "timestamp_epoch": "1634915572.702081000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6acb217100e79e95b9ec67f6", "kind": "identity", "frame_number": 51765, "timestamp_epoch": "1634915574.248572000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-00d978c2a90211d5b6e7b5d7", "kind": "identity", "frame_number": 54244, "timestamp_epoch": "1634915631.906887000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7d447462bd79ef2edcfca1a9", "kind": "identity", "frame_number": 54272, "timestamp_epoch": "1634915633.421629000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5046adcdb6c69f241f925425", "kind": "identity", "frame_number": 54298, "timestamp_epoch": "1634915634.953413000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c0c12f0bbfa1c4521c7afb58", "kind": "identity", "frame_number": 54786, "timestamp_epoch": "1634915663.604729000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-edb91ef5e73dd0159e44f18d", "kind": "identity", "frame_number": 54789, "timestamp_epoch": "1634915665.165802000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-50b353cccfd29aad5870d5de", "kind": "identity", "frame_number": 54802, "timestamp_epoch": "1634915666.680967000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-822a931e860c2edc393a1b36", "kind": "identity", "frame_number": 55041, "timestamp_epoch": "1634915691.219977000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f2ab5512f892152957218a53", "kind": "identity", "frame_number": 55044, "timestamp_epoch": "1634915692.734948000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ac8106ecc1051cf5983deef4", "kind": "identity", "frame_number": 55049, "timestamp_epoch": "1634915694.251444000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b35cf5d6b3c9d739d0face59", "kind": "identity", "frame_number": 55095, "timestamp_epoch": "1634915700.847639000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-46f6d489e92bf586249e7fb0", "kind": "identity", "frame_number": 55097, "timestamp_epoch": "1634915700.848339000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-0377f69b799c515cc540c161", "kind": "identity", "frame_number": 55098, "timestamp_epoch": "1634915700.848743000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "15" } }, { "event_id": "evt-05a1d5a102acfa669507dae1", "kind": "identity", "frame_number": 55122, "timestamp_epoch": "1634915700.858087000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-155b72c8a3a94598cc6c634e", "kind": "identity", "frame_number": 55124, "timestamp_epoch": "1634915700.858794000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-1bf6b777fa26397fd728bb3d", "kind": "identity", "frame_number": 55135, "timestamp_epoch": "1634915700.864029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-c9768af6bcc5700f45d2ed9e", "kind": "identity", "frame_number": 55137, "timestamp_epoch": "1634915700.864788000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-39d19014536e4cf000dd733e", "kind": "identity", "frame_number": 55644, "timestamp_epoch": "1634915751.200802000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-58c3410f5608428f46de1dbb", "kind": "identity", "frame_number": 55649, "timestamp_epoch": "1634915751.209424000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-699c99c1e2d13cb9fbe6ace8", "kind": "identity", "frame_number": 55650, "timestamp_epoch": "1634915751.209612000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-83605e564aea084da24a32c7", "kind": "identity", "frame_number": 55653, "timestamp_epoch": "1634915751.210002000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 687, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-966406f907b215e356cc4309", "kind": "identity", "frame_number": 55658, "timestamp_epoch": "1634915751.924465000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-17566ab0e8348e96b64bdeb5", "kind": "identity", "frame_number": 55661, "timestamp_epoch": "1634915752.721098000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d53ecc9882cab7306eca7fdf", "kind": "identity", "frame_number": 55663, "timestamp_epoch": "1634915753.471092000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9854a1bb46a848284784cf99", "kind": "identity", "frame_number": 55665, "timestamp_epoch": "1634915754.252832000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2032827d63d9b5455b923181", "kind": "identity", "frame_number": 55678, "timestamp_epoch": "1634915754.972832000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-919cf8139f803c2f039dfe50", "kind": "identity", "frame_number": 55683, "timestamp_epoch": "1634915755.028188000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-13f27976828c6faf316c121d", "kind": "identity", "frame_number": 55684, "timestamp_epoch": "1634915755.028483000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-42606b935e47a361c0db75da", "kind": "identity", "frame_number": 55685, "timestamp_epoch": "1634915755.028873000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e095f322836d10be4cb60f8f", "kind": "identity", "frame_number": 55688, "timestamp_epoch": "1634915755.030198000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-8409c4299e25e80de8d1ee6a", "kind": "identity", "frame_number": 55690, "timestamp_epoch": "1634915755.031322000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-e7155e7796eb40435d0c072d", "kind": "identity", "frame_number": 55691, "timestamp_epoch": "1634915755.031836000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-52c30c116050c7d30f504fa7", "kind": "identity", "frame_number": 55692, "timestamp_epoch": "1634915755.032060000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d812f84467e386a46cd66127", "kind": "identity", "frame_number": 55693, "timestamp_epoch": "1634915755.032348000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-015b542f922e102359d4c362", "kind": "identity", "frame_number": 55694, "timestamp_epoch": "1634915755.032593000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7d5b5ad32a5d99bb662dc1e9", "kind": "identity", "frame_number": 55695, "timestamp_epoch": "1634915755.032718000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-3f0945aa0b97f2753201dd30", "kind": "identity", "frame_number": 55696, "timestamp_epoch": "1634915755.033077000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3dc324c94b2f89cac2dc8997", "kind": "identity", "frame_number": 55782, "timestamp_epoch": "1634915765.769828000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-9ba86471cc329ddbdfd92202", "kind": "identity", "frame_number": 55783, "timestamp_epoch": "1634915765.770208000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-222e5fe76f7dc6ad90494c60", "kind": "identity", "frame_number": 55784, "timestamp_epoch": "1634915765.770582000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-74c95f1e317ee78c71f9663d", "kind": "identity", "frame_number": 55785, "timestamp_epoch": "1634915765.770961000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1008, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7fa9d73e2878aec4f92d4f6d", "kind": "identity", "frame_number": 55822, "timestamp_epoch": "1634915783.622554000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-98f778412a3c2002c4f8afe0", "kind": "identity", "frame_number": 55825, "timestamp_epoch": "1634915785.215592000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-86d76565db88664466cc80ba", "kind": "identity", "frame_number": 55833, "timestamp_epoch": "1634915786.810930000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b84e59b118b340f28c946f34", "kind": "identity", "frame_number": 56008, "timestamp_epoch": "1634915811.884762000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-43732c54ee5f603d61c3500f", "kind": "identity", "frame_number": 56017, "timestamp_epoch": "1634915811.899659000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-797c78d8c4282f962437f7ad", "kind": "identity", "frame_number": 56018, "timestamp_epoch": "1634915811.899876000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-651c907951b5076a104f1700", "kind": "identity", "frame_number": 56019, "timestamp_epoch": "1634915811.900108000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 693, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-fef7c7a482663649d962d6c5", "kind": "identity", "frame_number": 56029, "timestamp_epoch": "1634915813.380555000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a79a38d41cbc16588e508d27", "kind": "identity", "frame_number": 56033, "timestamp_epoch": "1634915814.894624000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3efa01bc66bf3e160fc20a9d", "kind": "identity", "frame_number": 56040, "timestamp_epoch": "1634915815.105591000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-79ff7f93f33f0e936a0deb2a", "kind": "identity", "frame_number": 56041, "timestamp_epoch": "1634915815.105893000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-488843ecc35a7f91b7d293e5", "kind": "identity", "frame_number": 56042, "timestamp_epoch": "1634915815.106337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2a8e36c7d4c2f20c7091f9a8", "kind": "identity", "frame_number": 56045, "timestamp_epoch": "1634915815.107848000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-e9958bffbdae42d21457e972", "kind": "identity", "frame_number": 56047, "timestamp_epoch": "1634915815.108790000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-747a245ec3128020be986f53", "kind": "identity", "frame_number": 56048, "timestamp_epoch": "1634915815.109359000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5153a98250e5d766cdbab51a", "kind": "identity", "frame_number": 56049, "timestamp_epoch": "1634915815.109591000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d75fde7721cec9e05c916a91", "kind": "identity", "frame_number": 56050, "timestamp_epoch": "1634915815.109909000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-4070e125e8571f4a830963b8", "kind": "identity", "frame_number": 56051, "timestamp_epoch": "1634915815.110033000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d97c3ab51f3ebdc4491bd9d7", "kind": "identity", "frame_number": 56052, "timestamp_epoch": "1634915815.110104000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4e0f6eff4d884db2581c7c96", "kind": "identity", "frame_number": 56053, "timestamp_epoch": "1634915815.110347000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-14e9edfd3e0f4977d189ea2a", "kind": "identity", "frame_number": 56157, "timestamp_epoch": "1634915825.863749000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-1d847b9d463d12146ecefbfb", "kind": "identity", "frame_number": 56158, "timestamp_epoch": "1634915825.864383000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-249733730c2d77b5fb65002d", "kind": "identity", "frame_number": 56159, "timestamp_epoch": "1634915825.865009000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5e5e7ca537c0ef2762597a0b", "kind": "identity", "frame_number": 56160, "timestamp_epoch": "1634915825.865470000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1016, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-65f3e730fa30a685d142208a", "kind": "identity", "frame_number": 56339, "timestamp_epoch": "1634915843.568224000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ccbc82585cb856c383e271a0", "kind": "identity", "frame_number": 56346, "timestamp_epoch": "1634915843.578982000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-79cf1f11e3081853f0b32083", "kind": "identity", "frame_number": 56347, "timestamp_epoch": "1634915843.579175000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c6f7a07ef24071754a9c6c4b", "kind": "identity", "frame_number": 56348, "timestamp_epoch": "1634915843.579402000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 699, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-22e95cce414326a804c18736", "kind": "identity", "frame_number": 56354, "timestamp_epoch": "1634915845.062469000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-71edebeaac774942f0d2076b", "kind": "identity", "frame_number": 56365, "timestamp_epoch": "1634915846.006913000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a0e769c9e2e3e64045a8f3c7", "kind": "identity", "frame_number": 56366, "timestamp_epoch": "1634915846.007229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-317e65c16be3b33775f1ea34", "kind": "identity", "frame_number": 56367, "timestamp_epoch": "1634915846.007633000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8c18c960d06bef4d14da8609", "kind": "identity", "frame_number": 56370, "timestamp_epoch": "1634915846.009091000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-6d3f6e78539a0f5184a556ab", "kind": "identity", "frame_number": 56372, "timestamp_epoch": "1634915846.009973000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-707fab36aaba512cec20c171", "kind": "identity", "frame_number": 56373, "timestamp_epoch": "1634915846.010534000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d5938c85972f07be9ba6d810", "kind": "identity", "frame_number": 56374, "timestamp_epoch": "1634915846.010758000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-09a75deeeebd1374185ec0e8", "kind": "identity", "frame_number": 56375, "timestamp_epoch": "1634915846.011060000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cb32efd5775032b902f7d677", "kind": "identity", "frame_number": 56376, "timestamp_epoch": "1634915846.011172000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-92d74c5832bb2d36b5c2b367", "kind": "identity", "frame_number": 56377, "timestamp_epoch": "1634915846.011257000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a966d90b402ffddf75df5db1", "kind": "identity", "frame_number": 56378, "timestamp_epoch": "1634915846.011507000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e60d4320c0b789f36942d85b", "kind": "identity", "frame_number": 56382, "timestamp_epoch": "1634915846.578110000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-78fed658014bfb9f4b370061", "kind": "identity", "frame_number": 56432, "timestamp_epoch": "1634915852.279832000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-809cf9b2fd2b102b3f59caac", "kind": "identity", "frame_number": 56433, "timestamp_epoch": "1634915852.280196000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f1f1b11842e5ee567d0db836", "kind": "identity", "frame_number": 56434, "timestamp_epoch": "1634915852.280688000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b9265c8c99137c52546eeb47", "kind": "identity", "frame_number": 56435, "timestamp_epoch": "1634915852.297207000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b543042ca412a5d4b09855fc", "kind": "identity", "frame_number": 56436, "timestamp_epoch": "1634915852.297754000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-5c2349dc8fbd1d44da626657", "kind": "identity", "frame_number": 56437, "timestamp_epoch": "1634915852.298353000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-78f29914567fc73a55c7b166", "kind": "identity", "frame_number": 56455, "timestamp_epoch": "1634915852.417042000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c0421d14ba1e8f3ec0ab157a", "kind": "identity", "frame_number": 56456, "timestamp_epoch": "1634915852.417773000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8101b69be8d2f5744cb3dd9a", "kind": "identity", "frame_number": 56457, "timestamp_epoch": "1634915852.418042000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-93014bd914eafe7ec5533b79", "kind": "identity", "frame_number": 56458, "timestamp_epoch": "1634915852.418287000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2d1177e28a9a444c68c79565", "kind": "identity", "frame_number": 56459, "timestamp_epoch": "1634915852.418576000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-47a30b195460bf528ec88d54", "kind": "identity", "frame_number": 56470, "timestamp_epoch": "1634915852.433957000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1036, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2a5d6ea02c93817f7ce0ede7", "kind": "identity", "frame_number": 56471, "timestamp_epoch": "1634915852.436340000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1036, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8f2b9b66bfaeca5dbc9003fa", "kind": "identity", "frame_number": 56472, "timestamp_epoch": "1634915852.437817000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1036, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-c4ed1e213ffa248cfe079cff", "kind": "identity", "frame_number": 56488, "timestamp_epoch": "1634915852.463615000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ab61660a89620be65b91008c", "kind": "identity", "frame_number": 56489, "timestamp_epoch": "1634915852.463926000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-213d8121bd43b31529463e6e", "kind": "identity", "frame_number": 56490, "timestamp_epoch": "1634915852.464339000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-fed6866c75d25f0984d970db", "kind": "identity", "frame_number": 56491, "timestamp_epoch": "1634915852.465563000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-ae8a425418cf1fbb53c7f21a", "kind": "identity", "frame_number": 56492, "timestamp_epoch": "1634915852.465897000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-470a909068261bb6362f5c3d", "kind": "identity", "frame_number": 56493, "timestamp_epoch": "1634915852.466347000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-817b60d4274471dff7a6ec92", "kind": "identity", "frame_number": 56514, "timestamp_epoch": "1634915852.577046000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ac7e4da25d111280d19c2497", "kind": "identity", "frame_number": 56515, "timestamp_epoch": "1634915852.577842000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9d7f1c707bef1c6ac7f5536d", "kind": "identity", "frame_number": 56516, "timestamp_epoch": "1634915852.578137000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-b241260abbf1537b17eb1936", "kind": "identity", "frame_number": 56517, "timestamp_epoch": "1634915852.578425000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f8410e17a955b097b5b86573", "kind": "identity", "frame_number": 56518, "timestamp_epoch": "1634915852.578694000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-602633e1cf942b8f58e8f8d4", "kind": "identity", "frame_number": 56529, "timestamp_epoch": "1634915852.582127000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1041, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f2640894f366915c18bab998", "kind": "identity", "frame_number": 56530, "timestamp_epoch": "1634915852.584373000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1041, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-72d46300bec945085db96dab", "kind": "identity", "frame_number": 56531, "timestamp_epoch": "1634915852.585078000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1041, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-a313631ce6d5ff544fc78143", "kind": "identity", "frame_number": 56555, "timestamp_epoch": "1634915856.796533000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ce99de5c32360edf0f9f3fe7", "kind": "identity", "frame_number": 56556, "timestamp_epoch": "1634915856.796986000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b28d555d838c2f0e2546817a", "kind": "identity", "frame_number": 56557, "timestamp_epoch": "1634915856.797604000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-6e3618479add55426697e052", "kind": "identity", "frame_number": 56558, "timestamp_epoch": "1634915856.798053000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1028, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-15db33dfbed31973afa0fbeb", "kind": "identity", "frame_number": 56581, "timestamp_epoch": "1634915862.989829000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a0cef899414613723dbbac60", "kind": "identity", "frame_number": 56582, "timestamp_epoch": "1634915862.990049000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-98e02d5d66e8b9af5ca9395d", "kind": "identity", "frame_number": 56583, "timestamp_epoch": "1634915862.990379000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f83c1ae53308d836ff4b4aef", "kind": "identity", "frame_number": 56584, "timestamp_epoch": "1634915862.990691000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-1f07233130ece48bca2b9c70", "kind": "identity", "frame_number": 56585, "timestamp_epoch": "1634915862.990759000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-e7061dbe6413c7caf6c28ccc", "kind": "identity", "frame_number": 56586, "timestamp_epoch": "1634915862.990918000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-986a8869258a54493454685c", "kind": "identity", "frame_number": 56587, "timestamp_epoch": "1634915862.991074000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1032, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-92543269e94d2013901f2c24", "kind": "identity", "frame_number": 56588, "timestamp_epoch": "1634915862.991229000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1037, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e02819de765b9e3254c4fec5", "kind": "identity", "frame_number": 56644, "timestamp_epoch": "1634915871.210109000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-af2e55503f742ef7f2794163", "kind": "identity", "frame_number": 56657, "timestamp_epoch": "1634915872.709958000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f97f4a4f0b24cf1ea2832e42", "kind": "identity", "frame_number": 56665, "timestamp_epoch": "1634915874.224844000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b977fcb26312f5503f0005d8", "kind": "identity", "frame_number": 57636, "timestamp_epoch": "1634915931.898538000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a6ff2d043ba57d2f40c63af9", "kind": "identity", "frame_number": 57656, "timestamp_epoch": "1634915933.414614000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3e55becedd80eb99562df30f", "kind": "identity", "frame_number": 57660, "timestamp_epoch": "1634915934.944872000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7c147cb9d43b8da828cd9fb4", "kind": "identity", "frame_number": 57674, "timestamp_epoch": "1634915937.145506000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-31497036d094c91793ca7767", "kind": "identity", "frame_number": 57759, "timestamp_epoch": "1634915963.581373000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2fad7f3ba60f68723d675200", "kind": "identity", "frame_number": 57761, "timestamp_epoch": "1634915965.112132000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bb94e4d51053d0c4ed45fc33", "kind": "identity", "frame_number": 57766, "timestamp_epoch": "1634915966.675958000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-22a079ddb2e6e526d05e6a99", "kind": "identity", "frame_number": 58079, "timestamp_epoch": "1634915991.228086000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d12708c1b100b701316bdcc2", "kind": "identity", "frame_number": 58107, "timestamp_epoch": "1634915992.727938000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d1409ce44134872205b695eb", "kind": "identity", "frame_number": 58128, "timestamp_epoch": "1634915994.245491000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b2eea16fb02f23695e1d2f00", "kind": "identity", "frame_number": 58178, "timestamp_epoch": "1634916002.833439000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-baf67d62d8d147827d457848", "kind": "identity", "frame_number": 58514, "timestamp_epoch": "1634916033.908529000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-cba0b97e42724963f92da70b", "kind": "identity", "frame_number": 58684, "timestamp_epoch": "1634916051.918739000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1ef62e2b210828e9268b0fcd", "kind": "identity", "frame_number": 58687, "timestamp_epoch": "1634916053.448552000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-673df464b1dfcdfecfaf31a5", "kind": "identity", "frame_number": 58696, "timestamp_epoch": "1634916054.979240000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a3f0610d3ed1a4f7ad844828", "kind": "identity", "frame_number": 58700, "timestamp_epoch": "1634916055.558121000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-0232fdfea4b05d83726bb97e", "kind": "identity", "frame_number": 58701, "timestamp_epoch": "1634916055.558617000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a6585e3171078715c8b2b658", "kind": "identity", "frame_number": 59266, "timestamp_epoch": "1634916083.584598000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b0f12b11a26b3cfe7647e39c", "kind": "identity", "frame_number": 59295, "timestamp_epoch": "1634916085.179078000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f911e8a4f3e4c2b4b74fbd7b", "kind": "identity", "frame_number": 59309, "timestamp_epoch": "1634916086.709668000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-72d1689ad431c0086c0ebff1", "kind": "identity", "frame_number": 59469, "timestamp_epoch": "1634916111.231706000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b896d6091b6041b4b32a28df", "kind": "identity", "frame_number": 59473, "timestamp_epoch": "1634916112.778630000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fbcbcf9704d46e34e91b9548", "kind": "identity", "frame_number": 59477, "timestamp_epoch": "1634916114.293916000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-aa5016117fc58f1b25a61275", "kind": "identity", "frame_number": 59487, "timestamp_epoch": "1634916115.230349000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f0984c3c53938628d8d20986", "kind": "identity", "frame_number": 59488, "timestamp_epoch": "1634916115.230750000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9c63565e89fc521e53635596", "kind": "identity", "frame_number": 59745, "timestamp_epoch": "1634916145.711653000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3c5b4f6c403f4385e7895412", "kind": "identity", "frame_number": 59746, "timestamp_epoch": "1634916145.712252000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d337c1d64057db74ef530bee", "kind": "identity", "frame_number": 59913, "timestamp_epoch": "1634916153.384539000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-38f21c376b792c71cc54ffc6", "kind": "identity", "frame_number": 59915, "timestamp_epoch": "1634916153.385287000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-564a7c63069484bc527c09fb", "kind": "identity", "frame_number": 59916, "timestamp_epoch": "1634916153.385751000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "15" } }, { "event_id": "evt-927f0d32c0234f7e9fca0670", "kind": "identity", "frame_number": 59940, "timestamp_epoch": "1634916153.396019000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-876823a2bd328a23bf440686", "kind": "identity", "frame_number": 59942, "timestamp_epoch": "1634916153.396771000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-7d8cbc8ef0c9dbad9072410c", "kind": "identity", "frame_number": 59953, "timestamp_epoch": "1634916153.402217000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-f141940e0488d3e548d57ff6", "kind": "identity", "frame_number": 59955, "timestamp_epoch": "1634916153.403064000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-75503a40c11ed181a44aca06", "kind": "identity", "frame_number": 60349, "timestamp_epoch": "1634916171.950307000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-25adefda44bb712afe17e003", "kind": "identity", "frame_number": 60352, "timestamp_epoch": "1634916173.452026000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5fefe1a233b525b04e2974ab", "kind": "identity", "frame_number": 60369, "timestamp_epoch": "1634916174.998330000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dc335e7ddaa2ce754572f2d6", "kind": "identity", "frame_number": 60508, "timestamp_epoch": "1634916203.616848000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-82e3b1a945bac0675e01a26c", "kind": "identity", "frame_number": 60530, "timestamp_epoch": "1634916205.211081000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cad6741b2c4588157936faf1", "kind": "identity", "frame_number": 60563, "timestamp_epoch": "1634916206.712840000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a911d7ce42b548f618635dff", "kind": "identity", "frame_number": 60695, "timestamp_epoch": "1634916231.250923000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c1569111259f43cb89d4a1e4", "kind": "identity", "frame_number": 60706, "timestamp_epoch": "1634916232.781032000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ab41b66a6ed217029c3ca25c", "kind": "identity", "frame_number": 60710, "timestamp_epoch": "1634916234.281032000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b4127fedde492ca7cc208548", "kind": "identity", "frame_number": 61139, "timestamp_epoch": "1634916291.955364000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-87eb2e3b191cd76fc29c0720", "kind": "identity", "frame_number": 61153, "timestamp_epoch": "1634916293.455200000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-56f24ff62e4c595c2840aac2", "kind": "identity", "frame_number": 61155, "timestamp_epoch": "1634916294.956127000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e37de0e47ca8a54fc1596a6f", "kind": "identity", "frame_number": 61617, "timestamp_epoch": "1634916323.622189000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-85807d36b6f03f4f37afa039", "kind": "identity", "frame_number": 61620, "timestamp_epoch": "1634916325.231416000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-374438874fdce2b7062f62dd", "kind": "identity", "frame_number": 61626, "timestamp_epoch": "1634916326.745932000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a89a5f73f385966559262655", "kind": "identity", "frame_number": 62011, "timestamp_epoch": "1634916351.268812000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c319b69685275c308291ac49", "kind": "identity", "frame_number": 62016, "timestamp_epoch": "1634916352.785724000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-654871ef00b5a984e65d84bb", "kind": "identity", "frame_number": 62023, "timestamp_epoch": "1634916354.299688000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1a0bb2722d497f653ad6d931", "kind": "identity", "frame_number": 62100, "timestamp_epoch": "1634916360.363367000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-aa2f49f8e7440b4f2680e724", "kind": "identity", "frame_number": 62102, "timestamp_epoch": "1634916360.364143000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-0cddd37f3d29f104ead8a0e8", "kind": "identity", "frame_number": 62103, "timestamp_epoch": "1634916360.364545000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "15" } }, { "event_id": "evt-3f537d30c2128a48442582da", "kind": "identity", "frame_number": 62127, "timestamp_epoch": "1634916360.374681000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-c8f11e7d6b337c65a45ce6ae", "kind": "identity", "frame_number": 62129, "timestamp_epoch": "1634916360.375421000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-79511e11946f8b939622acbe", "kind": "identity", "frame_number": 62140, "timestamp_epoch": "1634916360.380677000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-76b880dd0a62c6bd06808782", "kind": "identity", "frame_number": 62142, "timestamp_epoch": "1634916360.381440000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-21a4cf6fdf4175fc749c5d94", "kind": "identity", "frame_number": 64315, "timestamp_epoch": "1634916411.973912000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-85a67d6f3da1b176838b311a", "kind": "identity", "frame_number": 64318, "timestamp_epoch": "1634916413.473934000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-16006bf902bd4ff8c70774fc", "kind": "identity", "frame_number": 64322, "timestamp_epoch": "1634916415.005265000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0ea30c61bbf370feafe1859d", "kind": "identity", "frame_number": 64374, "timestamp_epoch": "1634916443.625362000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-130e7f8b1587b02ee3a55ae2", "kind": "identity", "frame_number": 64378, "timestamp_epoch": "1634916445.248248000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dffd8602ecb1eea7aab4e070", "kind": "identity", "frame_number": 64381, "timestamp_epoch": "1634916446.795468000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d1968e848152f83904844abd", "kind": "identity", "frame_number": 64564, "timestamp_epoch": "1634916471.288556000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f13c2794e058ba163530691c", "kind": "identity", "frame_number": 64574, "timestamp_epoch": "1634916472.788438000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e3bebb270cee0c42643f9d7a", "kind": "identity", "frame_number": 64606, "timestamp_epoch": "1634916474.333731000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f655a87902307a9705d4e065", "kind": "identity", "frame_number": 65035, "timestamp_epoch": "1634916531.977307000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c87ab3f55250c919d51b5125", "kind": "identity", "frame_number": 65040, "timestamp_epoch": "1634916533.491594000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1d2c0fabab9ab9524063450a", "kind": "identity", "frame_number": 65042, "timestamp_epoch": "1634916535.007975000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3fbe3ef99fb16d5f6b778462", "kind": "identity", "frame_number": 65335, "timestamp_epoch": "1634916563.658610000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-70dbf3a797ef4643a515347c", "kind": "identity", "frame_number": 65361, "timestamp_epoch": "1634916565.173378000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a0f7438185a1ce6537a21612", "kind": "identity", "frame_number": 65367, "timestamp_epoch": "1634916566.722243000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-da8c94745c1ab6b4d8839ff2", "kind": "identity", "frame_number": 65440, "timestamp_epoch": "1634916591.313267000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b9844d0ef9199b2fdcb4765d", "kind": "identity", "frame_number": 65456, "timestamp_epoch": "1634916592.840525000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6146eddf96143854ec43f974", "kind": "identity", "frame_number": 65465, "timestamp_epoch": "1634916594.353372000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3fe65bcd4ffb02310611d78e", "kind": "identity", "frame_number": 65576, "timestamp_epoch": "1634916650.249742000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c49580e5c6deb2d284824c1a", "kind": "identity", "frame_number": 65577, "timestamp_epoch": "1634916650.250091000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9ead5cd7037f80de74ef5051", "kind": "identity", "frame_number": 65578, "timestamp_epoch": "1634916650.250457000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cb877a07ff29a25f13f774e6", "kind": "identity", "frame_number": 65579, "timestamp_epoch": "1634916650.252009000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a674877202013f4b3bf362f9", "kind": "identity", "frame_number": 65580, "timestamp_epoch": "1634916650.252359000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a8490597b3cc64fe3389c0ae", "kind": "identity", "frame_number": 65581, "timestamp_epoch": "1634916650.252976000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-9aa8cb65d63904e3f6a17364", "kind": "identity", "frame_number": 65582, "timestamp_epoch": "1634916650.254040000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a6dd09f08693618dad501040", "kind": "identity", "frame_number": 65583, "timestamp_epoch": "1634916650.254683000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a24f7d5e88b1998e789273e7", "kind": "identity", "frame_number": 65584, "timestamp_epoch": "1634916650.254888000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ceef89950f7624d558c550a6", "kind": "identity", "frame_number": 65585, "timestamp_epoch": "1634916650.255123000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b95786dce462f5f808cd27d7", "kind": "identity", "frame_number": 65586, "timestamp_epoch": "1634916650.255310000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-820eedb59b9455a534cb616a", "kind": "identity", "frame_number": 65597, "timestamp_epoch": "1634916650.258545000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1286, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8d22f96518e41d6964439349", "kind": "identity", "frame_number": 65598, "timestamp_epoch": "1634916650.260755000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1286, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-5661920c2e5a4c1a51558d42", "kind": "identity", "frame_number": 65599, "timestamp_epoch": "1634916650.261430000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1286, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "ntlmssp.auth.domain": "ENEMYWATCH", "ntlmssp.auth.hostname": "DESKTOP-CFA3367", "ntlmssp.auth.username": "agnes.warren" } }, { "event_id": "evt-8e955cac5f128506eb81fb84", "kind": "identity", "frame_number": 65612, "timestamp_epoch": "1634916651.215530000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c2d145f8e88586dc5cf6036d", "kind": "identity", "frame_number": 65619, "timestamp_epoch": "1634916651.225386000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-012d60895d3f91e69e20db1e", "kind": "identity", "frame_number": 65620, "timestamp_epoch": "1634916651.225574000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7e06d01ddc529fc0a8b31756", "kind": "identity", "frame_number": 65621, "timestamp_epoch": "1634916651.225807000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 832, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6b47df26d8270ec66747de33", "kind": "identity", "frame_number": 65626, "timestamp_epoch": "1634916651.945417000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6dee63f7a6aa3b740e1f5017", "kind": "identity", "frame_number": 65634, "timestamp_epoch": "1634916652.725190000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9bd9bedca4d275cb8f7def58", "kind": "identity", "frame_number": 65644, "timestamp_epoch": "1634916653.475260000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e3db1737f46520f4f8c8a075", "kind": "identity", "frame_number": 65651, "timestamp_epoch": "1634916654.226023000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-70861a81523868cd27df3613", "kind": "identity", "frame_number": 65657, "timestamp_epoch": "1634916654.976294000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b4d69da0bd9240a5bd8e82ac", "kind": "identity", "frame_number": 65664, "timestamp_epoch": "1634916655.030186000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-11ee7b3c6edb939153230fa0", "kind": "identity", "frame_number": 65665, "timestamp_epoch": "1634916655.030475000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-3771b776b09627b5dedec9be", "kind": "identity", "frame_number": 65666, "timestamp_epoch": "1634916655.030948000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aec7f7009a368409c632209e", "kind": "identity", "frame_number": 65669, "timestamp_epoch": "1634916655.032185000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-58a87813bfa17540c16edcdd", "kind": "identity", "frame_number": 65671, "timestamp_epoch": "1634916655.033122000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-69b033658c1bdb331baa43f0", "kind": "identity", "frame_number": 65672, "timestamp_epoch": "1634916655.033661000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-3ca595e8cde1f5e8c3cc1926", "kind": "identity", "frame_number": 65673, "timestamp_epoch": "1634916655.033897000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7ee58029f193e1b4fd1f46e9", "kind": "identity", "frame_number": 65674, "timestamp_epoch": "1634916655.034198000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6a88607993b8cc8eb3845674", "kind": "identity", "frame_number": 65675, "timestamp_epoch": "1634916655.034368000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d2ab9cc769b3d74551ab654c", "kind": "identity", "frame_number": 65676, "timestamp_epoch": "1634916655.034395000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-00e368a774a4990e29609899", "kind": "identity", "frame_number": 65677, "timestamp_epoch": "1634916655.034631000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-baa710af850daa77a35f7f7c", "kind": "identity", "frame_number": 65680, "timestamp_epoch": "1634916655.249936000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-7a82b9f2cdb30554c83c5d7f", "kind": "identity", "frame_number": 65683, "timestamp_epoch": "1634916655.929509000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-1edc645d5c0b9b98d74524e9", "kind": "identity", "frame_number": 65684, "timestamp_epoch": "1634916655.929672000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5242b841e28b1a7af3b61984", "kind": "identity", "frame_number": 65685, "timestamp_epoch": "1634916655.930038000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-42bd138f11836a4782aa4cf2", "kind": "identity", "frame_number": 65686, "timestamp_epoch": "1634916655.930180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b6b3ec90e848d106fd6ad291", "kind": "identity", "frame_number": 65746, "timestamp_epoch": "1634916660.975537000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8259a7ada3bfece67ac13213", "kind": "identity", "frame_number": 65747, "timestamp_epoch": "1634916660.976083000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e3aa6d68034476ad2d11912f", "kind": "identity", "frame_number": 65748, "timestamp_epoch": "1634916660.976532000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-738c01f036abb8c7dae0b2dd", "kind": "identity", "frame_number": 65749, "timestamp_epoch": "1634916660.976813000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1284, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fd37fbdae53a61b339dd830e", "kind": "identity", "frame_number": 65811, "timestamp_epoch": "1634916665.804924000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-351576e9c7a9205e7b45dd92", "kind": "identity", "frame_number": 65812, "timestamp_epoch": "1634916665.805508000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2a58a76a4faa43e0acba72d2", "kind": "identity", "frame_number": 65813, "timestamp_epoch": "1634916665.806064000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-e8ed917aea91f0328940e585", "kind": "identity", "frame_number": 65814, "timestamp_epoch": "1634916665.806635000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1289, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fd4edaebbf3b5f460cc4b09d", "kind": "identity", "frame_number": 66006, "timestamp_epoch": "1634916683.642222000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-76373a983550a32001b65fd5", "kind": "identity", "frame_number": 66022, "timestamp_epoch": "1634916685.158474000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bb5a84b41ff80e4d6e836767", "kind": "identity", "frame_number": 66043, "timestamp_epoch": "1634916686.689869000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-873bb5caf56a4b66aff0e1ff", "kind": "identity", "frame_number": 66220, "timestamp_epoch": "1634916711.888551000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ff90f77db83c209cf594a98c", "kind": "identity", "frame_number": 66227, "timestamp_epoch": "1634916711.898423000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-11181644d8433539a9f0d55b", "kind": "identity", "frame_number": 66228, "timestamp_epoch": "1634916711.898604000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-641ba3b7cd2e9abd4b51d209", "kind": "identity", "frame_number": 66229, "timestamp_epoch": "1634916711.898820000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 846, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f63408c3d7bbcdf91dd21014", "kind": "identity", "frame_number": 66239, "timestamp_epoch": "1634916713.399726000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-230e4f040c2dfe70257ebd82", "kind": "identity", "frame_number": 66247, "timestamp_epoch": "1634916714.930547000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-39ff0acfac851b87fa7e3490", "kind": "identity", "frame_number": 66254, "timestamp_epoch": "1634916715.109011000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fb8fb2e8e5bd2788c9682d21", "kind": "identity", "frame_number": 66255, "timestamp_epoch": "1634916715.109218000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2145200a75e70ccc24f2fc0c", "kind": "identity", "frame_number": 66256, "timestamp_epoch": "1634916715.109569000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-717eb655748ae7e4d84a35a8", "kind": "identity", "frame_number": 66259, "timestamp_epoch": "1634916715.110610000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-a78115fc53c049ffeedd2abb", "kind": "identity", "frame_number": 66261, "timestamp_epoch": "1634916715.111515000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-63797d2b20e2a7072e18a02f", "kind": "identity", "frame_number": 66262, "timestamp_epoch": "1634916715.112029000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-a9a141e5904ec8a98146d58e", "kind": "identity", "frame_number": 66263, "timestamp_epoch": "1634916715.112271000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e1f85073afdb2b93283668f4", "kind": "identity", "frame_number": 66264, "timestamp_epoch": "1634916715.112535000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-79bc78383d91a3d4f4a06cf1", "kind": "identity", "frame_number": 66265, "timestamp_epoch": "1634916715.112716000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4f8756b1ead87c2cdc70cfaa", "kind": "identity", "frame_number": 66266, "timestamp_epoch": "1634916715.112724000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f5476f613ebca008c6f06967", "kind": "identity", "frame_number": 66267, "timestamp_epoch": "1634916715.113024000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cce76ebcc409fe955a7bf759", "kind": "identity", "frame_number": 66272, "timestamp_epoch": "1634916715.586251000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-534850f9eb24fe817b5bb8c9", "kind": "identity", "frame_number": 66273, "timestamp_epoch": "1634916715.586356000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-8454d9f34963dda24bb156cd", "kind": "identity", "frame_number": 66274, "timestamp_epoch": "1634916715.586742000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-543c3176206fc4123c6b0902", "kind": "identity", "frame_number": 66275, "timestamp_epoch": "1634916715.586803000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-e60f7df64442909d3ab96fed", "kind": "identity", "frame_number": 66311, "timestamp_epoch": "1634916725.051928000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-5d4a13bb4a8cbdb5a81fa2c1", "kind": "identity", "frame_number": 66313, "timestamp_epoch": "1634916725.866727000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-d8a0f4631065a9f74b183d95", "kind": "identity", "frame_number": 66314, "timestamp_epoch": "1634916725.867273000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8733dac8626eeabe1728cc22", "kind": "identity", "frame_number": 66315, "timestamp_epoch": "1634916725.867706000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-c3a1071afd04810baeda65d6", "kind": "identity", "frame_number": 66316, "timestamp_epoch": "1634916725.867978000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1309, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2af67141bb76d0e8e5613446", "kind": "identity", "frame_number": 66377, "timestamp_epoch": "1634916743.586602000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-24dad9a7e060f21b5102c71b", "kind": "identity", "frame_number": 66385, "timestamp_epoch": "1634916743.599316000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-59ddf283f4d6fb9bc88a4fea", "kind": "identity", "frame_number": 66387, "timestamp_epoch": "1634916743.599556000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-1bb437b442d3f49f1ff4c0d3", "kind": "identity", "frame_number": 66388, "timestamp_epoch": "1634916743.599773000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 857, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-4be71a721d5db7c70e6ce234", "kind": "identity", "frame_number": 66400, "timestamp_epoch": "1634916745.126962000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bd8e9c2c49706d86bf656c08", "kind": "identity", "frame_number": 66412, "timestamp_epoch": "1634916746.010765000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3c6c03ab042d41fa78721174", "kind": "identity", "frame_number": 66413, "timestamp_epoch": "1634916746.011048000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9b157bb9c80219213ce632a3", "kind": "identity", "frame_number": 66414, "timestamp_epoch": "1634916746.011465000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-45aa043c22f4c6281d4db112", "kind": "identity", "frame_number": 66417, "timestamp_epoch": "1634916746.012998000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-72152f50fa2e1b38014ca963", "kind": "identity", "frame_number": 66419, "timestamp_epoch": "1634916746.013896000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-bb1b322494b74c4afa239ab2", "kind": "identity", "frame_number": 66420, "timestamp_epoch": "1634916746.014556000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c4798e26a3f6cfec5536520a", "kind": "identity", "frame_number": 66421, "timestamp_epoch": "1634916746.014800000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c4cdfa7b883f0ce06219f7f0", "kind": "identity", "frame_number": 66422, "timestamp_epoch": "1634916746.015110000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7ef71c8822015ce3f56fa113", "kind": "identity", "frame_number": 66423, "timestamp_epoch": "1634916746.015272000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-115f4d8f5fb67aac9ba4f337", "kind": "identity", "frame_number": 66424, "timestamp_epoch": "1634916746.015286000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-eb3af45307cda9a57c3f4a11", "kind": "identity", "frame_number": 66425, "timestamp_epoch": "1634916746.015539000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-439b23cf687534261fe50676", "kind": "identity", "frame_number": 66427, "timestamp_epoch": "1634916746.065886000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-bf6db723c0fbeadfecac18b0", "kind": "identity", "frame_number": 66428, "timestamp_epoch": "1634916746.066171000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d32a81c38ca96288e0386801", "kind": "identity", "frame_number": 66429, "timestamp_epoch": "1634916746.066507000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8a5449a9dc1031ccd4786860", "kind": "identity", "frame_number": 66430, "timestamp_epoch": "1634916746.066628000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-74bb646fd8249385c79dba06", "kind": "identity", "frame_number": 66437, "timestamp_epoch": "1634916746.643553000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d20f84fd1808fa5ad491fee0", "kind": "identity", "frame_number": 66470, "timestamp_epoch": "1634916754.765830000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-76d2c3b3a458f7b8b3c50c28", "kind": "identity", "frame_number": 66474, "timestamp_epoch": "1634916756.784964000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-99b4026a4e1eaff095cc555d", "kind": "identity", "frame_number": 66475, "timestamp_epoch": "1634916756.785443000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-119f62e1177e1a367dcac289", "kind": "identity", "frame_number": 66476, "timestamp_epoch": "1634916756.786011000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-ca9159891031c6cba1461158", "kind": "identity", "frame_number": 66477, "timestamp_epoch": "1634916756.786588000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1317, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-aaa201d2881853bec7cdc81c", "kind": "identity", "frame_number": 66533, "timestamp_epoch": "1634916767.417168000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "*<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>" } }, { "event_id": "evt-7e80b07be0c65998c0d51a63", "kind": "identity", "frame_number": 66534, "timestamp_epoch": "1634916768.931836000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "*<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>" } }, { "event_id": "evt-cb278f6d52544d1acb3838d2", "kind": "identity", "frame_number": 66543, "timestamp_epoch": "1634916770.571304000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "0", "nbns.flags.response": "False", "nbns.name": "*<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>" } }, { "event_id": "evt-01205ddbca4fe2fdee9396ff", "kind": "identity", "frame_number": 66545, "timestamp_epoch": "1634916771.212695000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f4ff07f93f38dffc27216808", "kind": "identity", "frame_number": 66550, "timestamp_epoch": "1634916772.743967000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a9f1f105dedd8ba26fb05726", "kind": "identity", "frame_number": 66558, "timestamp_epoch": "1634916774.275741000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c1cfddb2af5d7911cf28f517", "kind": "identity", "frame_number": 67863, "timestamp_epoch": "1634916831.886104000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a32f65929b6ebbd202294750", "kind": "identity", "frame_number": 67869, "timestamp_epoch": "1634916833.400504000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cb1caf2c3d326917e368a46e", "kind": "identity", "frame_number": 67870, "timestamp_epoch": "1634916834.933463000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bc8d6d5d5f0e957acc2333b1", "kind": "identity", "frame_number": 67971, "timestamp_epoch": "1634916863.583504000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b62cd86f09012ac688e734e3", "kind": "identity", "frame_number": 67972, "timestamp_epoch": "1634916865.099336000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7a94e2d18627d8bcbd6bc361", "kind": "identity", "frame_number": 67982, "timestamp_epoch": "1634916866.694273000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d2cbad85a934a56b45ba99c1", "kind": "identity", "frame_number": 68053, "timestamp_epoch": "1634916891.232252000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2aceaf84eae9b3b7bd817c38", "kind": "identity", "frame_number": 68054, "timestamp_epoch": "1634916892.778404000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a34739e4526ca8d1a6629cc4", "kind": "identity", "frame_number": 68063, "timestamp_epoch": "1634916894.309995000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3e78f8cb88149ac1e04ddf3a", "kind": "identity", "frame_number": 68307, "timestamp_epoch": "1634916951.889253000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a24856981b227251f43ba13d", "kind": "identity", "frame_number": 68308, "timestamp_epoch": "1634916953.420357000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-43375c563c30389038fc6316", "kind": "identity", "frame_number": 68317, "timestamp_epoch": "1634916954.966527000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-34d62c6b9283cc4111ab26e1", "kind": "identity", "frame_number": 68426, "timestamp_epoch": "1634916983.601823000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b2230ce19e04123e0d3f0432", "kind": "identity", "frame_number": 68428, "timestamp_epoch": "1634916985.148621000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b80a0540e5cbef83d960544f", "kind": "identity", "frame_number": 68436, "timestamp_epoch": "1634916986.697250000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-90de652a80177939f5230f21", "kind": "identity", "frame_number": 68480, "timestamp_epoch": "1634917011.249867000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a42ddc55d442eb3f13ef4bb0", "kind": "identity", "frame_number": 68492, "timestamp_epoch": "1634917012.765736000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bd70c223df6c4819462c5cb2", "kind": "identity", "frame_number": 68520, "timestamp_epoch": "1634917014.281140000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3afe57de5f100b076b686967", "kind": "identity", "frame_number": 68927, "timestamp_epoch": "1634917071.908037000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cbf49b727d4e027ae4f90bf6", "kind": "identity", "frame_number": 68934, "timestamp_epoch": "1634917073.423333000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d5c9fa6bdedf6d4790dcaa39", "kind": "identity", "frame_number": 68935, "timestamp_epoch": "1634917074.939387000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0573602451ed6c4d59d9eec5", "kind": "identity", "frame_number": 69184, "timestamp_epoch": "1634917103.606261000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4c5db09406b2e89f148a7692", "kind": "identity", "frame_number": 69185, "timestamp_epoch": "1634917105.152380000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a3d3cfa66658faa7b79caa9e", "kind": "identity", "frame_number": 69188, "timestamp_epoch": "1634917106.652495000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9b6b110375f2383d39f7ec9d", "kind": "identity", "frame_number": 69427, "timestamp_epoch": "1634917131.269170000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9573fb5d7244681f8fb4d1b5", "kind": "identity", "frame_number": 69428, "timestamp_epoch": "1634917132.800918000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-56b73fd418899cf588087b25", "kind": "identity", "frame_number": 69437, "timestamp_epoch": "1634917134.315768000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7523a8c48e7d9e47ea0b5501", "kind": "identity", "frame_number": 69749, "timestamp_epoch": "1634917191.911859000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3b05b391df10e75b5457bacd", "kind": "identity", "frame_number": 69786, "timestamp_epoch": "1634917193.426297000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bf7557d00b11fab1a381836d", "kind": "identity", "frame_number": 69801, "timestamp_epoch": "1634917194.942479000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ff55a362bda478b16d18e5d1", "kind": "identity", "frame_number": 70139, "timestamp_epoch": "1634917223.623553000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6880088abf8e56f3e1158d55", "kind": "identity", "frame_number": 70190, "timestamp_epoch": "1634917225.123867000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7ad28d7a29bd1ba403abee90", "kind": "identity", "frame_number": 70258, "timestamp_epoch": "1634917226.703005000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3a6197e9e2cce8f3e5540ebe", "kind": "identity", "frame_number": 70638, "timestamp_epoch": "1634917251.272029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-6a8fa1b895a324c2fe68d951", "kind": "identity", "frame_number": 70654, "timestamp_epoch": "1634917252.773344000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-94765c3aebee6abce1f43acd", "kind": "identity", "frame_number": 70681, "timestamp_epoch": "1634917254.318672000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ce3d9cfb661a48b2a4c4542c", "kind": "identity", "frame_number": 70698, "timestamp_epoch": "1634917256.349599000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-ef1f8af62c2a3e89822fe57f", "kind": "identity", "frame_number": 70699, "timestamp_epoch": "1634917256.350126000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4e099dfd0350ce930081e5e8", "kind": "identity", "frame_number": 71391, "timestamp_epoch": "1634917311.929573000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ee822dc55b59b7f96c54fff3", "kind": "identity", "frame_number": 71405, "timestamp_epoch": "1634917313.429550000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8141ca609bb6a95a108ea51d", "kind": "identity", "frame_number": 71410, "timestamp_epoch": "1634917314.945462000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7ff885aa0db391c9f65cf6ed", "kind": "identity", "frame_number": 71413, "timestamp_epoch": "1634917315.976023000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b43af2074641eda9669e5c9b", "kind": "identity", "frame_number": 71414, "timestamp_epoch": "1634917315.976581000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-af5e47582938b7c14556ae68", "kind": "identity", "frame_number": 71936, "timestamp_epoch": "1634917343.642570000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2838a5b3532aa0facbdcb7ac", "kind": "identity", "frame_number": 71937, "timestamp_epoch": "1634917345.189265000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2c0af08e0cff1b9ae8d20e68", "kind": "identity", "frame_number": 71942, "timestamp_epoch": "1634917346.425888000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f8ddcacba8e35405cfb37bd5", "kind": "identity", "frame_number": 71943, "timestamp_epoch": "1634917346.426472000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-91c27e706b5351e8fd393fe3", "kind": "identity", "frame_number": 71948, "timestamp_epoch": "1634917346.705941000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-59c5564359ce996ad3812d85", "kind": "identity", "frame_number": 72008, "timestamp_epoch": "1634917371.275951000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e1b4631da92eb8abee2a71dd", "kind": "identity", "frame_number": 72016, "timestamp_epoch": "1634917372.285572000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-873b2b71c149c0bdaead1829", "kind": "identity", "frame_number": 72023, "timestamp_epoch": "1634917372.806965000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-68293605d52d76fc8e478742", "kind": "identity", "frame_number": 72049, "timestamp_epoch": "1634917374.336882000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-09f7c5bc3c1a15341fe00644", "kind": "identity", "frame_number": 73606, "timestamp_epoch": "1634917431.948622000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f81ec17121929f2777ce2db0", "kind": "identity", "frame_number": 73638, "timestamp_epoch": "1634917433.463439000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-055a8260c3043892afcfa929", "kind": "identity", "frame_number": 73690, "timestamp_epoch": "1634917434.963718000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-123b94f690b5dfd7a52dbd19", "kind": "identity", "frame_number": 74394, "timestamp_epoch": "1634917445.571506000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0af00c743bff45039e62e084", "kind": "identity", "frame_number": 74572, "timestamp_epoch": "1634917463.661009000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-331de8e90d2e4efcb43d8f83", "kind": "identity", "frame_number": 74604, "timestamp_epoch": "1634917465.178586000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e2d520b42496a0721dd7387a", "kind": "identity", "frame_number": 74624, "timestamp_epoch": "1634917466.709174000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-c3fbc85926c7600f1265e4a5", "kind": "identity", "frame_number": 74720, "timestamp_epoch": "1634917475.658843000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-9280d2ace4d6bac32c9cc6d7", "kind": "identity", "frame_number": 74962, "timestamp_epoch": "1634917491.279389000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e72f2cbe625917fe725605ef", "kind": "identity", "frame_number": 75022, "timestamp_epoch": "1634917492.808973000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-95533ea64e8c7872d3f12190", "kind": "identity", "frame_number": 75023, "timestamp_epoch": "1634917494.308952000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-410f549422e362b4694163f7", "kind": "identity", "frame_number": 75247, "timestamp_epoch": "1634917551.255028000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4e7f82a78174a0ddc05acb12", "kind": "identity", "frame_number": 75253, "timestamp_epoch": "1634917551.265441000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-71e379ea8f5d0a7391ea2307", "kind": "identity", "frame_number": 75255, "timestamp_epoch": "1634917551.265872000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-75522cf212fc0fa1dc3c40b9", "kind": "identity", "frame_number": 75262, "timestamp_epoch": "1634917551.952090000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d004ea898c5bcd55dc2538d0", "kind": "identity", "frame_number": 75288, "timestamp_epoch": "1634917552.779166000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bf859b7ba91f566bd5a4e672", "kind": "identity", "frame_number": 75306, "timestamp_epoch": "1634917553.497113000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b7bc92564fc45648bfac3e17", "kind": "identity", "frame_number": 75332, "timestamp_epoch": "1634917554.280732000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-42517a4cddd3ac467561c91c", "kind": "identity", "frame_number": 75585, "timestamp_epoch": "1634917555.012954000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-799ee57d15384378ed07ec54", "kind": "identity", "frame_number": 75604, "timestamp_epoch": "1634917555.049696000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7cbde9ca86cbc8411b42e612", "kind": "identity", "frame_number": 75605, "timestamp_epoch": "1634917555.049953000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c2a165717cd232699b6f15d8", "kind": "identity", "frame_number": 75606, "timestamp_epoch": "1634917555.050271000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c2febaebc242d75a4b1bccbb", "kind": "identity", "frame_number": 75609, "timestamp_epoch": "1634917555.051363000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-d37766276eb5c956b20a44fa", "kind": "identity", "frame_number": 75611, "timestamp_epoch": "1634917555.052219000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-77b4ce0daf905a24b5721861", "kind": "identity", "frame_number": 75612, "timestamp_epoch": "1634917555.052748000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-86c5c6fbcf20f774aade0df5", "kind": "identity", "frame_number": 75613, "timestamp_epoch": "1634917555.053021000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c5979cb31df71ba2d33c9da6", "kind": "identity", "frame_number": 75614, "timestamp_epoch": "1634917555.053253000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-338b706e9cc8860e64bdd51f", "kind": "identity", "frame_number": 75615, "timestamp_epoch": "1634917555.053397000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5c04cc13669ebb006315ad7d", "kind": "identity", "frame_number": 75616, "timestamp_epoch": "1634917555.053456000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a9ec8ed793e26273d57207ad", "kind": "identity", "frame_number": 75617, "timestamp_epoch": "1634917555.053738000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-fcbaf5c4581f3a61c98768d1", "kind": "identity", "frame_number": 76220, "timestamp_epoch": "1634917565.779919000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-6020f3efd97ccac69502f13e", "kind": "identity", "frame_number": 76221, "timestamp_epoch": "1634917565.780385000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-612c83b694faa48f5c0e7b48", "kind": "identity", "frame_number": 76222, "timestamp_epoch": "1634917565.780764000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5989349590f74331105418fb", "kind": "identity", "frame_number": 76223, "timestamp_epoch": "1634917565.781084000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1513, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7f22b06cb93e28642908bb57", "kind": "identity", "frame_number": 76285, "timestamp_epoch": "1634917583.664756000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-639dee27e9c04211432f170d", "kind": "identity", "frame_number": 76286, "timestamp_epoch": "1634917585.164571000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-74244c3a26021d528465dbc3", "kind": "identity", "frame_number": 76289, "timestamp_epoch": "1634917586.710969000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d7aca0901f59764fa39b1f6e", "kind": "identity", "frame_number": 76358, "timestamp_epoch": "1634917611.940890000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2054f54a7cd807ab9933c265", "kind": "identity", "frame_number": 76364, "timestamp_epoch": "1634917611.951100000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-00d768358ce09df7d8f2012a", "kind": "identity", "frame_number": 76365, "timestamp_epoch": "1634917611.951379000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7b32cc9983ce38b8400e673a", "kind": "identity", "frame_number": 76367, "timestamp_epoch": "1634917611.951587000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 996, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b92f2a837b3a7e433084bc4a", "kind": "identity", "frame_number": 76373, "timestamp_epoch": "1634917613.499653000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d2b48a79464451823fcd68f8", "kind": "identity", "frame_number": 76380, "timestamp_epoch": "1634917615.014681000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1f834706fb5d6db68edb6739", "kind": "identity", "frame_number": 76385, "timestamp_epoch": "1634917615.130740000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f8023213c706cb654b371885", "kind": "identity", "frame_number": 76386, "timestamp_epoch": "1634917615.131100000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-2c573a44f9f542578de46437", "kind": "identity", "frame_number": 76387, "timestamp_epoch": "1634917615.131478000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-de7eed2ae2f2488d04354ac7", "kind": "identity", "frame_number": 76390, "timestamp_epoch": "1634917615.132922000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-4987e475b9ea672ca9d0a829", "kind": "identity", "frame_number": 76392, "timestamp_epoch": "1634917615.133820000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-3eb264fbac52aab84f3b8211", "kind": "identity", "frame_number": 76393, "timestamp_epoch": "1634917615.134404000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-b1f96fb5f39720de63c80bf3", "kind": "identity", "frame_number": 76394, "timestamp_epoch": "1634917615.134618000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-61e01398a45dea9b7bac685b", "kind": "identity", "frame_number": 76395, "timestamp_epoch": "1634917615.134928000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-eaf9625d4665d1a01c803735", "kind": "identity", "frame_number": 76396, "timestamp_epoch": "1634917615.135081000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-05d8c359a530bf007a8d60bb", "kind": "identity", "frame_number": 76397, "timestamp_epoch": "1634917615.135148000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-944b4ec5c16dab9848af7dc0", "kind": "identity", "frame_number": 76398, "timestamp_epoch": "1634917615.135427000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c67461417471ca6d46cee48d", "kind": "identity", "frame_number": 76457, "timestamp_epoch": "1634917625.937458000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9ed30f6768d855d40cba3582", "kind": "identity", "frame_number": 76458, "timestamp_epoch": "1634917625.937950000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-697675424feac4696e50327d", "kind": "identity", "frame_number": 76459, "timestamp_epoch": "1634917625.938334000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-7dc49b28b1a7066177859fd2", "kind": "identity", "frame_number": 76460, "timestamp_epoch": "1634917625.938603000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1531, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8f053b37d13a0ac1efe07bc9", "kind": "identity", "frame_number": 76615, "timestamp_epoch": "1634917643.625581000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-670402f158f18a67ed21929c", "kind": "identity", "frame_number": 76621, "timestamp_epoch": "1634917643.637543000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e0956828449d7cad48ba8873", "kind": "identity", "frame_number": 76622, "timestamp_epoch": "1634917643.637705000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e938994a59959030562703b2", "kind": "identity", "frame_number": 76625, "timestamp_epoch": "1634917643.638226000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1004, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-78d542fdaaf2f844ed300526", "kind": "identity", "frame_number": 76639, "timestamp_epoch": "1634917645.197181000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a84a68cb606150ee3bee0637", "kind": "identity", "frame_number": 76644, "timestamp_epoch": "1634917646.050140000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-abcac5fdc10382c82821d93a", "kind": "identity", "frame_number": 76645, "timestamp_epoch": "1634917646.050454000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-e45b3d2e82ee126bc0f17635", "kind": "identity", "frame_number": 76646, "timestamp_epoch": "1634917646.050862000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b7bc8803ebe52dc427667820", "kind": "identity", "frame_number": 76649, "timestamp_epoch": "1634917646.052331000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-f931237466df97cede211009", "kind": "identity", "frame_number": 76651, "timestamp_epoch": "1634917646.053212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-d83a0adf66ae32cf5d3931f0", "kind": "identity", "frame_number": 76652, "timestamp_epoch": "1634917646.053824000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-b183ba36e366e825402c7aa6", "kind": "identity", "frame_number": 76653, "timestamp_epoch": "1634917646.054080000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-784da805d3b1fc33e1ee078e", "kind": "identity", "frame_number": 76654, "timestamp_epoch": "1634917646.054357000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-950dfc0697c86c2c2a8fa5e2", "kind": "identity", "frame_number": 76655, "timestamp_epoch": "1634917646.054476000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-07946b3b9e5ccb37f727f527", "kind": "identity", "frame_number": 76656, "timestamp_epoch": "1634917646.054566000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-dbcade9432c47068230d3d97", "kind": "identity", "frame_number": 76657, "timestamp_epoch": "1634917646.054810000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c85da42a931eddb784c55276", "kind": "identity", "frame_number": 76660, "timestamp_epoch": "1634917646.712180000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ba3df149f9e89ed09d59f737", "kind": "identity", "frame_number": 76705, "timestamp_epoch": "1634917656.806335000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3c00e88a9b5b3fcadc0bf374", "kind": "identity", "frame_number": 76706, "timestamp_epoch": "1634917656.806643000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b77b3884118c01340c836072", "kind": "identity", "frame_number": 76707, "timestamp_epoch": "1634917656.807039000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-da88ebf7cac1d174aa26fee3", "kind": "identity", "frame_number": 76708, "timestamp_epoch": "1634917656.807310000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1541, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-a20f0c0aee02a27357b3ea80", "kind": "identity", "frame_number": 76741, "timestamp_epoch": "1634917671.252612000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-deb7b75e8a1bb5ab57053293", "kind": "identity", "frame_number": 76742, "timestamp_epoch": "1634917672.783316000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-27d022d81242673deae88afd", "kind": "identity", "frame_number": 76743, "timestamp_epoch": "1634917674.297981000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-78caa5c9d6e04671181219b9", "kind": "identity", "frame_number": 77032, "timestamp_epoch": "1634917731.955143000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b3d8c7ac1e325cfec0bbcbe4", "kind": "identity", "frame_number": 77036, "timestamp_epoch": "1634917733.455450000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-11da2c3e37aa1ad5ef859103", "kind": "identity", "frame_number": 77044, "timestamp_epoch": "1634917734.971474000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f8f8d55a9bf6f918d05ee39e", "kind": "identity", "frame_number": 77091, "timestamp_epoch": "1634917763.636508000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1719c370d6c61d1f06def229", "kind": "identity", "frame_number": 77094, "timestamp_epoch": "1634917765.263324000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ac91953fbfc264685fd105c6", "kind": "identity", "frame_number": 77095, "timestamp_epoch": "1634917766.777892000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-335af3d440afadb050de18de", "kind": "identity", "frame_number": 77388, "timestamp_epoch": "1634917791.269727000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-29afd5fb16c440b80c7b03ec", "kind": "identity", "frame_number": 77922, "timestamp_epoch": "1634917792.785356000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-54a7c543d305852235e32dbd", "kind": "identity", "frame_number": 77950, "timestamp_epoch": "1634917794.300955000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ed3e7af09f2c72c13c65d8a7", "kind": "identity", "frame_number": 78223, "timestamp_epoch": "1634917851.958813000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-44f59e8b0a541ea9e73d1772", "kind": "identity", "frame_number": 78224, "timestamp_epoch": "1634917853.474337000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5b90a71811308da573479d98", "kind": "identity", "frame_number": 78225, "timestamp_epoch": "1634917854.988788000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-18a359e10b6becb29693d86f", "kind": "identity", "frame_number": 78230, "timestamp_epoch": "1634917856.771032000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-d07fe43fc6fcbcce40f60604", "kind": "identity", "frame_number": 78231, "timestamp_epoch": "1634917856.771519000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-c14b9d871c1da1d0f4566340", "kind": "identity", "frame_number": 78291, "timestamp_epoch": "1634917883.640413000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b44aebfb93efcb9c0e6d8345", "kind": "identity", "frame_number": 78295, "timestamp_epoch": "1634917885.266242000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cef72dd0ce5ea47caa92ec2e", "kind": "identity", "frame_number": 78298, "timestamp_epoch": "1634917886.798321000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-a293c94dc3561d4bf618eb07", "kind": "identity", "frame_number": 78313, "timestamp_epoch": "1634917911.289469000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f9047512691cb7ef93880463", "kind": "identity", "frame_number": 78314, "timestamp_epoch": "1634917912.820262000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7069357a31d638ec38a9371a", "kind": "identity", "frame_number": 78315, "timestamp_epoch": "1634917914.351211000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d34a91aa78a525aaa333a576", "kind": "identity", "frame_number": 78322, "timestamp_epoch": "1634917916.381654000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-3c3f74696f2841c134edf25d", "kind": "identity", "frame_number": 78323, "timestamp_epoch": "1634917916.381978000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-6ff8e2e0a640079892b4e430", "kind": "identity", "frame_number": 78471, "timestamp_epoch": "1634917946.813620000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-39da97f5b5ca2b02820acb06", "kind": "identity", "frame_number": 78472, "timestamp_epoch": "1634917946.814132000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-00ef7da7f65c190ce95ab9ef", "kind": "identity", "frame_number": 78761, "timestamp_epoch": "1634917971.977271000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-08ea41218f55d18384872060", "kind": "identity", "frame_number": 78801, "timestamp_epoch": "1634917973.491470000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d8ee25d215c0f0e9ec6041c0", "kind": "identity", "frame_number": 78835, "timestamp_epoch": "1634917974.992230000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5beaa8857cbbf013b734a0e7", "kind": "identity", "frame_number": 78970, "timestamp_epoch": "1634918003.658467000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-323324f3d73187129b403dcc", "kind": "identity", "frame_number": 78971, "timestamp_epoch": "1634918005.159935000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-53a3cac8be19c8c85b3721e0", "kind": "identity", "frame_number": 78972, "timestamp_epoch": "1634918006.721730000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-40441762fa15c269050602f7", "kind": "identity", "frame_number": 79095, "timestamp_epoch": "1634918031.292722000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-8c4e67a3bc000e33c7226be1", "kind": "identity", "frame_number": 79096, "timestamp_epoch": "1634918032.823515000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-021a96a1a66cccbcf321f9fb", "kind": "identity", "frame_number": 79097, "timestamp_epoch": "1634918034.323520000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0f052f9924a1c9f766ccd8cc", "kind": "identity", "frame_number": 80814, "timestamp_epoch": "1634918092.009860000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4483f187618b6134ff040853", "kind": "identity", "frame_number": 80818, "timestamp_epoch": "1634918093.509755000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dcc8211aa7f7579a632d176a", "kind": "identity", "frame_number": 80826, "timestamp_epoch": "1634918094.134617000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 28, "fields": { "browser.server": "DESKTOP-NZ875R4", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-69b8c405c5152b12fe096183", "kind": "identity", "frame_number": 80827, "timestamp_epoch": "1634918095.025488000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-58d9943aca9d90848641f3bd", "kind": "identity", "frame_number": 80989, "timestamp_epoch": "1634918123.663110000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-58fe65b9460a435c6318c961", "kind": "identity", "frame_number": 81004, "timestamp_epoch": "1634918125.195022000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-5d690afad6adf4ec1405a773", "kind": "identity", "frame_number": 81021, "timestamp_epoch": "1634918126.724146000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-415cdbd4d990101974a9d006", "kind": "identity", "frame_number": 81152, "timestamp_epoch": "1634918151.308677000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e9d78819c01e9d9019a75863", "kind": "identity", "frame_number": 81155, "timestamp_epoch": "1634918152.808582000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dbd1b690d171e70e579a50b5", "kind": "identity", "frame_number": 81159, "timestamp_epoch": "1634918154.341690000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e7960dcd78ee75a638bd9b27", "kind": "identity", "frame_number": 81190, "timestamp_epoch": "1634918162.727334000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 67, "fields": { "browser.server": "DESKTOP-CFA3367", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-81016c0b45377e8f63e9147f", "kind": "identity", "frame_number": 81241, "timestamp_epoch": "1634918196.675331000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.255", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 107, "fields": { "browser.server": "DESKTOP-87WCE26", "eth.dst": "ff:ff:ff:ff:ff:ff", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d17fd6ce2d07a4d4fe9497ad", "kind": "identity", "frame_number": 81392, "timestamp_epoch": "1634918212.014905000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-99b14f93b75cdc14db7887ab", "kind": "identity", "frame_number": 81395, "timestamp_epoch": "1634918213.623983000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dc2d335cf08b32fe2585f93c", "kind": "identity", "frame_number": 81398, "timestamp_epoch": "1634918215.156305000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-b1d1a7c90afe9d3f861c2fb4", "kind": "identity", "frame_number": 81418, "timestamp_epoch": "1634918243.681067000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-594f90083ba06cda8338de2e", "kind": "identity", "frame_number": 81419, "timestamp_epoch": "1634918245.212601000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-7b627b211115732b48d1f5fc", "kind": "identity", "frame_number": 81424, "timestamp_epoch": "1634918246.727223000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4b6edba1d6cf6b9cef95b8e6", "kind": "identity", "frame_number": 81625, "timestamp_epoch": "1634918271.315143000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-555ca22e6db599d7dae83eed", "kind": "identity", "frame_number": 81680, "timestamp_epoch": "1634918272.843869000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-1d9156bc8d3dd3f70e7a5a88", "kind": "identity", "frame_number": 81722, "timestamp_epoch": "1634918274.343745000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-bf2f5bf93c39cef2f098c77f", "kind": "identity", "frame_number": 82131, "timestamp_epoch": "1634918331.993458000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d52cb998b384c7bd2bb3f92e", "kind": "identity", "frame_number": 82138, "timestamp_epoch": "1634918333.508079000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f40e35f7d8cbb8bc9c97bbdd", "kind": "identity", "frame_number": 82139, "timestamp_epoch": "1634918335.024695000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f6dba7f83fd2fe19e974529a", "kind": "identity", "frame_number": 82502, "timestamp_epoch": "1634918363.675048000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f8845b6eceb06705a77c2e2a", "kind": "identity", "frame_number": 82507, "timestamp_epoch": "1634918365.191085000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9d9ef5bcfa856f32e815e58d", "kind": "identity", "frame_number": 82512, "timestamp_epoch": "1634918366.706595000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-0e39ae751209563f61263c57", "kind": "identity", "frame_number": 82742, "timestamp_epoch": "1634918391.323092000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2c87d0f6f8574cda5eedd175", "kind": "identity", "frame_number": 82745, "timestamp_epoch": "1634918392.885597000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-9cc860f969bddbb368ca90e7", "kind": "identity", "frame_number": 82750, "timestamp_epoch": "1634918394.431983000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-ca7b73b24e7979c9ac199f59", "kind": "identity", "frame_number": 83300, "timestamp_epoch": "1634918451.267077000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e561c115aea7dfe0af7e5c5e", "kind": "identity", "frame_number": 83307, "timestamp_epoch": "1634918451.277763000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "dns.qry.name": "DESKTOP-NZ875R4.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-1e95c08d7bb56ba4b2f70b5f", "kind": "identity", "frame_number": 83308, "timestamp_epoch": "1634918451.278039000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 2, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-63e3976ff5b0bb7629de9124", "kind": "identity", "frame_number": 83309, "timestamp_epoch": "1634918451.278449000", "src_ip": "10.10.22.157", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1064, "fields": { "dns.qry.name": "DESKTOP-NZ875R4", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-a8778efaae5ddf62570db568", "kind": "identity", "frame_number": 83313, "timestamp_epoch": "1634918452.011299000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-336333f281e48cc88871940d", "kind": "identity", "frame_number": 83314, "timestamp_epoch": "1634918452.778674000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-57ac9872e1a170f099da47ea", "kind": "identity", "frame_number": 83317, "timestamp_epoch": "1634918453.620482000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f218ffae9605681c0e5d6928", "kind": "identity", "frame_number": 83318, "timestamp_epoch": "1634918454.309594000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-721b5aade3857350b88f36eb", "kind": "identity", "frame_number": 83323, "timestamp_epoch": "1634918455.065881000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2305e0a8f8e3b96de10b7d22", "kind": "identity", "frame_number": 83324, "timestamp_epoch": "1634918455.066159000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-5001c2aa72c58f0776de5ffc", "kind": "identity", "frame_number": 83325, "timestamp_epoch": "1634918455.066541000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-957a186bf39d5fb25cf486ad", "kind": "identity", "frame_number": 83328, "timestamp_epoch": "1634918455.067837000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69", "kerberos.msg_type": "14" } }, { "event_id": "evt-0e494908cfc713fcc11ff496", "kind": "identity", "frame_number": 83330, "timestamp_epoch": "1634918455.068791000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-4c525ed3a20fdbbfc8e63297", "kind": "identity", "frame_number": 83331, "timestamp_epoch": "1634918455.069341000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-fee64fbc9a5f7c5086733c6a", "kind": "identity", "frame_number": 83332, "timestamp_epoch": "1634918455.069574000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-96c944bfa3696cfbf95ad039", "kind": "identity", "frame_number": 83333, "timestamp_epoch": "1634918455.069871000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-4b1b6f5b5f6db85492df4622", "kind": "identity", "frame_number": 83334, "timestamp_epoch": "1634918455.070029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-bd3a73b88054ad80c7f0bd5c", "kind": "identity", "frame_number": 83335, "timestamp_epoch": "1634918455.070080000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-9e6f251b2e955450c18e4851", "kind": "identity", "frame_number": 83336, "timestamp_epoch": "1634918455.070363000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-eccfd2c3928d9dd66c63ba20", "kind": "identity", "frame_number": 83338, "timestamp_epoch": "1634918455.183397000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-f959923713e2612f03cbf9e3", "kind": "identity", "frame_number": 83343, "timestamp_epoch": "1634918457.137938000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-88934aa0b8746667a23de9f0", "kind": "identity", "frame_number": 83344, "timestamp_epoch": "1634918457.138091000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c7b55b122bd609adc8ff6e40", "kind": "identity", "frame_number": 83345, "timestamp_epoch": "1634918457.138569000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-cd0fe3c2a030afcac72a3535", "kind": "identity", "frame_number": 83346, "timestamp_epoch": "1634918457.138753000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 160, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d762d4fbcc86a038f1333793", "kind": "identity", "frame_number": 83393, "timestamp_epoch": "1634918465.810160000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-097c27bef2369f9266d60623", "kind": "identity", "frame_number": 83394, "timestamp_epoch": "1634918465.810628000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b4ad43c0f17925058ee4a9a3", "kind": "identity", "frame_number": 83395, "timestamp_epoch": "1634918465.811243000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:18:71:3b:a8:69" } }, { "event_id": "evt-c37e49e5e7a066c5032f58d2", "kind": "identity", "frame_number": 83396, "timestamp_epoch": "1634918465.811674000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 1632, "udp_stream": null, "fields": { "eth.dst": "00:18:71:3b:a8:69", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-3328b5978bc042368e1a3963", "kind": "identity", "frame_number": 83668, "timestamp_epoch": "1634918483.679565000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-fa5cd1e86ccc1d00ae22cd6d", "kind": "identity", "frame_number": 83686, "timestamp_epoch": "1634918485.240185000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dba9d7d5c1d8e5c391a216d1", "kind": "identity", "frame_number": 83705, "timestamp_epoch": "1634918486.835109000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-494001d255f06c87f76c9ea2", "kind": "identity", "frame_number": 83824, "timestamp_epoch": "1634918511.958089000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-4d6a61884f142668f7993e82", "kind": "identity", "frame_number": 83831, "timestamp_epoch": "1634918511.968538000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "dns.qry.name": "DESKTOP-CFA3367.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-6dfb1da633d9f3638be0589d", "kind": "identity", "frame_number": 83832, "timestamp_epoch": "1634918511.968737000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 34, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-756ead387f04e56ae00c12e2", "kind": "identity", "frame_number": 83833, "timestamp_epoch": "1634918511.969046000", "src_ip": "10.10.22.156", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1073, "fields": { "dns.qry.name": "DESKTOP-CFA3367", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f95149f36f6243999081df40", "kind": "identity", "frame_number": 83876, "timestamp_epoch": "1634918513.451868000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-3f377101809414b111ba2d93", "kind": "identity", "frame_number": 83894, "timestamp_epoch": "1634918514.966071000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 39, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:23:ae:fd:02:01", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-CFA3367<20>,DESKTOP-CFA3367<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-dd863f7d0c91d5d78240a840", "kind": "identity", "frame_number": 83904, "timestamp_epoch": "1634918515.146039000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1949d614cb95aa3457492b48", "kind": "identity", "frame_number": 83905, "timestamp_epoch": "1634918515.146394000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f5fddeb06553d99252bc3783", "kind": "identity", "frame_number": 83906, "timestamp_epoch": "1634918515.146795000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-7acd79dd29bb58d66badd342", "kind": "identity", "frame_number": 83909, "timestamp_epoch": "1634918515.148477000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01", "kerberos.msg_type": "14" } }, { "event_id": "evt-068cb52ae2ee98d6fe592198", "kind": "identity", "frame_number": 83911, "timestamp_epoch": "1634918515.149365000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-d532748aa62adb03efc59cf6", "kind": "identity", "frame_number": 83912, "timestamp_epoch": "1634918515.149911000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-cc645cfa1e8aa08371778490", "kind": "identity", "frame_number": 83913, "timestamp_epoch": "1634918515.150136000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-801278ef19697b038cc10195", "kind": "identity", "frame_number": 83914, "timestamp_epoch": "1634918515.150455000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-f13a8065827549d20fb963b8", "kind": "identity", "frame_number": 83915, "timestamp_epoch": "1634918515.150566000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-0ae51dfde4f851fb6e4958f8", "kind": "identity", "frame_number": 83916, "timestamp_epoch": "1634918515.150653000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-45a847eafe8461a32783e2e0", "kind": "identity", "frame_number": 83917, "timestamp_epoch": "1634918515.150945000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-463724a3bc465241a46ab41d", "kind": "identity", "frame_number": 83926, "timestamp_epoch": "1634918516.763404000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-dbf768e5e1e65feb0db13ed8", "kind": "identity", "frame_number": 83927, "timestamp_epoch": "1634918516.763796000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-b0ffe3504b48f5b74f459107", "kind": "identity", "frame_number": 83928, "timestamp_epoch": "1634918516.763847000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9efa093ca746531f0b74c1d4", "kind": "identity", "frame_number": 83929, "timestamp_epoch": "1634918516.764141000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 190, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-8ad82fcf3154a351b1827f47", "kind": "identity", "frame_number": 84020, "timestamp_epoch": "1634918525.872059000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-642b75cd5dfb07cf8bf22fa9", "kind": "identity", "frame_number": 84021, "timestamp_epoch": "1634918525.872594000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f7500635447ea3e08487a007", "kind": "identity", "frame_number": 84022, "timestamp_epoch": "1634918525.873234000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:23:ae:fd:02:01" } }, { "event_id": "evt-9b1c4d059d33634796c39078", "kind": "identity", "frame_number": 84023, "timestamp_epoch": "1634918525.873829000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1647, "udp_stream": null, "fields": { "eth.dst": "00:23:ae:fd:02:01", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-24ce781307033bf50aa9288b", "kind": "identity", "frame_number": 84061, "timestamp_epoch": "1634918543.654822000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-d973324a7f7743ea27cf3246", "kind": "identity", "frame_number": 84070, "timestamp_epoch": "1634918543.667010000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "dns.qry.name": "DESKTOP-87WCE26.local", "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-0fbe81204da7a1ebf39a3c65", "kind": "identity", "frame_number": 84071, "timestamp_epoch": "1634918543.667235000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.251", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 74, "fields": { "eth.dst": "01:00:5e:00:00:fb", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-c2d61d4de0c1234fafb37a0c", "kind": "identity", "frame_number": 84073, "timestamp_epoch": "1634918543.667774000", "src_ip": "10.10.22.158", "dst_ip": "224.0.0.252", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 1080, "fields": { "dns.qry.name": "DESKTOP-87WCE26", "eth.dst": "01:00:5e:00:00:fc", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-8fae677b53aec9b76c921eba", "kind": "identity", "frame_number": 84086, "timestamp_epoch": "1634918545.273101000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-127e2fa096dd0e84a052fbb7", "kind": "identity", "frame_number": 84092, "timestamp_epoch": "1634918546.060733000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-de2723c63e7b575d83763880", "kind": "identity", "frame_number": 84093, "timestamp_epoch": "1634918546.061007000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-78f52ee025fc4a4a724e130c", "kind": "identity", "frame_number": 84094, "timestamp_epoch": "1634918546.061345000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-1a21e727e0fe24790801a08b", "kind": "identity", "frame_number": 84097, "timestamp_epoch": "1634918546.062610000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21", "kerberos.msg_type": "14" } }, { "event_id": "evt-c488a532c8aa669bc4efbc0a", "kind": "identity", "frame_number": 84099, "timestamp_epoch": "1634918546.063499000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a", "kerberos.msg_type": "15" } }, { "event_id": "evt-56c07bf2eb6ae46518be687f", "kind": "identity", "frame_number": 84100, "timestamp_epoch": "1634918546.064102000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-f46e39e8f79a6d840e0997f1", "kind": "identity", "frame_number": 84101, "timestamp_epoch": "1634918546.064330000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-2c0e00527d7f0ddc51db9dbd", "kind": "identity", "frame_number": 84102, "timestamp_epoch": "1634918546.064606000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-d1b83465ba2c3a8f9950adf3", "kind": "identity", "frame_number": 84103, "timestamp_epoch": "1634918546.064727000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-2feefd8d24ec1c91ad12d71b", "kind": "identity", "frame_number": 84104, "timestamp_epoch": "1634918546.064793000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-65726a1602dd6497c9204c59", "kind": "identity", "frame_number": 84105, "timestamp_epoch": "1634918546.065037000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-51f6a1c00c7951ca2f16b918", "kind": "identity", "frame_number": 84112, "timestamp_epoch": "1634918546.835904000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 79, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:0e:35:30:b7:21", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-87WCE26<20>,DESKTOP-87WCE26<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-2fb47d58579bd55670e62cae", "kind": "identity", "frame_number": 84115, "timestamp_epoch": "1634918547.196144000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-7aad3297a3dc57ed1b166941", "kind": "identity", "frame_number": 84116, "timestamp_epoch": "1634918547.196377000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-fa390e211a868094c1001596", "kind": "identity", "frame_number": 84117, "timestamp_epoch": "1634918547.196703000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-f98a3f5d9dc54a32e11dbaf8", "kind": "identity", "frame_number": 84118, "timestamp_epoch": "1634918547.196829000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 130, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-4747ac056da1bfa18ba19572", "kind": "identity", "frame_number": 84260, "timestamp_epoch": "1634918556.805342000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-097472f50396b0bff5f20e76", "kind": "identity", "frame_number": 84261, "timestamp_epoch": "1634918556.805986000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-d19afcdb132b768f269da8f7", "kind": "identity", "frame_number": 84262, "timestamp_epoch": "1634918556.806650000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "a4:1f:72:c2:09:6a", "eth.src": "00:0e:35:30:b7:21" } }, { "event_id": "evt-3512a207b99a38d6c7dc72d7", "kind": "identity", "frame_number": 84263, "timestamp_epoch": "1634918556.807066000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1650, "udp_stream": null, "fields": { "eth.dst": "00:0e:35:30:b7:21", "eth.src": "a4:1f:72:c2:09:6a" } }, { "event_id": "evt-ecd14f87b2cc79244133793a", "kind": "identity", "frame_number": 84395, "timestamp_epoch": "1634918571.282156000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-cc64147830817b4b698abe09", "kind": "identity", "frame_number": 84398, "timestamp_epoch": "1634918572.795964000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } }, { "event_id": "evt-e0f87be95c23673b9b3d00c7", "kind": "identity", "frame_number": 84399, "timestamp_epoch": "1634918574.312579000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.1", "src_port": null, "dst_port": null, "tcp_stream": null, "udp_stream": 12, "fields": { "eth.dst": "20:e5:2a:b6:93:f1", "eth.src": "00:18:71:3b:a8:69", "nbns.flags.opcode": "8", "nbns.flags.response": "False", "nbns.name": "DESKTOP-NZ875R4<20>,DESKTOP-NZ875R4<20> (Server service)", "nbns.nb_flags.group": "False" } } ], "directory_service": [ { "event_id": "evt-c097aa63730b55225205231e", "kind": "directory_service", "frame_number": 27, "timestamp_epoch": "1634913052.670921000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-57693a2598fcbf078fede4fc", "kind": "directory_service", "frame_number": 29, "timestamp_epoch": "1634913052.671148000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-0f10207f6d10cfd87ed1ff63", "kind": "directory_service", "frame_number": 91, "timestamp_epoch": "1634913054.066859000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-2687c10de07668a1784d079e", "kind": "directory_service", "frame_number": 93, "timestamp_epoch": "1634913054.067128000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-39b2d79c304163f7baec3b8c", "kind": "directory_service", "frame_number": 120, "timestamp_epoch": "1634913054.081960000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-2648b640eba97d28c7821cdc", "kind": "directory_service", "frame_number": 124, "timestamp_epoch": "1634913054.082974000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-392c5a391ddf1ed3f2d84466", "kind": "directory_service", "frame_number": 127, "timestamp_epoch": "1634913054.084018000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-63fd58f90504c1bea9035179", "kind": "directory_service", "frame_number": 128, "timestamp_epoch": "1634913054.084239000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-8b820b478e07e5ee6369b5ae", "kind": "directory_service", "frame_number": 129, "timestamp_epoch": "1634913054.084345000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-cb5122778f15761ef6403231", "kind": "directory_service", "frame_number": 130, "timestamp_epoch": "1634913054.084557000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-ca0f7c0568c0d2dc73ead3ea", "kind": "directory_service", "frame_number": 131, "timestamp_epoch": "1634913054.084736000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-4629b56ab27c4787d2e5af29", "kind": "directory_service", "frame_number": 132, "timestamp_epoch": "1634913054.085000000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-0e2d0d1625c840caca90dda5", "kind": "directory_service", "frame_number": 133, "timestamp_epoch": "1634913054.085147000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-1055442b1ca7744b3a0e411d", "kind": "directory_service", "frame_number": 134, "timestamp_epoch": "1634913054.085176000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-80f5cbb4cfe93dabdcdd7a7c", "kind": "directory_service", "frame_number": 135, "timestamp_epoch": "1634913054.085332000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-414937a4546aaad8502d3713", "kind": "directory_service", "frame_number": 136, "timestamp_epoch": "1634913054.085442000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-b30a37018b7a51cba0975c89", "kind": "directory_service", "frame_number": 145, "timestamp_epoch": "1634913054.087853000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-4944ecbdbfea035786fa7c5a", "kind": "directory_service", "frame_number": 146, "timestamp_epoch": "1634913054.087993000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-4daa52facd7a72ffcf48f493", "kind": "directory_service", "frame_number": 147, "timestamp_epoch": "1634913054.088446000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-890b4a983d260c26220ba048", "kind": "directory_service", "frame_number": 150, "timestamp_epoch": "1634913054.088894000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-c503b91dd5a62b83c19d54ed", "kind": "directory_service", "frame_number": 151, "timestamp_epoch": "1634913054.089677000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-0c3c2e2b8358362763441ded", "kind": "directory_service", "frame_number": 152, "timestamp_epoch": "1634913054.089831000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-bca3dedc7b6d0b341a272fc1", "kind": "directory_service", "frame_number": 168, "timestamp_epoch": "1634913054.223262000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-c90e3f2d6eb89c96523467ae", "kind": "directory_service", "frame_number": 170, "timestamp_epoch": "1634913054.223626000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-27c71ee2e93ba38fe509607e", "kind": "directory_service", "frame_number": 191, "timestamp_epoch": "1634913054.351302000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-13ed50173fd158c08ae1099c", "kind": "directory_service", "frame_number": 193, "timestamp_epoch": "1634913054.351684000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-8a7bdd9fdf501443ebfd140c", "kind": "directory_service", "frame_number": 262, "timestamp_epoch": "1634913054.582704000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-07d1ca2326761a39913d2cb6", "kind": "directory_service", "frame_number": 264, "timestamp_epoch": "1634913054.583058000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-e2250545ea82d0c5e540682d", "kind": "directory_service", "frame_number": 271, "timestamp_epoch": "1634913054.584445000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-f881892bfc346805dd6e8804", "kind": "directory_service", "frame_number": 272, "timestamp_epoch": "1634913054.584610000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-ad90e13ed2f299a239a7966d", "kind": "directory_service", "frame_number": 273, "timestamp_epoch": "1634913054.585135000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-130b1d0c77eded57f22c2dde", "kind": "directory_service", "frame_number": 274, "timestamp_epoch": "1634913054.585300000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-586c63cf148fd9a1532a7b1e", "kind": "directory_service", "frame_number": 275, "timestamp_epoch": "1634913054.585572000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 5, "udp_stream": null, "fields": {} }, { "event_id": "evt-00665d9956beef50fd011669", "kind": "directory_service", "frame_number": 308, "timestamp_epoch": "1634913054.713809000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-214d917950885752ae8f32c2", "kind": "directory_service", "frame_number": 310, "timestamp_epoch": "1634913054.714640000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-8ff98d18a708613ca4523b6b", "kind": "directory_service", "frame_number": 311, "timestamp_epoch": "1634913054.716993000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 0, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-aa15400fcd0fc7e00ad7d066", "kind": "directory_service", "frame_number": 323, "timestamp_epoch": "1634913054.921877000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-0e27ce5807a90cb2f9d0f47e", "kind": "directory_service", "frame_number": 324, "timestamp_epoch": "1634913054.922109000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-96ba8282d29a0dff00ebf871", "kind": "directory_service", "frame_number": 325, "timestamp_epoch": "1634913054.922433000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c2c81f1159f0856af5ee7c24", "kind": "directory_service", "frame_number": 326, "timestamp_epoch": "1634913054.922727000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-436023e724f48c0dde3bbfe2", "kind": "directory_service", "frame_number": 327, "timestamp_epoch": "1634913054.923029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-81ed1b4ab175c608235553fe", "kind": "directory_service", "frame_number": 328, "timestamp_epoch": "1634913054.923275000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-6eedb3dd8951e5d4752cefd9", "kind": "directory_service", "frame_number": 329, "timestamp_epoch": "1634913054.924134000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-945bb2c5d21b18cedea62b1f", "kind": "directory_service", "frame_number": 330, "timestamp_epoch": "1634913054.924440000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 3, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-9895f4b03cb55dec768c85a1", "kind": "directory_service", "frame_number": 347, "timestamp_epoch": "1634913055.632160000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-860583a67ba24bb438b49de3", "kind": "directory_service", "frame_number": 349, "timestamp_epoch": "1634913055.632442000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-87db6ddb9fda6889ab78c5ea", "kind": "directory_service", "frame_number": 352, "timestamp_epoch": "1634913055.634492000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-bde7f50c6c0da58887e7538b", "kind": "directory_service", "frame_number": 354, "timestamp_epoch": "1634913055.635128000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-5906b8faeab8073533ddec06", "kind": "directory_service", "frame_number": 369, "timestamp_epoch": "1634913055.680652000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-b886937774a139ceb24d32ac", "kind": "directory_service", "frame_number": 370, "timestamp_epoch": "1634913055.680966000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-ab826ecc95367611733759f3", "kind": "directory_service", "frame_number": 375, "timestamp_epoch": "1634913055.691325000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-a15195b93cdc722c2b824bb1", "kind": "directory_service", "frame_number": 377, "timestamp_epoch": "1634913055.692172000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-024416422f927a1f1ff8d40d", "kind": "directory_service", "frame_number": 378, "timestamp_epoch": "1634913055.692919000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4c6465b1e5d0d1ed908dddca", "kind": "directory_service", "frame_number": 379, "timestamp_epoch": "1634913055.693129000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-eea748b89ef595d43502a4d1", "kind": "directory_service", "frame_number": 380, "timestamp_epoch": "1634913055.693669000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-c705193159d88d7dfbefee08", "kind": "directory_service", "frame_number": 381, "timestamp_epoch": "1634913055.693885000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3ccf1de74ffa7042714ed77d", "kind": "directory_service", "frame_number": 382, "timestamp_epoch": "1634913055.695343000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-505ae7f45768e4cdb772b5f1", "kind": "directory_service", "frame_number": 383, "timestamp_epoch": "1634913055.695725000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-01c029307a72d84ee110d7e0", "kind": "directory_service", "frame_number": 535, "timestamp_epoch": "1634913055.808845000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 22, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-e46e4737de943ece60581201", "kind": "directory_service", "frame_number": 539, "timestamp_epoch": "1634913055.819684000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 20, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-5cf0846b8ee7436d00fc98fc", "kind": "directory_service", "frame_number": 568, "timestamp_epoch": "1634913057.668444000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-16abcc6f500c45aed1c4e589", "kind": "directory_service", "frame_number": 569, "timestamp_epoch": "1634913057.668670000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-cb911b474c5ce57fb0e03d4c", "kind": "directory_service", "frame_number": 570, "timestamp_epoch": "1634913057.669175000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ebc4eab955be962b4dc0974a", "kind": "directory_service", "frame_number": 571, "timestamp_epoch": "1634913057.669456000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2cb3301f3a222eb7ed447a74", "kind": "directory_service", "frame_number": 572, "timestamp_epoch": "1634913057.669667000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-8453743925b87eb33accea78", "kind": "directory_service", "frame_number": 573, "timestamp_epoch": "1634913057.669830000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-850a12045abde703a4d4e90b", "kind": "directory_service", "frame_number": 576, "timestamp_epoch": "1634913057.670928000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9b431f225f2eb703b38d76ed", "kind": "directory_service", "frame_number": 577, "timestamp_epoch": "1634913057.671074000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-0e194a358bd8e581be3ef0ff", "kind": "directory_service", "frame_number": 578, "timestamp_epoch": "1634913057.671434000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-8f70c5015123585211cf4be7", "kind": "directory_service", "frame_number": 579, "timestamp_epoch": "1634913057.671697000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-a9d45e98a5b29a95e0db1d38", "kind": "directory_service", "frame_number": 580, "timestamp_epoch": "1634913057.671927000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-3a3174d9d39bf3340a24adc5", "kind": "directory_service", "frame_number": 581, "timestamp_epoch": "1634913057.672068000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 26, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-5b66ba478d192dc773174a2d", "kind": "directory_service", "frame_number": 585, "timestamp_epoch": "1634913057.674583000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-77c2a4289bf07fde2f8d6055", "kind": "directory_service", "frame_number": 587, "timestamp_epoch": "1634913057.674886000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-8d8533f32fe90e9f18ae25e7", "kind": "directory_service", "frame_number": 590, "timestamp_epoch": "1634913057.675607000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-2f6a5df89b5cec7ef56a0f9b", "kind": "directory_service", "frame_number": 592, "timestamp_epoch": "1634913057.676331000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-e27f41a4aff4af51526a403f", "kind": "directory_service", "frame_number": 593, "timestamp_epoch": "1634913057.676658000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-843a2c39da87ad03c9d9b55f", "kind": "directory_service", "frame_number": 594, "timestamp_epoch": "1634913057.676933000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c43ee12e00d3e440c2196397", "kind": "directory_service", "frame_number": 595, "timestamp_epoch": "1634913057.677216000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-2f95d8d554ba78bb9bbaff17", "kind": "directory_service", "frame_number": 596, "timestamp_epoch": "1634913057.677404000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3d2b06040ecd5ecd4301b5d6", "kind": "directory_service", "frame_number": 597, "timestamp_epoch": "1634913057.677540000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-14629e4672f28f1005a1856a", "kind": "directory_service", "frame_number": 598, "timestamp_epoch": "1634913057.677691000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-1c5783d4e42dd2d2aca3ab7d", "kind": "directory_service", "frame_number": 603, "timestamp_epoch": "1634913057.679882000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-c3c64e911e9a34938ffd8819", "kind": "directory_service", "frame_number": 605, "timestamp_epoch": "1634913057.680537000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-1b2a83232018f861eacdbba6", "kind": "directory_service", "frame_number": 606, "timestamp_epoch": "1634913057.680832000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-a035fa1f575c371cbb57675a", "kind": "directory_service", "frame_number": 609, "timestamp_epoch": "1634913057.681064000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-db350a3ab194855110cea8a7", "kind": "directory_service", "frame_number": 611, "timestamp_epoch": "1634913057.681429000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-7f21d31ce1502721ec3345d0", "kind": "directory_service", "frame_number": 612, "timestamp_epoch": "1634913057.681579000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-4e6a61225dd64d5048f9f3a0", "kind": "directory_service", "frame_number": 613, "timestamp_epoch": "1634913057.681706000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 28, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-8b25a8de7a19542eab1d928b", "kind": "directory_service", "frame_number": 617, "timestamp_epoch": "1634913057.681996000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 27, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-05abc511c6289d74a1814499", "kind": "directory_service", "frame_number": 644, "timestamp_epoch": "1634913063.055459000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-7bc340837f3473eb9f364366", "kind": "directory_service", "frame_number": 646, "timestamp_epoch": "1634913063.055968000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-740450beb2c3f0edd304613c", "kind": "directory_service", "frame_number": 649, "timestamp_epoch": "1634913063.057256000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-10675013fe933c41be86f8a2", "kind": "directory_service", "frame_number": 651, "timestamp_epoch": "1634913063.058151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-62ff20a9bfd6b4bc84855114", "kind": "directory_service", "frame_number": 652, "timestamp_epoch": "1634913063.060362000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4d1070024e07ccbdde2128cf", "kind": "directory_service", "frame_number": 653, "timestamp_epoch": "1634913063.060626000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-beac54958d6acee1429c54f6", "kind": "directory_service", "frame_number": 654, "timestamp_epoch": "1634913063.060892000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-9fc2000e9cc4a33143276155", "kind": "directory_service", "frame_number": 655, "timestamp_epoch": "1634913063.061117000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c929039edece487e2a3119b1", "kind": "directory_service", "frame_number": 656, "timestamp_epoch": "1634913063.061369000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.baseObject": "CN=NTDS Settings,CN=ENEMYWATCH-DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-667f9d65782b92839e589a89", "kind": "directory_service", "frame_number": 657, "timestamp_epoch": "1634913063.061633000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-35cad1acd93c89581c851b4d", "kind": "directory_service", "frame_number": 658, "timestamp_epoch": "1634913063.061889000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "3", "ldap.protocolOp": "3" } }, { "event_id": "evt-c7d44f742e8895e36190bf12", "kind": "directory_service", "frame_number": 659, "timestamp_epoch": "1634913063.062165000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-350943f96547cb33df4811e2", "kind": "directory_service", "frame_number": 660, "timestamp_epoch": "1634913063.062484000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.baseObject": "CN=OID,CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-2ae7eda2ef503bf5025f999c", "kind": "directory_service", "frame_number": 661, "timestamp_epoch": "1634913063.062737000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-c3947ec34fcabe037394663f", "kind": "directory_service", "frame_number": 666, "timestamp_epoch": "1634913063.080613000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-9d1f6a62292f25a7e037ee88", "kind": "directory_service", "frame_number": 668, "timestamp_epoch": "1634913063.081501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-e0790c2e9b6b8e64386ea2fe", "kind": "directory_service", "frame_number": 669, "timestamp_epoch": "1634913063.082465000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-bddc4eb50c57452e9199e8c3", "kind": "directory_service", "frame_number": 670, "timestamp_epoch": "1634913063.082671000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c4aed74fe6cdc03c2b5a552f", "kind": "directory_service", "frame_number": 703, "timestamp_epoch": "1634913063.089281000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "3", "ldap.protocolOp": "3" } }, { "event_id": "evt-adfe2d8da7e495e6278a5975", "kind": "directory_service", "frame_number": 704, "timestamp_epoch": "1634913063.089658000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-d9059d8fac3b0820ec5aa772", "kind": "directory_service", "frame_number": 705, "timestamp_epoch": "1634913063.090427000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 30, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-7a1f23adc304330682603055", "kind": "directory_service", "frame_number": 709, "timestamp_epoch": "1634913063.095392000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 29, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-9d5d6c514205b1cab1eeb4c0", "kind": "directory_service", "frame_number": 804, "timestamp_epoch": "1634913113.472119000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-7d88ac0ed11bb5b60bc71f8e", "kind": "directory_service", "frame_number": 806, "timestamp_epoch": "1634913113.472337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5494f9b4ebaa668228c7de8b", "kind": "directory_service", "frame_number": 965, "timestamp_epoch": "1634913114.914826000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-068e9bc962b800239dcc3473", "kind": "directory_service", "frame_number": 968, "timestamp_epoch": "1634913114.915527000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-38dbae72b28ee8a320a67af8", "kind": "directory_service", "frame_number": 994, "timestamp_epoch": "1634913114.920432000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 37, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-2a3ed02d3659568c20b8d389", "kind": "directory_service", "frame_number": 999, "timestamp_epoch": "1634913114.921083000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-b3b0b380fb10cef27b12c09b", "kind": "directory_service", "frame_number": 1000, "timestamp_epoch": "1634913114.921280000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-076abf1706c646a134e222fa", "kind": "directory_service", "frame_number": 1001, "timestamp_epoch": "1634913114.921628000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ed1974383ff5822c3a472aa6", "kind": "directory_service", "frame_number": 1002, "timestamp_epoch": "1634913114.921892000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-7f77325edd604f41aa7b3f34", "kind": "directory_service", "frame_number": 1003, "timestamp_epoch": "1634913114.922192000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-6f3460875887a6fe88123cf9", "kind": "directory_service", "frame_number": 1004, "timestamp_epoch": "1634913114.922326000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-391e54a47515973fb3f32908", "kind": "directory_service", "frame_number": 1013, "timestamp_epoch": "1634913114.924663000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-b8cdd9794d0c972f0acde722", "kind": "directory_service", "frame_number": 1014, "timestamp_epoch": "1634913114.924857000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-a251476f3dea4bf9f021ea24", "kind": "directory_service", "frame_number": 1015, "timestamp_epoch": "1634913114.925328000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-7dcea3a028b12d7a0a88256a", "kind": "directory_service", "frame_number": 1016, "timestamp_epoch": "1634913114.925592000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-57632fd35fd0c362a042dde1", "kind": "directory_service", "frame_number": 1017, "timestamp_epoch": "1634913114.926157000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-34586112b019d329f2e7eeb8", "kind": "directory_service", "frame_number": 1018, "timestamp_epoch": "1634913114.926303000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 46, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-1dbf4db286a99294c1f2c53f", "kind": "directory_service", "frame_number": 1030, "timestamp_epoch": "1634913114.935406000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-a625aa243117a12901d29f17", "kind": "directory_service", "frame_number": 1031, "timestamp_epoch": "1634913114.935544000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7cb95a888828067407eb8422", "kind": "directory_service", "frame_number": 1032, "timestamp_epoch": "1634913114.935762000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-df958bc7d15144badb4c5246", "kind": "directory_service", "frame_number": 1033, "timestamp_epoch": "1634913114.936040000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-489cc72d356f78d4f23f9575", "kind": "directory_service", "frame_number": 1034, "timestamp_epoch": "1634913114.936127000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-d0acf96d0134a4bcf6c6bc3c", "kind": "directory_service", "frame_number": 1035, "timestamp_epoch": "1634913114.936321000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-16a98e529e6dbfd365b5e3d4", "kind": "directory_service", "frame_number": 1036, "timestamp_epoch": "1634913114.936426000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-f0758576d5c76c19fb921ffa", "kind": "directory_service", "frame_number": 1037, "timestamp_epoch": "1634913114.936560000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 53, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-4271821e4628a3dc3af349bd", "kind": "directory_service", "frame_number": 1062, "timestamp_epoch": "1634913114.964831000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-f4385f4256e3ae36380e5d71", "kind": "directory_service", "frame_number": 1064, "timestamp_epoch": "1634913114.965120000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-1afac8cd3a6986c603f2695c", "kind": "directory_service", "frame_number": 1069, "timestamp_epoch": "1634913114.967383000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-0f980c52cc298995ade9837c", "kind": "directory_service", "frame_number": 1071, "timestamp_epoch": "1634913114.968094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-eaed01a8f52723fe3f626048", "kind": "directory_service", "frame_number": 1072, "timestamp_epoch": "1634913114.969303000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-9cb2a7ad4e96743ed7021e3a", "kind": "directory_service", "frame_number": 1073, "timestamp_epoch": "1634913114.969450000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-b81d3128f9d152ec461219b3", "kind": "directory_service", "frame_number": 1074, "timestamp_epoch": "1634913114.969846000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-cfabc58372efa7c7462643ca", "kind": "directory_service", "frame_number": 1075, "timestamp_epoch": "1634913114.970067000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-7b764d993949d8545c1eedec", "kind": "directory_service", "frame_number": 1120, "timestamp_epoch": "1634913115.055683000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-4b94304174ddc7600d85b5a5", "kind": "directory_service", "frame_number": 1121, "timestamp_epoch": "1634913115.055859000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-8f940c2c176b4ca2d7b83dc4", "kind": "directory_service", "frame_number": 1122, "timestamp_epoch": "1634913115.056140000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-1648e595b2ec67ad41b0930b", "kind": "directory_service", "frame_number": 1123, "timestamp_epoch": "1634913115.056664000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-db6ec474fc5434fa918da5a1", "kind": "directory_service", "frame_number": 1124, "timestamp_epoch": "1634913115.056842000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-9e2a06d394a1ff2f6353600b", "kind": "directory_service", "frame_number": 1125, "timestamp_epoch": "1634913115.057392000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-52c23153947f7d94dd3eb090", "kind": "directory_service", "frame_number": 1126, "timestamp_epoch": "1634913115.057553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-79e5cda24164338139188c1d", "kind": "directory_service", "frame_number": 1127, "timestamp_epoch": "1634913115.057699000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 57, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-eb01602fdbfb11dbb11d9665", "kind": "directory_service", "frame_number": 1137, "timestamp_epoch": "1634913115.095837000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-7bd914c3cebaf4b545a14ca2", "kind": "directory_service", "frame_number": 1139, "timestamp_epoch": "1634913115.096164000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-c9c717a65ece64c6a403cd6e", "kind": "directory_service", "frame_number": 1151, "timestamp_epoch": "1634913115.457790000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-c3966e3b92cc6c5a8a3d6fb2", "kind": "directory_service", "frame_number": 1153, "timestamp_epoch": "1634913115.458113000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-65d4880afd126a36eb4ed5e1", "kind": "directory_service", "frame_number": 1167, "timestamp_epoch": "1634913115.627062000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-9bb3c2d13c95854c1bba513d", "kind": "directory_service", "frame_number": 1169, "timestamp_epoch": "1634913115.627419000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-8bd3e97ceb561f14617540b6", "kind": "directory_service", "frame_number": 1175, "timestamp_epoch": "1634913115.628605000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-6b27c8b6401fa66b5bfd3b6e", "kind": "directory_service", "frame_number": 1177, "timestamp_epoch": "1634913115.628826000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-2e6d040b4fd1484719fa687c", "kind": "directory_service", "frame_number": 1178, "timestamp_epoch": "1634913115.629342000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-f8f1525407d73ad4a4c6058e", "kind": "directory_service", "frame_number": 1179, "timestamp_epoch": "1634913115.629502000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-dd2cf4d6c66512dc8a7dabdd", "kind": "directory_service", "frame_number": 1180, "timestamp_epoch": "1634913115.630418000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 55, "udp_stream": null, "fields": {} }, { "event_id": "evt-cd4b247e6f87596eae9939ff", "kind": "directory_service", "frame_number": 1187, "timestamp_epoch": "1634913116.332697000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ba49f5fde8a6bda6f5c80e42", "kind": "directory_service", "frame_number": 1189, "timestamp_epoch": "1634913116.332984000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-36ad7bcc705184a38ad49f37", "kind": "directory_service", "frame_number": 1192, "timestamp_epoch": "1634913116.335888000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-00b915d7ada5c7d2c942eb5b", "kind": "directory_service", "frame_number": 1194, "timestamp_epoch": "1634913116.336673000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-274860fd367fc38480176e8d", "kind": "directory_service", "frame_number": 1211, "timestamp_epoch": "1634913116.516648000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-cdf2148d77eb349e1ccfd870", "kind": "directory_service", "frame_number": 1212, "timestamp_epoch": "1634913116.517099000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-f3da4b3702ead0fd4d33a96c", "kind": "directory_service", "frame_number": 1219, "timestamp_epoch": "1634913116.559484000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-791b57d2a9d6a59022aa6838", "kind": "directory_service", "frame_number": 1221, "timestamp_epoch": "1634913116.560239000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-73fb993a16e857efb3073ed9", "kind": "directory_service", "frame_number": 1222, "timestamp_epoch": "1634913116.564207000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-e0238d0d90ff3ab143689d15", "kind": "directory_service", "frame_number": 1223, "timestamp_epoch": "1634913116.564405000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-48e932046978af810d9170cd", "kind": "directory_service", "frame_number": 1224, "timestamp_epoch": "1634913116.566356000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0b82a0b395f85c581444f9c8", "kind": "directory_service", "frame_number": 1225, "timestamp_epoch": "1634913116.566558000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-7055617f3e0b842952ec0f55", "kind": "directory_service", "frame_number": 1226, "timestamp_epoch": "1634913116.567720000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-74ede181a04116cd8d43ada0", "kind": "directory_service", "frame_number": 1227, "timestamp_epoch": "1634913116.568081000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-1f99897d43caef29a34d9292", "kind": "directory_service", "frame_number": 1410, "timestamp_epoch": "1634913117.486633000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 65, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ca81a1467f893eefcf49924c", "kind": "directory_service", "frame_number": 1414, "timestamp_epoch": "1634913117.493705000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 63, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-b918c0bd32e8d2cddde2e440", "kind": "directory_service", "frame_number": 1448, "timestamp_epoch": "1634913118.519956000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-daa8a69b2e8bb52a21941010", "kind": "directory_service", "frame_number": 1449, "timestamp_epoch": "1634913118.520149000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-e561cf8a7e9ccc91a738068e", "kind": "directory_service", "frame_number": 1450, "timestamp_epoch": "1634913118.520775000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e77e2ef223aba26ae28cbc5d", "kind": "directory_service", "frame_number": 1451, "timestamp_epoch": "1634913118.520996000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-81c74163f55108b1c6e17ba8", "kind": "directory_service", "frame_number": 1452, "timestamp_epoch": "1634913118.522497000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-a98ce80cf225c5f86105fb10", "kind": "directory_service", "frame_number": 1453, "timestamp_epoch": "1634913118.522657000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-255b46bdd2e1971704f114d7", "kind": "directory_service", "frame_number": 1456, "timestamp_epoch": "1634913118.524022000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-72c042c955398ada19d78f0b", "kind": "directory_service", "frame_number": 1457, "timestamp_epoch": "1634913118.524259000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-bc6fd09c07cfd57bf7dc03d1", "kind": "directory_service", "frame_number": 1458, "timestamp_epoch": "1634913118.525173000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ce6b23566283656f6de2c337", "kind": "directory_service", "frame_number": 1459, "timestamp_epoch": "1634913118.525441000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e4a2928e4359c53de992bc69", "kind": "directory_service", "frame_number": 1460, "timestamp_epoch": "1634913118.525749000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-ce4e6547848ecee8995fbf6d", "kind": "directory_service", "frame_number": 1461, "timestamp_epoch": "1634913118.525893000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 70, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-a2a9beac88878664be1967ea", "kind": "directory_service", "frame_number": 1465, "timestamp_epoch": "1634913118.528340000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b35d6a83ad9a009c34554121", "kind": "directory_service", "frame_number": 1467, "timestamp_epoch": "1634913118.528665000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-89bfaf2dc2149edd109a37b0", "kind": "directory_service", "frame_number": 1470, "timestamp_epoch": "1634913118.529289000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-5404fd06fef65b0b76c7917f", "kind": "directory_service", "frame_number": 1472, "timestamp_epoch": "1634913118.529887000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-7a6f9aa925dd5a2b726a5ee3", "kind": "directory_service", "frame_number": 1473, "timestamp_epoch": "1634913118.530231000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4a646565c247008a57e00e39", "kind": "directory_service", "frame_number": 1474, "timestamp_epoch": "1634913118.530417000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-39bac2889c4d1f3a3d79fa22", "kind": "directory_service", "frame_number": 1475, "timestamp_epoch": "1634913118.531727000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0255bbc78823cab3c4f11e67", "kind": "directory_service", "frame_number": 1476, "timestamp_epoch": "1634913118.531892000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b18bc15b9b38ab5c78bb0a1f", "kind": "directory_service", "frame_number": 1477, "timestamp_epoch": "1634913118.532327000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8513040212d81d2664667995", "kind": "directory_service", "frame_number": 1478, "timestamp_epoch": "1634913118.532479000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b186854a6f40356df62d2558", "kind": "directory_service", "frame_number": 1483, "timestamp_epoch": "1634913118.537038000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-9ec3a56048cc3f6516802cac", "kind": "directory_service", "frame_number": 1485, "timestamp_epoch": "1634913118.537755000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-911b56d0349d49f6e1a1bf13", "kind": "directory_service", "frame_number": 1486, "timestamp_epoch": "1634913118.538808000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-16647c3c53ddd81493a71072", "kind": "directory_service", "frame_number": 1489, "timestamp_epoch": "1634913118.539054000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5116aece247990ae1fe9a1ba", "kind": "directory_service", "frame_number": 1491, "timestamp_epoch": "1634913118.539698000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d28a77ffe5d74b8e53b907f0", "kind": "directory_service", "frame_number": 1492, "timestamp_epoch": "1634913118.539946000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-2f52f3819ba53fc299965548", "kind": "directory_service", "frame_number": 1493, "timestamp_epoch": "1634913118.540226000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 72, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-abba23949f8cb7dca763f6e1", "kind": "directory_service", "frame_number": 1497, "timestamp_epoch": "1634913118.540617000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 71, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-6df2b8457dc034979cf9f865", "kind": "directory_service", "frame_number": 1530, "timestamp_epoch": "1634913123.730206000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-fa403036cb032a39048c2546", "kind": "directory_service", "frame_number": 1532, "timestamp_epoch": "1634913123.730594000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d79eb4af41abb8dc8c891c95", "kind": "directory_service", "frame_number": 1535, "timestamp_epoch": "1634913123.733110000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-e98eb841a860811ba8ed7ba5", "kind": "directory_service", "frame_number": 1537, "timestamp_epoch": "1634913123.733914000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-ca39bcb0c6a1a721fd99359e", "kind": "directory_service", "frame_number": 1538, "timestamp_epoch": "1634913123.736712000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-15ba51d002630f6d67c14698", "kind": "directory_service", "frame_number": 1539, "timestamp_epoch": "1634913123.736975000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-938d33d036dfc996c476cba0", "kind": "directory_service", "frame_number": 1542, "timestamp_epoch": "1634913124.126522000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8ae02f4aedf2e5731140d49f", "kind": "directory_service", "frame_number": 1543, "timestamp_epoch": "1634913124.126813000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-1b079de6b861beb281902fba", "kind": "directory_service", "frame_number": 1544, "timestamp_epoch": "1634913124.127428000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.baseObject": "CN=NTDS Settings,CN=ENEMYWATCH-DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-12491c2fc2f3a86fc18e7e8c", "kind": "directory_service", "frame_number": 1545, "timestamp_epoch": "1634913124.127633000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-154ad1c0ce13ee0d914acf1f", "kind": "directory_service", "frame_number": 1546, "timestamp_epoch": "1634913124.134455000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "3", "ldap.protocolOp": "3" } }, { "event_id": "evt-8871c9783e41ab06608078b5", "kind": "directory_service", "frame_number": 1547, "timestamp_epoch": "1634913124.134785000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-931c5b5e9d56a72f0544b6a7", "kind": "directory_service", "frame_number": 1548, "timestamp_epoch": "1634913124.135382000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.baseObject": "CN=OID,CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-de2059f59f092c81236c53b8", "kind": "directory_service", "frame_number": 1549, "timestamp_epoch": "1634913124.135575000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-fbe513263f5083e894afd298", "kind": "directory_service", "frame_number": 1556, "timestamp_epoch": "1634913124.232331000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-eb06c5a05330fc12a0590251", "kind": "directory_service", "frame_number": 1558, "timestamp_epoch": "1634913124.233540000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-2b81ddaac624b138bb7cf726", "kind": "directory_service", "frame_number": 1559, "timestamp_epoch": "1634913124.234232000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b6f308f0b4e0f92f25d692f8", "kind": "directory_service", "frame_number": 1560, "timestamp_epoch": "1634913124.234469000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-e01de16f5457a627c4cf0219", "kind": "directory_service", "frame_number": 1591, "timestamp_epoch": "1634913124.241152000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "3", "ldap.protocolOp": "3" } }, { "event_id": "evt-a8ea6c87c0b859f5348baeba", "kind": "directory_service", "frame_number": 1592, "timestamp_epoch": "1634913124.241524000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-a32d937e01908f5707977234", "kind": "directory_service", "frame_number": 1593, "timestamp_epoch": "1634913124.242098000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 74, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-9d6cb6ca75bb972e1110a92e", "kind": "directory_service", "frame_number": 1595, "timestamp_epoch": "1634913124.242736000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 73, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-f862e42c458c9fcd745ad2d3", "kind": "directory_service", "frame_number": 1696, "timestamp_epoch": "1634913144.099614000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4e915d91a52521b0166b6bc9", "kind": "directory_service", "frame_number": 1698, "timestamp_epoch": "1634913144.099936000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-67a743c34191f89ef7cbc801", "kind": "directory_service", "frame_number": 1776, "timestamp_epoch": "1634913145.845281000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-f239b25e8671352838b21fad", "kind": "directory_service", "frame_number": 1779, "timestamp_epoch": "1634913145.845746000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-fb2768af3979978cdef8d8ad", "kind": "directory_service", "frame_number": 1907, "timestamp_epoch": "1634913145.880301000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-dd100363fb5ee8b47391a89c", "kind": "directory_service", "frame_number": 1925, "timestamp_epoch": "1634913145.881932000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-5eaf275817116a8418eb029a", "kind": "directory_service", "frame_number": 1938, "timestamp_epoch": "1634913145.883226000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-0186765e92e0d1a78bbabdd2", "kind": "directory_service", "frame_number": 1947, "timestamp_epoch": "1634913145.884085000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-0c556a35add0f6eabc17e614", "kind": "directory_service", "frame_number": 1951, "timestamp_epoch": "1634913145.884937000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-53a52ed73a4a06d6d3dcae98", "kind": "directory_service", "frame_number": 1954, "timestamp_epoch": "1634913145.885247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-c531f840747f086a998a3435", "kind": "directory_service", "frame_number": 1959, "timestamp_epoch": "1634913145.885966000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e27666bf75e91d70663fcfc4", "kind": "directory_service", "frame_number": 1960, "timestamp_epoch": "1634913145.886189000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-b102c225b71b48a1fb999254", "kind": "directory_service", "frame_number": 1961, "timestamp_epoch": "1634913145.886204000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-4fe62962b2bd4e67c71dc055", "kind": "directory_service", "frame_number": 1962, "timestamp_epoch": "1634913145.886405000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-673f3947d0799f1fbf6c2a60", "kind": "directory_service", "frame_number": 1963, "timestamp_epoch": "1634913145.886407000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-d8e82ed1071bc43bf6471b93", "kind": "directory_service", "frame_number": 1964, "timestamp_epoch": "1634913145.886550000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-d1c0c470c6cb5db022f0fcf5", "kind": "directory_service", "frame_number": 1965, "timestamp_epoch": "1634913145.886672000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-47c6d21bc8cca89899e78e1a", "kind": "directory_service", "frame_number": 1966, "timestamp_epoch": "1634913145.886730000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-ca5dd9839248a3459cf82ea4", "kind": "directory_service", "frame_number": 1968, "timestamp_epoch": "1634913145.886979000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-08954837407746c910205fb4", "kind": "directory_service", "frame_number": 1969, "timestamp_epoch": "1634913145.887055000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-3a42887af0ef8c1c78114da1", "kind": "directory_service", "frame_number": 1971, "timestamp_epoch": "1634913145.887320000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-6d2e5ccbf161a10066ef7505", "kind": "directory_service", "frame_number": 1972, "timestamp_epoch": "1634913145.887379000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-6bf6fd4625f335a45ceb36d3", "kind": "directory_service", "frame_number": 1973, "timestamp_epoch": "1634913145.887731000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-832c9822787c7205e28adb0d", "kind": "directory_service", "frame_number": 1974, "timestamp_epoch": "1634913145.887959000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e5d19d0f5b5781582955376f", "kind": "directory_service", "frame_number": 1977, "timestamp_epoch": "1634913145.888303000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-4b1b526d26b4701faceb8fc8", "kind": "directory_service", "frame_number": 1979, "timestamp_epoch": "1634913145.888442000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 86, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-2b9bab70b262baf3c91bd242", "kind": "directory_service", "frame_number": 1980, "timestamp_epoch": "1634913145.888620000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 79, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-e2df5d287439e3d351f2c311", "kind": "directory_service", "frame_number": 1987, "timestamp_epoch": "1634913145.890289000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-43a6772bf7e869a982299047", "kind": "directory_service", "frame_number": 1988, "timestamp_epoch": "1634913145.890430000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-11db8b15849282487e8fc405", "kind": "directory_service", "frame_number": 1989, "timestamp_epoch": "1634913145.891203000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-0921f653d0c50565a8636515", "kind": "directory_service", "frame_number": 1990, "timestamp_epoch": "1634913145.891495000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "30" } }, { "event_id": "evt-42364aab9909e0f5840d06c6", "kind": "directory_service", "frame_number": 1991, "timestamp_epoch": "1634913145.892049000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-35b8a62cfd1c9278b2d4fb96", "kind": "directory_service", "frame_number": 1992, "timestamp_epoch": "1634913145.892153000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-ce8f5d42f6b5a9301f6cb014", "kind": "directory_service", "frame_number": 2039, "timestamp_epoch": "1634913145.971877000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-d4121b7323a024bd5210ff57", "kind": "directory_service", "frame_number": 2040, "timestamp_epoch": "1634913145.972093000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-6099a574889872656c125537", "kind": "directory_service", "frame_number": 2041, "timestamp_epoch": "1634913145.972435000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-f5cc90f1d05862fa21444282", "kind": "directory_service", "frame_number": 2042, "timestamp_epoch": "1634913145.972877000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-2de2c9b3580b3021019395d7", "kind": "directory_service", "frame_number": 2043, "timestamp_epoch": "1634913145.973199000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-18b0ec5ee05a3cf2a2f1d054", "kind": "directory_service", "frame_number": 2044, "timestamp_epoch": "1634913145.973549000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "13" } }, { "event_id": "evt-235ddf0eacda05819fd4af48", "kind": "directory_service", "frame_number": 2045, "timestamp_epoch": "1634913145.973688000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-80d218a2141b2a1e8ad2abce", "kind": "directory_service", "frame_number": 2046, "timestamp_epoch": "1634913145.973827000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 101, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-da49b632acd9b94ea6aac8a6", "kind": "directory_service", "frame_number": 2057, "timestamp_epoch": "1634913146.035188000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-28c69a8a21a63cb18fe17490", "kind": "directory_service", "frame_number": 2060, "timestamp_epoch": "1634913146.035616000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-f458c9590be7d6490897184e", "kind": "directory_service", "frame_number": 2073, "timestamp_epoch": "1634913146.159783000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-f2d13210b9c961609dcf5920", "kind": "directory_service", "frame_number": 2074, "timestamp_epoch": "1634913146.160001000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-7b2ea3bcf43cf79fd3729eea", "kind": "directory_service", "frame_number": 2086, "timestamp_epoch": "1634913146.347236000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-76cc9d288873fe74081f436e", "kind": "directory_service", "frame_number": 2088, "timestamp_epoch": "1634913146.347551000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-630cc3dbeef59c2d31642f16", "kind": "directory_service", "frame_number": 2094, "timestamp_epoch": "1634913146.349035000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-89c5e7460e2b3d03dcbd489b", "kind": "directory_service", "frame_number": 2096, "timestamp_epoch": "1634913146.349491000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-2d674b93b22c10857aa1064b", "kind": "directory_service", "frame_number": 2097, "timestamp_epoch": "1634913146.349962000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-896f83ebe1601988c338f6cc", "kind": "directory_service", "frame_number": 2098, "timestamp_epoch": "1634913146.350163000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-359f7342b631ba565eaa9cde", "kind": "directory_service", "frame_number": 2099, "timestamp_epoch": "1634913146.350837000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 84, "udp_stream": null, "fields": {} }, { "event_id": "evt-7dfddf20ce57146c560eb72a", "kind": "directory_service", "frame_number": 2112, "timestamp_epoch": "1634913147.179999000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d057f7ad94b7f79e9d9881f6", "kind": "directory_service", "frame_number": 2114, "timestamp_epoch": "1634913147.180284000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-9b40005134b38dfa31c3dc32", "kind": "directory_service", "frame_number": 2117, "timestamp_epoch": "1634913147.183229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-beee61aa7fd954035178e29c", "kind": "directory_service", "frame_number": 2119, "timestamp_epoch": "1634913147.183906000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-6bf93d6a16c677a9eb573deb", "kind": "directory_service", "frame_number": 2134, "timestamp_epoch": "1634913147.409943000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-95fb30c5e7a083677138c5cc", "kind": "directory_service", "frame_number": 2135, "timestamp_epoch": "1634913147.410332000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-00fb683871d716879760f97d", "kind": "directory_service", "frame_number": 2140, "timestamp_epoch": "1634913147.420786000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-6dcc697bde5fb4fbe9b60170", "kind": "directory_service", "frame_number": 2142, "timestamp_epoch": "1634913147.421577000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-18cd7d4ce57669a559ddee27", "kind": "directory_service", "frame_number": 2143, "timestamp_epoch": "1634913147.422215000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-bd3b22ffe8578a4578ff78f0", "kind": "directory_service", "frame_number": 2144, "timestamp_epoch": "1634913147.422426000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-2d7fd81ed2cd9fb69b6f62ac", "kind": "directory_service", "frame_number": 2145, "timestamp_epoch": "1634913147.422751000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-54725ed2029cc7d2c33940df", "kind": "directory_service", "frame_number": 2146, "timestamp_epoch": "1634913147.422969000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-97c61e8003a1116f5f19eecf", "kind": "directory_service", "frame_number": 2147, "timestamp_epoch": "1634913147.423843000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-04637b1197b55b5fd792373b", "kind": "directory_service", "frame_number": 2148, "timestamp_epoch": "1634913147.424204000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-53c081f1efa736c37beb43c9", "kind": "directory_service", "frame_number": 2300, "timestamp_epoch": "1634913147.711144000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 109, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-9239c5031e5647bc7390838c", "kind": "directory_service", "frame_number": 2304, "timestamp_epoch": "1634913147.737004000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 107, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-89493dff6f5114ee6b9ddd27", "kind": "directory_service", "frame_number": 2339, "timestamp_epoch": "1634913149.377451000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-96ef30e5f942a6df7a51dae0", "kind": "directory_service", "frame_number": 2340, "timestamp_epoch": "1634913149.377688000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-4dff4087f605a44708753b6a", "kind": "directory_service", "frame_number": 2341, "timestamp_epoch": "1634913149.378030000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-74ed34b06e50bdf862e4c332", "kind": "directory_service", "frame_number": 2342, "timestamp_epoch": "1634913149.378307000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-089fe79c8a7ce2b393e78903", "kind": "directory_service", "frame_number": 2343, "timestamp_epoch": "1634913149.379052000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-dddec29f9950e3719419fae9", "kind": "directory_service", "frame_number": 2344, "timestamp_epoch": "1634913149.379201000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-da74f62b7c1f705608622a44", "kind": "directory_service", "frame_number": 2347, "timestamp_epoch": "1634913149.380709000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-5c3abfb2419e205712f7bbb9", "kind": "directory_service", "frame_number": 2348, "timestamp_epoch": "1634913149.380888000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-4cfd02a1644a7dd5eb4dd120", "kind": "directory_service", "frame_number": 2349, "timestamp_epoch": "1634913149.381301000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-d8762ab51841bdc437e5f6e1", "kind": "directory_service", "frame_number": 2350, "timestamp_epoch": "1634913149.381528000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c3d89a8eac2c70529ce83d30", "kind": "directory_service", "frame_number": 2351, "timestamp_epoch": "1634913149.381705000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c7415a0c9c3bee036bfd9541", "kind": "directory_service", "frame_number": 2352, "timestamp_epoch": "1634913149.381850000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 113, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-fba6cbe1538a161d02e63b22", "kind": "directory_service", "frame_number": 2356, "timestamp_epoch": "1634913149.399513000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-e0d1f58f2dae8d80e225b5e8", "kind": "directory_service", "frame_number": 2358, "timestamp_epoch": "1634913149.399936000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-aa3f7fa4146f9f6aab69e5c7", "kind": "directory_service", "frame_number": 2361, "timestamp_epoch": "1634913149.400779000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-234ca9844ecf8a4fe8d531d8", "kind": "directory_service", "frame_number": 2363, "timestamp_epoch": "1634913149.401647000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-f5e3698f959e544a293bc56a", "kind": "directory_service", "frame_number": 2364, "timestamp_epoch": "1634913149.402236000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8d6b010e4171d602944daf45", "kind": "directory_service", "frame_number": 2365, "timestamp_epoch": "1634913149.402732000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b86da69607c496ac5ae6ccac", "kind": "directory_service", "frame_number": 2366, "timestamp_epoch": "1634913149.403090000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-5b19dc227039aede7d26b90a", "kind": "directory_service", "frame_number": 2367, "timestamp_epoch": "1634913149.403300000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-0b9fc178a219635a6862ad5c", "kind": "directory_service", "frame_number": 2368, "timestamp_epoch": "1634913149.403866000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-a1123ef675e403130136be79", "kind": "directory_service", "frame_number": 2369, "timestamp_epoch": "1634913149.404031000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b2c88661fefebc8d8c45536d", "kind": "directory_service", "frame_number": 2374, "timestamp_epoch": "1634913149.410923000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-dfe614a0542259c5000bf0fc", "kind": "directory_service", "frame_number": 2376, "timestamp_epoch": "1634913149.411898000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-e24fe018ce840e29c499209e", "kind": "directory_service", "frame_number": 2377, "timestamp_epoch": "1634913149.412324000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b7674aa644b11f387db47957", "kind": "directory_service", "frame_number": 2380, "timestamp_epoch": "1634913149.412748000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b945bc3aae9e0ad1409c1277", "kind": "directory_service", "frame_number": 2382, "timestamp_epoch": "1634913149.413016000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-789c32889737e93d776dd718", "kind": "directory_service", "frame_number": 2383, "timestamp_epoch": "1634913149.413357000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-466cbebc5ed372921867f584", "kind": "directory_service", "frame_number": 2384, "timestamp_epoch": "1634913149.414592000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 115, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-0b96a1bbf7b24d4b689c924c", "kind": "directory_service", "frame_number": 2388, "timestamp_epoch": "1634913149.414913000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 114, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-4d51e0abb4a4ad0c2e0a5e27", "kind": "directory_service", "frame_number": 2414, "timestamp_epoch": "1634913154.532143000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-eac73089aba6b0f295a2bfb0", "kind": "directory_service", "frame_number": 2416, "timestamp_epoch": "1634913154.532511000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d68c6e812030e0f1e5527201", "kind": "directory_service", "frame_number": 2419, "timestamp_epoch": "1634913154.534184000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-e3ced6b3a57d7c81fc890d68", "kind": "directory_service", "frame_number": 2421, "timestamp_epoch": "1634913154.535212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-a5b824678d9790183dbefd20", "kind": "directory_service", "frame_number": 2423, "timestamp_epoch": "1634913154.546386000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-bacb784b2080285cccdfad00", "kind": "directory_service", "frame_number": 2424, "timestamp_epoch": "1634913154.546643000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-7403cd73079e9bd721b1e5ab", "kind": "directory_service", "frame_number": 2425, "timestamp_epoch": "1634913154.546948000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-815ba137c7a1863756d539f0", "kind": "directory_service", "frame_number": 2426, "timestamp_epoch": "1634913154.547164000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5dcab76392ddd6878132f8ca", "kind": "directory_service", "frame_number": 2427, "timestamp_epoch": "1634913154.547360000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.baseObject": "CN=NTDS Settings,CN=ENEMYWATCH-DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d47619f6e1d47e10915e815a", "kind": "directory_service", "frame_number": 2428, "timestamp_epoch": "1634913154.547599000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-a305ac0515ef6ad43a44b7c9", "kind": "directory_service", "frame_number": 2429, "timestamp_epoch": "1634913154.547791000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "3", "ldap.protocolOp": "3" } }, { "event_id": "evt-876b134411ccd5cbef2f8ed4", "kind": "directory_service", "frame_number": 2430, "timestamp_epoch": "1634913154.548055000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-dc09f55a461076157fa0a31d", "kind": "directory_service", "frame_number": 2431, "timestamp_epoch": "1634913154.548304000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.baseObject": "CN=OID,CN=Public Key Services,CN=Services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-68980a828e91878d499644d3", "kind": "directory_service", "frame_number": 2432, "timestamp_epoch": "1634913154.548509000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-e37941ee29813f30a51fb19f", "kind": "directory_service", "frame_number": 2463, "timestamp_epoch": "1634913154.574982000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 116, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ea97d7d4334f1be717349967", "kind": "directory_service", "frame_number": 2670, "timestamp_epoch": "1634913184.597167000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9f8995e0906dc68d5fac03c4", "kind": "directory_service", "frame_number": 2671, "timestamp_epoch": "1634913184.597442000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-74952cb1946daff2467d2790", "kind": "directory_service", "frame_number": 2672, "timestamp_epoch": "1634913184.597928000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-58e4cceaa7109188580cc94f", "kind": "directory_service", "frame_number": 2673, "timestamp_epoch": "1634913184.598253000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-5c980684268cff7b04d48099", "kind": "directory_service", "frame_number": 2674, "timestamp_epoch": "1634913184.598446000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2612d443e48824d9432e3da4", "kind": "directory_service", "frame_number": 2675, "timestamp_epoch": "1634913184.598708000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-bc858debfb8a2019630b206e", "kind": "directory_service", "frame_number": 2676, "timestamp_epoch": "1634913184.599283000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-331af31f2ecefc18c81797f3", "kind": "directory_service", "frame_number": 2677, "timestamp_epoch": "1634913184.599449000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 93, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-508de2b60a817cf6ce14664c", "kind": "directory_service", "frame_number": 2699, "timestamp_epoch": "1634913184.621674000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-4cdd41aa2cb5347c0c746f0c", "kind": "directory_service", "frame_number": 2700, "timestamp_epoch": "1634913184.622184000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-8a4504ddcdbaab4da60de49d", "kind": "directory_service", "frame_number": 2701, "timestamp_epoch": "1634913184.622475000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-d1caa64e3e53a6f3058c77e8", "kind": "directory_service", "frame_number": 2702, "timestamp_epoch": "1634913184.622793000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-77355e87dfdb7e05e8f61de9", "kind": "directory_service", "frame_number": 2703, "timestamp_epoch": "1634913184.623727000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-bcfb7e5be8bbd1bc1890816c", "kind": "directory_service", "frame_number": 2704, "timestamp_epoch": "1634913184.624214000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-77406d688e4a021292fe960b", "kind": "directory_service", "frame_number": 2705, "timestamp_epoch": "1634913184.624481000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-a902ce90a52c350ae66f8b61", "kind": "directory_service", "frame_number": 2706, "timestamp_epoch": "1634913184.624880000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-31790d1aabfe32e512cdea51", "kind": "directory_service", "frame_number": 2708, "timestamp_epoch": "1634913184.625209000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-b9b3ae44329858a920907140", "kind": "directory_service", "frame_number": 2709, "timestamp_epoch": "1634913184.625793000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-b36a92d72991b46662b25f70", "kind": "directory_service", "frame_number": 2710, "timestamp_epoch": "1634913184.626066000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-b9e405047620eedd7f374608", "kind": "directory_service", "frame_number": 2711, "timestamp_epoch": "1634913184.626530000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-bfdec0c169adce68e97b78da", "kind": "directory_service", "frame_number": 2712, "timestamp_epoch": "1634913184.628349000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-b3d598b5cab13d1e82fcb24e", "kind": "directory_service", "frame_number": 2713, "timestamp_epoch": "1634913184.629077000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-fe369bf66eff8cba7439c27e", "kind": "directory_service", "frame_number": 2714, "timestamp_epoch": "1634913184.629308000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "36" } }, { "event_id": "evt-a98c655f5d82365bb00b237f", "kind": "directory_service", "frame_number": 2715, "timestamp_epoch": "1634913184.629836000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "36", "samr.samr_UserInfo21.account_name": "kevin.henderson", "samr.samr_UserInfo21.full_name": "Kevin Henderson" } }, { "event_id": "evt-e12ef39ea9829d94e176fd75", "kind": "directory_service", "frame_number": 2716, "timestamp_epoch": "1634913184.630349000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-4d7704904f1e292c42ea18f2", "kind": "directory_service", "frame_number": 2717, "timestamp_epoch": "1634913184.630761000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-38bb943f2b5bab322aa5d2cd", "kind": "directory_service", "frame_number": 2718, "timestamp_epoch": "1634913184.630974000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-3f3e9269b5110ae4a97b0a01", "kind": "directory_service", "frame_number": 2719, "timestamp_epoch": "1634913184.631320000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-92c4915bbe3a3b18aa8f47b9", "kind": "directory_service", "frame_number": 2720, "timestamp_epoch": "1634913184.633648000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-837bbe5d10557ce8b5245f84", "kind": "directory_service", "frame_number": 2721, "timestamp_epoch": "1634913184.634069000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-59a6bce88a42e9159993c346", "kind": "directory_service", "frame_number": 2722, "timestamp_epoch": "1634913184.634314000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-2c930e2d98a50efe61939412", "kind": "directory_service", "frame_number": 2723, "timestamp_epoch": "1634913184.634622000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-cf2c29b9ad304b8dbfb5852a", "kind": "directory_service", "frame_number": 2726, "timestamp_epoch": "1634913184.640159000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-4a81b72f842eacf5aba286c8", "kind": "directory_service", "frame_number": 2727, "timestamp_epoch": "1634913184.640596000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-6fc66eafc8e7d023dc7b57e5", "kind": "directory_service", "frame_number": 2728, "timestamp_epoch": "1634913184.640873000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-0d6608134b7e440920c18926", "kind": "directory_service", "frame_number": 2729, "timestamp_epoch": "1634913184.641392000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-926712c59af363b9aafc3074", "kind": "directory_service", "frame_number": 2730, "timestamp_epoch": "1634913184.641959000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-3b947edd6629fd59b6b29923", "kind": "directory_service", "frame_number": 2731, "timestamp_epoch": "1634913184.642336000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 126, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-260628ad01cbd99b1bcb0d18", "kind": "directory_service", "frame_number": 2799, "timestamp_epoch": "1634913184.961165000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-3e2b76dbb9d7349d5571c411", "kind": "directory_service", "frame_number": 2801, "timestamp_epoch": "1634913184.961996000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-c4ad51cdd4f1f47f98d74dec", "kind": "directory_service", "frame_number": 2802, "timestamp_epoch": "1634913184.966629000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-b544a6c7e06a331f1030b4e6", "kind": "directory_service", "frame_number": 2803, "timestamp_epoch": "1634913184.967094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-09833e1d8e369fb1bf8916fa", "kind": "directory_service", "frame_number": 2808, "timestamp_epoch": "1634913184.972998000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-ca7103f5f7b8f50a977add05", "kind": "directory_service", "frame_number": 2810, "timestamp_epoch": "1634913184.974053000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-b274fd862ab402a12343aa2d", "kind": "directory_service", "frame_number": 2811, "timestamp_epoch": "1634913184.974676000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-33ca25e0a10725b98603b181", "kind": "directory_service", "frame_number": 2812, "timestamp_epoch": "1634913184.974912000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-714cf9167f7cbcba5a1d4bd3", "kind": "directory_service", "frame_number": 2813, "timestamp_epoch": "1634913184.975209000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0ce201149d6589f4d747e65a", "kind": "directory_service", "frame_number": 2814, "timestamp_epoch": "1634913184.975475000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c34937a3768eba0361128695", "kind": "directory_service", "frame_number": 2815, "timestamp_epoch": "1634913184.975867000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-1abc57182309eed07204cf94", "kind": "directory_service", "frame_number": 2816, "timestamp_epoch": "1634913184.976318000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-53ed1193b883e5dab977c374", "kind": "directory_service", "frame_number": 2832, "timestamp_epoch": "1634913185.296883000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 134, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-89a5a05e59550cdcefe9e488", "kind": "directory_service", "frame_number": 2841, "timestamp_epoch": "1634913185.486261000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 133, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ff4bcfa0d920aaca69dd135f", "kind": "directory_service", "frame_number": 3444, "timestamp_epoch": "1634913211.572439000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-11451689b143a8946a5b6e10", "kind": "directory_service", "frame_number": 3445, "timestamp_epoch": "1634913211.572602000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-92988e97a58111277c77c93c", "kind": "directory_service", "frame_number": 3446, "timestamp_epoch": "1634913211.572870000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ca6536fd662e5e67163aedfc", "kind": "directory_service", "frame_number": 3447, "timestamp_epoch": "1634913211.573090000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-65881e5d69592ca5e6ac6889", "kind": "directory_service", "frame_number": 3448, "timestamp_epoch": "1634913211.573417000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-494aaf2aeadd813261926300", "kind": "directory_service", "frame_number": 3449, "timestamp_epoch": "1634913211.573589000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2b8ecd4254a2f9172899f042", "kind": "directory_service", "frame_number": 3450, "timestamp_epoch": "1634913211.573881000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-8fed841e7a592cc20c94e474", "kind": "directory_service", "frame_number": 3451, "timestamp_epoch": "1634913211.573973000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-66d89fc2ffa40bb3a59d69f5", "kind": "directory_service", "frame_number": 3468, "timestamp_epoch": "1634913211.594018000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-b9bc270b5024fb343da0c928", "kind": "directory_service", "frame_number": 3469, "timestamp_epoch": "1634913211.594418000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-f60db7bf2b4e9c6e36bb9d8f", "kind": "directory_service", "frame_number": 3470, "timestamp_epoch": "1634913211.594705000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-91a9cb3598fab0b7080346f9", "kind": "directory_service", "frame_number": 3471, "timestamp_epoch": "1634913211.595010000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-ebd9c91f7faf5f9a46efe59d", "kind": "directory_service", "frame_number": 3472, "timestamp_epoch": "1634913211.595209000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-b7ba004d19544d74ff9104e5", "kind": "directory_service", "frame_number": 3473, "timestamp_epoch": "1634913211.595531000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-afc15af7e6572d7523f966dc", "kind": "directory_service", "frame_number": 3474, "timestamp_epoch": "1634913211.595948000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-8223976d38fe8e8361e600dd", "kind": "directory_service", "frame_number": 3475, "timestamp_epoch": "1634913211.596471000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-2cdaced9fd4465747c7b9e13", "kind": "directory_service", "frame_number": 3476, "timestamp_epoch": "1634913211.596983000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-4987cfe7ef803116a624be23", "kind": "directory_service", "frame_number": 3477, "timestamp_epoch": "1634913211.597346000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-961c7b90ff646ba638a38dd3", "kind": "directory_service", "frame_number": 3478, "timestamp_epoch": "1634913211.597622000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-309941911253c999f02d9cb7", "kind": "directory_service", "frame_number": 3479, "timestamp_epoch": "1634913211.598045000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-de6c8e2bc8e86d92853827d1", "kind": "directory_service", "frame_number": 3480, "timestamp_epoch": "1634913211.598687000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-1384540f55f12e39003a04f7", "kind": "directory_service", "frame_number": 3481, "timestamp_epoch": "1634913211.599136000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-07315e5c425c09839c09fa91", "kind": "directory_service", "frame_number": 3482, "timestamp_epoch": "1634913211.599526000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "36" } }, { "event_id": "evt-3661834abd40aa2f5e34475c", "kind": "directory_service", "frame_number": 3483, "timestamp_epoch": "1634913211.599905000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "36", "samr.samr_UserInfo21.account_name": "marcus.cobb", "samr.samr_UserInfo21.full_name": "Marcus Cobb" } }, { "event_id": "evt-fe2bf812ac45c4208209a1b0", "kind": "directory_service", "frame_number": 3484, "timestamp_epoch": "1634913211.600051000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-9d4d93386c594dacf6d2d7af", "kind": "directory_service", "frame_number": 3485, "timestamp_epoch": "1634913211.600415000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-c3a8c92cfb4edf99740f1301", "kind": "directory_service", "frame_number": 3486, "timestamp_epoch": "1634913211.600749000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-bd2ae47dc4ce4ef02d313d36", "kind": "directory_service", "frame_number": 3487, "timestamp_epoch": "1634913211.601102000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-9ebf9a22d27cfa4ba3f85701", "kind": "directory_service", "frame_number": 3488, "timestamp_epoch": "1634913211.601372000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-a9f2a0ce59a62493854755b0", "kind": "directory_service", "frame_number": 3489, "timestamp_epoch": "1634913211.601660000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-5c0e63ffa453480ffdd5206f", "kind": "directory_service", "frame_number": 3490, "timestamp_epoch": "1634913211.602813000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-ab696b78ddd3ce0266d076a1", "kind": "directory_service", "frame_number": 3491, "timestamp_epoch": "1634913211.603062000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-02338633903ba90526066a71", "kind": "directory_service", "frame_number": 3492, "timestamp_epoch": "1634913211.605607000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-7b4133ba4f22bd9ce077ba5b", "kind": "directory_service", "frame_number": 3493, "timestamp_epoch": "1634913211.605881000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-8766db1440724cd3f20dd3a1", "kind": "directory_service", "frame_number": 3494, "timestamp_epoch": "1634913211.606071000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-4e0d50c546f4e0a3c36fd5fd", "kind": "directory_service", "frame_number": 3495, "timestamp_epoch": "1634913211.606408000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-b2c0de821ae0492fc1211683", "kind": "directory_service", "frame_number": 3496, "timestamp_epoch": "1634913211.606648000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-103b6d2dd72b52e90eb50e33", "kind": "directory_service", "frame_number": 3497, "timestamp_epoch": "1634913211.607068000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 157, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-c0c26938da69ec3297196ea6", "kind": "directory_service", "frame_number": 3545, "timestamp_epoch": "1634913211.915528000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-6d1ea9be4595d9c51da51a29", "kind": "directory_service", "frame_number": 3547, "timestamp_epoch": "1634913211.916395000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-d0bef535c011cb1ca864d19b", "kind": "directory_service", "frame_number": 3548, "timestamp_epoch": "1634913211.922015000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-889dcc6948956f53ff640700", "kind": "directory_service", "frame_number": 3549, "timestamp_epoch": "1634913211.922376000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-d566838b750c9a780d4b9ab4", "kind": "directory_service", "frame_number": 3554, "timestamp_epoch": "1634913211.927868000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-32fb936039f6cd731415e2d4", "kind": "directory_service", "frame_number": 3556, "timestamp_epoch": "1634913211.928846000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-8b3597edaf76f010f1651cc3", "kind": "directory_service", "frame_number": 3557, "timestamp_epoch": "1634913211.929270000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-c383af0eb07583d7365e07af", "kind": "directory_service", "frame_number": 3558, "timestamp_epoch": "1634913211.929484000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-24e28b234ad671e19222ab35", "kind": "directory_service", "frame_number": 3559, "timestamp_epoch": "1634913211.929660000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-df4cc69818e2ef1e31a5f153", "kind": "directory_service", "frame_number": 3560, "timestamp_epoch": "1634913211.929878000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-25e4d457c5da7ae80b5959b5", "kind": "directory_service", "frame_number": 3561, "timestamp_epoch": "1634913211.930238000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-c98852f2fd30a1e1a5be2dde", "kind": "directory_service", "frame_number": 3562, "timestamp_epoch": "1634913211.930603000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-40d238b51718b909984d72f0", "kind": "directory_service", "frame_number": 3566, "timestamp_epoch": "1634913212.254621000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 164, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-d22a170304838a56018ea69e", "kind": "directory_service", "frame_number": 3570, "timestamp_epoch": "1634913212.260252000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 163, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-fecfc5f34f33ee3bc2971281", "kind": "directory_service", "frame_number": 4223, "timestamp_epoch": "1634913239.064236000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9764641a49d90e83a82b7118", "kind": "directory_service", "frame_number": 4224, "timestamp_epoch": "1634913239.064431000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-493d7e052c689d93ecba2a77", "kind": "directory_service", "frame_number": 4225, "timestamp_epoch": "1634913239.064690000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-339d88c00204249718a7f2fa", "kind": "directory_service", "frame_number": 4226, "timestamp_epoch": "1634913239.065004000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1bbff2acbbfdb2e4c5fb7c5c", "kind": "directory_service", "frame_number": 4227, "timestamp_epoch": "1634913239.065185000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ec1b3ad768160d76b91f0f6e", "kind": "directory_service", "frame_number": 4228, "timestamp_epoch": "1634913239.065459000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-97ef478a9403404fa9aeadf2", "kind": "directory_service", "frame_number": 4229, "timestamp_epoch": "1634913239.065618000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-22366eb0f733e3acc1408769", "kind": "directory_service", "frame_number": 4230, "timestamp_epoch": "1634913239.065774000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 183, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-4a30570e1f107bb071620acc", "kind": "directory_service", "frame_number": 4249, "timestamp_epoch": "1634913239.083080000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-16195032c3cdbf990098cac4", "kind": "directory_service", "frame_number": 4250, "timestamp_epoch": "1634913239.083436000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-3b3a303d6b62a0d9cf826e7c", "kind": "directory_service", "frame_number": 4251, "timestamp_epoch": "1634913239.083680000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-772183229442771b2ca027d9", "kind": "directory_service", "frame_number": 4252, "timestamp_epoch": "1634913239.083946000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-0939685ee7424ec5e4cdd3a4", "kind": "directory_service", "frame_number": 4253, "timestamp_epoch": "1634913239.084963000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-ef953bb18707cb48e18b92f6", "kind": "directory_service", "frame_number": 4254, "timestamp_epoch": "1634913239.085353000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-7bbad01209190a5a8341a707", "kind": "directory_service", "frame_number": 4255, "timestamp_epoch": "1634913239.085566000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-9d247745d28bff0fdc480b96", "kind": "directory_service", "frame_number": 4256, "timestamp_epoch": "1634913239.085914000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-da50c98479d154388c4310e6", "kind": "directory_service", "frame_number": 4257, "timestamp_epoch": "1634913239.086347000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-dca42eed1444636df11a1fa3", "kind": "directory_service", "frame_number": 4258, "timestamp_epoch": "1634913239.086645000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-70f59f43ecb8fc9c5b6ab18e", "kind": "directory_service", "frame_number": 4259, "timestamp_epoch": "1634913239.086855000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-726be651cf8c041d9afbaddf", "kind": "directory_service", "frame_number": 4260, "timestamp_epoch": "1634913239.087200000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-ebabf3c6c5400d90d9ade737", "kind": "directory_service", "frame_number": 4261, "timestamp_epoch": "1634913239.087672000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-14397710dadf06b23f82ec7c", "kind": "directory_service", "frame_number": 4262, "timestamp_epoch": "1634913239.088103000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "34" } }, { "event_id": "evt-5c31c6d30fefd5303985da4d", "kind": "directory_service", "frame_number": 4263, "timestamp_epoch": "1634913239.088314000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "36" } }, { "event_id": "evt-fe3a0588f58ccde986f4ccb1", "kind": "directory_service", "frame_number": 4264, "timestamp_epoch": "1634913239.088685000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "36", "samr.samr_UserInfo21.account_name": "agnes.warren", "samr.samr_UserInfo21.full_name": "Agnes Warren" } }, { "event_id": "evt-c4dcac3f7a8ee735e817a10d", "kind": "directory_service", "frame_number": 4265, "timestamp_epoch": "1634913239.089905000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-5ac15f0c52ac04c6ded47254", "kind": "directory_service", "frame_number": 4266, "timestamp_epoch": "1634913239.090347000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "3" } }, { "event_id": "evt-a9ec8e6dbaff5282c2352b94", "kind": "directory_service", "frame_number": 4267, "timestamp_epoch": "1634913239.090589000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-492fb978652e65eeb8e21b45", "kind": "directory_service", "frame_number": 4268, "timestamp_epoch": "1634913239.090898000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "39" } }, { "event_id": "evt-d317f1e565ae3c9627239ee6", "kind": "directory_service", "frame_number": 4269, "timestamp_epoch": "1634913239.091915000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-b9b6df01f428854e37d11100", "kind": "directory_service", "frame_number": 4270, "timestamp_epoch": "1634913239.092201000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "16" } }, { "event_id": "evt-68fbdc76bb0efb67416ad0d6", "kind": "directory_service", "frame_number": 4271, "timestamp_epoch": "1634913239.092435000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-918d7ba65cc3b34ad9de987f", "kind": "directory_service", "frame_number": 4272, "timestamp_epoch": "1634913239.092808000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-e56f2e2dc093c6d3edc62454", "kind": "directory_service", "frame_number": 4273, "timestamp_epoch": "1634913239.093342000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-b14b5b3328a2ea333b27f2e7", "kind": "directory_service", "frame_number": 4275, "timestamp_epoch": "1634913239.093588000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-f04c8bc9404b58384cb43d01", "kind": "directory_service", "frame_number": 4277, "timestamp_epoch": "1634913239.093845000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-dc27546c420d15e89cb44855", "kind": "directory_service", "frame_number": 4278, "timestamp_epoch": "1634913239.094151000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-1dd55c2126b39801fcc694db", "kind": "directory_service", "frame_number": 4279, "timestamp_epoch": "1634913239.095806000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-b100afaf2b1503bc1120576f", "kind": "directory_service", "frame_number": 4280, "timestamp_epoch": "1634913239.096150000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 187, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-3790b32d6c39897932d0227e", "kind": "directory_service", "frame_number": 4329, "timestamp_epoch": "1634913239.402534000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-9ce3ddc34b22027db9ae36b2", "kind": "directory_service", "frame_number": 4331, "timestamp_epoch": "1634913239.403407000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-30f933a8c54f278b4f6fe766", "kind": "directory_service", "frame_number": 4332, "timestamp_epoch": "1634913239.409691000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.baseObject": "DC=enemywatch,DC=net", "ldap.filter": "1", "ldap.protocolOp": "3" } }, { "event_id": "evt-9d73a95c7e3026e97057ea24", "kind": "directory_service", "frame_number": 4333, "timestamp_epoch": "1634913239.410118000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.protocolOp": "4,19,19,19,5" } }, { "event_id": "evt-1419f520df80bdc0dba0f0c4", "kind": "directory_service", "frame_number": 4338, "timestamp_epoch": "1634913239.430496000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-edfdf5839cb63388afcc85c9", "kind": "directory_service", "frame_number": 4340, "timestamp_epoch": "1634913239.431701000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-c86bda716d1aa7e56bb4f5b8", "kind": "directory_service", "frame_number": 4341, "timestamp_epoch": "1634913239.432229000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-70e64168b1c0288d1cd0ff79", "kind": "directory_service", "frame_number": 4342, "timestamp_epoch": "1634913239.432464000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-ace79edab7bb7ddc613351d5", "kind": "directory_service", "frame_number": 4343, "timestamp_epoch": "1634913239.432663000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.baseObject": "CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-5dd9a523234dd4271c36a4d2", "kind": "directory_service", "frame_number": 4344, "timestamp_epoch": "1634913239.432909000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b46873c7634eeadf1583c9e0", "kind": "directory_service", "frame_number": 4345, "timestamp_epoch": "1634913239.433280000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.baseObject": "cn=policies,cn=system,DC=enemywatch,DC=net", "ldap.filter": "0", "ldap.protocolOp": "3" } }, { "event_id": "evt-ecdf9046e88c73bffc376436", "kind": "directory_service", "frame_number": 4346, "timestamp_epoch": "1634913239.433653000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-0737a1b5cd3b15d06e29cecd", "kind": "directory_service", "frame_number": 4351, "timestamp_epoch": "1634913239.768650000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 194, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-bc111cc9ace45ca331f5292a", "kind": "directory_service", "frame_number": 4353, "timestamp_epoch": "1634913239.774672000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 193, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-0634eaa435178dcd72ba05ec", "kind": "directory_service", "frame_number": 5052, "timestamp_epoch": "1634913245.551905000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-eb14d4323b979872f3e5b6be", "kind": "directory_service", "frame_number": 5053, "timestamp_epoch": "1634913245.552194000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-c1bf676257c5e63be8796df0", "kind": "directory_service", "frame_number": 5054, "timestamp_epoch": "1634913245.552668000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-b83e9a7d1f721da0b7e40f98", "kind": "directory_service", "frame_number": 5055, "timestamp_epoch": "1634913245.552993000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-3279951451f64b7c96e57abd", "kind": "directory_service", "frame_number": 5056, "timestamp_epoch": "1634913245.553271000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-9b54f71aba10302f722fcc5b", "kind": "directory_service", "frame_number": 5057, "timestamp_epoch": "1634913245.553438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-52600624be637a47091b73db", "kind": "directory_service", "frame_number": 5060, "timestamp_epoch": "1634913245.554901000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-41a1ac06b1c009f013301ac5", "kind": "directory_service", "frame_number": 5061, "timestamp_epoch": "1634913245.555131000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-58a6ad9925aa2e96aa36a155", "kind": "directory_service", "frame_number": 5062, "timestamp_epoch": "1634913245.555415000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c861b51856bd076be3ac8870", "kind": "directory_service", "frame_number": 5063, "timestamp_epoch": "1634913245.555719000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-963c1d26b5bfafde91034816", "kind": "directory_service", "frame_number": 5064, "timestamp_epoch": "1634913245.555988000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-fca15a145213417d7250f4be", "kind": "directory_service", "frame_number": 5065, "timestamp_epoch": "1634913245.556147000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 215, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-324e19be52fcf803d2bf0470", "kind": "directory_service", "frame_number": 5069, "timestamp_epoch": "1634913245.558681000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-3a424a6418ae1ba95eb5a000", "kind": "directory_service", "frame_number": 5071, "timestamp_epoch": "1634913245.559023000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-818010cb24924f410cc45187", "kind": "directory_service", "frame_number": 5074, "timestamp_epoch": "1634913245.559977000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-361274ece6d22f9784091bfd", "kind": "directory_service", "frame_number": 5076, "timestamp_epoch": "1634913245.560736000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-774f2fe08e841750d8ff1e17", "kind": "directory_service", "frame_number": 5077, "timestamp_epoch": "1634913245.561177000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1856c26f8bfd10ceebeed4e7", "kind": "directory_service", "frame_number": 5078, "timestamp_epoch": "1634913245.561423000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-77e660b6dedba7c7e072cd69", "kind": "directory_service", "frame_number": 5079, "timestamp_epoch": "1634913245.561713000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-896eb275007b7bd8321faca0", "kind": "directory_service", "frame_number": 5080, "timestamp_epoch": "1634913245.561918000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-e52e9b9c950c4e9fa88d54bb", "kind": "directory_service", "frame_number": 5081, "timestamp_epoch": "1634913245.562183000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ad9dc374bb2e2d3475b12532", "kind": "directory_service", "frame_number": 5082, "timestamp_epoch": "1634913245.562421000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5b1f3dc72e4c6f0801730d42", "kind": "directory_service", "frame_number": 5087, "timestamp_epoch": "1634913245.565701000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-07c7a4a7a389fb875fa346ce", "kind": "directory_service", "frame_number": 5089, "timestamp_epoch": "1634913245.566568000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-0f9537f0c282a6c600f13631", "kind": "directory_service", "frame_number": 5090, "timestamp_epoch": "1634913245.567065000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-53c33366832911d63166509d", "kind": "directory_service", "frame_number": 5093, "timestamp_epoch": "1634913245.567365000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5107bb9ae6565fefc13bc03f", "kind": "directory_service", "frame_number": 5095, "timestamp_epoch": "1634913245.567751000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-bdea3ebbf152cac3d8d674eb", "kind": "directory_service", "frame_number": 5096, "timestamp_epoch": "1634913245.567984000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-1e32a178ebe7e52fd059ec64", "kind": "directory_service", "frame_number": 5097, "timestamp_epoch": "1634913245.568251000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 217, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ff08457306912b6d5f9a50e8", "kind": "directory_service", "frame_number": 5101, "timestamp_epoch": "1634913245.568666000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 216, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-30de205c329888a1df3fb8b6", "kind": "directory_service", "frame_number": 5320, "timestamp_epoch": "1634913272.477472000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9f5a543c3285d6961b0dc7f6", "kind": "directory_service", "frame_number": 5321, "timestamp_epoch": "1634913272.477765000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-b5e0f5a277087cb58da5acc3", "kind": "directory_service", "frame_number": 5322, "timestamp_epoch": "1634913272.478218000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-b10232377c73829bb8e817ab", "kind": "directory_service", "frame_number": 5323, "timestamp_epoch": "1634913272.478579000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-97a20d48c21f4c51a4def8cf", "kind": "directory_service", "frame_number": 5324, "timestamp_epoch": "1634913272.478857000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c006627cc46ebfbd25ee2bd9", "kind": "directory_service", "frame_number": 5325, "timestamp_epoch": "1634913272.479009000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-d552dbbe57591f004691c1ba", "kind": "directory_service", "frame_number": 5328, "timestamp_epoch": "1634913272.480494000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-15c7930a7a5b64832fc74216", "kind": "directory_service", "frame_number": 5329, "timestamp_epoch": "1634913272.480681000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9d1fb1e3480222cdcff22aaf", "kind": "directory_service", "frame_number": 5330, "timestamp_epoch": "1634913272.480892000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c2982a7882c8f479f71dcc90", "kind": "directory_service", "frame_number": 5331, "timestamp_epoch": "1634913272.481225000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-dd93a11d661f784853bccac4", "kind": "directory_service", "frame_number": 5332, "timestamp_epoch": "1634913272.481443000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-a7958d157255402b2e1eb12b", "kind": "directory_service", "frame_number": 5333, "timestamp_epoch": "1634913272.481582000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 223, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-d569e4104c1b9f14aa6996d2", "kind": "directory_service", "frame_number": 5337, "timestamp_epoch": "1634913272.484081000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-708f9223819dcfb85457b91b", "kind": "directory_service", "frame_number": 5339, "timestamp_epoch": "1634913272.484393000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d2d236ff80eac8bbe5d9f20c", "kind": "directory_service", "frame_number": 5342, "timestamp_epoch": "1634913272.485732000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-e38760d17e388c0bf600ef2d", "kind": "directory_service", "frame_number": 5344, "timestamp_epoch": "1634913272.486629000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-787921750a65b076879337e8", "kind": "directory_service", "frame_number": 5345, "timestamp_epoch": "1634913272.487225000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1e5e063303b4d1076ac8ce0a", "kind": "directory_service", "frame_number": 5346, "timestamp_epoch": "1634913272.487518000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-ebcebc3679db0d82547664e8", "kind": "directory_service", "frame_number": 5347, "timestamp_epoch": "1634913272.487850000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-da78642226e860de102bb012", "kind": "directory_service", "frame_number": 5348, "timestamp_epoch": "1634913272.488043000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f0808adf04ab6e03499e4e97", "kind": "directory_service", "frame_number": 5349, "timestamp_epoch": "1634913272.488351000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d690a842aee18195366410f0", "kind": "directory_service", "frame_number": 5350, "timestamp_epoch": "1634913272.488596000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b6cd3deb8caf5c33a1100124", "kind": "directory_service", "frame_number": 5355, "timestamp_epoch": "1634913272.492155000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-87eb7bcebb68a00e64783e2e", "kind": "directory_service", "frame_number": 5357, "timestamp_epoch": "1634913272.492997000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-a4cf5f24561a8707ab9c49b4", "kind": "directory_service", "frame_number": 5358, "timestamp_epoch": "1634913272.493575000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4b1b0e91ba78eefca60f56eb", "kind": "directory_service", "frame_number": 5361, "timestamp_epoch": "1634913272.493853000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3d76ce199583eaabfa2e6237", "kind": "directory_service", "frame_number": 5363, "timestamp_epoch": "1634913272.494266000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-51d63a5f16beef1583ef1bac", "kind": "directory_service", "frame_number": 5364, "timestamp_epoch": "1634913272.494557000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-d3d4e9c7a6a76a95f81e7a60", "kind": "directory_service", "frame_number": 5365, "timestamp_epoch": "1634913272.494952000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 225, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-815dbc4c5c14c05b4437408b", "kind": "directory_service", "frame_number": 5368, "timestamp_epoch": "1634913272.495327000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 224, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-2dd9e553e79ab7e6ec2e4b72", "kind": "directory_service", "frame_number": 5686, "timestamp_epoch": "1634913300.070960000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-3ff96d57839926d879a60870", "kind": "directory_service", "frame_number": 5687, "timestamp_epoch": "1634913300.071212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-b9c41e791b9fb8e81216dd4e", "kind": "directory_service", "frame_number": 5688, "timestamp_epoch": "1634913300.071629000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-7cde8e452488a3ce7bb5540d", "kind": "directory_service", "frame_number": 5689, "timestamp_epoch": "1634913300.071960000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-5618448b8411300b6be7cccd", "kind": "directory_service", "frame_number": 5690, "timestamp_epoch": "1634913300.072217000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-d09a9a54924703c5ccc62f73", "kind": "directory_service", "frame_number": 5691, "timestamp_epoch": "1634913300.072402000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-313376c1d9de0c41920e053a", "kind": "directory_service", "frame_number": 5694, "timestamp_epoch": "1634913300.073778000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-3d7520a825af41dbc1f1c74a", "kind": "directory_service", "frame_number": 5695, "timestamp_epoch": "1634913300.074003000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-1f4fc1f7cbe152ffcd54b9e2", "kind": "directory_service", "frame_number": 5696, "timestamp_epoch": "1634913300.074293000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-acca55a40e973437bb29cd15", "kind": "directory_service", "frame_number": 5697, "timestamp_epoch": "1634913300.074639000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-9a7f615744dd679c3fef851c", "kind": "directory_service", "frame_number": 5698, "timestamp_epoch": "1634913300.074948000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-991d70dae5f54a9677e5144c", "kind": "directory_service", "frame_number": 5699, "timestamp_epoch": "1634913300.075212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 234, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-0c925e7e6c5600a93c84f29e", "kind": "directory_service", "frame_number": 5703, "timestamp_epoch": "1634913300.078910000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1ffef861bf63af8b5467c94c", "kind": "directory_service", "frame_number": 5705, "timestamp_epoch": "1634913300.079277000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3628d17c176dfd2e64805bd1", "kind": "directory_service", "frame_number": 5708, "timestamp_epoch": "1634913300.081216000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-0567a1736c69df60c9d08bb2", "kind": "directory_service", "frame_number": 5710, "timestamp_epoch": "1634913300.082247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-7317fba8f1da2caa60c11803", "kind": "directory_service", "frame_number": 5711, "timestamp_epoch": "1634913300.082854000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-80914e702a3af4bcbda26b8d", "kind": "directory_service", "frame_number": 5712, "timestamp_epoch": "1634913300.083102000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-ecb5ef8e7e391ffb68ecd65b", "kind": "directory_service", "frame_number": 5713, "timestamp_epoch": "1634913300.083555000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-45b98cfe13de47f3cebe523f", "kind": "directory_service", "frame_number": 5714, "timestamp_epoch": "1634913300.083788000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-ee0660ae1540c3c43015f4ff", "kind": "directory_service", "frame_number": 5715, "timestamp_epoch": "1634913300.084086000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ef3a94f2252cba1b35edf5b2", "kind": "directory_service", "frame_number": 5716, "timestamp_epoch": "1634913300.084303000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-65cbcb54b3b6a3ce2de6e46d", "kind": "directory_service", "frame_number": 5721, "timestamp_epoch": "1634913300.088553000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-869d5a0d04f52bbba35a76e0", "kind": "directory_service", "frame_number": 5723, "timestamp_epoch": "1634913300.089369000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-a011f6fae8b847a2165b049b", "kind": "directory_service", "frame_number": 5724, "timestamp_epoch": "1634913300.089814000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-e23ff7ca5060deeeb8787500", "kind": "directory_service", "frame_number": 5727, "timestamp_epoch": "1634913300.090115000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-fdfe35e67eeb918a671a2e27", "kind": "directory_service", "frame_number": 5729, "timestamp_epoch": "1634913300.090591000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-9d1ec5a85847026e12265859", "kind": "directory_service", "frame_number": 5730, "timestamp_epoch": "1634913300.090838000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-5209e85c6567b7d80fb9e293", "kind": "directory_service", "frame_number": 5731, "timestamp_epoch": "1634913300.091151000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 236, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-c313545270b08fdbfd9fcfa5", "kind": "directory_service", "frame_number": 5735, "timestamp_epoch": "1634913300.091474000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 235, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ae0b191eeefbd8b9e62cf0c0", "kind": "directory_service", "frame_number": 7157, "timestamp_epoch": "1634913412.852396000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9561b70707aad21971e55eaa", "kind": "directory_service", "frame_number": 7158, "timestamp_epoch": "1634913412.852651000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-6299cf25787c7db68fc3666f", "kind": "directory_service", "frame_number": 7159, "timestamp_epoch": "1634913412.852881000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1ed7b9994483f79abf4f592b", "kind": "directory_service", "frame_number": 7160, "timestamp_epoch": "1634913412.853239000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-a805d28ef25324bc8624f953", "kind": "directory_service", "frame_number": 7161, "timestamp_epoch": "1634913412.853417000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-b3b3499f19b5a773b1bcd661", "kind": "directory_service", "frame_number": 7162, "timestamp_epoch": "1634913412.853595000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-a997d9f2f87972d274bbb75a", "kind": "directory_service", "frame_number": 7165, "timestamp_epoch": "1634913412.858261000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-dde26ba436b0e791a0e4a52d", "kind": "directory_service", "frame_number": 7166, "timestamp_epoch": "1634913412.858512000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-5dd07a721eb75ff3e59420f5", "kind": "directory_service", "frame_number": 7167, "timestamp_epoch": "1634913412.858713000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-f5b81211bcd83e9a0d5cb3ba", "kind": "directory_service", "frame_number": 7168, "timestamp_epoch": "1634913412.859040000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-8c04eeaece64585b112e791c", "kind": "directory_service", "frame_number": 7169, "timestamp_epoch": "1634913412.859241000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-575e99b67d8787678bcf9962", "kind": "directory_service", "frame_number": 7170, "timestamp_epoch": "1634913412.859400000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 250, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-2fe1c512b8441b409e282601", "kind": "directory_service", "frame_number": 7174, "timestamp_epoch": "1634913412.867478000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ab2ef38f87cd624866b3eebd", "kind": "directory_service", "frame_number": 7176, "timestamp_epoch": "1634913412.867826000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-fa20f9b4a68cce7347029ff3", "kind": "directory_service", "frame_number": 7179, "timestamp_epoch": "1634913412.869539000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-27b15b30ca193b59808a3413", "kind": "directory_service", "frame_number": 7181, "timestamp_epoch": "1634913412.870438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-00b2c52d3b6d46e8e4847ee9", "kind": "directory_service", "frame_number": 7182, "timestamp_epoch": "1634913412.870855000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0379ab3fda5cc32524a3e31a", "kind": "directory_service", "frame_number": 7183, "timestamp_epoch": "1634913412.871127000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f25ce8484b5c07ff0988b968", "kind": "directory_service", "frame_number": 7184, "timestamp_epoch": "1634913412.871373000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0351de997175fabb6ec0a87c", "kind": "directory_service", "frame_number": 7185, "timestamp_epoch": "1634913412.871596000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-64363f946cfb4d2ce78d69f7", "kind": "directory_service", "frame_number": 7186, "timestamp_epoch": "1634913412.871882000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-58709025ad75ad7cfc8d88c7", "kind": "directory_service", "frame_number": 7187, "timestamp_epoch": "1634913412.872124000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-cd95979dfac8e26384691220", "kind": "directory_service", "frame_number": 7192, "timestamp_epoch": "1634913412.878781000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-f4124b8c65a31d00f79d2cb6", "kind": "directory_service", "frame_number": 7196, "timestamp_epoch": "1634913412.879738000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-0f862a4ca6a4873338f960a0", "kind": "directory_service", "frame_number": 7197, "timestamp_epoch": "1634913412.880397000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b09dca5eeda434e7c216ea92", "kind": "directory_service", "frame_number": 7200, "timestamp_epoch": "1634913412.880717000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f42d830e4a10e5f4b2f3d1be", "kind": "directory_service", "frame_number": 7202, "timestamp_epoch": "1634913412.881123000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-deb518c68b5afe9fd6aaef95", "kind": "directory_service", "frame_number": 7203, "timestamp_epoch": "1634913412.881439000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-e039721e37420ac585c2f371", "kind": "directory_service", "frame_number": 7204, "timestamp_epoch": "1634913412.881770000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 252, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-139cf060dae0ef0eaff672e7", "kind": "directory_service", "frame_number": 7208, "timestamp_epoch": "1634913412.882540000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 251, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-2bc337729b3b4abcab83b10a", "kind": "directory_service", "frame_number": 23457, "timestamp_epoch": "1634914507.247789000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-279f7b53267835d2e232884d", "kind": "directory_service", "frame_number": 23458, "timestamp_epoch": "1634914507.248180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-f6017992b80ad5c0f31f902a", "kind": "directory_service", "frame_number": 23459, "timestamp_epoch": "1634914507.248606000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-170fdc8d138b83688e06061c", "kind": "directory_service", "frame_number": 23460, "timestamp_epoch": "1634914507.248927000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-8a1038d044e5086aea3a5c00", "kind": "directory_service", "frame_number": 23461, "timestamp_epoch": "1634914507.249274000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-e5ac3f86f7f55f9e887ba0ad", "kind": "directory_service", "frame_number": 23462, "timestamp_epoch": "1634914507.249569000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-92e6af4de6124e0c8f6e0cb8", "kind": "directory_service", "frame_number": 23463, "timestamp_epoch": "1634914507.249859000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-928c18fdf37ba757d1bcd12a", "kind": "directory_service", "frame_number": 23464, "timestamp_epoch": "1634914507.250289000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-565d78048ed68c839430842e", "kind": "directory_service", "frame_number": 23465, "timestamp_epoch": "1634914507.250590000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-0fc34a1c4ecc9014a6350093", "kind": "directory_service", "frame_number": 23466, "timestamp_epoch": "1634914507.250966000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-19a39c2a6171a82917aa4f83", "kind": "directory_service", "frame_number": 23467, "timestamp_epoch": "1634914507.252283000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "19" } }, { "event_id": "evt-8816929ea6ac38b9a61b7ed3", "kind": "directory_service", "frame_number": 23468, "timestamp_epoch": "1634914507.252690000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "19" } }, { "event_id": "evt-ff3326106142952ceddcec64", "kind": "directory_service", "frame_number": 23469, "timestamp_epoch": "1634914507.253047000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "20" } }, { "event_id": "evt-39731b5ff0ba949b1ace2fa4", "kind": "directory_service", "frame_number": 23470, "timestamp_epoch": "1634914507.254035000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "20" } }, { "event_id": "evt-4a78e75d8a4e7d295343bdcd", "kind": "directory_service", "frame_number": 23471, "timestamp_epoch": "1634914507.254456000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-9f0f7052d8c72f8d5548a281", "kind": "directory_service", "frame_number": 23472, "timestamp_epoch": "1634914507.254744000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-79e230aed0cc07c10218071b", "kind": "directory_service", "frame_number": 23473, "timestamp_epoch": "1634914507.254999000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-770f5923e290adf90f788a41", "kind": "directory_service", "frame_number": 23474, "timestamp_epoch": "1634914507.255232000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-a8cf5ecb05fa2b40e375fc9b", "kind": "directory_service", "frame_number": 23475, "timestamp_epoch": "1634914507.255512000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-00afe7a9c7f57e3678a93fda", "kind": "directory_service", "frame_number": 23476, "timestamp_epoch": "1634914507.255737000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-0bb4152b0ab3eed932987bd7", "kind": "directory_service", "frame_number": 23487, "timestamp_epoch": "1634914507.261197000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-71c6edb730fd6e47ac4c4d0b", "kind": "directory_service", "frame_number": 23488, "timestamp_epoch": "1634914507.261559000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-9ad87d7d08583172e49af4f3", "kind": "directory_service", "frame_number": 23489, "timestamp_epoch": "1634914507.261818000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-b9a44c6b3a38ccd708df2b24", "kind": "directory_service", "frame_number": 23490, "timestamp_epoch": "1634914507.262113000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-02990e850f01ed957b536646", "kind": "directory_service", "frame_number": 23491, "timestamp_epoch": "1634914507.262453000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-d28fad2eb0048713f24e1728", "kind": "directory_service", "frame_number": 23492, "timestamp_epoch": "1634914507.262843000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-e4b6ca0a62669fcbf41f157b", "kind": "directory_service", "frame_number": 23493, "timestamp_epoch": "1634914507.263186000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-fc718d77d3d56f23c31c272e", "kind": "directory_service", "frame_number": 23494, "timestamp_epoch": "1634914507.263570000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-1c72ba6b800ef5870702bf26", "kind": "directory_service", "frame_number": 23495, "timestamp_epoch": "1634914507.263891000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-e0eb12ddaa742b7c32c2b48c", "kind": "directory_service", "frame_number": 23496, "timestamp_epoch": "1634914507.264351000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-17f22765f6630ab4c3193c37", "kind": "directory_service", "frame_number": 23497, "timestamp_epoch": "1634914507.264619000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "19" } }, { "event_id": "evt-f386e930a3dff70864547c6b", "kind": "directory_service", "frame_number": 23498, "timestamp_epoch": "1634914507.264954000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "19" } }, { "event_id": "evt-e1e78c3f6b9b73b107e614f8", "kind": "directory_service", "frame_number": 23499, "timestamp_epoch": "1634914507.265229000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "25" } }, { "event_id": "evt-65da6c05694f09c710248b4a", "kind": "directory_service", "frame_number": 23500, "timestamp_epoch": "1634914507.265674000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "25" } }, { "event_id": "evt-7e7a98f93d3e0ddd118c0ec7", "kind": "directory_service", "frame_number": 23501, "timestamp_epoch": "1634914507.265925000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "18" } }, { "event_id": "evt-7bb25b6a13040eae54690caa", "kind": "directory_service", "frame_number": 23502, "timestamp_epoch": "1634914507.266247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "18" } }, { "event_id": "evt-2ee021bee73df307cdd4d8b6", "kind": "directory_service", "frame_number": 23503, "timestamp_epoch": "1634914507.266521000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-a7b05a22651963ffbc412f40", "kind": "directory_service", "frame_number": 23504, "timestamp_epoch": "1634914507.266808000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-c13748cdc9f1765c3fca4321", "kind": "directory_service", "frame_number": 23505, "timestamp_epoch": "1634914507.267052000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-81caad382f2f29a53cc592ed", "kind": "directory_service", "frame_number": 23506, "timestamp_epoch": "1634914507.267272000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-097cfff2b134ad33f30033d3", "kind": "directory_service", "frame_number": 23507, "timestamp_epoch": "1634914507.267509000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-8b7f3abf68428fbbee45c438", "kind": "directory_service", "frame_number": 23508, "timestamp_epoch": "1634914507.267760000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-25bd970493ea8b962bdcbd83", "kind": "directory_service", "frame_number": 23538, "timestamp_epoch": "1634914507.432902000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-1e7e971edacaab4e80caf35d", "kind": "directory_service", "frame_number": 23539, "timestamp_epoch": "1634914507.433399000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "64" } }, { "event_id": "evt-62bbd2935489f4f0472b17a1", "kind": "directory_service", "frame_number": 23540, "timestamp_epoch": "1634914507.433690000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-fb4f8af95c0ba961e206bf5a", "kind": "directory_service", "frame_number": 23541, "timestamp_epoch": "1634914507.434112000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "6" } }, { "event_id": "evt-aa780a5657acb3ad0c722fc1", "kind": "directory_service", "frame_number": 23542, "timestamp_epoch": "1634914507.434454000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-5a83ff9b313d5f808652deed", "kind": "directory_service", "frame_number": 23543, "timestamp_epoch": "1634914507.434778000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "5" } }, { "event_id": "evt-80d72c5992773290c2449442", "kind": "directory_service", "frame_number": 23544, "timestamp_epoch": "1634914507.435097000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-cf64a65b4c4efb055d8d9702", "kind": "directory_service", "frame_number": 23545, "timestamp_epoch": "1634914507.435436000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "7" } }, { "event_id": "evt-e5d7a9b2d9d5e0c5fd701ada", "kind": "directory_service", "frame_number": 23546, "timestamp_epoch": "1634914507.435755000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-5b96dba19f4a117172dad4a0", "kind": "directory_service", "frame_number": 23547, "timestamp_epoch": "1634914507.436179000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "17" } }, { "event_id": "evt-b06531275653653b07e93da6", "kind": "directory_service", "frame_number": 23548, "timestamp_epoch": "1634914507.436463000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-19af1eb443aab063bb20fdf6", "kind": "directory_service", "frame_number": 23549, "timestamp_epoch": "1634914507.436780000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-51b6ec2a1c68031940f033d2", "kind": "directory_service", "frame_number": 23550, "timestamp_epoch": "1634914507.437063000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-7e34b0c663eccd56dc702775", "kind": "directory_service", "frame_number": 23551, "timestamp_epoch": "1634914507.437301000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 550, "udp_stream": null, "fields": { "samr.opnum": "1" } }, { "event_id": "evt-893cb5334a5c53455623b694", "kind": "directory_service", "frame_number": 26063, "timestamp_epoch": "1634914985.976706000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-2c782b115f9a56268cbe702d", "kind": "directory_service", "frame_number": 26064, "timestamp_epoch": "1634914985.976942000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-f530a7eb643402a3c6d25c01", "kind": "directory_service", "frame_number": 26065, "timestamp_epoch": "1634914985.977191000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ce29b48a0908deef1be50ddb", "kind": "directory_service", "frame_number": 26066, "timestamp_epoch": "1634914985.977473000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-4cae1e5de39873f1270cad28", "kind": "directory_service", "frame_number": 26067, "timestamp_epoch": "1634914985.977698000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-f253fa04baf20566fbae8136", "kind": "directory_service", "frame_number": 26068, "timestamp_epoch": "1634914985.978666000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-68134ba4662cd00a7ee7cccf", "kind": "directory_service", "frame_number": 26069, "timestamp_epoch": "1634914985.979046000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1183873e585c3f3f6344262c", "kind": "directory_service", "frame_number": 26070, "timestamp_epoch": "1634914985.979273000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-59cb1bf4824afa1f85e897ae", "kind": "directory_service", "frame_number": 26071, "timestamp_epoch": "1634914985.979397000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-000575f326ee71b14b27cde2", "kind": "directory_service", "frame_number": 26072, "timestamp_epoch": "1634914985.979543000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 746, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-26d17addf594efca683f252f", "kind": "directory_service", "frame_number": 26091, "timestamp_epoch": "1634914985.998788000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-42a9a6ece90bd9b11e6029ff", "kind": "directory_service", "frame_number": 26092, "timestamp_epoch": "1634914985.999036000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-bed60e3df3072fe58f5f8b10", "kind": "directory_service", "frame_number": 26093, "timestamp_epoch": "1634914985.999315000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-0a855345afa45fa7a593b36d", "kind": "directory_service", "frame_number": 26096, "timestamp_epoch": "1634914985.999770000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-0c71d52e2d86025e880368c8", "kind": "directory_service", "frame_number": 26097, "timestamp_epoch": "1634914986.000194000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-7138026b5d940d07f7f9295d", "kind": "directory_service", "frame_number": 26098, "timestamp_epoch": "1634914986.000319000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-0746bde8b71ea13b460c52c6", "kind": "directory_service", "frame_number": 26101, "timestamp_epoch": "1634914986.002228000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-e0a47eb1b237dff4a045cf24", "kind": "directory_service", "frame_number": 26102, "timestamp_epoch": "1634914986.002384000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7b3a73cd35106294b98c95c2", "kind": "directory_service", "frame_number": 26103, "timestamp_epoch": "1634914986.002603000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1fa1b3e178a2d2b893e8e423", "kind": "directory_service", "frame_number": 26104, "timestamp_epoch": "1634914986.002838000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-3a83ae6e4f740c19a9972750", "kind": "directory_service", "frame_number": 26105, "timestamp_epoch": "1634914986.003084000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-2228bf6e1bb79d4f483d7c5a", "kind": "directory_service", "frame_number": 26106, "timestamp_epoch": "1634914986.003243000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 748, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-468c98e6523304309103f497", "kind": "directory_service", "frame_number": 26116, "timestamp_epoch": "1634914986.117846000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1940374e320244ba120ea503", "kind": "directory_service", "frame_number": 26118, "timestamp_epoch": "1634914986.118182000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-bddea9ba3ca36b4aea305fe9", "kind": "directory_service", "frame_number": 26121, "timestamp_epoch": "1634914986.119336000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-a80706e1251ed9b45db07246", "kind": "directory_service", "frame_number": 26123, "timestamp_epoch": "1634914986.120044000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-d10ca172373727cacc6245a2", "kind": "directory_service", "frame_number": 26124, "timestamp_epoch": "1634914986.120789000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-2bb3ffa2d9e2e584044e99f1", "kind": "directory_service", "frame_number": 26125, "timestamp_epoch": "1634914986.121010000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f766a26c250d99cb42d58c03", "kind": "directory_service", "frame_number": 26126, "timestamp_epoch": "1634914986.121313000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-6a21e51b12da90fed50777f6", "kind": "directory_service", "frame_number": 26127, "timestamp_epoch": "1634914986.121507000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d9249a4a4fb224fd57cba0e7", "kind": "directory_service", "frame_number": 26128, "timestamp_epoch": "1634914986.121787000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-313db60f0755354af01c8285", "kind": "directory_service", "frame_number": 26129, "timestamp_epoch": "1634914986.122048000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-48efaad453156cc7c685c41f", "kind": "directory_service", "frame_number": 26134, "timestamp_epoch": "1634914986.126481000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-fec92ab5d884cac1a46504dd", "kind": "directory_service", "frame_number": 26136, "timestamp_epoch": "1634914986.127271000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-12645f5142d95e83ea4d4b3a", "kind": "directory_service", "frame_number": 26137, "timestamp_epoch": "1634914986.127848000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-2b5cc72dbe5a614427739190", "kind": "directory_service", "frame_number": 26140, "timestamp_epoch": "1634914986.128094000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-66635cb8e5092267470f2a87", "kind": "directory_service", "frame_number": 26142, "timestamp_epoch": "1634914986.128479000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d50e49514103b9939a8e6852", "kind": "directory_service", "frame_number": 26143, "timestamp_epoch": "1634914986.128672000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-b4bd5dd9916d1dd01b04ab79", "kind": "directory_service", "frame_number": 26144, "timestamp_epoch": "1634914986.129046000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 750, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-275bcb1140351e219ec54a57", "kind": "directory_service", "frame_number": 26146, "timestamp_epoch": "1634914986.129421000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 749, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-051806663020b7c13c11bcb3", "kind": "directory_service", "frame_number": 29090, "timestamp_epoch": "1634915012.970639000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-db5961bce6da6abe1f3f3d2a", "kind": "directory_service", "frame_number": 29091, "timestamp_epoch": "1634915012.970980000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-8f5618ecaceb8e8feb89d5d2", "kind": "directory_service", "frame_number": 29095, "timestamp_epoch": "1634915012.974070000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-69c3dd38ef1ecdd2b633d49b", "kind": "directory_service", "frame_number": 29096, "timestamp_epoch": "1634915012.975106000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2c5cd1de906776e9c3797257", "kind": "directory_service", "frame_number": 29097, "timestamp_epoch": "1634915012.975287000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-6b266642a55abbc3e4144883", "kind": "directory_service", "frame_number": 29098, "timestamp_epoch": "1634915012.975994000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ff6c5b0f210af428c86cb6d2", "kind": "directory_service", "frame_number": 29099, "timestamp_epoch": "1634915012.979423000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c130b64741108cfe2cd8af51", "kind": "directory_service", "frame_number": 29100, "timestamp_epoch": "1634915012.979798000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e516b931b194ca7df918c242", "kind": "directory_service", "frame_number": 29101, "timestamp_epoch": "1634915012.982054000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-7f8a1a379c00a811aebcbc28", "kind": "directory_service", "frame_number": 29104, "timestamp_epoch": "1634915012.982562000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 756, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-f65f3abc2dee13a14d62d172", "kind": "directory_service", "frame_number": 29118, "timestamp_epoch": "1634915012.991501000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-08c83923c65287e06fcf7dcb", "kind": "directory_service", "frame_number": 29119, "timestamp_epoch": "1634915012.991767000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-079ac9c61df74ca4dcfc37bd", "kind": "directory_service", "frame_number": 29120, "timestamp_epoch": "1634915012.992008000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-b7b6ee1f5058bb4c3be46bc5", "kind": "directory_service", "frame_number": 29121, "timestamp_epoch": "1634915012.992293000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c38a668f7df702ddcfdecdbd", "kind": "directory_service", "frame_number": 29122, "timestamp_epoch": "1634915012.992453000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-8b0c21e6a2a2e167dbf30375", "kind": "directory_service", "frame_number": 29123, "timestamp_epoch": "1634915012.992578000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-476b757d19441acb7ea2446b", "kind": "directory_service", "frame_number": 29126, "timestamp_epoch": "1634915012.996002000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-f12ff1f8c7e31ba417549950", "kind": "directory_service", "frame_number": 29127, "timestamp_epoch": "1634915012.996201000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-df5f98dca53b8cf9ceac388d", "kind": "directory_service", "frame_number": 29128, "timestamp_epoch": "1634915012.996422000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-33208377b608f94e43195932", "kind": "directory_service", "frame_number": 29129, "timestamp_epoch": "1634915012.996720000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1b060a2d993124f39d4517f1", "kind": "directory_service", "frame_number": 29130, "timestamp_epoch": "1634915012.996917000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-1cc0cef5ff8b6f82bf41da27", "kind": "directory_service", "frame_number": 29131, "timestamp_epoch": "1634915012.997101000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 758, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-1ccaf0f3599ed89b8ffe227c", "kind": "directory_service", "frame_number": 29143, "timestamp_epoch": "1634915013.108820000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-cf54379752ca2d0cc69107ad", "kind": "directory_service", "frame_number": 29145, "timestamp_epoch": "1634915013.109110000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-5cbd13d208bc7441bffa2ddb", "kind": "directory_service", "frame_number": 29148, "timestamp_epoch": "1634915013.110781000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-2a9ee6834ccaee6edc9cc039", "kind": "directory_service", "frame_number": 29150, "timestamp_epoch": "1634915013.111398000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-8c5129fa393fc4d35e84d5f7", "kind": "directory_service", "frame_number": 29151, "timestamp_epoch": "1634915013.111735000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d48f5ff23c6a78d61e0c3578", "kind": "directory_service", "frame_number": 29152, "timestamp_epoch": "1634915013.112019000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-7cacfc8ccb7d14fe3244414b", "kind": "directory_service", "frame_number": 29153, "timestamp_epoch": "1634915013.112377000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-82172181912431021a585f58", "kind": "directory_service", "frame_number": 29154, "timestamp_epoch": "1634915013.112541000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-54186fb1624fd1012685ba34", "kind": "directory_service", "frame_number": 29155, "timestamp_epoch": "1634915013.112853000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0f30b805da367579f87b0e3b", "kind": "directory_service", "frame_number": 29156, "timestamp_epoch": "1634915013.113011000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-08c60755af05d3b6882e90f1", "kind": "directory_service", "frame_number": 29161, "timestamp_epoch": "1634915013.116822000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-d0e531ff4a3474272e05865f", "kind": "directory_service", "frame_number": 29163, "timestamp_epoch": "1634915013.117501000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-a4f25565a3fd227cc1335a55", "kind": "directory_service", "frame_number": 29164, "timestamp_epoch": "1634915013.117922000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8d8a07ad1878bc217e739465", "kind": "directory_service", "frame_number": 29167, "timestamp_epoch": "1634915013.118180000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3bf5428b7b0a02b753d0accd", "kind": "directory_service", "frame_number": 29169, "timestamp_epoch": "1634915013.118551000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-50b36f2512831f966716c614", "kind": "directory_service", "frame_number": 29170, "timestamp_epoch": "1634915013.118706000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-a5ac6acf8997de13575d8e10", "kind": "directory_service", "frame_number": 29171, "timestamp_epoch": "1634915013.118981000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 760, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-db3c265ebd09b2158eeb8e0a", "kind": "directory_service", "frame_number": 29175, "timestamp_epoch": "1634915013.119500000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 759, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-ce2c9f8701c787edd0648c5d", "kind": "directory_service", "frame_number": 29254, "timestamp_epoch": "1634915040.434513000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-24a45b00146dd5cd4705399c", "kind": "directory_service", "frame_number": 29255, "timestamp_epoch": "1634915040.434726000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-9bbd1f5af9dc26f8865635fe", "kind": "directory_service", "frame_number": 29256, "timestamp_epoch": "1634915040.435017000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-bedb0ba4fd2a1b3463fcea70", "kind": "directory_service", "frame_number": 29257, "timestamp_epoch": "1634915040.435298000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-c7cde5e2132c87cbffa3e75b", "kind": "directory_service", "frame_number": 29258, "timestamp_epoch": "1634915040.435432000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-0a6d026f58652ff7d1fed560", "kind": "directory_service", "frame_number": 29259, "timestamp_epoch": "1634915040.435667000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-fa73816e8877f58138f81b13", "kind": "directory_service", "frame_number": 29260, "timestamp_epoch": "1634915040.435814000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-e489cdca3b4cc19e4a11ffdf", "kind": "directory_service", "frame_number": 29261, "timestamp_epoch": "1634915040.436007000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-016b6f0187b4b326fc45fcab", "kind": "directory_service", "frame_number": 29262, "timestamp_epoch": "1634915040.436251000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-78290168b66d31228f5d041f", "kind": "directory_service", "frame_number": 29263, "timestamp_epoch": "1634915040.436447000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 763, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-5d7cae22ed7c879b83ecdc9f", "kind": "directory_service", "frame_number": 29280, "timestamp_epoch": "1634915040.451299000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-28a8472a54cba7635e45c10b", "kind": "directory_service", "frame_number": 29281, "timestamp_epoch": "1634915040.451582000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7e97ee54be8cea1187a8d805", "kind": "directory_service", "frame_number": 29282, "timestamp_epoch": "1634915040.452022000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ecb02b86f2aac46a635d8ce0", "kind": "directory_service", "frame_number": 29285, "timestamp_epoch": "1634915040.452359000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-cd4a1ab55937933db53e01f8", "kind": "directory_service", "frame_number": 29286, "timestamp_epoch": "1634915040.452617000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-7f41e7da65b8f6ec734a4567", "kind": "directory_service", "frame_number": 29287, "timestamp_epoch": "1634915040.452800000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-761b40fb5d0c500a6374f830", "kind": "directory_service", "frame_number": 29290, "timestamp_epoch": "1634915040.454554000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-5760ce3dc7ac3f3480b72a61", "kind": "directory_service", "frame_number": 29291, "timestamp_epoch": "1634915040.454741000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-077587c5146ef7fa15c87994", "kind": "directory_service", "frame_number": 29292, "timestamp_epoch": "1634915040.454951000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-068f0ec04d4539c297e88ff4", "kind": "directory_service", "frame_number": 29293, "timestamp_epoch": "1634915040.455260000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2e929e1d18a66821c51738c5", "kind": "directory_service", "frame_number": 29294, "timestamp_epoch": "1634915040.455474000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-b53b7d3f52fc650c4971516b", "kind": "directory_service", "frame_number": 29295, "timestamp_epoch": "1634915040.455644000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 765, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c02e7d7b62a15a71ab16c83b", "kind": "directory_service", "frame_number": 29306, "timestamp_epoch": "1634915040.562287000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-6b84037346bd60caca3ad2d2", "kind": "directory_service", "frame_number": 29308, "timestamp_epoch": "1634915040.562558000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-a4346dc6686f0f112f6f9720", "kind": "directory_service", "frame_number": 29311, "timestamp_epoch": "1634915040.564548000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-0026bacf7c00dad2d194f714", "kind": "directory_service", "frame_number": 29313, "timestamp_epoch": "1634915040.565244000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-49bdbe61e42ae15f65609d93", "kind": "directory_service", "frame_number": 29314, "timestamp_epoch": "1634915040.565729000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4e8f62c4333cf062fd1a324e", "kind": "directory_service", "frame_number": 29315, "timestamp_epoch": "1634915040.565981000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-fd2649837f1fac888619bc3f", "kind": "directory_service", "frame_number": 29316, "timestamp_epoch": "1634915040.566324000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-55661fdf4e791170e8410d2d", "kind": "directory_service", "frame_number": 29317, "timestamp_epoch": "1634915040.566512000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-29130904e91d1c56be80da77", "kind": "directory_service", "frame_number": 29318, "timestamp_epoch": "1634915040.566769000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-748d99f43f893ed053418087", "kind": "directory_service", "frame_number": 29319, "timestamp_epoch": "1634915040.567079000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-56c1810da5dabc2be78c6272", "kind": "directory_service", "frame_number": 29324, "timestamp_epoch": "1634915040.572515000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-90dc0233079710ff80d523b1", "kind": "directory_service", "frame_number": 29326, "timestamp_epoch": "1634915040.573345000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-72b4ccc67ee0d0b25770ff87", "kind": "directory_service", "frame_number": 29327, "timestamp_epoch": "1634915040.573861000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8cbde6c8d3b9003d119fdb23", "kind": "directory_service", "frame_number": 29330, "timestamp_epoch": "1634915040.574080000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-7ddfc693fb92ad65b89537ff", "kind": "directory_service", "frame_number": 29332, "timestamp_epoch": "1634915040.574486000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-e4d97a5e5f652dd5d17f78f7", "kind": "directory_service", "frame_number": 29333, "timestamp_epoch": "1634915040.574655000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-0d25f7b54215d4dcced4081a", "kind": "directory_service", "frame_number": 29334, "timestamp_epoch": "1634915040.574917000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 767, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-6497b4308daf8a84bcade06b", "kind": "directory_service", "frame_number": 29338, "timestamp_epoch": "1634915040.575385000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 766, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-c6fe7d5f38b72bf7684b99f7", "kind": "directory_service", "frame_number": 44961, "timestamp_epoch": "1634915357.648080000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-38e80a8eb96e197b83b5c728", "kind": "directory_service", "frame_number": 44962, "timestamp_epoch": "1634915357.648368000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-a4aae3c7bda1f73f8041d545", "kind": "directory_service", "frame_number": 44963, "timestamp_epoch": "1634915357.648718000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-d7c0e96900a6320100492ece", "kind": "directory_service", "frame_number": 44964, "timestamp_epoch": "1634915357.649101000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2a7a0dbb616e78bd81f069a1", "kind": "directory_service", "frame_number": 44965, "timestamp_epoch": "1634915357.649430000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-0baabc22557e555d9f693486", "kind": "directory_service", "frame_number": 44966, "timestamp_epoch": "1634915357.649636000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c361f1dc816091a9ce0274be", "kind": "directory_service", "frame_number": 44969, "timestamp_epoch": "1634915357.652016000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-8111ad75541ddd8e14f52d9c", "kind": "directory_service", "frame_number": 44970, "timestamp_epoch": "1634915357.652262000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7ee931f8280c422de2426866", "kind": "directory_service", "frame_number": 44971, "timestamp_epoch": "1634915357.652566000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-9665f40c9de8be580b911b32", "kind": "directory_service", "frame_number": 44972, "timestamp_epoch": "1634915357.652892000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-4bb2f9e146e89b13c23fb91c", "kind": "directory_service", "frame_number": 44973, "timestamp_epoch": "1634915357.653210000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-3ff8af44228b16f283e3afe3", "kind": "directory_service", "frame_number": 44974, "timestamp_epoch": "1634915357.653394000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 857, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-9599b18cf8397095d6a736a7", "kind": "directory_service", "frame_number": 44978, "timestamp_epoch": "1634915357.656910000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-381ef07fb88b76081880d254", "kind": "directory_service", "frame_number": 44980, "timestamp_epoch": "1634915357.657244000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c1286977fbf9508f5fa039f0", "kind": "directory_service", "frame_number": 44983, "timestamp_epoch": "1634915357.658347000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-4fbf1e8cb5c35e85024f96cc", "kind": "directory_service", "frame_number": 44985, "timestamp_epoch": "1634915357.659095000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-a5de006c3abbafb8d4c4336e", "kind": "directory_service", "frame_number": 44986, "timestamp_epoch": "1634915357.659605000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-73dd919a36a2d48ed7ba15f0", "kind": "directory_service", "frame_number": 44987, "timestamp_epoch": "1634915357.659863000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-0a7413630fa888be3d6f24d8", "kind": "directory_service", "frame_number": 44988, "timestamp_epoch": "1634915357.660189000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-6e3e4500b2140d200d25b944", "kind": "directory_service", "frame_number": 44989, "timestamp_epoch": "1634915357.660451000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-37e34259cb486639a3192adc", "kind": "directory_service", "frame_number": 44990, "timestamp_epoch": "1634915357.660713000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-870741e09ad38faf460d828c", "kind": "directory_service", "frame_number": 44991, "timestamp_epoch": "1634915357.660942000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c77a3864286f0dd020104680", "kind": "directory_service", "frame_number": 44996, "timestamp_epoch": "1634915357.665313000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-6123dda76788ba0bbf6fa334", "kind": "directory_service", "frame_number": 44998, "timestamp_epoch": "1634915357.666066000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-58073069b6993fa2038de717", "kind": "directory_service", "frame_number": 44999, "timestamp_epoch": "1634915357.666563000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-07d2bf950c8d9019e5ca1bb3", "kind": "directory_service", "frame_number": 45002, "timestamp_epoch": "1634915357.666907000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d0c1dcceffb9475913eb9937", "kind": "directory_service", "frame_number": 45004, "timestamp_epoch": "1634915357.667258000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-89dcbf35128020a712d13e9c", "kind": "directory_service", "frame_number": 45005, "timestamp_epoch": "1634915357.667565000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-a745f0b775fb432e510ba6a7", "kind": "directory_service", "frame_number": 45006, "timestamp_epoch": "1634915357.667871000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 859, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-bec657c634054d53dc17cdfe", "kind": "directory_service", "frame_number": 45010, "timestamp_epoch": "1634915357.668326000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 858, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-95e06dcaf6f277b31b488baa", "kind": "directory_service", "frame_number": 45075, "timestamp_epoch": "1634915359.667888000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7012e0415356946a8033aabe", "kind": "directory_service", "frame_number": 45076, "timestamp_epoch": "1634915359.668177000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-a64cda2566ac15b8af298e94", "kind": "directory_service", "frame_number": 45077, "timestamp_epoch": "1634915359.668466000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-a5550f89c8d281f925b4726a", "kind": "directory_service", "frame_number": 45078, "timestamp_epoch": "1634915359.668819000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-8315ea1c2bfd91e0bf9d8b60", "kind": "directory_service", "frame_number": 45079, "timestamp_epoch": "1634915359.669061000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-211d5ca72b48e355e000fe88", "kind": "directory_service", "frame_number": 45080, "timestamp_epoch": "1634915359.669214000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-1af5fb4a074a7c22b01b8e61", "kind": "directory_service", "frame_number": 45083, "timestamp_epoch": "1634915359.671164000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-1d28d3f09915cda70d92ca55", "kind": "directory_service", "frame_number": 45084, "timestamp_epoch": "1634915359.671409000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-f7bebfb8c5c6748a5b9fd8ca", "kind": "directory_service", "frame_number": 45085, "timestamp_epoch": "1634915359.671648000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-49920bd92a76120be82878d3", "kind": "directory_service", "frame_number": 45086, "timestamp_epoch": "1634915359.671944000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1ed621cc516497d87576fa4f", "kind": "directory_service", "frame_number": 45087, "timestamp_epoch": "1634915359.672183000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-24a62c48d3f449074f284f98", "kind": "directory_service", "frame_number": 45088, "timestamp_epoch": "1634915359.672337000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 862, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-468878892c96d594aa72e299", "kind": "directory_service", "frame_number": 45092, "timestamp_epoch": "1634915359.675946000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-512f9dc3b2ae1367beb02fa8", "kind": "directory_service", "frame_number": 45094, "timestamp_epoch": "1634915359.676278000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-63db80c9bcac987a9b82a168", "kind": "directory_service", "frame_number": 45097, "timestamp_epoch": "1634915359.677394000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-2b9df64d8df2f092fb6a8e42", "kind": "directory_service", "frame_number": 45099, "timestamp_epoch": "1634915359.678157000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-285ac8de37dfffccb40e6e77", "kind": "directory_service", "frame_number": 45100, "timestamp_epoch": "1634915359.678787000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1a2ef82dc34b7646c6d99d7d", "kind": "directory_service", "frame_number": 45101, "timestamp_epoch": "1634915359.679135000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-470be42faf99148601c8029b", "kind": "directory_service", "frame_number": 45102, "timestamp_epoch": "1634915359.679410000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-46145f279969a2bd023a07f2", "kind": "directory_service", "frame_number": 45103, "timestamp_epoch": "1634915359.679634000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-06963b1f0d617ddbc8beda26", "kind": "directory_service", "frame_number": 45104, "timestamp_epoch": "1634915359.679885000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-accf1f8fd061d74919d47be4", "kind": "directory_service", "frame_number": 45105, "timestamp_epoch": "1634915359.680110000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-b228dd0c6d178ea0f0a849e1", "kind": "directory_service", "frame_number": 45110, "timestamp_epoch": "1634915359.684024000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-2df2d4c23799f8490d1c9310", "kind": "directory_service", "frame_number": 45112, "timestamp_epoch": "1634915359.684779000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-85ba336ea78d47b47ec9a4ea", "kind": "directory_service", "frame_number": 45113, "timestamp_epoch": "1634915359.685220000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-8e338d6b0db89fab3e144a4f", "kind": "directory_service", "frame_number": 45116, "timestamp_epoch": "1634915359.685530000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-c455ea9398e4c728a4f1275c", "kind": "directory_service", "frame_number": 45118, "timestamp_epoch": "1634915359.685912000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b9a47d75658d79039d0d1b61", "kind": "directory_service", "frame_number": 45119, "timestamp_epoch": "1634915359.686159000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-6b496e225a395461a52e6a96", "kind": "directory_service", "frame_number": 45120, "timestamp_epoch": "1634915359.686433000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 864, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-8e467f47a863dce35651da12", "kind": "directory_service", "frame_number": 45124, "timestamp_epoch": "1634915359.686853000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 863, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-48164dca92eb38fb6ac9c544", "kind": "directory_service", "frame_number": 48337, "timestamp_epoch": "1634915472.186645000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-0fc43998e4c18d319e2b5a9e", "kind": "directory_service", "frame_number": 48338, "timestamp_epoch": "1634915472.186917000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-5b60edcd0032f242ed81ba5d", "kind": "directory_service", "frame_number": 48339, "timestamp_epoch": "1634915472.187321000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-3fbcdec7e29812003c552362", "kind": "directory_service", "frame_number": 48340, "timestamp_epoch": "1634915472.187661000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-576668ddcd11695b5c7f02ad", "kind": "directory_service", "frame_number": 48341, "timestamp_epoch": "1634915472.188030000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-8b43e2b37f8fcaa6cadf4c93", "kind": "directory_service", "frame_number": 48342, "timestamp_epoch": "1634915472.188212000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-0cb0658c37432854b618cdba", "kind": "directory_service", "frame_number": 48345, "timestamp_epoch": "1634915472.190234000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-66d40a9d75ef330fcf7b6392", "kind": "directory_service", "frame_number": 48346, "timestamp_epoch": "1634915472.190443000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-3abc93b05d5719b87f1ef893", "kind": "directory_service", "frame_number": 48347, "timestamp_epoch": "1634915472.190779000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-8f3ebd265e1a1ca02729be90", "kind": "directory_service", "frame_number": 48348, "timestamp_epoch": "1634915472.191047000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-3ecbc25bad774945455acfe0", "kind": "directory_service", "frame_number": 48349, "timestamp_epoch": "1634915472.191359000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-8801088b810784dae710ac80", "kind": "directory_service", "frame_number": 48350, "timestamp_epoch": "1634915472.191546000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 909, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-f89755bc9ee17904e49936bc", "kind": "directory_service", "frame_number": 48354, "timestamp_epoch": "1634915472.195327000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-000b8d9669aa1fa88ffe562e", "kind": "directory_service", "frame_number": 48356, "timestamp_epoch": "1634915472.195635000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-40f8a0b061b2617350ec270c", "kind": "directory_service", "frame_number": 48359, "timestamp_epoch": "1634915472.196979000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-d00577861565127cb8eac6a6", "kind": "directory_service", "frame_number": 48361, "timestamp_epoch": "1634915472.197846000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-8f535df67964438d1ac68d06", "kind": "directory_service", "frame_number": 48362, "timestamp_epoch": "1634915472.198357000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-b69b72d1e42e1f2939e77763", "kind": "directory_service", "frame_number": 48363, "timestamp_epoch": "1634915472.198627000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3488b1536deaa78b70a92393", "kind": "directory_service", "frame_number": 48364, "timestamp_epoch": "1634915472.198972000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-6fad4083bd321309256d404c", "kind": "directory_service", "frame_number": 48365, "timestamp_epoch": "1634915472.199192000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-01bac3a37156d8b5278c7fb7", "kind": "directory_service", "frame_number": 48366, "timestamp_epoch": "1634915472.199539000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1fd829344949385b694a571f", "kind": "directory_service", "frame_number": 48367, "timestamp_epoch": "1634915472.199765000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-a01a8a898ee963f1abeddca4", "kind": "directory_service", "frame_number": 48372, "timestamp_epoch": "1634915472.204135000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-c99dffe724fb5db5d19aa359", "kind": "directory_service", "frame_number": 48374, "timestamp_epoch": "1634915472.204857000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-34d430af2f4ef6994d7fba2d", "kind": "directory_service", "frame_number": 48375, "timestamp_epoch": "1634915472.205378000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-f6e6116a3c0b12e1f442e5a9", "kind": "directory_service", "frame_number": 48378, "timestamp_epoch": "1634915472.205681000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-770ad32d8f306e96af570fc5", "kind": "directory_service", "frame_number": 48380, "timestamp_epoch": "1634915472.206180000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-7e777dfd43d71083b5445395", "kind": "directory_service", "frame_number": 48381, "timestamp_epoch": "1634915472.206437000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-5ec135f9d679d4bdb32f60a9", "kind": "directory_service", "frame_number": 48382, "timestamp_epoch": "1634915472.206790000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 911, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-6b4d2ce0954029e4cd62bafe", "kind": "directory_service", "frame_number": 48386, "timestamp_epoch": "1634915472.207492000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 910, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-3a8ec55049f6c5666447be61", "kind": "directory_service", "frame_number": 55100, "timestamp_epoch": "1634915700.850594000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-f0e0936754e57d7c562ba678", "kind": "directory_service", "frame_number": 55101, "timestamp_epoch": "1634915700.850851000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-658b0e49ef0c10bb1a6614c1", "kind": "directory_service", "frame_number": 55102, "timestamp_epoch": "1634915700.851306000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-20ea4b934d843c9e5f0dfa37", "kind": "directory_service", "frame_number": 55103, "timestamp_epoch": "1634915700.851652000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-5bb216bb87de91696cc5af12", "kind": "directory_service", "frame_number": 55104, "timestamp_epoch": "1634915700.851958000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-2be84cf99703e8f5627d5ea2", "kind": "directory_service", "frame_number": 55105, "timestamp_epoch": "1634915700.852105000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-89ea82c7a6d16465ebb6f0bd", "kind": "directory_service", "frame_number": 55108, "timestamp_epoch": "1634915700.853497000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-3807d01ed8de07f181036cf6", "kind": "directory_service", "frame_number": 55109, "timestamp_epoch": "1634915700.853715000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-acb41ea2b84d07cc72219e14", "kind": "directory_service", "frame_number": 55110, "timestamp_epoch": "1634915700.853973000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-7d1d67b5595720602dc3b59f", "kind": "directory_service", "frame_number": 55111, "timestamp_epoch": "1634915700.854241000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ad9f428c888bfe955de18f24", "kind": "directory_service", "frame_number": 55112, "timestamp_epoch": "1634915700.854529000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-9894e4cb8e6b9e06d79506c8", "kind": "directory_service", "frame_number": 55113, "timestamp_epoch": "1634915700.854707000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 990, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-37a6eaa92d1f424eac678374", "kind": "directory_service", "frame_number": 55117, "timestamp_epoch": "1634915700.856930000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-84396945ebab2facb096e09c", "kind": "directory_service", "frame_number": 55119, "timestamp_epoch": "1634915700.857238000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-9af1f5bce88dd30e35e47438", "kind": "directory_service", "frame_number": 55122, "timestamp_epoch": "1634915700.858087000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-a6f68feedada611ee2001c89", "kind": "directory_service", "frame_number": 55124, "timestamp_epoch": "1634915700.858794000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-118e2947438420432dd1c7da", "kind": "directory_service", "frame_number": 55125, "timestamp_epoch": "1634915700.859233000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-0f375866e2047516f1b77c0b", "kind": "directory_service", "frame_number": 55126, "timestamp_epoch": "1634915700.859510000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f92e1883ebb6b848643c9035", "kind": "directory_service", "frame_number": 55127, "timestamp_epoch": "1634915700.859774000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-fe342f69254d00cef844b491", "kind": "directory_service", "frame_number": 55128, "timestamp_epoch": "1634915700.860103000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-d1c51b1a32ae7169306fc02f", "kind": "directory_service", "frame_number": 55129, "timestamp_epoch": "1634915700.860401000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-NZ875R4,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-cd4b62fc91bdef3d0d665d06", "kind": "directory_service", "frame_number": 55130, "timestamp_epoch": "1634915700.860629000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-56eb4eebf3d43f9f1b205339", "kind": "directory_service", "frame_number": 55135, "timestamp_epoch": "1634915700.864029000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-b88ed85430753527c7329fac", "kind": "directory_service", "frame_number": 55137, "timestamp_epoch": "1634915700.864788000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-639dcbddc5a4a72dcace44e4", "kind": "directory_service", "frame_number": 55138, "timestamp_epoch": "1634915700.865256000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d1d50867ccc4550151148c06", "kind": "directory_service", "frame_number": 55141, "timestamp_epoch": "1634915700.865587000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-75e638006fbb3396464bd18c", "kind": "directory_service", "frame_number": 55143, "timestamp_epoch": "1634915700.865987000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d8c014213bb967080df72860", "kind": "directory_service", "frame_number": 55144, "timestamp_epoch": "1634915700.866246000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-1067be1cdc4d0e73f9fbbad1", "kind": "directory_service", "frame_number": 55145, "timestamp_epoch": "1634915700.866535000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 992, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-04bb728eff440ada96b293d6", "kind": "directory_service", "frame_number": 55149, "timestamp_epoch": "1634915700.866844000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 991, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-924c61a5908552b8e4594d9c", "kind": "directory_service", "frame_number": 59918, "timestamp_epoch": "1634916153.388006000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-e59fcbcec75540ee39adb2c5", "kind": "directory_service", "frame_number": 59919, "timestamp_epoch": "1634916153.388278000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-cd681345eb9c036bc1140f76", "kind": "directory_service", "frame_number": 59920, "timestamp_epoch": "1634916153.388785000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-7d5400abc21b0236853617c0", "kind": "directory_service", "frame_number": 59921, "timestamp_epoch": "1634916153.389134000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-2ac9454865ba87e0eaa01794", "kind": "directory_service", "frame_number": 59922, "timestamp_epoch": "1634916153.389426000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-2fdd7bdcc94b5e663021a06c", "kind": "directory_service", "frame_number": 59923, "timestamp_epoch": "1634916153.389603000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-3699419b8925a7ba5c3da91d", "kind": "directory_service", "frame_number": 59926, "timestamp_epoch": "1634916153.391052000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-037291862bc1ad33d7466776", "kind": "directory_service", "frame_number": 59927, "timestamp_epoch": "1634916153.391303000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-916160c950a6a91424075496", "kind": "directory_service", "frame_number": 59928, "timestamp_epoch": "1634916153.391617000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-0efeb1ee738d15a0f28cdbc6", "kind": "directory_service", "frame_number": 59929, "timestamp_epoch": "1634916153.391885000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-44069b51149c0546ec092004", "kind": "directory_service", "frame_number": 59930, "timestamp_epoch": "1634916153.392143000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c78a2fe41aa7318099a4905a", "kind": "directory_service", "frame_number": 59931, "timestamp_epoch": "1634916153.392336000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1156, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-5bfb6154b3b4776c85f5da04", "kind": "directory_service", "frame_number": 59935, "timestamp_epoch": "1634916153.394721000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-4b0bb1e856fe7ef9025d8c8f", "kind": "directory_service", "frame_number": 59937, "timestamp_epoch": "1634916153.395074000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-075479a5a46b9447b8ff67d6", "kind": "directory_service", "frame_number": 59940, "timestamp_epoch": "1634916153.396019000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-b6b492bf1ed0bddd49cf1a4d", "kind": "directory_service", "frame_number": 59942, "timestamp_epoch": "1634916153.396771000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-0e25624770195c302ae24cc1", "kind": "directory_service", "frame_number": 59943, "timestamp_epoch": "1634916153.397277000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-3f644f87f8aaf4fc975b2b5c", "kind": "directory_service", "frame_number": 59944, "timestamp_epoch": "1634916153.397562000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-6a75fe55fbc7f32c672c7545", "kind": "directory_service", "frame_number": 59945, "timestamp_epoch": "1634916153.397897000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-6d767f1a9de735ddb01359df", "kind": "directory_service", "frame_number": 59946, "timestamp_epoch": "1634916153.398107000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-2f7a5e578dc9746e5d6c25f6", "kind": "directory_service", "frame_number": 59947, "timestamp_epoch": "1634916153.398442000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-87WCE26,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ad47a24fc7bf739a05e559fd", "kind": "directory_service", "frame_number": 59948, "timestamp_epoch": "1634916153.398691000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-fef601c9fc5bf2a5e93c07d4", "kind": "directory_service", "frame_number": 59953, "timestamp_epoch": "1634916153.402217000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-b58652572dbc5e6df1a20d1e", "kind": "directory_service", "frame_number": 59955, "timestamp_epoch": "1634916153.403064000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-c53d2906bf79b2d0d49dc126", "kind": "directory_service", "frame_number": 59956, "timestamp_epoch": "1634916153.403549000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-27dd0d8d6518a2a3466ac06e", "kind": "directory_service", "frame_number": 59959, "timestamp_epoch": "1634916153.403852000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-a659c90840ea5fe722567227", "kind": "directory_service", "frame_number": 59961, "timestamp_epoch": "1634916153.404179000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-5a35c4863abd0a7df6bdc2fc", "kind": "directory_service", "frame_number": 59962, "timestamp_epoch": "1634916153.404439000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-3e5c984078255d81cdbfb754", "kind": "directory_service", "frame_number": 59963, "timestamp_epoch": "1634916153.404767000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1158, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-d21cac5696f0fc5df196602a", "kind": "directory_service", "frame_number": 59967, "timestamp_epoch": "1634916153.405139000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1157, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-17a8abda13dab1a6a0be8786", "kind": "directory_service", "frame_number": 62105, "timestamp_epoch": "1634916360.366828000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-c43e1ff5d97176a7696f679a", "kind": "directory_service", "frame_number": 62106, "timestamp_epoch": "1634916360.367093000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-5a14ca55ece4d26ac0caf573", "kind": "directory_service", "frame_number": 62107, "timestamp_epoch": "1634916360.367545000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-19848157919be808a9630f7d", "kind": "directory_service", "frame_number": 62108, "timestamp_epoch": "1634916360.367886000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-ef97bfef76761193fe0d2571", "kind": "directory_service", "frame_number": 62109, "timestamp_epoch": "1634916360.368192000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-bdd8ce944687462b22861410", "kind": "directory_service", "frame_number": 62110, "timestamp_epoch": "1634916360.368380000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-55860b26da5ea49423209cbe", "kind": "directory_service", "frame_number": 62113, "timestamp_epoch": "1634916360.369813000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-003c4e6b3e780918bb72efbe", "kind": "directory_service", "frame_number": 62114, "timestamp_epoch": "1634916360.370024000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "0" } }, { "event_id": "evt-7980b2225811919cf7f1bf05", "kind": "directory_service", "frame_number": 62115, "timestamp_epoch": "1634916360.370332000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-de5473faef793c836c90f2ef", "kind": "directory_service", "frame_number": 62116, "timestamp_epoch": "1634916360.370617000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "12" } }, { "event_id": "evt-1fc10fb3b9e33055ca6e2aa5", "kind": "directory_service", "frame_number": 62117, "timestamp_epoch": "1634916360.370883000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-c0ba21307393ae2a8aaf565f", "kind": "directory_service", "frame_number": 62118, "timestamp_epoch": "1634916360.371063000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1265, "udp_stream": null, "fields": { "drsuapi.opnum": "1" } }, { "event_id": "evt-ba3a09fc2a3fa50046d1b57a", "kind": "directory_service", "frame_number": 62122, "timestamp_epoch": "1634916360.373444000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-d76c8d38711084372ac321c1", "kind": "directory_service", "frame_number": 62124, "timestamp_epoch": "1634916360.373782000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-f1c27869423dfe2730aab336", "kind": "directory_service", "frame_number": 62127, "timestamp_epoch": "1634916360.374681000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-04e814a8db0c6d8ea2ddfb41", "kind": "directory_service", "frame_number": 62129, "timestamp_epoch": "1634916360.375421000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-e2b86572d3efa5b849be0f9c", "kind": "directory_service", "frame_number": 62130, "timestamp_epoch": "1634916360.375856000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-9e956eb782bf824a5f514302", "kind": "directory_service", "frame_number": 62131, "timestamp_epoch": "1634916360.376123000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-3e62b4cdc16dc589f329e327", "kind": "directory_service", "frame_number": 62132, "timestamp_epoch": "1634916360.376421000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-fe073c343a41fd4c3df0ea5e", "kind": "directory_service", "frame_number": 62133, "timestamp_epoch": "1634916360.376641000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-26b75c94767440fb64e832e1", "kind": "directory_service", "frame_number": 62134, "timestamp_epoch": "1634916360.377005000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.baseObject": "CN=DESKTOP-CFA3367,CN=Computers,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-1bd8436dd30cbabaa2ab8400", "kind": "directory_service", "frame_number": 62135, "timestamp_epoch": "1634916360.377284000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-972cbe1ac27a5849b0ed405a", "kind": "directory_service", "frame_number": 62140, "timestamp_epoch": "1634916360.380677000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.protocolOp": "0" } }, { "event_id": "evt-8b7474e05cfaeb3ead83882a", "kind": "directory_service", "frame_number": 62142, "timestamp_epoch": "1634916360.381440000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.protocolOp": "1" } }, { "event_id": "evt-3b8534e6ae84a2de7b80f205", "kind": "directory_service", "frame_number": 62143, "timestamp_epoch": "1634916360.381939000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ee8f1984a118f888293663e3", "kind": "directory_service", "frame_number": 62146, "timestamp_epoch": "1634916360.382233000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.protocolOp": "4,5" } }, { "event_id": "evt-6625c5830301c7cb525410fd", "kind": "directory_service", "frame_number": 62148, "timestamp_epoch": "1634916360.382574000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.baseObject": "CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=services,CN=Configuration,DC=enemywatch,DC=net", "ldap.filter": "7", "ldap.protocolOp": "3" } }, { "event_id": "evt-ae285fba6052820e5cdbd82e", "kind": "directory_service", "frame_number": 62149, "timestamp_epoch": "1634916360.382848000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.protocolOp": "5" } }, { "event_id": "evt-5d7cc2c9e42ba60f4509a8ca", "kind": "directory_service", "frame_number": 62150, "timestamp_epoch": "1634916360.383155000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1267, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } }, { "event_id": "evt-53fad222e6dea431999fb82f", "kind": "directory_service", "frame_number": 62154, "timestamp_epoch": "1634916360.383493000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": null, "dst_port": null, "tcp_stream": 1266, "udp_stream": null, "fields": { "ldap.protocolOp": "2" } } ], "unclassified_tcp": [ { "event_id": "evt-8843146f92b31bdd19d5ae8b", "kind": "unclassified_tcp", "frame_number": 770, "timestamp_epoch": "1634913095.177917000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49679, "dst_port": 445, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a8d53f3c716867ad66dd2def", "kind": "unclassified_tcp", "frame_number": 1597, "timestamp_epoch": "1634913125.194971000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49679, "dst_port": 445, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-183e0ac8194d8b120060b197", "kind": "unclassified_tcp", "frame_number": 2467, "timestamp_epoch": "1634913155.195798000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49679, "dst_port": 445, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-44d0639771db714246d08598", "kind": "unclassified_tcp", "frame_number": 2469, "timestamp_epoch": "1634913155.737529000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49670, "dst_port": 445, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2d5944bc39640be7ef5d2983", "kind": "unclassified_tcp", "frame_number": 2828, "timestamp_epoch": "1634913185.196445000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49679, "dst_port": 445, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-20a673aa65cf1709f4de1064", "kind": "unclassified_tcp", "frame_number": 2830, "timestamp_epoch": "1634913185.217987000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49679, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-70a25450d2263b26f1e43b39", "kind": "unclassified_tcp", "frame_number": 2844, "timestamp_epoch": "1634913185.754786000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49670, "dst_port": 445, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-cc82358ff50834faeb6ff317", "kind": "unclassified_tcp", "frame_number": 2882, "timestamp_epoch": "1634913186.690744000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49669, "dst_port": 445, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7d3455ffa06a0a49b3d16e72", "kind": "unclassified_tcp", "frame_number": 3638, "timestamp_epoch": "1634913214.843934000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7aa13990e2ba7b32649daa4b", "kind": "unclassified_tcp", "frame_number": 3642, "timestamp_epoch": "1634913215.197481000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49679, "dst_port": 445, "tcp_stream": 9, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-eebfc473d32d071514bd5d67", "kind": "unclassified_tcp", "frame_number": 3659, "timestamp_epoch": "1634913215.769615000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49670, "dst_port": 445, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2bc0571ec5f9221a291a2882", "kind": "unclassified_tcp", "frame_number": 3663, "timestamp_epoch": "1634913216.704061000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49669, "dst_port": 445, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-bbcb79d687010cbfe0a822e5", "kind": "unclassified_tcp", "frame_number": 4413, "timestamp_epoch": "1634913241.671251000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-83aef0f281f7533e2aa69a81", "kind": "unclassified_tcp", "frame_number": 4814, "timestamp_epoch": "1634913244.845708000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-67496a9f792b0f9f42fff2b7", "kind": "unclassified_tcp", "frame_number": 5121, "timestamp_epoch": "1634913245.766935000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49670, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d78cdb7f3f6c90977f7d5aa3", "kind": "unclassified_tcp", "frame_number": 5123, "timestamp_epoch": "1634913245.780311000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49670, "dst_port": 445, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8046fe82ecd596e83a62e792", "kind": "unclassified_tcp", "frame_number": 5169, "timestamp_epoch": "1634913246.720871000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49669, "dst_port": 445, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-fe2cdb56bd278e691fbdef3b", "kind": "unclassified_tcp", "frame_number": 5294, "timestamp_epoch": "1634913269.313156000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-582c1dd51a0e87ff16ee4994", "kind": "unclassified_tcp", "frame_number": 5514, "timestamp_epoch": "1634913275.797256000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49670, "dst_port": 445, "tcp_stream": 38, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0bd522bb2cda5543d4971b0d", "kind": "unclassified_tcp", "frame_number": 5516, "timestamp_epoch": "1634913276.736365000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49669, "dst_port": 445, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-18ddbdb7e9f6d15137726469", "kind": "unclassified_tcp", "frame_number": 5517, "timestamp_epoch": "1634913276.736589000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49669, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e969b9f7982dbcd2f562084b", "kind": "unclassified_tcp", "frame_number": 5533, "timestamp_epoch": "1634913287.877680000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-79bd9ac3714610a5c70cc5dd", "kind": "unclassified_tcp", "frame_number": 5651, "timestamp_epoch": "1634913299.314199000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c3e626bbfb9334dd4a017625", "kind": "unclassified_tcp", "frame_number": 5656, "timestamp_epoch": "1634913299.525846000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-61d3b9d4026db6248bbb19af", "kind": "unclassified_tcp", "frame_number": 5658, "timestamp_epoch": "1634913299.731558000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "20000000bda2c2875302e0fd9494836d6ef86870fa4295c6023a67657ff2264b195525da" } }, { "event_id": "evt-79045146382a5d56d0dd6bd3", "kind": "unclassified_tcp", "frame_number": 5659, "timestamp_epoch": "1634913299.734294000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000b704057c3e615942" } }, { "event_id": "evt-473a7c83a98f7f56e6fdc7cf", "kind": "unclassified_tcp", "frame_number": 5661, "timestamp_epoch": "1634913299.910424000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-98488dacbca5ab86c574e43b", "kind": "unclassified_tcp", "frame_number": 5662, "timestamp_epoch": "1634913299.917065000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "d800000027d399bfea33c5815374ec754ca9f223e223051a76261c5ff456a3ff7f05de5f00e00ab5f7708abc594312b2e2174e9d6e84e466b96d669b651ecb99425b13fad02dad2bbb02767031889e2f524266aa30d4e772392cb7bcae9c0f6269db155cfe4b82761addabe22eb87bf5bd32ffeac0bae7f4bf943817cd41622b249abdf138e5805222c67e6a014aa2d32c8c43394d09139fafcfa5082f3372744382c3fe4cf2a2c055158c3a608df890639c549925b9177590224e904874c8e17c64b62347712e2b1bde17000252d5879cf337055ba49992a5c09edf" } }, { "event_id": "evt-9ba0b5bf9a200d6b74d1bd44", "kind": "unclassified_tcp", "frame_number": 5668, "timestamp_epoch": "1634913299.956711000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8d41779a902b2ecbb9d35237", "kind": "unclassified_tcp", "frame_number": 5742, "timestamp_epoch": "1634913300.327349000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b8036534a63448edc2cffa0b", "kind": "unclassified_tcp", "frame_number": 5743, "timestamp_epoch": "1634913300.327369000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ddfbc9585b3802f650fd3681", "kind": "unclassified_tcp", "frame_number": 5744, "timestamp_epoch": "1634913300.327383000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d53649db178958e4a6fd2577", "kind": "unclassified_tcp", "frame_number": 5745, "timestamp_epoch": "1634913300.327529000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-88d1e19e30f5a51b33ccc191", "kind": "unclassified_tcp", "frame_number": 5747, "timestamp_epoch": "1634913300.510735000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b7f3d354941604938100ed04", "kind": "unclassified_tcp", "frame_number": 5748, "timestamp_epoch": "1634913300.511166000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6891fec87fe6ec2314a74670", "kind": "unclassified_tcp", "frame_number": 5750, "timestamp_epoch": "1634913300.513791000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-283a7c8e291aa27365bcec2f", "kind": "unclassified_tcp", "frame_number": 5751, "timestamp_epoch": "1634913300.514078000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "593f5cbfd7a1aa372c14c47524899cd9c3a5a6e26119437aea4bb665acbdf84602d9ea8efb7051d5be9199cfb571bbea8f92b03f5a9cff97c90f66630e3509e751a563820166cdb2b41a98cc4f09bfb930453cba258e2c9c6232b9846bcacb94eec9c9207e53f217dab73eaf394aec4c65d7ac85e07379d30bbcdae7f878624d57b32a3a6da8a2251d1369cb262d39e56c34d0ec6bb65c2ed2247d3c0c055c4d8869a99ae5a328d4d9c9b6a8eac58c72de675df5a67a22e1ca71ea8dfcbfd447bf46162f7a7462543cdadb45ee30adeea2b47de2ac5be4337c88d49d7fe0a3245aae36b7d2133ea595e08ab534739066cdefff14fbf0fd1505bda65ef5fbae8c8f4b30100f5854c2d1ac04c08cb95871e756dcd6cc8ff30672fab616d2b54e94a934cbe9341ce8690f79b02048cf7a59c09e573ed7922b311ec99f46c4682249393940922793663811d28c48c2eba026d8b73e1d61eb20a09f30ca0e5dda067c8d5053971d5068d3b007940d56e74d0acdaf78b0d116e75971783f997819837fa2216ea6684dbb3c88f569a38480a85e98da27fa2f8c280df334b8e7af1c7917a0f311c7e5ac24ff804ed1c65a30f4b94a701932e7caf7620fdce7004d055db1d3efc5aa38a9884aee5793757682fbdf3a27e8149b50e031d9930677febf60e7776c2dc6283448212cd12a1c5ed1ed8a625dafcaca490f538b6e6f9f2061e822c8b61e3cf11d31a40bf75a96d46d582da43efb6e2d77744ca34cb935ba57591af9d2f81928ff2139bb67410b64f2fed14861e1dbb65ac4bea7017915bff23b9ff42d2c96dc289cec36244d77e161b13e085c810b59b35e22303dd05f7ebd7d40e922eb869e22d83596972eff5b4d956a1e71de6e4be654e7494ac2dfa9d4e97e65083e8afdbf1738c3215f4ff887ce3c3bfdd501bb832df548c164a0b1761de538740811a1cc630e6a9f91c66dce785c5b00d4b946b93d1ff0d44c5139e2bd79895764dfb5eac3acddbd3ff0aa19234c92a440f1e2e556d20c95e78f049917c227f9d7f4816f1c34bcc395aeeb030fa7b440761864e2923776bf16482224caa2d310651bb9849a0cd79166b96587e7ef22f352a112f3a54c085f88a47fac6314e6bc525ce2a43816d38582c8e2e43d293c29b4349b5ec31997d9105018da9236105871bfa6dbe9385bdcadeddfb75b39017fa81529dc12d5cf5d4649eee8ea7318e97b8004eca26142f2c1329971245b91b26c2d670cfd5b5c303b70899e7baf33ad41d59b292051fe00e78dba67100613b4a2bf0af8b28329be670c06e6608ecdddb16985c8ed4defad513afa8fc0023f4eaa24495cc308576bc3d489dcd2f6b189511305cfb23175518e4a1fb65ebe00bc463deb1ce431d0b854a0e312293080b080dbf61d6ae6a16a2b9c63ae12e1fa6abbc0e406ad1ae0e7c6000cc104ba3f2f3d322bbf19c50adcdf12466b230472c9904ecf91668ab532ae5f183e60e90b4164ce37254d75ce34c19ca1bbdfed2fdcde3e056826f99359fdeea4c19ff3480be697057e06db5abdaeca8134b5bddf91b3dc10921c441ab2d22c17f9faee7c9c3fb67ca0a7d3ca80f534eb9ee7ec0a85780932637112943d0e5a8c8b89827a058e27db959b7f2466d0b5a4b8cc5fa5bef352c1b18fcd5107f4edaa96d581b755ad42f13aad6f2e816df762b31c0475364427fa8e34ff038c68bb1c7eea5dbeb83cf703af8d370c9a0a90a8f0f60ae14bc6b0503362149ca683ced6d188a4f0ab50e616fa95aff37b50d5b152ae8ea89bd324fec04dcd702f4377192557892f05805526a91155a638fb1d0bd1dd5847db26d75bae4aeded7162807f8568be20277e587a88ebfd428a32b5b597617a6d118794cf9ed81750312405bc0c140432f69db1048119cd0a520a14c180247d7fa78c04ae3b7bd2b39323994a15dd6f" } }, { "event_id": "evt-49552524d973a9db15b60623", "kind": "unclassified_tcp", "frame_number": 5753, "timestamp_epoch": "1634913300.514409000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-532ce2c1d1abb3e66b90b3b1", "kind": "unclassified_tcp", "frame_number": 5754, "timestamp_epoch": "1634913300.514419000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0352d8cbe5d9b98da6b444a4", "kind": "unclassified_tcp", "frame_number": 5756, "timestamp_epoch": "1634913300.628768000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0c9b2b12916c081b47d65f78", "kind": "unclassified_tcp", "frame_number": 5757, "timestamp_epoch": "1634913300.628802000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3d7f90d6b916032bd8cb0f06", "kind": "unclassified_tcp", "frame_number": 5759, "timestamp_epoch": "1634913300.677881000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ea507930f6b5e97adeeed96e", "kind": "unclassified_tcp", "frame_number": 5760, "timestamp_epoch": "1634913300.678263000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-884352abb191d2680c1748df", "kind": "unclassified_tcp", "frame_number": 5762, "timestamp_epoch": "1634913300.681335000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-46c27425bfcbebc4040e7f79", "kind": "unclassified_tcp", "frame_number": 5763, "timestamp_epoch": "1634913300.681355000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-edabc3badee319d97e623cc6", "kind": "unclassified_tcp", "frame_number": 5765, "timestamp_epoch": "1634913300.684327000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-da664759638d8a22b2cba90c", "kind": "unclassified_tcp", "frame_number": 5766, "timestamp_epoch": "1634913300.687821000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "329517e11d1b3ad08fd16010e026a6c62b0aaa39c13ad2d9790a30583ac592fee01461f2b2ed81d7327ac60581c941b6d89448a6868847596b4410caafea4ba99c296667861d27a79fe816448a002cdef9f01c529c1e491a75b924e960d04e3ec96d38aeddfcc0d43f2a9650ee5e1812be856a0d50f106678a451f81bd389006ac6018f1cb23f8908a72734123d78a23f0e3dd7dd2aedabeeb9754523029a6e06b3d01b17557b3265e4302f839cc0f9e7cd90541b3b909b06132d6d34d444510ee9c433871d3572ce3d83ee0066f71d38012d864b1d708d0d4aa98860bccff186e699b267f2d0a80da4501c3c07edab4029f4b4cbbd866e23ccff14fcb7607d57e11676e23b93c122d87db9b2d579b5a540f3c9af2d24a3fcf1576e1f89a3c2abab3ad66fb323dc817b06ecca24f664d23038bf9241cb7e5be3487e73f2a596bf25a63384cf578112a49445bf1f85502cc54f755247a84b6f6e00ba8b11c7f49c3a6b6b294fbe9d49ce7076f92fe0006f5d979a2d92c7be7222ea95e1bf5945ffe2557964be20e2f39220c319cfb0adbe1a7e6f1cc8fddd2055c0481aabb4e2d1f7690a5e67f17adc82c2d2c6e470aae6bc764a1e867deb6f64a2e27e79ab7eb679c7edc02a5bc8d59da40fbcceefcb40dc4cceee44e9ead383ca8874b9f3d3e78ab300bf22a7f6fbdb7295a4f7a393c333c5a6b6a64adb540907f6598a14189b6162423b1200fa79976914fbf1aed14f3b4a770d9b16840616ab96c01626e7cff15478cfef6aa135f53f12743f322a074f14197ff1a98f1c5465d0dc0bcc08954661e6d2f9f413ec1d544b0655ade0a390b1d7624a0dfe737ffc7161c6a3d13cc9b3589e526e74c29dec4a73eabf66282cf098200e42e220255fa4ff682093fc6ac6fb088f198168551e728c1142b6b10b574377cd91d2fece022284f194c89bf9c536aad7bd9be2a5a85518f9410372cde6e4eb337df2cf1cc07508e66ac91a52b02c8995b9be6a2df0c25b6a82ab7b9b3ee76c769eacde4573cf5d4223c80e8a2398a0e370861de7559bd3989b7aeede46355afe505db6045e20adff7d8100c5dd4ee3d790246f6b481240fac037c541e732ebebc5ad17621b51bc14db55736f4c3be7d09d1072cdcd848f25f3ca94169c39615220e57d30e36467c4ef26375faff76679af94afbb895dcc0eb0abde8050e944101b45e45a5f49778c819b0cf24fa178e03178a2e75070cb409ec1094ea8f457b5e55dcf42d05c2770650dc311893a4103dec91390ab747bb5cbd9a102f79cb37a1d605509ffb21990d124fce1b431e35119fdd2f6732dc30c01398312a3a78e0304d4d6b2823488b920ebc08ec60297eaf80009dc7c9439638bdde0bd6bcb585d8bd701528cb3db030c810f344efc4b8e575aa721e08e7bedda83e815677844dc6fe4e4a44850dbf8b2cefb2f1a7ce542b2fdbf89c6015aba6e5f5d80b2cd41f28c51b2beb7c938b11f2484f26f84ac0d9172a9b7ea351320ac8820f85995d278be0553cf48d25b400e30271f6442dd4f6d2734a06fba261580910a75de1c5a2928d0bec99c03690ac11535e6ae5cdab0a3f7d59d5044ee534ae1866ac82944537e53b2003480e3250921c088198c1febc109c6c94a39b21505ee60555f93f5016ff8f55b378e603f4797450b911ca8aa524adcaa37e9c7d135da6d95385e471c25c35fe0e878e95628a9328f27d2f7841bcd3be44ccaa565abc4ed0b5006d214fe8b3a3f4f177fae80b82a9b85fecd9e3cad76263bbec6f784a00b5ed2d97c4338a6427a4abff447f4f0a46bee9df3eb97c505c09e751b182f662cac5c7cb9a69fadb99b1713499ff8cb272bc8644601ba25957c571283aaea99f602d059c9b1618c75b32825328ee268b506965bc2f060cb4460673bde64d174663b097198c42b6888f74b9cb8f85f3bbcaa4bf92553fe0d054e26e2b3e9303e969a9af29c6a7594bd8ae2084a4a219e694c57befd6344b58337d28f074d7cb5bac14c37bc97e262c84c694fc5c074c90074b94d166748929acf7f737035c7b787b22d12d" } }, { "event_id": "evt-aa342d1f6cd8aa2676946911", "kind": "unclassified_tcp", "frame_number": 5767, "timestamp_epoch": "1634913300.687834000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3a899cee222f852d6e59a244", "kind": "unclassified_tcp", "frame_number": 5769, "timestamp_epoch": "1634913300.688429000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "ac31ff7c49fc3ab1cdd77764f2a2b44d3ce07b580ecb74e03dd16cacad2b4a4f9f6925768d7089a073895dffe75a3c66cd9a8af9f468e2b4fc349af9a44bb9f705a81afe944245ef172b8e3164c9a946f2458408dcca7e27134445e2c0039e5ae761ec9160bcb6aea615db1e6459879af78180d407f8e5e42afbd4fa63e492560a457b62ed03608738a3493cbbb72ba9f7c972b3c9cd64b46808d350257ea08599648ff2ce8c9ce179a0294e125ee26e2feba24f43e953e8a254b3a5470235d223d709d51ee1a6627e1c7973ba616d94bb4ecb2be7a43089e35005c1575da34fb1132dd56cfce6dc60b683c274498a6b96f18bddd29fd661a0c6f1a865e64f67da5a6f3b11618b4848f26fd3dce448791667ca47f33790a0afe6ac0135e1c586da344164ab0e562f5a1dd60cc4fbae9ebdda4ce5b6ce2ca2c17b865b7b532b8015cf4ce6d1258f9313499e87fdb99ce4f3e08c2de8f0b00becf2bf1409ad64460278e010ad2f0e09e2d0b241e90d2c2ff48c09ffe7dd8b76d186892a0636876d7270d56a56c7a0a7a7290c5df305fe9a80f1e939abd8444ea230998bed8343c9867cfe4fc52865d772069528e789e241b8ef5cf7d406c7a6f2f8ff232bc5a75e8451efc087d9bf7010bd475102e45bdca78ca93c75f24fb36b52264ecff93e96711e5395793b3918f9fe36c2475abe3faf3b264e4377d4555c34a6ff501d14a838f1be7dd181540f226d7612ec21df24d5d741d364224a5623647eb329cf3f0d686c611545f4166c5d77a3183f9f19fdc6499e8b761d5366da845bed214ff8ff34459dcc215fe080cc2ce1c744a0a044df4086af3b0a6694610000a2c7459b8157f94a903b81c87bc65b08b71ba13b4c21fff45bcad922e4088b067f0eb3729d55ae239862dfc6e6ac280541066c807b4c7ee5f8c481733c7da731bb2504662e586ae66b15fa7f740d3e613aa6880a4cbece82f7ca02e5b41d46d5f251db5c289c7df1e3d19a903312bc4b20ba98be3bb4c47bacbbb64d02897dbf8008f3107d1f59623e3c53bf54f4e7d8d2043304506e5a23430c1960bd952527394a3588cb02ed54bcbd591a27ee385165e686f631a186907df3d3c8397a0196377d8e51495f7a8265b5832d0063fd32b984912457d0da53e68ab73dd91a1b9051431ce0f3fca78ce16262d498aaf66b8f7a9b950df0fb1ceae5e3fcd6a9817dd518ae35732c63c4ad395f987d3f7967ff67fe54620d7b5389915819e4052154c8b9040c648b9840f30cfee472bb6e552d1837c3a1d327c13cbed3b9d9ae66a674a654804299fd80dc38dcb002f9bf5989cc326b4bd2226fc8e084f33c53b9045db95b4e2ef02f4d5122294fb1ba6cc8648ceda5a7abf55432dfc385f6a220ae2790dc2cd8264303f7de873325f9ff2f0e749c8856bf390842568c80db51799adf6f585d35040508c4db6e110cf716228a175b73ae6974a560fd7b23e93a43daf7a2b005d31856a686c106c2ff422f741048a225921518eef383a9a453592d3e3e2b3c8c9d5e3faac22ed6f8d06802c51770229299c9b75f9a593f044d6749b7f8279e5b1273e69016dcbf664867c302e5184ce36566e5d7fb6b17a7c44fcb58884913b50664684642ac9e2a103dc4232204a181a53029a733e410d853dcc87da1b018dc370872401bb836419395b18295faeb4a9cb38daaa41fe644d517819395779753e8faa4db13a97edc7cde1134f992a020552a77fadbe845c5e3bfddcf1d140963199fd0b71aba1a2d888ffa1ac0fffda89b5ec27b5f3124b3000ece2cfb1dc179ea3e565dd8d345c3c31035ef278352c9e1551c5831ee0f248b474b87ade468793ab9f25792a3ee1648d41902b755b50b630ab18449f44b0ff680ed9b02bbac05d326cc2069aabccf942f903c791aee2062cc061defaec20a1c737be9b8586f7653" } }, { "event_id": "evt-ac0056dd064e1cdfa9481b9f", "kind": "unclassified_tcp", "frame_number": 5771, "timestamp_epoch": "1634913300.691519000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6d43441306c0c94174885527", "kind": "unclassified_tcp", "frame_number": 5772, "timestamp_epoch": "1634913300.691534000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8f475c4cff8e9e97e9a1d69d", "kind": "unclassified_tcp", "frame_number": 5774, "timestamp_epoch": "1634913300.695272000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-092723009d33e43051c0586c", "kind": "unclassified_tcp", "frame_number": 5775, "timestamp_epoch": "1634913300.698723000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1ce873ac1e86d33c0977cb7f", "kind": "unclassified_tcp", "frame_number": 5779, "timestamp_epoch": "1634913300.812597000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-02e1c6e7ea55e0a93e4489aa", "kind": "unclassified_tcp", "frame_number": 5780, "timestamp_epoch": "1634913300.812933000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "4a56835d8ae63948eed2572a4e15a85b7eab923d4e4bf99d45bf34f9324e3c81f17ab4358d8ed5ac132456b05ab30c90bf01ff5779e4a4b9f093fb972b991c3bcb9d28639dea3cbe9daba6fc62a322afb5e52b5450a463e95494017e47800644140281c5bf64dd7f7e9642f30b77c5c8aed47926f33cf93a49232de13be3d150221a6899757608dbf908257be69539e204813c2548b5c78bac1d21b00b1db39ac4d0a9bf3f85a21617f47a83502b6a790b5943fb12930f110f26b49a3dfd00803f3d4600bdaca81c3caf565e3554714cf3ef985d346f9b94a5bb47289df2f28f75e35038692b5e6bda6545eabcdbec7e3b60f8777dee14661f85c4890f12ffb865601429ba36424f32e5cfc10332ac6b0b2a74058117bab46435b9932ed833ed1647011835411cbc2ae6fbb4931455d4c1eb06d3d59790e0df7f059f30cb9bd3418ffc966d281f872888db3d8d58f44846f24b1f992edadde986157183ef471776ead0e1440a009fd2608c8f5a5e2fd36c776d8e0a1ccf4a7f7d3da9a0db136614f90086b099f80bc0119d4ca679d6382b47a21b01032115172dde44e462ce88a5b1c408840afb9e397584f40fdd164fee1dcc94ba53a488ec2f763a8a12477e43e0d850260e38fe9f3725e52bab256d6799ccf33ca97e1047a3f47acfa2ce14f9d848eeaf55930c7f2aae87b097a557193832071c5957d94abd0ac29c04efc38091f010b982e0a0ae7b53ce08551f967e8ea8befd52d38f59bf3f6bea231db1791714f033294f5bd50516b34a0c778ca4ac8115945c72ff4aaa4b3f659457e3fdc74b688a20885f2962f1fd0a2167357a3470b3b5e5f42edf4db12e87eb14a0bcb3baa9cdba615d450a44e087848f8d855a2795cd3e1f83dc746261ce2c38c8d4fe684ce1fb9378aaa978e6224d4252adeb19f20dbc4184ef0938998f4b36488bbc4adb0c5e29d5dfaf2755f390298a96f71d4e5383fb9edf988951d9e28e236c7c2717a1fad1c198af12c0532ae289ce13c1eed29adfc676d943137cadbab802de69b0cdecd80cf4f7a932fed6f5b8c574516141cf3a4f8cb8f01b03138bcab7254f5122213e1bc6ecb9636c1920154afd1359e3641374cca73e3adcfe334cd4943c375d4d7f63354b7693d11ee0d6f0e046807a20ad978235aeae8aa0adf19e339eee47dad787dd082ad140b76f4a965ba8b01f997e555773f9f33589dc2d995c3d8a43d1f8048b1e8f1a114f74be5c0eed99a288ecfaac340db6d87f812885706081583912459bae53ae49d253cda2dfc422346f084c4815571d715b067f6a60f0d0e4e8dbad17508fa443d5ed23e9b87e0f5377aee91aefbca7c98f47334828124ac7bfc6de73a8b45be3316826976a815f20715f37b02e40f85795a0c4c282d317331fe59ea0acf395ad7453957f95ad5412eab2f4f8cf56c1ea030dc5b61c7a9227ccfc9bb8ca662cb186516a384fb02cc0288a5e9b4116305e7febad7801dc171e97a8e7163fc2cd1deb34e5fa93fff2b952b27d793e208c79aee9c675cce07b3a1baebdb5dddc4c2ea4892c406b53357c8093f93897ed81da9f3eef3bf5e13eca2992646009097e7001231231e63f9d707087b53596dff01f134b0a69524bad264eb34fefc5196b81097f0aa9bdfa2cd5596204dd8d0c4adbadb2474de9efb5eb05c163de7cdc39bf538bf6b3aa85e3b73846aec94e47b9169b4476d71ff211b9d96a563ab93bdfea76d31a66dbe05420254465a9e78e2f8501d071ca8e685056567a05761dcdd4cf35f55fa109c62b2abfb1ec92fa394de1f72bce5340786b3613116550851e6836412719d5cb3a83576180ac3afbf34f09dd1796d39072c60e358c9dd870db0fc809c7598627a07293c3e2b0978347cfddafb03eb3a14a94e2f94b96a8e9276c78a0c8ba74912fe71626861fca4aa0e9725814d3" } }, { "event_id": "evt-a0f0af18eb872be07136c2b1", "kind": "unclassified_tcp", "frame_number": 5782, "timestamp_epoch": "1634913300.815788000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fe91664c9ea311034341cefb", "kind": "unclassified_tcp", "frame_number": 5783, "timestamp_epoch": "1634913300.819202000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e9160a05d8c451874b2f1e2a", "kind": "unclassified_tcp", "frame_number": 5787, "timestamp_epoch": "1634913300.848067000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-54aa5d313bb284bcad41705f", "kind": "unclassified_tcp", "frame_number": 5788, "timestamp_epoch": "1634913300.852031000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "1dd74f7f453f69e1576d28810e1d553a57f746ad8244813d8a871d791515fb8350b7219f70cde1199cfb112e7cc32847672f62c82ac0a93a7bcf9e8ebd1eefe699bb63220f934963092fb140df9f5dd997d40c5cd2f88035e1246a54383ab2b5498f0776c8e628331e63711f2543e6462f808f2a0278d1aed0c40b0f57c307acc3bf8811b4a14609f01a7b7ec21ec16c884ad6c9e1909b69784a989898d09e58ce1015111a6ca63bd0e339dae7b83b9f614603a915abf546e89639a31e0ca067750c4ccb4e3d275bfd9c3ef23c02a90bbe8dc6defea2702ee30be2ed2aeaae347892b13bc10ad12718a7e4b46752694e77cb1fc91a479e922bdb214557007482c627582e71a693ed21a18ccf52c70c8e7e8d5ac34f84de00f14c61f8880d173b660048604539a7f19dec5079a2f0ebfc5b7c3608e72b01140c4ab76a7022d465f36934295dcdd9424379481b1649c0c6fd2b8d0f15f63c7facf5b98bc9ca7aaea1b54bc085de731d37d181d46285965b43d5d900b37a77605fd7ce9f018c4fc30dc224f3495bb73795cb25b0e8fd553bc32d9394bb02ed366dc91f4a94903ee3f3da4f894b84c2d8261ab1bdb8de9e059e6cbcbc40a78eff1d96bf7dca336f3c31af5105903dd43efc27328cb4dd01f2093a8ee6d6e956ca87df4eaae821e402f721dbad1ac07329bcb553463c475609e394142f088d2ad86a41bcd067f914cb5e4015b12d17111217e96a297980bee68178a70d62c070e1b9c350f6654918869687c0f6aa530a13b699a83e7af72094dd141baf4de48d795997f88dee1858e7ea26e06a10a1627ed3dc041a2cdaf709b60c20e64772b7fe275ddfb71890f9c823ec4063b2b5f32df0108224379d8f2ba50970d17608196ccd2634e0752ea427c5eab26b7d538347e46253a018436c55d8c646fc5bd7890c75b79447ad90a5c0355a6c2264da64a1d2cd4625b20484fe8124333708aa80538ebc4499d11665655ee62cf5c1fd8ec87cd973a6fd0928bd4977ed4f1a26013ca102e7d0609d3e9803b2af74dc79b3a105b027363696c5d621876d2a3fa1f689b9cbf25e8bad290f4fff4088bf73c1f17c96ab63e3c5369ee87f933f4489a3e4c9e9764ac7e629279463be1712e912d752254d669e146da0873cba00ba874841e64848b0a5ef0878b3335bed7f31bdb48e7657b19b7a6d0763d38cbd9149c7a5c6b46b67f20bf015468166255df450bac5f6ba5e936105e2a5f5362fc316b86b25503d1ace3a88f1407179058a7499af1f61b8780b8481b56112c2fd557c3aac32bf593787a7c3adc36fbe6796f62b8d0453e8180efc09156668ed03fb796a25789cf73bd155e531c640a6e59d972667810af51d7f80486860d3714104b1c783d12a37668aeb06e2c70145739396c385bb29f2612947a66fdf72123c41cc5765a5bea25850cd5220417f5640483e0d224a6e4b23e8abe7b439a55f1a1a5b074e7bf1c85b0cc0fe0db114aa59a4a5d11706410a9aec3db185abaadfae0ef6385f8efd82b1ea9ee175003f03e704f3d24e68a783a6a22fcca6af3e75c491fa96636f5f55db2ed9f8d4360e5369040882ede5c209da4a77e2fe257cf4ef2aac7f1abecb50514d6947c77af6216f13f429f392672c1ac122e113f5df6a71b35a0a318bd43622f8f0afef46b18e564524f011562322ce9771c4de1ff27f5f257af59ad38e6e1bfe3acc214e3b069daf29578b67ca52a3803f1fdfd073a715e611ad6a8070a2c1c190183e2f0863229f5721ac4b8d4669ce4258facf045a9e8de5ba3ed1178fc761bb429ab32dc5aabae7ce009b44fc4886ecf3f5ffec501d87b44bdbe10192afed9192fdec6489cd9c6de03804253e74370666086b225b9232c3cba06027ffe7a072efdff367d96192472b8deec267bb4e89c337ee2ade6e6b29110aba8c746e5f456c1e" } }, { "event_id": "evt-bbe4e646082f3c57cb920896", "kind": "unclassified_tcp", "frame_number": 5790, "timestamp_epoch": "1634913300.855468000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff3b52dfd4c4bfe6f47730e0", "kind": "unclassified_tcp", "frame_number": 5791, "timestamp_epoch": "1634913300.855692000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4639274b83863aea3d7cdec2", "kind": "unclassified_tcp", "frame_number": 5793, "timestamp_epoch": "1634913300.859176000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c95ee56eab9f11cddab7332f", "kind": "unclassified_tcp", "frame_number": 5794, "timestamp_epoch": "1634913300.859200000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1c8427fae5b9ad4351f6c9f3", "kind": "unclassified_tcp", "frame_number": 5796, "timestamp_epoch": "1634913300.862337000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2273585ea80c0ae5fd4e0692", "kind": "unclassified_tcp", "frame_number": 5797, "timestamp_epoch": "1634913300.868260000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c6054e82817e5e44852a790a", "kind": "unclassified_tcp", "frame_number": 5799, "timestamp_epoch": "1634913300.869796000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1fa6e153752e7ff36284e6b7", "kind": "unclassified_tcp", "frame_number": 5800, "timestamp_epoch": "1634913300.870067000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eed4af58f536cbe4e8037789", "kind": "unclassified_tcp", "frame_number": 5802, "timestamp_epoch": "1634913300.873193000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-be4e00f8052d89b116a3757f", "kind": "unclassified_tcp", "frame_number": 5803, "timestamp_epoch": "1634913300.881059000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "3ada3151da21403596c04ec4127cc91acb770a0b7623d456a03cd8e99558c6ea78937fd0ebac2c963dfaea7194a30c512187f8f34f6dde0202b0ee3b2a67e025a45259b98dfa50dad8e3fa22e885dce6a82c81df1dc25fd8b49c24de9103a5e9a938a2158f1d52b9657c834b02ef65467d75b849b5ddf34a19f27fc5df1c9c15126569a9878dc324c7eec78afd4df66564f1602557c5660f24b7d5d2d9f9f3d51bd87d21a7e69b79867660d3540138d5c2d47ccc0e1b8dff436c2bf654bb7bf305fa411e30a19d3c519a27ed8552223fe23c88f71722f2c19e72c578afe158338ed9d17e05ca94727ea814505fff6063acbf49eed31a98f3a0bfe7335bf0a8afe9cbf6996d86eb4e9ecc5ece1bf6f9befdb56e24ce09cd5ea4c15a4926a7e3929d68332fdb0ad7fa248fbec56cb755f7eb7c12960c07636c5d5fa96353603b9df83e2e019e0c64f3b6ee8cecd60c1df36639328e0964f8cc31da18bb3bca153d4624a5a084698b2cba8637135470a07abce8975be69eb6e1733d81bf17c85dbaa4567de73d22f78f039e8329ab68e7f900327594b6eda5e4b20506e41259d32ca2bf148f6f812fe23eb7f1743118f3b5e007e8ccf432680f85549addfca9181468dc1d7a6bd98d5f62a3cf5bbc378aa28aacac5d4b82cc671a9a01a8643a81a419d71f333e2cefa371306ffc5ec34419f5ad99e103c8fb754cb2d3acbfa023e3aa04167c99e4c76557ad95857ccaa08f5346a1945db135e30b8e6f6032b13375b4dee6075633c23e21a5b89fa2d1dfa6f9481159b0c44e7baba34dda79dfcb777ec9d4a05ed56029347778fa8a7c671b24484dd96230f82dc833758168bd523ddae08a0f72d837d6a33d7b82543c96f3da221ef1ec42f16b9b991f3ea78b63d348f48fd8a0d694af5607f60d51d39265e0282c886be0aec63b2830ab14a68858b3f31a4ad7e400d3b5e42fcf1d6a02a6b09b8f166ef9f25406a84b6d0cc20427cae42d84b37e1806f3c5d1109fe977a354b6a28cbc9c999a47f52eb7d988610db0c150332c0ada5e40c2c483f8a26f3131dd8aa1f79730d3df8fde47ac110e67a9cfb3e50bded8d009709b4be116f6c47cec4e9783bdc875d06a1f00c7a3f5b179df47f315be2e26de649aa3099479173667b53fa95ec23a66d81068f33906782d888cebfec0e48ea61c12b458aba97b9fd4611c1a1b45ff1ffaadd6431ccace825fdb543f794dbe5c0ff162439d1149ad42ce9de8c3e7ef93ed287d3cfcc76fbcc721871057eda2a6657cd48ce0a38a2c1975d0e8172901a1846bbe777a972dcf9cebb09cdd7c69d98a3d79cb2d0482596b34aad4c92dc1d537ff1314537c919fcee555b25b3c923571701bbdbfc3fa0bea300962619ee47bdfb2c8188fb0ee3e2f87666bbe01ae0489737d8ec72f75f6a416b4c2f0276676e742dec0aefcdd15768c495b13d0e048a70f0629ab6e1810f00af30ce2433b44b3d76888e60640bcee344bb690976b8131f10122500d614bacb1b5160482b0cf5c7bb9e3af24d45c0e9d77ef27818e8effdb66ebbfbe90d809aa6b62301ea3f591d8490af85f38c4172ddc8d45a0202abc8625703a818a10218c7801d657c98f8b1f8a9e73fec92ef0f910bf95356b0f84e1a6d4f0364c8aac0de255f350ba868c81e2a7218ff4062919109eae8f30b35ca690ac909d0194bf94a7bb44523b5a5f55b696cc8b9d59d198eecd22993023dd5609580b50a319365a0c5a0de10c1ccd6eebd4052e16b6d3921e1636a9cb3e25fd97ce63929e767c2c2169d5227b0e72d0b11ba67b6d5b8419be88e040c25a5187e050b5dbc765e02dd3964ebe8a3b24161f52e0e38746ea2714af60662b11db8a4afdece103f37b4933434801b92f47606ada72c295b1e64f775a1816d0a5b1c0af9218ae668ac4034a706273ae8e902173fa55096a" } }, { "event_id": "evt-cc0c9ce57cfc81378eaf4152", "kind": "unclassified_tcp", "frame_number": 5804, "timestamp_epoch": "1634913300.881153000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8ed43f8f83fde76858adda8a", "kind": "unclassified_tcp", "frame_number": 5806, "timestamp_epoch": "1634913300.883638000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b86f9e558e9904ad980da98d", "kind": "unclassified_tcp", "frame_number": 5808, "timestamp_epoch": "1634913300.884010000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-126bff2fbb9a3c91601428bc", "kind": "unclassified_tcp", "frame_number": 5809, "timestamp_epoch": "1634913300.887042000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-364ce5d558ce32367fafe45d", "kind": "unclassified_tcp", "frame_number": 5811, "timestamp_epoch": "1634913300.892072000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "4609d41519dbf9bd3c670b5672553f2e0c71ae80b11c18e529d761616116e6306f592d9b1d8806a3ba76c4e5f34281b3711b2cc5c6ffeb2e2d937ac191e377ba8d22982aaf068c19d801600129a7a7c4941045bf0aecdf4f8f170c539aa7f24a2479dfcbddc23d706c263d3c953ebcdc9a90d51c986bee354f3472c6ffe825c119ed902492e9219088fd6a5658c85111a8477673ab5ef8b9511939be55c203b2b4896ec82fa4eeb128be1f59b5f2406c0bae4168ffb1069780f5457f5cc0c221fa8d943e4bfd18f7ca3155c680750d3516f07cc512cdee876f29fa77c254367c87dfad855864a0d97b1320ae37d5886200f728219f18cf91a7d74de56daeb7ff344526fe41c3791d372d1746eff7e6001676e891b8d1b2e6b902ffb44d838c35792faec4917182625ae5b4022b421f2e776d344a8c07643a3b76bc670d16522b6762b4be666c1e0ed0ac15fa784968050b666735cb2250850687b830336506b8f8cb1832a901d86b1e9a020902c941282d7cedcf2b1803badf0931573f8d46e6b75d466f41d3843a47fcb0c7ce4a0c3b1ee8276cd257f47803a302efb8c8c5f68b8d4542cec855d49bd3621717aba77cec0b2589e5cc4188d45a336d2282c7a40b13590c431590abf1252921b9f7f62ac4e9d41055eef8c65e35ac12ff0f9ddcf1ae633329351a98e41511b7e778e967556a110e9cc28868e1f9c4c48425a467ae5b65ff774d4f55e4ea5c4d781ff134d85daa55785fabf5085b7f885d37f7dfe730dd58bcc57253ab872259ad89ebe54e0837436a30e13255b552c1e440d114d907e47a41f162a047e0667e142dbbd6a3361f1a71168a238c33ae1209bcd2fe0ba5cfcf437979e761f1b9e084a65f7d1f7eec9a12dd56eea17715d7ae7a4362acf75aa8664185fae27714c5a872a2825e2d0284afa3926669e8be18929731dd0c4c86dd64ea3b4e3497367eeaf903dcc80d4c32e1c6dfdeac0f5c085755282231757daf7c78e533cece0edfabfec6bc771e557cb65d867b22f968d449faaf8c927f0e378490ec834715b5941f4891c0a1301fdb1b63e27a30ff2059251c6da69b6bd0ceb11f9e2b7dfb0a92a8111dbc43971b842bed80560b0d455c0fe59ac0ce28a7cebd81138867a65aad21d4eaf3743a53eff9adf0c3b5a84a9e485b538ec41844e4e41405603f8285dc6dee0d06eb9943c5daeb47093fbdf74f7b7f3366f14faead845ad49faac662baa63e09f85b7f79b65799d850fbfbcfd624ed1427b20c19fa3ec1a36e9b1e6df2cca1a8a393afe358ec83a4b47d87ba1957a52c93ddc7438d34e9830307120fb75630580dc9c7fdeb460474573b34c349944931840c06600d835d7b146befa063cd0359e8c4864b87f43ae2503736657ab86c655474526a8ab88c5c13cc54132962b78ec5c2b582fcc93e0371add4930ba7f84f8faacef927757ad3ec4d046061d402a24127e9fce433d1d7a05f5a562ee57e162164cb1b2128dbcd53a5185490e19fd928d2520a5a159171bff3ccc8c3626abb8869c4492a0ad002d322654b3a0d7f5715e368c416b069e7b2b8624c0e3a80de09d4e6b15dee6459acb499252727298d41e850f7dfed6e3881d5fcd85d5e9bcbe358e06006e47ae480196b2ce450d718fc969417feac44b4ce0f2b01fca7ffdda54b50368e8dbb79351394216b4bb713b1ecd2b8cab5259ce9309e9716ba6fb6ca8407d1546cf7693e728c98be2cd7dacee8dab8b08ab931e821174cefcc09dc19caa6ac26e604bac80fa7ba46600e610dc614a1917da1cb3a6b4b019a9af2fd0efc236346609068438167ae86b5cb07749831cf4fb9749e65f4aad9221e45cc696c1092f15f2d650517716b9c52e83ef27308c6580dd2cc62b5aeec5b7e5bfd22e7af622ac49d737a58a7c4ef4d4ca4dd80414c797cb842bebadd1c775e36a491" } }, { "event_id": "evt-50fbf44b071853a1438e28ac", "kind": "unclassified_tcp", "frame_number": 5812, "timestamp_epoch": "1634913300.901486000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3c0e9b53e5abdc8792432efc", "kind": "unclassified_tcp", "frame_number": 5813, "timestamp_epoch": "1634913300.901781000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d8621b7cfc2fc17cd80ae956", "kind": "unclassified_tcp", "frame_number": 5814, "timestamp_epoch": "1634913300.901799000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2aee714c7856f673a266a5be", "kind": "unclassified_tcp", "frame_number": 5817, "timestamp_epoch": "1634913300.904695000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-28b51800daa4bd876fca5dc3", "kind": "unclassified_tcp", "frame_number": 5818, "timestamp_epoch": "1634913300.908554000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b858b6e2efa5453683193520", "kind": "unclassified_tcp", "frame_number": 5820, "timestamp_epoch": "1634913300.911917000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "30dd160baff712886dcf11987282fe5344931c1d3adad6b68548afa3efc8bb771545a5a170c94ef715c6af1dfc09ad0be159901aa84d0faf3aeda59ffffad07fe7f68a28e093243fecd00aeb6e3342dbe0a1b8775c2fb1c87eaf7270e3881a18bf3e20a544b473225e67c9e05e82f668ff98892ba24281dc69ca13089b6825a5b1ffc85638193afec4aedabbae4eea599f7ca235c3b0f76dcbcc24ff6c67e3d74d1f9ad477b6af22b91b340fd3d40cf58ff9ac6dadf41d5cea497c3fe3d39d1684dee054495807e9c265913e169394851b9a233031b52f62edca766a98fc1e12dd43941a1c98bdd159b6f4c643b53a34d13486c6940a55d64c2c1264990716cf12d1b612b09ae9c6c362df686ca963fd1458a623c1663a2225f67df4d85c5300a554fff394e593abebe9ec3db2a4358e7fa0d65b39fdfbe201663a647a6625771ec8be2f08e7fcdf0b0843e95362de7c78958d82506b9e1bd7aebe9d6736c81b51495863ab59d6def1947f990e36f821b25b4e513a0ba47fab517a5a880798a33832c1ad228a24f81fe41225bc9ac86b3f4ad57ed51ba3235a8c88b33aa4b97ca08619087fa190248616e36e729af179e5a15151deac7626a8a123a321c721a434ecae808ac2e7653d73f02efa69e4e7019ba00ccb93104b041f96ff8e5fd0fe1e4052d8f6e47c73bf8f0c5378441f9057f50525bf4f76f2d353fbb53e6e65d47dcdb80eaa412b3fd4474d9198b026295d6b187dc7b64a2f815e933029f1bc096141220d5ef3fa7afd2b80aef181aff7b0770021a1e7ddefee2efe072648d89a60f90e02f32128e0edc4b04562c1992c9cc7e70963c00c015958221b237515ff40c276c87060aef1dd9feb3e5db273a4420402dec15cc524dfe13be932f91587f5d66c86e6cbf9be3fc59fd4508d924e1e2b8977b00df83b0574eb2c39f03dc19e0503a3675e8e2cbc67b52369bd8c0856ae1e2d226de2ff2a0cf86dcac64b3718c44482d7d457a6b800b124a7c01cbd803cc3473b22640dca6aa7748eafe2d1974e00d34574d0b3a8415a648b67e2048be96873559456640d78318dc372af091a83f35b397cc9cea1da67485848d8c898d651ec009a366d1be83995791d14a1c730a0443d4c5d238cdacb79f0cbf87d324230cd082158b89e2ecec6fa9abb01a0df609f4987f50b92860870cf3cbe8b3e4b8eb686606b0b51a906bde5f8141545c853a5a89457f6720ea552c4eae1377aa3f9a4b5332cc86caf946b829157612cf163d82aaee7e2dda17fe0d5803c4af00b10922f354b93ebf02f7358c3748d5b4c3e8ac746e0b81d2da74c349c3deb987c3a20fe0a5fbf45807817da52a05a8980e30cd1f1bab6ae4b66fe521a72196f8ed7e11f4a12696894537186ab5deb6d15eb4f32a913255322921b5f6b0c9bb057ca4784b38c2af9de52636e385e217da7aef392cdb65f52a0bb3477de546d7ed1adb2325fbace7a6dd1314ca614917f6a88c741cab2cb8378c9f2382cd82ed6e59f37ae9d84013f6bac24c6dcee2ac9263bdb28c06b521f0dcb9a355b2fa70c4d05f2cd0fb09ac390db9a80610c54e193b529509fcdcf6f27659d617f1ec6055b700163a17bfcea328108d28dfd9f2f3d9c1cdf6ad6f5b5c0ee8277538fe6279962201d940a77402dd2d5d60b547db917edc15c7448ccd9c8df5486e1faeccd0324793d9a64e420a63a4f1e1042bca54bbba36bc0280c7f669a6b5f1e56ce613fd5e3e339aa43c2470421c04ecc335788afcf4218d87142cdab10649ee87c81c14821158d1b618523a20579e6ee4ea5e99cf3c1381d0165e7b40c5c8ba24cd9826743ece64d050d4fb6090e6be0a6c126bc65bec62806658b4baec1605cfce0629856acc9c9653b35f1d42e80110efc150fbf92d95f7156c52ce9519f2b66beec5ffe49c094045ad3186a7855ae80" } }, { "event_id": "evt-545bbfd349c6bb7774b69d9f", "kind": "unclassified_tcp", "frame_number": 5821, "timestamp_epoch": "1634913300.915290000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-caf36e613493328c74c1e774", "kind": "unclassified_tcp", "frame_number": 5823, "timestamp_epoch": "1634913300.975557000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "83b8f8aef87099a7f5bdc17233c4bd775aaeda97c2bd2dbe3150ab3d7fdd0a1b3b2acb68dca8c19c5f7dcd7970ad0d787069f32627831a4900f180ea29e8066df3293c45f7819ca32f163a4c29d7815a3a39fd062fb211b73aea9acd5c6d1b36f6bd46d36db8e636e9ba67b846bdb0caab86f6d019ab08e0d4fe453be155c38b26a4f9d7fa03e316e5960be5c9eeb648e24a880ff65efd2125933a290a1c622ad33fd560c88ec491a262e8c3dd61e3cf3fb9c32eca2f68e00ef7e0cf28d044a387c3bd7d5c2d46613393f0eb0d6b2d670dfe8e22cea586d8b5eb22cd23f942664a1059da100a6d0fcea5caa24e8ac21dad69568d15611d7105931544053cc4e8c1d7c18e392e5ab0f7eaeffc283ebf67ed677351354fd4b4aba6300444382ff2a05ec7fa7da3ff3a5c321dbbe3a832b81077eb32641039178b09b51d4801867c0b2aac67fc4fd984be797de1dde06a100a74af9498db953e11beb8d48eefbb670f963cd50e4607ec34144325f756223ccfb69fb17edc6e37037cc95ecef07302163927bdfdad4d1ff93e84198f86d794acb8c3b0920cf10375871c8d0539cf0e8993a7bd86bec86d8d5382e92d2f4987d70ad47467348c5fa472a6064e61605cc80baffbe30a83653f3efc7bce4f83d151522185082798c698a1d3da8dc1439905bfba58900310b7ed1a6824fefbe6f81db358090b27f26ff753d3822ddaf27b0a98c063c5540b575a2ba64d42e2ab1bbad5fd114602c0d633bfa4ecc6dca57f6a7dbccb38cd6c3554a9c337c74dfb21549fcf0ab33d54ffeee10304aebcdcb9194e59769353ac0f3004372bcfda7ae06727eec013115cf273ac2dbce6054d6f9b128242cc60d1420293808ece5e87fd8aa4794c8ce44846ee3a9428c290a6c3466098437be3e105ac5dac4174a5f16790bbf4376f1a0141e220beca36181f04399d9228d194b20cb573deb859d20f52256e3d9aa71449030b3f867058b846bdd2bc298aab971bd16781d78a7e8e7328d1f5e4842ac558d7dc0126806415a5de4cbf5935428b4121e513afe697771e7deda41867ac9b48854b406081bbdc37c0a4fc64e3c7f1a223ddf6ed7f78ce61579220e82f874810b0438cd3718a2b9462e2435474165eb8f380e0086325ba35762b2c096f76be1a68d854355defbaba3f3685f8c7de41b979767af60f2b9852347a441d921641dd175a2aaf79ba91c13ea2f88bfce9da71f6d46c0d4087c71c0a9cdf7b8c3fa1c199850de76556d4dcaaf8c406ac83479e1ed61a5bbb141e5e548ce3dbbb98fd4c62cb135bdac85bb969bff03b0f55a743c3b87324a70f21c0fae2986933bcd506d4d00a1586b598b3fbee3a48573f8d68fdfe7f6cfc812c0a6f8c0da5fd781460019e3ac7452c9ea722a537a69dd594052ad6b40c8df38aa77645244a8e8fc76eb1ad3bbb0c3a1df6a3776b801df7c4e9e45b3ed9b189062db9787b87f78eb3cb895fd21fc25f86606b724bf1fbe43a47ca56e633a40dd740b8a3132496968b635f8ec91d5e9b096d264d898ac30268814910ece952ecb355138bd3adc29e98cc8e77b0f511155420edc1aaaae9a4ee46e1fa84087e458867cbde8f0c43ea54b175d41a8ae8a5e21e2d52f25be25de3188f29352ab6c3da36994a243425d91f17cbc2bfc7bc101b1b9433e07db43b460a6a7dc0c3a919d3b276898f836ebaac96dd6e138b1e2f0570b44a739968bb4781227ac02b9852e223b06a4f302e844bd69cc2655c673beed8a0ab5f75670402e4a3c9e915ba7405463a7785f0be85d589eca683b7f18ab468eb3bdf5dca77f44881bd12a3af22f270530d29f4314ab19da8029dfb6faea858b13babc0525b821568fbb50883922b598a96c52b585507cc6f72d7e99d25bb2a6ef186c0fbdea77fa8bdffa19c523241ab82d80356be99d50ca63781c0b663e67d" } }, { "event_id": "evt-5318e9064a328dd4bb4db908", "kind": "unclassified_tcp", "frame_number": 5824, "timestamp_epoch": "1634913300.975881000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "a3c7c1c309702839b039e2f62620e0a0767483e596c7893cba52c4c23c881bd0f9889f02979b0a91118dc49cfbcbb8bf8157fc9793d4c8e7073c5312d1c93ad81b4380af6617b5589fa8ec3380e2fa9b7cae95cad2925eeedaeba6f1d1bb9273e6a64a839dcc4ae867bcf81e15054cf1e5f51411614c20d0cf52e0aa6b221cb89bc410f7b1be4ca4d63d77b95d759f3ad73afc882200142f27072e01890fc3637884800c02505a8e9e0271272ebe9f5022c1ecce43578c1343b1fa6b227996ee2b014abfd96324148366220e04f1c224423540b740cdcc491b032583af4290d7e613c03ffc0a72492b14c9d21ec2a09f616ae610a326e3ac4026c39ed4021c6138b1272cf3b245d6af2f6fa2454d4fa6a867164be19b6820638bdda815a9ded88982afbff971ff887fdf5eb42fd28cfc798977884b9bbc3ffa7c6adf9c160351d2e601bf89f468b2345ae9f5d3e1b9d06bb88480cc17430bcd32c925ed43665dd85d55f91628734197800126e31dfab0124e385e8f2ee1c6bb4bfab2bf7ad630c421969355770c3448e49777246f0489f8f6171be85cb0238fed6e14a90d591f8830b5ef023872dc6a7e6cc9fc1bdbda29be7eadab6c1d8e2f49946a32d9e7a1300f8ab9fa867f50573b24f563f906a1b6fc6b503843368c663f405cda39218f722fb4c09e20b690603dc44258ddb592e536784cb85ec7a9fed92b8c8fa86601a631701287b0f75c19d1fd5310f169be8c2a186507c062a8369c400ac6e1bf6e133e2467df57be065f9ea4562ff54ceb8f7c4227ac470da9a89ebc1bae6a0157e0253a9f4b7ff7c0e218063eb6bc5c94612f6de408e18e10b82fdfda11783347920918592e8e1bee3af2d820ee80fb727c6bf3a001e17c9bbaae064aa54d593cf6ce0f7ccb796afc1b3565d3e0471ce1e24c22d2dc745345a4a36b0d36dc8ca65938ae73643b00140425d0575894f0e35348776ac8795792997ea8c17a7b1cb20f851bcf826e5ecc19451bc431d62c3be35517af981fc28272bdeacb02d5e8bf96e04c417d2f1b90f4dfed43e7b309edc5ce21184ecb8f2c505f42b362122eb146d1ae452f91d3aea1e16c8133b4722539690fcad7eadcac2dc7d1446e8f8742a63d9511f9a7683d152954d6150a2aa8e5cb5351d62f18869d596a35d0f7026cb926c36cce0ac792922660c74281bfc706f54c77071806df0e645a900c4313d93c652c33b41c09f8157afff6a906a7f029b6002b14ba6e9c9b19a788b953e2119e82124207f561ae3bbb5b72dcb90d787975a20ac91cf560ff61fb08eb3d404a34c5bfdc1d7d76b4be7d5f4774f8fe3b21d180e490281ec33bb505658d0521057d833090d6cba5fc81d374c7b0666c8aa2439e02b2ff339dabf908c75a6b998c87af6fa6a6a3599cc9866adda5fd6a325ffe7e2c048f0347f9e925c65d524da4352605e568a5f1cab8828bcb4641c1dd3d09fd08d2e07da76c4d3823155325f9138a018cec2c24ca26aa734f0a86e776b5a563e748992a1d2d1fcc8d2d961fa478c64d4cbef0bdf3db0b1bae477cb8c31119b7e51f830b618ee20be875db8d9497557fc10ee08fc4c07cb2ba9fa31cb89d857b886617eafc49a4c31ca3dc830859d9fd17e8d68955e24a2c96442bc59447ac2709881f3aad323d8698ad34f92b893423600ec0cde9f1d3d08404cf89dad1db99da18ff4619fbac66a7268d25c94fed889b87c5d8db384b85140d4e8d55afa07172746d27fc66d33b8279ef0040f827d4209152da651d246f32cdf0ade671eadabc2495d67dfb6b24833f9a455c9e0fa6e1a0b0d1e3c222cf4df8c2e5bc7a5064395e28ed8d18a12e4116a1d2215fcf99d9507fd321446e67487cd1cacffd3db9f63841b0fde9ef5cefd2562152742de02d892cb47945b6762efa41de5c8f8918a0b465ada528118202e6030f0d" } }, { "event_id": "evt-e600f2e888144d5177f17f83", "kind": "unclassified_tcp", "frame_number": 5826, "timestamp_epoch": "1634913300.978779000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3a366d0e41a2bd89c0f3c30f", "kind": "unclassified_tcp", "frame_number": 5827, "timestamp_epoch": "1634913300.982883000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9d849a7dbab9f7058af0e1e8", "kind": "unclassified_tcp", "frame_number": 5829, "timestamp_epoch": "1634913300.986596000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-71f6ca0c02668874019cde40", "kind": "unclassified_tcp", "frame_number": 5830, "timestamp_epoch": "1634913300.990525000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8bd6dd6c9cc817c9c5ca4f4e", "kind": "unclassified_tcp", "frame_number": 5831, "timestamp_epoch": "1634913300.990550000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-939f7adcf7990c83cce9d1a2", "kind": "unclassified_tcp", "frame_number": 5833, "timestamp_epoch": "1634913300.994876000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e495a91ebdb21ba5077456f1", "kind": "unclassified_tcp", "frame_number": 5835, "timestamp_epoch": "1634913301.022274000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "77ff3e8ea791a79439834e4716f658688f788ac944277540bf29bbd9b19adff90d8b45d65579d95150dcc17974207ff030f8b22d3196cfa965e95262d0e109273b2c300bf4e0c53f98e97c08a40784539efc6812bd1345d32e8cc404343d5e3c7f40b80331be668f12069b07b795ffd1720641af0f46186d43be275fa4d83976fdf9926fd9cec82f1d8a1cfacc2ed3e2869e7144b89749242d2dd311812fd856f8768b0a0e34e717ace77ca9d782f941ae939d1eadcd71b140da923a48e6e1bcdbc91166629c327729e4b798191e6a1d33b135e02101ede5335f1a2110ee89c1a988cfcd3e8f2888acc9ad1f80cec6b62d2b2dd1912c6e861bea707ecf31edc5e85c369c1725abb047d3fe8830f1b09541701c3cef826f31282626d6aecf4267a56cf4012ff07866b59a124d737576203c23787d69ae486b25ae66c8e9b356ac8d27715216b93ac4ebad05d82511a500333040755453d0093cb80c886d4843f0edea8d243c0fffe8858de566c04521c372a794887fb4fa1795b378a51aacb1d8d2f333d42cc8a652ae64b056b9f1dd72d701429f56a99236751f923378074e591b536675fc2770696d96b5eb120d9d015143ddd5e09da7b8c8d91af5105a6acf5608825575d192b60b5aa4474b08a6847b16b1a21e09ffeffe55352ff71352b129bf51cba5d0c899869db2b821f9c0dda99ece97e9413b2dfaa7ef6103d478e01d215d5b12e4884390aa680f7e250f6c2500ae8dd6a04ccb694b926af1f1fcb586475643f3e51bd9a9cb4e017ab1709c724fa61790328bed05b1a10ef1fe1dc4beb217df81c9437f8d478c0d74c1686ad6b7da9c3f60d6b064e6a1a261e32d532ccdaf23ab8c79255f44b48a904584a65322500469f01f555db0efe4a825553d217437be6aa43cf6e456d762839e41902e3e88186b3e09bb8e85b7ff7a2536929f60fba6308132a5ace883095d2f1b51dc952938558a37d02c328597937cb22b17d0df45b52568b866a9babef0a57e0a97545941676f3df4bcd6edce34a419fad0b7cc6139b75fe43c7faded0a07b96091f1cf2972c63bee8ebb5518e6d614a86aa4b09cf1ad6ff1ae4d36fa534db2b7cf91e662d79793068e8e26f77340c8ec2384e99923b7049568c3631333006c3d26d5a38d5177c5f8f440ef95fc527fc912af1704b5e5ad0ad3822d293d3360bad9d4c2f8a92f38b9e710b5e471c10ed642ccc46b0f03e0f276bffe91cfac4c716a4909c2edba02d15fa2774e17eb69ca3fa5ed3bbb263170410386e25dd21ecdc957de5ceb185d33f727c7c7a1d32ef13e257d44653d71f427f1d951ba24da2ac19550df575fe8d755e16c4489c6beef4789f63a9c4e2dbc8a628f12d483e6f9fe07249e02e4d6b42674176671682bb5da051c0ef55edc9c6c568fe3ed792f8705ed663841dce9ba81c0fe22a689afedeeb17291282562bd989f9f1462ddf8d79f9bbfe65ef0582e0190dfe32ff61d3049d60c2d2f0aee9e4c521e1d70086c5fbf73122d6a96832aafe885f2ea8412be8f3b593c20caed5bf35fe4960723e6906f73bc8fd60f6a1e1f77201c26d273e27f57f3740a8747ea2617a47e9149ce32fe74ff1db29a68801f45c0f7280365064a8a2857d9fa81822687f7105a3e22b0c464cf021a3193a25012f4c8b922301c4fe29aa0c415188864fefc566d85a6737e358a678155108c282ab3487375849a8d6f2a3d059f7c6c8429340868153be7267da55abe28608b272f6058905da78f9290ac4c2853771bb53ff27cf90ba7e01300be4f9ed0aec6d488c354a0e48f5d46096d61088829f0f7063be2932201bb7ffad52afd4b12615dbebfeddffab25043ce7bac331bc3688a19c37cc1ea42cebf2f9e74ee7832a1fc4cb2696fcad6a91d29800099458e05dd14147cd17e66089b816b09bef9292c645dc2588f322521" } }, { "event_id": "evt-050633690b5178c610e6f214", "kind": "unclassified_tcp", "frame_number": 5836, "timestamp_epoch": "1634913301.022543000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4853ffe4e6065e52b88c853a", "kind": "unclassified_tcp", "frame_number": 5838, "timestamp_epoch": "1634913301.025706000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4d999181483c8ae3a438cb86", "kind": "unclassified_tcp", "frame_number": 5839, "timestamp_epoch": "1634913301.030912000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7b49ad2533cee7b74558c07e", "kind": "unclassified_tcp", "frame_number": 5840, "timestamp_epoch": "1634913301.030943000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5c80e03f812b0eec9ce93d2", "kind": "unclassified_tcp", "frame_number": 5842, "timestamp_epoch": "1634913301.035665000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f5f48dc4213fe89a126e2c82", "kind": "unclassified_tcp", "frame_number": 5843, "timestamp_epoch": "1634913301.035823000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-086c6546798879ce13504ac4", "kind": "unclassified_tcp", "frame_number": 5845, "timestamp_epoch": "1634913301.036099000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "1ffb100000d8385b9288af507897290789906a612bfb186f257e3eb327a92241b7a398375550cff9f2a170c6f2c59b0be231c9150f2cffba07c891c0220af900bde01f0f55bb75e57567db9290fe004f11cf356bfaaeebc4e704d61aa9bfb23bdb23a05d938a7a82176d3168dfbe4cfb6d8d1b0a6a4185eeece0ef9e4fbe613325571f6159fdf09f425715bafc07915487ae1c2e81accb5fb1033cc64ba3800deb8aeb53b9c05829ed7080f5b481f7b7cb633399d6b1afc169c83a38b265100d8450b953e4262ca3c0821e6ed468a946cfd3714c5db0964945f80576011c7a435b165bfe7137c28aaa067851d1b4b7f6ca403f39235bc693edb59ee63a15cfe90877c850473b1210b95eddb0ff15907ac9eebc0d924f464c821ed4674cde90bb31494dc982ada3e99060b458d59e7a4e11a54acfd287d559868588952846415d5c126c6148ae233e46a38c2bcaf739855122acf23d16bd941ee890d0440c099ac091e5cd274e79a2add78af05a311eb08af55c7baa49253a7b106aa77bd7e80db85de4460100565b5c3b2b45e8b5c6ed386d74f16f7c6159d1da88febddac587ef608c867f7d06ce6af0c809de42911b13ee75e08e2c0e10e76895de9576802000da3d88894218c2f8f1bacb26a83ded60a5030607867b744757b957f7d291f9f9ae965aa3127b4c7c6af743a031ed172f958ebbf0982bb24c6ac0ff7ec7c7e733a564da80799317882bb346a55dd530411704479179be88c0d1099718b91bc4872938ee2e6eae47fb87028a25ec41eeea4eb0ef5baa685dd9b600621f0ba5dd7b6cd48f5ce385a0e99f4d4c6172e13900d6f0707e3ed818c3e8d930e1e897a8040ee1fd9952173f644005edda378c72426e84b2102359f797c340eaf6727974318f01aee46ab366dbfeb2610e30d671d2a9c850388286bef37a3769738bdf009e56c97af484946e2c987746c8f83dd3abd57934f5cbb774d01bfacf6d9065b6331cc9ba6b2bd267fb98ac1190e4877d037203d4900e2ed8cfb8dce8c29741f8d2a825c02e354f2e049bf1a472fda052f0ac4cf2b3b39256c6614391512685c51bc54cdbeb21fcd53444d7526b06cb16f55ac5a967863176495939ded7c6134f3ad92d68083dee2519c2457c957056a9e2913cdb09f55f7316d6b5e9c802932831e342c064cc4ad9ecf2d77af5569b62bb50a04fb5f6168a9d75de40a2dca1c256a99af5aeea670118262f492b2cfc2d2194b8e698bc040b39b339184268055df85aa39559a3f9e09e07093b5004d0466295d7d9dc6a3a6c6fb213297ce5139ae01e010ea5112abee7ca136142e96a4546fc56e7c4ea9481a6379eb58071e4f9a836c1a853acbaa1fc4523e8899aefdd380fad73d5c478e0a348d54463dd331748b4bfee745a8f37ba8f44d1da5b11515194dfaee84a29e2882af8860fb4b9fafa7e299fd22d352648d420f92178dd3a0b1f1de61f1c59235cf8492ba8548a31f51b037331e9b298d315257be2d627b5f29c8b6dc89cc254ef3e6401fb6be6f34f12ca7c113c0c4e531438cd4cd9774a4e581367f034c153f648cf7d7208371f89aa126691631589606aa0506698c07e44f04429b662e6fe01315d575f5fdecf287e2ef6627619a105bfa5a4bfb2aeeec13b6c1e95df5ec9942792478088dd672a5d011b3cfbe0a262633144415996c1b8a78d4ce9d4b494f39ad0b14375e7e011959ecf70d6be6b77be805940e41d2c0de42429c67bead549d18481ae780a326eb780fa2f6c9b30af8c3be57f2add841cca695975a88c861ceb31bc238bb98d15c9f105d469b7614535acab6d0609a5cd32ad4fa120d00cd9c3f1bd0d30d78fa74f107ca7b922c4ea5a8713894d645718214585cd2fb706519e8bfccc98b96fe3d69c55e025490915221cc1649d1572a8a7b1f8e03fd8da309980953b872ec1" } }, { "event_id": "evt-b87a17e7f47295adac2cae8d", "kind": "unclassified_tcp", "frame_number": 5847, "timestamp_epoch": "1634913301.037350000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "b69ba1d233f1d9c8fd7ceb3591fa0d56c47269d2d143d3590a54a77deab4f237a74c82700c4ab1e60d8bac466011243a1fc32a944615d3c44ba7076eb1038150c55ea13fff91b0c6d5acade4ea01048c1cc1d122c7d571e0c091598f34bee3a824c06f72f6bb6a20c803548248f07e224d0d035412fa30a9be77f24d359ce7918c59275d3793f6893d59aa6d41772b31e58d75179786738ccc5cc80c803db5299b3267c334c32e74128dd2f0f81334c4c8e5b5e28e47eb919a178016d16289acb5c1317a92f126df03da398ba45c469b238245ca3f2a660e581d4df761bc16c338e5a62006e2a9b1ca5c5c83c6989d9d37fa30535f7bfaf4ec1d2fcb1da18d21c7ec8d818661e9ea45df27c17c40f53461b39c74cea5239256b21b2e922636c643d346c47fcd325301476f928946f85b7a31e586e6a9f66d4df4a462fc85147e7462d8d5d9e2829c9f1f4bc903d1acb9f80af4f04ed3c56304524c59a42b9288a4f90a6e3ca58fd03360ffe6a29b329d7f9164db1cb0456697809eec4972d756ed20f4f0fe0ac623d3bc78b6b5609d6092c4933a84edc24dee2899dc9e1ac8941ecd8f001f41319c26f7ec16fedd91b2b9d1b1490710587719e2d1d552493e66eaf15e313e470c2cc2a58057d597d5c654d00ed2dd9fc4d2a62220d8fe7370e97f963fa79d02d740a7d0e32958fe33455718c38f4927374d796c4ca8fe9fb7e9e7f6b25f802d46318e182ebacbd9d25e91a558c46ee2806fd7ec1c6b7eaf41fcb30b066b19600a1cb3655b5a76c8df9640fddf39eb7bac6de23796588b9f310308bd4c555d54383f6d7e4571483e9df3bfe624bab9160d93ee19579a605a39f701c5b3ea585fbb91d2f85ec7b45d392f733de6148bab0806286d3c268bc1e6e600f76eb16146682897a7f67778e7f2b099802de5a93a8914fb11182a92c73e9dfb7896cd92effbf9cf46da51b3dcbbfb2b77beebf65b27b22fc4369b6a3638b5bacea7d2b2f7672417fa2bca1f7c8c63ccfe5a08ab546ad242628880809edd11e1ed2a431a3cea27420f2aa84c523d02a954bb1d252eb9b1280d9b8392a6ed19833eca54d1f1c50a0df6554dac397134077484cb68e4fde614bbba9b30e313f5dcd6721ae4dfa2f713b08f314be83e3c550d122b90655cfa20dc2d0f4c4a0bd76d3af311d8ac4d3c1fff19441baa87312cbc5f26a665b10a8c89db01142c479fc9c245f424a9891848d11b8aaeae29fcb86cc3b3a2efe1ba37732c9cb3ed8c12eb042640a488e51aa287bfad206015024b52e5f465bbe21ef25d6acdcdeb078c2375e8a5dda2eaa5833f52b84e07b857f1ac3b2247e30a7ee56b4f0864196dcc8fd5ea45f81668416f940c2866e04706916cc4e43b62ca26dd945d0c1dee19f59f356348146ec11af23612868d1963b770d3eeaae13408bba4ca90a5739a3f5a8c6a287e8b79a628104d70953f055959120ce5b50db6b39d819990bce50e74af1d91c206a123cb9c2016f57608a509857628f7630bb633e6023d0a343179d0c93533a3183df33943437b17d571030310c433d8009c32c131ea0016d0af739678c52e7ed1a60243a4820382c8cfd58a05f1fe454674ec38e2a9e04dc0e6e92924706565b55826691f1c7e56c24123d6fef8a3121f8923aaaf7f3237ec60d100460fed3ecf01765d9bd4b42ed9e00eb3024367abdfff8b6ed0c41053effedb47ff9eef3306bc564832acf5e0d2b15a1cd117cde10a1d742e3bdbf4d57c5a8db533d46a40d47491b6c9778155cf8a84114f37ffa18235cbed7c3d4ef25888bd047e01e701755a9269e92a3deca756af0f51f6719739aad6f3d5d7e9f05108b09550f2ea306e61d58a0f92dea053c4d8c0c2818fed80f2a0b7309412329a611bccac8e5bdc90fd6d823f8537cbef302e18a8db75545fc46d1068c8e32eafe77b49c2" } }, { "event_id": "evt-f606120f6cfc653e6a22f1cb", "kind": "unclassified_tcp", "frame_number": 5848, "timestamp_epoch": "1634913301.037968000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d55c3c1563150f7d7c92a4c8", "kind": "unclassified_tcp", "frame_number": 5849, "timestamp_epoch": "1634913301.038051000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "4fdff887857dd02b4f8181cc791f4f196279238fd4805ef7e87f6ee0768fe1b7c368f76990e23480a10ccd8986cad554cab5e759bde7d344011d22a85fe7c41187b649b54b7ea68b4941e51117f0cefc01fa5132f3ca634c60135c1412899a7265c30f41f9c0ef5f83a0aefaa0580a72396c3c5e34b9ec3d359f1c8fab49fd11055992cb188507be87a102b1a844b77ed9e8f1ba840f98afa0e79241e15308af203086709a85575d3ce5738f9b42965607f749c7a3d396a72e755e540b4c009171748350da49e5b509fada9c750ce11c54c5438cb4ea18b25fa6ff267a81aa7978a625080c8351113964e3676da786eb5f08f31f19a3c8d471c8910f6b81dfef83fe68471425a89f3a48a2d582a553b13af8b8ecbf53450193ffc8642b84d4d4b422546cff2490e926001a26d9936071214a1ba16a3fa8dd4069f7fec922aa89ad15f891a96b09abed196f81913788128a8deb9466d7544b2c54294a64796be16b979bf0edd93a79a0344fb2fe5d3a9130bedd30feaa238e4a4c5a7d3fbaee34845514aada35fcc5adae6d87b45ca57df292d7c39d0dfb0b8d348d263a161a1479ab9c010c15500343f72aa28531f923d95a061ae1b615be40b233c4749b3c1f4194d070f0ad035f7807842ef05829caa54fe84a0e08baafa609cab17d9503ef3c79752c5ca6b9d907d936bb3963ba4757ecf31bb99998b8d4c2f22430fba73b25d89b5ec214d989e8ce521b072a59e74c2be81395cb15c29ea8841d574a87aa2f8782288c17db5d9fdad537d8f7ce09791e2cf5ec1dfd3e5ae8fa985c199bf1d530b2379d4859b89d85177cddbbaaf9fe7019b7348e95a97f2c2d72028598b5713bbc364b2c548c77f4a8da263ef4a88963b659ab99f8dcb94511f3cbf4ccf055623c41d751eb57f63e626ffce2cb2cf54b4d0bf377c42c81677f43582d2ef1907ec428c7dd2777b3adca8bd26a1137a3d296fae329f5b823991cc654084be87ec45712b1366f9d42e74e26abb1d0ff6d88d5e7ef1edefaeddc56c1caf737ddf9566d49fdbb447b0acd14676b2afa83f99d891cad68bd412d0ddedf8b4870c3c221a62546ee884ba1db2ff0c6487df9e98e76eb943397fdbfb94025caa2c633c1acd391b0da7dcf1bd0dabdc174f0fd86d7282dcb50080c424b5acab4a46475c1c343f45b1bf2210a226f85c62f5ff711ed6643521171a97122a9fff8df881863d19c5383b70f5aeb9e66bf87e898801dec0b0374c59d44d4d32f8d29ed46df2780f7748af077bea213b8a6bb7ba3b8056185a40fbab777132b235a5b9d0d2af188cca2a3af588ce1d6246c5fe411658f51554785ae5d3b540c0d6742ee4f84d77143b7f81f3f7e369ad08a7b7187a988331adb82ecf193073636a42dbcffd204cb824a2d2519e05ddce06239685dc077b5d86c230c8d38ca08ad3588d565c514a850c2757140fded9affbed7cbfea1a05b164e764fb4c8099e88535948da3888c2480dfdabc62719c410b753e40ea0a4f37a3db7810047850c2b379ac84c4cf93a2d0a8ebdeefe66b2678950ebcf629725eaac9f5eb0e4a96035640e96c1aabff25cbf0daf14362fb1d75045830ad45ea759b72dee6831d603adde1b6302752542c711f7ab13d62a7298cc28247d328cc99705cf74be90a769ac651e36d292a099662b1bcd5db7e79fe22b903dfc5cb97f3c775f1cf2c1269b6919697bec4392c23ea697a04bcc4aae9e602f3dc784db1d70da2febc1638ae0ee366f93051df1e75da62d44ca8f48a99f129d0d41fb5c45944c5fb64dd8d825feb5cf92af8c583e56b7ce95bee27ba7526701b81246276adad15cf70d0509eb9314c59b95267af31492d143b21e2c0e23c094cf805b6be95934988cc46408113592a7daf7ca7baca3205dbed201ec6a2824921a9c6be2fa9239912892562cf7a698a8ffb13b" } }, { "event_id": "evt-f4a88044bf03aa12059cfd71", "kind": "unclassified_tcp", "frame_number": 5851, "timestamp_epoch": "1634913301.048717000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9757c1bad8d212a7c094e0e5", "kind": "unclassified_tcp", "frame_number": 5852, "timestamp_epoch": "1634913301.049074000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "86a1e309789d09cd8adbec77300c4f7c5cb7b17e44bff8051e3884fb0cc3736c688e1e6a402ba17454a95089b44dbaa0f3462c0b83b1d01a9b4f28c0195f5c347240d2aabfe44e7a9b0d5cba4e851ceaff1e7463a5c91a20a905ed033b0202ae8bd18c36bb6ffe34a1810321a42465cae4ac81e955c98507dcf773399920f42c276ea11e51076876aebe749812e3dbdac03654b8c855b113e8d741825b09d8f47dc7d8e4fdaf85d150db181331de5caee0dcbbd3cd0fa2e3b17064ab30f6ffdd722f7c5f409f1df3e9539aff7f04ff89b4d36e7cc0a2ff9c8406fbef105cd7f54be694c4ca019966fa354d5ed03a32d9718122aa44ce4ff850287d2686c4cd5b6af2713ec839731c1653bc3a269d749dee40f9e3a7a241defe092dcd180fd0648c0d7e5916ebfdf9c6e34ce2425a575aae93498ac3c7520364c02084edb6c2ff0691bfbd7bf6de57d2980a4fb1cbcd88277d61e806c6e562331fac57a02303c2455ae7f6b516f4957f6022da5ea5852b516fc818a812134dd2705a20b4a62960deb6845da2b766399209843e10ff314cf1f4ff553dcd7717b780f4cc26e02b7f2011e9819aade00d82a1ab90dda814ee3711d880ae9a511ad2b91dc34f9bd845b312d04efcca3bbebe097d3eac315e95e9908e3d926804f2cd5a395b33eb979523eb67c5ee2d0a3669b691c711702f24ae87a6d6774661e75ee48b99a5350615cd23a2efeaff09af3aabe81a5923fac4be9a9726bd83936e633965f090f01e3293a81ff98516a4854cf6999810059efb3eda9eea6ec81006749d2a8ea2fe3e920c202fd2474989a8531a779561b880e34f53222f6030cb56f0b1a13cf7c2780d551db416459d09ac1b296b15d3c3b7619e3e9f4d4f60904d532350e3f8a3dfa2bc4901f44258036f4ce612dd7bf8df415fa7b2f6c6eb8cd9cf2ee1145579fa3c048f8e39863c99fe5d8b8a3b7a1a26aeba096f38989c8f3a0a3d81fda44ead819274af01d9f79f1d14fef188ab9c70e450b3e65c7097790a4897bce7fe3517acee7652ae74b4afc89db5bc5185e11381fa76bd5dd57a5da8b7b894457cdec25182863b6e92add46ae670fc23f1e147b042c201f1bceb0fb65c1253ef0dd486ccdd68e376b26964cef0c50d69cd5142adb43dda2757fe90f029f69f52abf54c590bb5e919326f67d8e1745ce83b8175c7f020e610c8b0a93fbc10a6f6d6e6a224059235b2501394551223f64bab6805ef175b8501b8d1697d105b1cd8a8459a32407e752bd38a004bcaa0526e924082c1fd438abdaa7596ea6c3a8e9b5e2f912300124f76c96b40849b3be814d4ee0e6676e6877fb0c286ad3dd5d9e378e07ce86baca507dc1d57681187c8176c5201d11937afda95945b5d8e105ec73806a12d7d76bcef7596648047002e6f8bab4df1aa919b9205c357a0c764ea2050519cc459fb2a5b9e2222ff5fd7fc2b663bdd63151251c310946a51ae23c2f16cf5e23b1b0b62127d416dfeb7dc2c3f066eba3125dcdc284716241fca4f0a74ed8dde0211ee00d19cf1075a6bc7b281d452b56c53bb30c498e31e5e65f576a4155df68119cf04e990be6cee3683511fe45403211d3714cdd9f637f2c9449b5da6565ce494c844c4be6e7e783166768e9b94813388c5ed1bd60701402ff03cfa872f4903dfadfe0229ffb66e3a5b0501d1b0574f64751d782696e95f5c0803dc60e1cac57e3ffc27d92b63c6a2e517e959d01b388b00c2fadcd6c8a25abaf6327755494c29e7570ced77624a5d6fb645ee812ebfd5778e73a283d4ebee93e5ba019d5951dae3dc05f39eb65a474a1d435b70be317b6f229bf84c494496093c1579d8346b17cf3b5cdb00f944da9e204840345f6203960119bcb902c9fb00427684d4dc564de1bc3bfd66e864f506679269fd4489ac8f168f9d479100e563a7f543ed0a05402f75904b2d6dfab18668c268316a28e9944ab972cfae6fc0eea0dd7ffd5828b0325537d280213671d8c556ead650acfc46fc0e1f87a8fb8f75ed030665b54a2172a9b1ecf14453ccce4b1664d159d417a21f79" } }, { "event_id": "evt-6909c58bd5b19a4301522ba2", "kind": "unclassified_tcp", "frame_number": 5853, "timestamp_epoch": "1634913301.049089000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0001c9d7e60b1c3a971fd353", "kind": "unclassified_tcp", "frame_number": 5856, "timestamp_epoch": "1634913301.052048000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ebee92ec54cbcca3a219a286", "kind": "unclassified_tcp", "frame_number": 5857, "timestamp_epoch": "1634913301.055730000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eb0925817204dca458ee30c0", "kind": "unclassified_tcp", "frame_number": 5858, "timestamp_epoch": "1634913301.055879000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e2c1a5152df71e71e1831769", "kind": "unclassified_tcp", "frame_number": 5859, "timestamp_epoch": "1634913301.055975000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dae6ac34526f0d4ca3eda672", "kind": "unclassified_tcp", "frame_number": 5861, "timestamp_epoch": "1634913301.056180000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d01ea74b048408a89f53b8cd", "kind": "unclassified_tcp", "frame_number": 5862, "timestamp_epoch": "1634913301.056333000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f70d10892ea1db8094126a6", "kind": "unclassified_tcp", "frame_number": 5865, "timestamp_epoch": "1634913301.056750000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-92bf87a1141eea84386c0bab", "kind": "unclassified_tcp", "frame_number": 5866, "timestamp_epoch": "1634913301.059324000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eaff4af548c761a0fa6b819c", "kind": "unclassified_tcp", "frame_number": 5867, "timestamp_epoch": "1634913301.059577000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0624e91169227337e239ae78", "kind": "unclassified_tcp", "frame_number": 5869, "timestamp_epoch": "1634913301.062651000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-699989e7833a5fd8d4f4d1e0", "kind": "unclassified_tcp", "frame_number": 5870, "timestamp_epoch": "1634913301.062854000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f9ba899ce0363b2acdf9ed5b", "kind": "unclassified_tcp", "frame_number": 5872, "timestamp_epoch": "1634913301.065972000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-60328cdab6ce53909aab3290", "kind": "unclassified_tcp", "frame_number": 5874, "timestamp_epoch": "1634913301.074328000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-46a110ede43502548c3492c2", "kind": "unclassified_tcp", "frame_number": 5875, "timestamp_epoch": "1634913301.078154000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "88d10caeef9e3fcba358bd10f24e87795e9c6f4a82400faa91ed18835c4b25ce4c44191c069c9b22b12a996765433f4f0740a4ec12efd59871071df63d51f0b5a124b23e8e559e4b4688c064c4843431cc53f1fea8b95320ba40f196b9a49fc846365ff6328c3bd509400285cafc977de642b1728bcf5b912aa185861cb47e5d01fa2055ef1a09e566a3c1b39b1a29995340bec91dfcbd9495bc9823db714e89aebc52e179697e41f5d62196e40396f31f5e4653dee6d538e6b750752b8f3d51a0ccebc93f872ae6f565b884ef1f728d8b6f531516c1d8a3ef72f6b51d94de041766e3f605f90ba26ff9eb317d2bc22867b24aa1dd1c1bc4da512db2f2d16d05da25ff5c912c97dca45442755373aae949cb10774f312928787949571ca741620ca54c1f324ef20b65b7a3ae500aecd0adc2ee928472ea8815cf664675fc21d0aa7f5e9ea43e8d6646c040a08970be5789fcaba975c7de90df015550a1b0615586c05057467c12130ac1af57a221a92214fee5d553d4397532deb06c6f2f1823e1fdda19aebf498ebf79924fc2124025fc6895ba69ebc94df26c25069525c6c9f188dd2653627527d861ef51ead98ce938fc8522e13baf447f74b318f0b83d57aa0a995d1e8263609c0f59b9ba6c3dddeaa27541c38b5c18c00607159c2c3e41cb785b2226a3dae4d8192e4b70e9e1d37da54b985c60e686a43f48b811fd335314ebde28ebb458e86c41e04ecdc05518ff6a61b3b7921eecbe8652171cee39b36ebb7299c1dd2a99cda48cf655ce98308dc09fbed7cde2f22917c56a9119ebafb7e63ef9301ce1190cfba98621dfa65d7ab0ef3f861149b6b862e3c8a8959bdac3950321fd0c8a9412cccfe7d0b8a10dc54cda2f6cde7dc1645c96304a92bf0a3f4f8a689503f420e385ab7d4ec3e4e455bf15004ca4c15fad650193d6efe9d611faf3b5ca9ccd010f6b78982afec247bcc0bffdc8ed5f568d3aaf40080372ac2c110a07c85d2350b0cd2cb39a522f141a8481d4d8050b24d853c591e7a1cb30c1bb6a5c7fdc34379b92093a0c381abf6769fc54bdefe3ac437274bb2321d8bcd184a97db826e97ce1e18ae278b7639d63b8b423b2bed09241dfa1c33aae4d47f34408fb4a23be1a9cc3ba91804809caeecf180c08f5ffbb4be294620f98d0238c939cb7391514f36850c4ecfe92635d4ec862035b9e0fbe9142bacd6becf5ec4b2176107447fec0027099f9a52002dc56a8c347c54bd7ade15e220d089eec1dd6be4ffbc3395c239200a6b325b4e431307ac9d30adef69c1934a25ba9252c229c25f028fe22faa14fab16f8877631a2f3692a75dc26f712335c1335c2b19339a0646cde58c982f40bc7f63605ad6b43bf7847895c4f1f4b38a38b2b01f2ff71198a7c62a475b753445bba864f1b7bcc7da4a78a8e87f95616427e0f0c4f8fb023d1d53cd965274dcf47079718f8dee25850edac2fb8e7a8abb07c368c320389d667ec2b9340c00b18983e11560a3b2b56427cd2695d7ff5477e1cfde9406d59b222878bbf9f1190d1ef6df7135ab3e9b6205122c1960c9c8530c05a241f59cdbeb0398cb9a2d30e6eee7961c2c36068da14adbdda29bd7578d06bba93048fc0c7cdabebb3d31cc047c0cf0a99662fa70f8faf4bc0cc4f7c89952ba4847dd3e24bb733b1bbcb96f29bc17da877821ce9c7803a7d8d700a3268442e76004e9864a511c1cf8d968b20191139779e415d7b754f3fa77e84de5c94a0965bc4e7d3cf2bdd0aa53ce1b31f67d50098b95ff38092b05990d2dcd34cda4c8620580302e1f7a67a7d2781e2ff49e6dfc8bb1598b07f0ab6ba8419b34d76a6abb56a0424b9f4a311864a5c3b7616dc37a881bc3916e391f3d386c4554efd8ab41a5cda90a00861007ac98a17ec7c36a334a6e230d8840a92612e62cab63a35ede26599d45e" } }, { "event_id": "evt-f8410294885b99581c155bf8", "kind": "unclassified_tcp", "frame_number": 5876, "timestamp_epoch": "1634913301.078316000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-828d2487a831bbdca36cba08", "kind": "unclassified_tcp", "frame_number": 5877, "timestamp_epoch": "1634913301.078648000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5d5ee17fc313e6e49b3e4bda", "kind": "unclassified_tcp", "frame_number": 5878, "timestamp_epoch": "1634913301.078719000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5696772251d5adeee215d8bb", "kind": "unclassified_tcp", "frame_number": 5880, "timestamp_epoch": "1634913301.078838000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a205ad9d8fb2db6749eb0e6b", "kind": "unclassified_tcp", "frame_number": 5883, "timestamp_epoch": "1634913301.082910000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "aea216fc0670160e9dd8c89b2ba24de8aa6a0178b6b61bfb7e60e6f21da8849d2c0aebe30dae6acaf2a2aabadf585f58c9c0e7b3bcdcd858350155feff5a5c6ca60d1da5c31e0b1ca72264e85a3adc11f24979da15d93479472664febed453bbd75d8ea6bf9ef0c74cc9fa85a46d64b5d24e260617eacea1b4dc7f8b34949194a502471c1576f0a87d6095445fe9b1b79c5c8655a329bab22113d3428aeef2b12277fe92c1f065c119e66850976490ee1cb8efef61d4031a3b20d26e98095560a1f746fcdc5129291dae5582595861a0a44b355c3a31cc2fbc133d8e1c8f01d42750ae5e61869bd9fcb25a34d90f1fb1ab5a8a000e0ecf1f406cfc109a3e16f783c6a1d305acef455aa4c0490844ffc8b8ff037ec6d948ef2483a080542c52b9e70caaabf17b274d1f795cbdd07ccf8c68dd306a2c7541b1da438d2d68a1b071565d8cf56b2666a890b491958cb438f6b205fe479434ed9b053ae968dff3352df4db76884620033eaae59984b25e1b0b84ce91e60473b40ba0b0befa867409002c6c4f91e7840254b86c4568b39adace021babcacdab868a5774ebd5891ce9061bc666eb643081739a6a7dfc2139375bd641dbd8f639579bf8e2a5af211a4231a765b7c9cc9d954ec84b03a66b30fb39d5512ffbe89698b681941e6d1df1f82e3c84604daf97eb43ec0bcd0b0b365d0c1b6992f5280c7e45907a352e8b8b3624bb12d3965b0e3d625727bad543f9a02e785a72e932885dedbfa8922af876d43b2b6542758a8c15f5bccc7c5746afc5dae63ef985d84c7801cb57ccfc1ab27f12264bc591ba33ad5171eae0cead61f4fe276f7a0525f11ca539eedf1da7781f6ea3db335ea803d9e09299d82757046cbc85dcaf5231cc4b060426672d067795ad1b2e9212c74223ecb5ee870ba7f2bbcbea7f67d9fb8345f395b899f10b4a103b821ce8a021cd1845229bed42613663f0fb0f2f73a5e7f4f244fd60a88bf9496355449c855d8a0ffe7b272c3eefe8417d5c7cd61c0140db33e7bcddefbfcf0600439951749c82ac884b33daf74295013e16a92a22aff2d701ae7df5649ab2a23931a67fb50fb1fc9056a22f684e04de124d05a36be6fd0f91df56906e1473d7c35f81890b7ad2be217cb386eb5b9254c212f23fabe3dfaf2c48e10bb3e5d37082bfeec4c76a0ed138714825682a0449f9e6441ad2b9a5052fe1e5e1156226611c86d8fb2a91f6beb40e919c7b38e46853dce07afbfc0add2883ef4b180ec2b973f982e1b9cacd52196877fef1b59518f308463dc689efc35db2838fc0d6b6d43998cdc64da37eba35dcb2a8f9532d22b37ddbe15373dbeacb1a8f716d890a41e077cd5c00b86075b48b533e76394060ddb4c236d868cef6058e8108efe3db86260f54b7565dca9d37f61268f0980da5ec4de8a7f0a007a7a14b6790fb37404b702129ff81a28180f7f9a657354b7da81d1ab29117e08895af034923399798d01654a2badee8f80ff2574a16caa2b228f48db7b2037196eab2fd65864d0314510999d2144954c641345fb4fdbc36eaae3b42d0e3f7c2ced0c4df0434283ff5ee9730f8a8490e17ccc3886b3a902cb73f472a5a52d6737fbb75fd6c381e916a161fc2ec1784bdb19d49ed6eeaaf239f5547db3ff91c9d86e36a36ce74d046408112c5204338812548a60a63220011b33c0eeacb1161e743f6b136c38f9700b8a72220cb36627eff78e204e976194d99b7f7861df49754a63bb8fc620dbc880a6b15fd1d26df5975585fda648567b1c4da5f32d35a946fc340fa475db85c69a2b407a4a63465c530d071993e7d5998ee7281e7f18618b8b75dc4071984325f7f61ef669964a5b38deaad6570384e645ca8ecee2be7f055b5e206e4fbdfc9cd4ab5ff981be8aaa0037c64cf097b9e4763ef87dd4e9f7f65f261e5692e64efedcd0668" } }, { "event_id": "evt-1795e3c9b0cfdfae508709ca", "kind": "unclassified_tcp", "frame_number": 5884, "timestamp_epoch": "1634913301.089882000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-653570190bf00dbad0cf5c51", "kind": "unclassified_tcp", "frame_number": 5886, "timestamp_epoch": "1634913301.093391000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8a73123751141f737fa0c035", "kind": "unclassified_tcp", "frame_number": 5887, "timestamp_epoch": "1634913301.093564000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f4570d7f2f36cd1add982016", "kind": "unclassified_tcp", "frame_number": 5888, "timestamp_epoch": "1634913301.093618000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0094c8f8106d5b6fde66cbf1", "kind": "unclassified_tcp", "frame_number": 5889, "timestamp_epoch": "1634913301.093793000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-57284d5f799cd9d171f48034", "kind": "unclassified_tcp", "frame_number": 5891, "timestamp_epoch": "1634913301.093948000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e21a6d7ed96af4cfa8775b8", "kind": "unclassified_tcp", "frame_number": 5893, "timestamp_epoch": "1634913301.097718000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "6215a372482e72cd619072d1c6fa3b2cbfed2624bb348307c0adc6db05197129a62d784bd470cc0db277ea8d3f07a0c00c657c2bc0e040585a29f7d9990547125bf1c3620b0dcbafef5d0269d3e9c7f28250157b8ad571977bfcd81fcd85340b03a237702df71be78e4b5464cd1b30b83cf6c508b828630b327609d742ed48b252e45f291c01eb1231f2935daa42cae910c7305edb5fafbcfee146e4a94a190ee32cde3b2b6dac16c49545236f08cbb5709fc416a00d3996e6673c09977a9c4764ffdf626758e6ac4851c2f5be55d5623d14effa81c2ae2dc11045288487e6e4f8b719dc14788237d1e82afd94ca3c20a7ac7ee59ff97dc65558782fab5d3bff87c3e4572edac7b3625414fbada57d98976b93fcecd4c544af307d55f80e0263067924f66b529d38a567c9f02f0d6631488e2e850abae74e9116833ef5d2e1456693125a970405b004a11a9832874e016977d7ad9c9f83a08f1ce437a3224e1f0ffa3064e9ebb0a311ef0d4d1691db17a8be9739793fd10d35aed1c302c86a54f6272a93c87f314663e7ca64961414cbbfeaa2c2062910300427580888bf34982a00cae4d5b807ac6e215038b6367b94994035b272897a3c8a2f0521ef94d56f5dbb42625e8efa684e358a95d9c07d239b66591d1857cbb3a3aeedd1930b80478268edd8d9928e6d8ae8a1f475af6eee527448a707c03d1cf88be29e84e5ad51e4c081b1cc07704d26abd808c39e93756b3ad673300915f838c22e475487b9bafb7743483327f29d9a1fd5c145558d2fd86cdd55054359832494211a34cb2b57782586edfc4bd371301dd172802b682fc3e86c02d45175ce2039cf984746635a911edf9ae3a8d22d8f6ecf84e1fc04f239df4c2a42560314dbdc6ec14967b943642cfc7a685d40eeeb14d68db585fba4b790be5c9417e3ca1e1f8a7992007d26883902b2ef94b3d08fe8f292254b87b09601de25d8c45b591b14a9c67e5d1c9751c6e87d5c82b4539fa0a6513c466e32f4e81307555ce8870a7748dd29910a8a3cc1a4bac398c93109b4e638a5b221a96ccb03b0eebdcae0672ca9a27e8d6062d1f9805252fe6201603c2ed8cc1ca5028459d2f99db0499b04831db6de1a11f86c0f7e9a8cd67ef2dd1243b1c2f09881e3c9f201a56615ef0a66a6e9717f5080b444531a5de9f4f8c8d50ec4f2275e41b61c36ba8e4db9b0ccacb38447e09da44f362d7eb3b65b2299b218c9c268f0c09b5ba0f047be3f03f42aab95dff2505a20d35dd621b172bda30611afe73b6f07eacb38ef0d898bf420653dabd532404b3d2d23af805bea7abe9e9f797749ce109cc642bcb022e95b0ea122898bf354ec310782fb181331041a254142191aa7f8e70312949a6549d2810bdcaf480ae32fda440434874c6fbfac3b9f50248779522d6e026719cc12f9ae89f2b205350a8aa104b87698f24831eab0105c18058b4da7676d37a3351816f5377c396c90fb837e780e2bc2238e0dc2fd85bfa9b5aca7ff1edc60fb15b9f440a2a6dfae43f2e1864aba5dd33b0cbc81b31cb567631326bcc35540f44eea75508c354906044585d9ba3349249e4671f093200ff87232b6c04e12901d2e3e3d3b617f52f1fef62a2f8b0461a54da46d295159381a7059aa2cb6c43687fe9d82a9dcbc54fba8b028697f070d40a1ac2105de32e9828bc9a436f0e91680ca25bc0cc4d53258dc19b45df017b814bed3958c0b29d7bb749878b292fc782340e1f2dd4c192bdaec0f44531b50b6fb10f0044098505207ffa4f20bb5cca33968c371134a5ba6d47636a2aa6b522a137524022674d72682f757921b238d69dbb83d4295b3528b83f89c97a0f765543c03e73d3bdbd705e9805dc777dcbcebb85bdc10a24659ad2af40f9a92419e9fe7e0d7bbbe3278fc222917244f58f8054e6cfb887317fc605b99de79c483a15fbc0e138fe7f43a97491205faa807e1138e05c46fb24d66d5347fefd2d409c732d7368275104d8391c912f6c5ae5f4d9c9855000edca74601cba58894ed9dc3f52f6fae13ad3284ebc5dd34f4962725e7" } }, { "event_id": "evt-41de95ba028f1ecd23c797b1", "kind": "unclassified_tcp", "frame_number": 5894, "timestamp_epoch": "1634913301.097732000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "f4526afddd572fbeb5e1b34edadd05efbd3e87df5a7419e945ebae9e7758f1be5d39d6dc2168d4d9c8772b3f086f210430fd4b07c5d517414f3a9c18812735d1408fd67e2cd59a6df532f3649a367c943e7fa6d6cd490fb1550fce3a1a24a4990c229cbd3e71c2de8b9188ba2b22386e808fd27629ed2b38c4a62b8e0c2c477ea184af365a30dc4cc0fcda8d95f91ee10a2ac9849986f70bc7851e7e7f0a81414fd7a88e3df07ec2509700fa7254979f91f754fb29122c5e8f958817d5f334aac54e65860e24d8faf3267a66a0c87812f99628f29a57efa05c95061a64dd8bcfb189a784d1aa75fa6a227938fa2da136396b0ad7951b5ae530893c584a94d38073f29a5df27c23b2623e9e0866f0c2f695e3cd464fa340ce639cb8e21399fa0997b635b49c073ebbab001961334d9a717fdad47907c0f044899285fe475316ae3621adf7594d217ab83471ff037eb91ba80cc5ad6e75253c4339f6b6c6735c740afb110c5af8f681039058a8b37cf33a88a62c0ff90618a95b8145e19fbcb0ee5b092c009a3420e4776c01b2614337929dfeb0285b43ea38a60c5a70e6b4ac9dd77ecd059916a0d085e9741d6d39e8374da1a6a4dfdec814bd500dc8fe0bae6621a606d2b1cf465fccb3adb7241bfdd479547d6019737898b8c03f9f3f52f197b8ed0333ae35a274bac1fbffc05d56e01802c4cab425bf03e71e9244288ec369c55336dab67d7c56619164e3c94a6de7cbdc2a07e578f34b9295ed74b8d22ee77e69e2fe08091eb97138ad54e59f3df0c9c51a7c733c416799f5026440599209c8099df70734cba5cd5961f1c95fe51c2d20bbc5756944e25faef9c87ae6a44b41d996f63e90d64a01e3d3a9cab960d8422b4cb4e275f68ef292cfa82f3000dd00a8c28afe21e8b0c81afde134bebdd864d850da021c5a17204523006bd91bd778e733ccf9f7896d001016b4629abd6ca5c2f24a996f91a07337aedfd6be63cff03ce3e9f7c705f111c437f86f87e6e71b8d3314cf5015d9ad7741a1bb5f3404a3db1881de9b9e3830aaee40c7304e9809bbcaafefe1a38b8219f658786ae42d938c8883df54e19ce1894ce3e35b6a9dfc8ea33d69d598a8a90d569c93dfa927a73dae0fe3ba6a4571a713561976fcaab9047121af120425c89ea0e30f8e50f9476035726e4d1fa1a5b7fb138532b8b18499b254773f61954df0dd07fee0306b699d5694f2234d1552354224da686973458fda14b28d1d1eedbde23172988f5e17316624a4056be309254a9542c73fe5ea1684f7c596d8edcef6fb99bb2f0e56a324bb577ffb5830f8783714031c6be9a5efc781ea4103760f39b0fcf8e42bae83b4557625bf9a0f9736dba3a5dfb10aafcc3e461035d770c1639f4db4f642d77b80367566723c8a0a106e9a2c512dd00818594d9aa23d08457d3e1f0655edccc8943129a412c26a75c4189614d80570d281b0f596163677a314e634bc669ed256e4399c4b181d041acbfec95212f5c1032ed9e3e75a6fb7d71fcf3c8a7fa775a5b1bc92c60ffa3ce0e6e42c935ae379b8b74f0d57ea153dfb96d363d653365ba911c8c526d11a82a60eb8d230cbc4a037d738671b195edaf6d04f8b5e496eed9fa1b7f1ed1c8e3de86c624cbfc3ce72a907a400464d9b813720c9d2a25ccd67128718256dff69782d86f58ce7c61cb5bc5fdff585cb46abf37fb7ebb80c1941edec54ad29155a05eb981ea4c1bd26ec46d57a7a554fad10d3015c8ff3ad0de118fe38c237a6d5dddb6f2398c39e0bbb9d489372d1cd81fb8ba37faf6d814382d22cc1b6df9af7562e43dc50" } }, { "event_id": "evt-1132a47af9a381e7fdfb97bb", "kind": "unclassified_tcp", "frame_number": 5896, "timestamp_epoch": "1634913301.102279000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f847d4acec0953a3e0ca1d8d", "kind": "unclassified_tcp", "frame_number": 5898, "timestamp_epoch": "1634913301.105006000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-76792478971eedf0c30a46a3", "kind": "unclassified_tcp", "frame_number": 5899, "timestamp_epoch": "1634913301.107948000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6dc7f447d86e05b330493b9b", "kind": "unclassified_tcp", "frame_number": 5901, "timestamp_epoch": "1634913301.108267000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d14aef64e5c050838f007331", "kind": "unclassified_tcp", "frame_number": 5902, "timestamp_epoch": "1634913301.111389000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-49de5c7a0a35ce87cad09eb3", "kind": "unclassified_tcp", "frame_number": 5904, "timestamp_epoch": "1634913301.151692000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-35333139f10acf55ce8fd2d2", "kind": "unclassified_tcp", "frame_number": 5905, "timestamp_epoch": "1634913301.160918000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-10d56846876869b8ccf0cf6b", "kind": "unclassified_tcp", "frame_number": 5906, "timestamp_epoch": "1634913301.161269000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-039f8d70193f4b64f28c1d0d", "kind": "unclassified_tcp", "frame_number": 5907, "timestamp_epoch": "1634913301.161493000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "89520aa20b634f02d204304570c959f16a7ce4c2b3b9ee0d6e5e798b01ffce33cb16511adf8cfc1951f1c6b5190a3f3544360b0ba867b4d898840682b3bb451c9c60e8fc8aecf72ae2444492e4539b4ddc6c30069ce1634a4891d35914ce67e629faecaa8fc709a5b23fa50a5803f1dfce71aef3478c239f415b89acb7a92079ea9b0d008dfeefb299601c5e5233e3e6b47e5009a835f86defb45e5d91419bd299c3decfa2b53870511923489396f930f410291cd7495bf7dcd7ca1394d17b71a596a9c6787761c455ad7aaa50ef3cbf07b16d4eec6e53c7b60cd5c8a90a80b71cad98fd6fdd06e2d3a20ec40f860ce6a577a995e32fee8b6679a141d0c851b1c6ab99388f90c94e58ff9b613f836aef4fe67beec3c2242e61ecb3155259a83301a5b5d85d532d50e06faa482ef5844bcf2c943d3bc44a8726b9584c4916f2c210ba403c41f207ccb30aaf1414f856c1ad03201b116f52b88754b903cd5bfcbe0c9c4a301f54bc261a1aaf434e9cad519bb055447f067ad98624be091d2b71ee20f9f32e6e0fb69306fa9d7ea42ec7d3822b1ed4226eca1fcc45117975fe0ee6377c1e44ff69ee449c859f5af65ea47e9d2b943c948660504fc1ccde1844f723e8b6b59f712611006331890ff8115e8c4533ef08ad2e45f400ac572c02ce4ba34bcd12dc15dc9bd617dde8ce9c4a3df4bbb276ba5a001094c5c1e6efdf78e18ad7698996505b58d87676e3a3eb3d2bdd3a6ae0a4c812097800e86a3c9dd5aa9a6ed5cf6126dbd4093a1e81a5e6551d162060a1f734fdf3281aba5d532cf8c30b815c01bfb508b06ff4e98040dfedd3c2e52120fee9abb91b97e8ce96c2379d1dc15f8026b3e17b4134bcce911c60ba3c8ddce9595e34fcb854867d8d91b6e9c60cff8d52ab8e9df928de2f54e0471d35884cdadb0955584ed6a01bc014581a0ba10e45cee60e1d1c51a686c32386aa84ffaf3f212327df4ac5630381a18bf1fcb4f19847968aa88b104a9e00acbb74b2e610774724430049d707cd7024388029d1bfce7974710e90c46cbab2b4c53d2eff34bb1bda12487d3fdf893f0d012468b81af716551ef7a3e4c5c53089c9d59abde7a7810ee83d6076be45a94098567c09d5507f304c06b35c61adace2f67f685074f335487e4350cf52c2bfbfb64d881974ba5735c00b08ea31ed1edc1b90a31dbd14f9bbbb2c7ffa9ce0e136bf2efa37d398aa3232794fa5a59b00b56b684953b65bec33aefbdd26c5b5abd019fc1944b4bcc713db27e38d8d4ebaca95d9b44f82e8a3a89c5be345a5a4dd1610e984b10b8e43e62aad22dcfe4d616a0a5979273d3f12aa70cc22ef26f33a2b8ee9d41c1a0b6040aa1bec9ee1f6a8991e8f041a1738bffe503329a6f9bd557ee48956be4882b1a1bf98cb56bb2a44988cd147e61b177ca3c171084ead0a0febd2a40ee56d095ea4fe799739d03cec88713509354b1b20270056e119fd6d1ba6a8527082a3347585301be5a48bbfd25f6a9ecd5ba7e89efa931326ee907997cc758a689ec3ab8aa5761cf81770e9349baf892443ebce418043e7ebbe0532248fd609fc622461ef23eb36de9ffd59b88292354591fdb717084b1427ef8569ab42b6d362e13726ec70c37a7f5062b717e491486e88d88c113cfb6b58d2bc2c4ffb744367b5cf09a5d686bc4249318f001b50b3ddfe0240bf2d1065f78f3db0dae06d26d804ae952cdcd04c17d081f6b45bb5a21ed02dafc7e0ba71c8c31ec3a8ed0afa9f87bce4b422b83f295db907caabece33a2655c9652aa06f6e75112ae670c08d5d51f8e1687e59b0d8b3f53d2d374c9bd134c32008aa19b1b232931733ca41e2bf4efc40a04aaf274de5d743e228d51a84d579b1d30d8824b99e0465d2c486f23fef5b8eb97ae6995f96eb91db2d27e44cf0429dc3e9d9759718fb4c9fe5048fd7" } }, { "event_id": "evt-5dcf16ca22e0122aaf94f3e0", "kind": "unclassified_tcp", "frame_number": 5910, "timestamp_epoch": "1634913301.164312000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cea63579afffccc2d496c8ac", "kind": "unclassified_tcp", "frame_number": 5911, "timestamp_epoch": "1634913301.164429000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-46d456a9aa258e7312779043", "kind": "unclassified_tcp", "frame_number": 5912, "timestamp_epoch": "1634913301.164521000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "b48ccfaf4db292e3f8223a164f5b3c0b2b9ea9435c52b1a0b90eb0f491ddcc7d4e897ea4c6ee951ef39b9b7944253b4810ee3a39b5356cc13cfef0fbce390fc7a56966b5cc37c7cf10b69307aec1dbd511af8fc9d41e585333d41f54b55974701a2aeeb6c8e7b5639701cea9b58c406ce01a6ed4368f5cab31f9934629e97d6757e3c3a35b6a186b8325ac854ef78b1f36425016d383c333f95dcd5a9719e07308b4a2a921919a4ca43d1f72dc71c3738449dd33e3545307e3e5d8b6dbc0bbb932c42d0412aa4ceddbefa0d56f096ba45a0ba25a84f9c912b86e9dbc368ec9d0db2e50a7df0166c206f0fa913123f6bb422a4727816092213d0cb78f07c063ce0273d6990353eb83e1990824feca759c706d72726a858b148e9de32c14cff8f0225372734b42f782b2857092141b5a8fc0b7e7579e30753385fea9125d13b1b3255df27cfbc4de057854870945bf40577d41a75b9b45e2fa2a38b518053d662a4c63918fce5ff118b0af2e6d08bf9f8393151b080c04a63cf6df1537c780cde1503b4ab3e3aaff8fe8c4d9e9bb8ef6b848f5ccc4fe0b5b26ea8b2055ede13e444370f9862636d156c4a86b0542c19f665c1acc1c3b9f22cb9017dd6607ee5c5f0918b8ea32205cdc1aa6a5fc16f1281a77371e37b2e20390c7c72e8ba6d547d4d22cc79d347287737b207ecd11e694f8343e8a3914b73e65a758981a9a8391fffaf729e5c820a5542a6c1f4196a08d5c61ea2ed78ef1fc06a7deda7aeac6ace4825630ad3686b2d788605e58dbf371abb13c1592d6bf9b8fa520937be1ef6aa993ebb29561ded6f8ba0a268974a61bda7d714b6a43b3395e91565069aa57f4ebd6aba06337543b07c27082f35966c2e302a7f27445ae9df7823a0b31ea9ae1b09dae47435fc79a73372a30fd4fa91385efed0422cb5d331467f9e3ee23679aac30664ced44bd780b0e5f0d101651c24bf5047721c3ff4abc5fa3ba876c34a4c797a7ba560bf638766f12d684ba63bbac9e785c39aef8961957102a2234edf4826aa30aed2f2110e7334c682829297e584e7bb0fdaee44a19448aa4e52e2b093b978eb8edee2183a0cf948fecd891cb00c868368c28c1b345e261f3e942944f8a9a0c680e4bf30b184a759428d79be376141488ef4cc212ead4d39e197b1c2aecf4224d0d37eee1fa17aded1216d5786a98fc32cb65ee3ee5299fc907b70bfca4175dafec5d75dafa4d529c7c825a9d4e3e8424d24b6c557c011b5bad89e72cb36d8372bd523a0d5ff14a03dc66ca39f3b4d65e9c8fa1f48d063bfd799fc9ec16af99c22ad57a12cc2d95215b3ac5a5ea220288c6dd9b650536c8fb2a3fcf9a6c0e80e2dc2b95c8219d76cebd2b6527795c37864de35e9886a2d9012effa377b65fa6f24a99519817b25db69afe1d40902f1e518fbbb348b32d00a51614fc6df74dc4c1e6fc66e64d79d09fedde5a3bb240f83bae69dc67552a81cf0b109e6dd76548d8d8475524f03ecc001477c10a25bb23f72a0dd35d3f0a6da2b09a59196b3847e5e6f086311a425bc0804548d7ee63ae62e13c195d2adc3a86f2b8d9c00ac45232ffde80a103bc8240ba7a9aacd979ef599424fc6d99af408673c2727bc5b0ef994862fdfb243e32cf4ccc3ac8db181454478cff9e3cf0801fe3dc34cfe1d6b409825e1bc525accc8baf0c937e78165d902f0ef07255003ce09f71b322cb33e6acf1d2d4cb98e7a6df337e09319b325946df3f3eeca48f42fa13db9512491d253f7c2af8f99359f384b5f2f9d45a7146b4bdcd4746353d071f9212c1dcd2f2b47cefc50507c2f94edde04d20693cbeaa038e836ecac7a1654b21171fc6520c042df6afe8f6ed142ac41affd7eab71193b0acdd616b0d2f9eae37395a63ad88e8b13da434597c46219f6cd4f8234a38b4bfdb8daf87558544f9da4462df25" } }, { "event_id": "evt-481835c85ede18d47fb46c5c", "kind": "unclassified_tcp", "frame_number": 5914, "timestamp_epoch": "1634913301.167882000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-161f4a01d3f8698e2d88a8e4", "kind": "unclassified_tcp", "frame_number": 5915, "timestamp_epoch": "1634913301.168069000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-987e018d0cb97509bcfba7d6", "kind": "unclassified_tcp", "frame_number": 5917, "timestamp_epoch": "1634913301.171238000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7a4188c1873bc120a45e28de", "kind": "unclassified_tcp", "frame_number": 5918, "timestamp_epoch": "1634913301.171425000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a31951f3d20b9b871634d217", "kind": "unclassified_tcp", "frame_number": 5920, "timestamp_epoch": "1634913301.183929000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2f118d89adfad8e556ac4207", "kind": "unclassified_tcp", "frame_number": 5921, "timestamp_epoch": "1634913301.183951000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-51ae5d01e3fca8ca70248c86", "kind": "unclassified_tcp", "frame_number": 5922, "timestamp_epoch": "1634913301.184187000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5c98d2a03b62628e7d71f248", "kind": "unclassified_tcp", "frame_number": 5923, "timestamp_epoch": "1634913301.184397000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-77a504eaa4490267e6d52ce3", "kind": "unclassified_tcp", "frame_number": 5924, "timestamp_epoch": "1634913301.184414000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-739da141f29bc90f424ae392", "kind": "unclassified_tcp", "frame_number": 5927, "timestamp_epoch": "1634913301.199478000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-306ffb8aca713729487b4db9", "kind": "unclassified_tcp", "frame_number": 5928, "timestamp_epoch": "1634913301.199499000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1153a20b6056e3aec4886c22", "kind": "unclassified_tcp", "frame_number": 5930, "timestamp_epoch": "1634913301.200840000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7cd01e05647d2cd9cd34cd8", "kind": "unclassified_tcp", "frame_number": 5931, "timestamp_epoch": "1634913301.210677000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-78dc5eb3946c28c0b840219b", "kind": "unclassified_tcp", "frame_number": 5932, "timestamp_epoch": "1634913301.210844000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e40963a6cf71ab833317f8d8", "kind": "unclassified_tcp", "frame_number": 5933, "timestamp_epoch": "1634913301.210861000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9aa565b3c1c40c07f03d0eb2", "kind": "unclassified_tcp", "frame_number": 5935, "timestamp_epoch": "1634913301.214104000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b4b049daae094ea0fa3b94bb", "kind": "unclassified_tcp", "frame_number": 5936, "timestamp_epoch": "1634913301.214126000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-390187a276408992fc52f955", "kind": "unclassified_tcp", "frame_number": 5937, "timestamp_epoch": "1634913301.214140000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-625e7a475db7fb12762ba380", "kind": "unclassified_tcp", "frame_number": 5939, "timestamp_epoch": "1634913301.217424000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d45259f5dd003f742ade72b7", "kind": "unclassified_tcp", "frame_number": 5940, "timestamp_epoch": "1634913301.217567000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-77042eba84992876d2eb2ec0", "kind": "unclassified_tcp", "frame_number": 5942, "timestamp_epoch": "1634913301.221109000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-90861c9c889412a446e97e57", "kind": "unclassified_tcp", "frame_number": 5943, "timestamp_epoch": "1634913301.221130000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-088aadae1598a6d80bea3b4a", "kind": "unclassified_tcp", "frame_number": 5945, "timestamp_epoch": "1634913301.232230000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "95c50766e33cdabf1f633590552abb699870a6ac2342dcbf7dc124ba67d2ec2571a684ca0e76ad392e4c4c0a9b9fdbcdd2e87fb025cccbdefa4faf526ec1b35ae082f92fb2b0c3fb44a527cd7aff8901609acd83781ea141ce03fddc44d6d96bf615447529d4b257fea8e1050edeba686f6fd39da0a3521e1c83301e2e9a0f40dadd18b79743708896984566f1a378868e3b1482507ee63ea9b2d2f604ae1a2538201fb0ab980ce02b2d7c0832ee348f7b42a7678e1b45269222e27788aef4dcc1efae3001db87f04436deb24409519768336f391a9076b75dacea666196f4edccd3899d5450f40d93a1ae1e38285dc3d2ab6094b0eea1408c6e711085e841291c2e54c41acf826b2ecfb1b926a63e9fe28b759a206054aa13ad25daf4ce38448f8af9ad8b4997f349d715d49285b1478e924dfe93f43ce8d105239511f425e79794d3b06f52946ccc8af2278b2e78f1062f2c8bee90da7090a9c30db60363692d27eab7fd0e5e691a25a4a4a0e3bb949fbae54410521a9cd27549dd75f575d3c33a67abf198f871e0b70f6de53bc0a9f2988273da3ae4fb2147cbde9ff8e08152f7a2d2a434cbd5be434d4f4295c9a45c6043b4cf6d8d0a81397728290b9482722b690d26b1bba7c111876fa0429800b8a470f03cdaa9e8641b88f2cc3bc78ab4e4782660a579ced99185e5c318872ab3d5b458520de22e0500ebd1bdf4809723da071116312548e70303788a7a7ee74564210eda8630678e2041cbed26e7a663ccf9101501149bd9c670e8a7c99b19216b2d22bb4feab4a3cd792e9937860ef5e3ebedf1084fa1503fe4a41f402bb401a3987f9c513767eeb46e494d8c82cae1ffcea11092824144b2356d7cdf9378f0bc4d23f3f1f3f2da7ffa7bb1a6435376098407cc5a8b97d413e3b47873a8f7ba158a1caf4ac28bbfb1d96c394e327063afae7332bcdc012523e3d90c4b24d1085b151eae1bafd2fa0653a82f8ae22ff1525cafcf057c24ca50e08f2571640336e96e243fa7e12c64b2f0252c139f4e3c418a54e4bec1023e9f2d65b715d2e4c9901afbe16ea8e42a69f70cd24c66887b3cf5c4ecf7937a5ec3f0ba969a1f5ea782d03b71d04987fc8af33a519c83c57bc589fa842a6f5a3f45e158517d003548531084c8c2554490708aaf19ba12def0faace034499fb92fee985fa5b7d269d926cdb64f0c5ecabcc00d50537b04f4d701ec828fc1e3e17aa36c168ae14e375267f719fc44063461f9a6dd927270eb6a1d42dc9d697a29b32e2bf56bda0bbb00601244a18217ba68ad736012b2bb7cf08ba522e399e088fab3324acd159f80aebef3b757013ba36d9d173dcff42a4d9ea917dd1b8e3bd81b4e10fcdf5cc4a2f3f846b4124bd83446c82b7ffd5238772a25c08bd5127199b5a3565cc2f43b1fbc0ad7886280d9548c6b4a563ebbd4c6a0ed6c5f83fccf05096b2362e896f23e6a943f2a2e9652b3338954f7886f1a644be585f4f05727f1416a76a85f4f32407d15fada8d3a152558b7a09aa1ba2f3b27cc374aa979aa4163d5771a194cfa4ae3e4559010d5cbb4943820190b8352cec402cfaa2786a4bd4ec9a83c1dd4e28dee16f49455e43c6a936a4f76fa7906972f18200ba951f809ad2b415ac35ba1ff68a05a89e6e3c04ecaf982b9042576bdac1b43cc753ffc1f3ae175ea21e99f389c2630563cf98d0ebb20602fe6aa1726ce0aa1cd7333b85cc65e7b1d7bf462e2bee97acc34ce0602cdd2c2ad8b37a190f65706b51f3710acbc3e976b65dade6567b0794063ed9f984ec1a263e07dc52ee3999a2dca05707078a2a2f7aaf0fc946d77bf73f3d6c282eedf2872809a870e78af51c6f024cecf72c4cd04cb71efb8cfc52b65961cf0220990afef4f6a905126a41db710e1fd01851ced850d7a5e4f904c0bf2c83b607a558f6789b2dab0c3" } }, { "event_id": "evt-4be9d48cfb07390eb1461a2b", "kind": "unclassified_tcp", "frame_number": 5946, "timestamp_epoch": "1634913301.232461000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "18589c9b850991ee4238073e7e30a800f2c59aba6bacc1e9c6c44c9311308222513a4f103095139f20c91afc5279f57247ae89edad63d54aabc4afdbc360e098f72c7c02930c188aad702564a07cc2ff84620bf237fc99dc7a7e48ac963cb1b8947dc0d372ac934428d9f1a81aa292e57d01b024cf545afb326476d917f7d8ffb523e7e1f268187067c616a37fd2d767914a24d5aface7734821a34553b0c3ec83e499d2354b295af7be1c21903a4b25d6edf20437d78c01bf2bc38ae192cb208d9059c5ff84e5e2d62a9d4a18ec1bb06b97c7512e3da709205c249bceee8bb955ca5e2a6b8ae10b34afe7c5d051a42b0da4ac1c8e4bd4e4de063de1443604c236497255187a315d392509416126f6f96e4c6aa5cb387825a62287eb4c85ce895617643b4486033460964825761934279f3ad9503cbb3b83cca8da5d5d31cdf420dc39950a04a8ecb2f37bc9719fe33a45ce6cce3d2dd3c21e8ebb2714324497cbcaecbe8290fba31b0276afbe9ebebb148c9957aef80209d3edb7df7693ead24bea145c4283abafd5def39e529442052d99fda2058a6a33c86bf718730c573b304d96b7d0eab0d669e283f43532936b555253a602c732ae0972ab208633fe88464764378a3ea1118deae852e9e0c481f16196b08719ec5c84bfd31e53eefe55913ae30c97429d5af98d39801b6f26599b2c9593350aca9e2a8056f0a06f72f7c5fdacf534a11d7c6c872c6f64f960dbfa978c2983e44d3d1a4b3485fefcfd1d8354ae6a2215f113679a154c246ddb59603a66894d8bb42c5072a5070b40200d4984ed374dfda196f1c90e324b03418fc21acffd38d8b34b2be0ef9e6bad4327adf2082da4c305cb7a712c8b62b4769c7628fda5b02e647669a2908731aebae78b5f6226521113e1bc37171838052a71752c7fad63d85d7567ddf217cd8ca3de7f7cf976d46e0ed5f76f82fe120c952e1ba7086de537ea7f1f5d406710b97369c2776ef3b1143e88315ba0248f8dbd408ab5a0dde7abe686a4d5c745dee51b984b48190b69c4fcb6960a7014187e6934403026be47ab02064dc6274a84e8518de15f753229b6df155abdfbcf3edd7499fe547de2c7924f0be7448d29d1660b2a75eb1f00ec665ef7f5be0ab99f03f39d4b07ba476624062ccf7a02005e4a2471758544ec9e4968e30168715124a84c40fd6175407480cafbeaf964679b9a6db3feee82a0577413ee28baccbc3144739469939a36a4ba4e00ea7ca9fa8c521e6f6453c187bd53465bd20d569e6444d124487bbd45a931c41c24f9bb98162027c4b1f8513a574dd850022ee31da4ad454c70b2794bf57f598b2e9a10d5148de41dd73c00b69efa13e0383f1f6c35c8461b96d2c9da7939156cad37ac37592a3b962f2cec417b239ab377b5a45d481ea3b4ba6a5ff7aff4d7411c026c470ff073e5b05a1035806ff6be8cdcd9a61032738e4496cc9a8d5ce62904fdbb7f0862f1e326c0d3d0ec631d9fc7a6141fe2fea2798af2b8e067c4074f3de281ea9f3f70dc1fb8c481d38fde7340a539a83bd99fa7459678631e1e238491456157a0233bcc84f143cfcca4ad6cd856d5dbceef3ac047584cb3449e643a344d7b6800709a5ea3a994e2d66d90fde7f056bbb572ff262df1f18455d734c33762038cd1d9050335e788cffb1386b30a89f8747bb73652fde69b3af8c647f1ecf9378ec30dcbde756be6c80896e40299c56d8c9144ccfde75fb765ad40721d0b326a23f378983cbcb92c5dcb2b98294388f92608e3b5d32f08cdb012f05f318aad64a023ac1b1d18d6d6e32856250eb5f32cfc11241cbc5446f2ff687744b9233c98c47e0a60dfbfc3af52256841c6ae39f1fcec58332d259810e98564703a15433abf44ae219ef5385b6206f9fb1aebf8ed2c6bcc340644aa0f55a73f7bd35eabb1f2a8fd052af6dfb9035091cbe0359e2c2ea40724f3f0d05c0e5dad664876d3fe4f5f9dfdb102b9b140e062e012880700d48a30000dbc9b587f7eae0d83184fd6876da6376a412a19ffec6bb750863f00480ddf204760dc428c" } }, { "event_id": "evt-def4b790fd997efc5998dc7e", "kind": "unclassified_tcp", "frame_number": 5947, "timestamp_epoch": "1634913301.232481000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-14087926c401d0432e3e3f83", "kind": "unclassified_tcp", "frame_number": 5948, "timestamp_epoch": "1634913301.232780000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "2a7921b703a47a67f028a64f24fdbe746eea1fd0127c19d135c5c18a98133d145ba068f13240016a2b8d2849ec4df1a22fdbe6dc8bc10b9d3babb35f8130ebb7d6fdd705f8ce1c476a01f77e50f9924e528085ee8761d96227e6b6e362d1bbf3764e51e6c5566f66076cf03ffca0e0c57e9af8f81f6f1932f9ca4b5c9023bbef64289d8dd81250215c36b603bdf32a94201c1192613411a3b88b49670c77815cf11fa779119637e7f1ead3888e025506f90838988145138b4f0a1d719ac8b02205a6a4e4990a224c3a06793cf20f946a30c624e052c6005da73ccac236fe5c58c36b76d86b2979911a56cc502285fb535eb95e3e402ee6147eae4ae4ad6b3b18e1748e58cf5027b43940ba576e32c0d21e8865446b6b01895517890fe501c0dd40fcaaaa487ebf7ad9ed4f33093e561dd33394462133fa22363450f3f09bb6e68a956f0195381b8a127acd4f4cbb80aaf2059e2d8d5524c28d2b77da6684fa06fe6032593554409c624da96d5fb56b231e3c539a2b6ad95c629ccd3cb43ca4a8224fa378992756b0608e8b597381649b4005d4d33f05837e83492e6f421ec3e569fe9e988e3798576a9aa48e00f0949350d9a8e4765fd5079db952b6d6720ebfd3ecc4fd8c52b8d2258bb4c7cf7db24c2396b50283d16319b032e36c28d8abef4b49e8e9075164f88a368fb28fe2fdc9ca1f8f38e259d0d6e7d717cc520f6ef93b72869f03e27d2a4f7ef4ef0b033e5413db3af04416433c425c0e3c65d5232f46f17a4a4d4b7ee7a11d42517d673ca7a0352efee13811a00ddfae15484343669d635c07d8829348b954864e9fa64cc523cead951ad776fb0aadb3d14fc2cb0271385a1c2a190e723fe7d96e345560751b0ce395022d355abe9165f009781250fa0d487176106c90e219f5888288a92eeda349fc86f21a5603c4c462d84be3d44f3f47c4a167aa6092c301e559131e1d6e2a21400a61a9487ecb42c9dca8f63b8790492b2ae202ec812b8ade1b5e5cda1e9a1762f6033083d0f88105bd6e9f208c2fbaa74ecc5c7edcc41e19e9164d3d5d240e5143875ae30a125b66def18e29a57be0c307e2cfc8a06cc00438ac6d5160cdd47a74a200d90af18b9c085c5dfa24f38c274e83dc49dede516b092bd9b038de1b4109a7e9ccf35b5d69b503b3e409f413f6d5e51672d7706cafe82b3ce4a99874f4a80c903aef80bc6bd48e14b68bd2f5f7a3d114eea8580e825dc38ba693621ff1944b5e6e295c2b55b764198c43d5bcbe0a909d3b0e18668a9cbb92e96eb062c8b6c15ea28e4af4444b6052ca5aafe8c7e7eedf9e442a95386a4d8b24aad297af846e579798ebb78fc7dde96496a7145a3d72cfd64d99f2005ebf8701f370b54f3be29454d3274c0f79dd51315aebde3f452250beaa4ff8534c3bcfa9d79b072bee1aacc7405c6c5c6671c5c2d5c7dda0dcf343c061ab30ac93f6eef0adb2c77bdad7ba67d111341bb4a571bdcf04a68707826799fe06d3298807da3669f064da6bce5ab676641ca87420671c5c0057f2b86e1486da6a5bf1851b087e6adf920807d3b45f7d75bd618562cdd5cacbeca094e05c98ac33fd9716cc1b92f89bd30db12a4c3ca396cf1b559fbc8ec19a07f137cd7044da89bf4622dffaf51c4d759692c2a0eeaf9a5843fb3589b90bad8858c9890f3ed42987191f74ad66b8909bb754f6abbd1389d57e9d6c63cab362b9c4f678226c47ab696d2363e4e82161a5f11b6b515989cc9c1af5a690e34e5d8bbd29e6b5b613fe87c5fdc99243a0d3b1c66537a6736e1a00b0a62454203e6d30c648e9ed02b725ce0d59ba0cff800d25bd457b10c0d1213e2c0e5a770666f303ca47928ab7ed8ebc681ebe6f547d1c91491462f13de8e2278916041f13fc30f211423396f3d3718ca1e9e407c890eae8281fcd870701e8b332f0a03b31afc268d002d85073f9f4ed92daf3e0aeddc05006c7fab218e4fbbbec5373f2a7319ce8508cf8cdc327f4d2a5cd642445fd755efc0e8f5ecf7d80fda608ed2f8c4ff894327a71234fe85f55381a8bbfb4c2080cfb" } }, { "event_id": "evt-878a51c2d861488e19e5475c", "kind": "unclassified_tcp", "frame_number": 5950, "timestamp_epoch": "1634913301.232861000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "6ebded30a51d0bd315c0010ba0838c153a7f3447ca444ccf41d883dfb89ff5b436e9d44f41e32b402e666998afbf271f8f0aa42cee4a238ce7784238e31bd0e4788a0aa112413559909e193d4a388f6a05f69b8c03c8c321b776c82d9a1544676b45c12b7e09b83e280d4dd85476fc3f441623d4c097ca4bcb1ecc8131d32e9354825b31d89be4c8e1ae2cef5c69ba724f6e59dcf8781c1bbc1ddb6f9aae241c1080753bd7815abc9f9c8fdcb9aa7d5ac5690cdfd59db1dfd10bfbe33e3960b286509d59b4eab4b9df09d4d6b083f1ee28adab4255540d41a07833eb2097601a97d228f7b28cfba7aa0e24640db24a64887497890bece8cb1e91f6cde292e8d307e615a2397dea631ee2be0fc63228a12d709c36fa4c6dbcc4f0793e89c91a847d772c39782ebf9d499c5430385c1d7eaba627d02b9d8a742a5e62cf7f40df8c340d9eaf9d34df5457a06a635e390d1ace47dee20d24ddad214f36c79be717e4e8a771a40138e52efa81db9179f5308f02f8722b8652cbf1666004182cc90b606d8fc8764f054735f484478afabd12276c745aa0c9922c8c951a4d295826e63114e209cbd5286cadf7cf1bf0dedb9a4a74e738332e5aee05a08de269a3a9be337cb7cf2d75c61523c3e0639f20b24dcaf419742d94d02302a67e04426bb3304b16b43630a54c637a5bcc70db5ced4b0ba28052f3a42fa5cc0462cbcd8b3dc19fb3684f60b457db7d230cce6d6d845ccc2bd179788d649b1ce5459d6a72c92276493782e2cf69695d1e9ee9fe680a20796e8bf0de65d858bd6cc05f5cf23ca75520c42302c6258c86afc55540015705ae07fa26e2c7d7876a36c8fd0ebc97ba02c2945f9c6ceb1aaff77b46c50a6a7c28ceefb67564dbc5dc3d4a772453848d442fa98391f2c07bd0a690300ab41117db9383bf95ffe0a2c539ec0a79d6548227c7e8e7b48a8efc5536c4a8cf86b5f648bcbf2920ea06e748e9c2f06986635fee7b8a1e57fcc62d53fcbf31c121fdc7bd7660f3d82ad14b70d7d4c758dd457af1409c5a67fcafb9f25815b815944bd727c1e335f1fcda77d88b1fe2313915d0d4780b959c12cedb530678fe1d2ef9ddb1938944a0116380d97892208a2a93a40f9d3a4eb1b027f3b68d2d07773341f96d86a85607d9fa36f632823e89223506bb9fed2eae23ab62f7a3a8b567efbf92c1971f07be0ff38418218de1ff1c4ab333d4997730104c5ecfeb2fba223dc5a567e53cdc63042c905324f9da0b3628afa0a278a53be9c88edc8a15f10b71a69a8a7678dc38115ca945de422cf5ce8948a30b8d5aa7f3711867e0249f4b008bfb92fe9a37e911bc6eee7c16910c5db6065659f4795b5e2fd5ae1f9a3ba0847804319aabbd388d3b7e6398066c87e1e31dc8cad4883a43ed318f0df64dc0c83f995474d97a0c554d6c3ca6929421cfe9f7c3888b1d5a18112f1a99b1882f987d1a057e4034f34c8792e532207ccfc2cdab1b8a44ebecd36af64b3a76bd123fa6f193244cedd34fb65b132db69ab8d89f0927bed9e7eaca2cecb06d45722ba70f10e90a17efc1f4fc60fcd3af89720ae47d0cb5e06b17a48b39252848d6f1fef95446f22e3b819f71c2e27181ccd9a6f6fc7d02474555fc5a86d159d4bcc76c9e47647795e12016d35f803262917d91000a0a1d3f588348f2b6f51aa3eefe701ce19de24b54b197fac55e04b5eef93288a4f77cbc14148425578d28519a7be3e39783ea07ac933f02b950072a961a63fd290ec5266c2ea11c18b20ffa5fbec4616c601a9d9b4a5b9a53c3e9e380dc82f65666f41bd844fe418b8111c52106" } }, { "event_id": "evt-ba6b999a844dc78a1079114e", "kind": "unclassified_tcp", "frame_number": 5951, "timestamp_epoch": "1634913301.233080000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ae4649ad065108baf37f4c59", "kind": "unclassified_tcp", "frame_number": 5953, "timestamp_epoch": "1634913301.241589000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0fde432adf4da15ce19ad6a2", "kind": "unclassified_tcp", "frame_number": 5954, "timestamp_epoch": "1634913301.241612000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "5947c07df9dde3bb0857192c21d5bf2f76ae132e263e0c2c04db06d150ac70cf86c4d0ea850d3c35f4a43786483094dbe99cf4526d7daff3b8285fe200d53cef3d447c465eb0945add7e27c829860166617c0eb808d07fc326334d0a87b41e4e70bcc2793e7c0b6d816dac6bdd1710d441421513e2e775dc3ef30f495410584d29b913937ac983c9b0a3e5c38a9f60be09ff68b495ce03d61761b4d0efabb7b587bd01ae7b97c23c4701979ceed61b098b42f7b96db2a3f4cbed04056b04093ab0d4115ddce3733f129ce8f121c49180e52680ee1cda0520435a28cdc4b40453d3747122bb3407beeac955bb39ea7d29f3b8c3f2960ef936e3f1a0f30d7ddbee3a6de24209fb90b57eb0654a539dac60b9ccf97aff8e44ef39a048aa0e9a08164e17de5a34b51c659930bdd8154dbf67154fcc652c3dafcebac394d303ff5a9c83b02505476d93977ed44d3779b451af673790bdfb174d8b89d1321c2b06b896d0c312b8c2fd3b7382657d63663d3fd83b7600af872a9595f587db15259893378cb85228da5ee40ecc076f5056aa44be715641c229e95121038134b6dc0bb827fae1572d768166d5dc16121b7b0d132c1a7eb2f15fc09a9fa921819f50dc8e6edc9fef7b47468808964d3da7ad54074f174d7c9d837f66d2e04b2dbf5974f0ca889eef2597bf553de231e066e7ea216553ab53ba8b8ceb9667ead02c3b91564082413de2497669040a93e30e5cb61df94432730c68e145412312d0349697ba08c6ba32b9b743af480f7496acbecc1f2e150ec93598e209392c89e3bf89cee8a75e8a0abecda94472314ffd4da998edca6cdcc85db4902bd7ac1877a0bca82244012219f754eff7294011d2b04489422af0a03ccce4945609c04a68dfb581a2fac9860d4ed8acfb9fcd67cd50a716997ebc2380440d6d755b88772a62384514309098617bd7a834f24c4d294e7b57bab6953ab9ccc1ac691f7715fe70066b06e6735af17d1b8a43c3dda34414d0de55c3a51e59867348f210b60f4568ea32bf2dc83f286b40d25defab76636880ba3d36be253601b1ac6f4640bd7d245ff15433ec8fed44b26f81cde2dd2eb96fabdec86a37866916d0094f96215963e67defe72383afdcf2527e94138bdfef9f7226fa595499313d2321b052051200a8044c0b816848dee5f72e315a9dba9ef437783e27cebbf46724f2d80ad37fe4a9a1eaa02c996f9637dc74f2f147e12f2438b8e77f36e31512483378e6ad53a2b61f81bc832f6106f3c8ba743e287c060e0f064a560444f1754a95e6949ac0fceb2fb7ccd87c3b6aa1929802462bb0a0aeb583642a9aee08981309209ae71f56c687ff192536b31e1bb4a8a1cdcdffa4f2093515ba7aa36be17335402383636228e1cd0f57364a9e50439eadc5640c995d0398b5cd93d274e99c03b03d7d303997afe051414c9c6f24f9415859f6da27cddf980d60cbf07579a3985bf43dc28812bbe6510db5684db263f08ab95b78c4b0aa3b2cb6b3e9761afe80b1507baa2d38cc2bef94ac5a28cd66867b6378c30d5a6396221832b4bb940f3731de55806a253242c59bc313c757b2d3643115e17202ef337fef094700975826da54b9582ed86f5717eb1f7f495724e91ace5c305ae4c14996c6deea9ff19493045b51e2c0bdde3689c96d2082447ede21d42212b6d7ac0efc55320279c7e2139378c4285e830da0e65f69a5c38e91ecfdd6786c8ebdab98934e0ebabb57b2d7f43f42d7e8baf6a50a09c8a94bfa3291dae32e04537749d3e5cdee2dd56968498f721e381bd0ca5ec535e8a8fb9caac3af0dd7340cda8483bb3bdda5870f9da88c2f74da44095cfbc597688734fcbbc8f6a3cbb460169b2319e298535985379907cf443ad54a06f04ddb383464a22cdb5d77c0906c74fb465df4eab5acea2bc438bf72fdca8fbcf8270d0264dc01bba33140e389b5c98ff1a81d0bccd4b54a795637b2708a20dd0d38b77f3c9edd91186f22ee6adcfa5627b2812af949341a19e79f357865e4f5664343e928ce35ebf1443e395436573306a1250036f4" } }, { "event_id": "evt-c30380bfbf2b886e70d3607f", "kind": "unclassified_tcp", "frame_number": 5955, "timestamp_epoch": "1634913301.241627000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3fcb3605a3b1ac48665904eb", "kind": "unclassified_tcp", "frame_number": 5956, "timestamp_epoch": "1634913301.241644000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7e4a9e34d02aa8f453bf08f5", "kind": "unclassified_tcp", "frame_number": 5958, "timestamp_epoch": "1634913301.243348000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-650d77d2638c0b62b33434fc", "kind": "unclassified_tcp", "frame_number": 5959, "timestamp_epoch": "1634913301.243361000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-956eaa074b1f611e75a62593", "kind": "unclassified_tcp", "frame_number": 5961, "timestamp_epoch": "1634913301.243630000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fa65cbd5b640178f066f549a", "kind": "unclassified_tcp", "frame_number": 5963, "timestamp_epoch": "1634913301.252747000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-23f6fcbc99ac80e3617aca69", "kind": "unclassified_tcp", "frame_number": 5964, "timestamp_epoch": "1634913301.252890000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-39a3f5e1a4855b8328d9edfd", "kind": "unclassified_tcp", "frame_number": 5966, "timestamp_epoch": "1634913301.257233000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-19c81c5624032e6eafa22c76", "kind": "unclassified_tcp", "frame_number": 5967, "timestamp_epoch": "1634913301.257296000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "277f414c526471539837c35425970805aad78af788894838811be24a2581a231d89bf4ae2b464e01892499e57f461cb405b2f0c8a0c079bfb52d3171594e0b1cb700b80a15d50aeaab977c195e7b886c6d47192a4ca3a56a5dfa66905b45943e99226ffba0eaad205b8bd2dd2184fb45844f1da213cc3d5dc724afc8e8d094b53974915650f644b323f829216b3d8265a02d4bf6bc0cba3ccc014fa28c1fe843a7a614f6dfbb911c6ddd8097bb7d97b1426b1a81c13a5192bb47d252e83730a95fb9c11910d76404ee5cd4383b05ea2e1703809c1f2cfade4a2d3c9d2c2a3aea0c8fe0c2ebb1d750a5078739291174570f4d33088b7a2a41ee77abedee2c516d9341f4219c56a98e0c846fdb8f1458f7b8a143dd56983b3dc2b3a09a664a31901bf032378687265d22f6716036a884ff8f201fed25e57d572ceded092550ce6509fcd58ba2dfaa885aaba01db510d73696a85f49037503198cb12361b3df3a021830ea10b667f98693c9237362f0593f69420b3de23b533562fb1f0f30aa20131594509d83cef8d39ef35b21198c17963c10e1eed71c6a9d6c023932b7b920a0ecd404005f0e2f7b7e7f8f5a220fe637c8202aa09d4e1e5cc6d95a69347542cbb763c251d167f5dc2eb248be0e3d8a6b1abb870712910c964c24ecea6a8809d294368c99c68a7d834527207c72ff0ac54ef6fc8166969e73f463d00e9e65e13cc4122742098b3e85357cc05dac2f8063c0fdf313dc32553cb89c558449d3af577ce97a6212baa2c71554aa6a91a7334c9862194c27b4d63e5f0cf3b07f95f5e27c02d0eb6aa197735ae9614255f19972a85d94fed0712d32bcc4256e5780575a168eb4452cb57d216e08d0835829451ef6c64d64707e57dfbc826e05ea62c44517210e4fcb323d645d1518a9e7b07f970ea2359fcf410a725a90c714b357000d56c11ce26f831f1e2dd1fa6453d338e0dc5291faa991edb9855efcf289d9c3d5786836497dcc4d8aaffec2df8cc0db37b06cc50cefb98ae44e7e363854229cc8ca532b175419a7001142ef226b855ea6e3635b3b95f3f55a922626c34f3a3aa16815f27b5657bae2cc26d0d9b0c22002c003009e3dbcc400ec95b7296075e0f7c108382e9e267a9e5d3f799bed5915f06bdfb3d466282ce1abe8402ddfac5af3a635d1aae7deddd4b93870baf6f6ee53eb97b582a095bf1b1e8fccdebe8e7cb76265ae5926922d7191221a06109074f472dcc82f5c01351861e1d4f1b8718ed9c83f1ec80dd55fb8d3b604205dda695f5387aeda96212f838589ae7054a499b378799ab71adb112ce2d7c26489d4e82edb5a9461c44172eb1e0d38284416b6eea9110ecbca37ee62caf7c8ab6db99f6f89c3fe847d1f3f50286e4a928029f2a5752e67f9a185cd35babeeebcb529d93d14a0b276b82c5f133e56b890ad8a569a88c2bee75e5655204793f7f01d0b18ac890b469569fd981099bfbb0326d29cbda1010f792ae9c85a6b860de486733fb7094319806f4a4de4b2582a8495fbbf1bf53df45b43952e27ac0d1185dc41ac28709cbfc995fd50a59ca95bc20e3cda2cee4efb1f09db17438faa53f8cda00de9ec3d9b386c97aca4cf3b728231ed35f7af6cc1c6b757e0f56329599bede47b2cfb51762de949b1b1e3dd38706c31f83db0ae98916dd4e150ab8ad4ba1f04b556733cf8811227644ca6aa67d862dd1a299f66e3a0ca0cd3275097f4b150d7975d3557ba9fa2515c4a26a87ddacd9995f31e0dd5964a5532bacbcf33776ed8219722ad7dce6bfb2be36f98d3a03520b73fcf6ba795bdf6aed62401f0bf" } }, { "event_id": "evt-9c87d8d7cfead9d72ba7552d", "kind": "unclassified_tcp", "frame_number": 5968, "timestamp_epoch": "1634913301.257477000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-17476d66680462a392a7a25f", "kind": "unclassified_tcp", "frame_number": 5969, "timestamp_epoch": "1634913301.257535000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d9ac1f397d2c4616e630701b", "kind": "unclassified_tcp", "frame_number": 5970, "timestamp_epoch": "1634913301.257722000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2973bbed5fe598bef0058dd8", "kind": "unclassified_tcp", "frame_number": 5971, "timestamp_epoch": "1634913301.257802000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "117581b6eb41ebb46677f2b664ec0d463104a35400acb07386e855e4fb603324ba68d7700f9d73794801a87e7a51399f64712c6309467188408fe4f8a16dfc3e93d17da2ba3976a47102e47a9b1cba5a864008d8dfc3130309aab2b71b1553d569cfb8182309263d9d08027d1a29f2b442da756bc95dc3765327105fa93660eebfec1f0f0ff3b00519cd6cd534b43b40cfa3a9e0ff95c8ff10d0eb206badeb71b8fa10fc4ada2bb1f7cdef6118d3b321482f3cf944657af3f017a9108770d606e1b8d26a57ade5ddb704fe76bfdcccaf7caa9fd7a283127779dee6fb281a4c9233043ad005bcfae79693f9ffb8f1d5f218484c3d43de0b1710b12d5abb068b4b1991f50017a3605915c848efbc90d57ea2a86c45e53ab0d33c262de6134d9958ba9cd12e624020be45438d41b914e10d902d5ea3b18605b45700d3a981f878658e0370ea950142524e9ac2b7facd565a6e4ecd878fc8b620d3d8b9b8dc7f59518094f18d4b77f8c33a12be9e0337457fd83cba124796befbcffb9fd9541d92a3a322db863af828d9c3f12839dc6069e288218f9cef93f772d8be5c3cc0b3aca28633c728acdedcf4daa087d447f6ad7f0ab27249fffdde50aa82aaf067895478476b033bb6943da32c178753ab70ffb15a61e7b7d5946824412f67332628174a9b3f482f014a8b63f183150694ae9cf71f051306cf95cbdef166fc9572e29bb8397092115abe518f50a892d1e8877ccd0fb8f7a5c71b312d98f30566d8dd0ea1325d35885e4b2766b4836528a2ec6f40b5069c2d54c5b37aec975f467fb2a9fff3362e83217e132a363ef83282e718e53e0a972da80adf196c1cbaf032339a247711b2fd24ec918a350858508134269dfa9ff9c6bddaeecc37738ba78c91385435e995aa100faf596b057c344fa5e9b59d3f6ac8f1f6f07d0fd22cc963d10b118258b4d9568eda5d356063848d672a7c8456f281bc7b94e4aa99b6ac4af332bd49bd7bfa92e25795fc0423f31c65307266f7b13bc3e150b1b531cb0c7241e9de631070d4eb2194fc3c1393bc2c54b61cb30e8f53d1df9e011fe473d7ff02a3fa9bca630e17617b0d0d7ee5ae3b1806e76e697b5725c23fde1a9ddd5263fdb6581746d789774bf129710cf44170b29fd69d4d5ad235655aadc7d7b8303f963688aef780ab05aac93cfcdd4c41f95f7eb52cd16ef18a2b3f74176c91d4391129c450c4325796d85fac87246ce2f5b9c5f293f026337bd52e74d47ec33c24eab34d5423a75b01151e116f5e1f6a93ca4c61418456222c449cfcdc8c84f8de0f324a7d98a5442ce795d2fda8210c2ffeede3a2d19a8f67d6e28ef321814e8766ebd8c9c46438f57732177de8cfb3cfbfaf92b46d335aad11bc049829c6df1d2f4cad1df681979a96e27bad69b6974e47d8b8d2f8fd70a72578e4ea9e4d54a178a77dee5b1e410ce3346814f886510cea1e9a2d8e901918761ffa4f070974539f743ff41dabaf9f2b47e151e7889a31b44696dcb98c03498d1b733fb26cec620090b1631df129871fb4ae9429e9aad46a37d39fe6dd2391b303fe87ddf2bd3f95c710621ce624eb7535bfd2b7c5aae481a2b2c5b88b88c43769ad5eefea6d6b7193b10903a4bc439c582b7010d8f0526ed4e399c190a6fe6bcf5e164ebc27f9cf371e2e141112820626ddeb6813cdb895715565c00229c304977ef5cc7ddae5b3e4f97d8d68cdd50dfedfe6adfc00ba25f83b183adc97317ec5cefee76d4ca2c32f841b8de9cb7e897c6042de5a6569abfbf17966247ad61b1da09d8c0859a3a511df731a4ef07a354ea0d4863452" } }, { "event_id": "evt-d9867c5efd74df2fe61464fb", "kind": "unclassified_tcp", "frame_number": 5974, "timestamp_epoch": "1634913301.259731000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-01100ae95829e563b6d055a2", "kind": "unclassified_tcp", "frame_number": 5975, "timestamp_epoch": "1634913301.260167000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-098a3b62aa9dc0993d8bb6e2", "kind": "unclassified_tcp", "frame_number": 5976, "timestamp_epoch": "1634913301.260354000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e5567d57157eb7d7f10b2bfa", "kind": "unclassified_tcp", "frame_number": 5978, "timestamp_epoch": "1634913301.266261000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9bd3e239ecb341efc998a0d6", "kind": "unclassified_tcp", "frame_number": 5979, "timestamp_epoch": "1634913301.266401000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d1c2b495ee222ba5d43e1997", "kind": "unclassified_tcp", "frame_number": 5981, "timestamp_epoch": "1634913301.270005000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "121420936e5e31c303c7d6ff6f4e2d99ca4093535db291805a00eecbfd057194e18c1b5db97be01b0b50bdc220625f7f3d95961baf092e13e7be129c431da9ed58e930582f471c29eb7579b1e3606d8516b691f550507fabed3d1648f5c97186fcf455262669e0bd836692304b455ffcc2c7ac3c333fa91f80510f3acb7049655ab6f379cea415abf1efce8ef71435aa739879d112e02f4b1d1ecd64bad47e0ab5b8e74033f1e2eb91253e40e781c247713f2ebc874d2cff97237608a0ed5fd63230cf8e4ef52e7530db17700c8a87fb3976a537fd5fe98fcfd9f2ecb6826569c9009ce7ce7146d16d6258a2af3facf68cfa99eeb4c6c78c3bee533d93a97c2db74342ca7a94a8f640f7d492f227e07d4786e77ac79cfd3fbe2f51a5a05c7163e798b4ae14b8818028d21a92d9ef4637f57ddbb56fdce9dc7b922ed0110f760093834483f1e3327ed1ebc9b47d45cf0a8196bc8775005f12ae9f8cd392510b38d52ba4c7bfac7225ecee1efd6df3bdcee4744d765a6bb6b0334dda39959fbc4fcd714d76a6cdab4c931fca655ef22d01a28e3829bbd07d0674fb020c4936082a69d9a10e1812fadddc5a4fb26ccfae5955f7747af44f43111e6a326a04f6c7d96725e0c88d2dbde2852c42b30cc511ada1fb583919b8bfed703889a355305666269bfe4cd6ade0dc2b97d566ae84d6d674f7d39b829393b4e24d47190663b63c064a026258ea24353ad9094f762f5d84fb0363c7a6947c937c19483ca6951b3840b748ca14b0370b69040f3681d3cfdcad99ecc146112a98988e097e73f85504b35bac3c02dea8140a8aa494012266e22e4ff5f1ac62a2825776ff1673c7c2f17ae1d9799065bb0917f8d7298bc49beec7e024caaa1cdab3b500d0b8c8e6a4aa683b821fbd157a50e72794865d521a73ed4d175aec214cbcfbbd32cb20a71364a925cfbd6c8dd498ec6013a9bf3e0eb4dc306a0920b0d46fa2562ae6ef1f10245fad43f3700779ea0fbebf648bda46b23cbdd25cea298c6c8ace1ac46d3b9b619f624d4e74505eaf26db0d31722f4f19cf53997146d3dd43e61a272eb77c7e175bc15e1220abe4b2ef7136be7470d2111be1cb7e0212b517aaf83cbbaf38ec2aaf592cbe5d3ac7a779e60de3ff9b3338821184f76d82012b7576eac760d4e01b2aa25ebb62030c8737bcf8caebb26acd35f92403c3a0ea8cdcffa6298efbb6ef4ba7edd539d4e8299d11f3344e701919344a6b2a03900f22807af38310b3cccfe6dbc3e349967d70611ab3d9e6fa4a90268318aec9fd0fcf6bdb49c10ad0ef2bf65564e5445ac775414fb518d194f6de49d597a20c721425e46180ded75c32cd623deed5ef8ec67003a09bcfc8192b8f9784352de38463afccb1a09dc2fe92306831b09ec1f4d524149e2fa265b824fc85d1ae4c9d33a1d5d9eca1e9e1164985902492007d7fa935ff6b41ee67032a5bee2d389587ee4b4293dca265403b68c8c128406eeba6eb803907378330ac1d95de9ce549eb478ee0c92941c3d223cbaf0a1c5e12706cac22fdd453d33bc03731aa04e592abc6e7df73a47299d28f70e8a51be6e4626169ad18e6f4da91b5fc073b45b3ba7751979e819435ddb53f295252139e91e805aa5933d6e874d6966d304b6dc1684a7c1410d432f7c0dae7511badeebb2a3cf78c0c52ced0ed0a2c4638d256fad91adf05d8efb8d738fe8278981d0ef9b3295321521e48beb3f796f73a6cd1b80db557746ef7e1ee4d21ad48f468478596ce91b0fea44bcba61d134bf455133e25515a4ff483e5b787305742fc23ec7fe183af1d5c1436a72947a5f52a1358602efa212303ee6f3840692873505a2f22c0e5bc791412c5c083c65607611c7a7d1cbdd345df4f0779fe791a9909850df8cfe543d66a0f03a1c79358d663a829000022d99a8956fd643ec320c3d701c9016bd840e5919131bfdd435dc73126b6de8f8895f7104aa5b109a717a99693aef2ca92266f310bdf1983f44771d626518e24d4b6b4689839685859d1508449d52ff13733fbf72a6bccd8373673e8fe328895" } }, { "event_id": "evt-13d71e4a8e5abd6dcff1f0dc", "kind": "unclassified_tcp", "frame_number": 5982, "timestamp_epoch": "1634913301.270028000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-da47dd1b7368b96dd4f46183", "kind": "unclassified_tcp", "frame_number": 5983, "timestamp_epoch": "1634913301.270168000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-caf67da44adca1a9bee31f48", "kind": "unclassified_tcp", "frame_number": 5984, "timestamp_epoch": "1634913301.270183000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-af8edf9a57602cf521e1bcdc", "kind": "unclassified_tcp", "frame_number": 5985, "timestamp_epoch": "1634913301.270347000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a66aa5979515c528ac7a0673", "kind": "unclassified_tcp", "frame_number": 5988, "timestamp_epoch": "1634913301.273345000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-20b55032e472638d1bc66f3e", "kind": "unclassified_tcp", "frame_number": 5989, "timestamp_epoch": "1634913301.273366000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-faf71aaef388c6bd4b664439", "kind": "unclassified_tcp", "frame_number": 5990, "timestamp_epoch": "1634913301.273527000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-76939cd39840227fce696fed", "kind": "unclassified_tcp", "frame_number": 5992, "timestamp_epoch": "1634913301.276758000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "b273e3b0d3a903ceaa2aacebed0f3df6f15463191d8c72c86f218a748afbe960b87af554fc9a92dcc2874a9e6332e25bdd717683a1c9cff5a85eb12bee35fd31ca05c0c94494ea82643acfab7223133d87e00aca1b2757c44d6eca96d25b0aea0763bee83c001c67e9aade42beafeea8527153ee9145a72d1775541eb55c4bc4424299007ffdfb17cab26a605f72fc2297223a9b48bb17841f79f9d9c1b9437a5b6faad7c2a6711c93e336bf33aa2f98c41e7b4e47aa8d2e499fa1268fe1e63dbb29f216f70dae9d0c1d3cd63fcf5b596e520682b3923b83c82c9bc7baf694578cd625723bbc136ec8e54eabaf2b115b646da32850dfa0df32a5a12e41ca8c440f6d1d2637e04c31126db72665941cfff83644dfa5e224ab1668fe61d1596f458144d9fca5fdc4f940a93496fa1b7122285cfd7e98ed8f87ac6873d08299d938d54be8106f8405d8ef0dc7a85b3aeae3426aa0314b8b19e4ff84cb4b6ec12ea725a6f07dda3ae9015514e765e7b72b3605316b5f1c6e1e9909f496b2bd4fc193a51542ce7c3498e338336422cc40f29df8e3a503504fcb054bf77408007e8f3ec5e798b8db1daca8236dd1c2fa8f0d4f48f026ef1a9320c685442b2d8ef038675444d18aaeb693523cc54ab0919ccf4da1257ddb8efd00c7101fd41c95d09f6dddbc0a3337a73c4ec0c69ced2265040bfe8e491ec58f300e57a91d80220ca919295bd1baf7779f167ddfb597d953d2561a9f66237f406596f17ebc15a3454f07fd78d4f29dc741f48a8c40fcb8d181cd50b9305d98b27500ad3e61b11e58a5273b067ff0823ccb0ae2e2127ce81804533b87809214f56f77276aa4ea60691cedbe3dcd8a876725b6d39a8366be3e1a5c8d4cc2f18ed6138e59a04d2a8f0bf06b4031c603e6c79ca4226c8eeec88bd762781863544dfd7dc56616b9df6e16ac60e2311e74fb773eb61ff71dfa657b1f63837c2cbc035a056505052eb474a9fccc62c81731679b6db24f83f2d74b7a1fdfeb42358b846744184894c499efa777ea839ed366918af75f46ee01db13504ef7e074ffe38dc8cb960524d82c922af14dca40f61e9cbf94cc9976bdd42c0c59f29d3a96a021fd83b2d02578f54dd761a984b845eb077ddc772525dfba4c02c01f99f36d828420c6775420b84311f212c3409db8dd1fd0abe2f8c8f908c1b221bb1126f11b593c93ef07c7908d706e12fc98d34ca0b5384f58cacca6dc263fdb9db0f61f4e1267257deb5d022e462d6f60e7eabf7df2da3358365e5b7d3b86e384f3e8ab39a60387933c31f1fad740969406799ff24c6a991ad8fb4f485760297a35e93663a1c441fc28b38cdf2a3dbf38595032578b18f4c16571f95ec2a5fc8814c328af7a065cd0c84c33b6cb95bee6f0bca12ad859df366df3e756c3403f37f16b2de57c6d67dbd125cc30daff1727c760530bd39fa0b7f76c8ed02c73348445730ca7de835cdf84ef9bde5719a08ca54993cfbecd79dbe93f8d8a2393c837653d5323aa844c0e8315b963194bcba6457e6f5853c81844dd6516d9e7a548ee655d2b76aa7bcb091edf76bbf4884f89ec157d42c25c2a06d770ca56e7a2a710b53ed1fde0285e8c9300f34694885112ad79dbd36796056806a08ca27a730e1637a958c45eb778c3aeaf1f452e72634b6a1e88fd7f85321dd5dd29e956bda76572a08827c51bff4b98cbcd9db83b0bbbe5678e1c09315c05864c9cc99789fdfd7dc1f2add81b2e3fc106378f10dd97084120a928e8eef298c50466e99fd4851bfd590ccad8725c711eb8bdddb30a97e324915a36bc8df3f833d7da943c653af8dcd912f37bf5dd33b2d9a755114470e0f2e95a418f4420c883b3f1daccbc0ef323ec7a8b9f17fb74e07b37f967d4b2abea61d1b65ec59c5596af19a3c3db1fbede425bb40557f45c35f19b268304bcef" } }, { "event_id": "evt-8c2bc552f3b211f9e9273619", "kind": "unclassified_tcp", "frame_number": 5993, "timestamp_epoch": "1634913301.276914000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-40006213ad1e73747df641e1", "kind": "unclassified_tcp", "frame_number": 5994, "timestamp_epoch": "1634913301.277110000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ea2cbe0a317507167671f11d", "kind": "unclassified_tcp", "frame_number": 5997, "timestamp_epoch": "1634913301.280122000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-29efa0e19bdd07c48545053f", "kind": "unclassified_tcp", "frame_number": 5998, "timestamp_epoch": "1634913301.283366000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "2defad04ec5b76476c95f9b204af1725f97f2a43c5c6b9d65c9dbf3a649e49ab744e5bf8f99b5fca3ce4d1327655acf7dd5ab08acf78611b3f942e05841bef4c1ae592ab3ecdfc1950f8aad3f7e4501c55cb481e7436da45ad2531bab07eabe23c943e00503782d51787e763b7e161e704def2264c83688fdea476c42162b345307cd0f5c3928cfe7c0ea3fd15a99d89b6b8cf5adc37c8a177500fd5c0793a0898c7217c193759611e7b1d9401a52969f8f376f2f291937f89609adf0f9071c2577737609261d1a5049d2c8ec452e8f75d72302629cd6cc52cf6cc39ee507fe24672b519eb127475ecda4aa34369171d84efe06280599b8538487541f34e7b6180d3c3fbb57e8d0fb14c8fda46b207d06102a161b9b02604da82eb89a275409a6e64fbe7a3a00ecdd1ba8fc618bd3804b148ac54c3d1ea646e4bed5fdd65a154ee1da5af24adb487287758523846d3c466bf87f0fb26b4c7836572943aa04995490dd42d27ea0a61cd90e17d16bb7210e1890db1dc0bc52846cf73ac7d0ca5a415c2738852fb3128fe6a0d0ca09e4f6414d23e45ac4141a540c3937bc393986b8c1e22af0e5defe95f4ca58f77e424341da484d09f390e5fb37c246b9de0aae315bf72cb1e78495455ac05ef1f8eede51d0a6a60b5a2db1296e717289601655261b7029f4115c1e7762d724d3e49189cd85c7823ac8b28beaababd65ba203672aaeed4097d74d9bcac7bfb3b1c1bb5f817dbe3411a6aec979a1d79c9e986b6690ac711244d8e53bf70e3640c279502b8ded881c7fb3f2e09baa5273a67bbb98aad08af901010b1dd9d1e44db455cd3376905081d62f0b2c3b1ceba7913e5938e6175a2e78adce1594e82df5accedfef1eb1788fae5f5c171d3c596c8a40997a7d9e302ef9d57eb4a5f4ce51e79b4ed2c3e1fd9e04877461aac7896461c0cd19f47cb5cf9e4049c090df58c899db6a939ece2aeeb7249799d1db2d9cc6ffd914e27b2e87f5100ebad8ad56f6ce3dab1d7d97e5e48e4ab6229b2e5b4f1a2841c7723a0752184a2abf3cad8968c510d1c3945d39eaf936b3bf49f60e5034f91836d1b4c5f5b2d5634b4f593601f124c8a1291d93b1332c7fdde7b5270741005cecaf78fa25faf8939ac102321091b11f86710cd5f193f242c89d62eab5d2c10df3674478c0f36f48cc742c5a365a76a70f3fe44cb83c82352548d88e6699998db88482c8e86264f62ac4e0a283babc0dd46a57be39f92f6618a2470ace549785532e602a570e80d3c62eab8a3bf7154383c75fb84825cf415f86e09d70719779a8b2b7a49996bbfd248aa8fe3cd3daf0ccec76023d6267a1bf72afadaf433367c122b69646d0c13f40c46203a361b6da47edc72a502a971194ab836d3d480c9a2bc25f2fe6c82f812d7c40787b972e54ed2dda4b15a5d19a4b2eaf5b9d786da41210edaa3250193e49d637a3710c0a36f342a2ac4b96e5a0471b986898c06dd913ddcc88ec3313c1587c4cee5ca834d79e3a69ff18c118fe6f965c403013480177f24db28fcb05060d5092cee764734d12a4f56090714f83fe224c612a9a9a36e4295bda24f33cfd84e43057490a53dd1b526f95be187de61ec33945b3de3a392eddecafc25eb6c9f845d9ad4839d6277e07840745174561b2994098d1e8b328a8d8552bf9d99920ef6cd8513786ea11de3aa8cf3eda81df7b5b22c110e206c09496307463c98528a5e450f29305797569ceb6a73ce5f77ae43d852b3be1a0b99635936700e2330e61713018370ab44afe2cb9ed373a9d6fe3af2b48e488eddcf6a7cfb64e2230ccffd9f2505adf1043e82a4e284d500ffcdb68a68ba28f5b6700bb63f3438efc09ced56cd781a95572a084ae6f66e7d2ee4e0aa7bae3c1363ba7b2de8ec79327cb8b4e5dd5f3c5cf88a94fe829948071f39911b1501e688cb8459" } }, { "event_id": "evt-537d97a704cce3b537fa4c5e", "kind": "unclassified_tcp", "frame_number": 5999, "timestamp_epoch": "1634913301.283559000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6ec05a6baea7941e51d1a708", "kind": "unclassified_tcp", "frame_number": 6001, "timestamp_epoch": "1634913301.287069000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-04e65fbaa4fedb09b791a45f", "kind": "unclassified_tcp", "frame_number": 6002, "timestamp_epoch": "1634913301.287249000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7d9c4947d2612dba447af298", "kind": "unclassified_tcp", "frame_number": 6004, "timestamp_epoch": "1634913301.290600000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4385b5c6a3025c515b781993", "kind": "unclassified_tcp", "frame_number": 6006, "timestamp_epoch": "1634913301.302462000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a07a0f89e4da924d502be508", "kind": "unclassified_tcp", "frame_number": 6007, "timestamp_epoch": "1634913301.302485000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-66ea4354fdc6c97031da2c97", "kind": "unclassified_tcp", "frame_number": 6008, "timestamp_epoch": "1634913301.302499000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "f84ed2a2d4c25e209fc66bd7e04228bb9d4bef4659175a9bf9632395d74f6e49e89decd280f081bb67ba8fd463b4ce84c12706810e7143e675a8be101a4f3ba21878ad02d1342da4280d00cee8b54309098684147b9c843ec23c8d2485a88544fcf3d603be637dfa18f357004a2d0538664bd50e88f5cd337b01457512b3d3b3d8ad40c0742a7fb819cbd565ecd9154b46c13d24d8d09b21c02fd07797f8348690b9093b0d15163a614c187485b37c7364b3a17a2c06b5757d14b46a82fc20984f561ccf7b7735b30154d41af99bfcd64cb9c966466fde07de6b0282297e32f825228e7d963c0a8c2b060984e9ec2e5a6baba49f1c9a4d5f9c4047ddafd8b68989470012526d37aab2abdf2436fe75f17f27e4334d82574d8de30661a1cf3a52b2d0458050d521575d557157ac3f8a454efca92e9dc9122dbe8dcda528d0f621f30d55f4042f81550425fdecdbfd10e7b86eb0f00744b79593ff5688b06f7e5c3ac735fb098ba14bbe2857cb2cbc99d9de4ee8e0f5662b51e97b5f51d4741b746af36c21195e7fbb2a448e45c40eaed681a73c6cc68c28f014e69f45c411aa24600713473a8c7859ad3792b5fc68577e30c8868479b8a9515b5bf013c81d45647bbd9bf1e0033adbfbe8db6b7d931e6a36d6e294dbbbc809056f25bad5c9b3c66ff9a8fe05fad07a90ae5c24e57883ffd153434736fa298fee1bc8f1c5920cf81297505b9d9f0a413f54f10e47f557cbc66b18109bc2dfe95af8bf61641ad7ea628bd534629fd4e2c4bded1391b80582e1b0055256d96f24f006a54e5a0779665eaf601fdd079d95bcea883cfcfb0955fb0a365e213dcace00ffa73106352e2507299e5828be2151130c14d6613c25339f12d1fec2fe4d0fc6e5756e27b45a177ec8c51db5060344b4e3d1198c79012aa22b712fb54fb121dac047f3606447bcf456185194a8352fc5170bb21416de5fd9f44dc964147a6ef6ed78c58a95e2e0c0db4517a8ef75c62faf90311956b8b59cc0202dc1b91dd3cdae30e9062d456466119577e00bed03c4a5975f24340055b26adcd3a34b860b1d7644ff5a99f0ae9844a82ff756e9be0c445b80242c0d8475fd03d250082627323e5b144732293b3803d3308e81dd405ce3850e357e1fef7c74735ba79915dce42881591bf85141df37377401777f0b35920ac5f4903d3ebb91da15e63ed3534d71f4585acc3ce76460de5ebe6c7f3a4c90e8c6b4ef6d486fd5c77b922ba27c214d78dc0ed970d24c2248d661469ba93279da33b5d25f784689b7c84ce4f01de956576fb023dcc86c78eda785ac33f3e9573d982a3b1216d4b7bdcdf6f52e9094a4bbbbe16940de45bb67866b7e489111ccf453b5b8dc234f6cbe56c992eaa7d6c7e4169215c36fa9288d76580b3114ff26ef7c0b811e62bf6f91e17d3b047a0aad3742adc1d43d60991ab754534487d0dd293c56e94d233894e6834531ebbe9630841ddb0852f9e4129f98a99cc3b464515a8669d93cd10f66c1ab18bf0891b6ebbc77dfceda8469d278d48c01ece99c5e264fa5b3252f0867c3d41d35b3bfed9f654d200da72532bc09c377130e6bd68d7c37f21f105a015f883fd90652d6d3362a0681d93dacc43b616a73f6a47e4aec3c2a76d6544a82993ce4f2e0c97289ca5afea914ad0ed22fb25716d21ac2f1896929c1886da2c21c3c26039c0231" } }, { "event_id": "evt-1b03187fa15b3afa87f1b887", "kind": "unclassified_tcp", "frame_number": 6009, "timestamp_epoch": "1634913301.302624000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0b0e22fc1775f9318881958f", "kind": "unclassified_tcp", "frame_number": 6010, "timestamp_epoch": "1634913301.302842000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5634e0fdec9988502100314b", "kind": "unclassified_tcp", "frame_number": 6012, "timestamp_epoch": "1634913301.304189000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-179fb61a0c99119ec221c738", "kind": "unclassified_tcp", "frame_number": 6014, "timestamp_epoch": "1634913301.309447000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-34978432bb94e539347d358c", "kind": "unclassified_tcp", "frame_number": 6015, "timestamp_epoch": "1634913301.309467000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b680d6cb41b59df691409d48", "kind": "unclassified_tcp", "frame_number": 6017, "timestamp_epoch": "1634913301.311415000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f9d009dc18d4427499564c42", "kind": "unclassified_tcp", "frame_number": 6018, "timestamp_epoch": "1634913301.311841000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "630e018c25b961e42810752aa5d09692c498d36450624e4a9a88346cc39693b46fbd581b745b31f63e6013be8a1456a993e69b53d9721e98379e61f7d2b7a12be37db35e9ea296ce96982b1bf13fe4bb48725c6acbd13c24d569b74a8dc91a0fc93763b45a7688fbbf3a1fee80fd8f5bc1c25a97351c3bb638b4c8f80d5ccd32ecdf44084dd15d4b84c0238d9447e99db8769d5e01b23ba720695217eb449098f30397a6850975b29e9b891eb4cd7b7a9783728b1e5968996e1ae22178f86e72fd450746a3705cc204bc0135f0092e0023ae14b58b31d06c63e7792c0c0a397ccb0ddae515626c5f31446fcf76181e6e1fcf75239ef10a111635337f0d0c48b5f4f795ecf5c54389bf30f622f06d6b36c6eb25da6b27f215188f6e832ea8cf2d93e215b5e6cb744786f5c74f3ed1f9339420d40587253b50b026e2a4b2b4073c0b0657da93e0fb5ac944b4e0be7962a5fc6ea8e0e6e1460232b35d5895747df078c2cc490de08db36591aefec1db146cb9fbddc889ca13baf59995d2a098a7bed79d47e0a3d460401581108ab2dd65da1617ec263d8f05c4db3f5f8d0b3096ee99e112a11397083011e0a7783da64edff1d64e652c383d6020161e17f5110adc7a08ab35b91805d0a318c7df361586b5d2461550863ec3c35eea8e72db1b95e35c3da5faabc57812a619913f61f0a9ea32978948fb0590b5906c95e2e61c9ef568f65582a24b1d5595460ffe8cc15d812c6966dd4f5de7b998a6eaaf89b6d76cbbf629865b0b5d8e62ed8e56fecdb47c68c0cd1b51a3cd5cfadc8b97b71cd41fd311e200a038108e16885e67011c69bf5c868ae3195d81ec555d465a4b4a41914d024ee66f9166984af71cc3c7876d836d53f3d7c8c219b183649e5c0ca87476f3d8b4a163d040922dcf7a6767f3fabc0999fa76913f956808710f4ea1f117126c343c23da3c624d31cd3560cce883fdb29a81939b713aa6e10edc0a1a9721e514291084718ff6b82cb4b683fe2f90d16173b6103a518cdb4d9329067a041bb7ce8ebf22c2ec77e8814e6a4a6721d9d1f82795a1f5438f64dfff0d0a01556ae413cb88d5e54435b9894008116f2ce1ad444adc30803801e218da61c5c8c53f62de5379ae126259d5c0bfd433c7aed73666d92855bc0a304846496b8c71e3cdcbfd376f1908a02b07475a16d64c8c4631ba0625253da8a2bcc09e41d98824cb7689b7a2932394c210e10dda970ea8247b30f7fba67cb2040d1cfe70085d7c834501f647bcad4b23723442fc9f0693fd1d2c3397e6040f4ef28b034b3c0d49caccc31c9261e1719217b1082835c5348891572154f43da4fcbf3bb9094794a6274c374966fb5920a8738662a843cca0c9be4b7fba26cc4662915dd753eba90ea7d668b0ff804f7f683c54e6749c746177082b4c0127ad423b59d950a1b46421b8c7f2ede4936f5b9293251837fcd93f5130d4f673e961a6e8f7159ccb896e7c2fb23b5f178c2c80b114928511024451bd7f87f531e8ed63b534cce06427af37fbf5a535a1c71ddbfcc1ee6f936c890861b313fdf7fdc4f8b8d1ca6566ec32e9670ddd82e3e643a8629768a12c1355a609ea56f4fce121021473bd0a42ae95cdbe18b107326f8c60f9daabeafc20fa9e08d1a5ef6206ca3e172f85969ada564a97fb930ff122619d34ba6d6e8cca65ef60fd185fec7d6be82bd4d92e8d3f82b2c578cc1f1f050d34220b91a161e3fa8c673dd6ec4f98c728b9582f2166b2a6a54a95029b6f1410f58413016081d9c0f846b3927b1921c2c9bde51d07594de51aee2d3160ffdbbdc9504d9741995d7cbb0968a8726da470f44e048c594d632fef3da2d998c6d724d957730d0deb2522019cbccee9bfdb86c55afed9e73aab0c7015ced1fde8970be10103070783ec207a0983e6605bfabe0e4ad1b56d8684346d4db9" } }, { "event_id": "evt-c8dfdf3fd103fbf1cff42677", "kind": "unclassified_tcp", "frame_number": 6020, "timestamp_epoch": "1634913301.320774000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6c9c4c7cd21025314bf608c9", "kind": "unclassified_tcp", "frame_number": 6021, "timestamp_epoch": "1634913301.320890000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e9bc69afcc4703be5a92f71", "kind": "unclassified_tcp", "frame_number": 6023, "timestamp_epoch": "1634913301.324109000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d94395ff6034daff6d6b2216", "kind": "unclassified_tcp", "frame_number": 6024, "timestamp_epoch": "1634913301.324302000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1bd0e9263b8341c28629f6a7", "kind": "unclassified_tcp", "frame_number": 6026, "timestamp_epoch": "1634913301.327367000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "d6bb156d1accd27510479fb2b06ae51435ab2d1b2b33a69457122c0826a70f880df24e07fb252470f297f32d091cf42deb9d0ced6d518d35a1fcff796072b7ec2281d67a0d30ff302a18edbd4c583b7bc2436718723673a927fc4b1015a7793bc331dd1f1bdb8fe01927f8b72a62a883093c3f554bffec830e39717c4c532de390f7f9775f82a0a99c1afa8cada7b37f86b39193299165a8484519d89c5d1d85166429fa90c716222aa75c1246f23c9329cb66b2b2758f0c844ea1b0c029be09f23d1d604343f43e0fab3732cd48d2388b89caa35fb13ff367468af205932490c5d347a9efd4587fb58e663fac3e71b2a03975f3809eb13c98c1cac0ee631ebff4c968708020e54d8d5b9c11d31c9a443a7dce79da42ab026aaf1d08ab05e3f023db9564fd8e93d84a062f0107a4af6d5baf984a3fd127c035c359e72302b4890d1dd899a0a3e0fad6a9e1c52b6c36c0a8c9db7a9cd98a29fdb0b0338d8031af279afa59c4cfb68b6cf1f48f99c146da7b90dff5f3fe3f13f97c1ef2d82fa46a6022f14baa6dcefbf73397bd34827f89ab05e308a12522150941b20d73a94d76a9b7bc5663757b56ae47d91a91ae94b83fcd7526e88c667c1126b5542116e5e97b07bff7db839b50e9258b869cf14a76a776c0f3e5dae7b1041b8ef2d7d1e11b748cbcf3c76490b640a267fdb4ba41b53426d021ee19fdeab0c9c505fa6ae3e21b432a48d013d3912bd95d7ab99db07f2f2b6b5fc935816ca7eb4b8e5f7f7f2f54aee7bdcb16b0efb43d84d4d1859d55a4870f4d7afb49ff2f2054875ce38db6563822ee17c3190a37b81bbbb6beb98a909c8f8cb7e2398112d08a901521cea5f32a6dde7b00275031d31921b6613ff3cff36ffbb33db33ceb25fe656d9a1c39ec5a3346ccbd8ea181422f95935d49c260a36174448c012efaca40ec274124dc95cd3c85bdc048d17127a5ddb53e7e7b53badffe8863c588d9e521f9c248d02550d509679c6b7d744fcbd56370ff321b498330897adf3c93a7bf1f0db571eff70af9d9358292b9385c2a84d46b6313d495a5bf0354328c310c22e5604346d68d9ded57b805df6a0a926d124b5771631d908e4448cc82c01afdd4a7f26dc74892fca723e124ffa8d0d547d58993c562da11d97cb190a8f57c27ce6bf9cb012b67653d3c95b9eac8fb836d5f414dde44aef213687b83f7a40f985a77adf9496cbe590984f9510528563115839afb907588711ba38d3b502ec7a89d816e4ff7d14760fde49010530b8ca52a8860c0576be444ac1990104cc1224ca8d5f2cb378f5f1b2a9f95732a8e1cef6ba08baa2d9d57a0705c0a813d66c986e992cdb72b472befc2ca97ad2e04c7949d47b9042950ff904480d1bf2f7c95fd0e0db83faf72408bb1442c14c90c0f073b92b521b32256d8c49cd7a02d0cde614add337d92d8065c4ef292e3e7e9c8e934e21900ff8f470034a7e8b7d0afc3b4d0619024584b70a62a9de8a2f0e83b51e05127593d5c226565f70cf2c514090c732e96b03ed40e26ea970a6d54ff8c632b6dcbf73c0f83cf5d19590b2edc07935d3196d22f34e139f3a558092b4f953c189996d9638dc4f2a94cb68067e448fdcbb0ce4ce40606896ca0a9cf8a3845250ebee2cc3cb555fc4028dacc36682ca864955d4e790be3a2634233c3821013fe937d1ec1383a6b0adec7c12f02b04e76ee9d2279986046d49a1b212a6ea67c9b0fdaf5c0365d6dcaec0ecfac1d33eaa63c32cae81708c9a1c54a8ef09ca4570d5e5026435f0dcf29db3bdb1e181e7ec29afc88f317a961aab6da8c3f92686137d73607b811d4ae7ecff4e2281be9ed15c088ee36aca4802d8af3286f38fcc4423f8b0a5067865929aabb7ebea4139dd527198c2db8af94b32d4e563621c63f83e0cc9683de51f86a502946e75d52bdb05f5a4feaedbc47" } }, { "event_id": "evt-2f76d26f81814b2388ac58f8", "kind": "unclassified_tcp", "frame_number": 6027, "timestamp_epoch": "1634913301.327678000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5817e92d4c866cd7a094a6a3", "kind": "unclassified_tcp", "frame_number": 6028, "timestamp_epoch": "1634913301.327706000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "11f31ca106ec56811db1e23d69ca9cca7426a83793c742e6fb628a35e29038841fd3b1c7737659ad39fc2c9c2a3580576f417ef803a4e6dd7121a6c04d35671b4986df626e63bfac677065654bd55d3970b93cdf6780eb8f34d2d084cd377c9bcaddc7b70e774c3ca4a904cb77b0d04c60f7c55a2c60f464f5bfd6f6661f44f34f1411d6b6a7bc49beb37afdd5c3b5eb9989494ca43021d2bb4cb70caab7694b158442868c07150c792503296d07bdd4f6271aaa6ae141d61fc770ea65b7b93248b60237205da9c77e497c20be5ad1ee3438cfdca240c4206162fb47535b01905a5eb13db57fc8297a5d4ee43be004ba5392ec7fdff82e75ecf6183136bf090618cd34c0a8b97ac9f0e889b867486c3da04235619ffc9648fb6b4fb086192f285cb09c23e81bf452af0caa35cd07e773310ab74a5145a1ae24d7aa7b6f35eb1b957daf475007d6b04a2b88fbb35ad5c622234424cde79a980ec10b92d0b3d534536a18f46477d9c14d7678414ee3664060ea009dbda8263e551c55b5401a3ab46649ca684726d60baee6e1ca55163bbdb9c0e580df2e8f0a30723a53fa5e1a6c7c7ba22666ecd9f5e0a704990d70a98ed254f2ea415b654b3b22dec7628236709a974d857f7c7e224858ae95b0d59042b18a984ca143d240d0eb3fce2ad70aef4ee0f234b9f14b6485827d2f89353c37dae9109d33727c1e3a107d9725beafdc315dc73c3e766790bb1f47702c0097f8ab9e03dd00d2d89b84e81493f273c026c9dd2e90bc1d700c4bed5be1cb1764603dd0202a2d9ac4d53bfe7b4dd8bcca8ccfec1d6f635436c8997400182e5f11389d899351061f671aefe0e57da13e667858c95b5f1789a30568d5fc78d7f734349d475bae9509bb231b6b53f222c482e3642043586748953d9ebb6b4f8171ecae9ecc46e41e14889f90c4015ec7beae7a7b672918eba8ef05d087fff1fae0c1f60ae54b35ccf3aecc34c7a4eedbaa8eee6abf1818bcd09ff0e20893053a421693164c2de1a5303967cd2aa7603cf20f085d0899bf2f9c17cb3dd78b8a0159a5269c5123a149c0ac3af9b3d41a84c66134eab6cef3cf1916da5e47c6e74624062314bd02077b4138d3f8d353ad3dd3d7a33fd1c82b92621880326824a374d272ac543821aca1754bbd95615a877461d0db95ec7a3e2814fe35d43c6a81eccf1b931814a0ce3376ac8856484ce2e201ae007b3c95d6545491518da254daa028926a412c61a48f05ec50f8ea882e2402ef6f7853470ce5f5f4ae4a83ae34ff646b9a7dbae9e7a4e1be08dcf2101ddb48d420decf4859bb66ea655c9eda535d0ba9fec3970cee41b4280dd04a97b2adbc5fdc29bdae397c31f595f96831084b625b82808f62829d389800070fd01018a7e9f03b4651b363be09031a8090826da14199530542971d7783f964d3d4c53767822fbb6eeb56bcd0cc549585e2215bf54d6c255eaf165aecb3ccc0f7d52441e490a24b2c7918dd6b68774578e5e7aa9cdaa7fee01f0abf043661a475cba89ded69032e7c26e4116fc3d45f87843a6dc6aa96dddeeacbd59f1fba2821f644e607629b944279fc0f19791f98f067695fbc92886127be5c14b53e63de2648142fc20e3a213b6f0d88b0bc5caf44a1955c0eb68f0a13d465616d0e09f5644703b776d20eece2c1a6c65febd9ab79c993df59238f73a32ce910ee621cccb11b4427287483e78d437933fb994a0d068c2dd5fe882b1f033216fab9a8dd7f3b9ce588de0566d41781f67c404c4f91fe0c52d1ecbfb72243153acad1d6fd47f3403350a3042360729f1b2dd486a05c361280" } }, { "event_id": "evt-115a326c77b56883d87169a2", "kind": "unclassified_tcp", "frame_number": 6029, "timestamp_epoch": "1634913301.327838000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8ee434f4417699df57f25257", "kind": "unclassified_tcp", "frame_number": 6032, "timestamp_epoch": "1634913301.330549000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-38faf7f5e2e145b502a86192", "kind": "unclassified_tcp", "frame_number": 6033, "timestamp_epoch": "1634913301.330668000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1d73bd0c655e7b4d304708b7", "kind": "unclassified_tcp", "frame_number": 6034, "timestamp_epoch": "1634913301.330935000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-218199c40d8bd6f0ae7dd204", "kind": "unclassified_tcp", "frame_number": 6036, "timestamp_epoch": "1634913301.334099000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5b340dffd22af517ced6d8af", "kind": "unclassified_tcp", "frame_number": 6037, "timestamp_epoch": "1634913301.334120000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f281b759e9c606f685bdbb56", "kind": "unclassified_tcp", "frame_number": 6039, "timestamp_epoch": "1634913301.342593000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cdb5a055fc7c700a4c377276", "kind": "unclassified_tcp", "frame_number": 6040, "timestamp_epoch": "1634913301.342661000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-92969cac96343e3d6e1e0bd8", "kind": "unclassified_tcp", "frame_number": 6041, "timestamp_epoch": "1634913301.342840000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3d17aab726841604b6d0867d", "kind": "unclassified_tcp", "frame_number": 6044, "timestamp_epoch": "1634913301.348658000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4d211a607a21ca626c679c78", "kind": "unclassified_tcp", "frame_number": 6045, "timestamp_epoch": "1634913301.352611000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a6215c69055a405b5aae44f4", "kind": "unclassified_tcp", "frame_number": 6046, "timestamp_epoch": "1634913301.352631000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1f9636a1e0fcaf48b4508e81", "kind": "unclassified_tcp", "frame_number": 6047, "timestamp_epoch": "1634913301.352930000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4351c5f1f69a7597236501a0", "kind": "unclassified_tcp", "frame_number": 6049, "timestamp_epoch": "1634913301.353321000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-96e908f740690abb33663c43", "kind": "unclassified_tcp", "frame_number": 6051, "timestamp_epoch": "1634913301.355678000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-115b2f5791909c2355afc520", "kind": "unclassified_tcp", "frame_number": 6052, "timestamp_epoch": "1634913301.355796000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b4c41b6a3a8faece17b0bbe0", "kind": "unclassified_tcp", "frame_number": 6054, "timestamp_epoch": "1634913301.358715000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2cbc145112944837bc4add8a", "kind": "unclassified_tcp", "frame_number": 6056, "timestamp_epoch": "1634913301.362196000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3c45d37b506b9bb54769a81c", "kind": "unclassified_tcp", "frame_number": 6057, "timestamp_epoch": "1634913301.362345000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-13de9f7a90670519b7fa4c57", "kind": "unclassified_tcp", "frame_number": 6059, "timestamp_epoch": "1634913301.367143000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a3dc5b2ca9e4c7223f5850e6", "kind": "unclassified_tcp", "frame_number": 6060, "timestamp_epoch": "1634913301.367164000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-71e765f17f49a198e5d40d09", "kind": "unclassified_tcp", "frame_number": 6062, "timestamp_epoch": "1634913301.369013000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e396154c07c9221794f7484a", "kind": "unclassified_tcp", "frame_number": 6063, "timestamp_epoch": "1634913301.369027000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-10f3dce5654a5cc581aaf738", "kind": "unclassified_tcp", "frame_number": 6065, "timestamp_epoch": "1634913301.379955000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5d7324ea89c8551f7a40926d", "kind": "unclassified_tcp", "frame_number": 6066, "timestamp_epoch": "1634913301.380039000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "8d009849af80036248ffe7a064e2f2992e31c1c6f8d53baf0a6a4ed4b13b3f7ca48c7b3cf6e5550edaccab7e7f02b840a5f69b7818d7fbed7864ed351371934b9520fa779ca6c1cdfe4a5dd42d404202f83aba950df1caf0deac2912d109852945c4c10cdee93fc198dd5d0cb41833033958cb6c0bffb8adfecde0007a729f2d367e12069b28a3284a150a57e4748ff13bfacfcd457581cc07c44409d61808c1a0d07ce591ccaf806abf5894411cd78d6adb00a9a08a32c55f18d0b9f748ca1e73f4c8bc8b0c2dbf51c45c12cd4bf4329e38e0a52a7ac9f594049c5009361f1f779018c882ef76aa146e7e656b87c3ab615efd9f538bcbb9ee580251a19f1c1908644e2e3a0b58592b7cfb56cd702aa7d4f5c80b27c306cf2029f738ab0808048a35c73d23914013a6c8c1c310c5397f7e605f4ccba5367ea5153255f59d35721024eccbed108f96d818353aaa8e2697b66576120d90daa36d086f0dbe972c21d5df0438e08b755d6298f6385d1014fb274dd7c1ad3cbeb25cb0128586b226f78ac93b6e8f480d5b8aacf78dc30fa5e85f879d5308155bd6a48c2c28a4c85f0b92ac1731886d98124699c35aa79209649f8967ee3c4bf28517e077364750a220bcd54e718b89a11457ed57cc6be60ac60628d5d30b99084851aeb029dceba545b74f7cd1be5ebe4324dfcfec87d27c1fe9fceb9d40a6438a1abc0ba99738e17edb67daabbb453d1b5dd627eec988796150563545ff1b1ba6fcd825deda0cbdfb85bc499bc89af2f3cf3ac2daafd1146b002432d0d53bc3443b02b90ce2ddf1f07b357db87a585a4198ddfd30821544badd380bacaa42fade584f91ef71b5b5400e4daa89150c358b0a04da466a9ea678567a7e75b3c1b193978a931d360a4cab98c28b43d40197bac673608ff509ab53c47f866a26609dd1f7bb2da53b3a4ff028e9738238537a1b93345dc9d78ce2682b0ff7f05a5be4c604312cff9b0beb1f87d8a1c5bffa97d73d0ba101419c23aea7d8b5c62bcc9506d23f6c1991a2c275c60701a645188bfbf1792647fae3f1012f77614095815ded629bcd28eb018f86e67f7afbfbff83a01344595194770978bc0793b78e2d29f821b30a68a462df366e851cf49d48a93db985825de06c7930a2947593a011240a57edd1f90b627a4a5f46ca3197f4b391d2585853c2db406c99aa17821b7a9c1faa8b7cb6fe9955cfa03f721b94d1574a006b079b6125b082c7a09069cac974606cfdcabe3c6744b6b11d0dbf4a061ed03c41b55d166734e078301fead8318b311ba3783ef4392dc1c929b6abea0a1be07594d18034c96a9c84a0cfb90cfb810711b7f1c43205243fb1425c7a3a45ef297efb24f341856c430f6b7efb664175153648f297673d3fc3ee6831788af55c7f62fd57d971b39e99d1f2109f77fa2ccfe3ce13073f33327d1d09877d3b0c82e875e3abdfafd2ab4894008ac2a9aa7fb757b88dc42c4b100391d5066269f62db5742657f0aa435d3ce64b234b178b928fe33ef8e666a05249af46a8fd7830b9e7ae3a13259f18f4af604413c6fb293536536d498aeb4b7cdf3ffd1fbbc5474064eb3d46cfe3c26bcb6781fc5563d560b5d9098be4c97f7db6d2592dee5a6d3c5ee8dba5c5ec21691c49dedc77b118831a23d75297921bf61b45757db331d5c69a88683e6a8bb42de4e4f3609b9f0a2fd916c6bfddea4c0a921fec1b19688023d1503c412d13d40fb49a12085ab9a18aa0265044fb25a645419c1dfa6f716e2cdbba1c339ec53987bf3bc08bd839a55b5a0a2e5a5b51baa968bff00c25411d8803f606623dc8e822021c14416a2a0d6295e7a453f2d9ea311bd7dc7b9d669dc83c4e72d4794a6141487bb3ac9b0fbe9d2b3c5dc4efa5ae767fc236ab6572957437037072fe8d479700de5156d197194b2f840dde8de92fc825" } }, { "event_id": "evt-37bee34a34288bcd608a371a", "kind": "unclassified_tcp", "frame_number": 6068, "timestamp_epoch": "1634913301.380332000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d7fd6bf2dabcb2469a4a60f6", "kind": "unclassified_tcp", "frame_number": 6069, "timestamp_epoch": "1634913301.380359000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "a4117c965d9d45a505ca5fc235c4ed1539daf5d036ff9c4b7bada4a208210d2de54fc9ea5fcb8b3c90e70cc5b3c7b87baa284d2729efb45768a6829140faf803df6a29a6fd826c09e467b814c83879fce91e0e3d604994e5e65b83e8dd561b7a7f028941ed0a60f117279e533ea7851bc495593ae24688d7b574b0f927143d2d7245097ad1ef896354f26a1cc85eda2a72214001582703554d8892cc44fe70ff5dd0f3d530ed9843a8751192d6e0b72b56e2120a803c6996180f669372b1961a45b9dc658111e1d6f43aaa27f252b2bd71294818d39970386398ba52947614d5a1af27b93068eb1c7f86a7af6f472884ffa178c9ae61d9854bbd283064600f25ccfb66059882e446eafcee6463d246ab2dfea6c386a4bc58097e2e3c9b45cc30673f7d9527911266dc74ee67df6ded26c60e9900b53ae8784e082de9ad96dc8e8a2a72389915d7fff23a96cc3c8043796959381074df70fe650c6c2b323cbdd4353f4edfd6351451a0c44b21fc9f803c1d9f669714057dfa12b6398a3afa33e1cd7c7c23310943e32927ab23ad4e184967c99d47c8db7470712e06d62c2bdb626ceb4ebbe273a1d3c541486b162aa6cdb16079d1d138de0e1fc5189e6d721eb3e8e31945f1cd04ff6eebf88dc588fffd7eefd04202646e2af30ebc2910083c0a0467b1763e1a36a594ab3a7dbda549b608705169e1f105e71ac687bf49a9e6ba88b5ca10de76aa0c88e7299cac6a46b95d3600a547e6c08770c74e7cca0d244a8351fe779437880d13e5b357eb3b6f7c9c455372927a0f9ca0a9f1543829f5354a967ba4fbf7bbfaf7aa10448c2d99b581b4ad7a9b766b266170086f702f4869f8268699f9022d5e0425c84aa328cc2e1ec2af4f5924d1229c0989743cb00378f95c60d2c3f32a400e3a2aded861da071579eb71d5c105ffe66b7e6177e13228c3214e2145f8416476283c92a33f544b58f750cac6bf4510c965140e992ae63b6e0a5261c696e6e86e8648d785c9bc0c9ed6d34a5d0b46921bbcb6c771d2306c6599655d8877248f08b232adc9d07a743168043657c8c0abb442ff603d8346a3514ff71991f74d5297c8e79b5b85ea5a4079b88549f3da4e8dbd0f3c5201842f6e7d0c8d74d17a0c9aef2475b866b573d720902f67f19748b6c162f46ebb910c9d5df21c05344c047286e19f7a26a6acb965f263f2de326246637dcb460280a360777f353bc13e86a68625e1650d099f11c3358efdc8c299972e287fdfb9f53a114251e14370e37d7662cb3e9f396f3f4bf2977956a1093de5be8d8a18b4e604ec6b47bc3a90c07543df3a61bfcb2b4146a05fce8816a7552af85bbc368ed96b82a45f344fce72cdfa1f5fbcfbed9a50d1d0c4e383425190cf6f0029787b07bedd8308f0bbf12b4d958ba12c386028c181b59090b87ca0055034384798eab12f4e18a2a60276dd4a283496bce25eb409de65e07dd571b8f3d3c658d7cf4b631a210a646fe78283c4c0b5663d819a926d3aaa83cdd8246d44cb31abf6928695e5e6d860d3a4da2e58933aa6c981e26f7651c27afc17f9c1567563a8285c4b817dcc0187cf7b29eb8fecd7258b4d3ea24ccecc4dcd47102650a2b91031ebd5315705e0793b112a6bdbfdeedadfdff2749bca6e0aed36f0acb3b10bebcc539dee5f01417f1f68521fd8c1bd7658c1535617beb79144386880fee9d6b836eb2d22b17c4327621b60f813271d5921393ba856a9005fa0a512540bc5b960c9aa7cf064f60fa3be07a8d2f96ea758ee9271820ea53d799764d3e3a68bf6e10ef0cf3a15a20c78b204c49705fcbdeb03" } }, { "event_id": "evt-e6bfb12a7f6abd42e109af89", "kind": "unclassified_tcp", "frame_number": 6071, "timestamp_epoch": "1634913301.396520000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "44f92929755fa2d538acd57a82f222c40221f9a69f03a43bd58559876344f2044c30a1fc8409982b16a1b440f77b7f223de26d12e074943bc6d896fdde8b93fc973196803c2b1534139cb9ee3c6adcabb2feba4b202b4a767724eb741e14ea28ebcaeb16c50f7b20b2dfb734a949d94913f576bd9d549483935e752f20b3a9d18f12e91cc1fbc9108a42f57497a3c6b4b5e984cf5cd7bc7391ec581ffaddfed569d4a96bc25d67715fed160a2a17399588b000996f7bc85f6f6048698adc41928babb8bce3a0079201a5afc2504c7420932a406ec4f6836f94e51c34e5e714d865688c013bc8856d63f39a542f61068d21b5774905636a3942025486074b5da739fdefa8a58c7c52459e6896ae53a633c5a23c60fbef2a6468c7e90a9fc50041a758de7e362d8721d41aeadfe935c8f962b643764b2f84a4ffb50dd2ada21624b98db4b5cecdd26d75ae2c4fdacc619fd24a70a8163f2c4a3566cc7591ad9695fbdd93c013587f6ac9a2f8a0830ebcf31c9b227b40248b5ebef53ab6c268e34c4aa9d4f60a56ca476572def894aa012faafe158f93861b28345541addbe6341b1658dc713cec7b59e6a5974165b8d48144f92cc2337a73a3bcb5511edf873b1f51efbcc3a3252299ae23e672ca540909c2a7e54fa730a5b011576926408a6343d60f1fa1ed15e2e2e300e8ed100b14afc19dec5bfd25e5b158f0f6ae2d4852591bdf1fc55106a81adc11cc18372d66dbf2962c14a011911323265ac8a33c44013a8d4f19ed26266fbce801ed24c9952964f49efb773370336b57a0f9c39ee75482e9f8a3f99e2684f239acd7cfe4222aa825ebb05d1fbf39eef2e39dcac3bab548419dae5fb8c06a80a6e38773af57364b7253b18caf93aa1e4eec552680e51120fd922f698395a2711f7271a07936130f90095f55c53b22e034acdc0e019c5ea699450d81c1b0539fac6cd5b75118eaceb305364a8bba7b14731c2012f3634868d888cbf738cb6060c927f2ff551ad6a33a6024576739c8f451b9be3f9a514df6ceb0d09be524c4785d17dfd19d029654cfd54efb9cd08b850f5bde214623b429a4a7cae013392b91e270581d8c7080613d567df15d0097837a00ba6ea5a27b4a57849693e262689262578062b451a2b98d2cf2cafc79704d7a1b2d2128790f30df6b3fe2eb6528fb095dd8b33188bd1634af3f57346cdbd8d879747ce31310a9944e82df64802b1f693d4cb76b4585ccae93cf8b2bb3c0715dc35f910b2b14498a72e8554da5914cc84d67461c95d797d7ced7443527e98f1cda301e0a38e1675c5d43d90dd3f393124b1890fc7b87eca7e0299390fba783f74db0e8c67f46fa2c78d5d688fb400cfbb1d80bd36631d11a97cc955a3ca01ab07bdad96f115f8a8fd14dc832f83fcfc25427783ea44b88d51dd84abfc85a164996c75e12aad727c4f214ba5c6527e7cd96acbd17d0dc4100fae5c9b09d24de74a3ac1cf1d18b272efdf52ca4203311f0318c49bcfa5ee84095e24a3ef87c08e388f1a873016a049df51b6e7b1be6650c6d432bd0c341f4bb682cc7d9e22611e29da53be6b492c7923c2eeef2a665c7554955205f7409eaf70c4262b8938a8ff05547370967d63f70f64aba895cca0c3bb9844c77cc35dff9e20bf609edcced0d7a614a2c2c34b063ba21b06ad38eed8e4878b5dedd5774f9ae2850fa161e0d7699d0027468bba16ff15a867f29b671d8df0cc58ecd92843d3bb5570f848f0e2ab58b78537ebbe8d9e96fa6004a2849b1d326ef23630e18b5734597b00dad581008695f9351bd6e837efc9476f1dc3b1a8cf2dbaf06177c24582b5504e7de79cd7303a350f214a949c686c9125f4ed9e45ac7b23fab20c0c4d23b8c491e614f3909339771a259016cee2f838a12f005a69e5481d188301956691edef10951bc54aa7cbbc0fd10" } }, { "event_id": "evt-f9215cea967ebfab5d29c084", "kind": "unclassified_tcp", "frame_number": 6072, "timestamp_epoch": "1634913301.399667000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-86259a532dc2046c209c0aca", "kind": "unclassified_tcp", "frame_number": 6073, "timestamp_epoch": "1634913301.399823000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5382a1f0364785067f1178ba", "kind": "unclassified_tcp", "frame_number": 6074, "timestamp_epoch": "1634913301.399839000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4ec8f0b8cb098f4ac6d40744", "kind": "unclassified_tcp", "frame_number": 6075, "timestamp_epoch": "1634913301.400147000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-48efabde679ca015f9549467", "kind": "unclassified_tcp", "frame_number": 6077, "timestamp_epoch": "1634913301.400233000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac3f1211a9d889073b0deca9", "kind": "unclassified_tcp", "frame_number": 6079, "timestamp_epoch": "1634913301.404160000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-817801cc54b6cbd7cc849754", "kind": "unclassified_tcp", "frame_number": 6081, "timestamp_epoch": "1634913301.589886000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ffd42c6e0fedf7cf03459806", "kind": "unclassified_tcp", "frame_number": 6082, "timestamp_epoch": "1634913301.592993000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-01e0beb8a238670cf0d48eaa", "kind": "unclassified_tcp", "frame_number": 6083, "timestamp_epoch": "1634913301.593282000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2d168a436ea02c50abce5750", "kind": "unclassified_tcp", "frame_number": 6084, "timestamp_epoch": "1634913301.593320000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ffe185c4cbdd7271f777ee4d", "kind": "unclassified_tcp", "frame_number": 6085, "timestamp_epoch": "1634913301.593459000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-383c059d03033d553125f087", "kind": "unclassified_tcp", "frame_number": 6086, "timestamp_epoch": "1634913301.593473000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e5b73b06c6d1ce5a6e7c02c7", "kind": "unclassified_tcp", "frame_number": 6089, "timestamp_epoch": "1634913301.595969000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7c7aebc83e3306e810dbb047", "kind": "unclassified_tcp", "frame_number": 6090, "timestamp_epoch": "1634913301.596219000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cb08a14e008e27ad931c02bd", "kind": "unclassified_tcp", "frame_number": 6092, "timestamp_epoch": "1634913301.599146000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-afbbb9a7ce0b64ad48302034", "kind": "unclassified_tcp", "frame_number": 6093, "timestamp_epoch": "1634913301.609159000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a48ea4d62b8cee90c8deda3d", "kind": "unclassified_tcp", "frame_number": 6094, "timestamp_epoch": "1634913301.609179000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "b7244b4d676e999269284e57b32f60bbeb6baa3c7eeb2a785521f332070453e30e8d59a1fbc29517d5d28106d1706f39cc469a1493caa2ee8b71f445c0740e56feda6750839baf62c420b3bd754e8edc05167d4bc0b88ec2ff970e5be5b30a159c7e20e8392737a6bae02de886b6e772762ed83f4e653b8a89f74cefbbd3de3c09e0a16727b477a24120e5803237147aec83d1e140abf2c4b4034861d77cf3dd5428906d5db40668e1c3ba2858c8f506b5f770633a5a2c62df903a9e2c14f0835676472ab9e0ea17c8b5f3b415becbf8608b33b2c071bd3b8036519bb5f5acfd72a5909ea22a8c0f863e6011006e3af97ed9cec12cbc029687d90c74a36d418667b19f7fed310b796f2d3527ce41f314941ff7028533d999583569edef0878138da2261449bad9d9787394fe398296c8afbe817da0e311d2a605647ff14333110e600357958b545e0951b51101c7711b5dd0e1f20401ba474cb9fd5abe53bb2decc37f85053eb0a41e3d50f1fb201c50d89792adc94cfc1c12049ad8ebc29dcec9d7841d50f87bebd0787e90c835f7f8d33a7ff654cec44190516489e869fa141306dea78d9df6499c38143d691697c08b96ec8eb4e7f6bd927fa28d2892ea163acb3d80c1409e632b024a92ceb3a75c710f803e4456807da398ff321363a0141ed6f253e77746ae837101f2624101b4d39fab8abbf07ec734b600f79afa6bb5915a0a5a7a1fcd57aa3f107b9686c1bfdbbde5461c8096d381f1c1adf812d8f7ab564f40151556e92d2af79743cacd043a087da729a26221f516936bcc2a70d518ab4433aa9e24586a89633e5248d01e6c6849eb963820bc977d6d2be52c66fcfff52e3002b1c296ce3e2cf7debad5576dfc166c0366109c019ae2f4704709f68c031a270e49276a110f59329904071ac323cd9a381543c3547c6f3b00dde884a5cc27b68898e4584887291d25eb0e6514becffd4f99ba8e6fd7af2dbcf7783cd89729a1e50a572eff07d3e47afc8dcd164ffd2a485eefaf7ea243572f5c4630a8affa02e0facb9a5f3bb86030949d8a2d3f23bbaa32778d48779ced61f346eec1c79cb1df05e571abcd2673e54c3b3bbe2017d808e2511a48cbff524194bae4b7f703f24815d871ef296a404899a6c98bdaab3c5c1dc2b9badf8618be46759ffbea1557ad91ac0dcdb1e9497a060833a73a2de4cb109ff551856c0dbfaad01d265d07f911494a33ec66bd46b51aedc61c64b1b07488ee5df4d11534ebab75ba872da48082017810e5c44308f975f9b58f2158306c7289d8fb32b5e3535583cfcddf220fcfa4aeda2c485c17fc0482a9bcc557076c39ba58b69c1c624ccb5af7d4aecc4732d57829e380b4b8b9aa75958f3b8404da969716a8ad106013f9a5c04e31fc74bcb9138cf2604dc4957fc64fa64fd2865568dd2f02917a6956b04fae39fb5896496e9ec8bb5437a3bfc6489f3fbb2cb0226d351d7a425615141279304b690fb5b7ea6da2c2d636b93b5988d1146ed9a1eed4076a51aa0291c2e8f60dc87287bfe533eaa8cdef2f9ce398e838fe7b1dd475973a80ba88f82dfa2ed3c985e25cef4b5c6065e8322f1906b9b40e7dba729567d7cee49936301aec1efa16b07b48476dc033833e10e858ddcf9df667ff2387511e1de4228cefc930f5c64f0bcbbaabaa44eaddd705ac9ae179597cbb0d2b1db18c55a5bd20c5de876f07e352e3b7d3c78fff1497dda44e766a2d1544f6aef7c7371125677de394d9f187d11137596412cc6e85eaf719961e0d237cfced71e831eb9269e63b6758cd24540e31ea460b84cd6deb578502ec189704384dfd73d7ea93a330295d8cf7357e7e32ad5c9463b042372074bb353bd66380039e300a4d52f099e2ac3ac918667aa40ee77d20dbab3f8388ad89e08a1e897edb29f5a100cbfb4e3ab6e289e247004c2166e6f1e0c059bc7c50f9cba6774f341b5ca764ee985e3f86e7ad5ba5537340e48201a4d967fa0f83d02444a2726ccfa58aaae59836da51c7505db79e8104a4ddc3f941ede977c6904c6d8b15f5f03ddc2d275d55" } }, { "event_id": "evt-307ba6a4c082c700b39f2754", "kind": "unclassified_tcp", "frame_number": 6095, "timestamp_epoch": "1634913301.609192000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e60c7284a5ffaa132289a67", "kind": "unclassified_tcp", "frame_number": 6097, "timestamp_epoch": "1634913301.614637000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-25c286d36dbaa7701484250e", "kind": "unclassified_tcp", "frame_number": 6098, "timestamp_epoch": "1634913301.624076000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ddd1ca96a028e66ceda2a136", "kind": "unclassified_tcp", "frame_number": 6100, "timestamp_epoch": "1634913301.624405000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "91b00b4932561b7f7aa6e5dc236b91a2acc945f6cfed491fdc7878d1a453b22d1bc07e7af4ae8eba014c990dd603971a0cd558f88d6803d92f956899aa0c0048aa7bb25c137c14fd86c3e807aef7af682a0df4f7891d874c6a82e36cc1081b54fec1199143e5b21c81d5e8040a0c76aaabd1e458d8d25d2b412a01e987414c516b735782b8c07d6f0a5f5f9dd9445886e87275f9518ccbb4f2edc32648821c3312178cc86fd0af6e66effc3cefc89f8ea59031cb400d61db1fe1791d0677ebb98853b9c7f4d76ec41a5524f3e49afdf98b84574923f303f1324a646ef8f029fa82741fe92fbd46f381a5de821ec5329025a7716f9d5655ab1e63658951a813567e65353574b319a41c978d355258dd971667b8777f83cd58d1a5b503f178530626828f21854d4a4873ff06f8ef4a96bd89c279081333d6f62081f28e23de3e726075e80f45b3e6934f5083ef88dd1ac79418eb80eae31736d0c0c261b29fcfc0e88d19bf6ebd17755417cb7bfa6524e0d27da263c6b14fb31461ee8c2f0e0a5472dc5f1b2da0f941195c0ad13b723404d9ce3a2c0eb1cfc2924f56518a6427c547dc1dfeb0885dbd5584f7472f2bf7fe67d9baf1814f18626b44be3c0fd6dc1bd04462743d0e679455c2d875ffc9526cfee28ffbd3f799d85f395de224d7602d0c7d76c65f5b077f3d8a7c32bb4f34598dec324aa1c92ea3db0fbdd8c1f07fac12af87b1d65653215b431a01ca733f5d553f724e9e74e53ffb04c1e3a5fe32ee220401ef728e995d6bcae3d586827f05251bb54fa52c134e23d4327acf8a1bdf7762a4827f24cdff3834c610e95865fa1b10fe4a69f5dbbd78911ea96da670a5473298a5a08297145392882a312ffd7cab93a01cb014f4f0b280e677603da9de7c5998d583c869d7c12528134c7d2e51fa248fd9dd3741ee8f99f1ecf48b5b876e7798d31b6aecf0a8a05fe6b91b1c1e9374d30b9aacff7a7a0f0bb59fbd177818cefac4067d8c42273c19d69c01106d2234aaa0bf2316cc6aded65329862f795d4f9c1342b49fc3b75d828b2cb821da2f8f3e84ffab699d81f453972e7b89bb7dfc091414c4329bd27ac01399f46878e1b438b40bd1d8483beb92d687effd7456f00a34967ad28e6557b874e4b77a9e8cb7153cded783fba9a0e4c016c3c123529c08bc383bbfe63098bf4df247cad55af58f0b561e0bf7a2cf88bc40f127c63971d7826b082274b80c29c2caf8d992d9d0f5578b9303d6a2a0a2c0c145145954af75f27b457de2be165bdcfc08280bfe46c61fda36c85cf4ba85e034b34a25d35e5671395145ae07f491d757e52d01bfbfbb8d0cc717118da7b7b6961c24070ff4293d33aba3f8412371ecbc033fcd2858a6525f9769295fff8bad09ca671f7f85926828242aceefccfc154e4fc2ad92481bb6f7c1a647523030b61c33d0071a582ae6a3c97a5c9c7726aeac06a47c1973b85af2b9088726bbcc713028f2b45963f84566b384ec0ca777245de95163dbb12807a9f19a3c7b7869cde91f336e67a6290baf52e8920c750b75753a74c5fd6603a91630b1b1f5e8e105f07510a52058ac15e0e485fc09e1889bc9ffba676f9b9f9a6250cbed43cb6c9542da095efa7288efdc665a9ad7b0002c088414a0422e03a24c9b6238a3cb2190782373cfda7f21dbe50d26ebb31931fa58b49c128d8aef6a2400552b2305e8c144efa7973657f53e49e07df33f2f110d3bd47a1c4d08a2b0e51dbe166c79455b51591ca37757d05058275f8d83c5d5b644bbb8348ff56c9c3c7496e187313875d4bbad685e47d3d8f3af0e698d37cb1118d4b99bff25573cfab0fc2e55ce0975a7a462adeee57b044973b8229263b1165d761ad553e7d8126c7f7dd80169ceb3614e5fe7cf12ac968c6f54ed96d109ae5d0813d4398633733b6203c552b27bfc4454814d1641b57bdb6378f668540a7c640940715247d098fb87739469869148993edc132fdcd34524e07a407abdc993fea83a069e43c68e387eb4fdbb8b71c590d240ca9cc8db4012ec5144508b914367da10c6885768c1" } }, { "event_id": "evt-f79903d6ee04f322fb67ff83", "kind": "unclassified_tcp", "frame_number": 6101, "timestamp_epoch": "1634913301.624413000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a0053d9d12a2e5b928aef97e", "kind": "unclassified_tcp", "frame_number": 6102, "timestamp_epoch": "1634913301.624419000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-43b77a2900c048181facf666", "kind": "unclassified_tcp", "frame_number": 6103, "timestamp_epoch": "1634913301.624425000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "25f02e762031e25603813abd1f12b7140302bc7fe25ca2dbb6b950746ef8a44fde3dc35ba73b3114b80f2a1eab511a61d4a7fff890da4b194699d29a4b86a259aa52dff26fe04c511155eea29168a864699331dae53aaa3b02fabd56da264e4e69a851ec70aa30fee04f17f2e59ecc4b07ee0aacab0d2e38817f360b859dc7419b9fbe3f02e2ce43fae5437b4c907b6e0c8941e6868a51ad9457e095da1c6ab2d2200b3f51cbd909ef32387ff1cbf739e463ba2d0bf1575f12d2113ee72babed2d2f1ab179234c3f0c44761f31c9c11715c0a6985c36ac5f1f97682c23abca44372894e176db402b0c4adfdee4c4c800cb55aab786a244fd57f559888e63e2a1f31053bd50a16879ef286e7cdfd1222e934e02068649c763afa5756acfa735e6cfacec9131ed24758002dfab7b72de5d8729d5413c377073c7e778b38e9e00f2d8fb7fbfa47c1ccfacee4a3a93737e0d82e887300b953452ebb809c56f0dd36865c4f7c7b793e4f04b07c812853dfd43e33ecb0650d816b1cf830215cd6b9c54f69a94f3caded696a34c606acfb21645a273be400a08687f30332c6218910dc489ff9bdcd017fe1b4fe798dbcfb824ff05d32b49e9d13c47870eed06d30837934b0f8358681e6c6564645d7283450542f8bc94644cda81473f509829e03c5b34ec7b432a2b10c1280aee83cff480b406d5fc8c9ab7ddcb99cd42c84d9005021a5e8d08e78de46ae10cd6b35569077923d4a5e69db45e46bbddc4d04ddffb0ad9d922a20c360ea50534ed7ed80ee0eea63c5098543422f0c55bd3aa37fb3e7f50e38e6d6bd70508706b460295f4f9cab6a6ff56881f518c763eaf198f7d18b614c14b4f4780dd5ce3e4713019e3902d5ee836aeedde805acc7b440c603d2cd2a57d653f55e6d5af81c312ed0509c47d02b7caddc6331136316cbb730b2531ad126de839096c16a92c4b76e8b81d946296792dba04636d9b65c676247afc064577481e99ab9b9d30cf3055065db311517f31cd11faeb4d68b038a626205ba62c844cfaaf755fe0f0f22444d8f9b84e8d30c98ec253b2dd8a20394f4c19fdb41580e9b3990db0c10e596c507a491406d10e19050a73adbc8aca0dc36b06c5b8f9f56bc818e506c9a7ff8c526f5dd60f25cb5f4f6a4e080e383ba4e4c56ecbd34e48064f77418af6a93d09f2d35de53c02a64d8c3a94b4c996059a6014e44f5c4a1c92597e5e079ca5fcff2923d49ba7290f42b9b149f52df98d16402d06f25ab8bf42a4e17a697f651f095396be4e0d11c29bcf0a085c85a0a811536115a7da366170b98ed385aa0c3d8e5f671855c96049fb313e32c316d8c8e76806b7ba3d918c8661e07b48e84b2e5a77bc2bbd8343f6668496f321bcb274a0d31267fe17caaba145deceaeff71266fd07cd46a6840aa1a9607c1a73b147c539927912107dddca62138de623dbdb73caae87c760d185f4ea22266c04820b68d238a1a455c60561283e781dbab0330b5711b1727e2125d6fd510468d5f59f19e7ebff014e2a2faf7f3dc5d24d136ea32d28b6032aeb514f216d3d3cf3f0aaccdbe5532cb08cb42362dd12a469f94fed743f65bc59ae3908ec2bcde2eecd6190fd823cd341dc45f7a124dbb8c07a7cfe16c313c90f27f653b7a7cbad3ae504466cf3cd4e3abf7b924b9f7fe38a286b6fc5f08f187d1552a6be1bff575d69dfabd4fed0e30f81e2971cbc540ba52c2b9422f99ebc8d32c081359fd4a6bbb85cc1c3f5d91a8df3eb26abbc7865803f310ff7f083c1c08499a5e82cbd9ddcfe86b9a72d9639e1d475c1b71f7e995facab81b239ffa9cf078168593dbd0a6bcf60e173cc723195ebd6a91b8d623f0c783551a62ab1197272f659356cbb7f1946445b0220498267926c7bb58232495e7c126f730184de8becc9b8f4aab53532d4f0fa43558dccd1f407402df8538e96fe4a917dcb2a7307bc13aad3acde166a2d0a01d2fee2a038fbdc5fc4cb47c40aebfbd13e9c82685983b9eeb450487b6af1c40ac4317f67f1a3ea24d1331b5ab07ea25448d3ce4634cdc2efd7d21f1" } }, { "event_id": "evt-b81e2b8975957643ac4de9f9", "kind": "unclassified_tcp", "frame_number": 6104, "timestamp_epoch": "1634913301.624430000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2cbec7f77a18d1c73ad7e5b5", "kind": "unclassified_tcp", "frame_number": 6105, "timestamp_epoch": "1634913301.624436000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-146d947eaf06001c8f7d58a7", "kind": "unclassified_tcp", "frame_number": 6106, "timestamp_epoch": "1634913301.624441000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-97df9401b5c5c1fe92c6bbc7", "kind": "unclassified_tcp", "frame_number": 6107, "timestamp_epoch": "1634913301.624448000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-29f2f50c874f59df5728fcc9", "kind": "unclassified_tcp", "frame_number": 6108, "timestamp_epoch": "1634913301.624457000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "0e145c89bf55e0acca4ddede9c1f89e2a60e4dc56d6da6d5a61d04ef1248a9bd140228872710e8aa8d2ff3e09381b1cc835818b4376e7896f6f22f97940742e64f0feba44d9bc74bbc847f302a1a1cf05cb6213d61352f762a8884f3185d5816b84000eb30f5348a667a429cec2ba8aafd2edb56c618447120ed9efa81ebd84477769fa8cb44fea52c3ad572b5053a7bc480643c9d3b3a32876f84522251bd7c265802c6541f10ec1d045ab9ab4e463f1e6d24cf85abafb178f2e295ecb73a7383b30d543e4def966cdd85d13dca1a63e6b644fd57656aecc98d332bd94685629e75b061970c2d08d6473eea3c117ff4e3b3cedc053d517995a7c93e63c9112fa2ced0b0e0f9139e047bfcb5fc10b2a11d8a8605f624162ffe09c786d032b06435bd0f6b37b0a53e2be7c20cb1456bd6fe06d3b3172b04a2f6ec4b75ac5fb53a6a079cb0eb150a099490ccea57bba29344a09a2e4bd6b33dff7e6238e5a3d511c2c635c77b3ecaac5b61320481fda3490039728e0665d951eed12eaf2f55aa4959992f9f9054728c9bcdcd84e63e2120f668d8751605ecea3bd5bc8bd03e2a02d0e05ff691396f67dcc95be8b74d9ebfa60bdec95ce111b2a00dec4718f95879cb8993490b587efa6da56f514af30c9e8055190ab4707e452f0445b80664336eb84bda4f97d9b4a5ac172d628d6a1a763ec3274ecd4a2031533d50d1e9a0f052ada24f6d0ab18bf0bc06a543a2ff71edd4e3049c0549f104173c4f8cc68010c617471d1f46fa84285ef0918855f23b4eb217eaca15eeea9a31961b78ecbad8e7809641daae65982ab168773f643d289ef7ea3c0542dcf4e7d3d8f04ca013388081f600e2d7f53dde68241aaf8050b0c7598b2b18825052d07b85531c63be1ade209d2e7ca950f5c872ac039a40afda3507fd3fcd442abf461650e6bdd7f16f52082997da373a55a7565677cfd74a2faa3f061915028aba791a84332173c49003" } }, { "event_id": "evt-39821867de8768982d38a484", "kind": "unclassified_tcp", "frame_number": 6114, "timestamp_epoch": "1634913302.165409000", "src_ip": "37.0.10.22", "dst_ip": "10.10.22.157", "src_port": 1187, "dst_port": 49743, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d60bebf2f8538ff62ce9b9f3", "kind": "unclassified_tcp", "frame_number": 6116, "timestamp_epoch": "1634913302.342662000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "0800000045e17b52fe218683" } }, { "event_id": "evt-aa1f92eb2b708ac6809d1c70", "kind": "unclassified_tcp", "frame_number": 6120, "timestamp_epoch": "1634913304.986186000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8040211267be3e36df909267", "kind": "unclassified_tcp", "frame_number": 6136, "timestamp_epoch": "1634913306.739480000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49669, "dst_port": 445, "tcp_stream": 80, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-53f7778ec1f54fd42ec9fd59", "kind": "unclassified_tcp", "frame_number": 6138, "timestamp_epoch": "1634913306.817316000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2c65180a33571657449a9eff", "kind": "unclassified_tcp", "frame_number": 6150, "timestamp_epoch": "1634913310.034052000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-da4764ec1299f8bc02abc7cf", "kind": "unclassified_tcp", "frame_number": 6159, "timestamp_epoch": "1634913315.079859000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-be33a3f2e3608c42263076d1", "kind": "unclassified_tcp", "frame_number": 6166, "timestamp_epoch": "1634913317.909350000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-29bf2cf53ec4b61efaf96a82", "kind": "unclassified_tcp", "frame_number": 6178, "timestamp_epoch": "1634913320.096102000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d67f87acb6aba1bc99c97525", "kind": "unclassified_tcp", "frame_number": 6183, "timestamp_epoch": "1634913325.128516000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e2dab9881fa113739e705f9a", "kind": "unclassified_tcp", "frame_number": 6201, "timestamp_epoch": "1634913330.128845000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-87f6b377415480db3b0ed19b", "kind": "unclassified_tcp", "frame_number": 6207, "timestamp_epoch": "1634913335.159928000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-503ee776ffdf34ae7de35a3b", "kind": "unclassified_tcp", "frame_number": 6209, "timestamp_epoch": "1634913336.849430000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ebc1680156b1cc8ba7c5a4a4", "kind": "unclassified_tcp", "frame_number": 6211, "timestamp_epoch": "1634913340.190517000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-393c88f488ffa4e7678f6b96", "kind": "unclassified_tcp", "frame_number": 6214, "timestamp_epoch": "1634913345.238268000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-00cdf650a85f7d67d02052dc", "kind": "unclassified_tcp", "frame_number": 6478, "timestamp_epoch": "1634913351.239083000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6a4faae66b33cf3b7f733a86", "kind": "unclassified_tcp", "frame_number": 6520, "timestamp_epoch": "1634913356.269892000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-94b6f7c634d8871143950ac9", "kind": "unclassified_tcp", "frame_number": 6566, "timestamp_epoch": "1634913359.331531000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3791610b7487975a15ea6d3a", "kind": "unclassified_tcp", "frame_number": 6608, "timestamp_epoch": "1634913361.316358000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-64bd74c86a0d7ba5e55c05ac", "kind": "unclassified_tcp", "frame_number": 6618, "timestamp_epoch": "1634913366.347645000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f981eff4daad0c030a366612", "kind": "unclassified_tcp", "frame_number": 6631, "timestamp_epoch": "1634913371.348707000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-466fe77311db0723373c6b8e", "kind": "unclassified_tcp", "frame_number": 6659, "timestamp_epoch": "1634913376.411319000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-443b7f1d12c78763fdfcb413", "kind": "unclassified_tcp", "frame_number": 6661, "timestamp_epoch": "1634913377.926280000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-24250264acf48cc938ce07d0", "kind": "unclassified_tcp", "frame_number": 6663, "timestamp_epoch": "1634913381.457992000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-14ec687da1485103edb6eeda", "kind": "unclassified_tcp", "frame_number": 6741, "timestamp_epoch": "1634913386.551765000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9119761ec41c4af6439d40c9", "kind": "unclassified_tcp", "frame_number": 6743, "timestamp_epoch": "1634913391.582452000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e933425f53b057cc0420bc25", "kind": "unclassified_tcp", "frame_number": 6753, "timestamp_epoch": "1634913396.614244000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2f44e97fabe0d9f4f34e009d", "kind": "unclassified_tcp", "frame_number": 7122, "timestamp_epoch": "1634913401.645471000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7b605d058b6abdc5de0a9551", "kind": "unclassified_tcp", "frame_number": 7124, "timestamp_epoch": "1634913406.661768000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6f3c1817e97d6cb434913050", "kind": "unclassified_tcp", "frame_number": 7138, "timestamp_epoch": "1634913411.661896000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1ddb91c2e1bf1ee1da7c5489", "kind": "unclassified_tcp", "frame_number": 7212, "timestamp_epoch": "1634913412.889786000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c05d17770b252e16ed3dca64", "kind": "unclassified_tcp", "frame_number": 7243, "timestamp_epoch": "1634913416.709216000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ee639399599efd8d7897f53d", "kind": "unclassified_tcp", "frame_number": 7252, "timestamp_epoch": "1634913421.740480000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5c92275276b8492f6bef99db", "kind": "unclassified_tcp", "frame_number": 8446, "timestamp_epoch": "1634913426.740294000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b6f3207a627d3bb358db945e", "kind": "unclassified_tcp", "frame_number": 10701, "timestamp_epoch": "1634913431.802296000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-85ba6bfe2915fc991c074bc2", "kind": "unclassified_tcp", "frame_number": 10703, "timestamp_epoch": "1634913436.802778000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-34c1a27a2ac4115facc9159a", "kind": "unclassified_tcp", "frame_number": 10705, "timestamp_epoch": "1634913437.254465000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-af6d1c05ab472267cdfa8341", "kind": "unclassified_tcp", "frame_number": 10709, "timestamp_epoch": "1634913441.850010000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6a067940ba10f2fb9f085ca5", "kind": "unclassified_tcp", "frame_number": 10711, "timestamp_epoch": "1634913442.921665000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5497b8fc7c4e58a635a1b214", "kind": "unclassified_tcp", "frame_number": 10745, "timestamp_epoch": "1634913446.850296000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-db42d64943e5af02b87e2666", "kind": "unclassified_tcp", "frame_number": 10755, "timestamp_epoch": "1634913451.865039000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d7198dffb6acd58f7957767c", "kind": "unclassified_tcp", "frame_number": 10759, "timestamp_epoch": "1634913456.912153000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b3079ffe91ecc261a868a8ea", "kind": "unclassified_tcp", "frame_number": 10761, "timestamp_epoch": "1634913461.912736000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-77d8f79e57cfbd98b129a793", "kind": "unclassified_tcp", "frame_number": 10763, "timestamp_epoch": "1634913466.913070000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6041447af39cc45cd22e198e", "kind": "unclassified_tcp", "frame_number": 10765, "timestamp_epoch": "1634913467.270712000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-45500de7a31f38bc9dc6b64e", "kind": "unclassified_tcp", "frame_number": 10773, "timestamp_epoch": "1634913471.929133000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-600cccfa098a63c488c46a28", "kind": "unclassified_tcp", "frame_number": 10787, "timestamp_epoch": "1634913476.960568000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8e86f57672468c705b9a0496", "kind": "unclassified_tcp", "frame_number": 10837, "timestamp_epoch": "1634913481.960587000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-df8440728edb2fb25be6fab2", "kind": "unclassified_tcp", "frame_number": 10839, "timestamp_epoch": "1634913486.992114000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-546d0751f81d176a5ad83fe5", "kind": "unclassified_tcp", "frame_number": 10847, "timestamp_epoch": "1634913492.023652000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4f2209d51e325982771ad5b7", "kind": "unclassified_tcp", "frame_number": 10863, "timestamp_epoch": "1634913497.038712000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e82cfa6f9ff7e8e14a969680", "kind": "unclassified_tcp", "frame_number": 10865, "timestamp_epoch": "1634913497.960732000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-05b15b1e5f82206a487182cb", "kind": "unclassified_tcp", "frame_number": 10867, "timestamp_epoch": "1634913502.102260000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9d8d0ccb3bc1ea5b456d55db", "kind": "unclassified_tcp", "frame_number": 10871, "timestamp_epoch": "1634913502.914063000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e6ffcabee1a0d98080f862b4", "kind": "unclassified_tcp", "frame_number": 10876, "timestamp_epoch": "1634913507.116602000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1840990c5f39b202b5813cda", "kind": "unclassified_tcp", "frame_number": 10880, "timestamp_epoch": "1634913512.163946000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-44882f24e36961e954d3c726", "kind": "unclassified_tcp", "frame_number": 10882, "timestamp_epoch": "1634913517.195427000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-95323369414900bce4cc3d1b", "kind": "unclassified_tcp", "frame_number": 10886, "timestamp_epoch": "1634913522.274566000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5b2f957c5aa5b26af41eaa4e", "kind": "unclassified_tcp", "frame_number": 10888, "timestamp_epoch": "1634913527.290029000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f0cb1c7c8c35e0011d4b2476", "kind": "unclassified_tcp", "frame_number": 10889, "timestamp_epoch": "1634913527.290117000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d927944b60a6dcc2517e24d0", "kind": "unclassified_tcp", "frame_number": 10905, "timestamp_epoch": "1634913532.353141000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-67042cec5d4973c2ed9a19e8", "kind": "unclassified_tcp", "frame_number": 10909, "timestamp_epoch": "1634913537.399192000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-839b3e28ff5d73173d8bd802", "kind": "unclassified_tcp", "frame_number": 10911, "timestamp_epoch": "1634913542.415462000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bf581eb5e1a265387fdab5f3", "kind": "unclassified_tcp", "frame_number": 10913, "timestamp_epoch": "1634913547.461303000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8c198b8359d0743a39793f66", "kind": "unclassified_tcp", "frame_number": 10917, "timestamp_epoch": "1634913552.493130000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1c3c0d509f10919435312a03", "kind": "unclassified_tcp", "frame_number": 10923, "timestamp_epoch": "1634913557.494741000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a187fe85f701702a3d72503d", "kind": "unclassified_tcp", "frame_number": 10925, "timestamp_epoch": "1634913562.493713000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d39e101ebcf88c3c86f37fa7", "kind": "unclassified_tcp", "frame_number": 10927, "timestamp_epoch": "1634913567.525892000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c81d57a43ac51bd9e072479d", "kind": "unclassified_tcp", "frame_number": 10929, "timestamp_epoch": "1634913572.557499000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e4840c36dff8bbb4bfac8959", "kind": "unclassified_tcp", "frame_number": 10957, "timestamp_epoch": "1634913577.586786000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-920c216a5994d3e642ace423", "kind": "unclassified_tcp", "frame_number": 10965, "timestamp_epoch": "1634913582.603931000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f21ced7a2737e227b471a285", "kind": "unclassified_tcp", "frame_number": 11020, "timestamp_epoch": "1634913587.635033000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9fa5e7ffda6174761d6c3d69", "kind": "unclassified_tcp", "frame_number": 11022, "timestamp_epoch": "1634913592.667330000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e339e55452e83537a4705876", "kind": "unclassified_tcp", "frame_number": 11029, "timestamp_epoch": "1634913597.667022000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-54898cf70bc7f417672c065b", "kind": "unclassified_tcp", "frame_number": 11031, "timestamp_epoch": "1634913602.666973000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-336772bb07398d5c7eff2701", "kind": "unclassified_tcp", "frame_number": 11033, "timestamp_epoch": "1634913607.682760000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-36243fbc7fce09e984ab3893", "kind": "unclassified_tcp", "frame_number": 11062, "timestamp_epoch": "1634913612.744961000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a855e6da53ee4f8bd148ecfa", "kind": "unclassified_tcp", "frame_number": 11064, "timestamp_epoch": "1634913617.776983000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-87b4324c5b43d1eece5d2390", "kind": "unclassified_tcp", "frame_number": 11066, "timestamp_epoch": "1634913617.979201000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-91967678ba1cbeacb529a0e1", "kind": "unclassified_tcp", "frame_number": 11070, "timestamp_epoch": "1634913622.807708000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-63a536379e5b5ebb56f687a8", "kind": "unclassified_tcp", "frame_number": 11072, "timestamp_epoch": "1634913622.949322000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0fa1a702bcd36c4a3b1ea265", "kind": "unclassified_tcp", "frame_number": 11079, "timestamp_epoch": "1634913627.869739000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49743, "dst_port": 1187, "tcp_stream": 232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-444c280cd4c68cb0319bcc05", "kind": "unclassified_tcp", "frame_number": 11087, "timestamp_epoch": "1634913637.194756000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49746, "dst_port": 1187, "tcp_stream": 265, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bcc124e0a6bc63022de751ad", "kind": "unclassified_tcp", "frame_number": 11117, "timestamp_epoch": "1634913641.668813000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49747, "dst_port": 1187, "tcp_stream": 267, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5cc72a3eb7aba0330781e835", "kind": "unclassified_tcp", "frame_number": 11127, "timestamp_epoch": "1634913646.010036000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49748, "dst_port": 1187, "tcp_stream": 268, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d64c82f69e09cbb51e884854", "kind": "unclassified_tcp", "frame_number": 11130, "timestamp_epoch": "1634913647.308438000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-842825453cf6b321866cd651", "kind": "unclassified_tcp", "frame_number": 11135, "timestamp_epoch": "1634913650.334768000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49749, "dst_port": 1187, "tcp_stream": 269, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-85383656096144199e3a8d71", "kind": "unclassified_tcp", "frame_number": 11150, "timestamp_epoch": "1634913654.701708000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49750, "dst_port": 1187, "tcp_stream": 270, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-59d1dca36f6ecbf9f03f7675", "kind": "unclassified_tcp", "frame_number": 11160, "timestamp_epoch": "1634913659.090929000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49751, "dst_port": 1187, "tcp_stream": 271, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-31297eda12bd711f7bb03e46", "kind": "unclassified_tcp", "frame_number": 11262, "timestamp_epoch": "1634913663.421924000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49754, "dst_port": 1187, "tcp_stream": 274, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-62eb94f3a3d0cbcc4ba81d3f", "kind": "unclassified_tcp", "frame_number": 11348, "timestamp_epoch": "1634913667.805998000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49756, "dst_port": 1187, "tcp_stream": 276, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-65e4efabc5e6546e40cc1bf8", "kind": "unclassified_tcp", "frame_number": 11430, "timestamp_epoch": "1634913672.150248000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49759, "dst_port": 1187, "tcp_stream": 279, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d08132f41909f2041d5a096d", "kind": "unclassified_tcp", "frame_number": 11468, "timestamp_epoch": "1634913676.458751000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49760, "dst_port": 1187, "tcp_stream": 281, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-02546afa5cb1de04de7f99b4", "kind": "unclassified_tcp", "frame_number": 11478, "timestamp_epoch": "1634913680.796124000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49761, "dst_port": 1187, "tcp_stream": 282, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3da68a0d7401be49e96ddc58", "kind": "unclassified_tcp", "frame_number": 11483, "timestamp_epoch": "1634913684.059271000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-72e5df9de22e742d5960e384", "kind": "unclassified_tcp", "frame_number": 11524, "timestamp_epoch": "1634913685.160645000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49762, "dst_port": 1187, "tcp_stream": 284, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8b06fa7842d9fb1643bea50f", "kind": "unclassified_tcp", "frame_number": 11526, "timestamp_epoch": "1634913685.183999000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49762, "dst_port": 1187, "tcp_stream": 284, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d907d23c3bcae40d15f8be22", "kind": "unclassified_tcp", "frame_number": 11540, "timestamp_epoch": "1634913689.575037000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49763, "dst_port": 1187, "tcp_stream": 285, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5491560332f5c0d771a4aa7d", "kind": "unclassified_tcp", "frame_number": 11548, "timestamp_epoch": "1634913693.946563000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49764, "dst_port": 1187, "tcp_stream": 286, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-61eef78ad8cd15d3c120e2b6", "kind": "unclassified_tcp", "frame_number": 11554, "timestamp_epoch": "1634913698.356997000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49765, "dst_port": 1187, "tcp_stream": 287, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-db4571d3cf7db4986b3e8b42", "kind": "unclassified_tcp", "frame_number": 11562, "timestamp_epoch": "1634913705.715972000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49766, "dst_port": 1187, "tcp_stream": 288, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e80af21a1bae74409002ce14", "kind": "unclassified_tcp", "frame_number": 11590, "timestamp_epoch": "1634913710.063420000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49767, "dst_port": 1187, "tcp_stream": 290, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-241e58ff61f5dde7abf0635c", "kind": "unclassified_tcp", "frame_number": 11597, "timestamp_epoch": "1634913714.075890000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-6dc97dd044745374b5b6e4cc", "kind": "unclassified_tcp", "frame_number": 11605, "timestamp_epoch": "1634913714.508061000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49768, "dst_port": 1187, "tcp_stream": 291, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d34662f624a92d82b8909e43", "kind": "unclassified_tcp", "frame_number": 11616, "timestamp_epoch": "1634913718.897292000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49769, "dst_port": 1187, "tcp_stream": 292, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ff1be74930ea917838e8746a", "kind": "unclassified_tcp", "frame_number": 11744, "timestamp_epoch": "1634913724.291404000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49770, "dst_port": 1187, "tcp_stream": 295, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-98015f3a39005e2890e3435b", "kind": "unclassified_tcp", "frame_number": 11908, "timestamp_epoch": "1634913728.639803000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49771, "dst_port": 1187, "tcp_stream": 298, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-07674c509ddf436b4dec5b51", "kind": "unclassified_tcp", "frame_number": 12128, "timestamp_epoch": "1634913732.967177000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49772, "dst_port": 1187, "tcp_stream": 300, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-74d3c9699b3d894550b3edaf", "kind": "unclassified_tcp", "frame_number": 12288, "timestamp_epoch": "1634913737.289490000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49773, "dst_port": 1187, "tcp_stream": 301, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-27419d428237ed0d156a1556", "kind": "unclassified_tcp", "frame_number": 12448, "timestamp_epoch": "1634913741.721257000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49774, "dst_port": 1187, "tcp_stream": 302, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1d4fffbef657d5e574b0e9f4", "kind": "unclassified_tcp", "frame_number": 12488, "timestamp_epoch": "1634913742.968448000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-fd62e8324cad250f9a2e8291", "kind": "unclassified_tcp", "frame_number": 12537, "timestamp_epoch": "1634913743.716204000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f193f1952da62964cd4ed5fc", "kind": "unclassified_tcp", "frame_number": 12738, "timestamp_epoch": "1634913746.121467000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49775, "dst_port": 1187, "tcp_stream": 303, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-061dda51483412e01fe35915", "kind": "unclassified_tcp", "frame_number": 13052, "timestamp_epoch": "1634913750.656386000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49776, "dst_port": 1187, "tcp_stream": 304, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-aa025b6a67a3f45ce46dc234", "kind": "unclassified_tcp", "frame_number": 13440, "timestamp_epoch": "1634913755.002964000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49777, "dst_port": 1187, "tcp_stream": 307, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fadbe2c4971de74417d20948", "kind": "unclassified_tcp", "frame_number": 13760, "timestamp_epoch": "1634913759.404344000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49778, "dst_port": 1187, "tcp_stream": 310, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1c32cbd9058bebff7806c0db", "kind": "unclassified_tcp", "frame_number": 13965, "timestamp_epoch": "1634913763.737031000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49779, "dst_port": 1187, "tcp_stream": 312, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d0bcadc9949fc57537b60801", "kind": "unclassified_tcp", "frame_number": 14011, "timestamp_epoch": "1634913768.151306000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49780, "dst_port": 1187, "tcp_stream": 313, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9ba7df5a36cb479fb05cf27c", "kind": "unclassified_tcp", "frame_number": 14316, "timestamp_epoch": "1634913772.604546000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49781, "dst_port": 1187, "tcp_stream": 314, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-09357b4b362daa73c8e2530f", "kind": "unclassified_tcp", "frame_number": 14338, "timestamp_epoch": "1634913772.750235000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49781, "dst_port": 1187, "tcp_stream": 314, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-463320815ad621a20d3a3ef0", "kind": "unclassified_tcp", "frame_number": 14367, "timestamp_epoch": "1634913773.732994000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c7b767fd078e7c9eacb8137e", "kind": "unclassified_tcp", "frame_number": 14382, "timestamp_epoch": "1634913774.092667000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a2c5241890abe13232d0a104", "kind": "unclassified_tcp", "frame_number": 14384, "timestamp_epoch": "1634913774.150092000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-daf2ffd750264037615cb6d6", "kind": "unclassified_tcp", "frame_number": 14428, "timestamp_epoch": "1634913776.985428000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49782, "dst_port": 1187, "tcp_stream": 315, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2d525e9af3b3dc102ade2696", "kind": "unclassified_tcp", "frame_number": 14626, "timestamp_epoch": "1634913781.302097000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49783, "dst_port": 1187, "tcp_stream": 316, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-efaef7675de2e7cc93ca1a0d", "kind": "unclassified_tcp", "frame_number": 14872, "timestamp_epoch": "1634913785.666414000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49784, "dst_port": 1187, "tcp_stream": 317, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-863800f251200b0219dfea03", "kind": "unclassified_tcp", "frame_number": 14883, "timestamp_epoch": "1634913785.813437000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49784, "dst_port": 1187, "tcp_stream": 317, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2f4154eeca01d3f5bf224994", "kind": "unclassified_tcp", "frame_number": 15038, "timestamp_epoch": "1634913789.993865000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49785, "dst_port": 1187, "tcp_stream": 318, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-01ad34110d515152f88cd5ab", "kind": "unclassified_tcp", "frame_number": 15282, "timestamp_epoch": "1634913794.336673000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49786, "dst_port": 1187, "tcp_stream": 319, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e9a821da2341699153fa4bbe", "kind": "unclassified_tcp", "frame_number": 15394, "timestamp_epoch": "1634913798.749931000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49787, "dst_port": 1187, "tcp_stream": 320, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5fb54dea0eef98de08e07497", "kind": "unclassified_tcp", "frame_number": 15396, "timestamp_epoch": "1634913798.906551000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49787, "dst_port": 1187, "tcp_stream": 320, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d3357ba70d2badca73dbd365", "kind": "unclassified_tcp", "frame_number": 15612, "timestamp_epoch": "1634913803.156228000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49788, "dst_port": 1187, "tcp_stream": 321, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2cc1584b262a80c11863a926", "kind": "unclassified_tcp", "frame_number": 15670, "timestamp_epoch": "1634913804.165828000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e2f1ee593c4a699f3402f4a2", "kind": "unclassified_tcp", "frame_number": 15760, "timestamp_epoch": "1634913807.489849000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49789, "dst_port": 1187, "tcp_stream": 322, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00e635b4eabe22fdfbac4ae0", "kind": "unclassified_tcp", "frame_number": 15818, "timestamp_epoch": "1634913811.800084000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49790, "dst_port": 1187, "tcp_stream": 323, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d6601a21bdadd13026e36b63", "kind": "unclassified_tcp", "frame_number": 16015, "timestamp_epoch": "1634913816.108643000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49791, "dst_port": 1187, "tcp_stream": 325, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c531f29582e45592f6b99a13", "kind": "unclassified_tcp", "frame_number": 16167, "timestamp_epoch": "1634913820.487269000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49792, "dst_port": 1187, "tcp_stream": 326, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-68d778daabeb8e5de8b00beb", "kind": "unclassified_tcp", "frame_number": 16175, "timestamp_epoch": "1634913824.853417000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49793, "dst_port": 1187, "tcp_stream": 327, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b89f51334d0a53131f8cbe80", "kind": "unclassified_tcp", "frame_number": 16183, "timestamp_epoch": "1634913829.296359000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49794, "dst_port": 1187, "tcp_stream": 328, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0c57dfc1d7ea4ce1812fde2c", "kind": "unclassified_tcp", "frame_number": 16192, "timestamp_epoch": "1634913833.653708000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49795, "dst_port": 1187, "tcp_stream": 330, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-630121f923c76530e909e87e", "kind": "unclassified_tcp", "frame_number": 16194, "timestamp_epoch": "1634913833.751423000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0c4a12f48d8681dc378c1366", "kind": "unclassified_tcp", "frame_number": 16206, "timestamp_epoch": "1634913838.040490000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49796, "dst_port": 1187, "tcp_stream": 331, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-23d7603acf5dde653b4ac9d3", "kind": "unclassified_tcp", "frame_number": 16208, "timestamp_epoch": "1634913838.140751000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49796, "dst_port": 1187, "tcp_stream": 331, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-639d4e389d93d65c2dc3dff9", "kind": "unclassified_tcp", "frame_number": 16218, "timestamp_epoch": "1634913842.374946000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49797, "dst_port": 1187, "tcp_stream": 332, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9ce9662542e10c5ecc07abee", "kind": "unclassified_tcp", "frame_number": 16226, "timestamp_epoch": "1634913846.773578000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49798, "dst_port": 1187, "tcp_stream": 333, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7c513b8e387c6c9002e7ef41", "kind": "unclassified_tcp", "frame_number": 16237, "timestamp_epoch": "1634913851.164365000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49799, "dst_port": 1187, "tcp_stream": 335, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1751c06924291251a3057baa", "kind": "unclassified_tcp", "frame_number": 16239, "timestamp_epoch": "1634913851.220029000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49799, "dst_port": 1187, "tcp_stream": 335, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fdf138f4ef2db00bc4f84e9e", "kind": "unclassified_tcp", "frame_number": 16250, "timestamp_epoch": "1634913855.512954000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49800, "dst_port": 1187, "tcp_stream": 336, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-67e7c4124c4a0d1fa02e5aa7", "kind": "unclassified_tcp", "frame_number": 16259, "timestamp_epoch": "1634913859.820938000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49801, "dst_port": 1187, "tcp_stream": 337, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1ec7dcb7d7fbc5ca1041aff5", "kind": "unclassified_tcp", "frame_number": 16267, "timestamp_epoch": "1634913864.151142000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49802, "dst_port": 1187, "tcp_stream": 338, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c778531c095ce9f3ee2c877e", "kind": "unclassified_tcp", "frame_number": 16269, "timestamp_epoch": "1634913864.173069000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e7f69fcf987bff195eeacb04", "kind": "unclassified_tcp", "frame_number": 16271, "timestamp_epoch": "1634913864.251387000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49802, "dst_port": 1187, "tcp_stream": 338, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-08bf940094992f4cd8be3c95", "kind": "unclassified_tcp", "frame_number": 16283, "timestamp_epoch": "1634913868.473955000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49803, "dst_port": 1187, "tcp_stream": 340, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c4dc7001178c02431dcc5428", "kind": "unclassified_tcp", "frame_number": 16295, "timestamp_epoch": "1634913872.853329000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49804, "dst_port": 1187, "tcp_stream": 341, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-536139190f00370ec62cce61", "kind": "unclassified_tcp", "frame_number": 16310, "timestamp_epoch": "1634913877.222449000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49805, "dst_port": 1187, "tcp_stream": 342, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-63b39fd494504006326189b3", "kind": "unclassified_tcp", "frame_number": 16312, "timestamp_epoch": "1634913877.252563000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49805, "dst_port": 1187, "tcp_stream": 342, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e4781187101c1921a436226f", "kind": "unclassified_tcp", "frame_number": 16320, "timestamp_epoch": "1634913881.574378000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49806, "dst_port": 1187, "tcp_stream": 343, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-181aa867e58c4d5bfd049b34", "kind": "unclassified_tcp", "frame_number": 16681, "timestamp_epoch": "1634913885.924271000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49807, "dst_port": 1187, "tcp_stream": 347, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-32ecfaa147a07185823b29ba", "kind": "unclassified_tcp", "frame_number": 17301, "timestamp_epoch": "1634913890.245503000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49808, "dst_port": 1187, "tcp_stream": 351, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-aa99d1f7f611e76f294a1f16", "kind": "unclassified_tcp", "frame_number": 17303, "timestamp_epoch": "1634913890.362777000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49808, "dst_port": 1187, "tcp_stream": 351, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d6eca630a8b42dc970978253", "kind": "unclassified_tcp", "frame_number": 17340, "timestamp_epoch": "1634913894.111409000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0e767e9cce50461a77d815ee", "kind": "unclassified_tcp", "frame_number": 17345, "timestamp_epoch": "1634913894.545639000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49809, "dst_port": 1187, "tcp_stream": 353, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3b51a1699a5d6a42026939c2", "kind": "unclassified_tcp", "frame_number": 17355, "timestamp_epoch": "1634913898.911148000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49810, "dst_port": 1187, "tcp_stream": 354, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9ed8718d4dc984d3306e14b4", "kind": "unclassified_tcp", "frame_number": 17373, "timestamp_epoch": "1634913903.341929000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49811, "dst_port": 1187, "tcp_stream": 355, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1eaf548a7f140069f2afbfe5", "kind": "unclassified_tcp", "frame_number": 17375, "timestamp_epoch": "1634913903.503938000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49811, "dst_port": 1187, "tcp_stream": 355, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-312ce8265004f5c52ef43db4", "kind": "unclassified_tcp", "frame_number": 17386, "timestamp_epoch": "1634913907.754121000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49812, "dst_port": 1187, "tcp_stream": 357, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-717c26e5e066b30a1e8dddcf", "kind": "unclassified_tcp", "frame_number": 17400, "timestamp_epoch": "1634913912.063471000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49813, "dst_port": 1187, "tcp_stream": 358, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-29997c2408197361d5c1323a", "kind": "unclassified_tcp", "frame_number": 17406, "timestamp_epoch": "1634913916.382166000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49814, "dst_port": 1187, "tcp_stream": 359, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e4c6a51859508c361de2a39a", "kind": "unclassified_tcp", "frame_number": 17439, "timestamp_epoch": "1634913920.720015000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49815, "dst_port": 1187, "tcp_stream": 362, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ddfee0b57848cbe0d524d21a", "kind": "unclassified_tcp", "frame_number": 17454, "timestamp_epoch": "1634913925.209523000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49816, "dst_port": 1187, "tcp_stream": 363, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ee32129f464766704ed40138", "kind": "unclassified_tcp", "frame_number": 17465, "timestamp_epoch": "1634913929.699890000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49817, "dst_port": 1187, "tcp_stream": 364, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f3a546c5e4a70c83169eb80c", "kind": "unclassified_tcp", "frame_number": 17475, "timestamp_epoch": "1634913934.175692000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49818, "dst_port": 1187, "tcp_stream": 365, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f962e69613700752403ec0cd", "kind": "unclassified_tcp", "frame_number": 17487, "timestamp_epoch": "1634913938.519354000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49819, "dst_port": 1187, "tcp_stream": 367, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-73dbff7db4a4cd4ddcf906ea", "kind": "unclassified_tcp", "frame_number": 17517, "timestamp_epoch": "1634913942.828453000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49820, "dst_port": 1187, "tcp_stream": 369, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c6811692d9772d68893e8abc", "kind": "unclassified_tcp", "frame_number": 17526, "timestamp_epoch": "1634913947.146060000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49821, "dst_port": 1187, "tcp_stream": 370, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-db4808991d9e663698fad206", "kind": "unclassified_tcp", "frame_number": 17542, "timestamp_epoch": "1634913951.514084000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49822, "dst_port": 1187, "tcp_stream": 371, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a9b7098cf6878a8903f32f05", "kind": "unclassified_tcp", "frame_number": 17549, "timestamp_epoch": "1634913953.769993000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f67b3c28053221dc99834c4f", "kind": "unclassified_tcp", "frame_number": 17582, "timestamp_epoch": "1634913955.887762000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49824, "dst_port": 1187, "tcp_stream": 374, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2af64e1096db62ab7b2f2ac1", "kind": "unclassified_tcp", "frame_number": 17624, "timestamp_epoch": "1634913960.271346000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49825, "dst_port": 1187, "tcp_stream": 376, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b9f36de7081a3f47db941c58", "kind": "unclassified_tcp", "frame_number": 17633, "timestamp_epoch": "1634913964.589169000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49826, "dst_port": 1187, "tcp_stream": 377, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-eaceaeef2b0f97758e2441a4", "kind": "unclassified_tcp", "frame_number": 17644, "timestamp_epoch": "1634913968.961303000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49827, "dst_port": 1187, "tcp_stream": 378, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0904db2d5ca678eacab8c3f5", "kind": "unclassified_tcp", "frame_number": 17651, "timestamp_epoch": "1634913973.347482000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49828, "dst_port": 1187, "tcp_stream": 379, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6642f3e32d32e0df0bd75dce", "kind": "unclassified_tcp", "frame_number": 17670, "timestamp_epoch": "1634913977.812960000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49829, "dst_port": 1187, "tcp_stream": 382, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0cfc8b443b62acaba3d67582", "kind": "unclassified_tcp", "frame_number": 17676, "timestamp_epoch": "1634913977.927530000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49829, "dst_port": 1187, "tcp_stream": 382, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b963d8b5d6079f590c1c3ebd", "kind": "unclassified_tcp", "frame_number": 17690, "timestamp_epoch": "1634913982.175200000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49830, "dst_port": 1187, "tcp_stream": 383, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f430e87c70acad855015ea6a", "kind": "unclassified_tcp", "frame_number": 17697, "timestamp_epoch": "1634913984.176941000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e8bc2c84a192e8672f830751", "kind": "unclassified_tcp", "frame_number": 17705, "timestamp_epoch": "1634913986.525914000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49831, "dst_port": 1187, "tcp_stream": 384, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d3b4286692130ca6fca062d7", "kind": "unclassified_tcp", "frame_number": 17717, "timestamp_epoch": "1634913990.837235000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49832, "dst_port": 1187, "tcp_stream": 385, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e042e321ee1e01a445ed9b49", "kind": "unclassified_tcp", "frame_number": 17753, "timestamp_epoch": "1634913995.150762000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49833, "dst_port": 1187, "tcp_stream": 388, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-55a28e791d28eb69554fc201", "kind": "unclassified_tcp", "frame_number": 17771, "timestamp_epoch": "1634913999.487474000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49834, "dst_port": 1187, "tcp_stream": 389, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3cc95cf07948d947312597cb", "kind": "unclassified_tcp", "frame_number": 17785, "timestamp_epoch": "1634914003.867850000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49835, "dst_port": 1187, "tcp_stream": 390, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e093d29c898c1a6c900cee90", "kind": "unclassified_tcp", "frame_number": 17787, "timestamp_epoch": "1634914004.007025000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49835, "dst_port": 1187, "tcp_stream": 390, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-12113182b05d21343d435a69", "kind": "unclassified_tcp", "frame_number": 17798, "timestamp_epoch": "1634914008.249570000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ebd3550175f73b5c7eac8e5e", "kind": "unclassified_tcp", "frame_number": 17800, "timestamp_epoch": "1634914009.007559000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f4ed5360ccc652f99f760ea5", "kind": "unclassified_tcp", "frame_number": 17817, "timestamp_epoch": "1634914014.131525000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e75083d28bf144615f4cf885", "kind": "unclassified_tcp", "frame_number": 17821, "timestamp_epoch": "1634914015.008115000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e2be8f2e8fc631b2fd82f705", "kind": "unclassified_tcp", "frame_number": 17872, "timestamp_epoch": "1634914021.007806000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f7f4feeeea17492a60016f9a", "kind": "unclassified_tcp", "frame_number": 17886, "timestamp_epoch": "1634914026.008359000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a3a022b298c0651646429111", "kind": "unclassified_tcp", "frame_number": 17893, "timestamp_epoch": "1634914032.007784000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ad13ec1f97d583ee704a690e", "kind": "unclassified_tcp", "frame_number": 17924, "timestamp_epoch": "1634914037.008024000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-90dfb46219df92e9d265986c", "kind": "unclassified_tcp", "frame_number": 17933, "timestamp_epoch": "1634914042.008930000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9f6f16907481c5e61d05af07", "kind": "unclassified_tcp", "frame_number": 17988, "timestamp_epoch": "1634914048.009157000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-deb44a74f889a2ffbb91951e", "kind": "unclassified_tcp", "frame_number": 18684, "timestamp_epoch": "1634914053.040246000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-807310d50c9d12840f1348a4", "kind": "unclassified_tcp", "frame_number": 19308, "timestamp_epoch": "1634914058.085669000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a809081a41281a15dc76d109", "kind": "unclassified_tcp", "frame_number": 19665, "timestamp_epoch": "1634914063.132423000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f66e0912ef559003625496a", "kind": "unclassified_tcp", "frame_number": 19674, "timestamp_epoch": "1634914068.163165000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3568162e6f5650f0080b617d", "kind": "unclassified_tcp", "frame_number": 19710, "timestamp_epoch": "1634914073.179887000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-01641bdc6b229343aa95de8c", "kind": "unclassified_tcp", "frame_number": 19712, "timestamp_epoch": "1634914073.789989000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a88c3eef08937f8b24bb0b1c", "kind": "unclassified_tcp", "frame_number": 19721, "timestamp_epoch": "1634914078.227510000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8af0a61a2394f563cbf65765", "kind": "unclassified_tcp", "frame_number": 19732, "timestamp_epoch": "1634914083.259548000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bc740439b5d612b43c1d9ace", "kind": "unclassified_tcp", "frame_number": 19744, "timestamp_epoch": "1634914089.258399000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6a3a61078e72f9f56b9170a7", "kind": "unclassified_tcp", "frame_number": 19768, "timestamp_epoch": "1634914094.259175000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d349824f5b45305d66c6d3fa", "kind": "unclassified_tcp", "frame_number": 20562, "timestamp_epoch": "1634914099.274934000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ef046b495def3108d5c430c9", "kind": "unclassified_tcp", "frame_number": 20577, "timestamp_epoch": "1634914104.196433000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ebfaf8650791c886ca41b07f", "kind": "unclassified_tcp", "frame_number": 20579, "timestamp_epoch": "1634914104.336746000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-007e13198cce94d068bdec35", "kind": "unclassified_tcp", "frame_number": 20605, "timestamp_epoch": "1634914109.369765000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7802f00b692708aded175ffe", "kind": "unclassified_tcp", "frame_number": 20612, "timestamp_epoch": "1634914114.414036000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bab461e8da334698f17effe2", "kind": "unclassified_tcp", "frame_number": 20637, "timestamp_epoch": "1634914119.461887000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-10fc828dcaf2e3f537d8ae3a", "kind": "unclassified_tcp", "frame_number": 20657, "timestamp_epoch": "1634914124.493725000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c0005ecdba1612e190b4311f", "kind": "unclassified_tcp", "frame_number": 20670, "timestamp_epoch": "1634914129.523898000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6f9c14d53fe811aaa836be8a", "kind": "unclassified_tcp", "frame_number": 20680, "timestamp_epoch": "1634914134.149692000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-06a1a0aea7ebb36f2d2a7571", "kind": "unclassified_tcp", "frame_number": 20682, "timestamp_epoch": "1634914134.542025000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-97d725d2a2a9b1cb013ed354", "kind": "unclassified_tcp", "frame_number": 20697, "timestamp_epoch": "1634914139.588118000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fc9d2ae338981d54b3c08adc", "kind": "unclassified_tcp", "frame_number": 20723, "timestamp_epoch": "1634914144.620121000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4f39746002570c59c931e9b4", "kind": "unclassified_tcp", "frame_number": 20734, "timestamp_epoch": "1634914150.620931000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a97db82a4fe45c7a4e0593e7", "kind": "unclassified_tcp", "frame_number": 20744, "timestamp_epoch": "1634914156.621313000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0aaf1da53879b186e4c54858", "kind": "unclassified_tcp", "frame_number": 20764, "timestamp_epoch": "1634914161.683760000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-175ea549737f5b65d8f51c4c", "kind": "unclassified_tcp", "frame_number": 20777, "timestamp_epoch": "1634914167.683594000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-74978e903f4921fa2c42a430", "kind": "unclassified_tcp", "frame_number": 21117, "timestamp_epoch": "1634914172.729100000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c4ee79ca2e7891fe7be80dda", "kind": "unclassified_tcp", "frame_number": 22270, "timestamp_epoch": "1634914177.744539000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49836, "dst_port": 1187, "tcp_stream": 391, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ddc61716baaf11406ed7fb9b", "kind": "unclassified_tcp", "frame_number": 22286, "timestamp_epoch": "1634914183.949337000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49837, "dst_port": 1187, "tcp_stream": 440, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7c5b5f83519922c7e65dd1ec", "kind": "unclassified_tcp", "frame_number": 22308, "timestamp_epoch": "1634914191.288462000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49838, "dst_port": 1187, "tcp_stream": 441, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-206dbc8132e1320749db8e2e", "kind": "unclassified_tcp", "frame_number": 22330, "timestamp_epoch": "1634914193.808109000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9ea46698dd23b47c5f1e3af6", "kind": "unclassified_tcp", "frame_number": 22337, "timestamp_epoch": "1634914195.591436000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49839, "dst_port": 1187, "tcp_stream": 443, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5f08b10a6df4d9f72e69a3c2", "kind": "unclassified_tcp", "frame_number": 22351, "timestamp_epoch": "1634914199.909520000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49840, "dst_port": 1187, "tcp_stream": 445, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-02c584ff477074d3ff99a350", "kind": "unclassified_tcp", "frame_number": 22353, "timestamp_epoch": "1634914199.917958000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49840, "dst_port": 1187, "tcp_stream": 445, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2de1dfcab1dcea64aea461f1", "kind": "unclassified_tcp", "frame_number": 22362, "timestamp_epoch": "1634914204.312020000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49841, "dst_port": 1187, "tcp_stream": 446, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-315d44b18a04315a23ce5de2", "kind": "unclassified_tcp", "frame_number": 22390, "timestamp_epoch": "1634914208.897073000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49842, "dst_port": 1187, "tcp_stream": 448, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6df24489460f24329601a33e", "kind": "unclassified_tcp", "frame_number": 22392, "timestamp_epoch": "1634914208.995932000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49842, "dst_port": 1187, "tcp_stream": 448, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a12dee6f5da653d6922e369c", "kind": "unclassified_tcp", "frame_number": 22401, "timestamp_epoch": "1634914213.646177000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49843, "dst_port": 1187, "tcp_stream": 449, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-df771cd25b499bb5e57331b9", "kind": "unclassified_tcp", "frame_number": 22434, "timestamp_epoch": "1634914218.130616000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49844, "dst_port": 1187, "tcp_stream": 451, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9d03f767804836ddba674b6a", "kind": "unclassified_tcp", "frame_number": 22445, "timestamp_epoch": "1634914222.452192000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49845, "dst_port": 1187, "tcp_stream": 452, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-31f13b77a6593d0bfa949e03", "kind": "unclassified_tcp", "frame_number": 22448, "timestamp_epoch": "1634914224.214150000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f7e59432a9ba231f26fed4ee", "kind": "unclassified_tcp", "frame_number": 22453, "timestamp_epoch": "1634914226.793363000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49846, "dst_port": 1187, "tcp_stream": 453, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-17593c3ccd001138048776a1", "kind": "unclassified_tcp", "frame_number": 22497, "timestamp_epoch": "1634914231.259553000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49847, "dst_port": 1187, "tcp_stream": 455, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c35ab027e634ba85eaeb137d", "kind": "unclassified_tcp", "frame_number": 22511, "timestamp_epoch": "1634914238.741687000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49848, "dst_port": 1187, "tcp_stream": 456, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-454874cd394c3c57acadaf02", "kind": "unclassified_tcp", "frame_number": 22522, "timestamp_epoch": "1634914243.154407000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49849, "dst_port": 1187, "tcp_stream": 457, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e5065d023043de5b6ce49ea4", "kind": "unclassified_tcp", "frame_number": 22529, "timestamp_epoch": "1634914247.490631000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49850, "dst_port": 1187, "tcp_stream": 458, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-88cacb6ecfb3590efd05b500", "kind": "unclassified_tcp", "frame_number": 22537, "timestamp_epoch": "1634914251.820148000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49851, "dst_port": 1187, "tcp_stream": 460, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5982639b2445f8868e28d831", "kind": "unclassified_tcp", "frame_number": 22565, "timestamp_epoch": "1634914254.155129000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f6b42b708c7438c790b263eb", "kind": "unclassified_tcp", "frame_number": 22576, "timestamp_epoch": "1634914256.120994000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49852, "dst_port": 1187, "tcp_stream": 462, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e2fe68ffe627a899e0bee1ad", "kind": "unclassified_tcp", "frame_number": 22578, "timestamp_epoch": "1634914256.138137000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49852, "dst_port": 1187, "tcp_stream": 462, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-88b39cb87299ed6039d90f2c", "kind": "unclassified_tcp", "frame_number": 22590, "timestamp_epoch": "1634914260.505922000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49853, "dst_port": 1187, "tcp_stream": 463, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0fd0e65c61f1be8aae35c15f", "kind": "unclassified_tcp", "frame_number": 22599, "timestamp_epoch": "1634914264.888377000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49854, "dst_port": 1187, "tcp_stream": 464, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e641bf787792d6647cd34884", "kind": "unclassified_tcp", "frame_number": 22610, "timestamp_epoch": "1634914269.264206000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49855, "dst_port": 1187, "tcp_stream": 466, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7d18ae9901df6797d38a9be2", "kind": "unclassified_tcp", "frame_number": 22620, "timestamp_epoch": "1634914273.559141000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49856, "dst_port": 1187, "tcp_stream": 467, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1f613c5d0272edce77a60f78", "kind": "unclassified_tcp", "frame_number": 22645, "timestamp_epoch": "1634914277.872564000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49857, "dst_port": 1187, "tcp_stream": 469, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cfb2e5bd1af2659f3c473c17", "kind": "unclassified_tcp", "frame_number": 22658, "timestamp_epoch": "1634914282.190425000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49858, "dst_port": 1187, "tcp_stream": 470, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-be438f8d9dd13f7fca2cbd85", "kind": "unclassified_tcp", "frame_number": 22660, "timestamp_epoch": "1634914282.279480000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49858, "dst_port": 1187, "tcp_stream": 470, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2d7aceb1b0be22c9a3721529", "kind": "unclassified_tcp", "frame_number": 22665, "timestamp_epoch": "1634914284.451354000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c9f0505d7c2cadfb15124546", "kind": "unclassified_tcp", "frame_number": 22674, "timestamp_epoch": "1634914286.557097000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49859, "dst_port": 1187, "tcp_stream": 472, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cddf190d3bbab08a214bf333", "kind": "unclassified_tcp", "frame_number": 22709, "timestamp_epoch": "1634914290.975704000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49860, "dst_port": 1187, "tcp_stream": 474, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c029b090394c4af6af13916f", "kind": "unclassified_tcp", "frame_number": 22719, "timestamp_epoch": "1634914295.444555000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49861, "dst_port": 1187, "tcp_stream": 475, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ad03d13df793af7e209f2598", "kind": "unclassified_tcp", "frame_number": 22729, "timestamp_epoch": "1634914299.796885000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49862, "dst_port": 1187, "tcp_stream": 477, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-41abe9641cb882fbf3600462", "kind": "unclassified_tcp", "frame_number": 22737, "timestamp_epoch": "1634914304.133119000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49863, "dst_port": 1187, "tcp_stream": 478, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9eebe18fd3f6c57aba1bd1df", "kind": "unclassified_tcp", "frame_number": 22746, "timestamp_epoch": "1634914308.451928000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49864, "dst_port": 1187, "tcp_stream": 479, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-045ce9616c425e98fe96f60c", "kind": "unclassified_tcp", "frame_number": 22756, "timestamp_epoch": "1634914312.846243000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49865, "dst_port": 1187, "tcp_stream": 480, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b4d44d016ff4bba53a7be237", "kind": "unclassified_tcp", "frame_number": 22759, "timestamp_epoch": "1634914313.827024000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9a6afedbd59f6bc8ce1a87a9", "kind": "unclassified_tcp", "frame_number": 22765, "timestamp_epoch": "1634914314.452510000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-81735ff40f3dbb4fcad6e933", "kind": "unclassified_tcp", "frame_number": 22773, "timestamp_epoch": "1634914317.219345000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49866, "dst_port": 1187, "tcp_stream": 481, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a8b9ecf0dc5b4ebb901a04e4", "kind": "unclassified_tcp", "frame_number": 22788, "timestamp_epoch": "1634914321.560107000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49867, "dst_port": 1187, "tcp_stream": 484, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b1bdc54139c30748a05db679", "kind": "unclassified_tcp", "frame_number": 22817, "timestamp_epoch": "1634914325.869163000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49868, "dst_port": 1187, "tcp_stream": 486, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bd688e00fa5809ccef6aa7c8", "kind": "unclassified_tcp", "frame_number": 22835, "timestamp_epoch": "1634914330.238410000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49869, "dst_port": 1187, "tcp_stream": 489, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c1cb05bd441b58469f314fee", "kind": "unclassified_tcp", "frame_number": 22848, "timestamp_epoch": "1634914334.563047000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49870, "dst_port": 1187, "tcp_stream": 491, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b4a46b6395b9145c4d8b3eb5", "kind": "unclassified_tcp", "frame_number": 22878, "timestamp_epoch": "1634914338.973114000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49871, "dst_port": 1187, "tcp_stream": 493, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b48a294759c9326b2111c552", "kind": "unclassified_tcp", "frame_number": 22889, "timestamp_epoch": "1634914343.364023000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49872, "dst_port": 1187, "tcp_stream": 495, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-22fc0f079f3d85989d61b218", "kind": "unclassified_tcp", "frame_number": 22893, "timestamp_epoch": "1634914344.107643000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7caff61cc787553828c96acf", "kind": "unclassified_tcp", "frame_number": 22895, "timestamp_epoch": "1634914344.233945000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-615d43c45f66ea56f6c9a924", "kind": "unclassified_tcp", "frame_number": 22913, "timestamp_epoch": "1634914347.725770000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49873, "dst_port": 1187, "tcp_stream": 498, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-207d09bb98971cfe2b733d71", "kind": "unclassified_tcp", "frame_number": 22937, "timestamp_epoch": "1634914355.164722000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49874, "dst_port": 1187, "tcp_stream": 501, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-eee590dfd5805a74316112ea", "kind": "unclassified_tcp", "frame_number": 22940, "timestamp_epoch": "1634914355.515332000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49874, "dst_port": 1187, "tcp_stream": 501, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e919fb353947a8962775fbf9", "kind": "unclassified_tcp", "frame_number": 22946, "timestamp_epoch": "1634914360.516312000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49874, "dst_port": 1187, "tcp_stream": 501, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-29c2b758a2ead95d28929e8b", "kind": "unclassified_tcp", "frame_number": 22959, "timestamp_epoch": "1634914368.383449000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49875, "dst_port": 1187, "tcp_stream": 506, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6bfa41daed4cf1ec31a23192", "kind": "unclassified_tcp", "frame_number": 22961, "timestamp_epoch": "1634914368.516484000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49875, "dst_port": 1187, "tcp_stream": 506, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2344496ac7e5f66851b0a5f0", "kind": "unclassified_tcp", "frame_number": 22974, "timestamp_epoch": "1634914372.871743000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49876, "dst_port": 1187, "tcp_stream": 508, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4878a544f903625231241df9", "kind": "unclassified_tcp", "frame_number": 22978, "timestamp_epoch": "1634914374.125559000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-397519d44984b7d35781a3e5", "kind": "unclassified_tcp", "frame_number": 22980, "timestamp_epoch": "1634914374.468334000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8f31c7ef839a782a989f2c01", "kind": "unclassified_tcp", "frame_number": 22982, "timestamp_epoch": "1634914374.524963000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-599689abaafceb2434f8f855", "kind": "unclassified_tcp", "frame_number": 22991, "timestamp_epoch": "1634914377.449064000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49877, "dst_port": 1187, "tcp_stream": 509, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8cec88306669e41d102f9c73", "kind": "unclassified_tcp", "frame_number": 22993, "timestamp_epoch": "1634914377.515986000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49877, "dst_port": 1187, "tcp_stream": 509, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a8841176ecca599df7f3c19d", "kind": "unclassified_tcp", "frame_number": 23005, "timestamp_epoch": "1634914381.833770000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49878, "dst_port": 1187, "tcp_stream": 510, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8bb89e5c3c9ae47e49660067", "kind": "unclassified_tcp", "frame_number": 23017, "timestamp_epoch": "1634914386.211841000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49879, "dst_port": 1187, "tcp_stream": 511, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1a2d76e486d1b09fd158d4d6", "kind": "unclassified_tcp", "frame_number": 23023, "timestamp_epoch": "1634914390.538213000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49880, "dst_port": 1187, "tcp_stream": 512, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-46f3412fa2e6847535b5af47", "kind": "unclassified_tcp", "frame_number": 23031, "timestamp_epoch": "1634914394.873708000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49881, "dst_port": 1187, "tcp_stream": 514, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2bd17060106900ced9fb676f", "kind": "unclassified_tcp", "frame_number": 23038, "timestamp_epoch": "1634914399.198163000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49882, "dst_port": 1187, "tcp_stream": 515, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4c5390e81b7e0346f45c3f4f", "kind": "unclassified_tcp", "frame_number": 23066, "timestamp_epoch": "1634914403.564184000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49883, "dst_port": 1187, "tcp_stream": 517, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-11cdd4dc4ebcdfce8df5bb8a", "kind": "unclassified_tcp", "frame_number": 23068, "timestamp_epoch": "1634914403.626513000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49883, "dst_port": 1187, "tcp_stream": 517, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9576411b9756283072baa308", "kind": "unclassified_tcp", "frame_number": 23071, "timestamp_epoch": "1634914404.541310000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7414b6bdb8d7c248b8d19059", "kind": "unclassified_tcp", "frame_number": 23096, "timestamp_epoch": "1634914412.100967000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49884, "dst_port": 1187, "tcp_stream": 519, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-09002a095ae2b8c4b7c873b4", "kind": "unclassified_tcp", "frame_number": 23109, "timestamp_epoch": "1634914416.504085000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49885, "dst_port": 1187, "tcp_stream": 520, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2a64dadb713dceccfddde0cb", "kind": "unclassified_tcp", "frame_number": 23115, "timestamp_epoch": "1634914420.854084000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49886, "dst_port": 1187, "tcp_stream": 521, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b2ee9c7eae4bc362b80eb72b", "kind": "unclassified_tcp", "frame_number": 23126, "timestamp_epoch": "1634914425.197709000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49887, "dst_port": 1187, "tcp_stream": 522, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b76d10fbe4dbf8a3af4f6b24", "kind": "unclassified_tcp", "frame_number": 23134, "timestamp_epoch": "1634914429.506493000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49888, "dst_port": 1187, "tcp_stream": 524, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-247ba09e242b80c486ed7f83", "kind": "unclassified_tcp", "frame_number": 23146, "timestamp_epoch": "1634914433.841772000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49889, "dst_port": 1187, "tcp_stream": 525, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2c6bd1497fe776bee9342c02", "kind": "unclassified_tcp", "frame_number": 23149, "timestamp_epoch": "1634914434.158529000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c92c4baee1d07680c518034a", "kind": "unclassified_tcp", "frame_number": 23175, "timestamp_epoch": "1634914438.341737000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49890, "dst_port": 1187, "tcp_stream": 527, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1777716d6c9f08ca92040fdd", "kind": "unclassified_tcp", "frame_number": 23189, "timestamp_epoch": "1634914442.745325000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49891, "dst_port": 1187, "tcp_stream": 529, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3cf8c7686d23fdccdf49f2bc", "kind": "unclassified_tcp", "frame_number": 23191, "timestamp_epoch": "1634914442.767523000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49891, "dst_port": 1187, "tcp_stream": 529, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-04bc16863bc6cc7e26f6f93b", "kind": "unclassified_tcp", "frame_number": 23199, "timestamp_epoch": "1634914447.074889000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49892, "dst_port": 1187, "tcp_stream": 530, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-62f358cf344c40ff06a5078d", "kind": "unclassified_tcp", "frame_number": 23212, "timestamp_epoch": "1634914451.413175000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49893, "dst_port": 1187, "tcp_stream": 531, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7c3907cfeb4f38eb7a45f087", "kind": "unclassified_tcp", "frame_number": 23218, "timestamp_epoch": "1634914455.748577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49894, "dst_port": 1187, "tcp_stream": 532, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-baa343b0b28b8a9badf67250", "kind": "unclassified_tcp", "frame_number": 23220, "timestamp_epoch": "1634914455.799417000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49894, "dst_port": 1187, "tcp_stream": 532, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4c867685c80a82e0ff429da3", "kind": "unclassified_tcp", "frame_number": 23233, "timestamp_epoch": "1634914460.119302000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49895, "dst_port": 1187, "tcp_stream": 533, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5c75d7f0d91b38a8c3ebdcc0", "kind": "unclassified_tcp", "frame_number": 23242, "timestamp_epoch": "1634914464.549336000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a097d7343d247ce6ce202e65", "kind": "unclassified_tcp", "frame_number": 23250, "timestamp_epoch": "1634914467.603208000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49896, "dst_port": 1187, "tcp_stream": 535, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bb12e021d6848a1cb6c85082", "kind": "unclassified_tcp", "frame_number": 23274, "timestamp_epoch": "1634914472.019728000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49897, "dst_port": 1187, "tcp_stream": 536, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f8c7f87ca34f81b8b4683dff", "kind": "unclassified_tcp", "frame_number": 23292, "timestamp_epoch": "1634914476.344490000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49898, "dst_port": 1187, "tcp_stream": 538, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-23db2cbbe8636323a31449dd", "kind": "unclassified_tcp", "frame_number": 23313, "timestamp_epoch": "1634914480.674536000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49899, "dst_port": 1187, "tcp_stream": 541, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e94819f6c83a719fa7ec9781", "kind": "unclassified_tcp", "frame_number": 23322, "timestamp_epoch": "1634914484.975784000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49900, "dst_port": 1187, "tcp_stream": 542, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2745148ed8254a7ae17a07e5", "kind": "unclassified_tcp", "frame_number": 23350, "timestamp_epoch": "1634914489.381843000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49901, "dst_port": 1187, "tcp_stream": 544, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0f538eafd5ac9e10c840c327", "kind": "unclassified_tcp", "frame_number": 23362, "timestamp_epoch": "1634914493.766789000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49902, "dst_port": 1187, "tcp_stream": 545, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-99b4932895791ff74afa83db", "kind": "unclassified_tcp", "frame_number": 23365, "timestamp_epoch": "1634914494.488590000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-61ab8df108247971f9c90ec1", "kind": "unclassified_tcp", "frame_number": 23381, "timestamp_epoch": "1634914498.170919000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49903, "dst_port": 1187, "tcp_stream": 547, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e8cc55113dae1e5a811a3711", "kind": "unclassified_tcp", "frame_number": 23397, "timestamp_epoch": "1634914502.536709000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49904, "dst_port": 1187, "tcp_stream": 548, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b42ccba18507dad58f2eb226", "kind": "unclassified_tcp", "frame_number": 23415, "timestamp_epoch": "1634914506.886554000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49905, "dst_port": 1187, "tcp_stream": 549, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-21173e96ff17e938ae809fc3", "kind": "unclassified_tcp", "frame_number": 23417, "timestamp_epoch": "1634914507.020140000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49905, "dst_port": 1187, "tcp_stream": 549, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-77b85d6edaaf91b9b154c0da", "kind": "unclassified_tcp", "frame_number": 23604, "timestamp_epoch": "1634914511.204954000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49906, "dst_port": 1187, "tcp_stream": 556, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4c1676c2314834fcce3924d3", "kind": "unclassified_tcp", "frame_number": 23619, "timestamp_epoch": "1634914515.584137000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49907, "dst_port": 1187, "tcp_stream": 558, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3e1a6e9b3a84e16c35d1b196", "kind": "unclassified_tcp", "frame_number": 23638, "timestamp_epoch": "1634914519.968474000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49908, "dst_port": 1187, "tcp_stream": 559, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5e93c521eeabd2dcc7281e26", "kind": "unclassified_tcp", "frame_number": 23640, "timestamp_epoch": "1634914520.020076000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49908, "dst_port": 1187, "tcp_stream": 559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c39fa1cd686b986b0bdf1b16", "kind": "unclassified_tcp", "frame_number": 23662, "timestamp_epoch": "1634914524.358782000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49909, "dst_port": 1187, "tcp_stream": 560, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-458f32a1d6dce228ce24974b", "kind": "unclassified_tcp", "frame_number": 23670, "timestamp_epoch": "1634914528.680307000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49910, "dst_port": 1187, "tcp_stream": 561, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c666aff80cbf2c71494372c0", "kind": "unclassified_tcp", "frame_number": 23677, "timestamp_epoch": "1634914532.999174000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49911, "dst_port": 1187, "tcp_stream": 562, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-adc8b68e289d22f7e8077351", "kind": "unclassified_tcp", "frame_number": 23679, "timestamp_epoch": "1634914533.051724000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49911, "dst_port": 1187, "tcp_stream": 562, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5fe7e9424311984d34386c64", "kind": "unclassified_tcp", "frame_number": 23687, "timestamp_epoch": "1634914537.326883000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49912, "dst_port": 1187, "tcp_stream": 564, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8129090d759791ed35a8d23e", "kind": "unclassified_tcp", "frame_number": 23697, "timestamp_epoch": "1634914541.685728000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49913, "dst_port": 1187, "tcp_stream": 565, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cd801f0f72369dae6d642e0f", "kind": "unclassified_tcp", "frame_number": 23708, "timestamp_epoch": "1634914546.057671000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49914, "dst_port": 1187, "tcp_stream": 566, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6a44c53a832ab1324d098901", "kind": "unclassified_tcp", "frame_number": 23710, "timestamp_epoch": "1634914546.161288000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49914, "dst_port": 1187, "tcp_stream": 566, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-738fddd5f8eddac5e1eac15b", "kind": "unclassified_tcp", "frame_number": 23721, "timestamp_epoch": "1634914550.406913000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49915, "dst_port": 1187, "tcp_stream": 567, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-caa5d10b40d99307676a9262", "kind": "unclassified_tcp", "frame_number": 23733, "timestamp_epoch": "1634914554.177169000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f77173f13ab8b41567986244", "kind": "unclassified_tcp", "frame_number": 23739, "timestamp_epoch": "1634914554.727009000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49916, "dst_port": 1187, "tcp_stream": 569, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ff478214279a2cc5a74e8471", "kind": "unclassified_tcp", "frame_number": 23748, "timestamp_epoch": "1634914559.039174000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49917, "dst_port": 1187, "tcp_stream": 570, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3fdcdd0ceddf9e30aa2d7062", "kind": "unclassified_tcp", "frame_number": 23760, "timestamp_epoch": "1634914563.368884000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49918, "dst_port": 1187, "tcp_stream": 571, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d94994ddfbced3067629f04f", "kind": "unclassified_tcp", "frame_number": 23777, "timestamp_epoch": "1634914567.770515000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49919, "dst_port": 1187, "tcp_stream": 572, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7fdff47993f5cdc6eac35605", "kind": "unclassified_tcp", "frame_number": 23788, "timestamp_epoch": "1634914572.126347000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49920, "dst_port": 1187, "tcp_stream": 574, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-88081f69f1f1d77b3199f821", "kind": "unclassified_tcp", "frame_number": 23790, "timestamp_epoch": "1634914572.272128000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49920, "dst_port": 1187, "tcp_stream": 574, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d13fdf8379f5e5cd094ee5e0", "kind": "unclassified_tcp", "frame_number": 23800, "timestamp_epoch": "1634914576.499503000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49921, "dst_port": 1187, "tcp_stream": 575, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-70c7bcf947aaf34320933cc5", "kind": "unclassified_tcp", "frame_number": 23808, "timestamp_epoch": "1634914580.821003000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49922, "dst_port": 1187, "tcp_stream": 576, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cba05449bb7284c4ecdd3189", "kind": "unclassified_tcp", "frame_number": 23812, "timestamp_epoch": "1634914584.553576000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c6030f566d46e914c72c8d47", "kind": "unclassified_tcp", "frame_number": 23818, "timestamp_epoch": "1634914585.150707000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49923, "dst_port": 1187, "tcp_stream": 578, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ba6186642a4901853677c343", "kind": "unclassified_tcp", "frame_number": 23820, "timestamp_epoch": "1634914585.272149000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49923, "dst_port": 1187, "tcp_stream": 578, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9354700eaebe6b32b6a16b30", "kind": "unclassified_tcp", "frame_number": 23831, "timestamp_epoch": "1634914589.484565000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49924, "dst_port": 1187, "tcp_stream": 579, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3793ca171295689a0e028174", "kind": "unclassified_tcp", "frame_number": 23843, "timestamp_epoch": "1634914593.917718000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49925, "dst_port": 1187, "tcp_stream": 580, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1df754e69259f99075feb9b7", "kind": "unclassified_tcp", "frame_number": 23851, "timestamp_epoch": "1634914598.308039000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49926, "dst_port": 1187, "tcp_stream": 581, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-300da5ecd52cf3f3bcdac26a", "kind": "unclassified_tcp", "frame_number": 23853, "timestamp_epoch": "1634914598.365386000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49926, "dst_port": 1187, "tcp_stream": 581, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-607e8ca8e0e3398a10f47aa5", "kind": "unclassified_tcp", "frame_number": 23862, "timestamp_epoch": "1634914602.677086000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49927, "dst_port": 1187, "tcp_stream": 582, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9a9a5c2c94ab71c8875dc066", "kind": "unclassified_tcp", "frame_number": 23869, "timestamp_epoch": "1634914606.990232000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49928, "dst_port": 1187, "tcp_stream": 584, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bd86547cd702f1f6fe7b265d", "kind": "unclassified_tcp", "frame_number": 23878, "timestamp_epoch": "1634914611.321292000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49929, "dst_port": 1187, "tcp_stream": 585, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1abc7c9fb2e5e2938f60bb58", "kind": "unclassified_tcp", "frame_number": 23880, "timestamp_epoch": "1634914611.444866000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49929, "dst_port": 1187, "tcp_stream": 585, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1772e0fb10b1fcbdc152aa5f", "kind": "unclassified_tcp", "frame_number": 23888, "timestamp_epoch": "1634914614.506710000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9c43068510eb9bf84be92815", "kind": "unclassified_tcp", "frame_number": 23894, "timestamp_epoch": "1634914615.697800000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49930, "dst_port": 1187, "tcp_stream": 586, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3fa9c8e978349eedaab621c2", "kind": "unclassified_tcp", "frame_number": 23904, "timestamp_epoch": "1634914620.052790000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49931, "dst_port": 1187, "tcp_stream": 587, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a8656395b4feb1963a0e5f2c", "kind": "unclassified_tcp", "frame_number": 23915, "timestamp_epoch": "1634914624.399432000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49932, "dst_port": 1187, "tcp_stream": 589, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6e1ee224d5c48f12db5f8bbd", "kind": "unclassified_tcp", "frame_number": 23917, "timestamp_epoch": "1634914624.460171000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49932, "dst_port": 1187, "tcp_stream": 589, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-64e9ca390fc2ff9a23d1c5d3", "kind": "unclassified_tcp", "frame_number": 23931, "timestamp_epoch": "1634914628.897803000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49933, "dst_port": 1187, "tcp_stream": 590, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-054d80d61fde4a83b0961045", "kind": "unclassified_tcp", "frame_number": 23944, "timestamp_epoch": "1634914633.259985000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49934, "dst_port": 1187, "tcp_stream": 591, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6d349159906724988d5079c1", "kind": "unclassified_tcp", "frame_number": 23953, "timestamp_epoch": "1634914637.567303000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49935, "dst_port": 1187, "tcp_stream": 592, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a3e168821015a9209f31b7b1", "kind": "unclassified_tcp", "frame_number": 23961, "timestamp_epoch": "1634914641.891399000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49936, "dst_port": 1187, "tcp_stream": 594, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8beab25008cb5cd8392939e0", "kind": "unclassified_tcp", "frame_number": 23974, "timestamp_epoch": "1634914646.271271000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49937, "dst_port": 1187, "tcp_stream": 595, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-105c9a28f645d68ec646603f", "kind": "unclassified_tcp", "frame_number": 23988, "timestamp_epoch": "1634914650.664479000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49938, "dst_port": 1187, "tcp_stream": 596, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-58f3d71eb4266e33d734f6be", "kind": "unclassified_tcp", "frame_number": 24004, "timestamp_epoch": "1634914655.059673000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49939, "dst_port": 1187, "tcp_stream": 597, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-51161ef28773bc5b05cad13c", "kind": "unclassified_tcp", "frame_number": 24018, "timestamp_epoch": "1634914659.382107000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49940, "dst_port": 1187, "tcp_stream": 599, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e1baecc33787a6b593b064e8", "kind": "unclassified_tcp", "frame_number": 24026, "timestamp_epoch": "1634914663.707584000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49941, "dst_port": 1187, "tcp_stream": 600, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a97a6bef781fe15e09d46b43", "kind": "unclassified_tcp", "frame_number": 24034, "timestamp_epoch": "1634914668.088226000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49942, "dst_port": 1187, "tcp_stream": 601, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0defc7098492cb3b545bac35", "kind": "unclassified_tcp", "frame_number": 24048, "timestamp_epoch": "1634914672.482045000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49943, "dst_port": 1187, "tcp_stream": 602, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-87bc761dc200f8c0cef09ab6", "kind": "unclassified_tcp", "frame_number": 24052, "timestamp_epoch": "1634914674.195296000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-4d214c078212539a65fb1270", "kind": "unclassified_tcp", "frame_number": 24062, "timestamp_epoch": "1634914676.884633000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49944, "dst_port": 1187, "tcp_stream": 603, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-272f262511c0dd0b894eba1b", "kind": "unclassified_tcp", "frame_number": 24087, "timestamp_epoch": "1634914681.258505000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49945, "dst_port": 1187, "tcp_stream": 612, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-eadd6bcc5960f99cb3c5590b", "kind": "unclassified_tcp", "frame_number": 24103, "timestamp_epoch": "1634914685.718015000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49946, "dst_port": 1187, "tcp_stream": 617, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-df03281f39c18b063967f85c", "kind": "unclassified_tcp", "frame_number": 24105, "timestamp_epoch": "1634914685.775075000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49946, "dst_port": 1187, "tcp_stream": 617, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a62d75696b65e269396e9944", "kind": "unclassified_tcp", "frame_number": 24127, "timestamp_epoch": "1634914690.077765000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49947, "dst_port": 1187, "tcp_stream": 626, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0c6495735c6835fbea5b611b", "kind": "unclassified_tcp", "frame_number": 24135, "timestamp_epoch": "1634914694.400140000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49948, "dst_port": 1187, "tcp_stream": 627, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d733b25f0dd0c67bfaa3efab", "kind": "unclassified_tcp", "frame_number": 24151, "timestamp_epoch": "1634914698.788838000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49949, "dst_port": 1187, "tcp_stream": 630, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-75e9b58ada16f832c6408d8f", "kind": "unclassified_tcp", "frame_number": 24153, "timestamp_epoch": "1634914698.806290000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49949, "dst_port": 1187, "tcp_stream": 630, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-da7182ee4f5836481f6c5457", "kind": "unclassified_tcp", "frame_number": 24165, "timestamp_epoch": "1634914703.190194000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49950, "dst_port": 1187, "tcp_stream": 632, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-603296d79a3d4670db530f34", "kind": "unclassified_tcp", "frame_number": 24175, "timestamp_epoch": "1634914704.571817000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d8261569db32d76bedb6b08e", "kind": "unclassified_tcp", "frame_number": 24184, "timestamp_epoch": "1634914707.548815000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49951, "dst_port": 1187, "tcp_stream": 634, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-18ae00a40bab9e71ca3554c4", "kind": "unclassified_tcp", "frame_number": 24197, "timestamp_epoch": "1634914711.869491000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49952, "dst_port": 1187, "tcp_stream": 637, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ad90c8b4e740b97bc58e26b7", "kind": "unclassified_tcp", "frame_number": 24208, "timestamp_epoch": "1634914716.179974000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49953, "dst_port": 1187, "tcp_stream": 639, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9f56b66afb458ad1d43763d7", "kind": "unclassified_tcp", "frame_number": 24225, "timestamp_epoch": "1634914720.500896000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49954, "dst_port": 1187, "tcp_stream": 642, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fb02227b3f1cf3424ae2cd51", "kind": "unclassified_tcp", "frame_number": 24239, "timestamp_epoch": "1634914724.877543000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49955, "dst_port": 1187, "tcp_stream": 644, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c7a97dc3f6d3dd585b277e93", "kind": "unclassified_tcp", "frame_number": 24241, "timestamp_epoch": "1634914724.916101000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49955, "dst_port": 1187, "tcp_stream": 644, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4ec60aeebde926db40a0d52c", "kind": "unclassified_tcp", "frame_number": 24255, "timestamp_epoch": "1634914729.283611000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49956, "dst_port": 1187, "tcp_stream": 647, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-124303459a93a0abcda2f0ba", "kind": "unclassified_tcp", "frame_number": 24269, "timestamp_epoch": "1634914733.688674000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49957, "dst_port": 1187, "tcp_stream": 649, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bea9dd436a5ab747fa30a6db", "kind": "unclassified_tcp", "frame_number": 24272, "timestamp_epoch": "1634914734.525218000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2d7371e6c2835c8229566a3c", "kind": "unclassified_tcp", "frame_number": 24283, "timestamp_epoch": "1634914738.105698000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49958, "dst_port": 1187, "tcp_stream": 651, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d56ad372c6c205e826e104cf", "kind": "unclassified_tcp", "frame_number": 24293, "timestamp_epoch": "1634914742.457973000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49959, "dst_port": 1187, "tcp_stream": 653, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3af9bd0ce722a0dc5360ede0", "kind": "unclassified_tcp", "frame_number": 24299, "timestamp_epoch": "1634914746.798840000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49960, "dst_port": 1187, "tcp_stream": 654, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-761c4eb7a9899e63af8cd165", "kind": "unclassified_tcp", "frame_number": 24307, "timestamp_epoch": "1634914751.170776000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49961, "dst_port": 1187, "tcp_stream": 655, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6f5096fd536cd295b087b865", "kind": "unclassified_tcp", "frame_number": 24317, "timestamp_epoch": "1634914755.578115000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49962, "dst_port": 1187, "tcp_stream": 657, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ee03ac662ddce2543ec6e398", "kind": "unclassified_tcp", "frame_number": 24331, "timestamp_epoch": "1634914760.017497000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49963, "dst_port": 1187, "tcp_stream": 660, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-14b1c2917333783c0a71373b", "kind": "unclassified_tcp", "frame_number": 24333, "timestamp_epoch": "1634914760.073160000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49963, "dst_port": 1187, "tcp_stream": 660, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1baa55780720f9449e1d250e", "kind": "unclassified_tcp", "frame_number": 24346, "timestamp_epoch": "1634914764.384445000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49964, "dst_port": 1187, "tcp_stream": 662, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a993f3e6db58b537dde27345", "kind": "unclassified_tcp", "frame_number": 24361, "timestamp_epoch": "1634914768.731036000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49965, "dst_port": 1187, "tcp_stream": 664, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e6c909884feb72fc2327de11", "kind": "unclassified_tcp", "frame_number": 24374, "timestamp_epoch": "1634914773.063092000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49966, "dst_port": 1187, "tcp_stream": 666, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2b70a6403036e97653467dfe", "kind": "unclassified_tcp", "frame_number": 24377, "timestamp_epoch": "1634914773.168474000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49966, "dst_port": 1187, "tcp_stream": 666, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0cc5c31f8a66b6824044543d", "kind": "unclassified_tcp", "frame_number": 24393, "timestamp_epoch": "1634914777.678688000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49967, "dst_port": 1187, "tcp_stream": 669, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d65d7d156abcac57fa043449", "kind": "unclassified_tcp", "frame_number": 24413, "timestamp_epoch": "1634914782.202524000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49968, "dst_port": 1187, "tcp_stream": 672, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fa9b5c130a40c0ecc2fbd867", "kind": "unclassified_tcp", "frame_number": 24429, "timestamp_epoch": "1634914786.586334000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49969, "dst_port": 1187, "tcp_stream": 674, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1705cb3665c8566b90c62380", "kind": "unclassified_tcp", "frame_number": 24440, "timestamp_epoch": "1634914790.918738000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49970, "dst_port": 1187, "tcp_stream": 676, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00e6207739a47e0c58512496", "kind": "unclassified_tcp", "frame_number": 24449, "timestamp_epoch": "1634914794.215171000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9940962e9db7c1218aff97b5", "kind": "unclassified_tcp", "frame_number": 24455, "timestamp_epoch": "1634914795.284153000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49971, "dst_port": 1187, "tcp_stream": 678, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-65917928aab67f0f96e3ba76", "kind": "unclassified_tcp", "frame_number": 24466, "timestamp_epoch": "1634914799.621012000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49972, "dst_port": 1187, "tcp_stream": 680, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2a57b49be7fb5817874ced86", "kind": "unclassified_tcp", "frame_number": 24476, "timestamp_epoch": "1634914804.063337000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49973, "dst_port": 1187, "tcp_stream": 681, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b684ecbd5cd5b1631fecbe62", "kind": "unclassified_tcp", "frame_number": 24487, "timestamp_epoch": "1634914808.461317000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49974, "dst_port": 1187, "tcp_stream": 682, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1ea3631a9b60bdb2177aee44", "kind": "unclassified_tcp", "frame_number": 24495, "timestamp_epoch": "1634914812.865168000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49975, "dst_port": 1187, "tcp_stream": 683, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7fd224eddd0853f446e7790d", "kind": "unclassified_tcp", "frame_number": 24518, "timestamp_epoch": "1634914817.174473000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49976, "dst_port": 1187, "tcp_stream": 686, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f9047ef4336d9c26f093161c", "kind": "unclassified_tcp", "frame_number": 24520, "timestamp_epoch": "1634914817.279665000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49976, "dst_port": 1187, "tcp_stream": 686, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8597e8569ec7a4a7a6ee866d", "kind": "unclassified_tcp", "frame_number": 24529, "timestamp_epoch": "1634914821.500078000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49977, "dst_port": 1187, "tcp_stream": 687, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f15de1a767a4f77a7a19b31d", "kind": "unclassified_tcp", "frame_number": 24535, "timestamp_epoch": "1634914824.590390000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7bb885722b838d10cfcb3cec", "kind": "unclassified_tcp", "frame_number": 24540, "timestamp_epoch": "1634914825.838101000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49978, "dst_port": 1187, "tcp_stream": 688, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7d57e265ecfd62dab55d77f6", "kind": "unclassified_tcp", "frame_number": 24551, "timestamp_epoch": "1634914830.233351000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49979, "dst_port": 1187, "tcp_stream": 689, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0a4db590e76105aabe434b73", "kind": "unclassified_tcp", "frame_number": 24553, "timestamp_epoch": "1634914830.325956000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49979, "dst_port": 1187, "tcp_stream": 689, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9704504eb36c570b05ea3b4a", "kind": "unclassified_tcp", "frame_number": 24563, "timestamp_epoch": "1634914834.606711000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-771f0e21bb30a313ff4870a1", "kind": "unclassified_tcp", "frame_number": 24565, "timestamp_epoch": "1634914835.326117000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f5e3b1943465a6781a115fd", "kind": "unclassified_tcp", "frame_number": 24569, "timestamp_epoch": "1634914840.382359000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f73da8ebcd3f0b7365acdd0b", "kind": "unclassified_tcp", "frame_number": 24573, "timestamp_epoch": "1634914845.407044000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-855fefc07831ab10159dbdd4", "kind": "unclassified_tcp", "frame_number": 24578, "timestamp_epoch": "1634914850.432219000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6cbb89ae8e1e6e5fa293878d", "kind": "unclassified_tcp", "frame_number": 24598, "timestamp_epoch": "1634914854.507594000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-cc9818e65765996f36dbcab3", "kind": "unclassified_tcp", "frame_number": 24624, "timestamp_epoch": "1634914855.473988000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-24c889d375719e72afd3bbe5", "kind": "unclassified_tcp", "frame_number": 24633, "timestamp_epoch": "1634914860.487905000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6e0daa4f1c6c8e615d001b89", "kind": "unclassified_tcp", "frame_number": 24642, "timestamp_epoch": "1634914865.502483000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bab90f820eba8ce0ee972136", "kind": "unclassified_tcp", "frame_number": 24655, "timestamp_epoch": "1634914871.500053000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3e39e7723da1e6c9e41a7db8", "kind": "unclassified_tcp", "frame_number": 24678, "timestamp_epoch": "1634914876.499852000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b811417132e2e07ac7d5f55e", "kind": "unclassified_tcp", "frame_number": 24694, "timestamp_epoch": "1634914881.499492000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f78935639cc347a0139904c8", "kind": "unclassified_tcp", "frame_number": 24707, "timestamp_epoch": "1634914884.825687000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-748ce2d29f083b8ec2305f86", "kind": "unclassified_tcp", "frame_number": 24710, "timestamp_epoch": "1634914886.544515000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1bf1496ee792c316d8d72be2", "kind": "unclassified_tcp", "frame_number": 24730, "timestamp_epoch": "1634914891.608109000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7c82b20ba235e8ae85af5441", "kind": "unclassified_tcp", "frame_number": 24746, "timestamp_epoch": "1634914896.622190000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0be09568d92315bfc97cc6a6", "kind": "unclassified_tcp", "frame_number": 24756, "timestamp_epoch": "1634914901.638454000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e020b185f7d404a375e5d84e", "kind": "unclassified_tcp", "frame_number": 24774, "timestamp_epoch": "1634914906.653760000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1dfb1a723b61d0df15c337b2", "kind": "unclassified_tcp", "frame_number": 24782, "timestamp_epoch": "1634914911.670293000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8830e7a90b97425f4eecaf87", "kind": "unclassified_tcp", "frame_number": 24800, "timestamp_epoch": "1634914914.200100000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ac466b8e8a6a90b8fc284cc9", "kind": "unclassified_tcp", "frame_number": 24807, "timestamp_epoch": "1634914914.825493000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-669d399e038c587c23173510", "kind": "unclassified_tcp", "frame_number": 24830, "timestamp_epoch": "1634914916.714941000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2d8a4ab613e76f1e07ffb487", "kind": "unclassified_tcp", "frame_number": 24841, "timestamp_epoch": "1634914921.746658000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3a19a9c163ab6f373bd3634c", "kind": "unclassified_tcp", "frame_number": 24855, "timestamp_epoch": "1634914926.747575000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a160737eb81e1f0355b7d9db", "kind": "unclassified_tcp", "frame_number": 24865, "timestamp_epoch": "1634914932.747916000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-17601006365618f698410b9d", "kind": "unclassified_tcp", "frame_number": 24870, "timestamp_epoch": "1634914937.778835000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-103082115b7080333092b35e", "kind": "unclassified_tcp", "frame_number": 24909, "timestamp_epoch": "1634914942.825532000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3a8722f5e6688c5709446a62", "kind": "unclassified_tcp", "frame_number": 25909, "timestamp_epoch": "1634914944.495932000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-cc803400becb43083ccf7c1f", "kind": "unclassified_tcp", "frame_number": 25911, "timestamp_epoch": "1634914944.575454000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f24c1dc6a0fdab54565fea6e", "kind": "unclassified_tcp", "frame_number": 25947, "timestamp_epoch": "1634914947.856946000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b2c8a920ab924fcedbe17077", "kind": "unclassified_tcp", "frame_number": 25960, "timestamp_epoch": "1634914952.888446000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e92180fd1dac8d0fda971bce", "kind": "unclassified_tcp", "frame_number": 25970, "timestamp_epoch": "1634914957.920294000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-829015074c1784d9ef0bd179", "kind": "unclassified_tcp", "frame_number": 25976, "timestamp_epoch": "1634914962.966442000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b0d2d5a02ad3ca950a42a15f", "kind": "unclassified_tcp", "frame_number": 25979, "timestamp_epoch": "1634914967.998005000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2b5efeafb26e1218c927fd4e", "kind": "unclassified_tcp", "frame_number": 25986, "timestamp_epoch": "1634914973.061087000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4d93ab040ac4dd922bd9d752", "kind": "unclassified_tcp", "frame_number": 25989, "timestamp_epoch": "1634914974.512036000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-80b3fa80839290f4be4a2f22", "kind": "unclassified_tcp", "frame_number": 25991, "timestamp_epoch": "1634914974.858065000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-dce46a16e8236bb527727548", "kind": "unclassified_tcp", "frame_number": 25993, "timestamp_epoch": "1634914974.881949000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-dab348ffed75e94d029bde2e", "kind": "unclassified_tcp", "frame_number": 25998, "timestamp_epoch": "1634914978.122620000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-78d888ecc81d84082a6ef3d4", "kind": "unclassified_tcp", "frame_number": 26017, "timestamp_epoch": "1634914983.185597000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d78b1f8b8b2902ee48bf96d0", "kind": "unclassified_tcp", "frame_number": 26183, "timestamp_epoch": "1634914988.231718000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-43cc16db09d7774ba752f97c", "kind": "unclassified_tcp", "frame_number": 26193, "timestamp_epoch": "1634914993.280191000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-166195677df0b43aced7ee24", "kind": "unclassified_tcp", "frame_number": 26372, "timestamp_epoch": "1634914998.295074000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0dbde988fba3211b9c2d7af2", "kind": "unclassified_tcp", "frame_number": 29039, "timestamp_epoch": "1634915003.325734000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fdd6057bfd5519e678c45002", "kind": "unclassified_tcp", "frame_number": 29068, "timestamp_epoch": "1634915008.342445000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a3d3d3fb911b17f5895d89e2", "kind": "unclassified_tcp", "frame_number": 29196, "timestamp_epoch": "1634915013.372691000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f017de590a25975f3c804e47", "kind": "unclassified_tcp", "frame_number": 29205, "timestamp_epoch": "1634915016.430300000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0c04e1c440bac518056bacf1", "kind": "unclassified_tcp", "frame_number": 29207, "timestamp_epoch": "1634915018.421797000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cb4a63bca85f1f98365bd505", "kind": "unclassified_tcp", "frame_number": 29214, "timestamp_epoch": "1634915023.468913000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b19e341b341b2ab67408130a", "kind": "unclassified_tcp", "frame_number": 29220, "timestamp_epoch": "1634915028.531363000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bac28b72c05394c33f06c583", "kind": "unclassified_tcp", "frame_number": 29224, "timestamp_epoch": "1634915033.561957000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9e1e0505f786db62b19738ae", "kind": "unclassified_tcp", "frame_number": 29226, "timestamp_epoch": "1634915034.546695000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-583f7c25771a40d5a9bebee3", "kind": "unclassified_tcp", "frame_number": 29230, "timestamp_epoch": "1634915038.608427000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-35bf5033df143451bf792abc", "kind": "unclassified_tcp", "frame_number": 29366, "timestamp_epoch": "1634915043.609585000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-46d7e13004c8308bc246ea20", "kind": "unclassified_tcp", "frame_number": 29368, "timestamp_epoch": "1634915046.446647000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d21efa714d020d16c91bb416", "kind": "unclassified_tcp", "frame_number": 29374, "timestamp_epoch": "1634915048.671736000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f6b3f1170cefcf9236472e08", "kind": "unclassified_tcp", "frame_number": 29376, "timestamp_epoch": "1634915053.671900000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-74e65fc9fe9b3f8fef89e5d6", "kind": "unclassified_tcp", "frame_number": 29382, "timestamp_epoch": "1634915059.687370000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-96e7474e721b874217b32cb7", "kind": "unclassified_tcp", "frame_number": 29385, "timestamp_epoch": "1634915064.734548000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4041051942389cc4ac58ad24", "kind": "unclassified_tcp", "frame_number": 29393, "timestamp_epoch": "1634915069.751320000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ec6901f669c4f6aee6c61c57", "kind": "unclassified_tcp", "frame_number": 29395, "timestamp_epoch": "1634915074.751468000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2ac76a61e2686bf137f89714", "kind": "unclassified_tcp", "frame_number": 29401, "timestamp_epoch": "1634915079.751770000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ee43948aa2990afb4b6f2eaf", "kind": "unclassified_tcp", "frame_number": 29403, "timestamp_epoch": "1634915085.751917000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c9f8394858e8ed5668c1c387", "kind": "unclassified_tcp", "frame_number": 29406, "timestamp_epoch": "1634915091.751974000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a0babce25f9bed7577b0ac34", "kind": "unclassified_tcp", "frame_number": 29410, "timestamp_epoch": "1634915094.876192000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-dc4ff780f81606e197032bdb", "kind": "unclassified_tcp", "frame_number": 29414, "timestamp_epoch": "1634915096.752157000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9f184c25e8bf994a775bcaab", "kind": "unclassified_tcp", "frame_number": 29418, "timestamp_epoch": "1634915102.750598000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7cd2e9c6cb5024e1f8d18f47", "kind": "unclassified_tcp", "frame_number": 29420, "timestamp_epoch": "1634915106.471083000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e0c6bd6f2e3e3b190dd304a1", "kind": "unclassified_tcp", "frame_number": 29422, "timestamp_epoch": "1634915107.781908000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ccdcfffe48c48aa51aab7afc", "kind": "unclassified_tcp", "frame_number": 29428, "timestamp_epoch": "1634915112.861540000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-39b71ee46c20645541bde4ad", "kind": "unclassified_tcp", "frame_number": 29431, "timestamp_epoch": "1634915117.924514000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cf209c07a850f3987c3ac235", "kind": "unclassified_tcp", "frame_number": 29448, "timestamp_epoch": "1634915123.939100000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-eea35ed10924d9af8dfa04e8", "kind": "unclassified_tcp", "frame_number": 29452, "timestamp_epoch": "1634915128.970637000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bc3061d355e3b06777da07f3", "kind": "unclassified_tcp", "frame_number": 29454, "timestamp_epoch": "1634915134.002386000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0d98f152136dc4ec708c2cee", "kind": "unclassified_tcp", "frame_number": 29469, "timestamp_epoch": "1634915139.002975000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a5e5506689cfeceb6d8de6a5", "kind": "unclassified_tcp", "frame_number": 29907, "timestamp_epoch": "1634915145.002582000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4f6b808c905c89255b41d048", "kind": "unclassified_tcp", "frame_number": 29966, "timestamp_epoch": "1634915150.048723000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0b6b37ebac9ab4a5536e9396", "kind": "unclassified_tcp", "frame_number": 29974, "timestamp_epoch": "1634915154.564426000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9263f90d3206fe5925caf9bf", "kind": "unclassified_tcp", "frame_number": 29977, "timestamp_epoch": "1634915155.111256000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-65b8db60f943dc91d0745813", "kind": "unclassified_tcp", "frame_number": 29979, "timestamp_epoch": "1634915160.158395000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49980, "dst_port": 1187, "tcp_stream": 691, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f21f03b18e5154219b12e295", "kind": "unclassified_tcp", "frame_number": 29988, "timestamp_epoch": "1634915169.479155000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49989, "dst_port": 1187, "tcp_stream": 772, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b6141fa60958bd492be95d9c", "kind": "unclassified_tcp", "frame_number": 29994, "timestamp_epoch": "1634915173.790515000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49990, "dst_port": 1187, "tcp_stream": 773, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9593d1f4c8fe0c2d92dde96d", "kind": "unclassified_tcp", "frame_number": 30004, "timestamp_epoch": "1634915178.123659000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49991, "dst_port": 1187, "tcp_stream": 774, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-596172418746bdcc9342de8c", "kind": "unclassified_tcp", "frame_number": 30006, "timestamp_epoch": "1634915178.254147000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49991, "dst_port": 1187, "tcp_stream": 774, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7a40a22b92b4266810af8216", "kind": "unclassified_tcp", "frame_number": 30015, "timestamp_epoch": "1634915182.457160000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49992, "dst_port": 1187, "tcp_stream": 775, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a3fd7f0689a979489f40e740", "kind": "unclassified_tcp", "frame_number": 30026, "timestamp_epoch": "1634915186.864666000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49993, "dst_port": 1187, "tcp_stream": 776, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-410b0998739886cba7b68371", "kind": "unclassified_tcp", "frame_number": 30036, "timestamp_epoch": "1634915191.246518000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49994, "dst_port": 1187, "tcp_stream": 777, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-48be4c54094725a6a1d0fad1", "kind": "unclassified_tcp", "frame_number": 30038, "timestamp_epoch": "1634915191.299397000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49994, "dst_port": 1187, "tcp_stream": 777, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-984c1329bef444d058db3af4", "kind": "unclassified_tcp", "frame_number": 30048, "timestamp_epoch": "1634915195.676869000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49995, "dst_port": 1187, "tcp_stream": 778, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f0489c0145bde7cade9389c4", "kind": "unclassified_tcp", "frame_number": 30103, "timestamp_epoch": "1634915200.013945000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49996, "dst_port": 1187, "tcp_stream": 781, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-21b4763d7a4dac52ae214bd7", "kind": "unclassified_tcp", "frame_number": 30154, "timestamp_epoch": "1634915204.354964000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49997, "dst_port": 1187, "tcp_stream": 784, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8769a41c1e2f595403925925", "kind": "unclassified_tcp", "frame_number": 30157, "timestamp_epoch": "1634915204.394990000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49997, "dst_port": 1187, "tcp_stream": 784, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cf6989917ac04318df2ee51a", "kind": "unclassified_tcp", "frame_number": 30282, "timestamp_epoch": "1634915208.705482000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49998, "dst_port": 1187, "tcp_stream": 788, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-60ff6d433e128751e03fb25a", "kind": "unclassified_tcp", "frame_number": 30687, "timestamp_epoch": "1634915213.063060000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 49999, "dst_port": 1187, "tcp_stream": 790, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8a29a815e2d33b3db638f287", "kind": "unclassified_tcp", "frame_number": 30691, "timestamp_epoch": "1634915214.895070000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-671ce2de7656b63f51dbd179", "kind": "unclassified_tcp", "frame_number": 30699, "timestamp_epoch": "1634915217.431960000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50000, "dst_port": 1187, "tcp_stream": 791, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-695315e4e7d41ace85b24f46", "kind": "unclassified_tcp", "frame_number": 30701, "timestamp_epoch": "1634915217.504579000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50000, "dst_port": 1187, "tcp_stream": 791, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f228f460d7e434c41922549b", "kind": "unclassified_tcp", "frame_number": 30711, "timestamp_epoch": "1634915221.805706000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50001, "dst_port": 1187, "tcp_stream": 792, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-331b18e8de54a03d94227d12", "kind": "unclassified_tcp", "frame_number": 30717, "timestamp_epoch": "1634915226.259542000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50002, "dst_port": 1187, "tcp_stream": 793, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7c19e4f0c45d70150ac3fdd0", "kind": "unclassified_tcp", "frame_number": 30719, "timestamp_epoch": "1634915226.488991000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0fe981012f2da4c32f80a4b7", "kind": "unclassified_tcp", "frame_number": 30721, "timestamp_epoch": "1634915226.504867000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50002, "dst_port": 1187, "tcp_stream": 793, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b4d4f8ae497f22775e8011f5", "kind": "unclassified_tcp", "frame_number": 30727, "timestamp_epoch": "1634915230.751442000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50003, "dst_port": 1187, "tcp_stream": 794, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d28092ab3670f61c62f9bb82", "kind": "unclassified_tcp", "frame_number": 30735, "timestamp_epoch": "1634915235.074472000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50004, "dst_port": 1187, "tcp_stream": 795, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d7d399d2ec7d4bdf7c9d0698", "kind": "unclassified_tcp", "frame_number": 30745, "timestamp_epoch": "1634915239.499212000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50005, "dst_port": 1187, "tcp_stream": 796, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2fe43480867e0e3fe72657d8", "kind": "unclassified_tcp", "frame_number": 30747, "timestamp_epoch": "1634915239.629859000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50005, "dst_port": 1187, "tcp_stream": 796, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2ba08e3cd10366dcd441cc81", "kind": "unclassified_tcp", "frame_number": 30755, "timestamp_epoch": "1634915243.975042000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50006, "dst_port": 1187, "tcp_stream": 797, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-998c8f51b13de9554575c338", "kind": "unclassified_tcp", "frame_number": 30771, "timestamp_epoch": "1634915248.365678000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50007, "dst_port": 1187, "tcp_stream": 798, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-736e8fdd056eda5830d1d4ae", "kind": "unclassified_tcp", "frame_number": 30779, "timestamp_epoch": "1634915252.687864000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50008, "dst_port": 1187, "tcp_stream": 799, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-74e07eb4ff413aa4ac14867e", "kind": "unclassified_tcp", "frame_number": 31286, "timestamp_epoch": "1634915256.979674000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50009, "dst_port": 1187, "tcp_stream": 802, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e328b3581926734e9058f5e5", "kind": "unclassified_tcp", "frame_number": 31453, "timestamp_epoch": "1634915261.316394000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50010, "dst_port": 1187, "tcp_stream": 803, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-41ef025de81471f439a52bde", "kind": "unclassified_tcp", "frame_number": 31720, "timestamp_epoch": "1634915265.705156000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50011, "dst_port": 1187, "tcp_stream": 806, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-30149e970b67104de9b399af", "kind": "unclassified_tcp", "frame_number": 33295, "timestamp_epoch": "1634915270.523756000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50012, "dst_port": 1187, "tcp_stream": 808, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-924814d6f1e7f257acfb0d6a", "kind": "unclassified_tcp", "frame_number": 33526, "timestamp_epoch": "1634915270.739701000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50012, "dst_port": 1187, "tcp_stream": 808, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b25d0668f5286d23df0b79fd", "kind": "unclassified_tcp", "frame_number": 37936, "timestamp_epoch": "1634915274.584035000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-57649f99a530d1297c63d400", "kind": "unclassified_tcp", "frame_number": 39052, "timestamp_epoch": "1634915275.078968000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50013, "dst_port": 1187, "tcp_stream": 809, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2d1459e2eacd8c8e0f638ef7", "kind": "unclassified_tcp", "frame_number": 42861, "timestamp_epoch": "1634915277.104986000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0107000000000402000079736c76696432383231393100000000000000000000000000000000000000003137332e36362e3134362e31313200003131322e7375622d3137332d36362d3134362e6265346d652e6e65740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020e30f000c01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" } }, { "event_id": "evt-a97382371c5828da127e9f73", "kind": "unclassified_tcp", "frame_number": 42863, "timestamp_epoch": "1634915278.697337000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0a070000000051020000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000197b32356d63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000356f504d44384828685558534a2a5700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" } }, { "event_id": "evt-6e4961524d9aa41b8955fc3a", "kind": "unclassified_tcp", "frame_number": 42864, "timestamp_epoch": "1634915278.698011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0b070000000051020000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000197b32356d63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000356f504d44384828685558534a2a5700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" } }, { "event_id": "evt-6f975d7441de8e45b40742fd", "kind": "unclassified_tcp", "frame_number": 42869, "timestamp_epoch": "1634915279.416517000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50014, "dst_port": 1187, "tcp_stream": 811, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b3f72f2bee6dc23d1d9cd74e", "kind": "unclassified_tcp", "frame_number": 42877, "timestamp_epoch": "1634915283.750083000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50015, "dst_port": 1187, "tcp_stream": 812, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cab741496569e2549b6e95c9", "kind": "unclassified_tcp", "frame_number": 42879, "timestamp_epoch": "1634915283.832866000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50015, "dst_port": 1187, "tcp_stream": 812, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d29e63ad2ef9e784004cee3a", "kind": "unclassified_tcp", "frame_number": 42895, "timestamp_epoch": "1634915291.186033000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50016, "dst_port": 1187, "tcp_stream": 813, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-33dc06d6289db38b59b9db7c", "kind": "unclassified_tcp", "frame_number": 42912, "timestamp_epoch": "1634915295.606577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50017, "dst_port": 1187, "tcp_stream": 814, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5b45bda88ed5d84bf9a57e5c", "kind": "unclassified_tcp", "frame_number": 42917, "timestamp_epoch": "1634915297.474609000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100ab920c000000197b" } }, { "event_id": "evt-0966075cc79578966acfd0e9", "kind": "unclassified_tcp", "frame_number": 42919, "timestamp_epoch": "1634915297.650511000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ab920e000000050200020207020008630c000000197b0407020008630e0000000502000202070300eb490c000000197b04070300eb490e00000005020002" } }, { "event_id": "evt-7763c5769a016d967a7bf580", "kind": "unclassified_tcp", "frame_number": 42920, "timestamp_epoch": "1634915297.651522000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ab920c00000005020307020008630c000000050203070300eb490c0000000502" } }, { "event_id": "evt-c5991b80f9c66b0c8e13ce67", "kind": "unclassified_tcp", "frame_number": 42922, "timestamp_epoch": "1634915298.012467000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ab9220000000010432356d630f356f504d44384828685558534a2a5704070200086320000000010432356d630f356f504d44384828685558534a2a5704070300eb4920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5021b425b29f25deb7cfc372", "kind": "unclassified_tcp", "frame_number": 42923, "timestamp_epoch": "1634915298.013176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ab920c00000001000307020008630c000000010003070300eb490c0000000100" } }, { "event_id": "evt-9bd86440d89a13a57e68c955", "kind": "unclassified_tcp", "frame_number": 42926, "timestamp_epoch": "1634915298.358210000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ab921e000000050100030d6170692e69706966792e6f726701bb0407020008631e000000050100030d6170692e69706966792e6f726701bb04070300eb491e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-2f97652a4432a8b31fb03d66", "kind": "unclassified_tcp", "frame_number": 42938, "timestamp_epoch": "1634915298.460990000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200086314000000050000010a0a169cc2de" } }, { "event_id": "evt-a0755fe41b49dc82eeef814d", "kind": "unclassified_tcp", "frame_number": 42940, "timestamp_epoch": "1634915298.461183000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ab9214000000050000010a0a169cc2dd" } }, { "event_id": "evt-1b8dbcab972cfb5e345bfb00", "kind": "unclassified_tcp", "frame_number": 42944, "timestamp_epoch": "1634915298.477840000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300eb4914000000050000010a0a169cc2df" } }, { "event_id": "evt-f5526298176fe7c8c910d58a", "kind": "unclassified_tcp", "frame_number": 42946, "timestamp_epoch": "1634915298.769475000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-41744b2b1ca6cd3a7d3b5c6e", "kind": "unclassified_tcp", "frame_number": 42953, "timestamp_epoch": "1634915298.836276000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a09b1f5828ea2f811a7f2add", "kind": "unclassified_tcp", "frame_number": 42954, "timestamp_epoch": "1634915298.836299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "89f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d28" } }, { "event_id": "evt-fcb0782eae5317b3b286c999", "kind": "unclassified_tcp", "frame_number": 42961, "timestamp_epoch": "1634915298.839231000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bc2dcc00d4479a6252bc4024", "kind": "unclassified_tcp", "frame_number": 42962, "timestamp_epoch": "1634915298.839248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e29a8fcff60ca56bd03e4d3b", "kind": "unclassified_tcp", "frame_number": 42963, "timestamp_epoch": "1634915298.839256000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1d271a8139a31608818e6a41", "kind": "unclassified_tcp", "frame_number": 42967, "timestamp_epoch": "1634915298.942634000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac394976042ed86c34baa05a", "kind": "unclassified_tcp", "frame_number": 42983, "timestamp_epoch": "1634915299.020296000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f7ef7cd0b4ac208aa52323fb", "kind": "unclassified_tcp", "frame_number": 42984, "timestamp_epoch": "1634915299.020309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-332195f1b9837d885fd29711", "kind": "unclassified_tcp", "frame_number": 42985, "timestamp_epoch": "1634915299.020319000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-f8b7a24f0960afa19c3dad7f", "kind": "unclassified_tcp", "frame_number": 42993, "timestamp_epoch": "1634915299.020777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f1d2f97641404c35cc303817", "kind": "unclassified_tcp", "frame_number": 42994, "timestamp_epoch": "1634915299.020789000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fbf1fc38798d60672e815df7", "kind": "unclassified_tcp", "frame_number": 42996, "timestamp_epoch": "1634915299.020890000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300eb490a10000016030300590200005503038052c7ae4ca49d7d89c4edf5b7316d0c1bfa80b96062de3e3e149d7e40e840e6203703d1361817a37e784c7b743cd8274dba0d4f844d89d5abc6d655f9a27b974ac02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-45e1a089f03d1db651f5b681", "kind": "unclassified_tcp", "frame_number": 42997, "timestamp_epoch": "1634915299.020900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ea43954aa3cfbcae823f0ae0", "kind": "unclassified_tcp", "frame_number": 42998, "timestamp_epoch": "1634915299.020907000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-45f20ca0e65e62ca1f377a7d", "kind": "unclassified_tcp", "frame_number": 43003, "timestamp_epoch": "1634915299.021159000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e26483e16610216612833fad", "kind": "unclassified_tcp", "frame_number": 43004, "timestamp_epoch": "1634915299.021172000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "2ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c000149030017410434d19273e65ca4adae491b702db24f11c9a5bb4d57151e02efd0f3f73a52334d12030f4216175516a637ff9e7fb74ce6aa781b088513723f888e973d4369c13b060101006df54eaaaf07d5d4a938873a7ba45c4ac0ed26cfcd6172507509b0171890f799d9cdddf66aa6430b5f81e91cafb3844d97b9510bcf53706203ce2226aee05f6e64ee631b5bd75e7e5f7a87533ed264fd3041a5ae870863e613058ffc138fba368521108597987fd987a12da4c75c46003f5b3076bc924baa2c3411490ae2aab289a7124bf822a449ec8f2e4e13ae4389c85e08966492941f358aa6922553a52110443f677ab56adc3603b7f9a67c32b079511719cf45d3052d162b028a1b913cdf57bbfdc3fc4b3a22c2a01ba2bd23ec8486205405e2c50764223526d2b083ed5f424b318547144ed8304a3aa40e74feef97e678180c72b59fc498fafc36d03c16030300040e000000" } }, { "event_id": "evt-32d2c2ba0444a8db4ce35546", "kind": "unclassified_tcp", "frame_number": 43009, "timestamp_epoch": "1634915299.313113000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0749c215758c9238dadb1448", "kind": "unclassified_tcp", "frame_number": 43017, "timestamp_epoch": "1634915299.384197000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ab923d0000001403030001011603030028fe172ba036ba5c71b8a6e4505da8d546b2c7f5e3c16924a3b8a60be2b04ff6a36e4ccbdea8ef53f2" } }, { "event_id": "evt-346dd3fa72e714cb66d58f8b", "kind": "unclassified_tcp", "frame_number": 43019, "timestamp_epoch": "1634915299.384685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020008633d0000001403030001011603030028d252d8c0589251ce2c5b315fea4a3edc285587aa149e445e05171e427a3f986af5c0ea67ad91a78f" } }, { "event_id": "evt-ecbf7a3cc96f1e80c881fe75", "kind": "unclassified_tcp", "frame_number": 43023, "timestamp_epoch": "1634915299.524678000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300eb4988000000160303004610000042410471d1fa8020bcf833b5fb5350dcea83112e2182b2ccb207654078cfd7a6c49ca11ce8ff85439e4d8406f3b6c0050b6c1e81900eb913e5a9816611957db11c094b14030300010116030300280000000000000000130e1b76d51e67ce43aa25e6c19c6f6deb48ec4df4ed313167971ae8de804657" } }, { "event_id": "evt-f33a02f474b6bd15b05d9d07", "kind": "unclassified_tcp", "frame_number": 43028, "timestamp_epoch": "1634915299.611991000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300eb493d0000001403030001011603030028e71417fe7d1e5a43a946b37bb798795fe1cc0884d0ed46f40694dc19cf672e35228ac6d34b28c089" } }, { "event_id": "evt-c9adc5d6ce7ece46e4fef7eb", "kind": "unclassified_tcp", "frame_number": 43031, "timestamp_epoch": "1634915299.715336000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5c1e505b847900da36b50198", "kind": "unclassified_tcp", "frame_number": 43041, "timestamp_epoch": "1634915299.793962000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-57d9875d7a70de7acc5ee754", "kind": "unclassified_tcp", "frame_number": 43045, "timestamp_epoch": "1634915299.794486000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ab920a000000040702000863eb00000017030300dcd252d8c0589251cff34d683105d17d7eba4314f039e718beddef710d6766d3b6bd1e40fcdb61c80b2054732ebe64cbb9eacb5c3206db39db6c6e7aee287ea686ed283b22b6f474bb3c67adc3c1b82667004fb3fedd6b9432c7bc972530c5f4a44b51ee1d1ee859d1eebb66d9c36f264f8d82e21c2a80409a0c2b11435af7f80b5cab3276230a725f8497eac7593fb4a938e37246584e8fdc5e0f18979a64afde69082891d8475f1d7009321c4be95fe6b5ea42726d3719b4d1fde8977e52103bc4b2f5bcc38c91a26b9e6f5e16c075fac01857670858b1529e52cedc" } }, { "event_id": "evt-87b4d6cce90e284136262cf7", "kind": "unclassified_tcp", "frame_number": 43050, "timestamp_epoch": "1634915299.795547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200086329000000150303001ad252d8c0589251d0e3d8900c7c95fa58fcf5e302419f5dc17ebe" } }, { "event_id": "evt-03476245d988540c265144d0", "kind": "unclassified_tcp", "frame_number": 43055, "timestamp_epoch": "1634915299.795987000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020008630a000000" } }, { "event_id": "evt-94fb109f12179ab9b4900d13", "kind": "unclassified_tcp", "frame_number": 43059, "timestamp_epoch": "1634915299.896668000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300eb49a40000001703030095000000000000000134294063ac05bec2b4b4f7b62fa79bf72001d1329791f9203bfcbfb52c3af0cfef830debb94fb48756656d621c38810b8fbcd3f2dc6bd007ec3ead6c4fa036f53684c903e75e861bd4f90bbcca8be9730156c66479ddc91fed5d0f4c54fe610923ba5a68d22da34b402cb75494cd47f30239f7d7da8b71c44a24067b0bb39c3e8c538ed12dfc3b514c05d1d18c" } }, { "event_id": "evt-257f9fa648a1cefd15c33d2f", "kind": "unclassified_tcp", "frame_number": 43065, "timestamp_epoch": "1634915299.962555000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50018, "dst_port": 1187, "tcp_stream": 818, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9a0dcc202d7ddb5f795018a0", "kind": "unclassified_tcp", "frame_number": 43069, "timestamp_epoch": "1634915299.976746000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dd835967f69ae4daf7b39c33", "kind": "unclassified_tcp", "frame_number": 43073, "timestamp_epoch": "1634915299.977381000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300eb490a000000" } }, { "event_id": "evt-a0597b5f553f43ba85fc3c89", "kind": "unclassified_tcp", "frame_number": 43077, "timestamp_epoch": "1634915300.605872000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d8900c000000197b" } }, { "event_id": "evt-b848997bbf047ed766ddf7e5", "kind": "unclassified_tcp", "frame_number": 43079, "timestamp_epoch": "1634915300.816911000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d8900e000000050200020207020074b60c000000197b0407020074b60e00000005020002" } }, { "event_id": "evt-09625ea0ac4048e220fc35dc", "kind": "unclassified_tcp", "frame_number": 43080, "timestamp_epoch": "1634915300.817777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d8900c00000005020307020074b60c0000000502" } }, { "event_id": "evt-181d1fe5159ee0a39aa7aa88", "kind": "unclassified_tcp", "frame_number": 43082, "timestamp_epoch": "1634915301.130708000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d89020000000010432356d630f356f504d44384828685558534a2a570407020074b620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e618c1bdc9d619a486f2e2ed", "kind": "unclassified_tcp", "frame_number": 43083, "timestamp_epoch": "1634915301.131415000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d8900c00000001000307020074b60c0000000100" } }, { "event_id": "evt-98ea3c83f6d3f82e63703ac1", "kind": "unclassified_tcp", "frame_number": 43086, "timestamp_epoch": "1634915301.497557000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d890250000000501000314736d74702d72656c61792e676d61696c2e636f6d01d10407020074b62500000005010003146d61696c2e6d7966616972706f696e742e6e6574006e" } }, { "event_id": "evt-04b76bc603fea40346ed8322", "kind": "unclassified_tcp", "frame_number": 43098, "timestamp_epoch": "1634915301.575900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d89014000000050000010a0a169cc2e0" } }, { "event_id": "evt-e3b901a80165f390d915bd0f", "kind": "unclassified_tcp", "frame_number": 43102, "timestamp_epoch": "1634915301.636954000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020074b614000000050000010a0a169cc2e1" } }, { "event_id": "evt-b9b47f9030094b9ffe95d005", "kind": "unclassified_tcp", "frame_number": 43105, "timestamp_epoch": "1634915301.702175000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020074b65a0000002b4f4b20504f503320426967666f6f742076312e3020736572766572207265616479203c383133332e31363334393135333031406d61696c31386332362e636172726965727a6f6e652e636f6d3e0d0a" } }, { "event_id": "evt-7b72144b50357a5deb357c6b", "kind": "unclassified_tcp", "frame_number": 43108, "timestamp_epoch": "1634915301.875635000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d8900a000000" } }, { "event_id": "evt-828fa53f5489451c5fd0d151", "kind": "unclassified_tcp", "frame_number": 43114, "timestamp_epoch": "1634915302.065571000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010010f70c000000197b0407010010f70e000000050200020507020074b60a000000" } }, { "event_id": "evt-5c3711e22d687e0b46f9a7bd", "kind": "unclassified_tcp", "frame_number": 43117, "timestamp_epoch": "1634915302.066522000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010010f70c0000000502" } }, { "event_id": "evt-494ef8a5900adc2523a52c39", "kind": "unclassified_tcp", "frame_number": 43122, "timestamp_epoch": "1634915302.241382000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020053ae0c000000197b0407020053ae0e00000005020002" } }, { "event_id": "evt-5bb384f09b4cbb1dd66d6872", "kind": "unclassified_tcp", "frame_number": 43123, "timestamp_epoch": "1634915302.241811000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020053ae0c0000000502" } }, { "event_id": "evt-11279739f89fe955b92ab2eb", "kind": "unclassified_tcp", "frame_number": 43125, "timestamp_epoch": "1634915302.418912000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010010f720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-fd9a82f8d15913f4b3b5e67d", "kind": "unclassified_tcp", "frame_number": 43126, "timestamp_epoch": "1634915302.419467000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010010f70c0000000100" } }, { "event_id": "evt-7592d7d1fa256d64c8bd44e2", "kind": "unclassified_tcp", "frame_number": 43128, "timestamp_epoch": "1634915302.761875000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020053ae20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-3f285453c60a46f677dab9d0", "kind": "unclassified_tcp", "frame_number": 43129, "timestamp_epoch": "1634915302.762268000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020053ae0c0000000100" } }, { "event_id": "evt-feff150f10022e8d2f2c3f3b", "kind": "unclassified_tcp", "frame_number": 43131, "timestamp_epoch": "1634915302.950740000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010010f7250000000501000314736d74702d72656c61792e676d61696c2e636f6d024b" } }, { "event_id": "evt-b5e1a9e9b527efd32023b74c", "kind": "unclassified_tcp", "frame_number": 43135, "timestamp_epoch": "1634915302.989712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010010f714000000050000010a0a169cc2e2" } }, { "event_id": "evt-a45bb98084c3e43d9e8b948b", "kind": "unclassified_tcp", "frame_number": 43138, "timestamp_epoch": "1634915303.044291000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010010f74500000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450207a3437736d323836353237366f6f692e3231202d2067736d74700d0a" } }, { "event_id": "evt-38cb1a5039dd202799d3ed66", "kind": "unclassified_tcp", "frame_number": 43141, "timestamp_epoch": "1634915303.130652000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020053ae2500000005010003146d61696c2e6d7966616972706f696e742e6e6574008f" } }, { "event_id": "evt-724d7472a5959f3009d6724e", "kind": "unclassified_tcp", "frame_number": 43145, "timestamp_epoch": "1634915303.313627000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010010f70a000000" } }, { "event_id": "evt-778782432bae00ce54cff9c4", "kind": "unclassified_tcp", "frame_number": 43159, "timestamp_epoch": "1634915304.333193000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50019, "dst_port": 1187, "tcp_stream": 823, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0fd5913735cfe49948f41a06", "kind": "unclassified_tcp", "frame_number": 43174, "timestamp_epoch": "1634915308.664668000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50020, "dst_port": 1187, "tcp_stream": 824, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-81bd17198c64e414625d7bc7", "kind": "unclassified_tcp", "frame_number": 43188, "timestamp_epoch": "1634915312.996591000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50021, "dst_port": 1187, "tcp_stream": 825, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-11e4df16254296d4babfda3a", "kind": "unclassified_tcp", "frame_number": 43199, "timestamp_epoch": "1634915317.343167000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50022, "dst_port": 1187, "tcp_stream": 826, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e23ec08d74ea1e8b0598389c", "kind": "unclassified_tcp", "frame_number": 43214, "timestamp_epoch": "1634915321.717200000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50023, "dst_port": 1187, "tcp_stream": 827, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-567dc581e11e826f19961e5c", "kind": "unclassified_tcp", "frame_number": 43219, "timestamp_epoch": "1634915324.178802000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020053ae1400000005050001000000000000" } }, { "event_id": "evt-ce7da5929e5c3abca8136649", "kind": "unclassified_tcp", "frame_number": 43222, "timestamp_epoch": "1634915324.591980000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020053ae0a000000" } }, { "event_id": "evt-8b4dad4201b7cf47d6e90d4d", "kind": "unclassified_tcp", "frame_number": 43239, "timestamp_epoch": "1634915326.098014000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50024, "dst_port": 1187, "tcp_stream": 828, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a8010b6b1aa78f8858b270a8", "kind": "unclassified_tcp", "frame_number": 44296, "timestamp_epoch": "1634915330.456215000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50025, "dst_port": 1187, "tcp_stream": 831, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-51209f25f7a05527a67a79cb", "kind": "unclassified_tcp", "frame_number": 44300, "timestamp_epoch": "1634915331.229729000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010046ac0c000000197b" } }, { "event_id": "evt-7f7ea6a5c0ec898c86956a3f", "kind": "unclassified_tcp", "frame_number": 44303, "timestamp_epoch": "1634915331.413370000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200b31b0c000000197b0407010046ac0e000000050200020207030094aa0c000000197b04070200b31b0e000000050200020407030094aa0e00000005020002" } }, { "event_id": "evt-36c8bc91fafff87ac2191f67", "kind": "unclassified_tcp", "frame_number": 44304, "timestamp_epoch": "1634915331.414182000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010046ac0c000000050203070200b31b0c00000005020307030094aa0c0000000502" } }, { "event_id": "evt-3b9317507ee6810e27e64418", "kind": "unclassified_tcp", "frame_number": 44306, "timestamp_epoch": "1634915331.732343000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010046ac20000000010432356d630f356f504d44384828685558534a2a5704070200b31b20000000010432356d630f356f504d44384828685558534a2a570407030094aa20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-bf660d12f83c11d3711445cd", "kind": "unclassified_tcp", "frame_number": 44307, "timestamp_epoch": "1634915331.732908000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010046ac0c000000010003070200b31b0c00000001000307030094aa0c0000000100" } }, { "event_id": "evt-6cfbb97c53d3ec98be91939d", "kind": "unclassified_tcp", "frame_number": 44309, "timestamp_epoch": "1634915332.087147000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010046ac1e000000050100030d6170692e69706966792e6f726701bb04070200b31b1e000000050100030d6170692e69706966792e6f726701bb0407030094aa1e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-81e130d69683c1f8f593d19e", "kind": "unclassified_tcp", "frame_number": 44323, "timestamp_epoch": "1634915332.190001000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa14000000050000010a0a169cc2e8" } }, { "event_id": "evt-05287dab6daa99393e890520", "kind": "unclassified_tcp", "frame_number": 44325, "timestamp_epoch": "1634915332.190315000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010046ac14000000050000010a0a169cc2e604070200b31b14000000050000010a0a169cc2e7" } }, { "event_id": "evt-d5ac70280b766d6e4330e210", "kind": "unclassified_tcp", "frame_number": 44328, "timestamp_epoch": "1634915332.517779000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-63cdd881730115fd78b3ef56", "kind": "unclassified_tcp", "frame_number": 44340, "timestamp_epoch": "1634915332.620897000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa0a1000001603030059020000550303ac34bc4f9016a7db69e784b802c08e569a5010854b2426ea2fe3f56fd7fcb85a20578d01d04551833faa232efafc7b2420aa175fe7edbb840887e3af250cf470b7c02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-f33199d2fadb0dea4b68ba0c", "kind": "unclassified_tcp", "frame_number": 44341, "timestamp_epoch": "1634915332.620909000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8ae8696827f04ec051753b09", "kind": "unclassified_tcp", "frame_number": 44342, "timestamp_epoch": "1634915332.620917000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8565f05de0cc7bc6199439e2", "kind": "unclassified_tcp", "frame_number": 44344, "timestamp_epoch": "1634915332.621036000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa600700000e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea7" } }, { "event_id": "evt-7a6cc72ac7fb49e9c57b9943", "kind": "unclassified_tcp", "frame_number": 44345, "timestamp_epoch": "1634915332.621047000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-48ecd485252bc8c6aa6482ae", "kind": "unclassified_tcp", "frame_number": 44350, "timestamp_epoch": "1634915332.695298000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-07774ba2407892e1bed0bbc6", "kind": "unclassified_tcp", "frame_number": 44366, "timestamp_epoch": "1634915332.767945000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200b31b0a10000016030300590200005503032c6d767357323bb881c98f371c05ef543a125e1a8017325ba152c3a606928c0620d58ef493282bc9cdaf5e0267cfb72a65d51bb8fdd8b730dabb9971d950529da8c02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-1970895421376f9125dc92fc", "kind": "unclassified_tcp", "frame_number": 44367, "timestamp_epoch": "1634915332.767958000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-58d557194ba872a37588209f", "kind": "unclassified_tcp", "frame_number": 44368, "timestamp_epoch": "1634915332.767967000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ad617a5ece7e36367ee8c666", "kind": "unclassified_tcp", "frame_number": 44371, "timestamp_epoch": "1634915332.768100000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e0bcad349bbf2ea789b41ee", "kind": "unclassified_tcp", "frame_number": 44372, "timestamp_epoch": "1634915332.768111000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-64338a1e5a7cd22904d37de9", "kind": "unclassified_tcp", "frame_number": 44384, "timestamp_epoch": "1634915332.770308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6352f07db82207699fcbecf4", "kind": "unclassified_tcp", "frame_number": 44385, "timestamp_epoch": "1634915332.770322000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "81f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-7da91711f3ec406a0820f033", "kind": "unclassified_tcp", "frame_number": 44389, "timestamp_epoch": "1634915332.770654000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-beaf1fc1b4013c4dd687a017", "kind": "unclassified_tcp", "frame_number": 44390, "timestamp_epoch": "1634915332.770666000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e181c7dafbb585f191785683", "kind": "unclassified_tcp", "frame_number": 44392, "timestamp_epoch": "1634915332.770758000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eb0f6a85d10f467a9d1ddbab", "kind": "unclassified_tcp", "frame_number": 44393, "timestamp_epoch": "1634915332.770767000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c6a9fb439fda20928bf62403", "kind": "unclassified_tcp", "frame_number": 44397, "timestamp_epoch": "1634915332.957187000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa8800000016030300461000004241049ea81dc3be8ea809aebcbaca0df7e5241386649e93f4781b946d4e139bfca1bf46376d1e34b6323dfacb72e0c43de7194d5c05921589466c86d2b071d4298d2c14030300010116030300280000000000000000f1608bdd0877043f7f001b728fbc8567b718546151ca84a29ca06cb403f2f5d5" } }, { "event_id": "evt-70d30ed230125e6706affda0", "kind": "unclassified_tcp", "frame_number": 44402, "timestamp_epoch": "1634915333.031097000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa3d0000001403030001011603030028890d65ed5bc343af165183b4b5bd6b936b59e9ebf9c5495ed8afc1979b6c2f103b8dc2670b2b0088" } }, { "event_id": "evt-6e800d60fc088456230152cc", "kind": "unclassified_tcp", "frame_number": 44405, "timestamp_epoch": "1634915333.144841000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-877a593911d4d80939c89b73", "kind": "unclassified_tcp", "frame_number": 44413, "timestamp_epoch": "1634915333.225432000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010046ac3d0000001403030001011603030028414c94fedc9dabced28ed6871bb0c698f48620cb2d914de66ce6479f1e9c397273ff0df0e01dd326" } }, { "event_id": "evt-6e6a6f249d943a3a88359fb1", "kind": "unclassified_tcp", "frame_number": 44415, "timestamp_epoch": "1634915333.225749000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200b31b3d00000014030300010116030300283badc93bcf33d7271cdd9ae4a1207bc8f9bf7f8d0545831501dee4c4c1de561ab26907ce8b965a28" } }, { "event_id": "evt-d6acfba88cac33070ed44168", "kind": "unclassified_tcp", "frame_number": 44420, "timestamp_epoch": "1634915333.322188000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aaa40000001703030095000000000000000111c20265bec5577d4d7b091ef8a4e91d390ebeedb2994a4a3239b838fbc8bb2b909681aa8d56a420a0428a22c2b219f795fb14d1825ced9d6c6aaa7eaceb11ae56b339e2533f93ac34f6cfeba8618c426f344437b09dd6682bcfd9e477d624b10fdcb04dc4dda50f0b8f6fd1e6a08dc5d9ba6dda6827fd34a7202d6cb7b08b34665f137c64e90681cd292b293f" } }, { "event_id": "evt-2fec4fee61e7e94ab267617d", "kind": "unclassified_tcp", "frame_number": 44426, "timestamp_epoch": "1634915333.406364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030094aa0a01000017030300dc890d65ed5bc343b088f213eaa4988dae2b169167f013bfe40338529fcecb2d05d297356c87584526df57c971113a0a0b2456b21372bb9c6997c00076f1827ac7dcc231138c8a6fe59f3f009890708b69c1df664870f80dd9b67c8543e7ce38e754ececaef120185c3b2d3dad396b83fdbb8033db7db835a5a8f39473d15ca650f3726856065a9f5da18456b53757b146e652ad3e51b25050337e9ac07e143381c6273f991fb98572d72231d066e7f0be7639974675fc943a3dccf8fb438ed516b0d102f98eebac3290e3d6647cccd992287e77ca56841c9886f35871150303001a890d65ed5bc343b111e0680b0652a90610d1bb169e2ea489c32a" } }, { "event_id": "evt-1a02984765c330d4bc8f6bf0", "kind": "unclassified_tcp", "frame_number": 44430, "timestamp_epoch": "1634915333.407134000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030094aa0a000000" } }, { "event_id": "evt-f44ec4e531216525ab8a522d", "kind": "unclassified_tcp", "frame_number": 44432, "timestamp_epoch": "1634915333.506046000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010046aca4000000170303009500000000000000012ad2bae55c32fba070a119b5cae4196fd0b67e9ba192141d2780f4a937ada63ec36d7676a47cdf26af178f359bf8cf119564300441d6adee1e6a18fb1ce43da9b7ca0c8d21aec4406cd74920ec6b7e0356d33e9eb412142dab14beb8fc09b664215653f3b788bb5ea40ece7be0ecbea451af68d5b8be705e80b4f2984c97ba4977ffdecbfb5c44a045fe89e1b5" } }, { "event_id": "evt-cb962f2247d723431a303106", "kind": "unclassified_tcp", "frame_number": 44438, "timestamp_epoch": "1634915333.582956000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff4f84c80de87fff82897025", "kind": "unclassified_tcp", "frame_number": 44442, "timestamp_epoch": "1634915333.583473000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010046ac0a000000" } }, { "event_id": "evt-3c1ddbda5215a1016bb5e862", "kind": "unclassified_tcp", "frame_number": 44444, "timestamp_epoch": "1634915333.688459000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200b31ba400000017030300950000000000000001c1eaed1cdc6668254acde4f7625f4d9fb85e79517a5bb9307df5a9d37edfe5ddad4a051311538f77bdc292f31362c76b1536d7fbd09266b6648876cb20c8528e22e2c003a00f066d9e84461c24aad4717b38f6e87bdeec4c37241d0daf2d34d6a21573078814944b61fa179610eb365bb4942fdb679c3bbdab73a3e154335b6776cd3298050343822a46bd3e68" } }, { "event_id": "evt-e65a0e7205995ac963cbff71", "kind": "unclassified_tcp", "frame_number": 44452, "timestamp_epoch": "1634915333.790367000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0daddb6f55912d9a14218ae1", "kind": "unclassified_tcp", "frame_number": 44456, "timestamp_epoch": "1634915333.790982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200b31b0a000000" } }, { "event_id": "evt-11d17d1975edeca857a0f80a", "kind": "unclassified_tcp", "frame_number": 44458, "timestamp_epoch": "1634915333.875205000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030047c90c000000197b0407030047c90e00000005020002" } }, { "event_id": "evt-8a85081df5a2aa37d462fbdb", "kind": "unclassified_tcp", "frame_number": 44459, "timestamp_epoch": "1634915333.875953000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030047c90c0000000502" } }, { "event_id": "evt-85ca85ae24c73b4a49fd805f", "kind": "unclassified_tcp", "frame_number": 44463, "timestamp_epoch": "1634915334.193832000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100fe310c000000197b" } }, { "event_id": "evt-9a4768f9ced3b4f27ec3396b", "kind": "unclassified_tcp", "frame_number": 44467, "timestamp_epoch": "1634915334.378999000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fe310e0000000502000202070200cc3e0c000000197b04070200cc3e0e00000005020002" } }, { "event_id": "evt-1121cfbad3e85b17b4a5c43c", "kind": "unclassified_tcp", "frame_number": 44468, "timestamp_epoch": "1634915334.379918000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100fe310c000000050203070200cc3e0c0000000502" } }, { "event_id": "evt-3e732d3ecd488e9fe74bfb43", "kind": "unclassified_tcp", "frame_number": 44470, "timestamp_epoch": "1634915334.561373000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030047c920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5f0cc3e0dea41dce187f0a05", "kind": "unclassified_tcp", "frame_number": 44471, "timestamp_epoch": "1634915334.562516000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030047c90c0000000100" } }, { "event_id": "evt-fd8d968234f362b7a81dac68", "kind": "unclassified_tcp", "frame_number": 44474, "timestamp_epoch": "1634915334.741693000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fe3120000000010432356d630f356f504d44384828685558534a2a5704070200cc3e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6e295dedbdddffa5ba2e135e", "kind": "unclassified_tcp", "frame_number": 44475, "timestamp_epoch": "1634915334.742289000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100fe310c000000010003070200cc3e0c0000000100" } }, { "event_id": "evt-cef451bc9af4b8c0a4310951", "kind": "unclassified_tcp", "frame_number": 44479, "timestamp_epoch": "1634915334.800804000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50026, "dst_port": 1187, "tcp_stream": 835, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0cba83708bbd2fe438922fe4", "kind": "unclassified_tcp", "frame_number": 44481, "timestamp_epoch": "1634915334.913984000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8c545ed1c20ad551b8d7896c", "kind": "unclassified_tcp", "frame_number": 44484, "timestamp_epoch": "1634915335.025324000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030047c9250000000501000314736d74702d72656c61792e676d61696c2e636f6d01d1" } }, { "event_id": "evt-41829e856826171af75e31a7", "kind": "unclassified_tcp", "frame_number": 44489, "timestamp_epoch": "1634915335.086754000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030047c914000000050000010a0a169cc2e9" } }, { "event_id": "evt-728ee406c2c8f0f59997a257", "kind": "unclassified_tcp", "frame_number": 44491, "timestamp_epoch": "1634915335.220876000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fe312100000005010003106d61696c2e736d747032676f2e636f6d09dd04070200cc3e1f000000050100030e696d61702e676d61696c2e636f6d03e1" } }, { "event_id": "evt-edb125b5879988338442fd43", "kind": "unclassified_tcp", "frame_number": 44504, "timestamp_epoch": "1634915335.371470000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fe3114000000050000010a0a169cc2ea" } }, { "event_id": "evt-12c11f254a68a84a93dcfecf", "kind": "unclassified_tcp", "frame_number": 44506, "timestamp_epoch": "1634915335.464427000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49898, "tcp_stream": 837, "udp_stream": null, "fields": { "tcp.payload": "323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a30383a3535202b303030300d0a" } }, { "event_id": "evt-6639c0c0e6a47bf8bc60c4e6", "kind": "unclassified_tcp", "frame_number": 44507, "timestamp_epoch": "1634915335.464773000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fe3156000000323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a30383a3535202b303030300d0a" } }, { "event_id": "evt-22c97cd2aec2e28898faed80", "kind": "unclassified_tcp", "frame_number": 44509, "timestamp_epoch": "1634915335.493211000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030047c90a000000" } }, { "event_id": "evt-263e8cffd6dd0136da6fa8b0", "kind": "unclassified_tcp", "frame_number": 44516, "timestamp_epoch": "1634915335.684391000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300ba9a0c000000197b04070300ba9a0e0000000502000205070100fe310a000000020701006ace0c000000197b" } }, { "event_id": "evt-957d0f90e87cd99c037e9797", "kind": "unclassified_tcp", "frame_number": 44519, "timestamp_epoch": "1634915335.685659000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300ba9a0c0000000502" } }, { "event_id": "evt-3b72b4f6e3e6a6972ce6c4be", "kind": "unclassified_tcp", "frame_number": 44521, "timestamp_epoch": "1634915335.752121000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49898, "tcp_stream": 837, "udp_stream": null, "fields": { "tcp.payload": "343231206d61696c2e736d747032676f2e636f6d206c6f737420696e70757420636f6e6e656374696f6e0d0a" } }, { "event_id": "evt-2581342cb1c89d5958d19eee", "kind": "unclassified_tcp", "frame_number": 44525, "timestamp_epoch": "1634915335.860395000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006ace0e00000005020002" } }, { "event_id": "evt-e4f88d07d3a1f1fa108f0f28", "kind": "unclassified_tcp", "frame_number": 44526, "timestamp_epoch": "1634915335.860944000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006ace0c0000000502" } }, { "event_id": "evt-bb361f03508d3c08923a8a80", "kind": "unclassified_tcp", "frame_number": 44528, "timestamp_epoch": "1634915336.042357000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ba9a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2cc20ea4f63f2efc8572c8e9", "kind": "unclassified_tcp", "frame_number": 44529, "timestamp_epoch": "1634915336.042754000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300ba9a0c0000000100" } }, { "event_id": "evt-84dcfd592b24b7536969bcca", "kind": "unclassified_tcp", "frame_number": 44531, "timestamp_epoch": "1634915336.220417000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006ace20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1b543b569225e4886c664208", "kind": "unclassified_tcp", "frame_number": 44532, "timestamp_epoch": "1634915336.220982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006ace0c0000000100" } }, { "event_id": "evt-c09df1a6adb48d515bcc3baf", "kind": "unclassified_tcp", "frame_number": 44538, "timestamp_epoch": "1634915336.390128000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cc3e14000000050000010a0a169cc2eb" } }, { "event_id": "evt-460f4443c0880686837b0b17", "kind": "unclassified_tcp", "frame_number": 44540, "timestamp_epoch": "1634915336.398378000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ba9a250000000501000314736d74702d72656c61792e676d61696c2e636f6d024b" } }, { "event_id": "evt-8fa10ac20a85660c3e027513", "kind": "unclassified_tcp", "frame_number": 44544, "timestamp_epoch": "1634915336.443815000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ba9a14000000050000010a0a169cc2ec" } }, { "event_id": "evt-c5d968a299f559eeab52fdfd", "kind": "unclassified_tcp", "frame_number": 44547, "timestamp_epoch": "1634915336.555583000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ba9a4400000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450206534736d32343636313235766b682e3134202d2067736d74700d0a" } }, { "event_id": "evt-0a99cb60631a1be7ac58eabe", "kind": "unclassified_tcp", "frame_number": 44549, "timestamp_epoch": "1634915336.583307000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006ace2500000005010003146d61696c2e6d7966616972706f696e742e6e6574006e" } }, { "event_id": "evt-7d4399ebc8c78e1b21b1d30e", "kind": "unclassified_tcp", "frame_number": 44555, "timestamp_epoch": "1634915336.649348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006ace14000000050000010a0a169cc2ed" } }, { "event_id": "evt-f3b392eebac6aafb0954bcd6", "kind": "unclassified_tcp", "frame_number": 44557, "timestamp_epoch": "1634915336.832864000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200cc3e0a000000" } }, { "event_id": "evt-9139b8c6a2007fe7a10e6d0e", "kind": "unclassified_tcp", "frame_number": 44564, "timestamp_epoch": "1634915336.970743000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006ace5a0000002b4f4b20504f503320426967666f6f742076312e3020736572766572207265616479203c393030312e31363334393135333336406d61696c31386332362e636172726965727a6f6e652e636f6d3e0d0a" } }, { "event_id": "evt-b3503b068bc0009e0ac024f1", "kind": "unclassified_tcp", "frame_number": 44566, "timestamp_epoch": "1634915337.013337000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300ba9a0a000000" } }, { "event_id": "evt-680449f33d22b283b740b69f", "kind": "unclassified_tcp", "frame_number": 44574, "timestamp_epoch": "1634915337.356269000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701006ace0a000000" } }, { "event_id": "evt-513f5e4eead8c5eb84c8a338", "kind": "unclassified_tcp", "frame_number": 44585, "timestamp_epoch": "1634915339.254936000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50027, "dst_port": 1187, "tcp_stream": 841, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-080eeca631e41f4376ee78d1", "kind": "unclassified_tcp", "frame_number": 44597, "timestamp_epoch": "1634915343.636331000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50028, "dst_port": 1187, "tcp_stream": 842, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f3e7e304306440e3511f8271", "kind": "unclassified_tcp", "frame_number": 44602, "timestamp_epoch": "1634915345.996967000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010094990c000000197b" } }, { "event_id": "evt-5fd066b2417e132f69c968d7", "kind": "unclassified_tcp", "frame_number": 44604, "timestamp_epoch": "1634915346.180865000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200da1e0c000000197b0407010094990e000000050200020207030022b50c000000197b04070200da1e0e00000005020002020704000ac60c000000197b0407030022b50e00000005020002040704000ac60e00000005020002" } }, { "event_id": "evt-ace1aedcdd595be72a3e3832", "kind": "unclassified_tcp", "frame_number": 44605, "timestamp_epoch": "1634915346.181789000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010094990c000000050203070200da1e0c00000005020307030022b50c0000000502030704000ac60c0000000502" } }, { "event_id": "evt-227454b78b74e8628fc2bdb8", "kind": "unclassified_tcp", "frame_number": 44608, "timestamp_epoch": "1634915346.493789000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100949920000000010432356d630f356f504d44384828685558534a2a5704070200da1e20000000010432356d630f356f504d44384828685558534a2a570407030022b520000000010432356d630f356f504d44384828685558534a2a57040704000ac620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-facbe91455de6a9439360b0d", "kind": "unclassified_tcp", "frame_number": 44609, "timestamp_epoch": "1634915346.494372000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010094990c000000010003070200da1e0c00000001000307030022b50c0000000100030704000ac60c0000000100" } }, { "event_id": "evt-2517313de9e9b78187b30799", "kind": "unclassified_tcp", "frame_number": 44611, "timestamp_epoch": "1634915346.508128000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-324bf6c1626612c7161f28d4", "kind": "unclassified_tcp", "frame_number": 44613, "timestamp_epoch": "1634915346.893448000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010094991e000000050100030d6170692e69706966792e6f726701bb04070200da1e1e000000050100030d6170692e69706966792e6f726701bb0407030022b51e000000050100030d6170692e69706966792e6f726701bb040704000ac61e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-9d4f75b370ee4a0db100dbd1", "kind": "unclassified_tcp", "frame_number": 44621, "timestamp_epoch": "1634915346.972064000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100949914000000050000010a0a169cc2ee" } }, { "event_id": "evt-a538883a4bd4be45b2ba336b", "kind": "unclassified_tcp", "frame_number": 44627, "timestamp_epoch": "1634915346.976964000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030022b514000000050000010a0a169cc2f0" } }, { "event_id": "evt-b3b5415d44f2e6ebeebb7e1e", "kind": "unclassified_tcp", "frame_number": 44629, "timestamp_epoch": "1634915346.977270000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704000ac614000000050000010a0a169cc2f1" } }, { "event_id": "evt-174d8bedf03b29ee8cc2380a", "kind": "unclassified_tcp", "frame_number": 44633, "timestamp_epoch": "1634915346.979638000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1e14000000050000010a0a169cc2ef" } }, { "event_id": "evt-2be651e66ebd2550a69b7e74", "kind": "unclassified_tcp", "frame_number": 44636, "timestamp_epoch": "1634915347.403368000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009499130100001603010104010001000303b4d0c9d5ec7b88e3ebc9db1c51862a60ddd700e31b0dc4cfe23bb25fa22a9c5420188990ab89a1fee065ca5d103d3163c7533df63516ebadf62028110520c021090026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00202784d89c8f502dae9b19005bf17a47022f1d2589157d21edefdb60fd32f93143" } }, { "event_id": "evt-ebb98a5dfda1f40fb0de398c", "kind": "unclassified_tcp", "frame_number": 44647, "timestamp_epoch": "1634915347.498589000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-66d7f224938c6b1aaa44415f", "kind": "unclassified_tcp", "frame_number": 44648, "timestamp_epoch": "1634915347.498601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-13ffd84a172d65adacf8d370", "kind": "unclassified_tcp", "frame_number": 44649, "timestamp_epoch": "1634915347.498609000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-833f3678572411003abb5ce2", "kind": "unclassified_tcp", "frame_number": 44651, "timestamp_epoch": "1634915347.498734000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-07411c0b2e9b42d95290c08b", "kind": "unclassified_tcp", "frame_number": 44652, "timestamp_epoch": "1634915347.498745000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-11dbd9c225cc8b0bae45d9bb", "kind": "unclassified_tcp", "frame_number": 44657, "timestamp_epoch": "1634915347.752994000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1e13010000160301010401000100030332438f1717076f1a458deef9e7b68985f5f6ecd3fccc26364fe87a6db46642da2094c9d1aad15b3030ff26e1e68e1a685ef8c52a51bf7ef8dec69957c62f203eac0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020c4b5b656a9267205af8a144a736f89682c9cc8781511c7f6087236d3bc944f7e0407030022b5130100001603010104010001000303acc28f7cf8af12559c6f13e6ce199311abe0ae2c330d5a06561e7305b22591dd204c365907b980685004b17827be78ee5856f04cdf2cefa75e4f0ee49f996edb2c0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020d49d514560d8f657bf32c7323256ddb0c2436caba65aa489844150f729c0c412040704000ac61301000016030101040100010003032c88330292e53f70aef4a682187fd564ae217f5628b87d159084e748ef6ee3a0203dab8d311053c67ba86747f7fe0028661a3417fcc173be229790ffcac82604e10026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020b2f516ebfedb8fd7fbfa3409e9aa960807699ca9c435770dfba1a82dbece995e" } }, { "event_id": "evt-da4db64e1cdc4a1f9a4c8159", "kind": "unclassified_tcp", "frame_number": 44669, "timestamp_epoch": "1634915347.836723000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030022b51a0a00001603030059020000550303050229de1a14856004500b0f6797e65f6934fb39a37d32f17289d38b1cd34f1520999ec90d8572a13800070429b691cb58bb462b5eb7e6feb61119de51ab59fb3ac02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-d3a8433af74985bddd29b239", "kind": "unclassified_tcp", "frame_number": 44670, "timestamp_epoch": "1634915347.836743000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "89f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474" } }, { "event_id": "evt-e0e2141d70b46acb496de879", "kind": "unclassified_tcp", "frame_number": 44680, "timestamp_epoch": "1634915347.841067000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-46414c858f8074acdee44e8b", "kind": "unclassified_tcp", "frame_number": 44681, "timestamp_epoch": "1634915347.841084000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d9b232f5526173248a127254", "kind": "unclassified_tcp", "frame_number": 44682, "timestamp_epoch": "1634915347.841091000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-001e1583d86c3d4e26ce78d9", "kind": "unclassified_tcp", "frame_number": 44685, "timestamp_epoch": "1634915347.841326000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-63a9c61f0c4460f52f02f018", "kind": "unclassified_tcp", "frame_number": 44687, "timestamp_epoch": "1634915347.841366000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "81f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-55757d7350ff47d5e820b93f", "kind": "unclassified_tcp", "frame_number": 44691, "timestamp_epoch": "1634915347.843213000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-34dfd667177ed12ec720abf6", "kind": "unclassified_tcp", "frame_number": 44698, "timestamp_epoch": "1634915347.844431000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1eaa0a00004e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e58189f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6" } }, { "event_id": "evt-463c934e1de5e20ce841146c", "kind": "unclassified_tcp", "frame_number": 44699, "timestamp_epoch": "1634915347.844441000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-69bf33d20a0efc7e07fe1c46", "kind": "unclassified_tcp", "frame_number": 44702, "timestamp_epoch": "1634915347.844625000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2afc29f6d2fbd2a1a020da85", "kind": "unclassified_tcp", "frame_number": 44707, "timestamp_epoch": "1634915347.847001000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704000ac6580200004480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c000149030017410411dfd75effd7598cbfb359693469630770ee4eed52644c1f5cc2ce3ed4e7100def76f6abf92c773bc3414548ed7839e3c7a6ce1ed80662c36bba0fda9d39ab7d060101006a9c5230641ccc1933a76572edaab6ba94b6b3793f1db08585191af57413ed634554039621e97cf6dec1acd324815911be2b2dee1d0a9b19bded7d3d96fdd2520083de5e19bbfffbf47329e3232a26161396aa57cae13abc56b4ad386d4d80ae60a0925dd97e73d0c1ca3b1ac402c39c1276b7b4ccea63967406186ad5bc93f177a0b75197a967bec0f81031e12c56e9df5246124c31c8808b754ef018aa66b90dce35f019fffb0b20d117d30b9a4d391c049c607cd071ad5f51362fa9f1a8bd4ecd72e975b6c7caa3f0a506b9228f6ef48e36047458ffd14758b4096a576f6b9b6dce77626f286887d10ac6227516ab37d31a0c60fdbcea9a69cab7d44510a816030300040e000000" } }, { "event_id": "evt-0aa45643030c25f02afaf0bb", "kind": "unclassified_tcp", "frame_number": 44712, "timestamp_epoch": "1634915347.847308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b29442a8664be2c6b01bb966", "kind": "unclassified_tcp", "frame_number": 44713, "timestamp_epoch": "1634915347.847318000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "2ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c00014903001741048a6d6c11809caf4e37380a1fa053fbb3980c15bd57c0588c0ba621c56180055727fe9c3b834cf6fffa91add2573378f37b31ca714840efe982fa56d1607a1d81060101000c9d49de0a847dfc4e3d05f9e1e3ee2cbd463a1883654ff22fced396ae4486c1d573f5553b91af82aec6c580e144d222cbb6e5601b981b828a393a90656b1b5e2381023dba98dc10743d40a11076808a740d8565667b04e57605ac6ff08a9ba40374fbb2fc8bca10c9989dcac0d89ec28e67e970687b8106a7edcf8bbec50727914ed44086830553279c815c54b4c7d0c9eae9af08ae49abf8cb8c5f75e0ba2df7c51cb09fb1cc3bf1901d93449082f8c288f90141e699837eaac7d5c1ffc98299079afcc7aa33bfcafb0b1818fe7121624418b18dc5f9a0a0d4986f65178b067f12b7b0bf37e15f081c70013519029c3bb2ab7df8f91a20b3ea7d8216f8ae9416030300040e000000" } }, { "event_id": "evt-9eea0360ae2ab0d52333accc", "kind": "unclassified_tcp", "frame_number": 44717, "timestamp_epoch": "1634915347.847638000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c3dbe0a8a4badede069fa84c", "kind": "unclassified_tcp", "frame_number": 44718, "timestamp_epoch": "1634915347.847647000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5b71556a2fde3c4a6c48d4c9", "kind": "unclassified_tcp", "frame_number": 44726, "timestamp_epoch": "1634915348.137804000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50029, "dst_port": 1187, "tcp_stream": 847, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-53007e38b45a2c60ec8a9019", "kind": "unclassified_tcp", "frame_number": 44728, "timestamp_epoch": "1634915348.166750000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010094998800000016030300461000004241041eb48babf93a2b2778d80e593a4bdfc5ef8d8513cd74a3e8a432cb01c19b7aa65b74929e580071faaf6bea00d4e4ca81ad391cf3123161fa4ed3dbb276ab451b140303000101160303002800000000000000007e499297a1510a9db8ceab4e6420f2a1e8da098835bb45b316ec4e075e78225e" } }, { "event_id": "evt-c295b5466ab553990f5f541c", "kind": "unclassified_tcp", "frame_number": 44731, "timestamp_epoch": "1634915348.180671000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50029, "dst_port": 1187, "tcp_stream": 847, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-844b6b4fe46e2bdac7759309", "kind": "unclassified_tcp", "frame_number": 44736, "timestamp_epoch": "1634915348.243559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010094993d00000014030300010116030300280c8bfddd1cac27b9967479b1c7a0f23b223578c9dfdefd072456dddf410e4cc0226236ce643726a4" } }, { "event_id": "evt-047349764aa547f0d7697dd4", "kind": "unclassified_tcp", "frame_number": 44740, "timestamp_epoch": "1634915348.342441000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-402d552bccfb800631dd14e3", "kind": "unclassified_tcp", "frame_number": 44751, "timestamp_epoch": "1634915348.421617000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1e3d000000140303000101160303002877de5a7413a3988d5246daf3e9cce7c20dd6ea07847cccaf2f200895185486e5791c32a103b6c6b8" } }, { "event_id": "evt-d85093c89c19810fc429a3d2", "kind": "unclassified_tcp", "frame_number": 44753, "timestamp_epoch": "1634915348.421961000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030022b53d00000014030300010116030300285112297f968b146cc8b32663378fb86e9ae18dae72070293086ef2087e35d27bc1f79025ffb1b81c040704000ac63d000000140303000101160303002802d2cb5b284eea7f86a5e22d6579ad79cfc345baf2341a12d1798b19d6c6d1450ee9cfde5292aaa4" } }, { "event_id": "evt-9c09a0e71acf22823ab91ba7", "kind": "unclassified_tcp", "frame_number": 44758, "timestamp_epoch": "1634915348.640401000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009499a4000000170303009500000000000000010e5de881c6439d976e5cbaa01b7711eb510bd6e8f531ba062c0dcd63c60fcbf7769f6eed61525dddd35a963687093ed68a3567bd5884688dabe98869cb9755f4e058c9b9bafbf78a3f6fab04663c0aa1bb40f89695ecdbd740a61bf8f9a60b77f63268ffa0f305b8f34851080aedb564892b3ed6a25bc937a05d863062ca76c92e19faea96dc9c17ddaf302e05" } }, { "event_id": "evt-2dc8cbdc6587d66d6654dbc9", "kind": "unclassified_tcp", "frame_number": 44764, "timestamp_epoch": "1634915348.715693000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6f38794150d76a5ce86d9659", "kind": "unclassified_tcp", "frame_number": 44768, "timestamp_epoch": "1634915348.716236000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010094990a000000" } }, { "event_id": "evt-10aaf2d5fd0c2195841907f4", "kind": "unclassified_tcp", "frame_number": 44770, "timestamp_epoch": "1634915348.811409000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-29d9a20369c6b82ce019e6d9", "kind": "unclassified_tcp", "frame_number": 44779, "timestamp_epoch": "1634915348.899927000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704000ac6eb00000017030300dc02d2cb5b284eea80c4f7f16b7f561347a591a91c25254274dc384df4255a9e416381bea5189cac07eedf4d87fc6974283f73244e149f460cfad53ade2d8dcbd8c5f9d8ba19d8fe87b735c20eb6aa883340a21bff87ef7933a71aa48ab73ef2cc74725c8754255ee8f850bb531a88a875eef5442406b57c460e90c6c515a3605f282388d39f948e6cb75d3bf65758c0a62a271ce268635662bf1d93ef76bed1fd29bda2ae40dd13640be974d7ab2524a2ff20d5f09a51243ee7a71ecd4e3316d12fdc897632bd4c7b14dc567357dcb11ceb5473565310bfd4717c8b8a" } }, { "event_id": "evt-c847fecc56048431263a993b", "kind": "unclassified_tcp", "frame_number": 44784, "timestamp_epoch": "1634915348.904229000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1eeb00000017030300dc77de5a7413a3988eda4068bb55e397a4ef88faddf560ff0fbfcb36f3cd247da9a170fdcd2c91335c5ca250888f0a29025e71fb7c1876eac38887cbeef3508f734e06556cad4eac928eb5caa4b991e973e73c91f54be0315fc90d9f124718e653471ec35c5184a23beff6622c9ef57ac52cbe657efa2b02771ab0db6520e73216f524763289114b9651da3aa58a332d896646272cddecff455ec5549d041c10c245c323c2f8eafa468edd65095538da6c4062ff37ddda015a3e21c1aeb256b1cc471818bfb489c4ab156a01f64ff16fd503c01594ff3f5aa5c0663cc6" } }, { "event_id": "evt-2616e71240ad75bcc5fa707c", "kind": "unclassified_tcp", "frame_number": 44788, "timestamp_epoch": "1634915348.904593000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704000ac629000000150303001a02d2cb5b284eea81d6b799ba03c7d9786cd267865ae6c1f29131" } }, { "event_id": "evt-5a7c637525a43dc09e41df7f", "kind": "unclassified_tcp", "frame_number": 44790, "timestamp_epoch": "1634915348.904881000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050704000ac60a000000" } }, { "event_id": "evt-9c07777302505ff7a1938f55", "kind": "unclassified_tcp", "frame_number": 44796, "timestamp_epoch": "1634915348.911659000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200da1e29000000150303001a77de5a7413a3988f73d8eeb005fe83874e0e33580da390c57d9f" } }, { "event_id": "evt-fd3e3944b583c7ad4c923536", "kind": "unclassified_tcp", "frame_number": 44800, "timestamp_epoch": "1634915348.912047000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200da1e0a000000" } }, { "event_id": "evt-38214b35510bf1c307b6e933", "kind": "unclassified_tcp", "frame_number": 44802, "timestamp_epoch": "1634915348.912348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030022b50a01000017030300dc5112297f968b146d1ac7294f22de711fe1c464ba85bb2611dec4545982cb0a1c384770c7094a0b019f7d363ebfa20c3c40c1cfd376b18b44dd8560d3903db8b0a55f5a757a5eb7f864ae03002774f857f7a834031380ca2990707436c9941efbb285b149fff4fcc5cb2a9340d4299238918e9e25ba2ce77fc9afecae357fe5eaac927b3f90a58be1fee7f0beec728e96ca1a9a3729dcc811911b7d280f1023cd4cf16a76002f04324b46be366c1af3bb0f44fd9538361a1fd8bde7052d025f1e6bd8f00f24108e9a2757ac3f07579f4da3ab83949fe08231f878e5f8150303001a5112297f968b146ee40a14ab85afb3255408cf445911ca993301" } }, { "event_id": "evt-76d79befab8fcd9995312cb3", "kind": "unclassified_tcp", "frame_number": 44806, "timestamp_epoch": "1634915348.912626000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030022b50a000000" } }, { "event_id": "evt-fa0e5d803305d1ed69a91d33", "kind": "unclassified_tcp", "frame_number": 44808, "timestamp_epoch": "1634915349.114817000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100165d0c000000197b" } }, { "event_id": "evt-eac3f72ac9dc0f53ad827b25", "kind": "unclassified_tcp", "frame_number": 44811, "timestamp_epoch": "1634915349.290239000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100165d0e00000005020002" } }, { "event_id": "evt-a542e121be6f38c1f56018c0", "kind": "unclassified_tcp", "frame_number": 44812, "timestamp_epoch": "1634915349.290583000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100165d0c0000000502" } }, { "event_id": "evt-ab9aaf33a254bb0bd8f1686f", "kind": "unclassified_tcp", "frame_number": 44814, "timestamp_epoch": "1634915349.471636000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200b1340c000000197b" } }, { "event_id": "evt-9407076b6baf941b9ad78e0c", "kind": "unclassified_tcp", "frame_number": 44816, "timestamp_epoch": "1634915349.662149000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300467a0c000000197b04070200b1340e0000000502000202070400ed780c000000197b04070300467a0e0000000502000204070400ed780e0000000502000204070100165d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-22af3144b34d6cba3cb8bffb", "kind": "unclassified_tcp", "frame_number": 44817, "timestamp_epoch": "1634915349.663040000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200b1340c000000050203070300467a0c000000050203070400ed780c000000050203070100165d0c0000000100" } }, { "event_id": "evt-bd5568935aaf288887e594c7", "kind": "unclassified_tcp", "frame_number": 44819, "timestamp_epoch": "1634915350.057017000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100165d2100000005010003106d61696c2e736d747032676f2e636f6d09dd04070200b13420000000010432356d630f356f504d44384828685558534a2a5704070300467a20000000010432356d630f356f504d44384828685558534a2a5704070400ed7820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-59c8a7b5ba1730525c455d64", "kind": "unclassified_tcp", "frame_number": 44821, "timestamp_epoch": "1634915350.058588000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200b1340c000000010003070300467a0c000000010003070400ed780c0000000100" } }, { "event_id": "evt-b2a9048a72128ee99d670c2f", "kind": "unclassified_tcp", "frame_number": 44825, "timestamp_epoch": "1634915350.124829000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100165d14000000050000010a0a169cc2f2" } }, { "event_id": "evt-1c8c9b9fa3e1cdc976bbcbcc", "kind": "unclassified_tcp", "frame_number": 44827, "timestamp_epoch": "1634915350.196847000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49906, "tcp_stream": 848, "udp_stream": null, "fields": { "tcp.payload": "323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a30393a3130202b303030300d0a" } }, { "event_id": "evt-b04d26c1ebde0f811b6422ae", "kind": "unclassified_tcp", "frame_number": 44828, "timestamp_epoch": "1634915350.197529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100165d56000000323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a30393a3130202b303030300d0a" } }, { "event_id": "evt-fa83d61c0207faebdc55dfb7", "kind": "unclassified_tcp", "frame_number": 44832, "timestamp_epoch": "1634915350.490684000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200b1341f000000050100030e696d61702e676d61696c2e636f6d03e104070300467a250000000501000314736d74702d72656c61792e676d61696c2e636f6d0019" } }, { "event_id": "evt-9f53213f6f79f2051bc7fdfb", "kind": "unclassified_tcp", "frame_number": 44839, "timestamp_epoch": "1634915350.531005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200b13414000000050000010a0a169cc2f3" } }, { "event_id": "evt-8470dadda20a3bfa93285e83", "kind": "unclassified_tcp", "frame_number": 44841, "timestamp_epoch": "1634915350.531238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300467a14000000050000010a0a169cc2f4" } }, { "event_id": "evt-2048a7b66c032abc03815578", "kind": "unclassified_tcp", "frame_number": 44844, "timestamp_epoch": "1634915350.583579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300467a4400000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450206e3139736d323734303139346f6f692e39202d2067736d74700d0a" } }, { "event_id": "evt-d98bd1e5001fc674b69f307a", "kind": "unclassified_tcp", "frame_number": 44847, "timestamp_epoch": "1634915350.680891000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400ed78250000000501000314736d74702d72656c61792e676d61696c2e636f6d024b05070100165d0a0000000207010041760c000000197b0407010041760e00000005020002" } }, { "event_id": "evt-b0f96f429ea40ec5da6d7223", "kind": "unclassified_tcp", "frame_number": 44851, "timestamp_epoch": "1634915350.682586000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010041760c0000000502" } }, { "event_id": "evt-a7fd2e637228aecee88a99f5", "kind": "unclassified_tcp", "frame_number": 44855, "timestamp_epoch": "1634915350.720404000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400ed7814000000050000010a0a169cc2f5" } }, { "event_id": "evt-089b9d200d4f3db49e98b833", "kind": "unclassified_tcp", "frame_number": 44857, "timestamp_epoch": "1634915350.760613000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49906, "tcp_stream": 848, "udp_stream": null, "fields": { "tcp.payload": "343231206d61696c2e736d747032676f2e636f6d206c6f737420696e70757420636f6e6e656374696f6e0d0a" } }, { "event_id": "evt-b23ff5357f9eedbec87977d2", "kind": "unclassified_tcp", "frame_number": 44862, "timestamp_epoch": "1634915350.938304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400ed784200000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d54502032736d313631343034327673762e33202d2067736d74700d0a" } }, { "event_id": "evt-c69d6520db0f65c8c29de0a7", "kind": "unclassified_tcp", "frame_number": 44864, "timestamp_epoch": "1634915350.978509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200b1340a000000" } }, { "event_id": "evt-96f55a6a0cdd522993af38f8", "kind": "unclassified_tcp", "frame_number": 44871, "timestamp_epoch": "1634915351.156490000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300467a0a00000004070100417620000000010432356d630f356f504d44384828685558534a2a5705070400ed780a000000" } }, { "event_id": "evt-357b70f3e0d2bb0fef4ec1c9", "kind": "unclassified_tcp", "frame_number": 44876, "timestamp_epoch": "1634915351.157880000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010041760c0000000100" } }, { "event_id": "evt-4dd4257f0bfa8cc2c9243603", "kind": "unclassified_tcp", "frame_number": 44885, "timestamp_epoch": "1634915351.503855000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010041762500000005010003146d61696c2e6d7966616972706f696e742e6e6574006e" } }, { "event_id": "evt-19b3a8034b142428100a5e22", "kind": "unclassified_tcp", "frame_number": 44890, "timestamp_epoch": "1634915351.609391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100417614000000050000010a0a169cc2f6" } }, { "event_id": "evt-3496b79ba76d243412c1084c", "kind": "unclassified_tcp", "frame_number": 44893, "timestamp_epoch": "1634915351.689817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010041765b0000002b4f4b20504f503320426967666f6f742076312e3020736572766572207265616479203c32303737352e31363334393135333531406d61696c31326332362e636172726965727a6f6e652e636f6d3e0d0a" } }, { "event_id": "evt-b532cbfac905ef89f7d0bf3d", "kind": "unclassified_tcp", "frame_number": 44896, "timestamp_epoch": "1634915351.991943000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010041760a000000" } }, { "event_id": "evt-9f02b2460dcff42f1ea5305c", "kind": "unclassified_tcp", "frame_number": 44908, "timestamp_epoch": "1634915352.496839000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50030, "dst_port": 1187, "tcp_stream": 853, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-38a0da759f5c609bd2db8497", "kind": "unclassified_tcp", "frame_number": 44913, "timestamp_epoch": "1634915354.364191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100791e0c000000197b" } }, { "event_id": "evt-f5b54baa5a750278735a19fb", "kind": "unclassified_tcp", "frame_number": 44915, "timestamp_epoch": "1634915354.557541000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e0e00000005020002" } }, { "event_id": "evt-87d6e03cdeb78eb3040b9665", "kind": "unclassified_tcp", "frame_number": 44916, "timestamp_epoch": "1634915354.558075000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100791e0c0000000502" } }, { "event_id": "evt-93ae0292360a702ce66681a7", "kind": "unclassified_tcp", "frame_number": 44918, "timestamp_epoch": "1634915354.885093000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d46199d22065638b8c217a7b", "kind": "unclassified_tcp", "frame_number": 44919, "timestamp_epoch": "1634915354.885598000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100791e0c0000000100" } }, { "event_id": "evt-14929b36ade980faa1fe93f1", "kind": "unclassified_tcp", "frame_number": 44921, "timestamp_epoch": "1634915355.154166000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-bcf3240ab9669be16a59bbb3", "kind": "unclassified_tcp", "frame_number": 44935, "timestamp_epoch": "1634915356.866095000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50031, "dst_port": 1187, "tcp_stream": 855, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-89e72194e36a910415f80825", "kind": "unclassified_tcp", "frame_number": 44939, "timestamp_epoch": "1634915356.965461000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e14000000050000010a0a169cc2f7" } }, { "event_id": "evt-4a574c801c8cf915c2418397", "kind": "unclassified_tcp", "frame_number": 45045, "timestamp_epoch": "1634915358.668800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e4000000032323020736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-ab289dfcdce10458a3d8053e", "kind": "unclassified_tcp", "frame_number": 45048, "timestamp_epoch": "1634915358.937113000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-fc5243beb884bd8f55fbc15e", "kind": "unclassified_tcp", "frame_number": 45054, "timestamp_epoch": "1634915359.487058000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e820000003235302d736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-768061700945d6bfa941113e", "kind": "unclassified_tcp", "frame_number": 45135, "timestamp_epoch": "1634915359.751384000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e140000005354415254544c530d0a" } }, { "event_id": "evt-cb915e264e14e192ed9547b3", "kind": "unclassified_tcp", "frame_number": 45158, "timestamp_epoch": "1634915360.176787000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-0daf6ce162891dcc65346e1c", "kind": "unclassified_tcp", "frame_number": 45165, "timestamp_epoch": "1634915360.499122000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-439f346b41b896265eb3e51a", "kind": "unclassified_tcp", "frame_number": 45173, "timestamp_epoch": "1634915361.024021000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a6067487fdc84cdef80da4a5", "kind": "unclassified_tcp", "frame_number": 45174, "timestamp_epoch": "1634915361.024078000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f9d9f84e3b2b9f7cdd0650ba", "kind": "unclassified_tcp", "frame_number": 45175, "timestamp_epoch": "1634915361.024101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4cd3d2911ebcc3005e443be3", "kind": "unclassified_tcp", "frame_number": 45182, "timestamp_epoch": "1634915361.184577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50037, "dst_port": 1187, "tcp_stream": 866, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-20c53674f74d31e136959766", "kind": "unclassified_tcp", "frame_number": 45184, "timestamp_epoch": "1634915361.227575000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50037, "dst_port": 1187, "tcp_stream": 866, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-87f13acd0adc76030412df78", "kind": "unclassified_tcp", "frame_number": 45188, "timestamp_epoch": "1634915361.504865000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac165aba939abc22db79f1bc", "kind": "unclassified_tcp", "frame_number": 45195, "timestamp_epoch": "1634915362.048073000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e3d0000001403030001011603030028b88606417fa82e1f7e9ccd93df5b6ee3e23989daa292055f3e691e7a7be173095cfeeff2af317fe9" } }, { "event_id": "evt-4a5cc3a168469a267eac2a72", "kind": "unclassified_tcp", "frame_number": 45199, "timestamp_epoch": "1634915362.354685000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e3700000017030300280000000000000001b7da4da07aaae233f6d4b7a11be77b33fed22dffcef3b9406782b6a8025c6520" } }, { "event_id": "evt-3fd5864efffbd8c687a4e229", "kind": "unclassified_tcp", "frame_number": 45204, "timestamp_epoch": "1634915362.872931000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e9f0000001703030090b88606417fa82e20900c2352f1d1a00e7cfe370066b77546703cc96f2e0dea865f33808f266e3f0518cc77e8051e7f674f2b5a22091cd3d519b172771e1f4f411c55ac775eb3db72338ac373b94a614198dbdba5d54cf04b179938536f3b3d00935835aa5c873c58e08de199a537bd93905d8c008baa98de7ef2a09a9d7b5c3256c8990b6816722376f2866941c46b94" } }, { "event_id": "evt-af5e894ba3a3673ffdb2aff9", "kind": "unclassified_tcp", "frame_number": 45207, "timestamp_epoch": "1634915363.198739000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e33000000170303002400000000000000025141695868bf2c8dede97e9bb11d1ece88636ecaa7f4662fc83d242c" } }, { "event_id": "evt-43215f9ac4949878b8c3b622", "kind": "unclassified_tcp", "frame_number": 45213, "timestamp_epoch": "1634915363.685951000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e39000000170303002ab88606417fa82e21e48c99e8ace31179524f6e7373676c72767dfcb118c1766565319fccca6d1a66a526" } }, { "event_id": "evt-1e9b10f3cf7ebb0d8f7965ec", "kind": "unclassified_tcp", "frame_number": 45216, "timestamp_epoch": "1634915363.977725000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e3d000000170303002e0000000000000003577fb4db1c11b997594b953488f0ea42ac7555792939437bd98acf113bc4fa67f08a8d4ecb36" } }, { "event_id": "evt-cc1d649b181f860f55d5579a", "kind": "unclassified_tcp", "frame_number": 45222, "timestamp_epoch": "1634915364.505352000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e39000000170303002ab88606417fa82e22f34cb573aea9e498ef4ae22b58b94f39b50cc945423b1cdb4f399decc735a6950737" } }, { "event_id": "evt-18dfb106568e67f548a511da", "kind": "unclassified_tcp", "frame_number": 45225, "timestamp_epoch": "1634915364.847857000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e3500000017030300260000000000000004feff2aaff46095fe77201b706b1782f78ab4f42d9a022f67230fa199563e" } }, { "event_id": "evt-3c7d1f2f182d9e4887869d66", "kind": "unclassified_tcp", "frame_number": 45232, "timestamp_epoch": "1634915365.360214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e480000001703030039b88606417fa82e235fdee5fe2d968bfc85812fd61c34945cba59216819c107b28e54ed28c84c78bfdc21f0c3f9b6c2c57a5916a3b593346f19" } }, { "event_id": "evt-97eb95751e8d8e451fdff491", "kind": "unclassified_tcp", "frame_number": 45237, "timestamp_epoch": "1634915365.506930000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50038, "dst_port": 1187, "tcp_stream": 867, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-439f679c8545f8cce740f83e", "kind": "unclassified_tcp", "frame_number": 45240, "timestamp_epoch": "1634915365.760884000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e2a000000170303001b0000000000000005573e4817e0cd651f22417c42d9e64bf63e8a73" } }, { "event_id": "evt-a0629f8e4c2c74fa2182aef2", "kind": "unclassified_tcp", "frame_number": 45246, "timestamp_epoch": "1634915366.245756000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e430000001703030034b88606417fa82e248af3435710d14baa60ca1403832095e34e96ad72a80f88090c52d8e77bdbf76d5d5d33e15cc831b23d6b2a91" } }, { "event_id": "evt-e266c9fe9464a1dba1a77acc", "kind": "unclassified_tcp", "frame_number": 45249, "timestamp_epoch": "1634915366.633741000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e2d000000170303001e0000000000000006a01c7f0312a3a76888d676bd3c65d9783e43023f8b8e" } }, { "event_id": "evt-6e7feff6dacbcb527cdb2d0f", "kind": "unclassified_tcp", "frame_number": 45255, "timestamp_epoch": "1634915367.173897000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e760000001703030048b88606417fa82e25478fc50a8a62d5b3fc5029c8b18870ac1d5340134853a9e0df79a4ae5fe2886283048444e9762470bbda3e8a62206eed7d270fc8ee7b8b4a4ce692e823dacd44150303001ab88606417fa82e265d3e86bea796850f20f1350ffbe99715e671" } }, { "event_id": "evt-24465ac306d72ead39bac2c8", "kind": "unclassified_tcp", "frame_number": 45259, "timestamp_epoch": "1634915367.174399000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100791e0a000000" } }, { "event_id": "evt-17a690ea72797d912df71b27", "kind": "unclassified_tcp", "frame_number": 45263, "timestamp_epoch": "1634915368.399975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100791e29000000150303001a00000000000000072c75e742c58ebb765c5d79b26e44e73cc60205070100791e0a000000" } }, { "event_id": "evt-457ba64119036c0ebaa04f87", "kind": "unclassified_tcp", "frame_number": 45265, "timestamp_epoch": "1634915368.581688000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010043350c000000197b0407010043350e00000005020002" } }, { "event_id": "evt-439edf52292b0a87b3bd6356", "kind": "unclassified_tcp", "frame_number": 45266, "timestamp_epoch": "1634915368.582182000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010043350c0000000502" } }, { "event_id": "evt-407b0142101aa2e5812e8809", "kind": "unclassified_tcp", "frame_number": 45268, "timestamp_epoch": "1634915368.889134000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-0b5d43f9fdcac25e7f54d4b1", "kind": "unclassified_tcp", "frame_number": 45269, "timestamp_epoch": "1634915368.889657000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010043350c0000000100" } }, { "event_id": "evt-28e2f7424ebf29792da0f31d", "kind": "unclassified_tcp", "frame_number": 45272, "timestamp_epoch": "1634915369.264662000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702000eed0c000000197b040701004335210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-d86c3f66cb8d9036ca7adb8d", "kind": "unclassified_tcp", "frame_number": 45275, "timestamp_epoch": "1634915369.465517000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed0e00000005020002" } }, { "event_id": "evt-25512db576c588e65284b1ca", "kind": "unclassified_tcp", "frame_number": 45276, "timestamp_epoch": "1634915369.466129000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702000eed0c0000000502" } }, { "event_id": "evt-c95f0c6998f18132dc52d596", "kind": "unclassified_tcp", "frame_number": 45280, "timestamp_epoch": "1634915369.649118000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433514000000050000010a0a169cc2f8" } }, { "event_id": "evt-599def44b6765aab617f00d2", "kind": "unclassified_tcp", "frame_number": 45283, "timestamp_epoch": "1634915369.766412000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-70e7edcd1cf29c8865aac59f", "kind": "unclassified_tcp", "frame_number": 45284, "timestamp_epoch": "1634915369.766750000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702000eed0c0000000100" } }, { "event_id": "evt-0b26b4374f30ee4cf822d081", "kind": "unclassified_tcp", "frame_number": 45288, "timestamp_epoch": "1634915369.841860000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50039, "dst_port": 1187, "tcp_stream": 869, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-954ef26619a10da455d35177", "kind": "unclassified_tcp", "frame_number": 45290, "timestamp_epoch": "1634915369.939390000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300b4380c000000197b04070300b4380e00000005020002" } }, { "event_id": "evt-20aa1cf8fbbbcb9a1ff69c5a", "kind": "unclassified_tcp", "frame_number": 45291, "timestamp_epoch": "1634915369.940080000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300b4380c0000000502" } }, { "event_id": "evt-b2411428ee98cd7b2346e58e", "kind": "unclassified_tcp", "frame_number": 45294, "timestamp_epoch": "1634915370.208736000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-2246c9352d0271b7d77fbe21", "kind": "unclassified_tcp", "frame_number": 45298, "timestamp_epoch": "1634915370.391598000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b43820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-51c519680d82b34bc1c0f32c", "kind": "unclassified_tcp", "frame_number": 45299, "timestamp_epoch": "1634915370.392214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300b4380c0000000100" } }, { "event_id": "evt-ecbcd574a267302e5188ad88", "kind": "unclassified_tcp", "frame_number": 45305, "timestamp_epoch": "1634915370.592971000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed14000000050000010a0a169cc2f9" } }, { "event_id": "evt-fa81cd7f1362d0a580a5cba8", "kind": "unclassified_tcp", "frame_number": 45307, "timestamp_epoch": "1634915370.663868000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4382400000005010003136d61696c2e74657472616e657267792e636f6d0019" } }, { "event_id": "evt-66805331da876b09b5f5dabc", "kind": "unclassified_tcp", "frame_number": 45314, "timestamp_epoch": "1634915371.570376000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070400521d0c000000197b" } }, { "event_id": "evt-d9752309ae8ecbc70d5864af", "kind": "unclassified_tcp", "frame_number": 45317, "timestamp_epoch": "1634915371.761866000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207050093390c000000197b04070400521d0e0000000502000202070600834f0c000000197b0407050093390e00000005020002020707004e490c000000197b04070600834f0e00000005020002040707004e490e00000005020002" } }, { "event_id": "evt-2fb4b380b94ba537e0f5ba74", "kind": "unclassified_tcp", "frame_number": 45330, "timestamp_epoch": "1634915374.224200000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50040, "dst_port": 1187, "tcp_stream": 871, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-29f401310f6813491708aa74", "kind": "unclassified_tcp", "frame_number": 45333, "timestamp_epoch": "1634915374.225253000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400521d0c00000005020307050093390c000000050203070600834f0c0000000502030707004e490c00000005020407010043354000000032323020736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a040702000eed4000000032323020736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-34acf187e7f6965c8636f48d", "kind": "unclassified_tcp", "frame_number": 45336, "timestamp_epoch": "1634915374.290515000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50040, "dst_port": 1187, "tcp_stream": 871, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1efcf2eb594a7db297677d44", "kind": "unclassified_tcp", "frame_number": 45341, "timestamp_epoch": "1634915374.386110000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b43814000000050000010a0a169cc2fa" } }, { "event_id": "evt-eee0d9b145e510e846dbce47", "kind": "unclassified_tcp", "frame_number": 45343, "timestamp_epoch": "1634915374.532110000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043351a00000045484c4f206c6f63616c686f73740d0a040702000eed1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-6e2a0009480adce8d963ac6c", "kind": "unclassified_tcp", "frame_number": 45349, "timestamp_epoch": "1634915374.727960000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500933920000000010432356d630f356f504d44384828685558534a2a57040707004e4920000000010432356d630f356f504d44384828685558534a2a5704070400521d20000000010432356d630f356f504d44384828685558534a2a5704070600834f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a801ea4206ab33fb80910b43", "kind": "unclassified_tcp", "frame_number": 45350, "timestamp_epoch": "1634915374.728568000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050093390c0000000100030707004e490c000000010003070400521d0c000000010003070600834f0c0000000100" } }, { "event_id": "evt-7a4ca7251d901a991b971661", "kind": "unclassified_tcp", "frame_number": 45354, "timestamp_epoch": "1634915374.918067000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed820000003235302d736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-055412b5edd42e492e5a10a9", "kind": "unclassified_tcp", "frame_number": 45356, "timestamp_epoch": "1634915374.918559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004335820000003235302d736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-434bdcf3ecb39a8bcda9a7d6", "kind": "unclassified_tcp", "frame_number": 45360, "timestamp_epoch": "1634915374.973206000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050093391e000000050100030d6170692e69706966792e6f726701bb040707004e491e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-e1203899f785507145d85888", "kind": "unclassified_tcp", "frame_number": 45371, "timestamp_epoch": "1634915375.089584000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500933914000000050000010a0a169cc2fb" } }, { "event_id": "evt-c7f228deead6830177eab311", "kind": "unclassified_tcp", "frame_number": 45373, "timestamp_epoch": "1634915375.089868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707004e4914000000050000010a0a169cc2fc" } }, { "event_id": "evt-396b4815f82a27a5e1ad2d5b", "kind": "unclassified_tcp", "frame_number": 45376, "timestamp_epoch": "1634915375.093780000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b43834000000323230204741524d2d393547303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ef874cc5dc5d9faf94ff10d0", "kind": "unclassified_tcp", "frame_number": 45379, "timestamp_epoch": "1634915375.150460000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d1e000000050100030d6170692e69706966792e6f726701bb04070600834f1e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-bb315c165299d5ee0249b0fb", "kind": "unclassified_tcp", "frame_number": 45387, "timestamp_epoch": "1634915375.221224000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600834f14000000050000010a0a169cc2fe" } }, { "event_id": "evt-1310dc9960ccdd05322090c6", "kind": "unclassified_tcp", "frame_number": 45389, "timestamp_epoch": "1634915375.221651000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d14000000050000010a0a169cc2fd" } }, { "event_id": "evt-2a35498fc6c84f070e2a28ad", "kind": "unclassified_tcp", "frame_number": 45394, "timestamp_epoch": "1634915375.338636000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004335140000005354415254544c530d0a040702000eed140000005354415254544c530d0a" } }, { "event_id": "evt-93ba6d3ad3fa0694ad3c58c2", "kind": "unclassified_tcp", "frame_number": 45400, "timestamp_epoch": "1634915375.510149000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4381a00000045484c4f206c6f63616c686f73740d0a0407050093391301000016030101040100010003035f8f2424be6d908eeba76eefc485aab09adc96f12ef54e977df695774325692f2085d75b2953ba1bf9d370634db56b65c5d1c1f9ac0b7cbac5856a84e62b7e19c80026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d002036bf903936e49a1211373f7e7a4fc85caacd87b6c0cd4533d90d0287c9a3eb6e040707004e4913010000160301010401000100030308d76172b34185ba06fcf2650e2179d2d41e1bb723ed5ef163ff1c4f4ebc951120bb035771a3bd49a005d6864858009b81ea99ea7bc7ab5b506c1b8e1436c7b8670026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009100000012001000000d6170692e69706966792e6f7267000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020dcb5bc8b2d1ca3b8ac3d94d06d74337c8f345695ee851aee190a5bd272900238" } }, { "event_id": "evt-7b1bcb99f3b634ac4a56a2a1", "kind": "unclassified_tcp", "frame_number": 45416, "timestamp_epoch": "1634915375.583187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-624bcce8a0a29ba3adf01218", "kind": "unclassified_tcp", "frame_number": 45417, "timestamp_epoch": "1634915375.583200000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0341da64e266aa36dec2d7b9", "kind": "unclassified_tcp", "frame_number": 45418, "timestamp_epoch": "1634915375.583207000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8129ec107bec12a895f14cdc", "kind": "unclassified_tcp", "frame_number": 45423, "timestamp_epoch": "1634915375.583597000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7b5e54ce30828c563959a4d1", "kind": "unclassified_tcp", "frame_number": 45424, "timestamp_epoch": "1634915375.583610000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a0a2ab85d52e441504c44347", "kind": "unclassified_tcp", "frame_number": 45428, "timestamp_epoch": "1634915375.586601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1ff5d373a85c017ad9b9c057", "kind": "unclassified_tcp", "frame_number": 45437, "timestamp_epoch": "1634915375.588310000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c1ebe9e4e3fdc9a7b62f4cf5", "kind": "unclassified_tcp", "frame_number": 45438, "timestamp_epoch": "1634915375.588323000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-73ac6319943cc91e5f3c4009", "kind": "unclassified_tcp", "frame_number": 45439, "timestamp_epoch": "1634915375.588424000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707004e494808000005a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e" } }, { "event_id": "evt-5530e27b001cf87cde012c7b", "kind": "unclassified_tcp", "frame_number": 45441, "timestamp_epoch": "1634915375.588433000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cc9cefcc0cb6586dfc4fab8d", "kind": "unclassified_tcp", "frame_number": 45446, "timestamp_epoch": "1634915375.665692000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b438990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-979498be5c7e24a82260e98c", "kind": "unclassified_tcp", "frame_number": 45448, "timestamp_epoch": "1634915375.686066000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d57b1dc6b435d312efbc13ec", "kind": "unclassified_tcp", "frame_number": 45454, "timestamp_epoch": "1634915375.706399000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043351d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-3caa3b462112a6d3febc7875", "kind": "unclassified_tcp", "frame_number": 45457, "timestamp_epoch": "1634915375.709136000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-774ca1b480bf09a1e3cd0b35", "kind": "unclassified_tcp", "frame_number": 45463, "timestamp_epoch": "1634915375.758076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0bd64711ae9bb25911e0fcd2", "kind": "unclassified_tcp", "frame_number": 45475, "timestamp_epoch": "1634915375.762609000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600834f0a1000004e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e58189f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6" } }, { "event_id": "evt-bb8628a3ffd964ba5e42d889", "kind": "unclassified_tcp", "frame_number": 45476, "timestamp_epoch": "1634915375.762622000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c050003" } }, { "event_id": "evt-4524d3791f90bf6f30189399", "kind": "unclassified_tcp", "frame_number": 45477, "timestamp_epoch": "1634915375.762629000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "82010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c" } }, { "event_id": "evt-18c95567d9337539f2fa5d9b", "kind": "unclassified_tcp", "frame_number": 45479, "timestamp_epoch": "1634915375.762748000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d0a1000001603030059020000550303bf2c55d1491935501ddf02f303a0dd1f0917cba433cafa694d1ab4abf2a4c71f200f1738d920d183f24943a7791aa586877e5d637bbdc33329cca4990dd5256d65c02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-0ca40a98469bd623a3fcb24d", "kind": "unclassified_tcp", "frame_number": 45480, "timestamp_epoch": "1634915375.762758000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a218d68707e30134539417b4", "kind": "unclassified_tcp", "frame_number": 45481, "timestamp_epoch": "1634915375.762766000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb3004070600834f000200007d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c00014903001741042d3ffab203831eeed34461e2df10dbfd3749487d13828876c720ac87aaf1cccbc0c14cb367805466e3a0b1929d25987a984e44d72caa8de2f0d438ccdcbc749c060101007787db189b979462ed673fa36f8309af77491f210026c9671b11f8" } }, { "event_id": "evt-3fde2f0daa057a216ab24af5", "kind": "unclassified_tcp", "frame_number": 45482, "timestamp_epoch": "1634915375.762773000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "5d4492017aa59c840b8df69dc966996fcfc38bb42fac9332b9e36589b1d8c712e969199c15b194364428cd4d3c4e9970c4dda182d71b42348370af4d6b02eb96eeaf416d0a941eeb6138f072f77c9ebdd0afbc66662e176716923917defe6d5cebe917b8d60d208bf16e76fbb4ba85823ea20c9d1b00c9f9ea41f27fea56ba091ca7918221a93f93968ed5971e3f1159f23037b3f5fd9e8fa92d2601a42a19dc30a621a580d491489ea4fd3bb7b452e0e165420afdc4b72acde73ad8456bc79cf858f60ef3493d1c4e1cdfec61403e186867bab8f37bcc4781d358dd3ae3892be8f8faa7e516030300040e000000" } }, { "event_id": "evt-37cc14663e9ae61901b00a41", "kind": "unclassified_tcp", "frame_number": 45492, "timestamp_epoch": "1634915375.765325000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7cc17b080404538201414e1a", "kind": "unclassified_tcp", "frame_number": 45493, "timestamp_epoch": "1634915375.765337000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f4597394fc999953dd3af221", "kind": "unclassified_tcp", "frame_number": 45496, "timestamp_epoch": "1634915375.945061000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040705009339880000001603030046100000424104c19d89d9862b4b2682647d6cf44021376327443968f3785de1647fb7554ea61c1a8ca7dcfb556e4df7ec462dbedde188f566f06708c12faf90c41880da84f1ea1403030001011603030028000000000000000009a30a18ed0d623c7691ab6b5d96493631f2627e2eca15a5fbec1bb4802923d1" } }, { "event_id": "evt-54ba79c06450224d05a5e88c", "kind": "unclassified_tcp", "frame_number": 45501, "timestamp_epoch": "1634915376.018765000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050093393d0000001403030001011603030028c51b12ace8b16560f641cac4236c55d06a0864a7cd99c39354ca5b860ab94975b15cec691e09c9ff" } }, { "event_id": "evt-14528dddd6b6a6d464d17f89", "kind": "unclassified_tcp", "frame_number": 45504, "timestamp_epoch": "1634915376.132182000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b438140000005354415254544c530d0a040707004e498800000016030300461000004241042ea3ba9be9be730177137a56c4578e8703596e33cf9a76f54792d7095d2c72673e615a6c2d217b6063d07b3fcc5f35f9935881551f50857eac3fff9adedc2b8c140303000101160303002800000000000000004327a1074fcb791992334d7836cc45d50062085bb8079a3bcd07ea3b37e2a459" } }, { "event_id": "evt-02e43452b836c140988ae842", "kind": "unclassified_tcp", "frame_number": 45511, "timestamp_epoch": "1634915376.217348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707004e493d00000014030300010116030300283e40a382fe4553a005d24866ad0973388c2bc5d902f5fb3151c4f3c815639b8600413732ee41fe98" } }, { "event_id": "evt-5601ec0ae7d748a77cabd381", "kind": "unclassified_tcp", "frame_number": 45516, "timestamp_epoch": "1634915376.288190000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4382800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-a8f18a0d6c5371d17f57922b", "kind": "unclassified_tcp", "frame_number": 45518, "timestamp_epoch": "1634915376.311010000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1aed4c0c75e2277816d19b5c", "kind": "unclassified_tcp", "frame_number": 45531, "timestamp_epoch": "1634915376.389685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d3d0000001403030001011603030028cc42137ab9d6a2b599c423620badef499d801eb33d05bf1ae1990ac1adf07bad953e180810b0946a" } }, { "event_id": "evt-d4ae82c12f5806c490021a61", "kind": "unclassified_tcp", "frame_number": 45533, "timestamp_epoch": "1634915376.390059000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600834f3d0000001403030001011603030028f38bc4b17af14f1d9dc6fec74f8c5feaa6026d666d1becbe3bd14366861eb51f0c0e8c3ac987b64e" } }, { "event_id": "evt-a5d75c446674ceae8b9dd47f", "kind": "unclassified_tcp", "frame_number": 45539, "timestamp_epoch": "1634915376.502093000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500933929000000150303001a0000000000000001c0f0bcb93d87b4f09c071a5326d1e06bd33c" } }, { "event_id": "evt-99e8850d262f2a3103bdfa35", "kind": "unclassified_tcp", "frame_number": 45547, "timestamp_epoch": "1634915376.580237000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500933929000000150303001ac51b12ace8b165610d7339fd3dadb2a56ba30c57aa819d3858c7" } }, { "event_id": "evt-07d7868f05bbcfa90bd0e158", "kind": "unclassified_tcp", "frame_number": 45551, "timestamp_epoch": "1634915376.580658000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507050093390a000000" } }, { "event_id": "evt-5726bfba1732c7a93f0b7fb7", "kind": "unclassified_tcp", "frame_number": 45553, "timestamp_epoch": "1634915376.683009000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-afb53702d89e6fce08d0c572", "kind": "unclassified_tcp", "frame_number": 45564, "timestamp_epoch": "1634915376.697299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7e2be257099099748940884b", "kind": "unclassified_tcp", "frame_number": 45565, "timestamp_epoch": "1634915376.697314000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "260077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016df237ad230000040300483046022100fd253bfae5446644fe0268a17e1f6174456e0080a3d76137e3ed2697f9db0200022100cefd8bc8da4cb3408fb2a98e7f3d22190c3f86405b579518753b8bf769173d87300d06092a864886f70d01010b050003820101009836823c43e330f3ac8c9390b9e880e5d1f2e07724132301edb98c07366aec859307e22c9b26f14e251a3f09f37be4ba6059f5e692d232f320cb064e39ccd04870b81ee4e6c09a58d6af5c41ac66160865cb9fc7cb0e5b41aff5522ab8b7c35304ff2e94d1ff56896c8213e53bc19c3a0f222b437b51bcdc1262e7bef992c88905d607ea2baeb7654ef3f133b2151933d33bc82704c25e7eec21b4b2fd385cbb05db6c1c3e84b9e5bb8ed9ba1935a3e4feea6d278545c48d98bd9403bed772d47b3de738a090c1d4b525952a5dc392f645e33e4032198207bf8340c9585595f50004162d9cf4fd662620f32458a9d9433a368f38bb61d9c5806ce50c7c0524ed00051e3082051a30820402a00302010202100a0470d096bc8a12c890a6df826eec4b300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3139303632303132323735385a170d3239303632303132323735385a305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e2052534120434120473130820122300d06092a864886f70d01010105000382010f003082010a0282010100b149fa3d4a799546e23ce04286f6de543c3c950d858df5b9f66286e53185873a1d25382f0d1fc5f038ddaf43a4997be0cdc4e85d5944139f27e7569da8b2603d0fc51210778c098acb62e1469dbf3eb521863fa10fc497193f5fb1850eab98bb1092c81747b5354c5c2c454af4360bfee35991437c618a28da104a2272c037bc8a21db50e6a42cc99798e4d9c9626715d47f4c7e5835388c2823543c7025786e088a01b10f22ff81bc2b7433626c30389543610f4c4dbcf8d0f0134aaa6e47583be2ad4b87742fb88698b41893b7e0ede2891575e989964ee54535ba142c3674f8f42d72d2676ada6e64a3c6c8a5fa8c2a4fbf3ccfc3f12134396911dad81d930203010001a38201ce308201ca301d0603551d0e04160414919f5e3115ae109fad60c1f7c1ccaa48342f0c26301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302300f0603551d130101ff040530030101ff303106082b0601050507010104253023302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e30440603551d1f043d303b3039a037a0358633687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3081ce0603551d200481c63081c33081c00604551d20003081b7302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f43505330818a06082b06010505070202307e0c7c416e7920757365206f66207468697320436572746966696361746520636f6e737469747574657320616363657074616e6365206f66207468652052656c79696e672050617274792041677265656d656e74206c6f63617465642061742068747470733a2f2f7777772e64696769636572742e636f6d2f7270612d7561300d06092a864886f70d01010b0500038201010017e0797af1" } }, { "event_id": "evt-c3f2785e022c73ec99803efc", "kind": "unclassified_tcp", "frame_number": 45566, "timestamp_epoch": "1634915376.697321000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2370983f65add9bac6a2378d", "kind": "unclassified_tcp", "frame_number": 45574, "timestamp_epoch": "1634915376.706682000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cd61ffc213bcef387f3bdb0b", "kind": "unclassified_tcp", "frame_number": 45575, "timestamp_epoch": "1634915376.706694000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8451264f9f09cd5f4b8b8b27", "kind": "unclassified_tcp", "frame_number": 45576, "timestamp_epoch": "1634915376.706701000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d721d6b233f23cc1a7226c8a", "kind": "unclassified_tcp", "frame_number": 45583, "timestamp_epoch": "1634915376.854492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9fe0070ff2cbe5f5bfdddcef", "kind": "unclassified_tcp", "frame_number": 45590, "timestamp_epoch": "1634915376.857798000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-23285e6285f7e17320e4a58e", "kind": "unclassified_tcp", "frame_number": 45591, "timestamp_epoch": "1634915376.857814000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a05e7781642a61b226980d35", "kind": "unclassified_tcp", "frame_number": 45592, "timestamp_epoch": "1634915376.857822000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-164d8d492689116a33224eca", "kind": "unclassified_tcp", "frame_number": 45596, "timestamp_epoch": "1634915376.935005000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d29000000150303001a00000000000000010b3ae3b66757f3a30bbee6730ff90045167f04070600834f29000000150303001a00000000000000013bf4180016e4526969770fde69900eec41fd" } }, { "event_id": "evt-d13c853cbbbb9282fd052c8d", "kind": "unclassified_tcp", "frame_number": 45606, "timestamp_epoch": "1634915377.019138000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600834f29000000150303001af38bc4b17af14f1eb10faa4041be8881fdf48951e96df9be5485" } }, { "event_id": "evt-51fb40f0938b7f79761ba6b2", "kind": "unclassified_tcp", "frame_number": 45610, "timestamp_epoch": "1634915377.019683000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400521d29000000150303001acc42137ab9d6a2b6744018b142c39805535d517a2f3054a806e905070600834f0a000000" } }, { "event_id": "evt-eb66f5f4d86102e5f73f091b", "kind": "unclassified_tcp", "frame_number": 45614, "timestamp_epoch": "1634915377.020010000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400521d0a000000" } }, { "event_id": "evt-9a2c6a9bff4811eb75b5ee1b", "kind": "unclassified_tcp", "frame_number": 45616, "timestamp_epoch": "1634915377.133184000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ca222756d0198b197c311259", "kind": "unclassified_tcp", "frame_number": 45623, "timestamp_epoch": "1634915377.311466000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b438e4000000160303008a10000086850401602fbde6aa3163e51a65dedbc36ab875ff75e60bf95ef1d8c3516a58e1fbb74e5fe1fa563b842b5c936366c0c965fe225a86af259effb05638801864aab68259ab003fe4be6d80077b54fbf73eec9407b8422deee7d95dd18d5faaaff0204fea522bb27b982f9bc6b5b26ceeb1053532d0ed3e062d923868896c66e79bbb2c99c060c21403030001011603030040aa0ee28cf950bb96a90edc558b186b7fe6a00f69542209ada32522b52fca3fbc231b182789eb8197e5a649d81a39ccef70ba192433c55db89fcb4a7c4d10581f" } }, { "event_id": "evt-918682a3f0fbf657ecc15515", "kind": "unclassified_tcp", "frame_number": 45628, "timestamp_epoch": "1634915377.468800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b438550000001403030001011603030040c2685b9536adadc50283dd5393203e493811bbfdc043943afa0985b8105380a2e57271c3b887b2d7fc86964947c23e66dde67d390c9cf3168648c680b30c2756" } }, { "event_id": "evt-77a1b2c608190fa40cc7aa03", "kind": "unclassified_tcp", "frame_number": 45631, "timestamp_epoch": "1634915377.516058000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed3d00000014030300010116030300288674f5e4f12682ee4beafd7d5d9ee0be5538b4f6df1e5caa168d8209feaf306d1c06aa31a8ce199f" } }, { "event_id": "evt-2677362214d265c12de7a6ae", "kind": "unclassified_tcp", "frame_number": 45635, "timestamp_epoch": "1634915378.061177000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4384f00000017030300407f27b952c1734d7449deeeb12857ad5cfb0cae62935020427ba1ab38807302337b7cefeef52cec01bdf28f4aed79b4474e4606570a0cd183bfccd947a61a1bbb" } }, { "event_id": "evt-f801fb58e30bec7d1eef1df4", "kind": "unclassified_tcp", "frame_number": 45640, "timestamp_epoch": "1634915378.215033000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f37cc1684073018f087aa442", "kind": "unclassified_tcp", "frame_number": 45642, "timestamp_epoch": "1634915378.241063000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed3700000017030300280000000000000001cfce24bfcbd1d4cdeaccf39b6ac0895d761b1a0ee970d17787f48f244ec65e42" } }, { "event_id": "evt-e501e61523ab92aef2b9579d", "kind": "unclassified_tcp", "frame_number": 45650, "timestamp_epoch": "1634915378.443565000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043353d000000140303000101160303002832e0353e0ef31578ed4efbb6aa5e6c51230b3d61bb193f0bd06f3a3111cf4ef011a02380009e4503" } }, { "event_id": "evt-8f4654ef22b02c179071b400", "kind": "unclassified_tcp", "frame_number": 45657, "timestamp_epoch": "1634915378.597122000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50041, "dst_port": 1187, "tcp_stream": 877, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5f081983091dfcfbeb5e0424", "kind": "unclassified_tcp", "frame_number": 45660, "timestamp_epoch": "1634915378.613811000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed9f00000017030300908674f5e4f12682ef3255b3b0dac7a2a30418a2ab7d70113d35e38ee20a308bc1b9a8d8d23b6400e45d7e386e8e54d95793804d1ec70746ad7b7db8425b1fbba729a902c3bebbe8787950fc1cb5193d26e229b2fdc150049c0ffb283ebf681fe08a833338729472d1619824980016e74f363b3b0ba45bcf9aa694e434243c5015bba36cd1fe6ba7c8acddcfcc199d2775" } }, { "event_id": "evt-e8f99ca912ce1e45b0af95cf", "kind": "unclassified_tcp", "frame_number": 45664, "timestamp_epoch": "1634915378.760139000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4384f0000001703030040c9f519f8d35a5509e0e4c911292104a3516eb3783de850435126673a0efc069c30622a00bc64415a0a1a1890b9ff4d96961a547f77b7042bed875fd09a13e30a" } }, { "event_id": "evt-f7ac0f172c04ff7f21a9d677", "kind": "unclassified_tcp", "frame_number": 45669, "timestamp_epoch": "1634915378.906374000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4384f00000017030300404fe1b29d4c86152dd9f2993fbf1881b658ba0047301d638b2ce8005bf76012f30a59012eed1ed0fc820c0d3479b3b8a10167b6826ed86ebaae0e18fadf69890b" } }, { "event_id": "evt-c1b314b1eb5b6e8398bdc2b2", "kind": "unclassified_tcp", "frame_number": 45671, "timestamp_epoch": "1634915378.941060000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043353700000017030300280000000000000001efba4b2262fbbdd894eb9744a802d879af484a66ac92fceea0033ceee3dc0ebb040702000eed33000000170303002400000000000000022231d02af06125f563716ec7d7f3538671cbd6d4c9496a772be87d62" } }, { "event_id": "evt-182408199661d15c9d38f036", "kind": "unclassified_tcp", "frame_number": 45681, "timestamp_epoch": "1634915379.288153000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4385f0000001703030050f6034bb7712328d8389e60fc7bdf134a7021b9428c6c21eb5b415f9c818c4bb69e53258d7bbfe4a27465a1f56e6474ad0f762fe7e4b475f81152f7934fc6e589be54981921b9911090a69ad95f8be793" } }, { "event_id": "evt-6f6e0e7a2a1c6b29268c8074", "kind": "unclassified_tcp", "frame_number": 45685, "timestamp_epoch": "1634915379.323814000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043359f000000170303009032e0353e0ef31579a60bb7d3e84c6e8571aafa9c42e328723f7665bde8dfff5c1bb32cf33394987081262f04da9a51e1e0fcd7e2fe25cda065960c65baa83c5b9eeda6a791bf3a750d84028e58393e913805f7e740480b38e530814b721881821f97cdab1e34e530a1c4a3f29089712e293f3e02ea73cd23eeb415f61b186eac0011001ddf3deaef33fd48d53533c77e" } }, { "event_id": "evt-d3c71fde4bf0ac3d85dd55dc", "kind": "unclassified_tcp", "frame_number": 45689, "timestamp_epoch": "1634915379.426480000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4384f00000017030300406b9dfc9f050627378012e04816012672c7cc9015bfe27df4c09545dd471296f064e7133b32dd0d3f235abcc2882cbd6ac2eeae0c2fccd2e365cdb640dd03959c" } }, { "event_id": "evt-65782063bcc2d840a1104a52", "kind": "unclassified_tcp", "frame_number": 45692, "timestamp_epoch": "1634915379.774942000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4384f0000001703030040b9328cebe4214f79a3315d02d4fb3a957ccd5d640fe7e25485c4c57ffcb03caabcf22c30343e5962fbee3fa511e2e9f0c961a33fcf55a387368cbd17e3c985ba" } }, { "event_id": "evt-3cad6aa406776e260d214831", "kind": "unclassified_tcp", "frame_number": 45696, "timestamp_epoch": "1634915380.005022000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043353300000017030300240000000000000002cc51d317e8f6837533362c2b2facc9fae495334ffb8da112d9444599" } }, { "event_id": "evt-3eda347059f9959e75be1bd2", "kind": "unclassified_tcp", "frame_number": 45702, "timestamp_epoch": "1634915380.886372000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed39000000170303002a8674f5e4f12682f07432fb71d19a7cd52cba70b515fa9407ae136af7237e21b920f70c33e5cee7e9755e" } }, { "event_id": "evt-7fbd41fd9038072b6133497e", "kind": "unclassified_tcp", "frame_number": 45706, "timestamp_epoch": "1634915381.188839000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433539000000170303002a32e0353e0ef3157a59a23432bed1a6ff403e3905c0e4706fbff88068ecb3095354fefa9664a65489660c" } }, { "event_id": "evt-de73d9665f9719f04b68ade4", "kind": "unclassified_tcp", "frame_number": 45708, "timestamp_epoch": "1634915381.216313000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed450000001703030036000000000000000326fd3a84c76663a518954f91b22fe80da711851fa6797126d04a73825abfc23469f65d21c2cc73e9a6e0cf03d6fe" } }, { "event_id": "evt-ec792cbb42802001dea085d4", "kind": "unclassified_tcp", "frame_number": 45714, "timestamp_epoch": "1634915381.414790000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433545000000170303003600000000000000038b0563ab2550bf4c6de5ab483d64d447a97cab70fc336578eff100dab6fd6446a71fa01d47a73a91be01655b3a51" } }, { "event_id": "evt-595a882ac6f659592b64b302", "kind": "unclassified_tcp", "frame_number": 45719, "timestamp_epoch": "1634915381.597705000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed39000000170303002a8674f5e4f12682f18b4285faa06ddb4798d5edcbc8a57168141826d76e0df3eafb29d6321a3453b10226" } }, { "event_id": "evt-ffc8cc5a3ea4eb2a3207c47e", "kind": "unclassified_tcp", "frame_number": 45723, "timestamp_epoch": "1634915381.664776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4385f0000001703030050a16707b3c53e886d24eb73774b0bf33aa1c471b5438adcd160a2d4f26075ec72c0622eb55a97535cc1af0ca51e3a03fefe23ff5d9d7c6b20700d0b54d88a9b83917820ce3bb2797598b5694b17abcfef" } }, { "event_id": "evt-e9a09be1c89b31266bb6b090", "kind": "unclassified_tcp", "frame_number": 45727, "timestamp_epoch": "1634915381.804669000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433539000000170303002a32e0353e0ef3157bf350e16b7cec248fdc830d4bbfca13e58e60eae5a38056f63a4b89d0e7ade21aec15" } }, { "event_id": "evt-f3906daa6ef78b89ff3f1474", "kind": "unclassified_tcp", "frame_number": 45729, "timestamp_epoch": "1634915381.842116000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed39000000170303002a00000000000000049a95da72dea26503cc870f24fda00b0518729f78351a914b0e6cc463086758530e9e" } }, { "event_id": "evt-97827e11cd11c2fc5619566f", "kind": "unclassified_tcp", "frame_number": 45734, "timestamp_epoch": "1634915382.117126000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4383f0000001703030030bf9e4ae9ba7116c9a2c0b4b680bd525bfaca3638afd32acbcbe04cf71f1db31e5ff3d9e45b47a876554a70ddb0822e62" } }, { "event_id": "evt-0b871482b1847bbc996c156c", "kind": "unclassified_tcp", "frame_number": 45739, "timestamp_epoch": "1634915382.234608000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed4800000017030300398674f5e4f12682f228f9099ce50a3cf1552a1b3739124d2c92d7ce21f51113cc585f877bf5ddd31cc30785eb2c6f2b87632a0384cfbe5dcddb" } }, { "event_id": "evt-c8131461fcd8dcfafd05f419", "kind": "unclassified_tcp", "frame_number": 45743, "timestamp_epoch": "1634915382.310886000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043353500000017030300260000000000000004d3b4440dc98ae6e468cafbcedf0086125c1a77c388ea0e095570c1fb5374" } }, { "event_id": "evt-4be309985af8d36df5409566", "kind": "unclassified_tcp", "frame_number": 45747, "timestamp_epoch": "1634915382.540129000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed2a000000170303001b0000000000000005f3e8e67f6b1d64cee1526ccd85c2079c14c3ee" } }, { "event_id": "evt-2559307c7503bd2ef2cb01ff", "kind": "unclassified_tcp", "frame_number": 45752, "timestamp_epoch": "1634915382.706439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433548000000170303003932e0353e0ef3157c57544b77fc9eb95130ad112540360838612c11d66ab91b92c09401140c1210e7d5f39a529653036a9edb55f2f31b84240d" } }, { "event_id": "evt-7057a3f31dffe795ea6d5ce6", "kind": "unclassified_tcp", "frame_number": 45759, "timestamp_epoch": "1634915382.909446000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed4300000017030300348674f5e4f12682f37906ffe9092e7f4ce1eabdc9dab57031b2efe874e06530155907bd15f478852a5e4c3a7e62a69d4882387ef7" } }, { "event_id": "evt-4aedbd136842e4274b69e560", "kind": "unclassified_tcp", "frame_number": 45763, "timestamp_epoch": "1634915382.930346000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50042, "dst_port": 1187, "tcp_stream": 878, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6436452072091866336c9c9e", "kind": "unclassified_tcp", "frame_number": 45765, "timestamp_epoch": "1634915382.965271000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043352a000000170303001b0000000000000005d02316c0761f6e65af01e4f4a60b84305b23f3" } }, { "event_id": "evt-7d98b78fa759c629749d9785", "kind": "unclassified_tcp", "frame_number": 45772, "timestamp_epoch": "1634915383.448946000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed2d000000170303001e000000000000000658f69ddd8e00eb6d3c5d4a04a2a12ab9601a7fff3cde" } }, { "event_id": "evt-951a83e7e88deb78a84f2c0f", "kind": "unclassified_tcp", "frame_number": 45776, "timestamp_epoch": "1634915383.449383000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433543000000170303003432e0353e0ef3157d6bce7387c548795077dcaeeabd0b09cc977b720e6bfdb62047b8d3a72ed63383ed262dcd9c4939fc97b740e9" } }, { "event_id": "evt-f4f3133e62d68641b459916b", "kind": "unclassified_tcp", "frame_number": 45779, "timestamp_epoch": "1634915383.797211000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010043352d000000170303001e0000000000000006df29e64aefe5f6a5620106256b940e492b025265066a" } }, { "event_id": "evt-c275d40b95e53cf2dd6f245c", "kind": "unclassified_tcp", "frame_number": 45783, "timestamp_epoch": "1634915383.828817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed5700000017030300488674f5e4f12682f4e8e5c464d8403632b16d03f86e4e994941871f1e1f86f402b725bb5eee562d48cccdd5f32ee529b3e9684a9ce804c94542ddf4048a4d138bb4af64868cb873fa" } }, { "event_id": "evt-e3818b52b31b40cb16989bda", "kind": "unclassified_tcp", "frame_number": 45787, "timestamp_epoch": "1634915383.831810000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000eed29000000150303001a8674f5e4f12682f50392cc6260e30321879fa4ba513e00ecfb81" } }, { "event_id": "evt-7e1bd12414b4c228956f96d8", "kind": "unclassified_tcp", "frame_number": 45791, "timestamp_epoch": "1634915383.832409000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702000eed0a000000" } }, { "event_id": "evt-4a7605b8461d8442e81f00d9", "kind": "unclassified_tcp", "frame_number": 45794, "timestamp_epoch": "1634915384.188935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433557000000170303004832e0353e0ef3157e53aebb8cedf891c82e65e59280e3672a8cd436a746137050531d435ea2382a413749bc1d8bdde3102b7bc74d3f49fa3c9952aa63f443ef3772b5c640b02fc8dc" } }, { "event_id": "evt-593ca81af5e243b7b0a73972", "kind": "unclassified_tcp", "frame_number": 45798, "timestamp_epoch": "1634915384.192500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100433529000000150303001a32e0353e0ef3157fe9390d29905595505dad3ee1fe4739c602fb" } }, { "event_id": "evt-7c72b8b3ede7e5c8500578f5", "kind": "unclassified_tcp", "frame_number": 45802, "timestamp_epoch": "1634915384.192806000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010043350a000000" } }, { "event_id": "evt-c3ec7525395efc5ed639d80e", "kind": "unclassified_tcp", "frame_number": 45811, "timestamp_epoch": "1634915387.249762000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50043, "dst_port": 1187, "tcp_stream": 879, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9d83435e25c12827dfd14e32", "kind": "unclassified_tcp", "frame_number": 45813, "timestamp_epoch": "1634915387.322321000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50043, "dst_port": 1187, "tcp_stream": 879, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f24a1362f2428d8ae7c66ff2", "kind": "unclassified_tcp", "frame_number": 45840, "timestamp_epoch": "1634915391.579565000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50044, "dst_port": 1187, "tcp_stream": 881, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-adcf0846c6b26c6ac4e0510f", "kind": "unclassified_tcp", "frame_number": 46808, "timestamp_epoch": "1634915394.602192000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ac42db017f72a47b21c9a9fe", "kind": "unclassified_tcp", "frame_number": 46815, "timestamp_epoch": "1634915395.921072000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50045, "dst_port": 1187, "tcp_stream": 883, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ff16407e8d46c96d8768e8f1", "kind": "unclassified_tcp", "frame_number": 46828, "timestamp_epoch": "1634915400.318986000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50046, "dst_port": 1187, "tcp_stream": 884, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-209807051b710ed94083a752", "kind": "unclassified_tcp", "frame_number": 46830, "timestamp_epoch": "1634915400.368346000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50046, "dst_port": 1187, "tcp_stream": 884, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-abfef5fd6467267dff81206a", "kind": "unclassified_tcp", "frame_number": 46842, "timestamp_epoch": "1634915404.696243000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50047, "dst_port": 1187, "tcp_stream": 885, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a835a333f0d09d547fb78106", "kind": "unclassified_tcp", "frame_number": 46855, "timestamp_epoch": "1634915409.252358000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50048, "dst_port": 1187, "tcp_stream": 886, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6e5d06299aab8f8331f63c69", "kind": "unclassified_tcp", "frame_number": 46909, "timestamp_epoch": "1634915413.655633000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50049, "dst_port": 1187, "tcp_stream": 889, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-97d1f3dc934a9fea017124fe", "kind": "unclassified_tcp", "frame_number": 46916, "timestamp_epoch": "1634915415.176865000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4385f000000170303005066536b7ef907ae51c56c1df6ca1bef078ad4733530821fb5e409c5bb14236b950061846e9945bc307392b3c7750f18fb32616d67a355b085578be77b88a0ba3208e9841716e25249da807a7f3573543d" } }, { "event_id": "evt-20886c2c8a0b4c16c19542a0", "kind": "unclassified_tcp", "frame_number": 46920, "timestamp_epoch": "1634915415.545583000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4383f000000170303003048c33b371e12c58b440d68005a4e8cef51a0490dae6070af83a049deaae593a664097691becca79369428a4f45aec56c" } }, { "event_id": "evt-cb4190e5abadf576a8af27d9", "kind": "unclassified_tcp", "frame_number": 46926, "timestamp_epoch": "1634915415.689863000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4386f0000001703030060510d7dd70c805be296444cd6c50c82734ec272e259af113c5f29c10807f36da0362ce69d9c85118cfa67e4320690d2b833c4ab844cbeffa3d5efcaffe717cfb354e1e296a4886fd5d44121127cbd463b23450804387a4bbc3183f63964c31419" } }, { "event_id": "evt-084a7ee785732df861125b35", "kind": "unclassified_tcp", "frame_number": 46930, "timestamp_epoch": "1634915415.690404000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300b4380a000000" } }, { "event_id": "evt-bd248cff788ef1b605855e45", "kind": "unclassified_tcp", "frame_number": 46932, "timestamp_epoch": "1634915416.008898000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300b4383f0000001503030030b3c51bae1296e81b9aea610ff85e7ed75523e9bb9cd9f67758dd2eff759d7f46f2d412bfe3064a1ea6b6e30d04ecef10" } }, { "event_id": "evt-b73ad4ac9978e55077b0392d", "kind": "unclassified_tcp", "frame_number": 46934, "timestamp_epoch": "1634915416.186212000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300b4380a000000" } }, { "event_id": "evt-2ae1d5f8504bd866dea47044", "kind": "unclassified_tcp", "frame_number": 46941, "timestamp_epoch": "1634915418.173459000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50050, "dst_port": 1187, "tcp_stream": 890, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-91540d9084bb5120c4a80c2b", "kind": "unclassified_tcp", "frame_number": 46952, "timestamp_epoch": "1634915422.544618000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50051, "dst_port": 1187, "tcp_stream": 891, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-56b9acfe032a30e57d864bed", "kind": "unclassified_tcp", "frame_number": 46954, "timestamp_epoch": "1634915422.572396000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50051, "dst_port": 1187, "tcp_stream": 891, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d4c5de8455a31fffbca95d20", "kind": "unclassified_tcp", "frame_number": 46963, "timestamp_epoch": "1634915426.457692000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010073200c000000197b" } }, { "event_id": "evt-72edfa8046f1dc5a3b11c9d2", "kind": "unclassified_tcp", "frame_number": 46965, "timestamp_epoch": "1634915426.642924000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073200e00000005020002" } }, { "event_id": "evt-43907418de4851e4a344eaec", "kind": "unclassified_tcp", "frame_number": 46966, "timestamp_epoch": "1634915426.643333000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010073200c0000000502" } }, { "event_id": "evt-0fb2aeb8a2919637b0b0ab33", "kind": "unclassified_tcp", "frame_number": 46972, "timestamp_epoch": "1634915426.873310000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f83eeceabfb5c8b607b4bce1", "kind": "unclassified_tcp", "frame_number": 46973, "timestamp_epoch": "1634915426.873865000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010073200c0000000100" } }, { "event_id": "evt-1ad3905e6e9cbd0d07ecd14c", "kind": "unclassified_tcp", "frame_number": 46978, "timestamp_epoch": "1634915426.971481000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50052, "dst_port": 1187, "tcp_stream": 892, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5dabbc0ae691eddbb6690470", "kind": "unclassified_tcp", "frame_number": 46987, "timestamp_epoch": "1634915427.245755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-fb220bd49a4f0449bf1e5bd8", "kind": "unclassified_tcp", "frame_number": 46999, "timestamp_epoch": "1634915427.359329000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732014000000050000010a0a169cc303" } }, { "event_id": "evt-16efa30e89e861b36f101163", "kind": "unclassified_tcp", "frame_number": 47002, "timestamp_epoch": "1634915427.400194000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073207900000032323020534e37505230344341303137322e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31303a3236202b303030300d0a" } }, { "event_id": "evt-75d5ab0f54a2ecfe939e7ee6", "kind": "unclassified_tcp", "frame_number": 47009, "timestamp_epoch": "1634915427.794769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073201a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b939cf4ae4450ec8cc8253b4", "kind": "unclassified_tcp", "frame_number": 47014, "timestamp_epoch": "1634915427.843425000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320d80000003235302d534e37505230344341303137322e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-7932fef87cceefd78cb611ab", "kind": "unclassified_tcp", "frame_number": 47017, "timestamp_epoch": "1634915428.168227000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320140000005354415254544c530d0a" } }, { "event_id": "evt-4c00ebaafabe37f11bb39929", "kind": "unclassified_tcp", "frame_number": 47022, "timestamp_epoch": "1634915428.216368000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073202700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-6e9866e635a2b64b0659a1b6", "kind": "unclassified_tcp", "frame_number": 47026, "timestamp_epoch": "1634915428.590052000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9f9905e62a6cec29998c99e9", "kind": "unclassified_tcp", "frame_number": 47031, "timestamp_epoch": "1634915428.662612000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4652d683286d49367ba4d130", "kind": "unclassified_tcp", "frame_number": 47035, "timestamp_epoch": "1634915428.754928000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c18449f67d9a77239b9905a0", "kind": "unclassified_tcp", "frame_number": 47040, "timestamp_epoch": "1634915428.755471000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-62256d98ac9707da8add17dc", "kind": "unclassified_tcp", "frame_number": 47041, "timestamp_epoch": "1634915428.755485000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a082" } }, { "event_id": "evt-ea5f2462c92213ed8b8a3f5b", "kind": "unclassified_tcp", "frame_number": 47046, "timestamp_epoch": "1634915428.809899000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-945b209e5e97ec4c638cfcc2", "kind": "unclassified_tcp", "frame_number": 47049, "timestamp_epoch": "1634915429.275843000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320b400000016030300070b00000300000016030300661000006261044328270d4447ddc239a3b372a5810461f260ebc2ba3faa418ec27d008ee3ab03c40b4a40a7b82233f7e09313c20f3b79592054a43655e6802593649243b5f6d050e0632448a1595c905474073eb751521120ccf4fd4ca603e387f520bc4de59c14030300010116030300280000000000000000587630189fef9f2ab6c6954973606a4aa4a614fa0aede9ffb631b559e8920195" } }, { "event_id": "evt-10c0885f1b355879a734c31f", "kind": "unclassified_tcp", "frame_number": 47054, "timestamp_epoch": "1634915429.348222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073203d00000014030300010116030300280000000000000000e1faf9feb4fe1f332fbdb0d4c03711c2d6e57984dea878df36b58f28da3d8949" } }, { "event_id": "evt-7c0991271988aebc4dad8594", "kind": "unclassified_tcp", "frame_number": 47057, "timestamp_epoch": "1634915429.585026000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073203700000017030300280000000000000001ef38b912cdc23133ff9a31464d64790a6f6dd66f12e459fab036108420dc0dd6" } }, { "event_id": "evt-5cc2f9b74faf1a78a565cd5f", "kind": "unclassified_tcp", "frame_number": 47061, "timestamp_epoch": "1634915429.631870000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1f989cd84585ee6933930004", "kind": "unclassified_tcp", "frame_number": 47065, "timestamp_epoch": "1634915430.867804000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073203300000017030300240000000000000002df5b159dd6452f70ace1dbfbb582f4d67d1e19e252ee4760f302c826" } }, { "event_id": "evt-54ea55e48d90fefa2cad0fd7", "kind": "unclassified_tcp", "frame_number": 47070, "timestamp_epoch": "1634915430.924470000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732039000000170303002a0000000000000002715bfe7f614958faef5235e03653f8c2e20938b179d1a9add877606eb09fa1173de0" } }, { "event_id": "evt-ab210c89f0194dc486ce3d1d", "kind": "unclassified_tcp", "frame_number": 47077, "timestamp_epoch": "1634915431.325231000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732045000000170303003600000000000000031046a6b98c0abfb101f2959eec774f01f52d165841897b41848c49c55b8a0854d4be05f8579363926776ee6959fa" } }, { "event_id": "evt-dc1cbe78e8ca56cc8f43848d", "kind": "unclassified_tcp", "frame_number": 47082, "timestamp_epoch": "1634915431.358866000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50053, "dst_port": 1187, "tcp_stream": 895, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d740370bc5ac848b3edae98b", "kind": "unclassified_tcp", "frame_number": 47086, "timestamp_epoch": "1634915431.369972000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732039000000170303002a0000000000000003060449458cb325fd4f01dece8e61084e014218905d1ccb9b197cf0735d024afb8413" } }, { "event_id": "evt-ddd8de5cc681154af16815f8", "kind": "unclassified_tcp", "frame_number": 47090, "timestamp_epoch": "1634915431.884940000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732035000000170303002600000000000000048dc71d3a85cc21702dec6fc55281c97f17ea8894d7df25f8394e4d6cee25" } }, { "event_id": "evt-028624eb983d67ac679a1f2a", "kind": "unclassified_tcp", "frame_number": 47107, "timestamp_epoch": "1634915435.737458000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50054, "dst_port": 1187, "tcp_stream": 896, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-75a273e7eb88e24a34bad1bc", "kind": "unclassified_tcp", "frame_number": 47132, "timestamp_epoch": "1634915440.057477000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50055, "dst_port": 1187, "tcp_stream": 898, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ed308e598e91ffe579f0caa1", "kind": "unclassified_tcp", "frame_number": 47137, "timestamp_epoch": "1634915440.999391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320a000000017030300910000000000000004dc9f21e66a274e04bc970b308039f80f38c289fe9bc9a5c8d41b13470ee42ca0d022c961e9fdb286907da7a6163220efa2ce09b252b46ec3e9f826637820a4b0b4f77af5a473173c058cb0863c4bedee64b06425bb47ace1075b4be11412046f3220901e77037c0164c3bc4c609ee1f2af0160b3ce60ee06cd549b41656e8d8e116ef0b76363670ba2" } }, { "event_id": "evt-fe3ae7bb67a380d66d92459f", "kind": "unclassified_tcp", "frame_number": 47141, "timestamp_epoch": "1634915441.256087000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073202a000000170303001b00000000000000052a6f314f6a7d917ca71da276cd3ebb7a8d469f" } }, { "event_id": "evt-01cc7ce56502ae6dc057471b", "kind": "unclassified_tcp", "frame_number": 47155, "timestamp_epoch": "1634915444.368648000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50056, "dst_port": 1187, "tcp_stream": 899, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-faa4b494a7a19bc1e288beef", "kind": "unclassified_tcp", "frame_number": 47161, "timestamp_epoch": "1634915446.433342000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732075000000170303006600000000000000051eb9410b3db949f76f03b1522a0a3fca11caa4216b6fe1de312ee7aa771015566732d60a096f64c78681d0f7c30ace9cfc057944bc8fe3afb3495bc3a9a72e457928e66f6281395a31b90518d80f623e471b152704572487eb2d51747723" } }, { "event_id": "evt-6b6e3e2392c37480529e0208", "kind": "unclassified_tcp", "frame_number": 47164, "timestamp_epoch": "1634915446.760662000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073202d000000170303001e000000000000000632d02da2a19a89c486d8f82e49b6ad6aa38384a7a49c" } }, { "event_id": "evt-31376088ac25ff7bba127fe9", "kind": "unclassified_tcp", "frame_number": 47169, "timestamp_epoch": "1634915446.806212000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007320570000001703030048000000000000000615ea48307d025c3db2c85715eebcb8e4895c8138c19b044e459f0d8a69926fae570af53ed0e849a7c5f12fd05a5d7bb6dcfc77a013c3e75de6bccb7f9a8655d8" } }, { "event_id": "evt-d113f9de29acdf3a16384f34", "kind": "unclassified_tcp", "frame_number": 47173, "timestamp_epoch": "1634915446.806576000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010073200a000000" } }, { "event_id": "evt-14b7e9eeb125f2f393b94fb9", "kind": "unclassified_tcp", "frame_number": 47175, "timestamp_epoch": "1634915447.188213000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100732029000000150303001a00000000000000073e619602936a72b859b1a51cdbc0c7b02c91" } }, { "event_id": "evt-ba9e6cb4f052df7609b1ffaa", "kind": "unclassified_tcp", "frame_number": 47182, "timestamp_epoch": "1634915448.699540000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50057, "dst_port": 1187, "tcp_stream": 900, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b092751349e4299cbd727cec", "kind": "unclassified_tcp", "frame_number": 47184, "timestamp_epoch": "1634915448.729259000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50057, "dst_port": 1187, "tcp_stream": 900, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c71bd3f51ef7e537871217aa", "kind": "unclassified_tcp", "frame_number": 47198, "timestamp_epoch": "1634915453.097736000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50058, "dst_port": 1187, "tcp_stream": 901, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-55afa79b40dcc51f1d764052", "kind": "unclassified_tcp", "frame_number": 47223, "timestamp_epoch": "1634915454.932922000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-cbeec376715bcb366d503221", "kind": "unclassified_tcp", "frame_number": 48275, "timestamp_epoch": "1634915457.474483000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50059, "dst_port": 1187, "tcp_stream": 904, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e0833092dd6d7bffad39e142", "kind": "unclassified_tcp", "frame_number": 48289, "timestamp_epoch": "1634915461.888783000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50060, "dst_port": 1187, "tcp_stream": 905, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c98b7805760ec76b85c6278b", "kind": "unclassified_tcp", "frame_number": 48300, "timestamp_epoch": "1634915466.252985000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50061, "dst_port": 1187, "tcp_stream": 906, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b7415669d1f812929f6198ee", "kind": "unclassified_tcp", "frame_number": 48303, "timestamp_epoch": "1634915466.542618000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0c038f11de3d735d5fd90fcd", "kind": "unclassified_tcp", "frame_number": 48313, "timestamp_epoch": "1634915470.600828000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50062, "dst_port": 1187, "tcp_stream": 907, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-94568e768571c4133f2164fa", "kind": "unclassified_tcp", "frame_number": 48434, "timestamp_epoch": "1634915474.928453000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50063, "dst_port": 1187, "tcp_stream": 913, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ec45bba0374364a0b3156f1e", "kind": "unclassified_tcp", "frame_number": 48447, "timestamp_epoch": "1634915479.340279000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50064, "dst_port": 1187, "tcp_stream": 914, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-75401c125c3f005135b9c8ee", "kind": "unclassified_tcp", "frame_number": 49014, "timestamp_epoch": "1634915483.710172000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50065, "dst_port": 1187, "tcp_stream": 917, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ca7362c330a394c92b618c5b", "kind": "unclassified_tcp", "frame_number": 49018, "timestamp_epoch": "1634915485.182915000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e65b4f426c6d785d872ed2e8", "kind": "unclassified_tcp", "frame_number": 49021, "timestamp_epoch": "1634915485.748375000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100bc3f0c000000197b" } }, { "event_id": "evt-32952898248c20fe41e6d522", "kind": "unclassified_tcp", "frame_number": 49023, "timestamp_epoch": "1634915485.938912000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f0e00000005020002020702003ded0c000000197b040702003ded0e00000005020002020703003cb90c000000197b0207040039760c000000197b040703003cb90e000000050200020407040039760e00000005020002" } }, { "event_id": "evt-595dae7a02e16966af396ede", "kind": "unclassified_tcp", "frame_number": 49024, "timestamp_epoch": "1634915485.939936000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bc3f0c0000000502030702003ded0c0000000502030703003cb90c00000005020307040039760c0000000502" } }, { "event_id": "evt-50c17e241666f64a3f177abc", "kind": "unclassified_tcp", "frame_number": 49027, "timestamp_epoch": "1634915486.300128000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f20000000010432356d630f356f504d44384828685558534a2a57040702003ded20000000010432356d630f356f504d44384828685558534a2a57040703003cb920000000010432356d630f356f504d44384828685558534a2a5704070400397620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-cf8853828c0525be7f021786", "kind": "unclassified_tcp", "frame_number": 49028, "timestamp_epoch": "1634915486.300717000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bc3f0c0000000100030702003ded0c0000000100030703003cb90c00000001000307040039760c0000000100" } }, { "event_id": "evt-7e752285a13134439d4f92d0", "kind": "unclassified_tcp", "frame_number": 49030, "timestamp_epoch": "1634915486.478019000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207050014cf0c000000197b0207060037370c000000197b0407050014cf0e000000050200020407060037370e00000005020002020707005d2f0c000000197b040707005d2f0e00000005020002" } }, { "event_id": "evt-487d43adbd9b2a931ec27db4", "kind": "unclassified_tcp", "frame_number": 49031, "timestamp_epoch": "1634915486.479238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050014cf0c00000005020307060037370c0000000502030707005d2f0c0000000502" } }, { "event_id": "evt-ca43c810a21f780e340f4d4c", "kind": "unclassified_tcp", "frame_number": 49033, "timestamp_epoch": "1634915486.772363000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f1e000000050100030d6170692e69706966792e6f726701bb040702003ded1e000000050100030d6170692e69706966792e6f726701bb040703003cb91e000000050100030d6170692e69706966792e6f726701bb0407040039761e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-b6c8c0a55a5565e16a2b926a", "kind": "unclassified_tcp", "frame_number": 49046, "timestamp_epoch": "1634915486.910973000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f14000000050000010a0a169cc30b" } }, { "event_id": "evt-a2f830e69b8cf750d883ecf1", "kind": "unclassified_tcp", "frame_number": 49048, "timestamp_epoch": "1634915486.911178000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003ded14000000050000010a0a169cc30c" } }, { "event_id": "evt-dcc6de1ee9c4be17f7c3f78b", "kind": "unclassified_tcp", "frame_number": 49054, "timestamp_epoch": "1634915486.917071000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703003cb914000000050000010a0a169cc30d" } }, { "event_id": "evt-1d49ee74c08e5dfd3642f1b0", "kind": "unclassified_tcp", "frame_number": 49056, "timestamp_epoch": "1634915486.917222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400397614000000050000010a0a169cc30e" } }, { "event_id": "evt-a8c1b99328d6783812c9c2f5", "kind": "unclassified_tcp", "frame_number": 49058, "timestamp_epoch": "1634915486.965622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050014cf20000000010432356d630f356f504d44384828685558534a2a5704070600373720000000010432356d630f356f504d44384828685558534a2a57040707005d2f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-7106cf9a35bc47d8be68b85a", "kind": "unclassified_tcp", "frame_number": 49059, "timestamp_epoch": "1634915486.966028000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050014cf0c00000001000307060037370c0000000100030707005d2f0c0000000100" } }, { "event_id": "evt-d411b1b6df0a7f134a8e958b", "kind": "unclassified_tcp", "frame_number": 49062, "timestamp_epoch": "1634915487.245471000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9620ebc8fb24ffcc50a9c4e7", "kind": "unclassified_tcp", "frame_number": 49072, "timestamp_epoch": "1634915487.320383000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f0a1000001603030059020000550303def6d2de211de744f56045b173814e17217e058c682dcec1ddbc7deac8de3a8120432673a321f260bdc286b8f5fdfa2ab46025380ec805ed8795d93813ee2917cec02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-f5e64294ba4b3900e06c86c5", "kind": "unclassified_tcp", "frame_number": 49073, "timestamp_epoch": "1634915487.320398000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-33a61f8514c432c8cbc6779f", "kind": "unclassified_tcp", "frame_number": 49074, "timestamp_epoch": "1634915487.320405000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f8aec7fa9bafc5397dab3ed2", "kind": "unclassified_tcp", "frame_number": 49078, "timestamp_epoch": "1634915487.320671000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-12b808d336b069c4c492f7e8", "kind": "unclassified_tcp", "frame_number": 49082, "timestamp_epoch": "1634915487.322976000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a7d2df6075ecd398c22c068c", "kind": "unclassified_tcp", "frame_number": 49084, "timestamp_epoch": "1634915487.435146000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-138cee3b4b3e64fc35c315e6", "kind": "unclassified_tcp", "frame_number": 49102, "timestamp_epoch": "1634915487.511640000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-47e3f9ec568e1662385fda09", "kind": "unclassified_tcp", "frame_number": 49103, "timestamp_epoch": "1634915487.511654000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "89f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9" } }, { "event_id": "evt-c96f7151149b4086c357c628", "kind": "unclassified_tcp", "frame_number": 49104, "timestamp_epoch": "1634915487.511663000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1f0f55b186fd7689def21f34", "kind": "unclassified_tcp", "frame_number": 49107, "timestamp_epoch": "1634915487.511824000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0326bc8866c74a30e9a04595", "kind": "unclassified_tcp", "frame_number": 49108, "timestamp_epoch": "1634915487.511838000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2abf705e0f4ba0125b7a59df", "kind": "unclassified_tcp", "frame_number": 49109, "timestamp_epoch": "1634915487.511851000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-486fdb9f796cf2c7ac45a1f9", "kind": "unclassified_tcp", "frame_number": 49122, "timestamp_epoch": "1634915487.515048000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040039761a0a000016030300590200005503038fabac5542ab7ed9807854c41425e6d4f33dbc895e5c810919de86633096f7f020a4c86d5ee20677af22b7a485729e08a376960be083768459812ef04b91592dcac02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-865fdfae00e0cca500aec66d", "kind": "unclassified_tcp", "frame_number": 49125, "timestamp_epoch": "1634915487.515114000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-32059327f32dc3f6e4535bdf", "kind": "unclassified_tcp", "frame_number": 49131, "timestamp_epoch": "1634915487.515633000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703003cb9600700000e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea7" } }, { "event_id": "evt-f12de194ac41defa5a390672", "kind": "unclassified_tcp", "frame_number": 49132, "timestamp_epoch": "1634915487.515647000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "2ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c00014903001741043973c82d9be77e48056cf37f25f8c16404f0992206255329c5f738cae0c05ee07142806329e1ece82ffd7443bf0369dd7c1de8d35e7b59a28e93874d9971b90206010100dd4d31e0af62d672f307eae21b19e29e92801dad801148df10cf735b71ae2deb18dc9e5d8a4e2a55d210941f6ecb9ea4b9b71d246b33c299a56f4250366e1e9679c3c56715b5e342d6947d9fe6d787978ff6a42690a9ef80295bc90e760f7a99b3941a38f889ea8fb2d5a55a9328686ad7f2107700578cabf4c3420995159d390f57c88275ed44744535f5b9f529eb70ec7889a9c0547d1d63b944495aa5d424ef1983206806f6dbf60741ba7fa2603293c27e82aff9b602846ec0121a04a41d3ee727f4b77da53320a3a1efa0dc4769e3dc401b533a6ff665db70573ca320199db62fcce7e49db10ef5be76b5aba9197947eaf80807bab78dc3b499a74d6b7216030300040e000000" } }, { "event_id": "evt-3f8a6b00df3cd71dd4981e72", "kind": "unclassified_tcp", "frame_number": 49134, "timestamp_epoch": "1634915487.515768000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b3f96884fc1e06f52717afe3", "kind": "unclassified_tcp", "frame_number": 49135, "timestamp_epoch": "1634915487.515780000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3e95249a75debe64a0d221f3", "kind": "unclassified_tcp", "frame_number": 49136, "timestamp_epoch": "1634915487.515789000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bbdda32637c8d16a2f69dfb1", "kind": "unclassified_tcp", "frame_number": 49138, "timestamp_epoch": "1634915487.515798000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f0294d48813baea18ac27c01", "kind": "unclassified_tcp", "frame_number": 49145, "timestamp_epoch": "1634915487.516926000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-338125766123aaacedd4e5c9", "kind": "unclassified_tcp", "frame_number": 49160, "timestamp_epoch": "1634915488.111009000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50066, "dst_port": 1187, "tcp_stream": 922, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ea366d80d947a26b5003b595", "kind": "unclassified_tcp", "frame_number": 49163, "timestamp_epoch": "1634915488.267210000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c2a3e45c7fba9eb7d624b75f", "kind": "unclassified_tcp", "frame_number": 49177, "timestamp_epoch": "1634915488.332236000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050014cf14000000050000010a0a169cc30f" } }, { "event_id": "evt-1189ab9eb0c595617d160d55", "kind": "unclassified_tcp", "frame_number": 49181, "timestamp_epoch": "1634915488.334191000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600373714000000050000010a0a169cc310" } }, { "event_id": "evt-09930dd633795a5a58705918", "kind": "unclassified_tcp", "frame_number": 49185, "timestamp_epoch": "1634915488.335563000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bc3f3d00000014030300010116030300283ccb8d55ddc6a7a83afe10673e581f1d50affa0a1001930cb281a45aa7f9aaedf9b115c27b579aed" } }, { "event_id": "evt-1fd2740905713913495463ea", "kind": "unclassified_tcp", "frame_number": 49187, "timestamp_epoch": "1634915488.335757000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703003cb93d0000001403030001011603030028c650d8d654c2dd7e1fe3c1a05f76197700706ab7bd1e076d324a091937e7619f70ca9b9eccb98985" } }, { "event_id": "evt-d6ebe91992e447f14e9c50a5", "kind": "unclassified_tcp", "frame_number": 49192, "timestamp_epoch": "1634915488.339513000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003ded3d00000014030300010116030300285d0a14297628c3bd8d1339542f8787792a5ff9b3ea92af0b2d122599683dbbc574e516237d2be761" } }, { "event_id": "evt-ff25613fd6828f1219601d69", "kind": "unclassified_tcp", "frame_number": 49194, "timestamp_epoch": "1634915488.339729000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707005d2f14000000050000010a0a169cc311" } }, { "event_id": "evt-6210dec3c9263481f4bebec4", "kind": "unclassified_tcp", "frame_number": 49199, "timestamp_epoch": "1634915488.451220000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003976880000001603030046100000424104e37cc8e48aa9e3da59dc3659f12a210b30eabf510fc9074f8f2509b01e99b8ffcd526cbfc5c9247e45b181f34a1f969ad913728955264b4ee21daa1d7d5aae1e140303000101160303002800000000000000003d7c3500f8bd7e97c94a619f43d68622a8d5416379c2e16faa29e904f2710bc0" } }, { "event_id": "evt-1ea0cb52a6fb8e98e7e2a1ac", "kind": "unclassified_tcp", "frame_number": 49204, "timestamp_epoch": "1634915488.521180000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040039763d0000001403030001011603030028abf80fc4865beb592a8629918ad62d6254141417157b257a3daa3221a4014e5696155193986fdad0" } }, { "event_id": "evt-44e3b161dcdd851b9f095a2f", "kind": "unclassified_tcp", "frame_number": 49207, "timestamp_epoch": "1634915488.633965000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-23e989783f2c7c0a4e09c083", "kind": "unclassified_tcp", "frame_number": 49214, "timestamp_epoch": "1634915488.708132000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-de03be18b960cd83fb9cf8ed", "kind": "unclassified_tcp", "frame_number": 49215, "timestamp_epoch": "1634915488.708155000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-78c4954e6b50b60fa58909a4", "kind": "unclassified_tcp", "frame_number": 49222, "timestamp_epoch": "1634915488.718805000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050014cfa00c00003a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361" } }, { "event_id": "evt-808659ac44984da1ca9851a6", "kind": "unclassified_tcp", "frame_number": 49223, "timestamp_epoch": "1634915488.718821000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c58416030853bf0a8c15c90d", "kind": "unclassified_tcp", "frame_number": 49224, "timestamp_epoch": "1634915488.718831000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b2b4573d0f41138eb7e8faf6", "kind": "unclassified_tcp", "frame_number": 49228, "timestamp_epoch": "1634915488.898790000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6077c21d418bee802db5bf1a", "kind": "unclassified_tcp", "frame_number": 49247, "timestamp_epoch": "1634915488.970980000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8cb239173bc12c82b9fbc457", "kind": "unclassified_tcp", "frame_number": 49248, "timestamp_epoch": "1634915488.970992000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "89f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9" } }, { "event_id": "evt-12dfbbebe12994b8f77112e9", "kind": "unclassified_tcp", "frame_number": 49249, "timestamp_epoch": "1634915488.971000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d0c02570f5468605e3efeeb9", "kind": "unclassified_tcp", "frame_number": 49251, "timestamp_epoch": "1634915488.971158000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-924585bc65f34762ede97a0c", "kind": "unclassified_tcp", "frame_number": 49252, "timestamp_epoch": "1634915488.971169000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-303be861a0af1f267f25e0f3", "kind": "unclassified_tcp", "frame_number": 49258, "timestamp_epoch": "1634915488.978116000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e43ee7bcd9fed72a0ffa1175", "kind": "unclassified_tcp", "frame_number": 49263, "timestamp_epoch": "1634915488.978712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6dd8ab9df272629f4b734a48", "kind": "unclassified_tcp", "frame_number": 49264, "timestamp_epoch": "1634915488.978725000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6d6609eb583df0a38bce35f8", "kind": "unclassified_tcp", "frame_number": 49276, "timestamp_epoch": "1634915488.980008000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eefae2de96dfbf9319cdcc61", "kind": "unclassified_tcp", "frame_number": 49277, "timestamp_epoch": "1634915488.980019000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6fdac9641e485071f845d127", "kind": "unclassified_tcp", "frame_number": 49282, "timestamp_epoch": "1634915488.980226000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8f134555d26f05668ff4cf6b", "kind": "unclassified_tcp", "frame_number": 49288, "timestamp_epoch": "1634915488.980811000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100bc3f0a000000050702003ded0a000000050703003cb90a000000" } }, { "event_id": "evt-d47dc7cc3d483fa696ab9fb7", "kind": "unclassified_tcp", "frame_number": 49290, "timestamp_epoch": "1634915489.087214000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003976a40000001703030095000000000000000100849f12692c90708bfebd91289bd7448a8eb14e41ed7f41443c36d61447f667edfda561c112713bf17523cb39528cae0ee25938c3c79a74e4a2962da5ab432a2d99adb1567810f1c3c06648fdc8a51e23f994c78174a91c3f74604b350166314330d9519a75c1b05272f332ae4fcbf30cb9c526101ea8f5a629c56291f99cef6221713e96742aada5e0efc350" } }, { "event_id": "evt-708f083fe49fa233b667bea5", "kind": "unclassified_tcp", "frame_number": 49297, "timestamp_epoch": "1634915489.165071000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-38e38d728392e6d865c45727", "kind": "unclassified_tcp", "frame_number": 49301, "timestamp_epoch": "1634915489.165573000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507040039760a000000" } }, { "event_id": "evt-f33bb3d4b21e2716768fae4a", "kind": "unclassified_tcp", "frame_number": 49304, "timestamp_epoch": "1634915489.303802000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050014cf880000001603030046100000424104c2f3f82526db2ec880c4a63091b5314c31a3a47c3c25d181ce4d652b555d28020d738a7185cf0fcdfd57b85e92364005f881e4bee3643c7b7118223997ebfa1e14030300010116030300280000000000000000b19ac57a1411216df1df677e242bcb3a9fdb260c513018cbc94ce50901a4190e" } }, { "event_id": "evt-c5da4c560f61587cb58b1489", "kind": "unclassified_tcp", "frame_number": 49309, "timestamp_epoch": "1634915489.377150000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050014cf3d000000140303000101160303002843f51d07a3217f6c429bdb8d4f71c7c9ee07fa1f356b10a8678009b94d94310d413ac179691c341a" } }, { "event_id": "evt-60fe46878ceef279717cf06b", "kind": "unclassified_tcp", "frame_number": 49312, "timestamp_epoch": "1634915489.487023000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707005d2f880000001603030046100000424104643d72e6fcdb94f086709c5c71cad2344a18716b6bf46dff92abe6ede2e46fa92cbe9dab4d4d88c3a58fffb3b78aae769395d7e7132b1502ec8051250c13b043140303000101160303002800000000000000008eb76a9b409ffd2a114ee8d4e202efbcaa4d62ed0b4ff9c243a50cdc04c10dfd040706003737880000001603030046100000424104278740d8d0d437598c381c48ab12b930710b6938d259f750c3705cffe30186a48ff08c7118e827562e5751e26e6f3580abe164d51479d14cb95bc358b1d5860714030300010116030300280000000000000000fb647d43182b91ee80004d0f9c94e24bc80ee87a134a945eb48cefae34d7e79c" } }, { "event_id": "evt-c367bc3a29bab727fb436e91", "kind": "unclassified_tcp", "frame_number": 49320, "timestamp_epoch": "1634915489.558341000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060037373d0000001403030001011603030028e7b115ecb35810f4492dd80a80c77484e0045139e6852c18b31960e26f3239374833e332bd6d8a7c" } }, { "event_id": "evt-a6ddfea00429b047f08238dc", "kind": "unclassified_tcp", "frame_number": 49322, "timestamp_epoch": "1634915489.558582000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707005d2f3d0000001403030001011603030028a3e27ddf88758ad7fddbf2b3869cfd91204741bdabf2e94db2468c4b1ac3237cb01db49935779f7d" } }, { "event_id": "evt-82d291a3aadd5507e08e0bee", "kind": "unclassified_tcp", "frame_number": 49326, "timestamp_epoch": "1634915489.862947000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100344d0c000000197b" } }, { "event_id": "evt-061a14c11b52f707b6fac123", "kind": "unclassified_tcp", "frame_number": 49328, "timestamp_epoch": "1634915490.046869000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-994eebd1aee3b2cc30b02b75", "kind": "unclassified_tcp", "frame_number": 49329, "timestamp_epoch": "1634915490.047086000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100344d0c0000000502" } }, { "event_id": "evt-b374aebb922a8e43b4dc468d", "kind": "unclassified_tcp", "frame_number": 49343, "timestamp_epoch": "1634915490.122248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040707005d2f0a01000017030300dca3e27ddf88758ad8fde4121b70e80f75de4b16f91aa4975961f259328b86cb98909cfe9a497aa3a5c19b893b4e2bd2f780999bb990a39f765b36ffd9902c276ea05374c47cab36f1af81abd6014014527ab3305010441cae3e38cc36902ea91a9fd84cb78ee5b4f5b60bd73fc9ca58e8eb0a37638e5e72888bb5f9b86716c30216febc17dfd2ede43f69785b787fd6ac12362ec29b40ef08b72a3ae4379fe471baea2b6ec5a87535f0236461ced33cd67266c843abdb0cbcbcad7866a19d14fde75747a903585da8148345eab9af87e569bcb7fa2a2865beca968d41150303001aa3e27ddf88758ad996b2cb7135ed39094ca026716150f841eb5e" } }, { "event_id": "evt-61afaffe7f2c5d20b6f2f416", "kind": "unclassified_tcp", "frame_number": 49347, "timestamp_epoch": "1634915490.122611000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b2688d3b2cecdbf421861e53", "kind": "unclassified_tcp", "frame_number": 49351, "timestamp_epoch": "1634915490.123072000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507050014cf0a000000" } }, { "event_id": "evt-9fc282c4e904b2ae945b9e34", "kind": "unclassified_tcp", "frame_number": 49355, "timestamp_epoch": "1634915490.127332000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f1b90162ba39ffcbe6f57e2e", "kind": "unclassified_tcp", "frame_number": 49359, "timestamp_epoch": "1634915490.127807000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507060037370a000000" } }, { "event_id": "evt-c25dbe58aff5adbf9481ffd8", "kind": "unclassified_tcp", "frame_number": 49362, "timestamp_epoch": "1634915490.371260000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100344d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9f34814e974c9b8ed24e4dab", "kind": "unclassified_tcp", "frame_number": 49363, "timestamp_epoch": "1634915490.371854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100344d0c0000000100" } }, { "event_id": "evt-6a70fd2e57fabd792cbf23ce", "kind": "unclassified_tcp", "frame_number": 49365, "timestamp_epoch": "1634915490.865811000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100344d20000000050100030f696e626f756e642e6174742e6e657403e3" } }, { "event_id": "evt-e535c0f36eb8eb24403c5256", "kind": "unclassified_tcp", "frame_number": 49373, "timestamp_epoch": "1634915491.011772000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100344d14000000050000010a0a169cc312" } }, { "event_id": "evt-924edb15c66bafa7cf5a79ac", "kind": "unclassified_tcp", "frame_number": 49375, "timestamp_epoch": "1634915491.168735000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020076e90c000000197b" } }, { "event_id": "evt-12e4d4799dacb788ad904bfc", "kind": "unclassified_tcp", "frame_number": 49378, "timestamp_epoch": "1634915491.363318000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e90e0000000502000205070100344d0a000000" } }, { "event_id": "evt-d8e83934951d9cbbfb9cb5a8", "kind": "unclassified_tcp", "frame_number": 49381, "timestamp_epoch": "1634915491.364317000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020076e90c0000000502" } }, { "event_id": "evt-8acf4f01d1ed1458ffe005f6", "kind": "unclassified_tcp", "frame_number": 49385, "timestamp_epoch": "1634915491.713316000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-81a0a2b5de8f5c3ab4756853", "kind": "unclassified_tcp", "frame_number": 49386, "timestamp_epoch": "1634915491.713837000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020076e90c0000000100" } }, { "event_id": "evt-8fdf2d77d821890f2362ecdd", "kind": "unclassified_tcp", "frame_number": 49388, "timestamp_epoch": "1634915492.150823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e92100000005010003106d61696c2e69736f6c6472792e636f6d0019" } }, { "event_id": "evt-0b99709f50e0acbfe2884abc", "kind": "unclassified_tcp", "frame_number": 49398, "timestamp_epoch": "1634915492.470037000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50067, "dst_port": 1187, "tcp_stream": 927, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9d1addfc046d89cfb5d26c06", "kind": "unclassified_tcp", "frame_number": 49402, "timestamp_epoch": "1634915492.616774000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e914000000050000010a0a169cc313" } }, { "event_id": "evt-e4ac0d431ebe6cfc8ac7c65c", "kind": "unclassified_tcp", "frame_number": 49407, "timestamp_epoch": "1634915493.326872000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e934000000323230204741524d2d393747303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-8f085a0fa35aa6513ba5a6b1", "kind": "unclassified_tcp", "frame_number": 49410, "timestamp_epoch": "1634915493.669305000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e91a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-205f5012a84cb7ed85af831a", "kind": "unclassified_tcp", "frame_number": 49417, "timestamp_epoch": "1634915493.818250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e9990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-b8eaf5d21efc4c5edf540a87", "kind": "unclassified_tcp", "frame_number": 49419, "timestamp_epoch": "1634915494.091817000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e9140000005354415254544c530d0a" } }, { "event_id": "evt-94712803f7374cdd39149340", "kind": "unclassified_tcp", "frame_number": 49425, "timestamp_epoch": "1634915494.244894000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e92800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-083ff724d2f1f96309f7a8da", "kind": "unclassified_tcp", "frame_number": 49428, "timestamp_epoch": "1634915494.474152000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e9160100001603010107010001030303e54b2037d43bdcad6cb9386184fc80697c1680ce8a333019929853c82104364d200c2759a9d7fec100a89574beb8a47091b0c549faf9b2cb8cdd8c2fc51e5fa8ef0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000940000001500130000106d61696c2e69736f6c6472792e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020ab4b5c3e8b3ad7ea193083a5de663980d1ba8afe8c0f3f1e45751cc2c98e8463" } }, { "event_id": "evt-81d411b330881cd22c50468c", "kind": "unclassified_tcp", "frame_number": 49438, "timestamp_epoch": "1634915494.639977000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e90a10000016030312330200005103036172d4a60aa4ec1350c687bbeb928979c3c7e50cd716afe4d0c9a7988981cfc720f04100007346bd976c934f46bd9e20f21cd6b5fd4d6248401eb1824659621fadc01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-d00023e524230b59dd780c77", "kind": "unclassified_tcp", "frame_number": 49439, "timestamp_epoch": "1634915494.639996000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-77e0b0a53317c281686504e6", "kind": "unclassified_tcp", "frame_number": 49440, "timestamp_epoch": "1634915494.640008000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c540779a1ab4e43c2dfef662", "kind": "unclassified_tcp", "frame_number": 49444, "timestamp_epoch": "1634915494.640344000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7281cb14cf97e13ee14ed38", "kind": "unclassified_tcp", "frame_number": 49446, "timestamp_epoch": "1634915494.946103000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e9e4000000160303008a100000868504003350c776386da32fa36d2f18acd34f61100594619be6122585b762b2cba2fae10dbc4b5fe93afde036f38920af91ad6b0e42fb780f56c61c690bb36320d4bf09780141ff9473c3d3abd8d221f9049f079320262dc2e5188bfac169503d44382ff89cf65bcf7028c2283fd6cc9b4b629465b6da20b92a4c606515ca479764d1d2005e6f1403030001011603030040fe654c38e159dbb64d403e7014c9ad852e490b0567a97ff71dd1cb7773e45b807ddb7e3116f386e3ead5c5e6de119ed8d5b0942ba541ce12035f9e164ab4e5ba" } }, { "event_id": "evt-d69cedcf3d78d17948a26e7f", "kind": "unclassified_tcp", "frame_number": 49452, "timestamp_epoch": "1634915495.246420000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e95500000014030300010116030300406f6d99002c59ed4cd5ca1efc36ee5ae099cce7a81353f51a4a7e9eee0e78554ef7caa67029cf8b0dd80e6b5ecc6075a121955d73bb58f412c98dc9d413f1cc1a" } }, { "event_id": "evt-d51ca6070f3f82869f0df67e", "kind": "unclassified_tcp", "frame_number": 49455, "timestamp_epoch": "1634915495.586990000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e94f000000170303004066abcb9dd39033ef441a9062f6aa6f8c52c62de27bee4350bc498c335e62122bafb69560a3c0e2444f70fdc81ac0cc2daf0965a893ae4c428b8667dc64713800" } }, { "event_id": "evt-d9b36f55684171996357ed08", "kind": "unclassified_tcp", "frame_number": 49460, "timestamp_epoch": "1634915495.732990000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5921fd6164845edc6e94e3dc", "kind": "unclassified_tcp", "frame_number": 49467, "timestamp_epoch": "1634915496.791595000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50068, "dst_port": 1187, "tcp_stream": 929, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-55faf5b8eec3b38d3c862d82", "kind": "unclassified_tcp", "frame_number": 49470, "timestamp_epoch": "1634915497.060804000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e94f0000001703030040a02fe8dd1025f4e14b26ce650e1a0b67722f91ee7767a49b9fc81142ad4ddf636f2138928daef970cc918eded5564219652953978e4a9a5181f5451afe171cbc" } }, { "event_id": "evt-5381cc993252dba63558b2ca", "kind": "unclassified_tcp", "frame_number": 49475, "timestamp_epoch": "1634915497.242995000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e94f000000170303004055950d206e3e577a76a734a36ccace6d167166d5f16d4e2b88fb81432ec1250dc3959a8d1d2a92a060187f713d4d6662d61427486fc39f40031f5d9f9135a743" } }, { "event_id": "evt-5e9df020e624cebcb3c324b9", "kind": "unclassified_tcp", "frame_number": 49479, "timestamp_epoch": "1634915497.508361000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e95f0000001703030050a14917181bac8f88a5f14959056d79e7dfd19a53b9e178b8fc212704dc7ea076a734577a5e6f01ac0c239688e3bcf8ef0ca6c88d7ec0e92973956e9524dd7d0614a247950f5a481312705ecab6ca18b4" } }, { "event_id": "evt-a74bb1092dcf0519c4e9dd07", "kind": "unclassified_tcp", "frame_number": 49484, "timestamp_epoch": "1634915497.661819000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e94f00000017030300403480dd370ebaabfb466996323d42d6326a33522aa88cac34c287d64dc316e6c43017420784b1b9461ef763dfa4862e5d7ed084ad0cf5ebb3f62e0c81d4db693d" } }, { "event_id": "evt-5d3a14937f40259609a2a82d", "kind": "unclassified_tcp", "frame_number": 49487, "timestamp_epoch": "1634915497.957352000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e94f00000017030300401cb4d240ac69e562e51837a1785559643b33f6b56d3265d491aad5f920a384a0524c123eaee8d0a0c0f8bbaf624eb35889cf1dba36e9f467b266f7e34b4f1397" } }, { "event_id": "evt-f720e8bc2a661df12f25dc6a", "kind": "unclassified_tcp", "frame_number": 49495, "timestamp_epoch": "1634915500.494829000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e95f0000001703030050783e6d19ee1bef03705ef060e20de63ad9c41dc5fa26cf418a06be69e8c37264ea9713435ab4468838fe9545bfab40f5ab1bee6b7d5c7a23da101590e648dc5e9f3bbab8d6e3d7def6a539aa6afa723e" } }, { "event_id": "evt-7e9489910addc24bd135767a", "kind": "unclassified_tcp", "frame_number": 49498, "timestamp_epoch": "1634915500.918936000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e93f0000001703030030107c56f146c08ac5e1cb8925e219b18492271b6f6d755bc8a93ebd5904b037b53f1b62bbe9a2ea102f0fa50a0e2b25af" } }, { "event_id": "evt-f42246df5235ef18a74d9c36", "kind": "unclassified_tcp", "frame_number": 49505, "timestamp_epoch": "1634915501.116429000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50069, "dst_port": 1187, "tcp_stream": 930, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-80a80f896f3eed8efe4c97da", "kind": "unclassified_tcp", "frame_number": 49523, "timestamp_epoch": "1634915508.687576000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50070, "dst_port": 1187, "tcp_stream": 931, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c03226e1b5cfb33179899bc1", "kind": "unclassified_tcp", "frame_number": 49536, "timestamp_epoch": "1634915513.087790000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50071, "dst_port": 1187, "tcp_stream": 932, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d271af552a6a9cc47981f6fc", "kind": "unclassified_tcp", "frame_number": 49542, "timestamp_epoch": "1634915514.605371000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-679d9916af1417cacb838bf6", "kind": "unclassified_tcp", "frame_number": 49565, "timestamp_epoch": "1634915515.199355000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5a1e1cb79f4dbfd2259b54de", "kind": "unclassified_tcp", "frame_number": 50871, "timestamp_epoch": "1634915520.487836000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50072, "dst_port": 1187, "tcp_stream": 934, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bd83ca26b042a182589d8e18", "kind": "unclassified_tcp", "frame_number": 50885, "timestamp_epoch": "1634915524.822066000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50073, "dst_port": 1187, "tcp_stream": 936, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-aa2cc607de24e1ad806d0a00", "kind": "unclassified_tcp", "frame_number": 50892, "timestamp_epoch": "1634915528.347513000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010038ae0c000000197b" } }, { "event_id": "evt-edfdc3a9d81a21ca569e6c39", "kind": "unclassified_tcp", "frame_number": 50894, "timestamp_epoch": "1634915528.537629000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae0e00000005020002" } }, { "event_id": "evt-050b9aca48ea90619da445d4", "kind": "unclassified_tcp", "frame_number": 50895, "timestamp_epoch": "1634915528.538115000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010038ae0c0000000502" } }, { "event_id": "evt-830428cf5b0287854b37e4b1", "kind": "unclassified_tcp", "frame_number": 50897, "timestamp_epoch": "1634915528.795881000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2a129a189b74cae0d2fa18e3", "kind": "unclassified_tcp", "frame_number": 50898, "timestamp_epoch": "1634915528.796443000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010038ae0c0000000100" } }, { "event_id": "evt-54e6609bed6c36df3280768f", "kind": "unclassified_tcp", "frame_number": 50903, "timestamp_epoch": "1634915529.149291000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50074, "dst_port": 1187, "tcp_stream": 937, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7c34c503e13df1a6bbb84479", "kind": "unclassified_tcp", "frame_number": 50905, "timestamp_epoch": "1634915529.165953000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae2100000005010003106d61696c2e616e6265726d616e2e65730019" } }, { "event_id": "evt-402e29afa7b2a3146989bde7", "kind": "unclassified_tcp", "frame_number": 50907, "timestamp_epoch": "1634915529.168693000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50074, "dst_port": 1187, "tcp_stream": 937, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-df51ac9c7fdb39a3f2d103fd", "kind": "unclassified_tcp", "frame_number": 50917, "timestamp_epoch": "1634915529.608854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae14000000050000010a0a169cc316" } }, { "event_id": "evt-bf08ce48cfe14560a292ed99", "kind": "unclassified_tcp", "frame_number": 50921, "timestamp_epoch": "1634915530.293394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae34000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-edacdbd320baa64136540e62", "kind": "unclassified_tcp", "frame_number": 50924, "timestamp_epoch": "1634915530.655024000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-0dc2c0a610feeacadf48deee", "kind": "unclassified_tcp", "frame_number": 50929, "timestamp_epoch": "1634915530.803242000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-4242ac9ea8dd14a91787412d", "kind": "unclassified_tcp", "frame_number": 50936, "timestamp_epoch": "1634915531.163922000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae140000005354415254544c530d0a" } }, { "event_id": "evt-a39bd0d2b0a04d46c397e84d", "kind": "unclassified_tcp", "frame_number": 50942, "timestamp_epoch": "1634915531.314053000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-6aab32d37c70ae09fa2c4be1", "kind": "unclassified_tcp", "frame_number": 50945, "timestamp_epoch": "1634915531.672061000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b3d8fc9216bd0015f1ea706e", "kind": "unclassified_tcp", "frame_number": 50954, "timestamp_epoch": "1634915531.830041000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5ea9f5b0f522c790d4ce75c8", "kind": "unclassified_tcp", "frame_number": 50955, "timestamp_epoch": "1634915531.830061000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-761e4d6f61fbdb788df1d4e3", "kind": "unclassified_tcp", "frame_number": 50956, "timestamp_epoch": "1634915531.830074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5be8d96df14e94c2af3eb3bb", "kind": "unclassified_tcp", "frame_number": 50959, "timestamp_epoch": "1634915531.830391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae42020000f0344e950f0569ec89c4fb012b92dca7b1e8c784039da4e9fe32092d24f1aa6db890ff6a16fbddbe910d9d40fc5ba070040102003a5b06f0f657368b3c9e7314814714a5a70595946e36d39c8f0dc0252fdf56314375ca6bd373f0e4dd16fda79df3a96a1ff61c4e14a88cbd07693bc61c6de6d6ecea43d21dffa0473fe659e8c9dbea7e6cd7ebef60319234c588ce06cb93fff44bda3a1a6e3eac1202435f2f04d73c3d075c87014e5b42c74d616623556f5da1ae8f86650f61d5a406ccbedc3f73236bd62ec7fec02ef3bd6d2df745c827bb549dac5803fb5204bfe74d2249bc2f8ca998d722710ae4df56aa5fce91aad66d1e37bb9ada28b385b9475bde06f8fa91c1faca9382da0083ebcbdbb149160f54dd9716159e462ac6088b58a45df6004538fc4ee856af54e8ce8b3c43825cbdb10efa5ab90e62a6a4214f3d2de0d8647cebc92f57b86cd9e6f33ed92f85e42da616364c17709286a59cecf9ebc4caee7c41d66a4a126bceb042e3e544a59361c6e660c7e3b434bd24a3e0ab89efd7ad751ee94a89c52592f99741ebb249b8cad0eb8a6beb4f69e98f50f7c5005fcad032375e05241f0efe27162bd4283ca0bf093f50d033c94b610817a125f2cac2e59a4696f4426d4ea19d6d0cbf13fb7878d198c14a30bd26f8549dfc2c3b6f702bd459e54a4e37759d45a0248f8d75965fe011a8848791c1c734218796298fcbd226820a58a4e19f2d82f313b82accb3952bc79db3aacf708683a45ecaafaf71f06ca06dc5485ae7b58f3f432e0fc3afd1a8020e000000" } }, { "event_id": "evt-2782665fb5ecd3eb83b76ef4", "kind": "unclassified_tcp", "frame_number": 50962, "timestamp_epoch": "1634915532.170942000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038aee4000000160303008a1000008685040026b371e1a1f5c01c5bc57709cd86441f5abcd1f1a9e1a3bbb98677511cb615287061c70cdb48ec84f4f4eceeb1448b78d2e098578cb2d2a6b2b0bdda5169d0f42501e45f5ef248382b02275d826f927333560f78f93a0c848777c8f5627eab174fc7fa5903e2c85f03a4cad0f61da42bdb3621c7523a2fd1a8e3171b91be6e409dd8281403030001011603030040524461902c3d80487684e6e07cf6648548af21493057b191563d3cdf539dc15bfccf4b7c70f833e566ff841bb2470b0c8b0bf28bd34aaa6095c3b827639c44d1" } }, { "event_id": "evt-debba8894e7c308d8a6406e6", "kind": "unclassified_tcp", "frame_number": 50968, "timestamp_epoch": "1634915532.323671000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae550000001403030001011603030040c155531f08a6e2b5e7bf73a7b30cb9ba5e23df0b9c64fc5ac4afbd142e886c663c21f5d0ebc14be6b54223e7df03804049bf09f000a95fed7b431aadbabdd490" } }, { "event_id": "evt-ce80838ed7195983f7f7e926", "kind": "unclassified_tcp", "frame_number": 50971, "timestamp_epoch": "1634915532.566218000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f0000001703030040c79fc67a43985f06becfb72955d19342086d5c2023d2ad696d9ef0f8fb4f387700415f56b6dcfd9f2b40f99d234f276676c9b046f9439b1d08c34d5ec76c50a6" } }, { "event_id": "evt-bedc20800384610f60b445af", "kind": "unclassified_tcp", "frame_number": 50978, "timestamp_epoch": "1634915532.712509000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-899c46eff2e4c08c58745ad8", "kind": "unclassified_tcp", "frame_number": 50984, "timestamp_epoch": "1634915533.470171000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50075, "dst_port": 1187, "tcp_stream": 939, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6b27363e485559baa9267bb7", "kind": "unclassified_tcp", "frame_number": 50988, "timestamp_epoch": "1634915533.979768000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f0000001703030040fb93c389bf8b711485935252b0f9af3035d9e654b8a36fdd03dc103e3e93aed181fb88b98fe7ed53da30f86b2486a347b760a43216ee91ea12f0d8301b47e683" } }, { "event_id": "evt-64b5ca6912c197ff47b13ae4", "kind": "unclassified_tcp", "frame_number": 50989, "timestamp_epoch": "1634915533.980212000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e95f000000170303005031a3d8dead14d37ee0918c41a3402c2ab8b395a400294328bed5569a356c7cb8ae77deca467a5550dcb4661ec1239ac786feafe6ed817099cb11f8257dfcb9213c1e3211e0e5051a232f944e635a4f9d" } }, { "event_id": "evt-2ec271f6ad2dac98b2e69edb", "kind": "unclassified_tcp", "frame_number": 50995, "timestamp_epoch": "1634915534.138895000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f000000170303004034f0f223e1ff806bf87ad98047fbebe55e39662128284f620de4cee754cf99952689427b9a7bc803e62d58c5865218c47f09afd908ed0bb7d1dfc4a9130f7e14" } }, { "event_id": "evt-63a7047a359912a8077e1163", "kind": "unclassified_tcp", "frame_number": 50999, "timestamp_epoch": "1634915534.350949000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e93f000000170303003062cb1b3b967022a0e55739dee5febf8ab604247317d92bb711d645acb2de19ed1434ec36da4dffc2a363563938f034c8" } }, { "event_id": "evt-44bff60dbf57779c3afe0813", "kind": "unclassified_tcp", "frame_number": 51005, "timestamp_epoch": "1634915534.492802000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020076e96f000000170303006013a9bb1331e849aab4db2c5982d16e230e61b3e3c11f871e592b6dfeb1c98bfe64995a6633a4bfb090cedaee67a852878130c03dbefaed1891b3beb67b3ede61b31bd05214e1354073343c00e5e02538d04c3bb858cd621d854ead524145371b" } }, { "event_id": "evt-1cbcc036914889a8676580c8", "kind": "unclassified_tcp", "frame_number": 51009, "timestamp_epoch": "1634915534.493414000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020076e90a000000" } }, { "event_id": "evt-93d278be57682b0c0ebdb5f3", "kind": "unclassified_tcp", "frame_number": 51011, "timestamp_epoch": "1634915534.528946000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f00000017030300401c6f84c642050c816f632abadd0e0452275f512747a9f1311b392b5a593b90bb2fe324fbe6343db981ce275ff13c9a6a176fa98e2d28b33a2821a4421d458ed1" } }, { "event_id": "evt-904920de98018ebd79f4b27e", "kind": "unclassified_tcp", "frame_number": 51016, "timestamp_epoch": "1634915534.672199000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f00000017030300403366cb34bb397d1b081d9c4707429ab632d974b0aeae60c5dc1288416a8f22fddc9b78f9c44704e412403e2c2a6a4f5dbb33d42aa4e0820a8852ea41d2ea1d11" } }, { "event_id": "evt-4c98d44e762d5ca9abe91eb6", "kind": "unclassified_tcp", "frame_number": 51019, "timestamp_epoch": "1634915534.971576000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae4f0000001703030040900f822d852d572af44dd02c6eb4d5664e7d789721de51b9b753b5b69115224ea8155772a7801b3e18d776c5c69e0727c400a2cafe938415ae987ca569d82eb9" } }, { "event_id": "evt-9e2fe9b1edf294b55070e974", "kind": "unclassified_tcp", "frame_number": 51037, "timestamp_epoch": "1634915537.402381000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae5f00000017030300501b75218a4a0077feda26e11fd6e5b86b5f116e34280fc1dcb4748d00089c11fe4178764c5e3ef216acb73a64995a588d0717de98845961acfaa790f2d9a69721601c57b791ef63aef5f3c478ab076f29" } }, { "event_id": "evt-1f48dc39d7ef29a3658887ff", "kind": "unclassified_tcp", "frame_number": 51041, "timestamp_epoch": "1634915537.678063000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae3f00000017030300304bbf61f60ecc874dcd9401f6159b880cd0bb7c0ec203d11518be7aa4d8c5cafc0bfffde8e383f256f7b0762aae07aed4" } }, { "event_id": "evt-8a198d58dc8cbbeb084e262f", "kind": "unclassified_tcp", "frame_number": 51049, "timestamp_epoch": "1634915537.830864000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50076, "dst_port": 1187, "tcp_stream": 940, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c562cdaeb5b50e8b29837203", "kind": "unclassified_tcp", "frame_number": 51061, "timestamp_epoch": "1634915542.210895000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50077, "dst_port": 1187, "tcp_stream": 941, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-18ed6b4053500d80bab45b2c", "kind": "unclassified_tcp", "frame_number": 51064, "timestamp_epoch": "1634915542.265126000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50077, "dst_port": 1187, "tcp_stream": 941, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f9abb89235ca7fcfce13a77", "kind": "unclassified_tcp", "frame_number": 51067, "timestamp_epoch": "1634915542.573549000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200e9b70c000000197b" } }, { "event_id": "evt-2039810138e2e2394cb04f61", "kind": "unclassified_tcp", "frame_number": 51069, "timestamp_epoch": "1634915542.757601000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300e1650c000000197b04070200e9b70e00000005020002020704007dce0c000000197b04070300e1650e000000050200020207050046500c000000197b040704007dce0e0000000502000202070600b0000c000000197b0407050046500e000000050200020207070065920c000000197b04070600b0000e000000050200020407070065920e00000005020002" } }, { "event_id": "evt-d36f6fad950e5fdaf1da38b2", "kind": "unclassified_tcp", "frame_number": 51070, "timestamp_epoch": "1634915542.758940000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e9b70c000000050203070300e1650c0000000502030704007dce0c00000005020307050046500c000000050203070600b0000c00000005020307070065920c0000000502" } }, { "event_id": "evt-5cefcf8298f3debf7743e273", "kind": "unclassified_tcp", "frame_number": 51072, "timestamp_epoch": "1634915542.938273000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070800165d0c000000197b04070800165d0e00000005020002" } }, { "event_id": "evt-c828aac7fbc5c6611711d235", "kind": "unclassified_tcp", "frame_number": 51073, "timestamp_epoch": "1634915542.939030000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070800165d0c0000000502" } }, { "event_id": "evt-8b95814d43d5eb4f05324fcd", "kind": "unclassified_tcp", "frame_number": 51075, "timestamp_epoch": "1634915543.119152000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b720000000010432356d630f356f504d44384828685558534a2a5704070300e16520000000010432356d630f356f504d44384828685558534a2a57040704007dce20000000010432356d630f356f504d44384828685558534a2a5704070500465020000000010432356d630f356f504d44384828685558534a2a5704070600b00020000000010432356d630f356f504d44384828685558534a2a5704070700659220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-76e7b39dc50607801fde627e", "kind": "unclassified_tcp", "frame_number": 51076, "timestamp_epoch": "1634915543.119744000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e9b70c000000010003070300e1650c0000000100030704007dce0c00000001000307050046500c000000010003070600b0000c00000001000307070065920c0000000100" } }, { "event_id": "evt-fad20158fb361cff00ed4558", "kind": "unclassified_tcp", "frame_number": 51079, "timestamp_epoch": "1634915543.304843000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1b8e857de6d5a390bdaf7ea4", "kind": "unclassified_tcp", "frame_number": 51080, "timestamp_epoch": "1634915543.305409000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070800165d0c0000000100" } }, { "event_id": "evt-cf6c39e41d173dc63e276114", "kind": "unclassified_tcp", "frame_number": 51082, "timestamp_epoch": "1634915543.488861000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b71e000000050100030d6170692e69706966792e6f726701bb04070300e1651e000000050100030d6170692e69706966792e6f726701bb040704007dce1e000000050100030d6170692e69706966792e6f726701bb0407050046501e000000050100030d6170692e69706966792e6f726701bb04070600b0001e000000050100030d6170692e69706966792e6f726701bb0407070065921e000000050100030d6170692e69706966792e6f726701bb" } }, { "event_id": "evt-408972fe1b3ca89f8fd49a4c", "kind": "unclassified_tcp", "frame_number": 51095, "timestamp_epoch": "1634915543.580809000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b714000000050000010a0a169cc317" } }, { "event_id": "evt-6ccbec181f7117efc13a1636", "kind": "unclassified_tcp", "frame_number": 51102, "timestamp_epoch": "1634915543.605018000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e16514000000050000010a0a169cc318" } }, { "event_id": "evt-0d5b95fff3dbd779011558e1", "kind": "unclassified_tcp", "frame_number": 51104, "timestamp_epoch": "1634915543.605209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704007dce14000000050000010a0a169cc319" } }, { "event_id": "evt-ec354e01ca1308558656cc0f", "kind": "unclassified_tcp", "frame_number": 51112, "timestamp_epoch": "1634915543.612558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500465014000000050000010a0a169cc31a" } }, { "event_id": "evt-70164489bd0601e5a59c6e75", "kind": "unclassified_tcp", "frame_number": 51114, "timestamp_epoch": "1634915543.612745000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600b00014000000050000010a0a169cc31b04070700659214000000050000010a0a169cc31c" } }, { "event_id": "evt-bd77bd5d04a73598e882356b", "kind": "unclassified_tcp", "frame_number": 51116, "timestamp_epoch": "1634915543.669174000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d2600000005010003156d61696c2e7175616c6974796d732e636f6d2e6d780019" } }, { "event_id": "evt-470c62f64a1630f92c8f03ef", "kind": "unclassified_tcp", "frame_number": 51124, "timestamp_epoch": "1634915543.778966000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d14000000050000010a0a169cc31d" } }, { "event_id": "evt-ea283b2a61e605552e16c634", "kind": "unclassified_tcp", "frame_number": 51126, "timestamp_epoch": "1634915543.867419000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-af3feadb50e02d6ef383859d", "kind": "unclassified_tcp", "frame_number": 51137, "timestamp_epoch": "1634915543.939983000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b0cdfe2889217cd237ab9bc4", "kind": "unclassified_tcp", "frame_number": 51138, "timestamp_epoch": "1634915543.939997000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "89f4ae875a4afd39c3605364dc1bd263007d0f6fef8d768ca11c0ebf7e253e659e9121ca37c5aa53094175dc150ec4c289e63188f0105793bce45df4c8e21c3ea349512f052416d121b720aec12d3e8a3df7f839842363f8c2d43c0bdcde6380ef00c1c7ef0b64cfe4fbece66481b3c4328e441ca15d00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9" } }, { "event_id": "evt-1122a71cc8bd9dd393752a60", "kind": "unclassified_tcp", "frame_number": 51139, "timestamp_epoch": "1634915543.940004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-43cf3246625c13c543c4d2a6", "kind": "unclassified_tcp", "frame_number": 51141, "timestamp_epoch": "1634915543.940119000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b7600700000e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea7" } }, { "event_id": "evt-becc2b4f0f7a5139404a85fb", "kind": "unclassified_tcp", "frame_number": 51142, "timestamp_epoch": "1634915543.940132000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4cc012a1f6e446c50c3e784b", "kind": "unclassified_tcp", "frame_number": 51148, "timestamp_epoch": "1634915544.056544000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b79647af169eba1a4dd3721a", "kind": "unclassified_tcp", "frame_number": 51166, "timestamp_epoch": "1634915544.127762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2fea0ca7502aa041480ee099", "kind": "unclassified_tcp", "frame_number": 51167, "timestamp_epoch": "1634915544.127776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9ba49597e149013cc932e1c7", "kind": "unclassified_tcp", "frame_number": 51168, "timestamp_epoch": "1634915544.127784000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-722edfc7678e3175202269f8", "kind": "unclassified_tcp", "frame_number": 51185, "timestamp_epoch": "1634915544.130794000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e1650a1000001603030059020000550303d55cfe84d278439d645401c0846d54c4f7810dfefb1239287ca141894c8f493c201d01fe5de23eaf5cc4f812fa272c68a05e6b3fd259eb713803be5e31614fc17ec02f00000dff01000100000b00040300010216030315980b0015940015910005b3308205af30820497a00302010202107699fff0429f692b5474c272142b9481300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303131393030303030305a170d3232303231393233353935395a30163114301206035504030c0b2a2e69706966792e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100e2e71b3371ca1d637f2e8b678baf5a49bcb4d2d53f2a17801fd6412f395555ea20124985d4df3bc2b6d4c58461ca716a3ecf8936f9eaa8aa849f062dca4fda79a917830465fac055987974bd691dd5dd747074ed35661961e54461598e39d236187950d91a9c0688d9ae905dcd9d38d39dc41f8f3c2313346f17eb0ea70ea750936a10a255452ee0095d8d19d8499f47957ad70021271259b9553199439d03e58bd2e169218f3185f7deaedba3ef54e198c6a72d672599aa9da27c77a444b9af3e2b1b707ba5b254fb82cca5414492bcf9e89f694dcfcbed72c46f401e0c5fbeb7b2202af20e77a56f7ad3972f0f77a99307e40cb30fb405b853654376d5ba410203010001a382027d30820279301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414e66d75656c89932ea6690b024148af5837477b51300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706966792e6f7267820969706966792e6f726730820103060a2b06010401d6790204020481f40481f100ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001771a3d7f9a0000040300473045022100bf4947f7e7cffd55c3d2aa8ee2551bdd0e4477cb0333cf386d0b8a792c83daf902205e938946d1016eee736b4d4cbea3abf18f0f5ef16bbf42986e1b78980309f663007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001771a3d80dd000004030046304402202696b59fef53fcc251652610d045d2ad6d50c02ed1276c862501ddc37ca8305402207fdce28afc020439a4d2b61487a613714d8e3fd30694688b124af71b9d1b7ee1300d06092a864886f70d01010b0500038201010078263fb4a1f194a58c1e6beb4bc5cc6768c86c850dedd3b6a5021206638b60d7ae56ac6a9962c5922f04ba13156b05606b33a51770ead5f0ab12dbd281c877a24e59f8a09564929b07317cca06f0db166e99566649bf310b0642505ff6c1041f5d35b86ffdee6f689ad730df10b9df16f16c992303c4e8f4fa01ef98f50c84449ca9fff5970ea3e4e581" } }, { "event_id": "evt-882503d81283275a0cfa2e26", "kind": "unclassified_tcp", "frame_number": 51186, "timestamp_epoch": "1634915544.130807000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-66f27266a22243becb09b92f", "kind": "unclassified_tcp", "frame_number": 51187, "timestamp_epoch": "1634915544.130814000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1bd07a99c9cbcd0d611741e8", "kind": "unclassified_tcp", "frame_number": 51190, "timestamp_epoch": "1634915544.130990000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-77c24cb7a3b4a88928e35d2f", "kind": "unclassified_tcp", "frame_number": 51191, "timestamp_epoch": "1634915544.131011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c8918a90fbe49d37e879383c", "kind": "unclassified_tcp", "frame_number": 51192, "timestamp_epoch": "1634915544.131020000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-21b4d3787a1474d3658ee714", "kind": "unclassified_tcp", "frame_number": 51193, "timestamp_epoch": "1634915544.131027000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b0b7adfd074713a22af228a6", "kind": "unclassified_tcp", "frame_number": 51194, "timestamp_epoch": "1634915544.131035000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-347c1a7c98b87fc4fd7d980c", "kind": "unclassified_tcp", "frame_number": 51213, "timestamp_epoch": "1634915544.135282000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-10553cb27bc17105f96575f0", "kind": "unclassified_tcp", "frame_number": 51214, "timestamp_epoch": "1634915544.135295000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "81f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb30" } }, { "event_id": "evt-fae324e54555b2144004fbab", "kind": "unclassified_tcp", "frame_number": 51216, "timestamp_epoch": "1634915544.135414000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8591b926d562e6718ae3f392", "kind": "unclassified_tcp", "frame_number": 51217, "timestamp_epoch": "1634915544.135425000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "2ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303014d0c00014903001741045675f3e10de06adbd49ce586f7c611824223fa8712ead20b5e8e0c73655f86b0eefc4c800a5f5c7a704bef814467c537a184ae5fafd47610b90c272d8e7fdbf9060101002b443df4d106942ee458ab23dcc3949a49a762d359636251144d49929e4a1c006adce4ce62ae6727157ac80389cdd0484f471c2981d59558a8b7600071a859f7e1e939322f39a9aa5e16f0217a10b760da60319dd87a4816e0b25a5517f394b4f2aa3838c76dd5d5387b2ef6915b58376b65d04916895fd372c4058985358fcc97403ac248a296a3c9dc8375f066e01729beca5aaf8f2e58687a06d964257ab727d472e3a0083e220ca1a98b0a45bd7a8e410f3a9386b9a1664935fec3d05173b102dea8b260a98403dee7f18c04d66ac3c24f8b8e649be85b5a06355b85100a30c9adfb4294cdcd14150c5bf398b6df25705d40f4cb38fb30e616769513a45416030300040e000000040704007dce600700000e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018" } }, { "event_id": "evt-1c59662159bd96166039670a", "kind": "unclassified_tcp", "frame_number": 51218, "timestamp_epoch": "1634915544.135433000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-45d917b0616aeb43ad61d0c0", "kind": "unclassified_tcp", "frame_number": 51219, "timestamp_epoch": "1634915544.135440000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2f03a19cdcde5b083d8d6534", "kind": "unclassified_tcp", "frame_number": 51226, "timestamp_epoch": "1634915544.137210000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-95bc8bd3a56b8c674a228edf", "kind": "unclassified_tcp", "frame_number": 51235, "timestamp_epoch": "1634915544.137698000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6c8367653225affe705be646", "kind": "unclassified_tcp", "frame_number": 51236, "timestamp_epoch": "1634915544.137709000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5470b68f10bbdb7d156cefdb", "kind": "unclassified_tcp", "frame_number": 51243, "timestamp_epoch": "1634915544.138115000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600b000600700000e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea7" } }, { "event_id": "evt-dffd57c6d592fd29b43583ff", "kind": "unclassified_tcp", "frame_number": 51244, "timestamp_epoch": "1634915544.138124000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-aa30a5ef993001b251c1ce0a", "kind": "unclassified_tcp", "frame_number": 51245, "timestamp_epoch": "1634915544.138130000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-28a04801e0add5af13a35a2d", "kind": "unclassified_tcp", "frame_number": 51251, "timestamp_epoch": "1634915544.329698000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-974b87c3948f009748b47bca", "kind": "unclassified_tcp", "frame_number": 51256, "timestamp_epoch": "1634915544.381327000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165de50000003235302d6d61696c2e6e75657374726f736974652e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a45203430393630303030300d0a3235302d565246590d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d41555448204c4f47494e20504c41494e204449474553542d4d4435204352414d2d4d44350d0a3235302d415554483d4c4f47494e20504c41494e204449474553542d4d4435204352414d2d4d44350d0a3235302d454e48414e434544535441545553434f4445530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-e30c9ff9070ac6f1c5186dfc", "kind": "unclassified_tcp", "frame_number": 51259, "timestamp_epoch": "1634915544.517315000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a427fcedff13c1ffdca377d2", "kind": "unclassified_tcp", "frame_number": 51267, "timestamp_epoch": "1634915544.591731000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b73d0000001403030001011603030028cbdf0c5574a749c0bda9e21649bfff0de14d4698f470fd9c18ca5736656fd62db55c1dc85dbf356b" } }, { "event_id": "evt-524e2dddc22fe2a1eadc31bf", "kind": "unclassified_tcp", "frame_number": 51269, "timestamp_epoch": "1634915544.592091000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704007dce3d00000014030300010116030300285c300008840ff06b45d803bc37c8a476f4e1691689eb4df36a5a91ad607b203e7364884ad7fb5f0d" } }, { "event_id": "evt-227fea3dd853b5e80bca7312", "kind": "unclassified_tcp", "frame_number": 51273, "timestamp_epoch": "1634915544.710039000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8ed5f6157eecc7600622ac2c", "kind": "unclassified_tcp", "frame_number": 51284, "timestamp_epoch": "1634915544.782062000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407070065923d0000001403030001011603030028fb37f516639adbbf4c616c0408b857a97dc001977a46615f227780f35e745bea9b9bedbcf82b8b8f" } }, { "event_id": "evt-94626b53065861420cbf7c79", "kind": "unclassified_tcp", "frame_number": 51289, "timestamp_epoch": "1634915544.785626000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050046503d000000140303000101160303002803a8d97e8e6f6dc1039085912c09b091b7db3c6d3e57be7b171e102f372c4be19a2bc87c585ab835" } }, { "event_id": "evt-255ceb5f59c5effe22c64613", "kind": "unclassified_tcp", "frame_number": 51291, "timestamp_epoch": "1634915544.786005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e1653d0000001403030001011603030028bf24bf104f809319a59a348a6631db439f241b09963ffea11ff07fa5c85a737a2e2d76a340ff06ac04070600b0003d0000001403030001011603030028263cc3190d6125da0f869f7c14e22e7a1ea67b83b2799979990cfe0fca190ff9a7e0471130169d18" } }, { "event_id": "evt-d8521b854cc8ce0c6c79745e", "kind": "unclassified_tcp", "frame_number": 51297, "timestamp_epoch": "1634915544.873465000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-6a01d2e9eb6d35b63495fe80", "kind": "unclassified_tcp", "frame_number": 51299, "timestamp_epoch": "1634915544.893228000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d140000005354415254544c530d0a" } }, { "event_id": "evt-4389a867fae473585bd9f45f", "kind": "unclassified_tcp", "frame_number": 51304, "timestamp_epoch": "1634915544.937947000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-944e27375132eba0d1252a40", "kind": "unclassified_tcp", "frame_number": 51307, "timestamp_epoch": "1634915545.076525000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-048c1a9b4c83fe21a3252fe0", "kind": "unclassified_tcp", "frame_number": 51319, "timestamp_epoch": "1634915545.160712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-326674e6bffa3a06fb91bb66", "kind": "unclassified_tcp", "frame_number": 51323, "timestamp_epoch": "1634915545.161443000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b7eb00000017030300dccbdf0c5574a749c1309a809823e34d6bb09e1d524967bf18b508bf5958415cfe3fd3016b01bca2423baec0ac9e249c0631602fd73aaa29c41f25599c09c7a7f72547610f365487c8ca8a1a0e8ee4316ceec720d47e8e20724ca3aa78ccecf7c574ba6acdb27747e50d6c7d8f4b409d286786f017937e370cf1131f2021dbcff34c3c2e0c9640497334608fd8aaa5e7a31e6bfd1eb2f491ca473c6d71a381bf43d72d1e626c3172669e0b5ab29b8a63472032a0054c388ac292a39d58ac9eb2a7a09d9ef5e9d76cc36bdb6b02487c4977f1a1ee3992ac04ea14a8ebaa050704007dce0a000000" } }, { "event_id": "evt-0c4c2e77f068f26e9373ca0f", "kind": "unclassified_tcp", "frame_number": 51329, "timestamp_epoch": "1634915545.165661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e9b729000000150303001acbdf0c5574a749c2b98f2fb81be89a85cd0ad9ede2c65819d469" } }, { "event_id": "evt-7164196ce4bcccc770d1274b", "kind": "unclassified_tcp", "frame_number": 51333, "timestamp_epoch": "1634915545.166148000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200e9b70a000000" } }, { "event_id": "evt-62ea4e59ef28613222589787", "kind": "unclassified_tcp", "frame_number": 51338, "timestamp_epoch": "1634915545.256931000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-39e67b5b4d2fe256b0babe35", "kind": "unclassified_tcp", "frame_number": 51358, "timestamp_epoch": "1634915545.345103000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407070065920a01000017030300dcfb37f516639adbc081018bd9f9ba625f7ad657d054d4acfd9d3b7c4b8065b34a7364f9fb0c1569e36b4e4f14f9e0a91a97cf8c2effe4f0350146d314cfcc5ddb45227fab727d0d1a171c37ad1db8112921cc5a00d5cc3e46aa3256dba8edaa72b71298e433ed88d38226df30e6533c5ad884c92f485cddbcea55ca65f4b1c76c39632de5945ec81d5a8662594bb17fa68e44ff34bb7737bd54b312f4954af53ebe0db2c70a9bce4e833a7da649e3628e8798f05fd72cc8c8d285708aee8904abfc74832b49a82e1843a4cfcc3954b4ee5384f2ec32a34e4370978da9150303001afb37f516639adbc1e77b30b3c60946a53eca13c2c80de84a2753" } }, { "event_id": "evt-5365cc15790aec0d6186724b", "kind": "unclassified_tcp", "frame_number": 51362, "timestamp_epoch": "1634915545.345622000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-79af34daf8c52d2a450a672a", "kind": "unclassified_tcp", "frame_number": 51368, "timestamp_epoch": "1634915545.346141000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300e1650a0000000507050046500a000000" } }, { "event_id": "evt-47a7417b42152be7a65b2f0d", "kind": "unclassified_tcp", "frame_number": 51372, "timestamp_epoch": "1634915545.346501000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070600b0000a000000" } }, { "event_id": "evt-939641e611c9e7f6a07c0dfc", "kind": "unclassified_tcp", "frame_number": 51374, "timestamp_epoch": "1634915545.444550000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ae2b922f77c739acce7259f8", "kind": "unclassified_tcp", "frame_number": 51381, "timestamp_epoch": "1634915545.500977000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-936352de3bf17691fc61d646", "kind": "unclassified_tcp", "frame_number": 51382, "timestamp_epoch": "1634915545.500991000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-99425ad6ddc1df872c646df8", "kind": "unclassified_tcp", "frame_number": 51383, "timestamp_epoch": "1634915545.500999000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a3b6a539c73519179b06abb2", "kind": "unclassified_tcp", "frame_number": 51389, "timestamp_epoch": "1634915545.532855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6692299bde1ac61d1311e497", "kind": "unclassified_tcp", "frame_number": 51391, "timestamp_epoch": "1634915545.636178000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200dca80c000000197b02070400b3a50c000000197b04070200dca80e0000000502000204070400b3a50e00000005020002" } }, { "event_id": "evt-d26378864a5cd2364bc7f6d7", "kind": "unclassified_tcp", "frame_number": 51392, "timestamp_epoch": "1634915545.637164000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200dca80c000000050203070400b3a50c0000000502" } }, { "event_id": "evt-2c1f2c60f5f861f4828fc0dc", "kind": "unclassified_tcp", "frame_number": 51394, "timestamp_epoch": "1634915545.893733000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703006dae0c000000197b" } }, { "event_id": "evt-11805b5341cb0f4b5d34f1df", "kind": "unclassified_tcp", "frame_number": 51396, "timestamp_epoch": "1634915546.084356000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ca36c947502466e08cde7b2f", "kind": "unclassified_tcp", "frame_number": 51397, "timestamp_epoch": "1634915546.085419000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703006dae0c00000005020307050045900c000000050203070600b2d50c000000050203070700aade0c000000050203070200dca80c000000010003070400b3a50c0000000100" } }, { "event_id": "evt-4088f46fceb7800511e14131", "kind": "unclassified_tcp", "frame_number": 51402, "timestamp_epoch": "1634915546.142665000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d3d0000001403030001011603030028431d4a1d05174dff7bce1afbc6ffe488405d9a295490ee106e49bf203c7ce536f1d107638f75e29b" } }, { "event_id": "evt-6964ecf1fee7983114fb424c", "kind": "unclassified_tcp", "frame_number": 51407, "timestamp_epoch": "1634915546.384228000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200dca8250000000501000314736d74702d72656c61792e676d61696c2e636f6d0019040703006dae20000000010432356d630f356f504d44384828685558534a2a5704070400b3a52500000005010003146d61696c2e6d7966616972706f696e742e6e6574006e04070500459020000000010432356d630f356f504d44384828685558534a2a5704070600b2d520000000010432356d630f356f504d44384828685558534a2a5704070700aade20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-114429cf2453a0a2bd3bfccb", "kind": "unclassified_tcp", "frame_number": 51417, "timestamp_epoch": "1634915546.431208000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703006dae0c00000001000307050045900c000000010003070600b2d50c000000010003070700aade0c0000000100" } }, { "event_id": "evt-55f235df2a4f0efa3cb0f615", "kind": "unclassified_tcp", "frame_number": 51419, "timestamp_epoch": "1634915546.431558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200dca814000000050000010a0a169cc31e" } }, { "event_id": "evt-62433437380f239abd4a1fdf", "kind": "unclassified_tcp", "frame_number": 51423, "timestamp_epoch": "1634915546.489102000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400b3a514000000050000010a0a169cc31f" } }, { "event_id": "evt-8f2642a7e9d4ff34cc5a0bef", "kind": "unclassified_tcp", "frame_number": 51426, "timestamp_epoch": "1634915546.552966000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400b3a55b0000002b4f4b20504f503320426967666f6f742076312e3020736572766572207265616479203c31303539332e31363334393135353436406d61696c33316332362e636172726965727a6f6e652e636f6d3e0d0a" } }, { "event_id": "evt-6e57c766321caa0842696304", "kind": "unclassified_tcp", "frame_number": 51430, "timestamp_epoch": "1634915546.574500000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50078, "dst_port": 1187, "tcp_stream": 950, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b95138bae0e53579686c3913", "kind": "unclassified_tcp", "frame_number": 51433, "timestamp_epoch": "1634915546.576652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200dca84500000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450206f6d3133736d32333233303637706a622e39202d2067736d74700d0a" } }, { "event_id": "evt-7c25c103177ecb8cbc72a208", "kind": "unclassified_tcp", "frame_number": 51439, "timestamp_epoch": "1634915546.817454000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d3700000017030300280000000000000001e7598308c1213e2749f1bb03092c867fe2a11b8fda893e11c1680a6c0c926370" } }, { "event_id": "evt-f452d6da68cb528f65dccfa1", "kind": "unclassified_tcp", "frame_number": 51443, "timestamp_epoch": "1634915546.867949000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165df400000017030300e5431d4a1d05174e00f5c9311d0c247370c2ff78d5ea404d59d44c17ee795135d37727e9bb02cffc34efa057f681408439cc54508aa6b5d7e19e2854b372a0805479274b28d2486f45417d45862be83a43f91bb5837933ab5d72eef116c8ef22b27c710c1d02f676b50d4b96e76d615c36d637007aed14ff2ac3531d98b58781147109d6cd9727855965e0e9ba827d56ee9e521d54fed7c5fb7c18f6e226ef3ffd3329efdc3128def47984e27db06b7101bb44855e94bb564cce8616b9ac6b4a9b8bdcd3d7ea0bfb36b9f75931b59946df9a9691a65c6c37b689416a6cf2e2923bc473bf39a3" } }, { "event_id": "evt-1c77176f03d75d916b35dfb6", "kind": "unclassified_tcp", "frame_number": 51446, "timestamp_epoch": "1634915547.029069000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200dca80a000000040703006dae1f000000050100030e696d61702e676d61696c2e636f6d03e105070400b3a50a0000000407050045901f000000050100030e696d61702e676d61696c2e636f6d03e104070600b2d520000000050100030f696e626f756e642e6174742e6e657403e304070700aade250000000501000314736d74702d72656c61792e676d61696c2e636f6d001902070200a0b20c000000197b02070400c77c0c000000197b04070200a0b20e0000000502000204070400c77c0e00000005020002" } }, { "event_id": "evt-624af8216f8140d3402869dd", "kind": "unclassified_tcp", "frame_number": 51459, "timestamp_epoch": "1634915547.106018000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a0b20c000000050203070400c77c0c0000000502" } }, { "event_id": "evt-dcbdd70cee7c46e00ec593d4", "kind": "unclassified_tcp", "frame_number": 51465, "timestamp_epoch": "1634915547.138434000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006dae14000000050000010a0a169cc320" } }, { "event_id": "evt-f006554d277f6fe3932ebc0a", "kind": "unclassified_tcp", "frame_number": 51469, "timestamp_epoch": "1634915547.141430000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500459014000000050000010a0a169cc321" } }, { "event_id": "evt-f895983dfab2bda964697179", "kind": "unclassified_tcp", "frame_number": 51473, "timestamp_epoch": "1634915547.147451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070700aade14000000050000010a0a169cc323" } }, { "event_id": "evt-e6383075c7e9f92aa74076fe", "kind": "unclassified_tcp", "frame_number": 51479, "timestamp_epoch": "1634915547.197087000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600b2d514000000050000010a0a169cc322" } }, { "event_id": "evt-3657314bcc160485f0138acc", "kind": "unclassified_tcp", "frame_number": 51482, "timestamp_epoch": "1634915547.216594000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070700aade4400000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450206e3635736d32343433303337766b632e33202d2067736d74700d0a" } }, { "event_id": "evt-b9d638e38b30379c0e72c453", "kind": "unclassified_tcp", "frame_number": 51490, "timestamp_epoch": "1634915547.648317000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a0b220000000010432356d630f356f504d44384828685558534a2a57050703006dae0a00000004070400c77c20000000010432356d630f356f504d44384828685558534a2a570507050045900a00000005070600b2d50a00000005070700aade0a000000" } }, { "event_id": "evt-6c5f9af29674f2a104777660", "kind": "unclassified_tcp", "frame_number": 51499, "timestamp_epoch": "1634915547.649826000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a0b20c000000010003070400c77c0c0000000100" } }, { "event_id": "evt-3d7e882e1ff82770956c7c2a", "kind": "unclassified_tcp", "frame_number": 51512, "timestamp_epoch": "1634915548.730249000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a0b22100000005010003106d61696c2e736d747032676f2e636f6d09dd04070400c77c2500000005010003146d61696c2e6d7966616972706f696e742e6e6574008f04070800165d33000000170303002400000000000000027f0d120f7b55a80103e8942cfecb20ac5308bb4e1b356b39c9568333" } }, { "event_id": "evt-bffe880c6595d19a510b6837", "kind": "unclassified_tcp", "frame_number": 51522, "timestamp_epoch": "1634915548.826847000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d39000000170303002a431d4a1d05174e016c1e3ea377a5fa128193333afe5721c668c044ec280006853a6b74899cc3d8ecae05" } }, { "event_id": "evt-0223f462bb8ce043cb2b8c82", "kind": "unclassified_tcp", "frame_number": 51526, "timestamp_epoch": "1634915548.854230000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400c77c14000000050000010a0a169cc325" } }, { "event_id": "evt-de2d463d7a7467b3bc32fc90", "kind": "unclassified_tcp", "frame_number": 51530, "timestamp_epoch": "1634915548.858196000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a0b214000000050000010a0a169cc324" } }, { "event_id": "evt-753b9530ed7a9c2335046c8a", "kind": "unclassified_tcp", "frame_number": 51535, "timestamp_epoch": "1634915548.912001000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400c77c800000002a204f4b205b4341504142494c49545920494d41503452455631204c49544552414c2b20555446383d414c4c205354415455533d53495a45205354415254544c53205341534c2d495220415554483d4c4f47494e2049445d206d61696c373363323620494d4150347265763120426967666f6f740d0a" } }, { "event_id": "evt-16032625cf07797383f7dc09", "kind": "unclassified_tcp", "frame_number": 51537, "timestamp_epoch": "1634915548.938158000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49956, "tcp_stream": 956, "udp_stream": null, "fields": { "tcp.payload": "323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a31323a3238202b303030300d0a" } }, { "event_id": "evt-470bb13a8d1d51b0fd2be446", "kind": "unclassified_tcp", "frame_number": 51538, "timestamp_epoch": "1634915548.938510000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a0b256000000323230206d61696c2e736d747032676f2e636f6d2045534d5450204578696d20342e39342e322d533247204672692c203232204f637420323032312031353a31323a3238202b303030300d0a" } }, { "event_id": "evt-e6883581a295cd7f9582e883", "kind": "unclassified_tcp", "frame_number": 51546, "timestamp_epoch": "1634915549.098937000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d4d000000170303003e00000000000000035310e943ea219791262cb307a54751117d0b5a92a89b35e02f92db467ca5ca2f7375796ba29e6dced4143f677557978e5259fbb96c7d" } }, { "event_id": "evt-00616cc16f1db0b9ace56cf7", "kind": "unclassified_tcp", "frame_number": 51551, "timestamp_epoch": "1634915549.175124000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d39000000170303002a431d4a1d05174e0238742cd6ef2e19e1c03f883bc62c035d46a38610aad4481865a0a30e48a5588781b5" } }, { "event_id": "evt-6374975596440172f88535d7", "kind": "unclassified_tcp", "frame_number": 51557, "timestamp_epoch": "1634915549.495988000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200a0b20a00000005070400c77c0a000000" } }, { "event_id": "evt-2aa86309f0058ceda6ff9665", "kind": "unclassified_tcp", "frame_number": 51565, "timestamp_epoch": "1634915549.573690000", "src_ip": "66.228.43.14", "dst_ip": "10.10.22.156", "src_port": 2525, "dst_port": 49956, "tcp_stream": 956, "udp_stream": null, "fields": { "tcp.payload": "343231206d61696c2e736d747032676f2e636f6d206c6f737420696e70757420636f6e6e656374696f6e0d0a" } }, { "event_id": "evt-30a54fa1f33bc92e245b972f", "kind": "unclassified_tcp", "frame_number": 51569, "timestamp_epoch": "1634915549.679111000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d3d000000170303002e0000000000000004e08dc8121d7ed399a4e84c7863b7c66d71704939ec1a8b50dd8450a0cd3181c330f58610f6dd" } }, { "event_id": "evt-4797151b5900134a89ee2e4d", "kind": "unclassified_tcp", "frame_number": 51573, "timestamp_epoch": "1634915549.718195000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d4c000000170303003d431d4a1d05174e03a6f63d2b0e9c8ec21e6f7eb95b578c7dff3b36ed1e9a020bef57b29f451b2d3b20d6b5f38e515dfa1bd8f7101781291151e3f84388" } }, { "event_id": "evt-16346704c610fa3d2ba905e2", "kind": "unclassified_tcp", "frame_number": 51576, "timestamp_epoch": "1634915550.024688000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d5d000000170303004e0000000000000005b33bc7856a25e291f6149ab9bf4e77adcda40439b78dfd77dc813b420b0e8d07c8a37d96fb8d2a575501e774e2709fc083af53197995053fbc29005c9522e3f1f616c3622fb4" } }, { "event_id": "evt-322c5f084d2399607be192e6", "kind": "unclassified_tcp", "frame_number": 51580, "timestamp_epoch": "1634915550.072044000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d350000001703030026431d4a1d05174e044ac8625be97d06fec71cdd59f1d775fb472a2b828f933bde60ab077af7f6" } }, { "event_id": "evt-a4152aa4f05b6c86b2c3343e", "kind": "unclassified_tcp", "frame_number": 51584, "timestamp_epoch": "1634915550.450485000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d4800000017030300390000000000000006e21bf63d0933ddbe6bb745941f6f037cbde80d3f23732fdb9e5429288f22b599f56929d7d6019d203efb42e42fc00c156e" } }, { "event_id": "evt-661d1f7da721941deb401fe6", "kind": "unclassified_tcp", "frame_number": 51589, "timestamp_epoch": "1634915550.497915000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d5f0000001703030050431d4a1d05174e05ed4bc9fcc14ea08e64996ab228cfc51b1de6b46ad9646cfc7eceb710226f528617d812e1cfc75bcae49d78e0d0c3290d68d5c781cfca9dc6f505498b62189bf25193d8f60c7a5892" } }, { "event_id": "evt-f78d7d9781e3e4694be53886", "kind": "unclassified_tcp", "frame_number": 51593, "timestamp_epoch": "1634915550.847149000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070800165d29000000150303001a0000000000000007e59138d3db7da558107305c5e7f15f69093c" } }, { "event_id": "evt-53904db855ed881ace310c1a", "kind": "unclassified_tcp", "frame_number": 51600, "timestamp_epoch": "1634915550.888241000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070800165d0a000000" } }, { "event_id": "evt-e565de1f335eb5ee21f1c1a2", "kind": "unclassified_tcp", "frame_number": 51604, "timestamp_epoch": "1634915550.890569000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50079, "dst_port": 1187, "tcp_stream": 958, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6e9f0b4cbd00627453da69b1", "kind": "unclassified_tcp", "frame_number": 51606, "timestamp_epoch": "1634915551.044201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070800165d0a000000" } }, { "event_id": "evt-752048b24ffc10110f099db6", "kind": "unclassified_tcp", "frame_number": 51618, "timestamp_epoch": "1634915555.237671000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50080, "dst_port": 1187, "tcp_stream": 959, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f313958b6615103025d5d6fe", "kind": "unclassified_tcp", "frame_number": 51621, "timestamp_epoch": "1634915555.372141000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50080, "dst_port": 1187, "tcp_stream": 959, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cc71446fc78653fadec12613", "kind": "unclassified_tcp", "frame_number": 51626, "timestamp_epoch": "1634915557.327889000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200a3070c000000197b" } }, { "event_id": "evt-bfcc3d19a8e9116feac39adb", "kind": "unclassified_tcp", "frame_number": 51628, "timestamp_epoch": "1634915557.538819000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3070e00000005020002" } }, { "event_id": "evt-dd3e412e6ecff8b752ad47d8", "kind": "unclassified_tcp", "frame_number": 51629, "timestamp_epoch": "1634915557.539273000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a3070c0000000502" } }, { "event_id": "evt-d954ff6e9e8a5587f13212c2", "kind": "unclassified_tcp", "frame_number": 51631, "timestamp_epoch": "1634915557.794119000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a30720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-caa466d9b3936a9f67149cd5", "kind": "unclassified_tcp", "frame_number": 51632, "timestamp_epoch": "1634915557.794381000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a3070c0000000100" } }, { "event_id": "evt-bf7d62ef0870f88ca09ed311", "kind": "unclassified_tcp", "frame_number": 51634, "timestamp_epoch": "1634915558.167560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3072300000005010003126d61696c2e6c6f6f7365666f6f742e636f6d0019" } }, { "event_id": "evt-ec9248145d1a24f1b5819dbf", "kind": "unclassified_tcp", "frame_number": 51643, "timestamp_epoch": "1634915558.344131000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a30714000000050000010a0a169cc326" } }, { "event_id": "evt-569b79308d0701a7e9e96285", "kind": "unclassified_tcp", "frame_number": 51649, "timestamp_epoch": "1634915559.584945000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50081, "dst_port": 1187, "tcp_stream": 961, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-55c51834f58d77413b746a1a", "kind": "unclassified_tcp", "frame_number": 51653, "timestamp_epoch": "1634915560.092655000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3073700000032323020636c69656e74736d7470322e6c6f6f7365666f6f742e636f6d2045534d545020506f73746669780d0a" } }, { "event_id": "evt-2498bee2428399e2b3b8a54a", "kind": "unclassified_tcp", "frame_number": 51657, "timestamp_epoch": "1634915560.383339000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3071a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-825ff9302e12d2907bff00ad", "kind": "unclassified_tcp", "frame_number": 51662, "timestamp_epoch": "1634915560.447841000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a307bc0000003235302d636c69656e74736d7470322e6c6f6f7365666f6f742e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452035323432383830300d0a3235302d565246590d0a3235302d4554524e0d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-c1aed6cc89f2d3f21d9530a9", "kind": "unclassified_tcp", "frame_number": 51666, "timestamp_epoch": "1634915561.749428000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3071600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-9b288936a930200143a39273", "kind": "unclassified_tcp", "frame_number": 51671, "timestamp_epoch": "1634915561.819236000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3071c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-ffa576772bfdc6c2f8db6872", "kind": "unclassified_tcp", "frame_number": 51675, "timestamp_epoch": "1634915562.139039000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3072c000000616d64795957706c5a474641636d567a5a6d39765a43356a623230756258673d0d0a" } }, { "event_id": "evt-758e2ec04c203205821fb137", "kind": "unclassified_tcp", "frame_number": 51680, "timestamp_epoch": "1634915562.234043000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3071c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-3bc3f080900e6bd93c2e90dd", "kind": "unclassified_tcp", "frame_number": 51684, "timestamp_epoch": "1634915562.575675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3071c000000556d567a5a6d39765a4449774d54633d0d0a" } }, { "event_id": "evt-5efac12f6c12223e697acb24", "kind": "unclassified_tcp", "frame_number": 51689, "timestamp_epoch": "1634915562.914115000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3072f00000032333520322e372e302041757468656e7469636174696f6e207375636365737366756c0d0a" } }, { "event_id": "evt-8909677a8d2ee514a7fd8efe", "kind": "unclassified_tcp", "frame_number": 51693, "timestamp_epoch": "1634915563.368950000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a3073d0000004d41494c2046524f4d3a3c6a6772616a65646140726573666f6f642e636f6d2e6d783e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-20a817079dbf2eef004951ba", "kind": "unclassified_tcp", "frame_number": 51698, "timestamp_epoch": "1634915563.442296000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2d3ce534208ca878fc557336", "kind": "unclassified_tcp", "frame_number": 51702, "timestamp_epoch": "1634915563.811666000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200a3070a000000" } }, { "event_id": "evt-faeed6d9967a38e7babdbdd4", "kind": "unclassified_tcp", "frame_number": 51712, "timestamp_epoch": "1634915563.991096000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50082, "dst_port": 1187, "tcp_stream": 962, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-137ecfba192b5db244f4b9b2", "kind": "unclassified_tcp", "frame_number": 51725, "timestamp_epoch": "1634915568.361877000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50083, "dst_port": 1187, "tcp_stream": 963, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a510c579849f2d244c98972f", "kind": "unclassified_tcp", "frame_number": 51727, "timestamp_epoch": "1634915568.497830000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50083, "dst_port": 1187, "tcp_stream": 963, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8749a98c165bd1991d2b0d7b", "kind": "unclassified_tcp", "frame_number": 51733, "timestamp_epoch": "1634915571.052731000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae5f00000017030300507dc6eb46340f31999302273efc5bf7233468de38eefdd05ff9665a9d96728fe4cbdee59948df37ecc455f8c1472849a9701b96b5ee653e56302d466d1988eefac994d5538e21d5862bdd8c1fd1d8253d" } }, { "event_id": "evt-b9edadf5deebdaff8fc8d8e9", "kind": "unclassified_tcp", "frame_number": 51738, "timestamp_epoch": "1634915571.472786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae3f00000017030300308d45fa3ee5b9e229db6e5548b8c7bb054a131e5ce49c7ace32a55a7101b1dce01ac3d7a78def9c020d4cc7153c586803" } }, { "event_id": "evt-74fb7c6218cf40d556145be8", "kind": "unclassified_tcp", "frame_number": 51744, "timestamp_epoch": "1634915571.623836000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae6f00000017030300608a71e4934542a8e7e8ec242734152bdcdde76aea9407baa1aa3fd9a2db6df5bb8f3acb69ea185a69c644b69b20cfb1c8eabef2d2effa8506c0ab95a7a43e8ad6f1fce171695954c7ffc17fc0fd3f04fd6ced4a2dcea517f90c2eaadef70e710a" } }, { "event_id": "evt-e579e2162eca7e65821e3be5", "kind": "unclassified_tcp", "frame_number": 51748, "timestamp_epoch": "1634915571.624285000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010038ae0a000000" } }, { "event_id": "evt-67ec03d2e91e0b9a89cc2072", "kind": "unclassified_tcp", "frame_number": 51750, "timestamp_epoch": "1634915571.923713000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010038ae3f000000150303003026c7a8aa403ee48707be05068f4ffc5912904f39fbd67ccbc3f466941278b89f2fdf80f7af1ab0ee700a9da294998439" } }, { "event_id": "evt-53834e635fd0dc368ec5ce63", "kind": "unclassified_tcp", "frame_number": 51752, "timestamp_epoch": "1634915572.100942000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010038ae0a000000" } }, { "event_id": "evt-bc572314f996639be7f8ad36", "kind": "unclassified_tcp", "frame_number": 51761, "timestamp_epoch": "1634915572.753577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50084, "dst_port": 1187, "tcp_stream": 964, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-493038bfa748454fa408fe8d", "kind": "unclassified_tcp", "frame_number": 51767, "timestamp_epoch": "1634915574.888901000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-fc40fb3ced692646fd33f8d5", "kind": "unclassified_tcp", "frame_number": 51769, "timestamp_epoch": "1634915575.233428000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2741f829397c1b14b2025a61", "kind": "unclassified_tcp", "frame_number": 51772, "timestamp_epoch": "1634915575.272177000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-4ecd7ebec6da29216f6c8663", "kind": "unclassified_tcp", "frame_number": 51778, "timestamp_epoch": "1634915577.100561000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50085, "dst_port": 1187, "tcp_stream": 965, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e338e88e501a4343c47d7c6f", "kind": "unclassified_tcp", "frame_number": 51791, "timestamp_epoch": "1634915578.729011000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701006c1c0c000000197b" } }, { "event_id": "evt-a32102a3703927c638b91745", "kind": "unclassified_tcp", "frame_number": 51793, "timestamp_epoch": "1634915578.929893000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c0e00000005020002" } }, { "event_id": "evt-976de481f1f0a5d654ed949c", "kind": "unclassified_tcp", "frame_number": 51794, "timestamp_epoch": "1634915578.930145000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006c1c0c0000000502" } }, { "event_id": "evt-6815f7dfc1c8cadd40887488", "kind": "unclassified_tcp", "frame_number": 51801, "timestamp_epoch": "1634915579.186836000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-fbfbb1bc8650cabc66145b25", "kind": "unclassified_tcp", "frame_number": 51802, "timestamp_epoch": "1634915579.187380000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006c1c0c0000000100" } }, { "event_id": "evt-89fa51b9f508dc5506d60f7b", "kind": "unclassified_tcp", "frame_number": 51817, "timestamp_epoch": "1634915579.497839000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c2100000005010003106d61696c2e6b62637261776c2e6e65740019" } }, { "event_id": "evt-8fdb84c88845bdf3b1cfb75b", "kind": "unclassified_tcp", "frame_number": 51825, "timestamp_epoch": "1634915579.905415000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c14000000050000010a0a169cc328" } }, { "event_id": "evt-fffa0de741778f77d6849864", "kind": "unclassified_tcp", "frame_number": 51833, "timestamp_epoch": "1634915580.675504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c35000000323230204741524d2d31303147303034204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-28a3e8ebb97c3c979ff74d2d", "kind": "unclassified_tcp", "frame_number": 51836, "timestamp_epoch": "1634915580.988807000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-544d9a27f29783bcc57b61e5", "kind": "unclassified_tcp", "frame_number": 51922, "timestamp_epoch": "1634915581.399604000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-6d866ae18cea0ab382737a3b", "kind": "unclassified_tcp", "frame_number": 51927, "timestamp_epoch": "1634915581.451141000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-04e4fc005ccbbb70f6c568f4", "kind": "unclassified_tcp", "frame_number": 52019, "timestamp_epoch": "1634915581.591912000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a0322a29da5bb608bf168642", "kind": "unclassified_tcp", "frame_number": 52112, "timestamp_epoch": "1634915581.748705000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c140000005354415254544c530d0a" } }, { "event_id": "evt-8b621163e9d1814f35a06a71", "kind": "unclassified_tcp", "frame_number": 52290, "timestamp_epoch": "1634915581.936198000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-6a60cd6aa934084517f0d0df", "kind": "unclassified_tcp", "frame_number": 52421, "timestamp_epoch": "1634915582.283455000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-15e27b433342f72ee59a7c74", "kind": "unclassified_tcp", "frame_number": 52446, "timestamp_epoch": "1634915582.490034000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-72f4cc7d7f7e411aba0cbd49", "kind": "unclassified_tcp", "frame_number": 52447, "timestamp_epoch": "1634915582.490056000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7" } }, { "event_id": "evt-09d52abf3c090a36d68daa4e", "kind": "unclassified_tcp", "frame_number": 52530, "timestamp_epoch": "1634915582.801939000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d079e46b0dd60e7f6845edce", "kind": "unclassified_tcp", "frame_number": 52531, "timestamp_epoch": "1634915582.801954000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-052b88f12e8f3b4d13862d53", "kind": "unclassified_tcp", "frame_number": 52647, "timestamp_epoch": "1634915583.491215000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1ce4000000160303008a10000086850401419da69744e9f2e924264db35dc9bc082678ab9150fa831826e7e9a8975dc25c0ce9b48a1aab9c7e0339dde403313718886544e2e5982480509f47ca9368a9e8030002c3d8efb810fed6ac78073608e404fcbe5cb7b5643a2ba448386dbb0b5422aca31ce07f41cbf869146fbda1ab766640fc28cf5f5df7b880fdadadbff280fed2cc14030300010116030300409af81b7db03c9a8b550801cd91e00e6fbe3323d8e2d7ba44fa64ea2ada009a3424ba80b830cd29bd0af461903f932ae89ebcd7257f9ed83c5257c25d5d6d33c1" } }, { "event_id": "evt-b40247a3a27e019a50577bc5", "kind": "unclassified_tcp", "frame_number": 52655, "timestamp_epoch": "1634915583.708710000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c550000001403030001011603030040ff9ed90c2ebbb857a5e63f2ccad2c36231c0e00a1bb60c7aea4cae25ff62ad0f5570b2d2086153a88ec35f742c50d7ac146e02228f8bb439c0b49316218ac6d5" } }, { "event_id": "evt-e83a9c0fe27ce416484d6ecc", "kind": "unclassified_tcp", "frame_number": 52679, "timestamp_epoch": "1634915583.996898000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c4f00000017030300405c8b374f5315a454e04182884e8adfc2ba7ee459439504821c151ed0d01b59ae7b151362e8f35c380125494bfc3528fe330dc47e61aa5b2ef12bc55f5ee25407" } }, { "event_id": "evt-0d78b0fff47a34f204d11bfa", "kind": "unclassified_tcp", "frame_number": 52698, "timestamp_epoch": "1634915584.180453000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3537efc29fb150a168b06fd4", "kind": "unclassified_tcp", "frame_number": 52772, "timestamp_epoch": "1634915585.275917000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c4f00000017030300403da2e1dafa0bffcdd74e7369c565e64a4e269e5d178798dfcbd359241e9c4cc43ab017ecc84bcee714ff2d7aadceb55137741f7a49e251e1009871859908cd6e" } }, { "event_id": "evt-685e7222d8f8f5aa07378555", "kind": "unclassified_tcp", "frame_number": 52797, "timestamp_epoch": "1634915585.458743000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c4f00000017030300400b4f3ae10042bd5bfd06e02de4dd7a89fbed7c660eaabcc39ee583d83ff54a2c34beb3af0a53241dc6fd3e47a4c35f3d956bf92696be0b90a8ef8ab9825b9ab3" } }, { "event_id": "evt-4d66ff0b70d3d95eb293bd9c", "kind": "unclassified_tcp", "frame_number": 52827, "timestamp_epoch": "1634915585.824705000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c5f0000001703030050a57bd32fe5816165ff3028acba0bd7066dfa340057f60a8a8848acd7150e22c552fce8b136e34a9a83a5eba49b3dc9098e9b362377280377277217f835c91fefd60ade26efa96ffa018214c0f3f43fb4" } }, { "event_id": "evt-35f0e7ebdd9e02a282b5361c", "kind": "unclassified_tcp", "frame_number": 52840, "timestamp_epoch": "1634915586.011476000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c4f0000001703030040f547210859487a5907c0485f4d4f3a8f932ed011b39846335abcea14ffbc38a4d21c5f92adabd361840d46ebb2360c89078da62047b95c34b4cb85baa20cda03" } }, { "event_id": "evt-9a48ffec43122f6d156169fe", "kind": "unclassified_tcp", "frame_number": 52859, "timestamp_epoch": "1634915586.316398000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c4f0000001703030040b58ef17087ca42393a4d28f2b993091082ba60767e8bb9568ad4b5b48e278af2edbd7abc9479ca65e0afcc231457a1ed5e1a469a9f6974632f2d46709de7deb1" } }, { "event_id": "evt-15da4b21ff437f1cf0f8130f", "kind": "unclassified_tcp", "frame_number": 52876, "timestamp_epoch": "1634915586.624825000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bc2516418f490a4a520c5c74", "kind": "unclassified_tcp", "frame_number": 53084, "timestamp_epoch": "1634915588.512707000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c5f000000170303005005ec8ddf5978e173cc8737d74e9a131caebaa3a9dc17fa60b5a4798dc507f34bfd44d2a59a8cecff752e4dbdd3fbb74a4ea3ac58c87b7d35ce2cf4144b59beaff445287e134c2ae2957ed2b5ad545208" } }, { "event_id": "evt-2454f8f95d43a98215b57831", "kind": "unclassified_tcp", "frame_number": 53087, "timestamp_epoch": "1634915588.844873000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c3f000000170303003035c05d9b01e0d1e1c24cde09a538e9f45f612865fb6ede834b5b736b8e384b41995525a377fe8848e59bad231033ef95" } }, { "event_id": "evt-40cacc0c0440ec65763a6e1f", "kind": "unclassified_tcp", "frame_number": 53096, "timestamp_epoch": "1634915591.624897000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cce8ca6341b07c8edad8ad8d", "kind": "unclassified_tcp", "frame_number": 53103, "timestamp_epoch": "1634915596.656498000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-286ccf55e81ff1fc5209b002", "kind": "unclassified_tcp", "frame_number": 53123, "timestamp_epoch": "1634915601.687641000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-da41d15b2e99d9232346dd22", "kind": "unclassified_tcp", "frame_number": 53872, "timestamp_epoch": "1634915605.275313000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e87e8bb2d8efadd618a65610", "kind": "unclassified_tcp", "frame_number": 53924, "timestamp_epoch": "1634915606.749205000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-268681301dadd65e28465c1a", "kind": "unclassified_tcp", "frame_number": 53932, "timestamp_epoch": "1634915611.292835000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200cab40c000000197b" } }, { "event_id": "evt-36d4d947f9cb2d357c0b5ff1", "kind": "unclassified_tcp", "frame_number": 53934, "timestamp_epoch": "1634915611.495338000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab40e00000005020002" } }, { "event_id": "evt-ed0a926336e83bb8bd2883e4", "kind": "unclassified_tcp", "frame_number": 53935, "timestamp_epoch": "1634915611.495661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cab40c0000000502" } }, { "event_id": "evt-71dc7e3b98eef97b09993308", "kind": "unclassified_tcp", "frame_number": 53939, "timestamp_epoch": "1634915611.748503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2e971a02f5dbd47db8b9b5fe", "kind": "unclassified_tcp", "frame_number": 53940, "timestamp_epoch": "1634915611.749018000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cab40c0000000100" } }, { "event_id": "evt-12d85a0ad75f45fe6c507f2b", "kind": "unclassified_tcp", "frame_number": 53942, "timestamp_epoch": "1634915611.767017000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c4a8074341ab74d8510109c8", "kind": "unclassified_tcp", "frame_number": 53945, "timestamp_epoch": "1634915612.138560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab42400000005010003136d61696c2e646562746d656e642e636f2e7a610019" } }, { "event_id": "evt-54abacf4f0a98356eba66b2d", "kind": "unclassified_tcp", "frame_number": 53961, "timestamp_epoch": "1634915616.413871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab414000000050000010a0a169cc32d" } }, { "event_id": "evt-29a6731da7de61876ad8ec5c", "kind": "unclassified_tcp", "frame_number": 53965, "timestamp_epoch": "1634915616.780780000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fdd9ca7fb8fc400a33ad2c4f", "kind": "unclassified_tcp", "frame_number": 53973, "timestamp_epoch": "1634915620.814053000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab45d00000032323020646564693236352e637074332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31333a3430202b303230300d0a" } }, { "event_id": "evt-d5fc60ef752843cef39a0865", "kind": "unclassified_tcp", "frame_number": 53978, "timestamp_epoch": "1634915621.101831000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab41a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e52ab908226f550a44c5a7d1", "kind": "unclassified_tcp", "frame_number": 53984, "timestamp_epoch": "1634915621.536650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab4c40000003235302d646564693236352e637074332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-72518ad1cea2ae31155fe493", "kind": "unclassified_tcp", "frame_number": 53987, "timestamp_epoch": "1634915621.844330000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-23c24ef494d5139ad6dc3d83", "kind": "unclassified_tcp", "frame_number": 53989, "timestamp_epoch": "1634915621.862637000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab4140000005354415254544c530d0a" } }, { "event_id": "evt-983b1434547b03b8124e8424", "kind": "unclassified_tcp", "frame_number": 53994, "timestamp_epoch": "1634915622.034785000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c5f0000001703030050651a3b9168ff7957482c0094e25b9a6eab2de4d8d78b55e1e2243595f251c8e587e7d6abec0bc3d2626ed2fcdbb4ecc17f7b879ebecb24922db7bcb43cc98c468b307323a4cc94b5c475f86f7c04587a" } }, { "event_id": "evt-c4b697f935a869a6f1903c87", "kind": "unclassified_tcp", "frame_number": 53998, "timestamp_epoch": "1634915622.208374000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab41c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-97bc0414f100ef594f2ba71d", "kind": "unclassified_tcp", "frame_number": 54002, "timestamp_epoch": "1634915622.349272000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c3f000000170303003075b78169bde787290f40a4014afced653be136f49ffc78b7819a4f2ff4c84677273bcb817046f74e3cdc3aa4d92e259e" } }, { "event_id": "evt-1d76f67ceaa585efceef2f16", "kind": "unclassified_tcp", "frame_number": 54008, "timestamp_epoch": "1634915622.511984000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006c1c6f0000001703030060d83faa12aafbd22f64c9f993e5ac5b5136a503810fa33f4fad14d29d4a30ae9d1ac837b160d90f925674af58c4f9226e2c76841805a4b8121c7560821b42de1a0a54466b55114ee33a0d0a175bbfb6b74c36609e5a45e45855e8c6a54b4b88bd" } }, { "event_id": "evt-8a91a4b246f53ab9b631a490", "kind": "unclassified_tcp", "frame_number": 54012, "timestamp_epoch": "1634915622.512759000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701006c1c0a000000" } }, { "event_id": "evt-f207ab688b7f35fdfdf12ad3", "kind": "unclassified_tcp", "frame_number": 54014, "timestamp_epoch": "1634915622.534874000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e20d70bf9ca4da7edd3d4cec", "kind": "unclassified_tcp", "frame_number": 54018, "timestamp_epoch": "1634915622.741064000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300053c0c000000197b" } }, { "event_id": "evt-7d7716b8f0c5cdd6d733b01d", "kind": "unclassified_tcp", "frame_number": 54023, "timestamp_epoch": "1634915622.896878000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1ce2a73c10b3bb76d4dbdfdc", "kind": "unclassified_tcp", "frame_number": 54024, "timestamp_epoch": "1634915622.896902000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "ee64d7745df3151a3e36f0f6fc9547c649179daf8b769d30dd696ea8ac230e49cf5448b9b93ab46aec4e4d572568f411e9282640e8984130364200051a30820516308202fea003020102021100912b084acf0c18a753f6d62e25a75f5a300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3230303930343030303030305a170d3235303931353136303030305a3032310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310b300906035504031302523330820122300d06092a864886f70d01010105000382010f003082010a0282010100bb021528ccf6a094d30f12ec8d5592c3f882f199a67a4288a75d26aab52bb9c54cb1af8e6bf975c8a3d70f4794145535578c9ea8a23919f5823c42a94e6ef53bc32edb8dc0b05cf35938e7edcf69f05a0b1bbec094242587fa3771b313e71cace19befdbe43b45524596a9c153ce34c852eeb5aeed8fde6070e2a554abb66d0e97a540346b2bd3bc66eb66347cfa6b8b8f572999f830175dba726ffb81c5add286583d17c7e709bbf12bf786dcc1da715dd446e3ccad25c188bc60677566b3f118f7a25ce653ff3a88b647a5ff1318ea9809773f9d53f9cf01e5f5a6701714af63a4ff99b3939ddc53a706fe48851da169ae2575bb13cc5203f5ed51a18bdb150203010001a382010830820104300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030206082b0601050507030130120603551d130101ff040830060101ff020100301d0603551d0e04160414142eb317b75856cbae500940e61faf9d8b14c2c6301f0603551d2304183016801479b459e67bb6e5e40173800888c81a58f6e99b6e303206082b0601050507010104263024302206082b060105050730028616687474703a2f2f78312e692e6c656e63722e6f72672f30270603551d1f0420301e301ca01aa0188616687474703a2f2f78312e632e6c656e63722e6f72672f30220603551d20041b30193008060667810c010201300d060b2b0601040182df13010101300d06092a864886f70d01010b0500038202010085ca4e473ea3f7854485bcd56778b29863ad754d1e963d336572542d81a0eac3edf820bf5fccb77000b76e3bf65e94dee4209fa6ef8bb203e7a2b5163c91ceb4ed3902e77c258a47e6656e3f46f4d9f0ce942bee54ce12bc8c274bb8c1982fa2afcd71914a08b7c8b8237b042d08f908573e83d904330a472178098227c32ac89bb9ce5cf264c8c0be79c04f8e6d440c5e92bb2ef78b10e1e81d4429db5920ed63b921f81226949357a01d6504c10a22ae100d4397a1181f7ee0e08637b55ab1bd30bf876e2b2aff214e1b05c3f51897f05eacc3a5b86af02ebc3b33b9ee4bdeccfce4af840b863fc0554336f668e136176a8e99d1ffa540a734b7c0d063393539756ef2ba76c89302e9a94b6c17ce0c02d9bd81fb9fb768d40665b3823d7753f88e7903ad0a3107752a43d8559772c4290ef7c45d4ec8ae468430d7f2855f18a179bbe75e708b07e18693c3b98fdc6171252aafdfed255052688b92dce5d6b5e3da7dd0876c842131ae82f5fbb9abc889173de14ce5380ef6bd2bbd968114ebd5db3d20a77e59d3e2f858f95bb848cdfe5c4f1629fe1e5523afc811b08dea7c9390172ffdaca20947463ff0e9b0b7ff284d6832d6675e1e69a393b8f59d8b" } }, { "event_id": "evt-47d1e8e04a4d42f3cc0de375", "kind": "unclassified_tcp", "frame_number": 54030, "timestamp_epoch": "1634915622.900770000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-306c9a96f2dbd172747908e6", "kind": "unclassified_tcp", "frame_number": 54031, "timestamp_epoch": "1634915622.900786000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03014d0c00014903001741049ec8593f83330274ea3a9658a5f8bce77ed7c89d92e836612fac97fd7c21630751b860effb88871643e634a59f0a2fd997b85c4727fd71ae8637ea5d11396838040101002c7fee6f5a666a0030f0d468775f0e9297d6a4960ede117dc5bd2514322ca0a57f516a452cb81cc9b907780e8970ee54432912fd770ce1ca07e3fd59e2cb9e0fd7778e4044bdb614c89a61f67a918ac865681180ee973e241dd3148ea48de7927b8970958344daa5854babb634f953427bddeb735a50cbf95e599b4af3add265ee304ab90ec1246352f0770de648fb96c8d76f5757270d45499f76f84cd726e2109ce4cba67d39be3acb6dbec1927d4ea97e5aee60d6750beb0c703f44947e448ad859540490f264c292c2ce2879e258a648d0d69e02b2a920521134a607b7bc8c6cf226ece603cb74f6db120b79ca1a611765d9512987238b239afed0da542f16030300040e000000" } }, { "event_id": "evt-7fc5688821f10179bd6957e0", "kind": "unclassified_tcp", "frame_number": 54034, "timestamp_epoch": "1634915622.917653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c0e00000005020002" } }, { "event_id": "evt-637c30144d6fa0e8aff70ee9", "kind": "unclassified_tcp", "frame_number": 54035, "timestamp_epoch": "1634915622.918165000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300053c0c0000000502" } }, { "event_id": "evt-485995a0d3d512d53948aa32", "kind": "unclassified_tcp", "frame_number": 54038, "timestamp_epoch": "1634915623.274034000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab488000000160303004610000042410421df945073033aceaf4f4db75a8ffc7cf6e1f63b59ea0249df4b29d8bd51e868b5e34e726fa2606eddc2a2f1c5cde56cc676baf617510b249371a1c5434f92701403030001011603030028000000000000000070d3f67be85649a6aa412f78a70205f0633195ffa836c48d84df7d332f2746bc" } }, { "event_id": "evt-9692ffcce071873d45ade3e0", "kind": "unclassified_tcp", "frame_number": 54043, "timestamp_epoch": "1634915623.599461000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab43d000000140303000101160303002800000000000000002fd0c9317300d225f3d907a95f8064c66880b9c3669f988dad129065f6208df5" } }, { "event_id": "evt-d983f4335a3c834444db7786", "kind": "unclassified_tcp", "frame_number": 54046, "timestamp_epoch": "1634915623.691019000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1169d21a4caa232cd85118af", "kind": "unclassified_tcp", "frame_number": 54047, "timestamp_epoch": "1634915623.691602000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300053c0c0000000100" } }, { "event_id": "evt-ffe74c36f6a6e17c9a938c53", "kind": "unclassified_tcp", "frame_number": 54049, "timestamp_epoch": "1634915623.870786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab43700000017030300280000000000000001fa67d0ad66bc90f91445034a2149feba6b29dfea5102436e1d4dfcb2cbbf894d" } }, { "event_id": "evt-454bd33435efa0145fec57a4", "kind": "unclassified_tcp", "frame_number": 54054, "timestamp_epoch": "1634915624.194564000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab4d300000017030300c40000000000000001956bfecd108176b9e4ef01d60528ca8970d9698e7555eee7926175f66e1a39065e641b41e15c4acc10c620f5b72c0bee7e59f8b08c7d64cf253251c99bb847611f4a23a786b4e2966e60da879bc5671a8c6bb6aa076b7f350df43041e36beff820604f7840856abbebd30ef2cbcaf586f071a23a05fda0ee8149e76f5ee36d75fefc0694e0d20e99717bbff35c29e3b3347af49b262a78ff1012c4213e6bfdb85f82c27be9a843ded957d343cb0bdd02b2192b1626a1d6a8aab7b274" } }, { "event_id": "evt-e8a133ce1355c44695434c98", "kind": "unclassified_tcp", "frame_number": 54056, "timestamp_epoch": "1634915624.224914000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c2100000005010003106d61696c2e6b62637261776c2e6e65740019" } }, { "event_id": "evt-55b4b1a3c15e9fc6544a397c", "kind": "unclassified_tcp", "frame_number": 54063, "timestamp_epoch": "1634915624.381278000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c14000000050000010a0a169cc32e" } }, { "event_id": "evt-008cc7e739a9ba0b1def7e4d", "kind": "unclassified_tcp", "frame_number": 54065, "timestamp_epoch": "1634915624.886175000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab43300000017030300240000000000000002f40615b8a5a3c7f83ede055a94522ca2117b7d720403e546fd8f39b1" } }, { "event_id": "evt-7affb7312cd288ffeb9f8cdf", "kind": "unclassified_tcp", "frame_number": 54071, "timestamp_epoch": "1634915625.220401000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab439000000170303002a0000000000000002c224954a04d30179fbab6fbcb38e209807a9b0e96aa70e50f62c6d4426bbfb597f85" } }, { "event_id": "evt-2118f016008a209cdf0a9270", "kind": "unclassified_tcp", "frame_number": 54073, "timestamp_epoch": "1634915625.220862000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c35000000323230204741524d2d31303452303035204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ca9a0ed4fcdf3feb211c272f", "kind": "unclassified_tcp", "frame_number": 54078, "timestamp_epoch": "1634915625.485630000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab445000000170303003600000000000000038d008e149e128dda03a9cb3320ae394eafc96ecb2087a6d327c092125d176b92f506beace28bb8a8eb70afe08801" } }, { "event_id": "evt-62a95409882cf03db779fe02", "kind": "unclassified_tcp", "frame_number": 54082, "timestamp_epoch": "1634915625.727686000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-88cbf7c43c951583b377e620", "kind": "unclassified_tcp", "frame_number": 54087, "timestamp_epoch": "1634915625.808312000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab439000000170303002a0000000000000003e218619ca82e54aa8468c0092df2049d8f840ad996fcaf59796a374e83349660c81b" } }, { "event_id": "evt-de4cd18192cc9f1b64bd44ba", "kind": "unclassified_tcp", "frame_number": 54091, "timestamp_epoch": "1634915625.875380000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-1f804ef81310ba6531ad2bd0", "kind": "unclassified_tcp", "frame_number": 54095, "timestamp_epoch": "1634915626.160559000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab4410000001703030032000000000000000460a9ad1f44ba65b83b82c2c436254e8e904d0672f67d9b80f7e266826105dc918442721c92c2e08c5519" } }, { "event_id": "evt-39d7164b774d109e346aaf0c", "kind": "unclassified_tcp", "frame_number": 54100, "timestamp_epoch": "1634915626.375622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c140000005354415254544c530d0a" } }, { "event_id": "evt-384aaee1bb4a14b8524d0384", "kind": "unclassified_tcp", "frame_number": 54105, "timestamp_epoch": "1634915626.523939000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab44a000000170303003b00000000000000048164b79155f41c56ac5b81bfa0fab8174ab1bc12163a77e5d528cc7b2625c71445fd4a3c14deabc18323a61ed9a7ee6de6db0b" } }, { "event_id": "evt-2dfdd0f793e14740c1b2ee7d", "kind": "unclassified_tcp", "frame_number": 54108, "timestamp_epoch": "1634915626.526437000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-0b151581edf8e33fb821ed1f", "kind": "unclassified_tcp", "frame_number": 54112, "timestamp_epoch": "1634915626.876295000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ccb7187e59d3d74d8c0de24b", "kind": "unclassified_tcp", "frame_number": 54116, "timestamp_epoch": "1634915627.684439000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8b49e673ab4198b4f663cd8f", "kind": "unclassified_tcp", "frame_number": 54127, "timestamp_epoch": "1634915627.852612000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c0a10000016030312330200005103036172d52b75d213ede12bc548eceae0457a9c17c7e8727808002462ed33d108a020631500005da917cc160cd75baa2c640cd456d4ad17f42c13117a8b08eeeded93c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-7010c32337337893a8bae7f4", "kind": "unclassified_tcp", "frame_number": 54128, "timestamp_epoch": "1634915627.852626000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7443e76dd9ba19bfd7f3dc30", "kind": "unclassified_tcp", "frame_number": 54129, "timestamp_epoch": "1634915627.852634000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5fa309e7edc304e9839a9c00", "kind": "unclassified_tcp", "frame_number": 54131, "timestamp_epoch": "1634915627.852858000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c420200006470ec571af4b2f28b2242a88552888e91096ee9b3f5b0ad4daa0c596e45644dace4a2a18555c35a85e5dcc7393c123704010200bd06d9c7dbc8aec09ef2842c2187f42e7bba338d0f441363eca036fc317a672e73012407643a1d86238774bb461d94055e1e0ff2cb9540526b05c19d36344b533738b938d2569260f4c213c3e79cab19ace71c6aa7e26fdcd9c65f4ce146bb6ffa1403b784396e98c01240412386d436f9a288d2c990aea51b4a93de9d36db1c2333c40e40f8921c4c40d51ccc33e6d38992b03957a8fe4011ada0c3a3294c18deddeb8295542f8ac074b79c54706b6249eeaed85cfeb480a1ecbba1c145377f62355a8cae074741aecaa18c04f07a600dc5923fc74f11a9473bebb29a5b4da162057fdf2056bdb1e3d7d09fc3d4377df94c7edb93a560fa2ee0baa90f9b90644e62374005dfc56f97ca381ed07a1bcb95368d3ace2982fedb1a9f6eac6830969801a97fc396279f89fb8412781dae43a7b058fcfbafc55de530be35c78209e8fef6a9b9ee30dcd3402fea481f595c7e94bd0183f0424a04d5be789c6ff0ecca9b88bf0d3b406fed99f56652afe5d8b1d87587600efa84be46c93a5e63a9fc84e4f96858ec18ad983b4c154374ab70b987e5e1a5fad5bf32af265cdfa2a9d1e810af8cf7bc6e2e64d2e8e9c5aed8ec4620e9c09712c5f75963cf69f05dbfcc1f7b124624b7d651db0fba521f0573b503c7b2b6dfe379d506545f7262d7a1c5d2fb6aeef20687cf19be151a7bf13048d211e9ee11f4b5481e787f407736e62c6d0e000000" } }, { "event_id": "evt-f441c3136fb56c03f0ddddeb", "kind": "unclassified_tcp", "frame_number": 54137, "timestamp_epoch": "1634915628.002387000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab441000000170303003200000000000000051951de978e0f51571c4731304405b43860ff584090497107c57a0c625d5ec3f0517881d6c744f6f00d7a" } }, { "event_id": "evt-e2847e9d48eccf615f246c4b", "kind": "unclassified_tcp", "frame_number": 54139, "timestamp_epoch": "1634915628.011905000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701009fb70c000000197b" } }, { "event_id": "evt-f5a3bdd6b51e1f61f3be954a", "kind": "unclassified_tcp", "frame_number": 54142, "timestamp_epoch": "1634915628.227802000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb70e00000005020002" } }, { "event_id": "evt-555b0e4b74e94f5c5f75913e", "kind": "unclassified_tcp", "frame_number": 54143, "timestamp_epoch": "1634915628.228354000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009fb70c0000000502" } }, { "event_id": "evt-ee02263a17523b881564d95f", "kind": "unclassified_tcp", "frame_number": 54146, "timestamp_epoch": "1634915628.426900000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053ce4000000160303008a1000008685040163ed8fe3df2fae1ba8d9bcd3d3d264f79c3662a2da2244ad9d215791f410d7b3fc53ae113b80c21c7556e7f814295ff9396133269bd283c102cbb360423ec6019500d1eb69d0d95c8853689ff72c98b9d12d6654d5eae4bb1ddfca2c18e30fe3f2007edaffdd5452a896261e326efcd0f86e7216c56f7f1987d87a9b891961e04f8a34140303000101160303004049fbd78ceac1e5919428afe59cd8be02db41c5757fa5d5ece3e98c6fbd26c6c890f36eb7370f5548d01dd4d0a2cc6d0b9bb78eb1275e0921ab25dd1a61a3edf5" } }, { "event_id": "evt-bbc1309617cc613141cf1890", "kind": "unclassified_tcp", "frame_number": 54151, "timestamp_epoch": "1634915628.595781000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c550000001403030001011603030040644b71d5345bcd806347613583be0919ade6f05a794f32738f1f026a4c811abfb89f020c633c4709cedfb1f000dde53bed1c739fe1e44d6c9ddd19af76260a2a" } }, { "event_id": "evt-59b97899b49e0e852135c225", "kind": "unclassified_tcp", "frame_number": 54153, "timestamp_epoch": "1634915628.621920000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab42d000000170303001e000000000000000674fc1eeb8e1983ac9bf363bfd86c0966e34261221707040701009fb720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-c127453d6c5ecdd7f229df9c", "kind": "unclassified_tcp", "frame_number": 54154, "timestamp_epoch": "1634915628.622469000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009fb70c0000000100" } }, { "event_id": "evt-51608e6aeaebba4320d3eddd", "kind": "unclassified_tcp", "frame_number": 54159, "timestamp_epoch": "1634915628.927717000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c4f0000001703030040bb72f8d670a6be4ee4acc8712614188e891aebf9d4e249730d60a606bef495962559dcb9391e3e8c69a946cf8336f56a57106c378c4920b68e06ff0ff6a5fa66" } }, { "event_id": "evt-afc2dc771a702cb49feac523", "kind": "unclassified_tcp", "frame_number": 54163, "timestamp_epoch": "1634915628.931176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cab47600000017030300480000000000000006859328f11ba2fb90cf4e71345e5ff57edb63bf0b6edd3785f71783757b37c4bd3e114d884a0192e75ede235c8763ea020e0b69dbf103021e1fd6f668a4a7d09b150303001a0000000000000007ec3a9d4fe15f45ec719b84f1514469f8b7ae" } }, { "event_id": "evt-7b2d83c1dd27db4fdfd89be4", "kind": "unclassified_tcp", "frame_number": 54169, "timestamp_epoch": "1634915628.938248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200cab40a000000" } }, { "event_id": "evt-27495a2ec99064c58e7de254", "kind": "unclassified_tcp", "frame_number": 54174, "timestamp_epoch": "1634915629.086736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1cf6362e7c78c9ebfd439e71", "kind": "unclassified_tcp", "frame_number": 54176, "timestamp_epoch": "1634915629.220769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb72d000000050100031c6d61696c2e6e617a6172696f636f6e737472756374696f6e2e636f6d0019" } }, { "event_id": "evt-bd4ab7c030e36c584c1195e5", "kind": "unclassified_tcp", "frame_number": 54185, "timestamp_epoch": "1634915629.410459000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb714000000050000010a0a169cc330" } }, { "event_id": "evt-a836f3e53a16eca250fc761f", "kind": "unclassified_tcp", "frame_number": 54188, "timestamp_epoch": "1634915629.485325000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb74e0000003232302045534d5450204672692c203232204f637420323032312031313a31333a3439202d303430303a20554345207374726963746c792070726f686962697465640d0a" } }, { "event_id": "evt-bbccb1c8ebb09e7f732b0897", "kind": "unclassified_tcp", "frame_number": 54191, "timestamp_epoch": "1634915629.788903000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c4f00000017030300408966c0fac71dd50684625d37b55c76722b0210dae00e882fe739eb6d3590891376272093c033acf37adf1293e8653daf15b63b2c5e532fa97428eeb1a0c48bc4" } }, { "event_id": "evt-75046be52eba1a8f77ba9f2f", "kind": "unclassified_tcp", "frame_number": 54196, "timestamp_epoch": "1634915629.937779000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c4f0000001703030040f7462e4ca847c98e7722f0dac62d478a6cfce363a4f6663258e2dc6d5b9b0c8e5891b64b5fe4f83d4a265f70ab26653ef40b2a15e9cb0b28c4efd0c219d90214" } }, { "event_id": "evt-29c9a5c3d76f18b6d9b2f3c3", "kind": "unclassified_tcp", "frame_number": 54198, "timestamp_epoch": "1634915629.969725000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb71a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f5392020596d9fe524a203c9", "kind": "unclassified_tcp", "frame_number": 54205, "timestamp_epoch": "1634915630.040658000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7d40000003235302d77616c61757468736d747035312e796f7572686f7374696e676163636f756e742e636f6d2048656c6c6f206c6f63616c686f7374205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033343630333030380d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-4d7ccedf0ac0dfa9c5517f33", "kind": "unclassified_tcp", "frame_number": 54209, "timestamp_epoch": "1634915630.287755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c5f0000001703030050997f5aa944ed4106ecca6b390ddfd826268561ee784a046321e2f13cc17e3f2c21c64f81525de0a95707d2e2f34bb1b1c0fe0025a775b4e8b057c083b471bec1af5a5ae2267a2afc5f7f2b73e6c708f0" } }, { "event_id": "evt-af7d8c1662d4c7522f54be32", "kind": "unclassified_tcp", "frame_number": 54214, "timestamp_epoch": "1634915630.439531000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c4f000000170303004066d447721bdd336175de8bccb139d662648aa74856cbcddb97e4e066f82230f70dd1946bb6aa83f431e4e7f74a66ab97bac5aef6e4b515d42a3e2642b14d7dec" } }, { "event_id": "evt-828102d8cdce7a631e5fae19", "kind": "unclassified_tcp", "frame_number": 54216, "timestamp_epoch": "1634915630.470935000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7140000005354415254544c530d0a" } }, { "event_id": "evt-e8510ba225527bcd330a546b", "kind": "unclassified_tcp", "frame_number": 54222, "timestamp_epoch": "1634915630.541527000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb71c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-225fb366cac405d027cd3b01", "kind": "unclassified_tcp", "frame_number": 54225, "timestamp_epoch": "1634915630.777809000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c4f0000001703030040083dc9da5258141b5f9b99f200dc6347a8ee794945be21d8b1034305d7dbb14b29441ea023911782c7ae47620133c5d7b162c91d712570b64427adbd6ab09e19" } }, { "event_id": "evt-d706affac39823b51771723c", "kind": "unclassified_tcp", "frame_number": 54230, "timestamp_epoch": "1634915631.568562000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2e1e6b1b4ea12a2d068e813b", "kind": "unclassified_tcp", "frame_number": 54238, "timestamp_epoch": "1634915631.685992000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b135a59485562eee8586cc8c", "kind": "unclassified_tcp", "frame_number": 54239, "timestamp_epoch": "1634915631.686015000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6c6c1b0f169de4b352c95ee5", "kind": "unclassified_tcp", "frame_number": 54240, "timestamp_epoch": "1634915631.686028000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5afd58fd8eafdd76c70f478", "kind": "unclassified_tcp", "frame_number": 54245, "timestamp_epoch": "1634915631.938679000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c9ee5b49b65f98ea61fc32bb", "kind": "unclassified_tcp", "frame_number": 54247, "timestamp_epoch": "1634915632.074090000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7880000001603030046100000424104dcc60da49b7405bbe79dd93e4cd3f714c88131bdf91d86a80d4325a1fb5c33ea9a724acb5c1f561d6295ff5a798cec82500bc0ff56e359d2ef100165da447c2214030300010116030300280000000000000000c9feb738add618d02e9476b9e6e63f2f985d5f2492379a5e96fa0f2f466988ba" } }, { "event_id": "evt-75bc14c5f1247c0c8fb2ed65", "kind": "unclassified_tcp", "frame_number": 54252, "timestamp_epoch": "1634915632.142704000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb73d0000001403030001011603030028a8fb836c667378c12f526febf7d8ab49887896a4854135a761677b902f99f6f83d95039a2aa14b14" } }, { "event_id": "evt-5731d4f38a5559195b1fc037", "kind": "unclassified_tcp", "frame_number": 54256, "timestamp_epoch": "1634915632.694471000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb73700000017030300280000000000000001289934a595172b130b7e4a3bc0cba93cdf1466dd42638371ec4df7de4d476340" } }, { "event_id": "evt-f5c854b15b10fdb8279a1071", "kind": "unclassified_tcp", "frame_number": 54261, "timestamp_epoch": "1634915632.795291000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7e300000017030300d4a8fb836c667378c281d6b8b0d8cedb4330197a8584775c779f997a491810f7177e1aca4a08600e2f454cdeb92a091b863554422b2c391fb6477b3b873b8df46a88bfd7f7aab4728e14ceadc9c9b488cb01596c81c333b683dc477dab967e4f68fad51c23a71e586c14d6b5afaa0877bb34558a9cdfcf62803460ea16f22a33940693ca385ec609b9c24bcfc135768fadaed38f7d053d280a7449c15a52920541abf6f42577559653090a428beae55044374f474d3c5dde39823a3e544d09d1babf7505f64a407c6d6a25d024974c1c97b20e1719" } }, { "event_id": "evt-ea09f56188e5056d4336bf7b", "kind": "unclassified_tcp", "frame_number": 54265, "timestamp_epoch": "1634915632.880636000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c5f0000001703030050ed81c694b72fa801966251a4110e6b90144aa9dae0179fa5202da2c25f3f21bc9e79ad5c9cd4e13336a7e137cf4a8b4bde8f176f5a72ba28690f9fe1f5f32c4471df38c836c94956b84ef1e5706b87a0" } }, { "event_id": "evt-7df31b2932204da5dacbbae8", "kind": "unclassified_tcp", "frame_number": 54269, "timestamp_epoch": "1634915633.382392000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c3f000000170303003013e33cebb5c9b3c3b3644cbdd9668906a824198362b49e0b7d341683c1e22160f0f79bb7c50d441ce121aef13d2ccdfe" } }, { "event_id": "evt-ff1d55410e012f9f98a18cca", "kind": "unclassified_tcp", "frame_number": 54274, "timestamp_epoch": "1634915633.923795000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb733000000170303002400000000000000023f764099c25c0780dbf2d40f9b55834523abd0c13cddfb8eb3585b89" } }, { "event_id": "evt-138d1e14bebe6c4ea6f07640", "kind": "unclassified_tcp", "frame_number": 54280, "timestamp_epoch": "1634915634.026222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb739000000170303002aa8fb836c667378c3f393f833961a03cd4eeb7d4c6f166927a955b3b40e47343d2e32e4d33766a4367ca5" } }, { "event_id": "evt-9ba7ebd528b2d6e6e4afcd64", "kind": "unclassified_tcp", "frame_number": 54284, "timestamp_epoch": "1634915634.358893000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb75100000017030300420000000000000003a16a40af45514a8ffc06d9ab7bc4333d229f8dc8658e4cac09f71466b6e2f62eb1dd57d8c912ca6157dcc9979f44f0696fb13a19dbfec4f45a62" } }, { "event_id": "evt-9a47df57194076690dc2c207", "kind": "unclassified_tcp", "frame_number": 54289, "timestamp_epoch": "1634915634.446792000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb739000000170303002aa8fb836c667378c42d58f1d1ce84badcb56b072b3c5f5dc38add1889225d313705a59c8812e542aa2638" } }, { "event_id": "evt-bd292258352a953a2536a801", "kind": "unclassified_tcp", "frame_number": 54292, "timestamp_epoch": "1634915634.780770000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb739000000170303002a000000000000000493781e71030df18d39ebbdaf93fb9ff54b733793da5f53b94e3684808f02ecef96f3" } }, { "event_id": "evt-17a7fedcd8041bd489d33adb", "kind": "unclassified_tcp", "frame_number": 54296, "timestamp_epoch": "1634915634.907906000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-92741120c2517d7021f22eea", "kind": "unclassified_tcp", "frame_number": 54304, "timestamp_epoch": "1634915636.528821000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb74a000000170303003ba8fb836c667378c50b6868b236639d621760b246b7b167f5f1e062b277c789160b8e44940575c01bec779e8afe21fc85ca1edfc48694c7810fe848" } }, { "event_id": "evt-672d299067616a43585b9b82", "kind": "unclassified_tcp", "frame_number": 54307, "timestamp_epoch": "1634915636.846633000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb72a000000170303001b00000000000000051691b79a02043da58c233229b1ab3d9e209fe2" } }, { "event_id": "evt-ca8c355e5aa6f784cd983ae7", "kind": "unclassified_tcp", "frame_number": 54312, "timestamp_epoch": "1634915636.934742000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7410000001703030032a8fb836c667378c6b533195d6469b7c0c55eb46548c1c233cb0c07837c69a73d92d26109f93d8697657ef9e96b577a5f3915" } }, { "event_id": "evt-a5f42de623d79ff828c71ea6", "kind": "unclassified_tcp", "frame_number": 54315, "timestamp_epoch": "1634915636.999726000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a5863e39927aa5dd9cbf52a8", "kind": "unclassified_tcp", "frame_number": 54317, "timestamp_epoch": "1634915637.237981000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb72d000000170303001e00000000000000067ab211b5e67914ab87a372daaedf9040218f1ec980ae" } }, { "event_id": "evt-79453a6dcc3cc3af185b5b31", "kind": "unclassified_tcp", "frame_number": 54324, "timestamp_epoch": "1634915637.313418000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb7830000001703030055a8fb836c667378c7b008fcad6c6fa1785261ff6ea6a2db7562269c543666f1fa68436e3db3bc6c56f85862e77f58570b069db08a432ed1183397282640f42af9e356f505d796be3d4677853ddfaed5d2c38efea6e8150303001aa8fb836c667378c8968c60d7d01e10e61b81184dcdd139c4e798" } }, { "event_id": "evt-180313c8e45d10e931528158", "kind": "unclassified_tcp", "frame_number": 54328, "timestamp_epoch": "1634915637.313695000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009fb70a000000" } }, { "event_id": "evt-f578048ef5290e76fbec8b19", "kind": "unclassified_tcp", "frame_number": 54330, "timestamp_epoch": "1634915637.787741000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009fb729000000150303001a00000000000000074c805aeeaedb175a1f196c50fe83ae1266d0" } }, { "event_id": "evt-317c6cceec12759583e271c5", "kind": "unclassified_tcp", "frame_number": 54332, "timestamp_epoch": "1634915637.997703000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009fb70a000000" } }, { "event_id": "evt-3c389787e03a3b8666df22db", "kind": "unclassified_tcp", "frame_number": 54335, "timestamp_epoch": "1634915638.635047000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010090030c000000197b" } }, { "event_id": "evt-dcd753313db4d9f116547bb5", "kind": "unclassified_tcp", "frame_number": 54337, "timestamp_epoch": "1634915638.848073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090030e00000005020002" } }, { "event_id": "evt-3033f932d5a2d25e9ccae3b1", "kind": "unclassified_tcp", "frame_number": 54338, "timestamp_epoch": "1634915638.848622000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010090030c0000000502" } }, { "event_id": "evt-b881c57d3c3c9b93d3910fe1", "kind": "unclassified_tcp", "frame_number": 54342, "timestamp_epoch": "1634915639.164030000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a2dcecd1f0bf210b0c85b621", "kind": "unclassified_tcp", "frame_number": 54343, "timestamp_epoch": "1634915639.164430000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010090030c0000000100" } }, { "event_id": "evt-0f929bd4dca775ba6181a39e", "kind": "unclassified_tcp", "frame_number": 54346, "timestamp_epoch": "1634915639.506010000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090032300000005010003126d74612d30312e7765626e6f64652e636f6d0019" } }, { "event_id": "evt-9ae6ca54daf6e1e2711a476c", "kind": "unclassified_tcp", "frame_number": 54356, "timestamp_epoch": "1634915642.063212000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-edd1ae3e9e58545526eb5a2b", "kind": "unclassified_tcp", "frame_number": 54365, "timestamp_epoch": "1634915643.985744000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900314000000050000010a0a169cc331" } }, { "event_id": "evt-815130763a0b2f9672da9975", "kind": "unclassified_tcp", "frame_number": 54370, "timestamp_epoch": "1634915645.215866000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900330000000323230206d74612d30312e7765626e6f64652e636f6d2045534d545020506f73746669780d0a" } }, { "event_id": "evt-002277d77968a2b345cce852", "kind": "unclassified_tcp", "frame_number": 54374, "timestamp_epoch": "1634915645.561545000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090031a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b6efebcf5deb7bab43f042c2", "kind": "unclassified_tcp", "frame_number": 54379, "timestamp_epoch": "1634915645.719738000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003be0000003235302d6d74612d30312e7765626e6f64652e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452033303438303030300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a323530204348554e4b494e470d0a" } }, { "event_id": "evt-79c61c12d0c1727e8a1a0258", "kind": "unclassified_tcp", "frame_number": 54382, "timestamp_epoch": "1634915646.004760000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003140000005354415254544c530d0a" } }, { "event_id": "evt-42ba5a80a5032acbdd932ef6", "kind": "unclassified_tcp", "frame_number": 54388, "timestamp_epoch": "1634915646.155388000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090032800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-17c7ffa602c5011f2b124eee", "kind": "unclassified_tcp", "frame_number": 54390, "timestamp_epoch": "1634915646.188935000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200aef10c000000197b04070200aef10e00000005020002" } }, { "event_id": "evt-4a1e9f40acd82ecbd8d63fbc", "kind": "unclassified_tcp", "frame_number": 54391, "timestamp_epoch": "1634915646.189614000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200aef10c0000000502" } }, { "event_id": "evt-2703c73610046ad2884c1009", "kind": "unclassified_tcp", "frame_number": 54395, "timestamp_epoch": "1634915646.439023000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ef0b4da3d6af4f367d7c4af0", "kind": "unclassified_tcp", "frame_number": 54405, "timestamp_epoch": "1634915646.602567000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4049c696e26d1606c8978759", "kind": "unclassified_tcp", "frame_number": 54406, "timestamp_epoch": "1634915646.602580000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff8d9a36a6602339523381cd", "kind": "unclassified_tcp", "frame_number": 54407, "timestamp_epoch": "1634915646.602588000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8d72894a7f3495874de82f9a", "kind": "unclassified_tcp", "frame_number": 54411, "timestamp_epoch": "1634915646.602827000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a8386a9f6da28d94155f9b5c", "kind": "unclassified_tcp", "frame_number": 54414, "timestamp_epoch": "1634915646.605799000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8d14070767aa68b08583d4d3", "kind": "unclassified_tcp", "frame_number": 54416, "timestamp_epoch": "1634915646.648929000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f8c395e692c9c0b6e950edea", "kind": "unclassified_tcp", "frame_number": 54417, "timestamp_epoch": "1634915646.649217000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200aef10c0000000100" } }, { "event_id": "evt-57f3893da29f868556385af4", "kind": "unclassified_tcp", "frame_number": 54421, "timestamp_epoch": "1634915646.753771000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2ffb58edc502394531fffd12", "kind": "unclassified_tcp", "frame_number": 54424, "timestamp_epoch": "1634915647.126861000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bc86b3eda5014e8c2474d734", "kind": "unclassified_tcp", "frame_number": 54426, "timestamp_epoch": "1634915647.141545000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900370000000140303000101170303003582ab3329bc39963a898251dec605a3d64cd19d691eaad707b9087df36034fcfee2df453d887a88d58b6af6b8e9e7b3b6039ebb4fdc170303002102648099dcbd3625478b9e976db0c5ef1528e426aa00c6d3a5fdcb0bb6a9fb756c04070200aef12400000005010003136d61696c2e616b696e616f2d6c61622e636f6d0019" } }, { "event_id": "evt-4e5298bf7c55b1b6ef5b3b1c", "kind": "unclassified_tcp", "frame_number": 54437, "timestamp_epoch": "1634915647.445917000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef114000000050000010a0a169cc333" } }, { "event_id": "evt-f19cdbfab8c74a851d87fe41", "kind": "unclassified_tcp", "frame_number": 54440, "timestamp_epoch": "1634915647.452250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003f900000017030300ea290b812c0bec8981ce1e51b3a9ba3f6b056cf6fc97f7ade0ae803d549f0deab97df9d2599a26bde3c485dafc00d4da2daf85d56f1a571dfeadfb19c2625122db104fb6c70c5694e8e8d3baf86bb9a305d1e432d9e59735ed63a1b9e8c01eb8391a4fcd3064c4025721425e180ab897a75adbf42de6959ae5ade7f333da65111573ec2de6100c9945bd15e8b4c8fc87d70a28b55a13161defed5f8ac2a676119dcb635313ba38768a8cbe9a35b78587dad68592e77bf6bfc083b3211d47c51d6589c873e4d215a307ca67e556720c26ea5f1e7163d8e8c828ec1de96e081cc73189310e5adefb817f2c29" } }, { "event_id": "evt-cc221daf861d69c3f4038c1d", "kind": "unclassified_tcp", "frame_number": 54444, "timestamp_epoch": "1634915647.594494000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef134000000323230204741524d2d393547303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ad9ac759e42233ad877a7409", "kind": "unclassified_tcp", "frame_number": 54447, "timestamp_epoch": "1634915647.601450000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003c600000017030300b7e704cc6910761db408062ceafa46104b1bde5ab518c88ca88ee99b37462410a74817594683336109ac710dba2ec657532d1186f3f6176de58ff6b5056778f326d2f83ae334ca8ba11a165cbc6c2e32be804271e574bb8ae07308a879648427fc3e346da84b71a5c34ed37d39eda3ee627c0b9bf9b7c56f5dc723fc67808b45319fe4af982e606998e41937bb5824babc3a8abfbd0cbe7a86a2f92867000d7a4cdc63ba3e91ac06dcb525f404f22723494177967558c898" } }, { "event_id": "evt-b168d90dee86f0d515b1cbcd", "kind": "unclassified_tcp", "frame_number": 54452, "timestamp_epoch": "1634915648.043515000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef11a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f450cab6b245621fb9cb3e7c", "kind": "unclassified_tcp", "frame_number": 54457, "timestamp_epoch": "1634915648.193776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef1990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-1f91a19d6c69f2d0da4e4b0f", "kind": "unclassified_tcp", "frame_number": 54461, "timestamp_epoch": "1634915648.439292000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090032c000000170303001d9d0a4cd7225f8760cf9a5ac73adc1a0cfced0383350530dfbcc39006d5" } }, { "event_id": "evt-ca98386ce9c635c839543f6c", "kind": "unclassified_tcp", "frame_number": 54466, "timestamp_epoch": "1634915648.594723000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900332000000170303002358182240700851481bbd0268a6e652bddc5646ffa808ede9fbf7a8d8279eda339f6ee6" } }, { "event_id": "evt-ed531ba3ae0e3e7711462d08", "kind": "unclassified_tcp", "frame_number": 54468, "timestamp_epoch": "1634915648.621035000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef1140000005354415254544c530d0a" } }, { "event_id": "evt-dbfd5a4a4f8f5c67813a3d5e", "kind": "unclassified_tcp", "frame_number": 54474, "timestamp_epoch": "1634915648.769800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef12800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-4ebab58c1b539b6b0119f076", "kind": "unclassified_tcp", "frame_number": 54477, "timestamp_epoch": "1634915648.999635000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900342000000170303003381c3d01fdd975020fff95432556e3a27581890fd831e468e0a60c1a6ef4412258829bdbc726d14017833c8fac892bdaa50b622" } }, { "event_id": "evt-76010b53d2598f710ce6e07a", "kind": "unclassified_tcp", "frame_number": 54482, "timestamp_epoch": "1634915649.154903000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090033200000017030300235327740713f300d2448f39d88b6a4cf10ecda7e1f151e04333ea729c3421346041932e" } }, { "event_id": "evt-db9ffa36ff07571fb8d0b6fb", "kind": "unclassified_tcp", "frame_number": 54484, "timestamp_epoch": "1634915649.179128000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2e21ffde853c5e61c3ba07d9", "kind": "unclassified_tcp", "frame_number": 54496, "timestamp_epoch": "1634915649.337250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8fccad18cc35d882864818e0", "kind": "unclassified_tcp", "frame_number": 54497, "timestamp_epoch": "1634915649.337262000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372" } }, { "event_id": "evt-6262230db8f44806fc96cc49", "kind": "unclassified_tcp", "frame_number": 54498, "timestamp_epoch": "1634915649.337270000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-987f5397c0d6a2a269da076e", "kind": "unclassified_tcp", "frame_number": 54502, "timestamp_epoch": "1634915649.337611000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9557b16c98b5fcdd15e5a5b7", "kind": "unclassified_tcp", "frame_number": 54504, "timestamp_epoch": "1634915649.505236000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090033200000017030300231dc7d44a016eae5a742bb649387558f6cf9684af3f341eef75a7a131bde06b3519889a" } }, { "event_id": "evt-1f3f1ce4710d68e4ed985db8", "kind": "unclassified_tcp", "frame_number": 54508, "timestamp_epoch": "1634915649.749193000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef1e4000000160303008a10000086850400c38ec7f5f8a7938a08f9be6cc0e1628543f1c47934badcff8f6db352ea76b7f3b894ed57b0edabf7d4020374c0a91989ed2882b3d941da429da8425cb9bb1be535006e25fea5ecfea2c5b8bdabdd1546471c9cd5487182efcfdcbbea916a2093f7327e737e3d6bd3c82d4491e66bf9d9b4af6716bd57b68a15900d8f5e1da471c44dfa14030300010116030300402477930d543f714dccc144f6756f72981dec5960bdf0dc6a77db58565d234abe468f0599ef49df12b01c95d76abc0837f2ff75db32332c74e5fdad5ef2b6f073" } }, { "event_id": "evt-964125823a92063cf3e45266", "kind": "unclassified_tcp", "frame_number": 54513, "timestamp_epoch": "1634915649.799693000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900360000000170303005148dd5db19e1af73d60930348d2b5a735ca5eff35e61f3707406726178fca294b7c51b8455cdb710884178c26fd8f67ec371914fffdda91aabb80666ecfbca1f80e2825893dc60ab48b141988fc757daa90" } }, { "event_id": "evt-bd1eed423846bbb600607994", "kind": "unclassified_tcp", "frame_number": 54517, "timestamp_epoch": "1634915649.900736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef1550000001403030001011603030040a6a41c4affc27c705fc2b84a6b739ef7738901d58b60a55bce68f033bfecf40a9599b4abdafc242596fd495721bce3fef48ee48cb8980bc78dc22d646b36e28a" } }, { "event_id": "evt-df2871d9ecf1ba808e013622", "kind": "unclassified_tcp", "frame_number": 54520, "timestamp_epoch": "1634915650.051194000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003230000001703030014b670ebde63857166fb3cafee6d4f24e2f0db7886" } }, { "event_id": "evt-30a8120198ff0a1dad12cd0d", "kind": "unclassified_tcp", "frame_number": 54525, "timestamp_epoch": "1634915650.213580000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100900349000000170303003aa62efd20b377ccefb1770bfdb7f163209fdb45ec724a7b4b3d91e2f4562362f08c07fcd3fc4d79cbfd3101dff1b3406feb21170bae9458bf8003" } }, { "event_id": "evt-56249e08d4c9f92630677183", "kind": "unclassified_tcp", "frame_number": 54529, "timestamp_epoch": "1634915650.366221000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef14f0000001703030040a4ef1f64009f7d1c70cd591e693eb2708a127138a61c5187da64a4b406c2ec1c7fbcd7f6471782a3bdc3fbf7275a3e35102f3430103a3960da6baeb0454da992" } }, { "event_id": "evt-92cb4fb5eb83254b885e2c46", "kind": "unclassified_tcp", "frame_number": 54536, "timestamp_epoch": "1634915650.512488000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-98df576a914414c192865926", "kind": "unclassified_tcp", "frame_number": 54538, "timestamp_epoch": "1634915650.561683000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003260000001703030017d77d784cd874121c6438d03c8c3b57290d961e392a41ec" } }, { "event_id": "evt-926e191caa356981aae54cfd", "kind": "unclassified_tcp", "frame_number": 54544, "timestamp_epoch": "1634915650.723425000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009003470000001703030020aa2ac58ef0e7f754d8b200be70c7778ffa28a532c45afe254c3193114027b110170303001335da21880a39a9ca91061049973910c4253fa1" } }, { "event_id": "evt-af3470bafb8c2a85a99aabd6", "kind": "unclassified_tcp", "frame_number": 54548, "timestamp_epoch": "1634915650.724108000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010090030a000000" } }, { "event_id": "evt-1d21a96109f2c2eeb00776bd", "kind": "unclassified_tcp", "frame_number": 54550, "timestamp_epoch": "1634915650.971752000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010090032200000017030300132760538e02e3a2020e497485be2165f5721ced" } }, { "event_id": "evt-2d6d895c5855393cda1a7877", "kind": "unclassified_tcp", "frame_number": 54552, "timestamp_epoch": "1634915651.178283000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010090030a000000" } }, { "event_id": "evt-74c0853b808a43a89b5b3368", "kind": "unclassified_tcp", "frame_number": 54556, "timestamp_epoch": "1634915652.048764000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef14f0000001703030040f9f7bfba8fb90504768ad99e70f1c3e4c97ed7929b9d54464fe74c87b6beb793b9f52d350a98cf925fbb4e1c18023c15141e7286330b4ccf5c6adb3b204595ee" } }, { "event_id": "evt-78a690473f65f30212803db6", "kind": "unclassified_tcp", "frame_number": 54561, "timestamp_epoch": "1634915652.231102000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef14f00000017030300409d2132541a2b575caebedfc971cf81b5903d04e83a71406ccfa065723a6b5935a09248a25b2fd1ea81b9bb2e343f5743a8fb7e9509711cb11bd23346d7b37f05" } }, { "event_id": "evt-a3c1203019cbffa6bf7a41a5", "kind": "unclassified_tcp", "frame_number": 54565, "timestamp_epoch": "1634915652.627271000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef15f000000170303005062ebdd2cfae0f45828e2b28828bdf1b89f715ffe3a1627fa2e971291fb1317b5a5a45e5e106c036596863333bbad7d3f9e2bba7e0a0ba4b1dd8792870f694c0c7957da4b31a9c77c268a049f885421e6" } }, { "event_id": "evt-6c7063006f5ee7d8db5c6bf7", "kind": "unclassified_tcp", "frame_number": 54570, "timestamp_epoch": "1634915652.780935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef14f00000017030300405287a657eafcaa87d1bbffc35fd25d2c8c755005cdd48dcf0a16dfffa4d639ba38cd6f0b515eaa4cefa3b83323baeb0a6f4894432dfdc34fc2bcfd59cfa1dc57" } }, { "event_id": "evt-7bb7f8cf18042679eca3c7b8", "kind": "unclassified_tcp", "frame_number": 54573, "timestamp_epoch": "1634915653.126890000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fb483c5be41a7baf43c52e2c", "kind": "unclassified_tcp", "frame_number": 54575, "timestamp_epoch": "1634915653.206329000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef14f0000001703030040a1f4149cd007cf66bdf8a2610127a91cc6329e34a5fd32119a33156fd3ffef170bf85a8d177f81daf28f5ff3f5a5e6df4361fd259dbbe2e90a0d11f46aee177e" } }, { "event_id": "evt-508132d0759051f6be961a41", "kind": "unclassified_tcp", "frame_number": 54581, "timestamp_epoch": "1634915655.076086000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d73d0c000000197b" } }, { "event_id": "evt-b975985eee4a208ce83c5575", "kind": "unclassified_tcp", "frame_number": 54584, "timestamp_epoch": "1634915655.260613000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d0e00000005020002" } }, { "event_id": "evt-cd1c6c5a079fae771da4435f", "kind": "unclassified_tcp", "frame_number": 54585, "timestamp_epoch": "1634915655.261187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d73d0c0000000502" } }, { "event_id": "evt-bd7b2e470a9fec0c01a72f67", "kind": "unclassified_tcp", "frame_number": 54587, "timestamp_epoch": "1634915655.501615000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6bce6662ebb4f1c4cb240685", "kind": "unclassified_tcp", "frame_number": 54588, "timestamp_epoch": "1634915655.502246000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d73d0c0000000100" } }, { "event_id": "evt-923c2fb735fcfcfa8048da14", "kind": "unclassified_tcp", "frame_number": 54591, "timestamp_epoch": "1634915655.629840000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef15f0000001703030050785f9bb9dd3e5c602f2b52c6745a8014afc2b98dab9a6538a5f458f6865df4fa1b96100e0018e3afee2ab0a3adbb718eb6e9ec845688bc029461be27c13347dc90370d22de8f83531530961f3282d0c5" } }, { "event_id": "evt-7b46897db9c40a85207ede94", "kind": "unclassified_tcp", "frame_number": 54594, "timestamp_epoch": "1634915655.860237000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-da1b546075a4df85f607e9f0", "kind": "unclassified_tcp", "frame_number": 54601, "timestamp_epoch": "1634915655.950026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d14000000050000010a0a169cc334" } }, { "event_id": "evt-aabd186ab283d4a916e16952", "kind": "unclassified_tcp", "frame_number": 54604, "timestamp_epoch": "1634915656.009006000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d7b00000032323020534e365052323130314341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31343a3135202b303030300d0a" } }, { "event_id": "evt-be754b0b3332478b7fe713a0", "kind": "unclassified_tcp", "frame_number": 54606, "timestamp_epoch": "1634915656.039268000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef13f0000001703030030cd9276e862ee9687bec46f785e653bab70cc2404b45ec53bff2762f248ff5e3941e42913ad04cb6fd4662c55c2f96244" } }, { "event_id": "evt-a826e0b5a21926690e5fe32b", "kind": "unclassified_tcp", "frame_number": 54612, "timestamp_epoch": "1634915656.340309000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-908c31802381fea661867667", "kind": "unclassified_tcp", "frame_number": 54617, "timestamp_epoch": "1634915656.392294000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73dda0000003235302d534e365052323130314341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-aaa0b29af9de655fc22a4699", "kind": "unclassified_tcp", "frame_number": 54620, "timestamp_epoch": "1634915656.756507000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d140000005354415254544c530d0a" } }, { "event_id": "evt-cfc00df40936d439b5439728", "kind": "unclassified_tcp", "frame_number": 54625, "timestamp_epoch": "1634915656.798075000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-1469ea09b0b9f4a3cf8b33af", "kind": "unclassified_tcp", "frame_number": 54628, "timestamp_epoch": "1634915657.178055000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-afbfa9b25a788f6d698303a9", "kind": "unclassified_tcp", "frame_number": 54634, "timestamp_epoch": "1634915657.254155000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fd88fa06d4bb5bb8508a1d51", "kind": "unclassified_tcp", "frame_number": 54640, "timestamp_epoch": "1634915657.334207000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-658fcc1eef0fa14ac34059e3", "kind": "unclassified_tcp", "frame_number": 54641, "timestamp_epoch": "1634915657.334230000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5e303f3c3d1af2b5669ec71a", "kind": "unclassified_tcp", "frame_number": 54645, "timestamp_epoch": "1634915657.385720000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d6703000001cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313031383030343835305a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313031383030333330365aa011180f32303231313032343233343830365a300d06092a864886f70d01010b05000382010100690f5e183cc8e58d912221fa501e1c0e667367b8404fdc3e8e480809ff45fdc70b9c2fa8a452882dfe9d27eabb1f4255a25cb8e8ba377e83f07ec6dfddc99860ec384c5e858468c93d649b089c71c4793e4cfcab0211118a89c4f77855c7ddf8317a395e1153c8d99161e9e21bdba2fe446414247cb89b98b497e4fceef4f9b925961e3beb7da07cc2dac5ee2f0f24378088c398cbe3904ba0b684248d97619980e85e4910a6316fe739be1c8fb31673d6d51bdb9c330ea942b8a23aea7c63ca2b080f6c9b16a0e70b489681749548750c5551aeac02cea7daaedb053cddd854565e11f468c61b5ef74391c5eddec95ea5cb4274c43df07b64ac70ff631e3b5b0c0001690300186104481f31fc20b5929f21abd196b70d6cdbf10d19e1ca54e544b05c41ee9b466d0d24df5ab0c4490e05961b03d8905851729ca1bf0ef781a160ace5ff16e3c0aced16f50b4fc211952826f47741e0e687e33d349e2536ea4971ac6baa67ef6dd1b8040101006f9dacce8d8c923748dfcc30c6a7ec4667f4adbd299a8c96943f69a75e506361cb102f604f4328231c4252ed910bee4042a2aafe9b344e0559276672d5bd35c759dc3cc1da7e22f7bf5c5671e53bf3d690b3d65ac6503624ed96a259121dd22156596e87af63a626887a1d761162584f3a729a2d0c5d5b3bb558e53b9d4540ed906862459c4d68b349e92447222b70366fbd898229248b884770bbc3132bd7fe267e709fa76a2cb70b5a65d91913a484c07fff7b6f16e1c403c8f0e6376f0f3f44a2bc1727879f1974e38f7ca5a74f6b41bd4a094f2e5b2de7eb08ce2a686bdd326e7ac6d7f88de69ae55974b8e59133911c1ecbc61d417739940a19147a5c230d00001a03010240001204010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-f4d20aea043d31646966bfc0", "kind": "unclassified_tcp", "frame_number": 54648, "timestamp_epoch": "1634915657.758135000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73db400000016030300070b0000030000001603030066100000626104f8c0caa3fb6c32c4e23d34089544132bc940718a2574f8d5e2e9fdad45a3133b2d147ab79c2bf214257256d202702895866a6c5bec3ad4f0440de798d39d4129785b2150dd37560f83f2cf3b89e7e350f72eadfaa26b51091b82cb075189a4f01403030001011603030028000000000000000074a17d132dbd2a589944659f4f082064443cb1463d49cb10a126cdb334e2fab2" } }, { "event_id": "evt-8b30747bf8a065c879bfd8be", "kind": "unclassified_tcp", "frame_number": 54653, "timestamp_epoch": "1634915657.815780000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d3d0000001403030001011603030028000000000000000098d7f4efd9ffa59c215d07fd5edeaf6a1d9336ad33cb6c1ccf5b417e55909d64" } }, { "event_id": "evt-34d7dc6da7b6cd19409f15ca", "kind": "unclassified_tcp", "frame_number": 54656, "timestamp_epoch": "1634915657.998503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070400dc950c000000197b" } }, { "event_id": "evt-fd726d2594b48833e1d683a3", "kind": "unclassified_tcp", "frame_number": 54658, "timestamp_epoch": "1634915658.180789000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc950e0000000502000204070100d73d3700000017030300280000000000000001f20ac5e86f41ea7a582128b3db857dad50f87be3e3c7c83d4146b8885cc4e3a2" } }, { "event_id": "evt-554122fa7ee405bf804248e1", "kind": "unclassified_tcp", "frame_number": 54659, "timestamp_epoch": "1634915658.181406000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400dc950c0000000502" } }, { "event_id": "evt-e2057e1be38b2f42fc195d66", "kind": "unclassified_tcp", "frame_number": 54663, "timestamp_epoch": "1634915658.204237000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d3c1131d0de4cb5fd084b63b", "kind": "unclassified_tcp", "frame_number": 54666, "timestamp_epoch": "1634915658.230161000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2778620d6d1e3b4dd4b2f53a", "kind": "unclassified_tcp", "frame_number": 54670, "timestamp_epoch": "1634915658.536688000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-608e82953a0d04d0a6c4203c", "kind": "unclassified_tcp", "frame_number": 54671, "timestamp_epoch": "1634915658.537273000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400dc950c0000000100" } }, { "event_id": "evt-a6e2c7d20565a99b44f3021f", "kind": "unclassified_tcp", "frame_number": 54673, "timestamp_epoch": "1634915658.947367000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-f3edf6a40210a8e68522a49c", "kind": "unclassified_tcp", "frame_number": 54678, "timestamp_epoch": "1634915659.010199000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9514000000050000010a0a169cc335" } }, { "event_id": "evt-2c83182e9ee72c73b3395d74", "kind": "unclassified_tcp", "frame_number": 54681, "timestamp_epoch": "1634915659.063503000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc957b00000032323020534e365052323130314341303030392e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31343a3138202b303030300d0a" } }, { "event_id": "evt-7f74b61c40026a37c775c12a", "kind": "unclassified_tcp", "frame_number": 54685, "timestamp_epoch": "1634915659.354401000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d3300000017030300240000000000000002d3d78ffbd7d864e5193bcab925da1d37147a3620a4b01763b1fad149" } }, { "event_id": "evt-b655a06681479969c34ee813", "kind": "unclassified_tcp", "frame_number": 54689, "timestamp_epoch": "1634915659.396824000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d39000000170303002a0000000000000002e5cdcb4b6eb43709d54950deab1fbb860722114c20d310c3e2208fdc4f18d479449d" } }, { "event_id": "evt-f15dac6979b915122653fe15", "kind": "unclassified_tcp", "frame_number": 54692, "timestamp_epoch": "1634915659.531114000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc951a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-fc681b60ccee78a92a414051", "kind": "unclassified_tcp", "frame_number": 54696, "timestamp_epoch": "1634915659.575926000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95da0000003235302d534e365052323130314341303030392e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-0b0619932713340dee8c1826", "kind": "unclassified_tcp", "frame_number": 54699, "timestamp_epoch": "1634915659.817474000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d5100000017030300420000000000000003bd718051aedae5aeee7b65258d76f0513536a07f6ab8d70374ebb53810e07aae66986f795ea8758b3271f0fabe59034ad6ac032cb03bde4435ac" } }, { "event_id": "evt-ef93dea3148fe957a4ff001d", "kind": "unclassified_tcp", "frame_number": 54703, "timestamp_epoch": "1634915659.869994000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d39000000170303002a0000000000000003347e1864bb9d7629299890ac92357095ce04467e1433fee3d172f6cae48d38a0a018" } }, { "event_id": "evt-7a48660526bbb5bfb41db86d", "kind": "unclassified_tcp", "frame_number": 54706, "timestamp_epoch": "1634915660.002533000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95140000005354415254544c530d0a" } }, { "event_id": "evt-0ca07afed3f2344434431ad5", "kind": "unclassified_tcp", "frame_number": 54712, "timestamp_epoch": "1634915660.047579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc952700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-549aae2b3f5ae93273292b99", "kind": "unclassified_tcp", "frame_number": 54716, "timestamp_epoch": "1634915660.257402000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d39000000170303002a00000000000000046b672ed28fe551484c0e0ada32e14f1f83b2a4d9cd3b6b7b845b55e3e03526fea829" } }, { "event_id": "evt-5243d37aa04233a3f348502a", "kind": "unclassified_tcp", "frame_number": 54720, "timestamp_epoch": "1634915660.446577000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0ad4620f5f4e908ea6cdf53a", "kind": "unclassified_tcp", "frame_number": 54725, "timestamp_epoch": "1634915660.522372000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b6d134ef8bc1a6f3095b4372", "kind": "unclassified_tcp", "frame_number": 54732, "timestamp_epoch": "1634915660.595300000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc956a080000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d" } }, { "event_id": "evt-bc5d13ec320a8e7d6bca2bbf", "kind": "unclassified_tcp", "frame_number": 54733, "timestamp_epoch": "1634915660.595314000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-57fb8b7038472d92a9da5a59", "kind": "unclassified_tcp", "frame_number": 54738, "timestamp_epoch": "1634915660.647415000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff3786007d2663b6cf1af722", "kind": "unclassified_tcp", "frame_number": 54744, "timestamp_epoch": "1634915661.110769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95b400000016030300070b00000300000016030300661000006261044f8e7a2890f101d35df246d7c4e105c6229943700ed6ad2203183b70dbdd1f732b6ffc937fb668e5b1ea1d335a868c2fbd1a511aa16d79e8acdc273e46778d20a5034b67ea1297ca869f938db154471399f72448fb05b35ee85522bc3cf6cc2a14030300010116030300280000000000000000b8e54f724aa5fc2db4d5c0e99f9486a6bce28e93e28290a991f188af7074b7ac" } }, { "event_id": "evt-21e96bffc8e2b5ea22bb6d10", "kind": "unclassified_tcp", "frame_number": 54749, "timestamp_epoch": "1634915661.161951000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc953d000000140303000101160303002800000000000000006730ef8c844fea82ebb65280a2c46b29c376ecc0b5edf0c38fd24844a5274ffa" } }, { "event_id": "evt-3ba57dfc833fcc37f09cf5fc", "kind": "unclassified_tcp", "frame_number": 54753, "timestamp_epoch": "1634915661.535448000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95370000001703030028000000000000000187bb6b7db998eb436dba7c86a9f12be6ba3250dc18e340bfef9a332ec42fccc3" } }, { "event_id": "evt-3d6cf185e229cbd7911ca16a", "kind": "unclassified_tcp", "frame_number": 54758, "timestamp_epoch": "1634915661.580960000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c825c07d49a5413731600efd", "kind": "unclassified_tcp", "frame_number": 54763, "timestamp_epoch": "1634915662.493768000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc953300000017030300240000000000000002beb8cfe4b8a2630f4ce73304b3fad8e6c7768a79f82b5642f8fad7e7" } }, { "event_id": "evt-9ef1c413ab803825afe50190", "kind": "unclassified_tcp", "frame_number": 54768, "timestamp_epoch": "1634915662.547457000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9539000000170303002a00000000000000024f71ccbddde90dbd606935553aad55bb9b145b1e5775d7fad251e451cf9d88d83af5" } }, { "event_id": "evt-2b3942f488a7436a37fc06c0", "kind": "unclassified_tcp", "frame_number": 54771, "timestamp_epoch": "1634915662.910864000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc954100000017030300320000000000000003678ff9ab11c511270319379840a7f3dddae19413c78b46f1d9efc832b44baca149b1e324f7d2fe13d95b" } }, { "event_id": "evt-7ece0341d7b4b8d98447c9b5", "kind": "unclassified_tcp", "frame_number": 54776, "timestamp_epoch": "1634915662.960258000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9539000000170303002a0000000000000003145503a850e26aac69caec752705a28c823cc950f2e8320eb25a4723828c1c1c56f1" } }, { "event_id": "evt-c96c92fddfc7c78f60aa16c6", "kind": "unclassified_tcp", "frame_number": 54779, "timestamp_epoch": "1634915663.251219000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1c9b35f6ac0c9479c126ae7b", "kind": "unclassified_tcp", "frame_number": 54782, "timestamp_epoch": "1634915663.415451000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95350000001703030026000000000000000411ccf8c9026f590e30302d7f6979b40458f0e22aeb800dbfb27faaa6e5e7" } }, { "event_id": "evt-7605db375375959352b1e316", "kind": "unclassified_tcp", "frame_number": 54791, "timestamp_epoch": "1634915665.268040000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d2d97c0eb8e3d0471050bc83", "kind": "unclassified_tcp", "frame_number": 54794, "timestamp_epoch": "1634915666.078306000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c5f0000001703030050a8427d9edcbae4ec9e68595936e7cf4a1bd571f35d345a31133a0f7cb73a87d5693bc97036d66b01737af1dce1926ecf45757a9b0873a948e89782c2cef8dd4c831eab9da2c45909a98b490924cfe42e" } }, { "event_id": "evt-383304e1d8ee483f9e8375ba", "kind": "unclassified_tcp", "frame_number": 54798, "timestamp_epoch": "1634915666.589856000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c3f0000001703030030bc926e6fd342d520a5fa3dd1d198b5df0ebd92f61d3d6a9fe9480aede31c92b6b331a8ba5d6d83bfbecd290ed62d1c13" } }, { "event_id": "evt-4f13a22cf96c1b47f1b303f7", "kind": "unclassified_tcp", "frame_number": 54805, "timestamp_epoch": "1634915666.751449000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c6f0000001703030060693a460b4b1233019fb02110cd39c242fc9537cb1a50a4cfac5d1897fe5378ae56492705e1063fd102a04b6cf7f9d11d981c855cb77d3a1cf9ab2d04b4ef37931b8412f9536d05ac2bae1fdfb025b1042a1e59586f005bb66b97e01ff984eb7b" } }, { "event_id": "evt-4ad50f507bfc85ae92750bb1", "kind": "unclassified_tcp", "frame_number": 54809, "timestamp_epoch": "1634915666.751878000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300053c0a000000" } }, { "event_id": "evt-d8ebc92e644e8158094905c8", "kind": "unclassified_tcp", "frame_number": 54811, "timestamp_epoch": "1634915667.016115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300053c3f00000015030300304f13b2cadf91bee44e6e704fc1b59549e9b5d86fab9b5fe0b1acd73a5b6859ddf0afbb7dfaa0b11ba8fb25f324905309" } }, { "event_id": "evt-7ab9a1999910c7f0e5689ff8", "kind": "unclassified_tcp", "frame_number": 54813, "timestamp_epoch": "1634915667.190780000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300053c0a000000" } }, { "event_id": "evt-f46f078025fadac022341700", "kind": "unclassified_tcp", "frame_number": 54819, "timestamp_epoch": "1634915667.512145000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73da200000017030300930000000000000004a6d9b39ed03541f9167c5a94e892da720e5f3e8fa4b2a14cc2dee114212644e23d700f12cf772e7736306078fe975283a5be686797c50d13cf62e252e6584a3354b9fefffd55ef812f89caa66a42b727137095d37997ce99b36dd42b1e72515e1c6485e604cb0aef90f333a0308724bc1e4b6d8c0001b4a3347db906a814227562a0ed65144c6dd5e9f0b8" } }, { "event_id": "evt-fa1f23d23041b3307b577767", "kind": "unclassified_tcp", "frame_number": 54822, "timestamp_epoch": "1634915668.031436000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d2a000000170303001b000000000000000523d770f2fda90f0e438bd395908c6a1ba3cdc1" } }, { "event_id": "evt-326cfa26b2b3133c56aa2073", "kind": "unclassified_tcp", "frame_number": 54830, "timestamp_epoch": "1634915668.298730000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0ad5bbadcb4009e710fd16cd", "kind": "unclassified_tcp", "frame_number": 54836, "timestamp_epoch": "1634915669.971187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc95a20000001703030093000000000000000471f380ad03d5443ca9fe2887047130172a83ba2dea2a4c5145baf17f69de27ddb36b9059eb0a9284c9d8ab1ec7f4b6e5e45a05c41e6acabc01c9c76d6bfa1b8d1fdecee571377444f100db49677a0168824c2df6c3840b070a2d5c506312169fa8b139871164ad7144bfd2210776ac0e283679ca26bb957406dd99830665a005595dff0fea9719390b1359" } }, { "event_id": "evt-e5df4fb085a090a7cea006a1", "kind": "unclassified_tcp", "frame_number": 54841, "timestamp_epoch": "1634915670.249260000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc952a000000170303001b000000000000000534f3f7e80d92a38efeab5309c18f3ef841f727" } }, { "event_id": "evt-e17f9bf806986f9761c9e4cc", "kind": "unclassified_tcp", "frame_number": 54849, "timestamp_epoch": "1634915673.145574000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d7700000017030300680000000000000005649469b72f88dc4dc1a50dd4cea5d25d082604ac559294b9876f06e7190992868e7dd53a4b6181ea0c679f52a23190f8b3647470db3b0cb99066e38928befb6953984252a81a76c334166c97914a748f8b41d6225f7f57ee44fd12839d34acf2" } }, { "event_id": "evt-b8e131847e29d21ab3dc6991", "kind": "unclassified_tcp", "frame_number": 54853, "timestamp_epoch": "1634915673.377291000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c4fe4c50b4e4bb508872eb8c", "kind": "unclassified_tcp", "frame_number": 54855, "timestamp_epoch": "1634915673.458724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d2d000000170303001e0000000000000006d3da06637714d5744147e68d8c9f18feb35f1755353c" } }, { "event_id": "evt-4aeae6b3ffd073624ea2604d", "kind": "unclassified_tcp", "frame_number": 54861, "timestamp_epoch": "1634915673.512662000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d57000000170303004800000000000000068967c7218df774443cf3aceeae9b604aa8d5a5f9d749800026c64ba7443610e5d71495cb5b762165b63410314860c7cb47605441b2fcc1cc06f52e7c9837a353" } }, { "event_id": "evt-a8affd5e2a363a8668b7e5f6", "kind": "unclassified_tcp", "frame_number": 54865, "timestamp_epoch": "1634915673.513194000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d73d0a000000" } }, { "event_id": "evt-ffd810063db9b428362966fc", "kind": "unclassified_tcp", "frame_number": 54867, "timestamp_epoch": "1634915673.838753000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d73d29000000150303001a00000000000000074c080c973a760abd586ec9e7222278db1c71" } }, { "event_id": "evt-e8c9a15f473814ab5e76c7a3", "kind": "unclassified_tcp", "frame_number": 54869, "timestamp_epoch": "1634915674.025489000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d73d0a000000" } }, { "event_id": "evt-cd7be51add1a13ddfe82e1b2", "kind": "unclassified_tcp", "frame_number": 54874, "timestamp_epoch": "1634915675.397184000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc957700000017030300680000000000000005c02618196cff3dada1b9f25caa4ca6c88d164ab559c066b4fbeb10d2e8971832c5ca3a5671ad527b8e2b262a2fa1d0d23194875c8ab960aecf56cc35899eba16ddc1315c0bbf00c70872736a2437e2f6e8249a56a41c15dbc7d4a90174e2da99" } }, { "event_id": "evt-82f7bf33b59eb5bebcd3bae5", "kind": "unclassified_tcp", "frame_number": 54877, "timestamp_epoch": "1634915675.659766000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc952d000000170303001e000000000000000669dc6d36b24ebbbe9dd2266d3489855b470638f3867a" } }, { "event_id": "evt-6e27bc2ce442fbb0619b5a51", "kind": "unclassified_tcp", "frame_number": 54883, "timestamp_epoch": "1634915675.711799000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9557000000170303004800000000000000063a78b381fb06b2898d4e9470b9465c185b8acac1f54413ff266d5c043abd1e0816b1c6fc6751086b1ce17c41811e862a2c4dc681fbe3e745d27937e811dc7b3f" } }, { "event_id": "evt-8a4f8d59f0669092766d4969", "kind": "unclassified_tcp", "frame_number": 54887, "timestamp_epoch": "1634915675.712358000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400dc950a000000" } }, { "event_id": "evt-a499d136f2d9b8d59017c6cc", "kind": "unclassified_tcp", "frame_number": 54889, "timestamp_epoch": "1634915675.975673000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400dc9529000000150303001a0000000000000007db94aac054da89bbdcd862cd3e226ae4d582" } }, { "event_id": "evt-ce7d997ffcc12e3abd4d4a26", "kind": "unclassified_tcp", "frame_number": 54892, "timestamp_epoch": "1634915676.161547000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400dc950a000000" } }, { "event_id": "evt-c5cc6c9d5445aa2acd94b122", "kind": "unclassified_tcp", "frame_number": 54897, "timestamp_epoch": "1634915678.378023000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-790bfe51beaace6a8d90af07", "kind": "unclassified_tcp", "frame_number": 54906, "timestamp_epoch": "1634915683.392433000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a28a8f386fd8363800c5f861", "kind": "unclassified_tcp", "frame_number": 54909, "timestamp_epoch": "1634915684.612497000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701001f230c000000197b" } }, { "event_id": "evt-9527a7b8b4d9ea0529e56924", "kind": "unclassified_tcp", "frame_number": 54911, "timestamp_epoch": "1634915684.800322000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f230e00000005020002" } }, { "event_id": "evt-92e2613314b0d00d39d65bd3", "kind": "unclassified_tcp", "frame_number": 54912, "timestamp_epoch": "1634915684.800666000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701001f230c0000000502" } }, { "event_id": "evt-ca4b03db5e7eba1b967c4f03", "kind": "unclassified_tcp", "frame_number": 54914, "timestamp_epoch": "1634915685.133132000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-59c52c372ead62e593affbae", "kind": "unclassified_tcp", "frame_number": 54915, "timestamp_epoch": "1634915685.133697000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701001f230c0000000100" } }, { "event_id": "evt-3c9956f8d8cb38cc44c05874", "kind": "unclassified_tcp", "frame_number": 54920, "timestamp_epoch": "1634915685.497870000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-f07017943a3bbe15cea21ab9", "kind": "unclassified_tcp", "frame_number": 54928, "timestamp_epoch": "1634915685.736411000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2314000000050000010a0a169cc338" } }, { "event_id": "evt-d65eb2cd800046ed2ea7a67d", "kind": "unclassified_tcp", "frame_number": 54931, "timestamp_epoch": "1634915685.785745000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f237b00000032323020534e345052303530314341303034312e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31343a3435202b303030300d0a" } }, { "event_id": "evt-be1695d2eeb0a100f76b8e78", "kind": "unclassified_tcp", "frame_number": 54936, "timestamp_epoch": "1634915686.435463000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f231a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-93ed472f6e9cff5a2f43f681", "kind": "unclassified_tcp", "frame_number": 54941, "timestamp_epoch": "1634915686.564748000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23da0000003235302d534e345052303530314341303034312e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-e2efcda7d515a5f9de19a330", "kind": "unclassified_tcp", "frame_number": 54944, "timestamp_epoch": "1634915686.863985000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23140000005354415254544c530d0a" } }, { "event_id": "evt-3288cb8eef9c6302603a3829", "kind": "unclassified_tcp", "frame_number": 54949, "timestamp_epoch": "1634915686.922360000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f232700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-05e4657a6ae51d247b91ae23", "kind": "unclassified_tcp", "frame_number": 54953, "timestamp_epoch": "1634915687.277123000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bbdd208adc90072f134704c7", "kind": "unclassified_tcp", "frame_number": 54966, "timestamp_epoch": "1634915687.368607000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fe6cf08295a005910619978e", "kind": "unclassified_tcp", "frame_number": 54970, "timestamp_epoch": "1634915687.378212000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-07d4fa29c6868573c673c178", "kind": "unclassified_tcp", "frame_number": 54973, "timestamp_epoch": "1634915687.383792000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5d713f50cf5dfdfa621a5b5", "kind": "unclassified_tcp", "frame_number": 54977, "timestamp_epoch": "1634915687.391136000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8f53c86eedb60359f826cb86", "kind": "unclassified_tcp", "frame_number": 54979, "timestamp_epoch": "1634915688.093691000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23b400000016030300070b0000030000001603030066100000626104a32801b7b7adb139928385b3c7e399f37f088364dd77ddbcf67ede76c1b82af8b93e3d70d55367265f1f0325f66d78d14207a949ffba2002879418046ba6f1951b0d67530a54cc6ec86095f8d23abbfa648d59523958ca99f0e47bcc0313dfa814030300010116030300280000000000000000f8bd7a3846df06fb2d2fb221bb76ac5e7e545be253948ae5423fda94ee68b148" } }, { "event_id": "evt-30f40aee702decaa636755d6", "kind": "unclassified_tcp", "frame_number": 54984, "timestamp_epoch": "1634915688.169517000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f233d0000001403030001011603030028000000000000000012052833d2d0fc0f3206afa1e3dccc342f0bf93f94ac67bbcc81b720ef197784" } }, { "event_id": "evt-e6b805a251383dd0e920e49a", "kind": "unclassified_tcp", "frame_number": 54990, "timestamp_epoch": "1634915688.423978000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6135d6138cb962558f613cd5", "kind": "unclassified_tcp", "frame_number": 54992, "timestamp_epoch": "1634915688.475851000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23370000001703030028000000000000000106979fa6d47cbac4b7b3a8d8b9c6c7a7ae940c008ab6bc6099d27630183fe859" } }, { "event_id": "evt-118a7b487c6ead2349761f7f", "kind": "unclassified_tcp", "frame_number": 54996, "timestamp_epoch": "1634915688.525554000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ecad02c87f708d319682ad22", "kind": "unclassified_tcp", "frame_number": 55000, "timestamp_epoch": "1634915689.118061000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2333000000170303002400000000000000028cf2f84ffb6d49a64c3afd06dc3d8fdf5603447ad5af01a7323c6b9d" } }, { "event_id": "evt-adafdaaed709649a491ae6d5", "kind": "unclassified_tcp", "frame_number": 55004, "timestamp_epoch": "1634915689.150463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef15f0000001703030050efc4b343bdee722931fc2b289a3fff87ac5d9c6e2d596517ede54626f18982e8af8884b2464f5360a14d9f1e1e3f33c42c20614a804163192280e82a3aa12d170105f6ed25af98bb415736fe7602ba69" } }, { "event_id": "evt-10124fa7f6a5cda38a03cdaa", "kind": "unclassified_tcp", "frame_number": 55007, "timestamp_epoch": "1634915689.181800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2339000000170303002a000000000000000200c7c7d8369b88b974324876dccab2c831206808d66e5de767054b294fab22ac52d4" } }, { "event_id": "evt-e7cfbe066be6b023ed1f44b5", "kind": "unclassified_tcp", "frame_number": 55012, "timestamp_epoch": "1634915689.423957000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef13f0000001703030030a005656f2fa03a56b315afc8140f52fee736cf0285b9f8c65fca71cf52d32040fad29aa98fab97e398c4cf64014e5344" } }, { "event_id": "evt-aae6c0429e73e3e3d65684aa", "kind": "unclassified_tcp", "frame_number": 55018, "timestamp_epoch": "1634915689.587854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef16f0000001703030060b5e639fb089583e78fea12cdf3b602c4cdb41053be26a1836fe045c01afce7ebe961436eb59a0516bae9c1ccb8cab3b6e736833a3348d0d37e3907cc0dd1006a87015c057de9db4b792924c2c8862c33ab2af9e883897e2f525e993979fc9ccf" } }, { "event_id": "evt-6246c7be54599c326fb31c00", "kind": "unclassified_tcp", "frame_number": 55022, "timestamp_epoch": "1634915689.588548000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200aef10a000000" } }, { "event_id": "evt-018ec2f53db42efef3ec2dc6", "kind": "unclassified_tcp", "frame_number": 55024, "timestamp_epoch": "1634915689.779974000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f235100000017030300420000000000000003e5f8648cddf1e813e0891c6c5cbf211a0b926f6e863ab05cf3cb40ddd85c9c7a500083a20ea55dfb35b2cb020930b6e88186157008befae8bd8b" } }, { "event_id": "evt-6623085fa0bd80e319313d38", "kind": "unclassified_tcp", "frame_number": 55029, "timestamp_epoch": "1634915689.847374000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2339000000170303002a0000000000000003845ed55dad6c1c03c2a5bc081951acfffd3d34e27fb1534c399909e54f2bbe2b946a" } }, { "event_id": "evt-1421c62ddf20a7925f85dc22", "kind": "unclassified_tcp", "frame_number": 55032, "timestamp_epoch": "1634915689.986993000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200aef13f0000001503030030480f1f2b04a60ec7387508346c4076fbe6c5a73e575ab569418e0e62d8916d22bb9b6d7ee130e73784adcace0a9bf00105070200aef10a000000" } }, { "event_id": "evt-2bbff719c9aa74edd0e6d745", "kind": "unclassified_tcp", "frame_number": 55037, "timestamp_epoch": "1634915690.347028000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f2339000000170303002a0000000000000004d7d7b5aa695e85750c0c2efe4a650162bb98c9ae8610284cbb282c5e2b5a96e03da5" } }, { "event_id": "evt-74803545a08ca392ebb2aaaf", "kind": "unclassified_tcp", "frame_number": 55046, "timestamp_epoch": "1634915693.439702000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-787f30401552e29b84ebdc30", "kind": "unclassified_tcp", "frame_number": 55053, "timestamp_epoch": "1634915695.268764000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-6f0055cbdc4db901ce15600f", "kind": "unclassified_tcp", "frame_number": 55064, "timestamp_epoch": "1634915697.642081000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f23a200000017030300930000000000000004f4ac2cbb2110b464d6d0bcbf872dda9d00b1043dc48e63a819b25412a8f3ffb7020fc7252473c4fb29cdeb0e900879661c764238fd3fff0e758ee24f900b8d69dac47b1e945159296a534eef4bb5b3d707ff8d182211febbf6f9388446b71639aecc283e4cd0a1c59514e6c62c6bd02cf9681dc1033d6f10b306539ca56f1ccac8bf94e20c32583d428026" } }, { "event_id": "evt-e283cd978cddcc7743d762b4", "kind": "unclassified_tcp", "frame_number": 55068, "timestamp_epoch": "1634915698.042478000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f232a000000170303001b000000000000000516469786899820e8530ea477f0e03fbd4696cf" } }, { "event_id": "evt-441031ebe67b8a7d636ab75e", "kind": "unclassified_tcp", "frame_number": 55073, "timestamp_epoch": "1634915698.487030000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6fd4c6f9b8e667c7d9a07a55", "kind": "unclassified_tcp", "frame_number": 55162, "timestamp_epoch": "1634915703.149072000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f237700000017030300680000000000000005c8cf7a904d02bfcbc85cebf722d98d835eb8638d678e987e9ef814eb18f173c275313bdd609347a11d0fa10c4ce3cff2f6c31a588bd2e62dd4d6618e7ebccd86d90065a5bb77a8ae6d86d9f7acbc4e75437f1a871dc67fcf95a9d5af9d924912" } }, { "event_id": "evt-234ac2c47d85ac6a60f70340", "kind": "unclassified_tcp", "frame_number": 55166, "timestamp_epoch": "1634915703.472849000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f232d000000170303001e000000000000000651378ede856a5b1b55c124d0fdaa986bd7c87b99fd6b" } }, { "event_id": "evt-e7b0a10ab93322328a4239f8", "kind": "unclassified_tcp", "frame_number": 55170, "timestamp_epoch": "1634915703.518928000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6fbe9c181c0c777bd67abfbd", "kind": "unclassified_tcp", "frame_number": 55174, "timestamp_epoch": "1634915703.522874000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001f235700000017030300480000000000000006aeca6aa97650c259a92e44fdb2c5a2fd3cb3861667b8b54e7415112a95d637fee99b5ac9d69d757f721b8ff82c655dc12a2803b2fde821312fabb7882d0321fe" } }, { "event_id": "evt-46716d45356481556a726a99", "kind": "unclassified_tcp", "frame_number": 55178, "timestamp_epoch": "1634915703.523295000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701001f230a000000" } }, { "event_id": "evt-f2a9b4b936408573b2845fa2", "kind": "unclassified_tcp", "frame_number": 55191, "timestamp_epoch": "1634915708.519307000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-06e0b4bddd5564827e0ee7cc", "kind": "unclassified_tcp", "frame_number": 55197, "timestamp_epoch": "1634915710.929841000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010020f80c000000197b" } }, { "event_id": "evt-49043421c92b74a0a6fabdb5", "kind": "unclassified_tcp", "frame_number": 55199, "timestamp_epoch": "1634915711.123473000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f80e00000005020002" } }, { "event_id": "evt-02759f1f2f53ac9bb0ee2af3", "kind": "unclassified_tcp", "frame_number": 55200, "timestamp_epoch": "1634915711.124019000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010020f80c0000000502" } }, { "event_id": "evt-9ac34e90044fc1cf0f50c03c", "kind": "unclassified_tcp", "frame_number": 55203, "timestamp_epoch": "1634915711.363321000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2823e13dd1b73723da4051a9", "kind": "unclassified_tcp", "frame_number": 55204, "timestamp_epoch": "1634915711.363855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010020f80c0000000100" } }, { "event_id": "evt-7cfa5981590b1a588c513115", "kind": "unclassified_tcp", "frame_number": 55206, "timestamp_epoch": "1634915711.705319000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f82c000000050100031b756c74696d61746563756973696e656361746572696e672e636f6d0019" } }, { "event_id": "evt-01c3c338b6a5abfa382e5e5f", "kind": "unclassified_tcp", "frame_number": 55216, "timestamp_epoch": "1634915711.884330000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f814000000050000010a0a169cc33b" } }, { "event_id": "evt-b4fe706f5f27c5db6c0e0e58", "kind": "unclassified_tcp", "frame_number": 55220, "timestamp_epoch": "1634915712.258003000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8c60000003232302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2045534d5450204578696d20342e39342e32202332204672692c203232204f637420323032312031313a31353a3131202d30343030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a" } }, { "event_id": "evt-becb84fe7b9bbdcfa190b4f9", "kind": "unclassified_tcp", "frame_number": 55223, "timestamp_epoch": "1634915712.629496000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f81a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ce7287fc24f70a7e831bb5b8", "kind": "unclassified_tcp", "frame_number": 55229, "timestamp_epoch": "1634915712.713211000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8df0000003235302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-4979253af4deb2c9ea031959", "kind": "unclassified_tcp", "frame_number": 55232, "timestamp_epoch": "1634915713.119660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8140000005354415254544c530d0a" } }, { "event_id": "evt-6149fad61d979080860c815c", "kind": "unclassified_tcp", "frame_number": 55237, "timestamp_epoch": "1634915713.216935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f81c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-9b5a2f06062d8724772a771b", "kind": "unclassified_tcp", "frame_number": 55242, "timestamp_epoch": "1634915713.505908000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5225534010ef2f059b028645", "kind": "unclassified_tcp", "frame_number": 55247, "timestamp_epoch": "1634915713.642438000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ef86ecd0613166514c396bb7", "kind": "unclassified_tcp", "frame_number": 55251, "timestamp_epoch": "1634915713.774524000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7a6666f42ccdaa3b6159f8fe", "kind": "unclassified_tcp", "frame_number": 55256, "timestamp_epoch": "1634915713.777813000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9ba339183859f56946191b5f", "kind": "unclassified_tcp", "frame_number": 55257, "timestamp_epoch": "1634915713.777836000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fd0e3ce64faa4fd4e9f44893", "kind": "unclassified_tcp", "frame_number": 55261, "timestamp_epoch": "1634915714.349651000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8880000001603030046100000424104af0146cdf8b70b03d55dc82673994605b5038e61c2ec463287d566f21b4db8fa719124f8eb426940b9f5a4aa9678e8a038cc4fac4d264d92409832d7cbfa641a140303000101160303002800000000000000006c25e15ff343d58abc9e9522f33515e913183a248e7ef264ed10325828d2df70" } }, { "event_id": "evt-44aa19e41624398b095c932a", "kind": "unclassified_tcp", "frame_number": 55266, "timestamp_epoch": "1634915714.420238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f83d00000014030300010116030300289c0327eeb471ff21c55b1621276b084c459b5b55b00db0cca32369a36809ef6a7feb369e42a2f9f3" } }, { "event_id": "evt-5b4eb7a00a10bffc5d674578", "kind": "unclassified_tcp", "frame_number": 55269, "timestamp_epoch": "1634915714.518994000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2b7b91ec1788a3ee2cfacd9e", "kind": "unclassified_tcp", "frame_number": 55271, "timestamp_epoch": "1634915714.920794000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f83700000017030300280000000000000001d1ffba5b6436eb2039ef978105dabbac093db905d04f48671e146dc64f3490d1" } }, { "event_id": "evt-d526f10d4d42c35e7c30c053", "kind": "unclassified_tcp", "frame_number": 55276, "timestamp_epoch": "1634915715.012048000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8ee00000017030300df9c0327eeb471ff22bd81aa7912146a969d93bb922d98fe359145e0df37641081fa46cea25b836e179f53d421b56aea20ac4d9c0649ca78ef6f3038994f9cccf8895f759ced22ee3b03d4f122f1d8155e2355a04d8f5baba8387158b0f6c9fed82a7e29a721162ca36fa37c05c748766d3082c0110d466bb8604992e476e38c0cf2e308f8fb6f8ba2ebd786bf61ebba73344be528f81a1efde90a8859b66afdb478ef34efae0ea8b4dd0a908e4c95bd74316189a880b20dd51cd5b37cd334d604e1ff30735bc6a244ec6d06251a4125c45c0b3b2ab8e8c54c151be97d772e2b" } }, { "event_id": "evt-80cd1ff459cb8f9082a6bda0", "kind": "unclassified_tcp", "frame_number": 55281, "timestamp_epoch": "1634915715.845162000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020020e00c000000197b" } }, { "event_id": "evt-db6ef1c0e5b9cd2e60ad277e", "kind": "unclassified_tcp", "frame_number": 55284, "timestamp_epoch": "1634915716.032526000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e00e00000005020002" } }, { "event_id": "evt-2e2bb5e53e68b8bb3759718d", "kind": "unclassified_tcp", "frame_number": 55285, "timestamp_epoch": "1634915716.032913000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020020e00c0000000502" } }, { "event_id": "evt-310e3a1818cc720f635b5902", "kind": "unclassified_tcp", "frame_number": 55287, "timestamp_epoch": "1634915716.214499000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f833000000170303002400000000000000020a06165aaa34d413c9ee61800601134e3ee968c61f5e56294308f247" } }, { "event_id": "evt-c4927ceba0a01b33a24b81a9", "kind": "unclassified_tcp", "frame_number": 55295, "timestamp_epoch": "1634915716.274831000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f839000000170303002a9c0327eeb471ff231f2f9da8d708311f916d1c663148b1778af20756cc40ce5a283998063eafc29f9a17" } }, { "event_id": "evt-a26334120d34836d3e39e242", "kind": "unclassified_tcp", "frame_number": 55298, "timestamp_epoch": "1634915716.391146000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ad1304532433251547e59467", "kind": "unclassified_tcp", "frame_number": 55299, "timestamp_epoch": "1634915716.391735000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020020e00c0000000100" } }, { "event_id": "evt-95addc2c14f0eae597953879", "kind": "unclassified_tcp", "frame_number": 55301, "timestamp_epoch": "1634915716.625534000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f8550000001703030046000000000000000302dbbbdd85f5cc79a9fa6cafc4fad8bbb84961532f93d95529f608aae53540a50e6f3cafe722baf9ebfd52cca02387594eaa95b321c7d8e77ff4bca4c883" } }, { "event_id": "evt-ef1f865ab23ac0e16b75f555", "kind": "unclassified_tcp", "frame_number": 55306, "timestamp_epoch": "1634915716.683221000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f839000000170303002a9c0327eeb471ff245e467eaacd92c6b9735efe02c122220aa673b971a32ace12970d087a12663411446d" } }, { "event_id": "evt-bf7c0601b12e3e705089c558", "kind": "unclassified_tcp", "frame_number": 55309, "timestamp_epoch": "1634915716.807588000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e02c000000050100031b756c74696d61746563756973696e656361746572696e672e636f6d0019" } }, { "event_id": "evt-34c6977fbbec6b0a932bdaeb", "kind": "unclassified_tcp", "frame_number": 55315, "timestamp_epoch": "1634915716.872378000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e014000000050000010a0a169cc33d" } }, { "event_id": "evt-f98c858252fb7ddbba749257", "kind": "unclassified_tcp", "frame_number": 55318, "timestamp_epoch": "1634915716.996233000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e0c60000003232302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2045534d5450204578696d20342e39342e32202332204672692c203232204f637420323032312031313a31353a3136202d30343030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a" } }, { "event_id": "evt-1fdeaf9deec2afac39285d93", "kind": "unclassified_tcp", "frame_number": 55320, "timestamp_epoch": "1634915717.028041000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f839000000170303002a000000000000000418bda846857c775dd1babaf09d8ac2ac281be236b436d8c6adbb1e0971c151edd8b0" } }, { "event_id": "evt-4237b76d257c6eb0e475e908", "kind": "unclassified_tcp", "frame_number": 55326, "timestamp_epoch": "1634915717.483529000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e01a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-34712e774cc9995295271ede", "kind": "unclassified_tcp", "frame_number": 55331, "timestamp_epoch": "1634915717.558282000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e0df0000003235302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-7f343483564dd838c02ff91d", "kind": "unclassified_tcp", "frame_number": 55334, "timestamp_epoch": "1634915717.902687000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e0140000005354415254544c530d0a" } }, { "event_id": "evt-664dd8ecd0c57fc671aa69b1", "kind": "unclassified_tcp", "frame_number": 55339, "timestamp_epoch": "1634915717.972300000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e01c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-2d995efda7ccb40b8b37ae9b", "kind": "unclassified_tcp", "frame_number": 55343, "timestamp_epoch": "1634915718.293471000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d09e1ff4615d29a7f6caf64f", "kind": "unclassified_tcp", "frame_number": 55348, "timestamp_epoch": "1634915718.374479000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dd19fddf247b72618fc33e86", "kind": "unclassified_tcp", "frame_number": 55352, "timestamp_epoch": "1634915718.377721000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c7c9f6999503a36536e424e7", "kind": "unclassified_tcp", "frame_number": 55355, "timestamp_epoch": "1634915718.381093000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e04a0500004530433041a03fa03d863b687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f434f4d4f444f52534143657274696669636174696f6e417574686f726974792e63726c307106082b0601050507010104653063303b06082b06010505073002862f687474703a2f2f6372742e636f6d6f646f63612e636f6d2f434f4d4f444f525341416464547275737443412e637274302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382020100109fa060088174a1a08478604c3939da6477ef190a723923943b917d7f348b97584e590a2d68c31042b0a07a818c7bab31322039e42273e0dec9175d83c5752de1114759019e5dc0f4dd126ad06d3020e8b3ca4fdf9ae0a7179f1a2f877eeb50e153f3f847d98c60f2c965659cf0da01e6b2f2d8079887df378998551242c9e42dde2dbeaa64944ed92ee6c2d5f2c0e6e9ea193e370b895fc93af84f47403eaf1a7fa2f68501881736b523eab9feba6b480b022039aec361eb95a5a173c71c5f543373574b368b9b5b28e33eb10b785c6b14a710cce5da3fbae9d6b22d1d7054ba5eab7d4f298910e03a9004c5eeb98e43a2e363587f498b713e57622340d15d96642261569f96674787bce50020a468e2c1a0817b687308c46d4e7079e8dd55d7095cb99d0a95a60cd9dbe28a55ebb9e1e79a95144c580641c110aaaab13ae2a54a4ae0d9c91fc2a097bb06ef1900db02be96f1fb548f939afa302236a977261f942893e9133d45d13a35481e980d8270c00b5a2887a178513fb5a75ca6912200424cb98015802ab12d894ff7ba1e18c48c591e7349a3a87bbc1ff7564d509f6716a7c71748e76d5457766e97585b7864a4ed62b4003b067e79b8585f6e84d643bc4fdb39aa28f0c18909c5fbe31844b7e5b28b5d95f9235a0b72f7693ad6578be1e9f460bec4512b11acfe48b37273ca1350730d0476ca01e142c2d721cff90005823082057e30820466a003020102021067def43ef17bdae24ff5940606d2c084300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a308185310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f7264311a3018060355040a1311434f4d4f444f204341204c696d69746564312b302906035504031322434f4d4f444f205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010091e85492d20a56b1ac0d24ddc5cf446774992b37a37d23700071bc53dfc4fa2a128f4b7f1056bd9f7072b7617fc94b0f17a73de3b00461eeff1197c7f4863e0afa3e5cf993e6347ad9146be79cb385a0827a76af7190d7ecfd0dfa9c6cfadfb082f4147ef9bec4a62f4f7f997fb5fc674372bd0c00d689eb6b2cd3ed8f981c14ab7ee5e36efcd8a8e49224da436b62b855fdeac1bc6cb68bf30e8d9ae49b6c6999f878483045d5ade10d3c4560fc32965127bc67c3ca2eb66bea46c7c720a0b11f65de4808baa44ea9f283463784ebe8cc814843674e722a9b5cbd4c1b288a5c227bb4ab98d9eee05183c309464e6d3e99fa9517da7c3357413c8d51" } }, { "event_id": "evt-5f118b7a6ed36cfed0ad6c7e", "kind": "unclassified_tcp", "frame_number": 55359, "timestamp_epoch": "1634915718.387661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e077040000ed0bb65caf2c631adf57c83fbce95dc49baf4599e2a35a24b4baa9563dcf6faaff4958bef0a8fff4b8ade937fbbab8f40b3af9e843421e89d884cb13f1d9bbe18960b88c2856ac141d9c0ae771ebcf0edd3da996a148bd3cf7afb50d224cc01181ec563bf6d3a2e25bb7b204225295809369e88e4c65f191032d707402ea8b671529695202bbd7df506a5546bfa0a328617f70d0c3a2aa2c21aa47ce289c064576bf821827b4d5aeb4cb50e66bf44c867130e9a6df1686e0d8ff40ddfbd042887fa3333a2e5c1e41118163ce18716b2beca68ab7315c3a6a47e0c37959d6201aaff26a98aa72bc574ad24b9dbb10fcb04c41e5ed1d3d5e289d9cccbfb351daa747e584530203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e04160414bbaf7e023dfaa6f13c848eadee3898ecd93232d4300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c050003820101007ff25635b06d954a4e74af3ae26f018b87d33297edf840d2775311d7c7162ec69de64856be80a9f8bc78d2c86317ae8ced1631fa1f18c90ec7ee48799fc7c9b9bccc8815e36861d19f1d4b6181d7560463c2086926f0f0e52fdfc00a2ba905f4025a6a89d7b4844295e3ebf776205e35d9c0cd2508134c71388e87b0338491991e91f1ac9e3fa71d60812c364154a0e246060bac1bc799368c5ea10ba49ed9424624c5c55b81aeada0a0dc9f36b88dc21d15fa88ad8110391f44f02b9fdd10540c0734b136d114fd07023dff7255ab27d62c814171298d41f450571a7e6560afcbc5287698aeb3a853768be621526bea21d0840e494e8853da922ee71d0866d7160303014d0c00014903001741049ebbfc67bfcf76695cd0e9690dc68b00e2344b176724d878240f7def8744fc90e9f47b43a3c683fdad81994c3fc7f3005d0c660482b6612d6f20727231d0e91e040101009cbdb76026d3b65692db6afe8cdd362a92bdde57d603ec3ab1e0f885b2dca30cddcb1deea303bfe419ec1c3fee0cc0caa86dae2bb8d917bbfd9d607fe186f0f3419740aa3652b4d125c5cc7fc1e95dbb4398212056bf1f04d5ed5f5f28b8e721a285ce1632b69205967ce7c73ffd1c06f7b85a421dc2a43b6b3fda2cb8e5c6e62c2692eeb38a80023561415c3b3a8e33353537eafbfa2dc05b438495a9123d6aa455cf24b9fcd38b02f96a50095f56e0b858bfd8d79227ad0948f5de64cde8c0aed2ece96921dfea4d4992af7f5931a511ce625268ad68ce2d2461c9fdf8c322721e631808e200984039152bbd692c6efe08418aca1c1e3412ae6aab83542a2416030300040e000000" } }, { "event_id": "evt-810b08cba6b31f27067ac1ac", "kind": "unclassified_tcp", "frame_number": 55361, "timestamp_epoch": "1634915718.677661000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e0880000001603030046100000424104a7bba8fb7cd6ac9d1c4dc5a5a9eb7d090643cc7ab6180f624c6926b078cded4cc85f6d8d871f365a8cb1030fac10d90da30a27633b5b6fc7c470c33a767c88b8140303000101160303002800000000000000009c97810c159eefbc1545188317c07ad30f2f330cb03433f42b9ebd794c8321e8" } }, { "event_id": "evt-97abffd323934a643167dd46", "kind": "unclassified_tcp", "frame_number": 55366, "timestamp_epoch": "1634915718.759095000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e03d00000014030300010116030300287870bf5655e62a0503e4c8120df5c404e72cfc720d2fb7a4a5257d6102d68beb7c6159426d3ad58f" } }, { "event_id": "evt-0e4deb1e31edc910f53a649c", "kind": "unclassified_tcp", "frame_number": 55371, "timestamp_epoch": "1634915719.050694000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f84a000000170303003b9c0327eeb471ff251959440b2941ca1cb75f1c73dc06c75fd40ee676d9fdf95a86e99b0cdb2ba4bd378c3392b3b85eae5a1fa2be38e132dc805b4d" } }, { "event_id": "evt-1cd8e71e7bf0ca3a6f2b8d5c", "kind": "unclassified_tcp", "frame_number": 55374, "timestamp_epoch": "1634915719.120010000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e03700000017030300280000000000000001a958dde8cea41acbb616b1c860d73836aed40be22f2ea9f3f05ad7e53679d65d" } }, { "event_id": "evt-2df5c89fd7299a4e78a7a9d4", "kind": "unclassified_tcp", "frame_number": 55378, "timestamp_epoch": "1634915719.184345000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e0ee00000017030300df7870bf5655e62a064bdf6d238208ed2fe6abca47f087de4662793095802776182f0a00f7bc64551ff064bc4b822ee61f554c6fa379cdcd0145ca6e2b9c3c2647bd47e1bdfd5a5531173503975aa1b0f83aaca1a4179341743e1a8f478c66eb217661be06cc775961929e94795bd6d96fbf1ef2a252c5d3a7f6b3ffd4b41f5372563832c133d25240efc0381b126d7761bcbc084f47c77054511d6cbbdf2b09b697741953f0d7ae4a756198c8ce801ab9d20df6f51886be3d65508dc5dabb1bcc3dbee6e157f749dc2b2faf36e2ea7503b75051cad86de26ce26c6177f5ef42" } }, { "event_id": "evt-6c4470c98337857f72f3f025", "kind": "unclassified_tcp", "frame_number": 55383, "timestamp_epoch": "1634915719.332445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f82a000000170303001b0000000000000005187c2423551698704c23b60d4549f7216565be" } }, { "event_id": "evt-6c21e3d0705a8f6988d5d9fa", "kind": "unclassified_tcp", "frame_number": 55388, "timestamp_epoch": "1634915719.401672000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f84100000017030300329c0327eeb471ff26c25c62bbef50d2a78c80bef65b624be365e840acedd564490e87c6b6e19f3bd2c630ff2afc32499f89c3" } }, { "event_id": "evt-33210e73c04a5bdc4a1edb76", "kind": "unclassified_tcp", "frame_number": 55391, "timestamp_epoch": "1634915719.519670000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703002fe20c000000197b040703002fe20e00000005020002" } }, { "event_id": "evt-d5859fb70df0bd8bc99dae98", "kind": "unclassified_tcp", "frame_number": 55392, "timestamp_epoch": "1634915719.520333000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703002fe20c0000000502" } }, { "event_id": "evt-a9069ab28db712d00a4f60c7", "kind": "unclassified_tcp", "frame_number": 55394, "timestamp_epoch": "1634915719.550320000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-130e4f0e3c8d1f0c585414d2", "kind": "unclassified_tcp", "frame_number": 55396, "timestamp_epoch": "1634915719.700524000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f82d000000170303001e000000000000000622ef3efc7348e6255e930c72015c845166125218389f" } }, { "event_id": "evt-79640682ca3ccdc1911a9ca9", "kind": "unclassified_tcp", "frame_number": 55402, "timestamp_epoch": "1634915719.763650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010020f87b000000170303004d9c0327eeb471ff272597400701e6dc74e890c373698ba0639a04e8956f9a0f25aeb92ba7e6b3f0753c5231b2b17688b063302f6e5b9242ba43346b853b008f251e32a4e3991d5840a5158a6b44150303001a9c0327eeb471ff2898b93ac6e79c8daaf064d26970ae45acba11" } }, { "event_id": "evt-e0e6c4239c68a60c002387c1", "kind": "unclassified_tcp", "frame_number": 55406, "timestamp_epoch": "1634915719.764189000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010020f80a000000" } }, { "event_id": "evt-29aa86752ac9eca9552913f5", "kind": "unclassified_tcp", "frame_number": 55408, "timestamp_epoch": "1634915719.948841000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703002fe220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5b41f78b27e1f2ed8b028b6e", "kind": "unclassified_tcp", "frame_number": 55409, "timestamp_epoch": "1634915719.949215000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703002fe20c0000000100" } }, { "event_id": "evt-c809acf4db12b58c79ac59e8", "kind": "unclassified_tcp", "frame_number": 55411, "timestamp_epoch": "1634915720.249492000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e033000000170303002400000000000000028bbd0e1cf5359691e5883cb945285ca050a9ec8918aa6162f32c7f2a" } }, { "event_id": "evt-9b6d7112b1b20f39b7edd4b5", "kind": "unclassified_tcp", "frame_number": 55417, "timestamp_epoch": "1634915720.445253000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703002fe22700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-41af30f0ed56d6bdc560d70d", "kind": "unclassified_tcp", "frame_number": 55433, "timestamp_epoch": "1634915724.596707000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-58775fb79984b2808d3cd9a2", "kind": "unclassified_tcp", "frame_number": 55444, "timestamp_epoch": "1634915728.598474000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703002fe21400000005040001000000000000" } }, { "event_id": "evt-4defc980ae1b916f0ab1da26", "kind": "unclassified_tcp", "frame_number": 55446, "timestamp_epoch": "1634915728.600889000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e039000000170303002a7870bf5655e62a07e8e0a5a8dc7fd1c86ade5eb44a90afcb1b6b17605673991f59053466446dfacc3fa4" } }, { "event_id": "evt-d11e84ef5906c95f6a65bea4", "kind": "unclassified_tcp", "frame_number": 55448, "timestamp_epoch": "1634915728.952445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703002fe20a000000" } }, { "event_id": "evt-67652b6d751803e514fd3449", "kind": "unclassified_tcp", "frame_number": 55451, "timestamp_epoch": "1634915729.315464000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e055000000170303004600000000000000030fd4ba0c73ba56ae8f23ab62bfc9a5b97f92fb4f08c3342f1109b06017ab0fc507dd865d5c2df29ca81c96d2e078a655c18dfc05593de0c2b8c68cf9e610" } }, { "event_id": "evt-35a44b10992d4c777d9e0acb", "kind": "unclassified_tcp", "frame_number": 55456, "timestamp_epoch": "1634915729.377601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e039000000170303002a7870bf5655e62a084f5b213916d3f14c46481c7d35b924a792f6c0cae33137e39df7d27ac4b3a27d152e" } }, { "event_id": "evt-430fc98eeca38f1d95145a1f", "kind": "unclassified_tcp", "frame_number": 55459, "timestamp_epoch": "1634915729.629170000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e18236d78e80d3a18c7a469a", "kind": "unclassified_tcp", "frame_number": 55461, "timestamp_epoch": "1634915729.684791000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e039000000170303002a000000000000000477a38268ddc715afa935db39254bb0158dc2f5f345d21a617f6de4e15cff5d163a75" } }, { "event_id": "evt-67986c518488b9027f747ca4", "kind": "unclassified_tcp", "frame_number": 55467, "timestamp_epoch": "1634915731.103832000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e04a000000170303003b7870bf5655e62a09d7d0729758b1b9f74fc5b01992c06c91dee94681c919794904907df40d09de8ca197fd387c7311f521c5403c39649608f45d49" } }, { "event_id": "evt-bd10ee27bd52505a56f4139c", "kind": "unclassified_tcp", "frame_number": 55471, "timestamp_epoch": "1634915731.410790000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e02a000000170303001b0000000000000005738ee45042fe0470f9074c54611e15cecec4da" } }, { "event_id": "evt-9b80aa9a74b24f4d833ab58a", "kind": "unclassified_tcp", "frame_number": 55476, "timestamp_epoch": "1634915731.471121000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e04100000017030300327870bf5655e62a0af569fab60bbb7bb5be32a8dce29ed2999f80467ccc042b83c526698a37b50c856093058a788cffef66ed" } }, { "event_id": "evt-85274505ce29eddbafcb9c33", "kind": "unclassified_tcp", "frame_number": 55479, "timestamp_epoch": "1634915731.808854000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e02d000000170303001e0000000000000006e30c156f4be85f3dd6ad6428e8e066fcfa484293f5a1" } }, { "event_id": "evt-386036cae39a524aac61f129", "kind": "unclassified_tcp", "frame_number": 55485, "timestamp_epoch": "1634915731.873813000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e07b000000170303004d7870bf5655e62a0bd7c6eb07dad6794b946cf7d0837c7665655a72fd69f7411b92f4d215e8723ab195a84cba16618603a7fe964932f91f055edbd478f2f2cf89ca8dd003987521ab323e4489be150303001a7870bf5655e62a0cb71576511575802b5c1208657f74bf246e61" } }, { "event_id": "evt-831e108d6287531781b12e42", "kind": "unclassified_tcp", "frame_number": 55489, "timestamp_epoch": "1634915731.874559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020020e00a000000" } }, { "event_id": "evt-22d858c326bc9a071918bdde", "kind": "unclassified_tcp", "frame_number": 55491, "timestamp_epoch": "1634915732.198461000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020020e029000000150303001a0000000000000007a3efd75eb2d834d5894208494f3ed6761cc3" } }, { "event_id": "evt-9075378284552ecae965bbf2", "kind": "unclassified_tcp", "frame_number": 55494, "timestamp_epoch": "1634915732.378489000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020020e00a000000" } }, { "event_id": "evt-be706355b57b4bfc84892132", "kind": "unclassified_tcp", "frame_number": 55500, "timestamp_epoch": "1634915733.665522000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010085790c000000197b" } }, { "event_id": "evt-39ad7424651b3a06a48f2215", "kind": "unclassified_tcp", "frame_number": 55502, "timestamp_epoch": "1634915733.883927000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010085790e00000005020002" } }, { "event_id": "evt-7857e4e024bcecb940963f67", "kind": "unclassified_tcp", "frame_number": 55503, "timestamp_epoch": "1634915733.884491000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010085790c0000000502" } }, { "event_id": "evt-c66466c79f90706e994cbab0", "kind": "unclassified_tcp", "frame_number": 55507, "timestamp_epoch": "1634915734.379845000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100857920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9a5b7e65ede83d83609cd7e1", "kind": "unclassified_tcp", "frame_number": 55508, "timestamp_epoch": "1634915734.380404000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010085790c0000000100" } }, { "event_id": "evt-5f9789a5e1588531d623fd41", "kind": "unclassified_tcp", "frame_number": 55510, "timestamp_epoch": "1634915734.675255000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a0dc509687c69d0c08bd050d", "kind": "unclassified_tcp", "frame_number": 55512, "timestamp_epoch": "1634915734.728823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010085792700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-3c26bc65374bd90e4c787666", "kind": "unclassified_tcp", "frame_number": 55527, "timestamp_epoch": "1634915739.602317000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200e52a0c000000197b" } }, { "event_id": "evt-a8940fb3c1574d4e0f73c3eb", "kind": "unclassified_tcp", "frame_number": 55529, "timestamp_epoch": "1634915739.690737000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d08829a76f4b43d216c13afe", "kind": "unclassified_tcp", "frame_number": 55532, "timestamp_epoch": "1634915740.243615000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a0e00000005020002" } }, { "event_id": "evt-abb11cd668a3adb675a918a8", "kind": "unclassified_tcp", "frame_number": 55539, "timestamp_epoch": "1634915743.113628000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008579140000000504000100000000000003070200e52a0c0000000502" } }, { "event_id": "evt-314262ed0c40e89e5e02fa08", "kind": "unclassified_tcp", "frame_number": 55542, "timestamp_epoch": "1634915744.226530000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010085790a00000004070200e52a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-52955f6276137e37805a27de", "kind": "unclassified_tcp", "frame_number": 55543, "timestamp_epoch": "1634915744.226879000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e52a0c0000000100" } }, { "event_id": "evt-5a6c5df7b365f3250b9d3651", "kind": "unclassified_tcp", "frame_number": 55546, "timestamp_epoch": "1634915744.548641000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-aa5e25ed2fb9901bf7ebff4f", "kind": "unclassified_tcp", "frame_number": 55553, "timestamp_epoch": "1634915744.752024000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-84389837c65ede1d3f65e3cf", "kind": "unclassified_tcp", "frame_number": 55557, "timestamp_epoch": "1634915744.822621000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a14000000050000010a0a169cc33f" } }, { "event_id": "evt-1518caef5df259c4bd3fa5e6", "kind": "unclassified_tcp", "frame_number": 55560, "timestamp_epoch": "1634915744.877795000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a7900000032323020534e37503232324341303030342e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31353a3434202b303030300d0a" } }, { "event_id": "evt-de29f78ea6df12116e124ccd", "kind": "unclassified_tcp", "frame_number": 55564, "timestamp_epoch": "1634915745.454478000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8c54930f691ca6a43f3bc2e7", "kind": "unclassified_tcp", "frame_number": 55569, "timestamp_epoch": "1634915745.529790000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52ad80000003235302d534e37503232324341303030342e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-18f6fc7ba943ee831d29edd3", "kind": "unclassified_tcp", "frame_number": 55572, "timestamp_epoch": "1634915746.050445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a140000005354415254544c530d0a" } }, { "event_id": "evt-404dfa135bbd915f6da63985", "kind": "unclassified_tcp", "frame_number": 55578, "timestamp_epoch": "1634915746.358641000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-56a3e9028cad41c7c4b6f6f7", "kind": "unclassified_tcp", "frame_number": 55581, "timestamp_epoch": "1634915746.695058000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-85e6987dcc8fc9ce58c0668c", "kind": "unclassified_tcp", "frame_number": 55586, "timestamp_epoch": "1634915746.778962000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-835d881e5c4a11165deb8387", "kind": "unclassified_tcp", "frame_number": 55590, "timestamp_epoch": "1634915746.927464000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a3c050000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0" } }, { "event_id": "evt-f12aa3c66fd34a8c45e7707a", "kind": "unclassified_tcp", "frame_number": 55596, "timestamp_epoch": "1634915747.020041000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ede56c848ab20e978e1ec3c3", "kind": "unclassified_tcp", "frame_number": 55597, "timestamp_epoch": "1634915747.020055000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "5d2f3a012a8cbeb698d70bcd15fc51eb975ca189210ea9407a91d582513babf1a09e858a22b3520cf450c72a125bac6c6910e7fa028113cbe165d06520bec5d8c2a92bdbaceec55c782985f3c1a3266230e1a0cdf8caeba28c7fd7c8af0688aa1913efa6c99414d4e2ad6751d0ea1f9e100765c5cd9969f7ec46c1e3340d53b7e6499e552b4046c29544d0f912e803499fec07c508d42c1ca49f0284fcad74ee30f752b06b1818cfa47ea28004c2f5734618452e6c0c7e0ccb004000b49d540d00001a03010240001204010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-7b167d92f97a59e8a2c535c2", "kind": "unclassified_tcp", "frame_number": 55601, "timestamp_epoch": "1634915747.561856000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52ab400000016030300070b0000030000001603030066100000626104f1cfd6bc1d46f725a2db5d7a86fcc1779a3f66ea1e41b0990f05004a84c375e2032e5c043ef577b803a011d4835b8d9805e4b518d47b21f5870f4f22562a2bc7f5bcc27f81bbbaa427a72bdee9e6ed911e5026a691b69b8ce3f98229fb2dd4dd14030300010116030300280000000000000000d9494190f1295796b404818dc6e263576256c93642d2f76feab66277e004e9a3" } }, { "event_id": "evt-00a156683fdeb22992d1163f", "kind": "unclassified_tcp", "frame_number": 55606, "timestamp_epoch": "1634915747.620076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a3d00000014030300010116030300280000000000000000a9ba490c2be181f6177019aa850fc136c1a62c80664a6f5991517c3fd833cd20" } }, { "event_id": "evt-49de85f3c551424d8ca6077d", "kind": "unclassified_tcp", "frame_number": 55609, "timestamp_epoch": "1634915747.949142000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a3700000017030300280000000000000001f08760fa3f40ce9cb02fc3e4bb26f6a95c90659310e45aae74e25badff6573fc" } }, { "event_id": "evt-60c3c54afed374a291eb3d36", "kind": "unclassified_tcp", "frame_number": 55614, "timestamp_epoch": "1634915748.041909000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52aff00000017030300f00000000000000001e9c46ac58ff0235761d5454cbf2bb7ee571c8cea89fcb475ca1582d9e751c528617ac30b5d54e60df1f3c1aba6b27182f52d51a0ad6a947c67b794bb169b9469988075a9367595c9edb016b8c92ac2009ebd7ca5a822af8057d2b39fc74213f8206f101e1805fbc1b377a34ecf110802bc2a1a308686b50c0c61049ca32f79baff63567e63af3beb1cc097ba50365a566d8fe23b1921ce90f6e55c9cd2054316dd5de23b78c5d6cae158e6a37de643538b84ef20ded945b7ac5c19baf9a7699f626a4c12cc352c9a979958ea973588a869a24281dfd0165509f724bded6d2d0959d176108dd2370c" } }, { "event_id": "evt-9bf5115b3147b068199c2d09", "kind": "unclassified_tcp", "frame_number": 55620, "timestamp_epoch": "1634915749.145316000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a330000001703030024000000000000000226997d474530ed68c2084f5ada7cd314abde1ed8e8d432715a4996ab" } }, { "event_id": "evt-b26b40cf17a8c4d6608492a6", "kind": "unclassified_tcp", "frame_number": 55625, "timestamp_epoch": "1634915749.208920000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a39000000170303002a00000000000000029f961d4c8989c15950103efbaa8df00e12893bf4e3c7598d7f2d7076b65a21d2c490" } }, { "event_id": "evt-74abf1d66859f1bbfe2bc198", "kind": "unclassified_tcp", "frame_number": 55629, "timestamp_epoch": "1634915749.496073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a4d000000170303003e00000000000000039a43cf79c6612bcf95456e5f8b2995407268de9f73b923e37374cfcea9de47a28bda5b276ce797e6b01688f490068976f35a5ca9589b" } }, { "event_id": "evt-6776145bbba023634d8956cf", "kind": "unclassified_tcp", "frame_number": 55633, "timestamp_epoch": "1634915749.543868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a39000000170303002a000000000000000349f1e5d1f655b464c32266396204693bc67557f378014a71828c3bd5bc921fb24036" } }, { "event_id": "evt-e7ba6f9d339a71f3f930e17c", "kind": "unclassified_tcp", "frame_number": 55636, "timestamp_epoch": "1634915749.769680000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6feb532328dff4bc8cdde820", "kind": "unclassified_tcp", "frame_number": 55638, "timestamp_epoch": "1634915749.825156000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a3d000000170303002e00000000000000040df8e99fa2091ed9b9cd060553a7e77b329e43a7878f0d1b917872a0ec4f179363e7ee2b2cbd" } }, { "event_id": "evt-f6d94f4a64f80c48c1017415", "kind": "unclassified_tcp", "frame_number": 55668, "timestamp_epoch": "1634915754.770363000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b204f6aac0a9d32286e851fe", "kind": "unclassified_tcp", "frame_number": 55671, "timestamp_epoch": "1634915754.925758000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0075cca5749c60e97f11fb79", "kind": "unclassified_tcp", "frame_number": 55709, "timestamp_epoch": "1634915756.106928000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a9f0000001703030090000000000000000430101623afa36497bb6cd92699cba4dfa860be9a05fbf50ea902e8909cc78af6b7e20ece0a14ebf7d2458486d15cb8b883e52cf649deb2a587e41efe6466649cd65e40202ef095b9837b19f61cc470e08c5aa38810823f785d41157f399138726d93f107b91cfb90b6b149b5e94d1a8fba4bc4857b312a5674a5dbff69fb7353f80e5cb0afac4bd9" } }, { "event_id": "evt-9f0968c9743967aa3f1f756e", "kind": "unclassified_tcp", "frame_number": 55713, "timestamp_epoch": "1634915756.404044000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a2a000000170303001b0000000000000005e559f5179e04f61612fc3cb7a55254af58d8e4" } }, { "event_id": "evt-3054f7ee3ba06b663f1c9ae8", "kind": "unclassified_tcp", "frame_number": 55752, "timestamp_epoch": "1634915759.816633000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a991b5cae036b2fc4c5d21fb", "kind": "unclassified_tcp", "frame_number": 55757, "timestamp_epoch": "1634915761.525306000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a740000001703030065000000000000000596c5eb27d356e416b65164be2ac9e9f416df55ef5aad4263086d6d7826641cc3703275d35af1307039594becb23bae408d90012000bcb7e2e548a20cb2a84db44660c7c1ba71d6513a3628c1d782699c6b2202e69a518cfbc49b41568b" } }, { "event_id": "evt-4601d90d96f3c972094502fa", "kind": "unclassified_tcp", "frame_number": 55760, "timestamp_epoch": "1634915762.051176000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a2d000000170303001e00000000000000062f328cd15dbe490fbae7cf2e81e5acccd5ff688db696" } }, { "event_id": "evt-08204526d67ab803cdc49359", "kind": "unclassified_tcp", "frame_number": 55767, "timestamp_epoch": "1634915762.113038000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a570000001703030048000000000000000690e2c8aae5a149dee80964e9067675e8a6180181ee72967f52b9d34ba9830d615c5fce0b163b60ed07496ab285e6be78f4da824a40bc2eea125896948081e49b" } }, { "event_id": "evt-8824e1e131eec6c7138b68a9", "kind": "unclassified_tcp", "frame_number": 55771, "timestamp_epoch": "1634915762.113408000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200e52a0a000000" } }, { "event_id": "evt-a6117ab4cd7e20c1af60ddd5", "kind": "unclassified_tcp", "frame_number": 55774, "timestamp_epoch": "1634915762.459321000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e52a29000000150303001a0000000000000007ee99b03d886df2385e1d2b992a289b5e29a5" } }, { "event_id": "evt-3489a4e18e921a9d5f69260c", "kind": "unclassified_tcp", "frame_number": 55776, "timestamp_epoch": "1634915762.662197000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200e52a0a000000" } }, { "event_id": "evt-da4a92b576fd660a95870e0b", "kind": "unclassified_tcp", "frame_number": 55787, "timestamp_epoch": "1634915765.847492000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a6a4f429b782727d35044976", "kind": "unclassified_tcp", "frame_number": 55797, "timestamp_epoch": "1634915770.880059000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-96adec5465e07cd1d04031fe", "kind": "unclassified_tcp", "frame_number": 55809, "timestamp_epoch": "1634915776.878831000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fb304ae51c633a197444d38f", "kind": "unclassified_tcp", "frame_number": 55816, "timestamp_epoch": "1634915781.926361000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-23ef6bdc23859e52bf7c6935", "kind": "unclassified_tcp", "frame_number": 55827, "timestamp_epoch": "1634915785.285292000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2f00d6cc151e5ca87168391e", "kind": "unclassified_tcp", "frame_number": 55834, "timestamp_epoch": "1634915786.987950000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-49a0505bde9ca08e902b783a", "kind": "unclassified_tcp", "frame_number": 55837, "timestamp_epoch": "1634915787.629922000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010073f20c000000197b" } }, { "event_id": "evt-f36d193c4b717325caa4f249", "kind": "unclassified_tcp", "frame_number": 55839, "timestamp_epoch": "1634915787.835971000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f20e00000005020002" } }, { "event_id": "evt-83ea15df52cef962afb158fd", "kind": "unclassified_tcp", "frame_number": 55840, "timestamp_epoch": "1634915787.836516000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010073f20c0000000502" } }, { "event_id": "evt-6cdde0f80535dd11b1f522f5", "kind": "unclassified_tcp", "frame_number": 55842, "timestamp_epoch": "1634915788.104027000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1c977674ccc982104ecea964", "kind": "unclassified_tcp", "frame_number": 55843, "timestamp_epoch": "1634915788.104584000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010073f20c0000000100" } }, { "event_id": "evt-c5f5f06ec1fbeb8369166f34", "kind": "unclassified_tcp", "frame_number": 55846, "timestamp_epoch": "1634915788.550275000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f21e000000050100030d6d61696c2e6c65636d672e66720019" } }, { "event_id": "evt-2b82a2aa0237774527f793c0", "kind": "unclassified_tcp", "frame_number": 55854, "timestamp_epoch": "1634915789.145870000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f214000000050000010a0a169cc343" } }, { "event_id": "evt-b5f11b71a2c0c2309fa140b8", "kind": "unclassified_tcp", "frame_number": 55858, "timestamp_epoch": "1634915789.678402000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f234000000323230204741524d2d393852303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-3e820a6388d2c652c6bdbfe4", "kind": "unclassified_tcp", "frame_number": 55860, "timestamp_epoch": "1634915789.731563000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200c7b50c000000197b" } }, { "event_id": "evt-eec0b366dfd1cb70572297ba", "kind": "unclassified_tcp", "frame_number": 55863, "timestamp_epoch": "1634915789.915698000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c7b50e00000005020002" } }, { "event_id": "evt-d3627f93190fed3915cee93a", "kind": "unclassified_tcp", "frame_number": 55864, "timestamp_epoch": "1634915789.916271000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200c7b50c0000000502" } }, { "event_id": "evt-7f50d1ca1096242ad474007e", "kind": "unclassified_tcp", "frame_number": 55868, "timestamp_epoch": "1634915790.110037000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f21a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1ee4e6d9b89cde4d8ca08dfe", "kind": "unclassified_tcp", "frame_number": 55875, "timestamp_epoch": "1634915790.263617000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f2990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-3e63c1d5edf5138bc58dab1b", "kind": "unclassified_tcp", "frame_number": 55879, "timestamp_epoch": "1634915790.307074000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c7b520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-03dc2644036fe4494b6aabeb", "kind": "unclassified_tcp", "frame_number": 55880, "timestamp_epoch": "1634915790.307558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200c7b50c0000000100" } }, { "event_id": "evt-ce77a149cbde212d9e7fa1d9", "kind": "unclassified_tcp", "frame_number": 55882, "timestamp_epoch": "1634915790.607959000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f2140000005354415254544c530d0a" } }, { "event_id": "evt-5a1c4c70995b01038c64f623", "kind": "unclassified_tcp", "frame_number": 55887, "timestamp_epoch": "1634915790.755137000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f22800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-08baa7f65207d65940fb30a8", "kind": "unclassified_tcp", "frame_number": 55890, "timestamp_epoch": "1634915790.803870000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c7b52d000000050100031c6d61696c2e676f6c646d61726b636f6e73756c74616e74732e636f6d0019" } }, { "event_id": "evt-07286acb6f4a9f50645cd70a", "kind": "unclassified_tcp", "frame_number": 55897, "timestamp_epoch": "1634915791.017995000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-15a4bb2555bcb44ae85d48f9", "kind": "unclassified_tcp", "frame_number": 55901, "timestamp_epoch": "1634915791.019086000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c7b514000000050000010a0a169cc344" } }, { "event_id": "evt-5101000dd4343ae3b58ef350", "kind": "unclassified_tcp", "frame_number": 55907, "timestamp_epoch": "1634915791.187637000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-512f6925e907774be2aecb72", "kind": "unclassified_tcp", "frame_number": 55908, "timestamp_epoch": "1634915791.187652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2b77b8b777cd8d3d26c1a341", "kind": "unclassified_tcp", "frame_number": 55909, "timestamp_epoch": "1634915791.187660000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-607bcf83be562e6f70df96e3", "kind": "unclassified_tcp", "frame_number": 55913, "timestamp_epoch": "1634915791.187982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f26200000039427124d37c14c1305b734cb369f2a2a7bea031252146752442922ef9005d65446582a5a84b0983d1bfeb4105cd17110401020047560e7b751e1b629177ccda473f9f2b5f0f906ff884937b83c27b61311c91baf07e6c4d" } }, { "event_id": "evt-bc119ddd2f7f679951e65a43", "kind": "unclassified_tcp", "frame_number": 55918, "timestamp_epoch": "1634915791.190707000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dca7760d42a5ea6977eab1f0", "kind": "unclassified_tcp", "frame_number": 55922, "timestamp_epoch": "1634915791.491973000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f2e4000000160303008a10000086850401feb2443c0b3557ea72f05dae07c022996ea6795ead4dbcd83c00fdea4076567ff6a28b59368ac12a734d5bcb8991c32178644567f36e1f33de4a2e40c0c71e140a00806e17eecee06a09aec8040d6080f5cccbdd82b11b5dac438f95c85fefb16ef9749574e09d37ddffcf3de9d1c9421ba524293ca906e03db03b40eb6f4d14b684d71403030001011603030040de50b12d05ad39af911243c25f32499bd8283dab55522fdef50ad820c4add8fd32b77cc55b1d4e445c33a55da5875ead603cfd538b696a9359ea6f50bf55f539" } }, { "event_id": "evt-e8dd3f5af04c6d0e7082c878", "kind": "unclassified_tcp", "frame_number": 55927, "timestamp_epoch": "1634915791.644674000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f25500000014030300010116030300409c85307e860b508cd2b13247ed030a01be88a103c3b1a007dbdf3f9d4f5f57ec62e141cff9e67a990c37d3d9b2db91d4ae3d2c51b34da6e46c0993aba13d83c7" } }, { "event_id": "evt-ec7626ecda05fba91d3f9398", "kind": "unclassified_tcp", "frame_number": 55930, "timestamp_epoch": "1634915791.907967000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f0000001703030040b4f90fa59315a70ddfa0c25953e411b5c145b44c32f0c4687d1192a6db2a8a052b17b67debfdd6553a4538209218636a07cc500419f3fd9f577f63251f3f7855" } }, { "event_id": "evt-d61fcb52db2781672cc2597d", "kind": "unclassified_tcp", "frame_number": 55934, "timestamp_epoch": "1634915792.004129000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b7ee9e5c0b205f82f68b643a", "kind": "unclassified_tcp", "frame_number": 55937, "timestamp_epoch": "1634915792.049762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f2d900000017030300400a81ebfb1b4aeec114656e73b61665bb4849f0fc75dd10d03f0af31177d9f2b110c926ba4ea7c0a74452cd09cf561120c96819d92c91f580d1eae2791c123b911703030040b79e98c8b216faf0a1eabbe11e03e47eff8b0262f8938bb12a4d0f1e3a00a2235a524e4c07875114dfa3d5a447e6f2b8d9f3a7e4a681e79bd6b3dafc2fbaad861703030040b1f66d6e0a97febafc69e4be545b24f0726b8a17ab7533ddc076c51ff38052483f07b57904637fac79aaa92ed357556b66a86e53a8de7c967afcae5dcf279af2" } }, { "event_id": "evt-d503bc78e33ddfc69584993b", "kind": "unclassified_tcp", "frame_number": 55941, "timestamp_epoch": "1634915792.059827000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f2d90000001703030040cee65bcd964380d38c638f8e28f64e4b3d68bd8f8ef7cc9f2cd5e59dcee97b6ed3cb9958070ebfa1144efaa30a69e82a42b9e5a2640fe40326f73493a45846511703030040134dc84c8a3b56ed0e9434ee681b2ec461caf77c2d60bc17d4ce3affdba60ab5d6fa9d568123734f7425b722e5155074a65214ec1fba7636a8fe2c63058bdd7c17030300402f95cbe9aa359a4e57d8db65dbc4ae9861e6ad709e50b9fe52daf58b1afead767ccd65ec67cc76baf92f94b0838a993759c5ecdd74316f548a024a7313404fd0" } }, { "event_id": "evt-8558b2841df79296a318a7d4", "kind": "unclassified_tcp", "frame_number": 55945, "timestamp_epoch": "1634915793.466231000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f00000017030300402b2f6ff8527ba0738130354a817e672ee30444411503b257ee26718e6866c3d13d84a3b724dc381cdd32e637f6d39c143ecc29f4e5bcaed595c1be1700165558" } }, { "event_id": "evt-873ddefb6a4f3c892979f8ed", "kind": "unclassified_tcp", "frame_number": 55952, "timestamp_epoch": "1634915793.625712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f000000170303004012584d3430d3a6b65a4940d90cc5a92e508dbf81cffc763477067b4ca5c81d680b6d9928ea7364483ef1f884e3f4471624e86d8d8625c930cf05a4096286579b" } }, { "event_id": "evt-2ffe05d2ccfef8c100088a2f", "kind": "unclassified_tcp", "frame_number": 55955, "timestamp_epoch": "1634915793.875155000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f00000017030300400cb384ce3c2a8433ff95e0e204a19a2e5cbd026b11651525aeb2c07e0aaaeaba13c431b610282856a6c493bc65b6f6a68808892f19fe5e29102eea5810bf5856" } }, { "event_id": "evt-caa4e81d45573f5f38f55df7", "kind": "unclassified_tcp", "frame_number": 55960, "timestamp_epoch": "1634915794.015612000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f0000001703030040d2fc8faea15ed073e88b629ef6e66c0da6f02dc1906279ff692e389cb58cb5b2a578b594ad1f65d3932b6cfacd69782ccebebe1d589fb1a606368aeca85afa16" } }, { "event_id": "evt-2cdf00b00f695085a149f232", "kind": "unclassified_tcp", "frame_number": 55964, "timestamp_epoch": "1634915794.274786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f24f0000001703030040002ec109aa2924350a47eccc9744881c3aa3c9c2fc1d955d77fb6f6933e8e8490c4eb31eba22af0a66b544cfe1e1b8386b4f8bc50033396453e42ef4a9d95aee" } }, { "event_id": "evt-50131a6300606c87c9b46402", "kind": "unclassified_tcp", "frame_number": 55971, "timestamp_epoch": "1634915796.462684000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f25f000000170303005095cbf267710611950ba7785e2a0a8a577bb63dca60aeb29f7f0b0754e355b6200839da1015a26423b19d178491d51a2894bcb114dc4237e8c488242b0b571cd27b277aaea35390f7e8cbc0d68dfbc084" } }, { "event_id": "evt-566718ed4b2680a06806c2bb", "kind": "unclassified_tcp", "frame_number": 55974, "timestamp_epoch": "1634915796.928900000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f23f0000001703030030b13f6936cda3c8cbe513a8ca6d54073bdc06f7263ae3c788974831b2d61c335933e0845116a27c69674bebe366623df3" } }, { "event_id": "evt-f9f1527d384ced8251c98fad", "kind": "unclassified_tcp", "frame_number": 55978, "timestamp_epoch": "1634915797.021789000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-917d7b25f1afc3fef83c5b23", "kind": "unclassified_tcp", "frame_number": 55986, "timestamp_epoch": "1634915801.350523000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200c7b50a000000" } }, { "event_id": "evt-4d902a1617266e5bd81d4513", "kind": "unclassified_tcp", "frame_number": 55993, "timestamp_epoch": "1634915803.021300000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1051dcd5aafa0a4cfd6d507d", "kind": "unclassified_tcp", "frame_number": 56000, "timestamp_epoch": "1634915808.022043000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5e9e340db02e643127bba9b7", "kind": "unclassified_tcp", "frame_number": 56026, "timestamp_epoch": "1634915813.022257000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-851a8121b1f4b66b34d76e9a", "kind": "unclassified_tcp", "frame_number": 56056, "timestamp_epoch": "1634915815.286878000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-32ba6810726ca948111c1260", "kind": "unclassified_tcp", "frame_number": 56058, "timestamp_epoch": "1634915816.104810000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702008a9a0c000000197b" } }, { "event_id": "evt-1371108261a7d63b8602154e", "kind": "unclassified_tcp", "frame_number": 56061, "timestamp_epoch": "1634915816.319311000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008a9a0e00000005020002" } }, { "event_id": "evt-c023568d04240b1a88d23098", "kind": "unclassified_tcp", "frame_number": 56062, "timestamp_epoch": "1634915816.319724000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702008a9a0c0000000502" } }, { "event_id": "evt-a75d095d5fe3a860f607595e", "kind": "unclassified_tcp", "frame_number": 56064, "timestamp_epoch": "1634915816.668385000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008a9a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2ff02eef1fcdbe3c2f525426", "kind": "unclassified_tcp", "frame_number": 56065, "timestamp_epoch": "1634915816.668893000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702008a9a0c0000000100" } }, { "event_id": "evt-a0d58233ce2d29a4784efabc", "kind": "unclassified_tcp", "frame_number": 56067, "timestamp_epoch": "1634915817.066327000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008a9a2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-333ea02cfeb8143d4f24c00b", "kind": "unclassified_tcp", "frame_number": 56101, "timestamp_epoch": "1634915819.022146000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9674e48fac750ef6a064fe64", "kind": "unclassified_tcp", "frame_number": 56113, "timestamp_epoch": "1634915820.291767000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300536e0c000000197b" } }, { "event_id": "evt-c8cc0495867cb795d4cf915b", "kind": "unclassified_tcp", "frame_number": 56115, "timestamp_epoch": "1634915820.472191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e0e00000005020002" } }, { "event_id": "evt-580c54f158b68cacbe86c3b1", "kind": "unclassified_tcp", "frame_number": 56136, "timestamp_epoch": "1634915824.916581000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008a9a140000000504000100000000000003070300536e0c0000000502" } }, { "event_id": "evt-f58f50db11636eda502b75da", "kind": "unclassified_tcp", "frame_number": 56138, "timestamp_epoch": "1634915825.021749000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c614459de723dd20790ba5bc", "kind": "unclassified_tcp", "frame_number": 56140, "timestamp_epoch": "1634915825.228223000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702008a9a0a00000004070300536e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-91fcb499561c9e1738edf3b7", "kind": "unclassified_tcp", "frame_number": 56141, "timestamp_epoch": "1634915825.228795000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300536e0c0000000100" } }, { "event_id": "evt-d6395715900be813b2376612", "kind": "unclassified_tcp", "frame_number": 56144, "timestamp_epoch": "1634915825.579600000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e2300000005010003126d61696c30342e6c34656d61696c2e636f6d0019" } }, { "event_id": "evt-9f0a5b42f6fe8e6af47ba531", "kind": "unclassified_tcp", "frame_number": 56152, "timestamp_epoch": "1634915825.692168000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e14000000050000010a0a169cc349" } }, { "event_id": "evt-7f9281bc3648c9ba9793582f", "kind": "unclassified_tcp", "frame_number": 56155, "timestamp_epoch": "1634915825.849596000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e30000000323230206d61696c30342e6c34656d61696c2e636f6d2045534d545020506f73746669780d0a" } }, { "event_id": "evt-602a46309ea91fd58cb3be97", "kind": "unclassified_tcp", "frame_number": 56163, "timestamp_epoch": "1634915826.140191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-656b227286909759592bffce", "kind": "unclassified_tcp", "frame_number": 56168, "timestamp_epoch": "1634915826.207178000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536eb00000003235302d6d61696c30342e6c34656d61696c2e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452033303732303030300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-3ea08408cacf468fc374a82e", "kind": "unclassified_tcp", "frame_number": 56172, "timestamp_epoch": "1634915826.495638000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e140000005354415254544c530d0a" } }, { "event_id": "evt-7de287ea4d8ca7570d17ea1d", "kind": "unclassified_tcp", "frame_number": 56177, "timestamp_epoch": "1634915826.570396000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-0d532a431dc0886f25b37826", "kind": "unclassified_tcp", "frame_number": 56180, "timestamp_epoch": "1634915826.870693000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3ed666befcad550e8e706112", "kind": "unclassified_tcp", "frame_number": 56186, "timestamp_epoch": "1634915826.960788000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eb71ce7e5c269e60c8c0face", "kind": "unclassified_tcp", "frame_number": 56191, "timestamp_epoch": "1634915826.964916000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a59d375fe855210cbb6c63a1", "kind": "unclassified_tcp", "frame_number": 56192, "timestamp_epoch": "1634915826.964937000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8daab9367df64e76286267d8", "kind": "unclassified_tcp", "frame_number": 56197, "timestamp_epoch": "1634915827.047268000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c117b943d2db4184bfece2c8", "kind": "unclassified_tcp", "frame_number": 56201, "timestamp_epoch": "1634915827.341720000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e880000001603030046100000424104dd41620a21805be5a9ddfa2795af99003da710a61721f758ec29fa466f7ca8b5760ba8bffb28b3f6375bffd7a98210016902b8bf265bc6305e4da2d751e4596314030300010116030300280000000000000000a30aafd1795b4ccec7b18cd3b9e5c6f9475ad941c081a5fda0ec687b3e9dbd6a" } }, { "event_id": "evt-e2f15ecce4b1c97eab6cc51f", "kind": "unclassified_tcp", "frame_number": 56206, "timestamp_epoch": "1634915827.416687000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e3d00000014030300010116030300283b7af95491b536f56b74b0e0110fab4d733e14eea256a515b789ff03363fdb935609e7c401037d27" } }, { "event_id": "evt-450044dfc704e24912ee34dd", "kind": "unclassified_tcp", "frame_number": 56210, "timestamp_epoch": "1634915827.788527000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e37000000170303002800000000000000017bf66183277023d1034cc897559816c0d5a820d6c60fb8ce58750b0dd199f014" } }, { "event_id": "evt-827ae77cb3fff242df1be9ab", "kind": "unclassified_tcp", "frame_number": 56215, "timestamp_epoch": "1634915827.870536000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536ebf00000017030300b03b7af95491b536f61e6cf97e51a04f0c1985aeb00821839ba0d2c5de7ac0507f7873e670d078633d074287604c88d4e4e4306a42fdaa32f73a3fcd7af0323a916f410e0d69077fb3a90a4e3be2194a47ca2c13714f23dafdabc455a28ac2325289e1755e42414291964d418017e2205a8de576821050ecf74519d934dcc15fc07dc0334651ce9b0b92bc5401c5721d426d49d397aeadc2a641ad2e71b9bc7ed54652b7a6409feb4a6549f5fd89198558" } }, { "event_id": "evt-59455fc56437271b07884bf5", "kind": "unclassified_tcp", "frame_number": 56221, "timestamp_epoch": "1634915829.126849000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e3300000017030300240000000000000002cc40147f5909b1821bf34db8141fa8ee4122b80fc28b4223e1808a2b" } }, { "event_id": "evt-3e1330a16619d61a950df66b", "kind": "unclassified_tcp", "frame_number": 56226, "timestamp_epoch": "1634915829.194360000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e39000000170303002a3b7af95491b536f7271d600dc5806b035c2096566436b9747eb8b9b6534ef16527aa11d1eb77ae14a59b" } }, { "event_id": "evt-bb9517820bbe49f7aa8839e7", "kind": "unclassified_tcp", "frame_number": 56230, "timestamp_epoch": "1634915829.507825000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e55000000170303004600000000000000038eac37a755adfddcd7136ba07666ec69da334ecefeddd9ea161802ffbfa14334f30968b8b61e00eed2beed9e89288fa07e0b7f2095f490003421c5b48a29" } }, { "event_id": "evt-ef7be2db90910d9b88f50324", "kind": "unclassified_tcp", "frame_number": 56235, "timestamp_epoch": "1634915829.578401000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e39000000170303002a3b7af95491b536f8b0937768dbfafadb2ca71bdff4006095d566b4df50169cfe29137724166d98f68640" } }, { "event_id": "evt-e744c55a1e376222cba88730", "kind": "unclassified_tcp", "frame_number": 56239, "timestamp_epoch": "1634915829.834375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f25f00000017030300502fe6a5afbc7e0019c50261bb47c433b96e6ed6e78854ce4a434ec23b5ae9386d0a644be308de00d9a27260fa8fff39dbec0a31f6bcd4906c795a66846130b2757a6892c726adedce971d5dc77f95dbf5" } }, { "event_id": "evt-3ea048afc86d9515ff009065", "kind": "unclassified_tcp", "frame_number": 56242, "timestamp_epoch": "1634915829.946506000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e39000000170303002a000000000000000453b36e53984502554b002450ba34cdcb0f9d70834b0eb99e45b293f7b9b982e40541" } }, { "event_id": "evt-7d4079723bb66f6f5778893a", "kind": "unclassified_tcp", "frame_number": 56247, "timestamp_epoch": "1634915830.068274000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f4db109715ef60a4e5b34a81", "kind": "unclassified_tcp", "frame_number": 56249, "timestamp_epoch": "1634915830.122057000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f23f00000017030300308c304cd53822332de9dadd0f3bcc3bd2d601114aa6222ea9ce12eaa5e73aea778cc74c89fde7072c0f170ab12a997069" } }, { "event_id": "evt-82a192a36cfa114b0624a51d", "kind": "unclassified_tcp", "frame_number": 56256, "timestamp_epoch": "1634915830.272608000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f26f0000001703030060acc20a50edc7d5ba73f89ba111702336091f19d889363731ac6d7e8fabd224edec8c4ff776396e1b69e61da1d60521762e1d6f387a9891db0b511c153fcc9eff98e7ca37b3ad3e2f39cac8828beba5e638d4841cfbb99c17bb5fcf340258569f" } }, { "event_id": "evt-c07429eef1e2a603f4dc596a", "kind": "unclassified_tcp", "frame_number": 56260, "timestamp_epoch": "1634915830.272984000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010073f20a000000" } }, { "event_id": "evt-154504a9f9db48122b7f59e9", "kind": "unclassified_tcp", "frame_number": 56262, "timestamp_epoch": "1634915830.569446000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010073f23f00000015030300303eaf2f78038ac0e94109c17945b989e0a808ca119aa4c04f98579609ca4ba7ddb6763cc5f89a9885a15e258877e90b27" } }, { "event_id": "evt-da46760cf069cc4593e41451", "kind": "unclassified_tcp", "frame_number": 56264, "timestamp_epoch": "1634915830.762675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010073f20a000000" } }, { "event_id": "evt-5bbd539d9b7ef565f066630e", "kind": "unclassified_tcp", "frame_number": 56270, "timestamp_epoch": "1634915832.379110000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e5d000000170303004e3b7af95491b536f90607b3983fa7f8b85898fcfd160f872ff572654a69a81a170ddab163f6bdc9da084cd42f9f69cbbcbdbd39f02d45648b8075470a809e52f9f047d95e138e0c52902605008e4d" } }, { "event_id": "evt-c1a3c698f0a6ca8d52e520e1", "kind": "unclassified_tcp", "frame_number": 56273, "timestamp_epoch": "1634915832.641295000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e2a000000170303001b000000000000000590d3e3c060c87e4a86fb3981f244eac887527e" } }, { "event_id": "evt-699d71039057b6f4f0719e66", "kind": "unclassified_tcp", "frame_number": 56278, "timestamp_epoch": "1634915832.709839000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e5000000017030300413b7af95491b536fa426c1218f3d3824876d2d4931b1ddb756f6ea67b6d473401819ead3436db41e4ff76ccd0c32301f7d306a71cd0acef5e7291376bff03a24883" } }, { "event_id": "evt-be802ab5c5d49fe64d59f831", "kind": "unclassified_tcp", "frame_number": 56281, "timestamp_epoch": "1634915832.982629000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e2d000000170303001e0000000000000006defa38e74bd1aec31708410bd9ac1e905ad5cec513b1" } }, { "event_id": "evt-f856113e1ba5722806b60945", "kind": "unclassified_tcp", "frame_number": 56287, "timestamp_epoch": "1634915833.045130000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e3600000017030300273b7af95491b536fbb73ff1a673e33c0afcfb9d0cec438a7b12b9cbce9783ee736b9262770d098f" } }, { "event_id": "evt-3844995902b510b5d5ed3910", "kind": "unclassified_tcp", "frame_number": 56291, "timestamp_epoch": "1634915833.118368000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e29000000150303001a3b7af95491b536fc9b3c0153d8fe46823168dff5095335e33cc4" } }, { "event_id": "evt-8b328d135934a32a90de8fed", "kind": "unclassified_tcp", "frame_number": 56297, "timestamp_epoch": "1634915833.372121000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300536e29000000150303001a0000000000000007ee93061b8bcdfd3df93a832d25e98ed87ce8" } }, { "event_id": "evt-a6201d72ff820790d20d8f2a", "kind": "unclassified_tcp", "frame_number": 56304, "timestamp_epoch": "1634915833.435773000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300536e0a000000" } }, { "event_id": "evt-32283918a6f7a4effbe3e47f", "kind": "unclassified_tcp", "frame_number": 56306, "timestamp_epoch": "1634915833.558755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300536e0a000000" } }, { "event_id": "evt-7d48053df5c648ca1b036a77", "kind": "unclassified_tcp", "frame_number": 56312, "timestamp_epoch": "1634915835.114786000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3b5c8b52c6f8b1bcb67ad187", "kind": "unclassified_tcp", "frame_number": 56329, "timestamp_epoch": "1634915840.177407000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-28298dda42263bcee117dece", "kind": "unclassified_tcp", "frame_number": 56355, "timestamp_epoch": "1634915845.240889000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4995b400e12603489b5ce4f9", "kind": "unclassified_tcp", "frame_number": 56419, "timestamp_epoch": "1634915850.272835000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e38e2eb459a0e4a4b228b1a4", "kind": "unclassified_tcp", "frame_number": 56551, "timestamp_epoch": "1634915855.287397000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6b39cd22ec759a0505800b2a", "kind": "unclassified_tcp", "frame_number": 56569, "timestamp_epoch": "1634915860.350602000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c10a17b5840f8a21827b950e", "kind": "unclassified_tcp", "frame_number": 56573, "timestamp_epoch": "1634915862.382042000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010013360c000000197b" } }, { "event_id": "evt-c6e25449f83aab827805282d", "kind": "unclassified_tcp", "frame_number": 56575, "timestamp_epoch": "1634915862.565273000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010013360e00000005020002" } }, { "event_id": "evt-ff013abb688b2efc5f8b376e", "kind": "unclassified_tcp", "frame_number": 56576, "timestamp_epoch": "1634915862.565642000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010013360c0000000502" } }, { "event_id": "evt-a391dc119ec2fa2dd60f0957", "kind": "unclassified_tcp", "frame_number": 56578, "timestamp_epoch": "1634915862.803617000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100133620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-926c1ed40a6719a98a3edf4c", "kind": "unclassified_tcp", "frame_number": 56579, "timestamp_epoch": "1634915862.803852000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010013360c0000000100" } }, { "event_id": "evt-9ab506d5d23ce70ca5f71b69", "kind": "unclassified_tcp", "frame_number": 56591, "timestamp_epoch": "1634915863.165372000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010013362700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-c7fc0c8fd4e851af01095130", "kind": "unclassified_tcp", "frame_number": 56614, "timestamp_epoch": "1634915865.382183000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e889614ea4799ffb2e088960", "kind": "unclassified_tcp", "frame_number": 56618, "timestamp_epoch": "1634915866.785235000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702001c790c000000197b" } }, { "event_id": "evt-69b9cf858b476d3c25edce8d", "kind": "unclassified_tcp", "frame_number": 56620, "timestamp_epoch": "1634915866.981559000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001c790e00000005020002" } }, { "event_id": "evt-a365af1852adcf9e38c0e632", "kind": "unclassified_tcp", "frame_number": 56639, "timestamp_epoch": "1634915870.443473000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d656feb77859462084252799", "kind": "unclassified_tcp", "frame_number": 56642, "timestamp_epoch": "1634915871.127014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010013361400000005040001000000000000030702001c790c0000000502" } }, { "event_id": "evt-3cd3485052ffd3053f76b096", "kind": "unclassified_tcp", "frame_number": 56646, "timestamp_epoch": "1634915871.620027000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010013360a000000040702001c7920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-49f12e6f4ecb064150eb5b47", "kind": "unclassified_tcp", "frame_number": 56647, "timestamp_epoch": "1634915871.620488000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702001c790c0000000100" } }, { "event_id": "evt-a9e523247f59324800efa14b", "kind": "unclassified_tcp", "frame_number": 56650, "timestamp_epoch": "1634915872.126330000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001c792300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-ad6d03ed8852d77fdfa42b88", "kind": "unclassified_tcp", "frame_number": 56660, "timestamp_epoch": "1634915872.932258000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001c7914000000050000010a0a169cc353" } }, { "event_id": "evt-99efd98a9b9c3f931b3c1048", "kind": "unclassified_tcp", "frame_number": 56667, "timestamp_epoch": "1634915874.959994000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-78744c1f62e967a09afd9acb", "kind": "unclassified_tcp", "frame_number": 56669, "timestamp_epoch": "1634915875.080602000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100ed260c000000197b" } }, { "event_id": "evt-8c473eb2faf598906a0c1e04", "kind": "unclassified_tcp", "frame_number": 56672, "timestamp_epoch": "1634915875.273033000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ed260e00000005020002" } }, { "event_id": "evt-f919ae70c27250618a695055", "kind": "unclassified_tcp", "frame_number": 56673, "timestamp_epoch": "1634915875.273279000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ed260c0000000502" } }, { "event_id": "evt-1232c061f48394debde75925", "kind": "unclassified_tcp", "frame_number": 56675, "timestamp_epoch": "1634915875.506417000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c44677adf0a7cad242730433", "kind": "unclassified_tcp", "frame_number": 56677, "timestamp_epoch": "1634915875.589615000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ed2620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f4f2a49da3d3c8a192d4ec0f", "kind": "unclassified_tcp", "frame_number": 56678, "timestamp_epoch": "1634915875.590099000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ed260c0000000100" } }, { "event_id": "evt-80abec3bb587c50ed416b15b", "kind": "unclassified_tcp", "frame_number": 56680, "timestamp_epoch": "1634915875.902500000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ed262700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-0a651471455bc1c1e3adf004", "kind": "unclassified_tcp", "frame_number": 56695, "timestamp_epoch": "1634915880.523029000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-decc75363e52aa78ce5502fb", "kind": "unclassified_tcp", "frame_number": 56697, "timestamp_epoch": "1634915880.814366000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300e0ac0c000000197b" } }, { "event_id": "evt-22e248fd90a5afdb5045adba", "kind": "unclassified_tcp", "frame_number": 56699, "timestamp_epoch": "1634915881.004561000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac0e00000005020002" } }, { "event_id": "evt-231b554d575bc507bc9ae5c2", "kind": "unclassified_tcp", "frame_number": 56705, "timestamp_epoch": "1634915883.476677000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702001c790a000000" } }, { "event_id": "evt-b816087268fae9276c13235d", "kind": "unclassified_tcp", "frame_number": 56709, "timestamp_epoch": "1634915883.976531000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ed26140000000504000100000000000003070300e0ac0c0000000502" } }, { "event_id": "evt-dd9960654b34ff4719d6552a", "kind": "unclassified_tcp", "frame_number": 56712, "timestamp_epoch": "1634915884.371139000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ed260a00000004070300e0ac20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-7a50ee739078a4bdd5ee2c74", "kind": "unclassified_tcp", "frame_number": 56713, "timestamp_epoch": "1634915884.371780000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300e0ac0c0000000100" } }, { "event_id": "evt-904c2b845065e8dd48de82b9", "kind": "unclassified_tcp", "frame_number": 56715, "timestamp_epoch": "1634915884.561810000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100bf910c000000197b" } }, { "event_id": "evt-442801db6efdd01a386f19c7", "kind": "unclassified_tcp", "frame_number": 56717, "timestamp_epoch": "1634915884.752062000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf910e0000000502000204070300e0ac2800000005010003176d61696c2e78656e69756d2d706172746e6572732e66720019" } }, { "event_id": "evt-52e963ece3dd0d8b421bae0e", "kind": "unclassified_tcp", "frame_number": 56723, "timestamp_epoch": "1634915884.890555000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bf910c0000000502" } }, { "event_id": "evt-2ee8a5b04f472b35cf30dfac", "kind": "unclassified_tcp", "frame_number": 56727, "timestamp_epoch": "1634915885.049650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac14000000050000010a0a169cc355" } }, { "event_id": "evt-5dceb7dc0c86069ca7753978", "kind": "unclassified_tcp", "frame_number": 56729, "timestamp_epoch": "1634915885.233345000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8e6e0ee86cde6a651d378c0d", "kind": "unclassified_tcp", "frame_number": 56730, "timestamp_epoch": "1634915885.233911000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bf910c0000000100" } }, { "event_id": "evt-6e69307a6e308c9ef5c78d98", "kind": "unclassified_tcp", "frame_number": 56733, "timestamp_epoch": "1634915885.554769000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-009cc1dfbd10fc902a2dcb0a", "kind": "unclassified_tcp", "frame_number": 56736, "timestamp_epoch": "1634915885.669224000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac35000000323230204741524d2d31303052303033204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-a9a2ed60d8d197e6cfa6c4c7", "kind": "unclassified_tcp", "frame_number": 56738, "timestamp_epoch": "1634915885.677209000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf912300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-5e2097f2537e59cabf76baa9", "kind": "unclassified_tcp", "frame_number": 56742, "timestamp_epoch": "1634915885.881640000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200cccb0c000000197b04070200cccb0e00000005020002" } }, { "event_id": "evt-f64f26705b8013b16e55957f", "kind": "unclassified_tcp", "frame_number": 56743, "timestamp_epoch": "1634915885.882009000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cccb0c0000000502" } }, { "event_id": "evt-59e74f579d4b502c448d38cd", "kind": "unclassified_tcp", "frame_number": 56747, "timestamp_epoch": "1634915886.024630000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9114000000050000010a0a169cc356" } }, { "event_id": "evt-c105e42bbb8e68152c3900f1", "kind": "unclassified_tcp", "frame_number": 56749, "timestamp_epoch": "1634915886.109246000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-90e45d07c5a800a93d4fbee3", "kind": "unclassified_tcp", "frame_number": 56755, "timestamp_epoch": "1634915886.261512000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-72e5284535df4087a298e5d8", "kind": "unclassified_tcp", "frame_number": 56757, "timestamp_epoch": "1634915886.298944000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-dbe47b8e624175023fec0b65", "kind": "unclassified_tcp", "frame_number": 56758, "timestamp_epoch": "1634915886.299486000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cccb0c0000000100" } }, { "event_id": "evt-50a2708a9fbb1648c8cf5cc2", "kind": "unclassified_tcp", "frame_number": 56761, "timestamp_epoch": "1634915886.576980000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac140000005354415254544c530d0a" } }, { "event_id": "evt-b469fd843310531791abeb67", "kind": "unclassified_tcp", "frame_number": 56766, "timestamp_epoch": "1634915886.716579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-6b3362ca58277de12cff43f7", "kind": "unclassified_tcp", "frame_number": 56769, "timestamp_epoch": "1634915886.979282000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb2800000005010003176d61696c2e78656e69756d2d706172746e6572732e66720019" } }, { "event_id": "evt-adfc86bc0b13e92fedc3150a", "kind": "unclassified_tcp", "frame_number": 56774, "timestamp_epoch": "1634915887.127800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb14000000050000010a0a169cc357" } }, { "event_id": "evt-c2ede97e9b9c6341cbc6c21f", "kind": "unclassified_tcp", "frame_number": 56776, "timestamp_epoch": "1634915887.166046000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-56e74c2bd88932f60c7c64c0", "kind": "unclassified_tcp", "frame_number": 56782, "timestamp_epoch": "1634915887.269652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb34000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-111d1a0980f020556a1fbc58", "kind": "unclassified_tcp", "frame_number": 56790, "timestamp_epoch": "1634915887.357329000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bb419a20c69caf0796178104", "kind": "unclassified_tcp", "frame_number": 56791, "timestamp_epoch": "1634915887.357343000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372" } }, { "event_id": "evt-dd8e23b6c571c1716af97b55", "kind": "unclassified_tcp", "frame_number": 56792, "timestamp_epoch": "1634915887.357351000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d0300198504001f656aa499d9552a7a707afac1d6ad08aa812e2dcb6f1752fac5605348fd63b1789ad67e88e392139718ade3e2a51583bb0ba850ebc15343525b75d393a1210997002da654d17e44765426e2b979d315bc882f" } }, { "event_id": "evt-6af00fcdb237eb35f7c999c3", "kind": "unclassified_tcp", "frame_number": 56796, "timestamp_epoch": "1634915887.357708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac420200005fb2c59bc4ba8fda768285da6736d87fd92e41f4cd684f8c67f7768a7bc379afddb7ab123f64cc078b01aeb83829e30304010200a0159357c1b384fe8d835540cb0821868b5eff84d0873e188981fe99173cb9b6f4ffdb4489bfa5cacb8f8cef7c22c09609a79eff92c7eda004e50d1e6b8b8b4b3c72478ac6e821b3289a1991512a931950fdc02d9635f1508a9ce8b0878cf76d5d71aba0854f1a6d0c2d73fd6b8bf634148053b20804ce6b216f4cb3c99a2add7adcb15b07fd22e6ad4a197f13bbd30531a391b3865d3a2c4771bdbe5332799d9989f7d21674ba183aac3192808714bbf036e77ea9de278855ed89bbd50a121c0e9c532d2c336691b663211afd32ad565e5069f4832fda1aaef29db7fc8807cc561fb2db9e971ad972c3aff08afd575cfef04b87d7b0ea5b387809c952bd35e507014f95213ce4e2868e5f49dc9ec26a9d21764647cabcf75a06565de8aa88e3531c6990e7b0e56ceb2f4c802b9a08d8f39286ac68b37dd98d5b446ed11e8b69f6a0005073c77b5377bb3f3f13aee867aa8c547fb071074db1858cf8b3d2f519545bfb83c0b5b7dbf97288d455797f47f034dbe2418c540eeed8ba9256b85f7c07b955355a05d8ffecd2cf02484cfb2d920fa077091a618e9e72ed954b11a3a1d85ec6e75b1c154fa0e4cfcab5619d5773ada0712f2a490a59c99ce907b20f9a7fce2ea003680577a9058dcee82b3773eb5ac59aa112aa0ad047d9c4367e448abd76f3a7f044b608b343d2b9422079dc7d17eb5219f74c65f3a5b283657c3a5b0e000000" } }, { "event_id": "evt-8d2ce9b261f38eda681fa458", "kind": "unclassified_tcp", "frame_number": 56798, "timestamp_epoch": "1634915887.684624000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b839809d982f6106581306bb", "kind": "unclassified_tcp", "frame_number": 56803, "timestamp_epoch": "1634915887.831484000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-05eb54621c407e2f71a26e62", "kind": "unclassified_tcp", "frame_number": 56805, "timestamp_epoch": "1634915887.867875000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ace4000000160303008a100000868504010a28fac1950f77c080b6b00f44b8cfba7e3d4a74d59186d7e0fc76c36344a890560b93b4753cf2ec68f9ac40b6ccd2817e8eec81a8627c299c919c4c935d3d669b0012acffed58aa7447257800d32b0444d5c823a3758a7ef3d757a7f531a55a4dca52306ffaed179c6e7e78ebf5f5323af741109f326235ac3bc5573078ffeefbfaf11403030001011603030040b41bd8f5d7fecde40d25073cbd2cc2cc72b9f4c1fddd10822750bd6d6c48b7520bea32a2a6806f95464bb48aaa56d096773df478a913d9317c6e7ef4adb945fb" } }, { "event_id": "evt-2a6cc4878c4ae4ffae29902d", "kind": "unclassified_tcp", "frame_number": 56811, "timestamp_epoch": "1634915888.033690000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac550000001403030001011603030040a42405a16719ec587b8857d97f34d15f125c620629d8e0ad319e49e7dc2901ae82ee7ccc91aca557e5f63349aee024c12c3b6ec92a7ec167002d8b1828a5895f" } }, { "event_id": "evt-1d122b9e2851b032145177a9", "kind": "unclassified_tcp", "frame_number": 56815, "timestamp_epoch": "1634915888.203753000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb140000005354415254544c530d0a" } }, { "event_id": "evt-869d4c86bd1293b2af7651df", "kind": "unclassified_tcp", "frame_number": 56821, "timestamp_epoch": "1634915888.380495000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-630e854d1b2afb96d4f0b50d", "kind": "unclassified_tcp", "frame_number": 56823, "timestamp_epoch": "1634915888.400476000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac4f0000001703030040650314596fe29c197bf6ed608dcc09bb0efcb1eda7462f5ee54c990e2b4a70cfa308bb13d1df9e5be00c9ce5c9120a0bd86fc50757527464384cb0ff0a2ea0fb" } }, { "event_id": "evt-453126d8851d44d43fff6e0a", "kind": "unclassified_tcp", "frame_number": 56831, "timestamp_epoch": "1634915888.552310000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b64be5e9851867c601f4eb80", "kind": "unclassified_tcp", "frame_number": 56833, "timestamp_epoch": "1634915888.801851000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-18a93d295b99ae342a7f362a", "kind": "unclassified_tcp", "frame_number": 56840, "timestamp_epoch": "1634915888.986190000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e4b53b8a6cf55f94289df692", "kind": "unclassified_tcp", "frame_number": 56843, "timestamp_epoch": "1634915888.989748000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb6a0500006cf585f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274" } }, { "event_id": "evt-3e62a95a9379932a653cfdb6", "kind": "unclassified_tcp", "frame_number": 56847, "timestamp_epoch": "1634915889.001255000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-efda4c78bfc67a57915bdde4", "kind": "unclassified_tcp", "frame_number": 56850, "timestamp_epoch": "1634915889.003754000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c9f778ae795998dfd55a4162", "kind": "unclassified_tcp", "frame_number": 56854, "timestamp_epoch": "1634915889.469987000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac4f00000017030300405d0f09e70f26d808cbe8530df541ba0f02047dcbf21814e2a100fa9e8306b4a3a47313e00d20e33c2368f7f6abe0a5d242f607954e0ee41d8ac460934ed97cde" } }, { "event_id": "evt-2d5a027aaf293157a503c716", "kind": "unclassified_tcp", "frame_number": 56859, "timestamp_epoch": "1634915889.623548000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac4f000000170303004038d2a7420af4aba58e9c45387c6a6dd566512e672fc13bff503fade57417b076e5d6ee22978c3246b848dfa697b87867c0ac9fc3afdd8813755ab44c3fb7aba5" } }, { "event_id": "evt-f411da709192741a32a60e45", "kind": "unclassified_tcp", "frame_number": 56862, "timestamp_epoch": "1634915889.695936000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccbe4000000160303008a10000086850401c794ffc2d37e30592165a2d8b5fc32a19b6ca0608dd1188c77f8a0a711d2c3acdc9aca2f79cc06c8f86aa28206bcc67a1065e179fbf60771236961e86acdc8642d00df34b0a329cb2532b529c515de9bf55996d959d6f074241d5659db309b96d39c980d6f8c91b8270b43024ea240d3a767c7c3a7a8b40c834b6a25258bc113f2e1d014030300010116030300400ea43307f5b50387364e2dc75d19c239e4e643209bc952ee29f6a6d2f9a551041c2b69c4bba3330d1f91971a1277764afe6a6d331bfa32e58e5f5cdcc0a9a509" } }, { "event_id": "evt-9b8cd32dec3acd2ef60e3d73", "kind": "unclassified_tcp", "frame_number": 56867, "timestamp_epoch": "1634915889.868208000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb5500000014030300010116030300405ae68a9ccc63fe5a5f3d3c099460a2cb59cf1e95cb04ba8730f055d5bcad1acd19adbc65807b40c0af506427cdd0d6b258faf27e6fdd56c9c4a40a7eb7bf494e" } }, { "event_id": "evt-8d7d2bde6089885d39307d70", "kind": "unclassified_tcp", "frame_number": 56870, "timestamp_epoch": "1634915889.985984000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac6f00000017030300601c7a40c7939e9d55db409279bfdf24743f1ea612b5dc48a48477472a87fe146fad667312c56891977976e3397b17f2858d2a6b4458e0a543551c0b655b70bd051f4744d9f419fa4cf4bbe9ed73c371bf2ddaecc7d425dcc2965bf4efa1639534" } }, { "event_id": "evt-b0fa0207ed0c209cd62eec42", "kind": "unclassified_tcp", "frame_number": 56875, "timestamp_epoch": "1634915890.143113000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac4f000000170303004006b2dbea57a27f128563e362c80fec35640e9205000ff29222d9d9309e2526b4623eb9613eb34917217fd31d76875caa1305b6b980accbea82dabfc3d1e06795" } }, { "event_id": "evt-b002679df38ae7c6372c6696", "kind": "unclassified_tcp", "frame_number": 56877, "timestamp_epoch": "1634915890.183934000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb4f0000001703030040ad40aabe99676741aec12cf7d6d9a97f580e7ee6ef306c40a8aa18a578520a0079064853db1d0ef4854ba27bdf36976a7ee66b5a277501e21be9c34b074c35a3" } }, { "event_id": "evt-11c5459178915a32d95834f6", "kind": "unclassified_tcp", "frame_number": 56886, "timestamp_epoch": "1634915890.327204000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccba8010000170303004003c79ce32a63fe1173b7bce1a1e384750612729764b52e3f947a63f072d74c9c08ab52b29373ed225dae16ae0519b3983fb9644cc972d8f2eda68d13103a20711703030040abc2a0ab87a3ffead3a4f9bac3922efe73ce46acdf8b627aed2ebfbd1ec0f23c35c502b22d64d54ccbf1386544b1a95f56344af8a8c7c32db8bcba39213005151703030040f892720825d0b015891db8d23cf1a06e943dd2664c7ee6d19ac6e4c3fd4a1876e9142b1551e24ae2a3be94daa1b0d79f8262d065b7a73be7a2e01add8f0c9ec21703030040e3de3e20e06b22277731b3e7bf8a2c4e5a439c066ca4f32a4e2a7cfb03d4f1fe3f254e2631aadcfbef4d0ab2861f3e717d970577dfd31299b22ef43e48d7442a17030300406ab38fe56434ab32c2c926c686c3a46671d8afe0ae919615b5ed8f0b3acdf7e1170eabf0279161c2e4f97d73c5d7866fe48c41d834600f9e2b4988ef6e325b8f1703030040ca3a4594f9aa0e5c7fab3e2ea30e1dd57eb32563c5940ea519d0c8549af1a7848a8d96710a869ca9ba46fdfa38e8cb0816568c02851d89d619f562f80f10bb67" } }, { "event_id": "evt-ac630cec2f07989d5a7210b5", "kind": "unclassified_tcp", "frame_number": 56888, "timestamp_epoch": "1634915890.514046000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac4f00000017030300405b40725005c4fc7f6527f72fe6890df49559bc0ed21a5ed8adcd9e37e657202a9012f81578bc353a6d2ddce88ae24fecf9a3ca65982d1d4f9e879333a98c62d5" } }, { "event_id": "evt-526c599509e1bb53310528cc", "kind": "unclassified_tcp", "frame_number": 56892, "timestamp_epoch": "1634915890.616158000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b1d28224945f77a2292ebc8a", "kind": "unclassified_tcp", "frame_number": 56897, "timestamp_epoch": "1634915891.465775000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf915d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31383a3131202b303230300d0a" } }, { "event_id": "evt-3b8bb3debab82293df6b5f92", "kind": "unclassified_tcp", "frame_number": 56899, "timestamp_epoch": "1634915891.476844000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb4f00000017030300405079084096c3c9e2e44d2a1035e6e36151e2625f56cc349391c18e63731cfbb308a6c3a68abe406722891a2a95a83e3e618fd565515b0ab8901efdccfed40df0" } }, { "event_id": "evt-dfc79c6c5c224fa1f491144f", "kind": "unclassified_tcp", "frame_number": 56905, "timestamp_epoch": "1634915891.625250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb4f0000001703030040b091531775fa2b0f56ee64f0b8a5f60deeee162f13032b3f9d180f0c6e5778d4ad74d2c8c83f0637ad52257c6192389e38c3ac843125db47843476bae4d5b6e2" } }, { "event_id": "evt-4ea92d45d39f1c47625a84fb", "kind": "unclassified_tcp", "frame_number": 56908, "timestamp_epoch": "1634915891.829877000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf911a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-db7af6acb8ca939d29ce83c8", "kind": "unclassified_tcp", "frame_number": 56912, "timestamp_epoch": "1634915892.042916000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb6f0000001703030060d24605dc17bd8350db6694c02f4803ad496d65184d47f5743020dfad02e79c453415bc28b16596e21a37daef029522300bfb5c080c59914f30a385c87b5f44f9016c556f48c13bec9b790cfde9aed826f0caa937f910b59869070c1cc012b2ca" } }, { "event_id": "evt-e79645ff15a0a548cc2900a8", "kind": "unclassified_tcp", "frame_number": 56917, "timestamp_epoch": "1634915892.155942000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf91c40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-58850bdda2420ce0f885c897", "kind": "unclassified_tcp", "frame_number": 56921, "timestamp_epoch": "1634915892.189759000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb4f0000001703030040719be3ba3dee2eab96b68b035bae82189022858f07e1c9cf7c8fdcbfdbbc341b31e2b3971f31efbca750c20d73f4f94821839530edfdf5a980c94f83bdc0b563" } }, { "event_id": "evt-bbb119be0b95a48dabb1346b", "kind": "unclassified_tcp", "frame_number": 56926, "timestamp_epoch": "1634915892.403549000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf91140000005354415254544c530d0a" } }, { "event_id": "evt-887ace94bf4a05efff7c2fdc", "kind": "unclassified_tcp", "frame_number": 56931, "timestamp_epoch": "1634915892.529408000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac5f00000017030300503c6cb584caff76a551708932bf8fe0307d2de3b3fb764cf43c96bea6b2464d6e75058a07f61c49750d0906b80416b8a85b5437f5e7dea1a4bdc80854fd41dc442e2bf672e20876278f6ab05347e6cd36" } }, { "event_id": "evt-8d3e999045c33ee0f2620534", "kind": "unclassified_tcp", "frame_number": 56934, "timestamp_epoch": "1634915892.699354000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb4f0000001703030040e612040815fb2e9801716b7eba4239f34735c54d655676b4df095f9ff7940c82836267c8d460e975d9d96051ee14824b90f025fedcc0397d04285886f277e433" } }, { "event_id": "evt-f369034c95aae123b98c1926", "kind": "unclassified_tcp", "frame_number": 56939, "timestamp_epoch": "1634915892.763670000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf911c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-1b450ef25d0003b77536f531", "kind": "unclassified_tcp", "frame_number": 56942, "timestamp_epoch": "1634915892.897812000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac3f000000170303003032fd384ba1b4c874ee93701e37dfc635cb949d53571c48903424c1ea05dea927b249d49be7b5a1eca6880f06d07b7abb" } }, { "event_id": "evt-8547d878c761c6410b761490", "kind": "unclassified_tcp", "frame_number": 56946, "timestamp_epoch": "1634915893.158062000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c74f2d5eea9dc22759255133", "kind": "unclassified_tcp", "frame_number": 56956, "timestamp_epoch": "1634915893.615514000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf910a10000016030300570200005303036172d6941ff3164779e6b5cf8a3e7680b361f50d249a29925dec7d26c8865fed200c63bcbf98cb67e472ba615bac19de2abf1d464ded098a87a5a03bc590b6256bc02f00000bff01000100000b000201001603030fed0b000fe9000fe600055f3082055b30820443a0030201020212030cbad0c6cdb27d0baaa2ed833b4c399e40300d06092a864886f70d01010b05003032310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310b3009060355040313025233301e170d3231303931323230303431305a170d3231313231313230303430395a3018311630140603550403130d626574686e65742e636f2e7a6130820122300d06092a864886f70d01010105000382010f003082010a0282010100c164a780e89735d709a7bc52bcdffa31883632d7efe0981f6a7437adc9bf3bf5d51aef617395fa0fe44a30b12b796cd0f7921ee8566057829d3459ae0c81e2634a2e772deb7251e6bb272ac545ab946e44488c27d36f4ac65e36c91555f54c9d0c9f478390e9fc7e332a55916c05fee7f40bd517fee67cd07ffe0cffb20a2306232775941c4b7bc0d64585f7a9407692ef1fa9bfe74806752ed0b63bfb0217f5f3778e68708ceff64e5226a6136eb50e770bf754e172429ba6e662d3dd1b0207111f969c441a5abd016ffc5551ac4a4a72c4740c0ab96667a162fa3efdee4ecfd91af427638704e07f25a3ba6b0fb98911e45d296c038d2ae9aab9432e13d61b0203010001a38202833082027f300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b06010505070302300c0603551d130101ff04023000301d0603551d0e041604142ab9738ff39fc2dd1f07e1e562a4f58e5ec5dec2301f0603551d23041830168014142eb317b75856cbae500940e61faf9d8b14c2c6305506082b0601050507010104493047302106082b060105050730018615687474703a2f2f72332e6f2e6c656e63722e6f7267302206082b060105050730028616687474703a2f2f72332e692e6c656e63722e6f72672f30520603551d11044b3049820d626574686e65742e636f2e7a6182126d61696c2e626574686e65742e636f2e7a618211706f702e626574686e65742e636f2e7a6182117777772e626574686e65742e636f2e7a61304c0603551d20044530433008060667810c0102013037060b2b0601040182df130101013028302606082b06010505070201161a687474703a2f2f6370732e6c657473656e63727970742e6f726730820105060a2b06010401d6790204020481f60481f300f10077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017bdbd31d4f000004030048304602210090d1b34e91fcdc12317dcf8882ff772242208c3c835f8deede307fbde73eef53022100b649ac7b7d4eaeec63766b9a5d5bbdd78cea7de7b19b2034bc840994ac168f9d0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017bdbd31fae0000040300473045022002786a9447558543b6cab5c2b7bbea8162b8c530119ddeabfaeaf1cdf350a0170221008aab9c42c4ee8628cefd77429861d991842782044b7942f7753b74c520117f8b300d06092a864886f70d01010b0500038201010063b6d8df7af4fbb961b11a88a6242d486a93198f8676a5373c0d979434557b3abae7f63fb0ca5dac93dd8297426b76833fc93da6137d5934308d0eb60899050723f328e37e9200c1ecc8f092aac9bba71d22d413c0e501eb28f029d58bf6e0540d66d25d7693db5dcda2f4caddd4065095c97c3eb117d1650cb7c98219b6cb1bbc18ccc04ee679a144e776a198c26593d473aa2010b30af5ae04864e61a85d9da5562f2f68b56faf5229b7e6a1c351dd417c6f8315325e68992e967442ef78b1d2b26ffccf9e86bff5f94e4e93c1a5eed1836ac9b9796bf6f5be2a583e6d5ec7" } }, { "event_id": "evt-bd2545c351a32fa332a5ddf5", "kind": "unclassified_tcp", "frame_number": 56957, "timestamp_epoch": "1634915893.615540000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "a88169dda65d6ae29cff9f0b3b09bdc3a4cad821d646fb99a2da7b68e454e65600051a30820516308202fea003020102021100912b084acf0c18a753f6d62e25a75f5a300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3230303930343030303030305a170d3235303931353136303030305a3032310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310b300906035504031302523330820122300d06092a864886f70d01010105000382010f003082010a0282010100bb021528ccf6a094d30f12ec8d5592c3f882f199a67a4288a75d26aab52bb9c54cb1af8e6bf975c8a3d70f4794145535578c9ea8a23919f5823c42a94e6ef53bc32edb8dc0b05cf35938e7edcf69f05a0b1bbec094242587fa3771b313e71cace19befdbe43b45524596a9c153ce34c852eeb5aeed8fde6070e2a554abb66d0e97a540346b2bd3bc66eb66347cfa6b8b8f572999f830175dba726ffb81c5add286583d17c7e709bbf12bf786dcc1da715dd446e3ccad25c188bc60677566b3f118f7a25ce653ff3a88b647a5ff1318ea9809773f9d53f9cf01e5f5a6701714af63a4ff99b3939ddc53a706fe48851da169ae2575bb13cc5203f5ed51a18bdb150203010001a382010830820104300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030206082b0601050507030130120603551d130101ff040830060101ff020100301d0603551d0e04160414142eb317b75856cbae500940e61faf9d8b14c2c6301f0603551d2304183016801479b459e67bb6e5e40173800888c81a58f6e99b6e303206082b0601050507010104263024302206082b060105050730028616687474703a2f2f78312e692e6c656e63722e6f72672f30270603551d1f0420301e301ca01aa0188616687474703a2f2f78312e632e6c656e63722e6f72672f30220603551d20041b30193008060667810c010201300d060b2b0601040182df13010101300d06092a864886f70d01010b0500038202010085ca4e473ea3f7854485bcd56778b29863ad754d1e963d336572542d81a0eac3edf820bf5fccb77000b76e3bf65e94dee4209fa6ef8bb203e7a2b5163c91ceb4ed3902e77c258a47e6656e3f46f4d9f0ce942bee54ce12bc8c274bb8c1982fa2afcd71914a08b7c8b8237b042d08f908573e83d904330a472178098227c32ac89bb9ce5cf264c8c0be79c04f8e6d440c5e92bb2ef78b10e1e81d4429db5920ed63b921f81226949357a01d6504c10a22ae100d4397a1181f7ee0e08637b55ab1bd30bf876e2b2aff214e1b05c3f51897f05eacc3a5b86af02ebc3b33b9ee4bdeccfce4af840b863fc0554336f668e136176a8e99d1ffa540a734b7c0d063393539756ef2ba76c89302e9a94b6c17ce0c02d9bd81fb9fb768d40665b3823d7753f88e7903ad0a3107752a43d8559772c4290ef7c45d4ec8ae468430d7f2855f18a179bbe75e708b07e18693c3b98fdc6171252aafdfed255052688b92dce5d6b5e3da7dd0876c842131ae82f5fbb9abc889173de14ce5380ef6bd2bbd968114ebd5db3d20a77e59d3e2f858f95bb848cdfe5c4f1629fe1e5523afc811b08dea7c9390172ffdaca20947463ff0e9b0b7ff284d6832d6675e1e69a393b8f59d8b2f0bd25243a66f3257654d3281df3853855d7e5d6629eab8dde495b5cdb5561242cdc44ec6253844506decce005518fee94964d44eca979cb45bc073a8abb847c20005643082056030820448a00302010202104001772137d4e942b8ee76aa3c640ab7300d06092a864886f70d01010b0500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d32" } }, { "event_id": "evt-06388fc7f0f23591c9e2a4fd", "kind": "unclassified_tcp", "frame_number": 56958, "timestamp_epoch": "1634915893.615554000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-19e727518c915819d6df8efc", "kind": "unclassified_tcp", "frame_number": 56962, "timestamp_epoch": "1634915893.616048000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e771fefca2b0bea7e8cba3d9", "kind": "unclassified_tcp", "frame_number": 56987, "timestamp_epoch": "1634915894.006246000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf91880000001603030046100000424104b5948475bfd0c5e0ab47f06007b900496c03519e59cf45aaa79dfb474697b9d87c07c1c3fc96854b6869ce16424d6fbb9b82b0b2400d21c03617d72cc83db7f714030300010116030300280000000000000000e363c859488be3a40e1525a2f4b67855dde30cffbf54ca62460b8541cd5d7ae3" } }, { "event_id": "evt-71ddc607be8149d401e57f5d", "kind": "unclassified_tcp", "frame_number": 57004, "timestamp_epoch": "1634915894.333099000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf913d000000140303000101160303002800000000000000002f0ec31d153a0ffd7222e74e8febd84103a3651afb63198aa2099f9ad7e11717" } }, { "event_id": "evt-4f3b2c8fd198c0f3618a88c6", "kind": "unclassified_tcp", "frame_number": 57008, "timestamp_epoch": "1634915894.490918000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb5f000000170303005065cf7711bb4a5448f43d367e4d8bff3003775622038f05fc3d36076b01734ee4573286fd7157b35f325a5729e23271daeb797afc01df3a320de5aa97c028e6f04106fc66444f6ea2405ad0628f35af3e" } }, { "event_id": "evt-fc8e1f14c270dfe0027402be", "kind": "unclassified_tcp", "frame_number": 57011, "timestamp_epoch": "1634915894.702887000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf913700000017030300280000000000000001bdc5fac69c453f19a57175fa3d70d0d99727e57001e3d5e50a37ee10f9a6cb97" } }, { "event_id": "evt-a611d6320e313beaba8f02a6", "kind": "unclassified_tcp", "frame_number": 57015, "timestamp_epoch": "1634915894.891778000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb3f0000001703030030a9833700d3d38a4ac2f3ec914bcf639ef54d07c471a02c6b6b49efdd7960cdc1d334fb45e931749d4204c15e1f74a7f2" } }, { "event_id": "evt-743f9384961d8a9434ecefe1", "kind": "unclassified_tcp", "frame_number": 57020, "timestamp_epoch": "1634915895.027609000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf91d300000017030300c40000000000000001ab71dcd442df284c306abf88cf17712ef2543a6d8822abb7e78a4fdc9f73540ddc87863c6c839bed70bde848f8d8343706c4f3d0e87b1273aaab7e85ba544acc84c10f8657b63365627e801ce25a77b12cccf023a93ac591bc7f3b8fb924f9082a805a911e5386e4914cacfc0d030737c411224efeeee0ba8da01b34c9315af24cd9bfbf2ff27f2aad426cc4a4579a73732799b4488708d29914ff908ece753b7bac2ec1ead728f88d7121254e237613ea8ca0913669d4cb3d1044b1" } }, { "event_id": "evt-47ee1dea943d67160878d7a8", "kind": "unclassified_tcp", "frame_number": 57024, "timestamp_epoch": "1634915895.343877000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf91330000001703030024000000000000000218a7569c7a89ca1fea9b48432d335a0dc975f1fd585b75b747ee29f7" } }, { "event_id": "evt-504e27f9aac58151e1a653de", "kind": "unclassified_tcp", "frame_number": 57028, "timestamp_epoch": "1634915895.679649000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-539e9fc459badb4f2ef48c0f", "kind": "unclassified_tcp", "frame_number": 57031, "timestamp_epoch": "1634915895.765749000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9139000000170303002a00000000000000029bf2710720a11d43036a909d128b699214b97da11e0c990e767f901d04d62631cdfa" } }, { "event_id": "evt-67cb052fea7c3a20bb4205a5", "kind": "unclassified_tcp", "frame_number": 57034, "timestamp_epoch": "1634915896.165975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf914d000000170303003e0000000000000003ce17571da59ab30e9f975dc8e6475c32cb6ff37efb80bd1a16441e730b30616bdb8d1ca9493c535bfbd59a6d9a0b099f7e50a1c02518" } }, { "event_id": "evt-addbf970f9ffcc42780c7179", "kind": "unclassified_tcp", "frame_number": 57040, "timestamp_epoch": "1634915896.585845000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9139000000170303002a000000000000000341aff66f86dc5fd41f2092480e2f27b5ab46b0656f531f4a4795e8a0ec4622c9fcf8" } }, { "event_id": "evt-923d606584b0fecc5991e703", "kind": "unclassified_tcp", "frame_number": 57043, "timestamp_epoch": "1634915897.096156000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9139000000170303002a00000000000000041895da9bb68b05d114282bf21f579844e8017c6abd404d23093426fff367c82d9899" } }, { "event_id": "evt-677cff65a7098e5712e1e447", "kind": "unclassified_tcp", "frame_number": 57049, "timestamp_epoch": "1634915897.506628000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf914a000000170303003b00000000000000044dd028b734c0a4bd3dacba4e8c777b3db4a653832b5c05b14ef16642c0ac61e8c4ca0ef70a9ee404ebb3c042a692f0c3ed2238" } }, { "event_id": "evt-cc60c0709f3c5afc412acea8", "kind": "unclassified_tcp", "frame_number": 57052, "timestamp_epoch": "1634915898.017941000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf912a000000170303001b0000000000000005fe2c2a853775e3d62f1be1b8501fd8ef5e299d" } }, { "event_id": "evt-72ca56eb5d87cdc785ba7e07", "kind": "unclassified_tcp", "frame_number": 57059, "timestamp_epoch": "1634915898.352856000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9141000000170303003200000000000000050e54842023a2222dce39a54731d0436e546d32109d8bc04ddb9936dd689d73b59bace9903be4e34f4001" } }, { "event_id": "evt-43cdedccc97398d04f6dd105", "kind": "unclassified_tcp", "frame_number": 57062, "timestamp_epoch": "1634915898.741054000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf912d000000170303001e0000000000000006cf3c13509ee32e9e1523ac60ac02d21ad4cd3edc1018" } }, { "event_id": "evt-9d065c6872284d78879157c7", "kind": "unclassified_tcp", "frame_number": 57068, "timestamp_epoch": "1634915899.145547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf917600000017030300480000000000000006c8325802433ce9e67a30d04a0980bb859447826ceb943729d9d46194190256438edd7dd35c95e5e4ae1ac94cfd370a025f602553f2f89c82e56b9addded2636b150303001a0000000000000007ccd1712c3a78aae32d8cef249fe04d8e38ae" } }, { "event_id": "evt-e49e1ee2c4ecb5b72420ae8b", "kind": "unclassified_tcp", "frame_number": 57072, "timestamp_epoch": "1634915899.146192000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100bf910a000000" } }, { "event_id": "evt-9aa7f1723884675fe632806e", "kind": "unclassified_tcp", "frame_number": 57075, "timestamp_epoch": "1634915899.466349000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bf9129000000150303001a000000000000000752e9617f0006ea76f2c8a97edbf6aadabaf7" } }, { "event_id": "evt-fd50556d3ed13be05beb3511", "kind": "unclassified_tcp", "frame_number": 57077, "timestamp_epoch": "1634915899.644939000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100bf910a000000" } }, { "event_id": "evt-13c346e298d7072e55a73097", "kind": "unclassified_tcp", "frame_number": 57082, "timestamp_epoch": "1634915900.710895000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-076ce916aae45fd8304c1019", "kind": "unclassified_tcp", "frame_number": 57086, "timestamp_epoch": "1634915902.407761000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100cb680c000000197b" } }, { "event_id": "evt-ce712127abe265f16cf00576", "kind": "unclassified_tcp", "frame_number": 57088, "timestamp_epoch": "1634915902.585915000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb680e00000005020002" } }, { "event_id": "evt-a93c653c7de17d014232f56d", "kind": "unclassified_tcp", "frame_number": 57089, "timestamp_epoch": "1634915902.586488000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100cb680c0000000502" } }, { "event_id": "evt-2170ddeaa87761dbceaa0c0b", "kind": "unclassified_tcp", "frame_number": 57091, "timestamp_epoch": "1634915902.845991000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f0c637b4b2fabb9c02715755", "kind": "unclassified_tcp", "frame_number": 57092, "timestamp_epoch": "1634915902.846568000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100cb680c0000000100" } }, { "event_id": "evt-416bae4f4971af35f0d74480", "kind": "unclassified_tcp", "frame_number": 57094, "timestamp_epoch": "1634915903.179275000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb682300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-d923994b339d38598ecda2be", "kind": "unclassified_tcp", "frame_number": 57100, "timestamp_epoch": "1634915903.547696000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6814000000050000010a0a169cc35a" } }, { "event_id": "evt-534dc43e6f388c6cf605cf88", "kind": "unclassified_tcp", "frame_number": 57104, "timestamp_epoch": "1634915905.305122000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5fe50bbff96db99085f7a5d3", "kind": "unclassified_tcp", "frame_number": 57106, "timestamp_epoch": "1634915905.773806000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a51620d3483b87d25874c9c3", "kind": "unclassified_tcp", "frame_number": 57113, "timestamp_epoch": "1634915908.053874000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb685d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31383a3237202b303230300d0a" } }, { "event_id": "evt-1d8243183a13374a3f68dd1f", "kind": "unclassified_tcp", "frame_number": 57118, "timestamp_epoch": "1634915908.433161000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb681a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-87b2d9c16e3ddcc1410c5a47", "kind": "unclassified_tcp", "frame_number": 57123, "timestamp_epoch": "1634915908.874361000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb68c40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-b4ddc899974e4c1aa546c907", "kind": "unclassified_tcp", "frame_number": 57127, "timestamp_epoch": "1634915909.284771000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb68140000005354415254544c530d0a" } }, { "event_id": "evt-8ef7f3131c5a9039948186d0", "kind": "unclassified_tcp", "frame_number": 57132, "timestamp_epoch": "1634915909.691914000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb681c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-a90754765b007e6ea96e7244", "kind": "unclassified_tcp", "frame_number": 57137, "timestamp_epoch": "1634915910.065281000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-48879eca43606e516a6b5ef3", "kind": "unclassified_tcp", "frame_number": 57144, "timestamp_epoch": "1634915910.427472000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d862ebbc026e6881ee62197d", "kind": "unclassified_tcp", "frame_number": 57148, "timestamp_epoch": "1634915910.431304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3a58a7d02742f9d3c1ca99e2", "kind": "unclassified_tcp", "frame_number": 57153, "timestamp_epoch": "1634915910.434802000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b733a24512d0d30f8bc245fc", "kind": "unclassified_tcp", "frame_number": 57154, "timestamp_epoch": "1634915910.434817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "9967e95191f9b96a0857eea79367e285ea7383dfc245ce3d74d02048f5308409a9c2953a0d9a9a7344ef92037fe09200593a040101005b15ec9adaecd19e954ffc09e05268a8d7c01b985dccfdc38772abdd50e663e81251d2ad3bc5913aa21c7928595272c97409d244508e0a235dc93452dbe5013037f803c9eafb12189ff25fbaca6eff031617d5417c1f8085c20c2b7368446bd7bf0014e29d302e069527ff5f0173e199d3651bef8dd8a92710c45baf3e1603df0fe6d8b1d363ae3e8a2747a944cb11d5019d234032b6bf597cd6b4cc9a3f456f24251821764f42466180974c2dad719ced0745e4732e5e51780ec24e7b3e2d5248d44d126a399da63803b3ac9fb4a7a1ed43c798ececd8d2fb3bf43ceb3892583c17f6a6cdf75bf05bc2dbc54d81df61f7e0ee77eeb8f76793c4ad660bb646b716030300040e000000" } }, { "event_id": "evt-e85946de4c5bf2ddce40b395", "kind": "unclassified_tcp", "frame_number": 57157, "timestamp_epoch": "1634915910.788946000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50086, "dst_port": 1187, "tcp_stream": 968, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-64690ac4a31719b37285d4d7", "kind": "unclassified_tcp", "frame_number": 57159, "timestamp_epoch": "1634915910.975348000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb688800000016030300461000004241041bc5ed9a2d60893bbec56bf16c24b794c8db132a623926c7ff8026bd9142786edda11859c2828718d7e6b561c16135fb097559b2666eefe7a40f2589ca139ec514030300010116030300280000000000000000831d9c58987f49f05d467b7476b681084803b5c0c6347e042c445a2e2972193d" } }, { "event_id": "evt-f4a7fc45d1ddf91f07f3d567", "kind": "unclassified_tcp", "frame_number": 57165, "timestamp_epoch": "1634915911.300869000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb683d00000014030300010116030300280000000000000000f570d93e2e217831a866e3c71994ea492588f691a007879132d6686a0766f800" } }, { "event_id": "evt-4f8b969d29f6bdca7717034e", "kind": "unclassified_tcp", "frame_number": 57168, "timestamp_epoch": "1634915911.568383000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6837000000170303002800000000000000019b343fbebafb0908fe13b02222700ce1cfa7251dcd00a20b5c04bebb38a0fb6d" } }, { "event_id": "evt-8c89240a887337ca982277b7", "kind": "unclassified_tcp", "frame_number": 57173, "timestamp_epoch": "1634915911.946137000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb68d300000017030300c40000000000000001028b02e8f38a1a59493302488db967e539d9ea4c439ef25126da496d2b3607f5875e8e746540277a948b7793d9296ebe6f3144699bfdd6a3e4c44833e065dc46e2e778bdf36c2e07b9c3a8008cf78a921d60921a3f50ff9a8b0e46e4be4735621d0e3202fe63a4bfcfbc9e3dedfbda393ffc7da98ac6f992ef154de4321cf99e123c082c02ba3de385c7d39e2345b3909aada89fbc6e76b84b03a3623b1bb4f0d3f1ea31d241b90748d53adb25d55b3ee03b199bef8774d0addf525a" } }, { "event_id": "evt-296ff0856bb28a6432be95cf", "kind": "unclassified_tcp", "frame_number": 57193, "timestamp_epoch": "1634915912.867954000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6833000000170303002400000000000000022b525fc233e634f77541ecda9f4643017af28a0ba25c213ddc62f0e6" } }, { "event_id": "evt-ec98d527481251018d040e00", "kind": "unclassified_tcp", "frame_number": 57201, "timestamp_epoch": "1634915913.276472000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6839000000170303002a00000000000000027b7ce942edb95776879f7f2160c34fbe1d25ce65c46d33752a9eb5832fec77225185" } }, { "event_id": "evt-5033d7745a0c9cae5e23e7c6", "kind": "unclassified_tcp", "frame_number": 57204, "timestamp_epoch": "1634915913.541161000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070400a99d0c000000197b" } }, { "event_id": "evt-cda9d17ec8e1c2c0332c30f1", "kind": "unclassified_tcp", "frame_number": 57206, "timestamp_epoch": "1634915913.726249000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d0e0000000502000204070100cb684d000000170303003e00000000000000039c396db4ed38419a56e6a3a0d9104ba9048529ba984af0e5ece34dbe882542d6e56f9e1670bee72cbaee473daebd110ba1fcea29d0db" } }, { "event_id": "evt-3f941502b29883e8dbd69892", "kind": "unclassified_tcp", "frame_number": 57207, "timestamp_epoch": "1634915913.726722000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400a99d0c0000000502" } }, { "event_id": "evt-f6fa1e4a749bd1ccbdc06ec9", "kind": "unclassified_tcp", "frame_number": 57211, "timestamp_epoch": "1634915913.984176000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9017b736b8c878a5e637b6d7", "kind": "unclassified_tcp", "frame_number": 57212, "timestamp_epoch": "1634915913.984720000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400a99d0c0000000100" } }, { "event_id": "evt-f06436b803f1a9ea1d185fba", "kind": "unclassified_tcp", "frame_number": 57215, "timestamp_epoch": "1634915914.052186000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6839000000170303002a0000000000000003034624864aee5e3cf5c9b25875f4def0c73612c51eb9ced40382498e074b07d508ae" } }, { "event_id": "evt-3051ea72d3f7837cdd341098", "kind": "unclassified_tcp", "frame_number": 57220, "timestamp_epoch": "1634915914.286836000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207050005340c000000197b" } }, { "event_id": "evt-a3bb9c219297e7a08e668d6f", "kind": "unclassified_tcp", "frame_number": 57222, "timestamp_epoch": "1634915914.477974000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005340e0000000502000204070400a99d2300000005010003126d61696c2e626574686e65742e636f2e7a61001904070100cb6839000000170303002a0000000000000004d16fc80f501425edde33b32d980e6046495b2bf1e236f02468607327d78d234af679" } }, { "event_id": "evt-c49a6d1b289d9215aa6e1e26", "kind": "unclassified_tcp", "frame_number": 57224, "timestamp_epoch": "1634915914.479777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050005340c0000000502" } }, { "event_id": "evt-60db61ee5a145e947ffa911c", "kind": "unclassified_tcp", "frame_number": 57228, "timestamp_epoch": "1634915914.771394000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-350c76fe5e8b268783f06ad5", "kind": "unclassified_tcp", "frame_number": 57229, "timestamp_epoch": "1634915914.771911000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050005340c0000000100" } }, { "event_id": "evt-94cdb78e519be5332de6b0d9", "kind": "unclassified_tcp", "frame_number": 57233, "timestamp_epoch": "1634915914.796484000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d14000000050000010a0a169cc35c" } }, { "event_id": "evt-4fc6dee6e385f0dfa81bc556", "kind": "unclassified_tcp", "frame_number": 57236, "timestamp_epoch": "1634915914.850477000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb684a000000170303003b00000000000000046f58e7f220179f0de23926497713b49cd7b5c94aad79608759fb082e22a540cf9782935d6949fdcb859317c589a9a6de18ef36" } }, { "event_id": "evt-6aa410ffb41cf8655e484a07", "kind": "unclassified_tcp", "frame_number": 57239, "timestamp_epoch": "1634915915.196818000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005342300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-546fa17064ede3817670902e", "kind": "unclassified_tcp", "frame_number": 57243, "timestamp_epoch": "1634915915.393363000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb682a000000170303001b0000000000000005e5b7f8c9796f5e0a4e5a79577a267bac583130" } }, { "event_id": "evt-c23f5a6ae3c7bcd7ed4d2344", "kind": "unclassified_tcp", "frame_number": 57249, "timestamp_epoch": "1634915915.514441000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053414000000050000010a0a169cc35d" } }, { "event_id": "evt-58a508e3e5532b68d2351516", "kind": "unclassified_tcp", "frame_number": 57252, "timestamp_epoch": "1634915915.716308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb684100000017030300320000000000000005214ad70fdde7a17fc13fe2e203c6b764c5c4812d555e94d3a3ab3842cd7384970450ca5e1058c00c3754" } }, { "event_id": "evt-cbf33da0f114a3690ed6e3c9", "kind": "unclassified_tcp", "frame_number": 57256, "timestamp_epoch": "1634915916.245484000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb682d000000170303001e000000000000000663e965d39d5f5c0b41b733d614b1bae37cf626e4bffd" } }, { "event_id": "evt-87a98e87ac7a482f51397e7f", "kind": "unclassified_tcp", "frame_number": 57263, "timestamp_epoch": "1634915916.656369000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb687600000017030300480000000000000006d96a0c6bdfa0770496e4f7be269b7652ba15b8db3feb3d61219fba18322805b62e8c41a480a04890252fac97969b94192bb497142104f80adb2619a26ade691b150303001a0000000000000007131ffb4f8de2407e2720ba84e0aa0d557938" } }, { "event_id": "evt-3f70defd1886419e5b0276b9", "kind": "unclassified_tcp", "frame_number": 57267, "timestamp_epoch": "1634915916.656940000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100cb680a000000" } }, { "event_id": "evt-d2829ea30de7ff2ebf725745", "kind": "unclassified_tcp", "frame_number": 57269, "timestamp_epoch": "1634915917.023443000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cb6829000000150303001a0000000000000007618f9258f0a991f69d52bc999043dd481801" } }, { "event_id": "evt-44a4f9de2793f3c1470833be", "kind": "unclassified_tcp", "frame_number": 57271, "timestamp_epoch": "1634915917.205407000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100cb680a000000" } }, { "event_id": "evt-ff5a880f4060a3d180a9761f", "kind": "unclassified_tcp", "frame_number": 57276, "timestamp_epoch": "1634915917.576608000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100c5370c000000197b" } }, { "event_id": "evt-b496accbd4d7a38bba392c8f", "kind": "unclassified_tcp", "frame_number": 57278, "timestamp_epoch": "1634915917.765375000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5370e00000005020002" } }, { "event_id": "evt-bae95c50b310a0362012e6c0", "kind": "unclassified_tcp", "frame_number": 57279, "timestamp_epoch": "1634915917.765962000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100c5370c0000000502" } }, { "event_id": "evt-2d94b07c5290b5683d14b15b", "kind": "unclassified_tcp", "frame_number": 57281, "timestamp_epoch": "1634915918.019682000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-dab7cda3c56475d7b57c8764", "kind": "unclassified_tcp", "frame_number": 57282, "timestamp_epoch": "1634915918.020256000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100c5370c0000000100" } }, { "event_id": "evt-a45e34c4d83424efa7d01a85", "kind": "unclassified_tcp", "frame_number": 57285, "timestamp_epoch": "1634915918.132350000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d5d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31383a3337202b303230300d0a" } }, { "event_id": "evt-67b2d7721ca23e2ec27d58a1", "kind": "unclassified_tcp", "frame_number": 57289, "timestamp_epoch": "1634915918.320472000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5372300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-dca1724b06f9aee0b912cb3b", "kind": "unclassified_tcp", "frame_number": 57292, "timestamp_epoch": "1634915918.527497000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-5c6f50e54e344da0a30a1440", "kind": "unclassified_tcp", "frame_number": 57298, "timestamp_epoch": "1634915918.650742000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53714000000050000010a0a169cc35e" } }, { "event_id": "evt-fcfbd562f1a79967a48f802e", "kind": "unclassified_tcp", "frame_number": 57301, "timestamp_epoch": "1634915918.862040000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99dc40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-4aca5c43dcabd6ab7604e90c", "kind": "unclassified_tcp", "frame_number": 57304, "timestamp_epoch": "1634915919.141540000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d140000005354415254544c530d0a" } }, { "event_id": "evt-11aece5c4ad7c3196578617c", "kind": "unclassified_tcp", "frame_number": 57310, "timestamp_epoch": "1634915919.625238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d1c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-22f7796640f5c2aaeb1fb0d0", "kind": "unclassified_tcp", "frame_number": 57314, "timestamp_epoch": "1634915919.908029000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005345d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31383a3339202b303230300d0a" } }, { "event_id": "evt-c54a4e3251c96b180049aec2", "kind": "unclassified_tcp", "frame_number": 57317, "timestamp_epoch": "1634915919.940729000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-99063166de4faae2787b930e", "kind": "unclassified_tcp", "frame_number": 57324, "timestamp_epoch": "1634915920.071175000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50095, "dst_port": 1187, "tcp_stream": 1055, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-491a42e71f218ab86bbd4dc7", "kind": "unclassified_tcp", "frame_number": 57326, "timestamp_epoch": "1634915920.156951000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005341a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-3e44955de25c7eb0cb042618", "kind": "unclassified_tcp", "frame_number": 57337, "timestamp_epoch": "1634915920.297593000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-342179d7f774f00546609a98", "kind": "unclassified_tcp", "frame_number": 57338, "timestamp_epoch": "1634915920.297606000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4213bb4d445958deb6d8e77d", "kind": "unclassified_tcp", "frame_number": 57339, "timestamp_epoch": "1634915920.297613000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-14cace3164337acc41a7822e", "kind": "unclassified_tcp", "frame_number": 57343, "timestamp_epoch": "1634915920.297949000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99db3010000eb063b6c29230960dc45024c12183be9fb0ededc44f85898aeeabd4545a1885d66cafe10e96f82c811420dfbe9ece38600de9d10e338faa47db1d8e8498284069b2be86b4f010c38772ef9dde739160303014d0c00014903001741041bbf46b1e17a52b5fa02555c4af70f71a0ac7eea548ba559a3a1722b85c0f9624b4ba588dd6059a39353d9bbd8c4fc972f4001e9cc1383e80c662752dc50c3a90401010024232eda0974f1ad2355b322edd3999d098fee63fed99c5c976a224842a417c9a60333cdb6360eb7977c1c355e7e035a5b41bbabb677d55c6beae1160be82fc15951bc657cc169d86ea9c55befdea0f3467e098d1b175229fcd6dc132b59ed3336d3dcb58b3e54c9468ad5574b562cdfbdf6f3c34ffe9b01f58fca134a768f4c23562681c00e372a6127dd247f82d69891bc9b9473f793c122593bf00374b686edb143132a3b87eeaa3ff5e1444effd1e7425ab16c7e35b280a872ee57dfb39c6f67f99f51f31ba043e58f3d5e8fdb71c6e7be6eab1c5b5ebc252639407b247d9f59b275b679d69b86c708b57f51e6f1fd18e15cc5faf24234350427ac03bf3e16030300040e000000" } }, { "event_id": "evt-90253e4f3a1ae0856e6e46b5", "kind": "unclassified_tcp", "frame_number": 57346, "timestamp_epoch": "1634915920.476201000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040705000534c40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-282e232d5dd94e20cfb749aa", "kind": "unclassified_tcp", "frame_number": 57349, "timestamp_epoch": "1634915920.557605000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d88000000160303004610000042410429af66f5cae60b4759aabacc148fc68d6fc2262a7f3e56d75d267a5eb5df69821e7fa56871c0a4073dcfc1f361a1802f762951f1eee04cbd0f0e09c3aab758951403030001011603030028000000000000000015e07cb29b9fdb0a142c670f647dbb9768ff5e614597a6c6a938541044bc2f75" } }, { "event_id": "evt-16fcc8bb49b7dbe23ee234d2", "kind": "unclassified_tcp", "frame_number": 57353, "timestamp_epoch": "1634915920.864750000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040705000534140000005354415254544c530d0a" } }, { "event_id": "evt-e015ee7594d8cb9d818010b0", "kind": "unclassified_tcp", "frame_number": 57357, "timestamp_epoch": "1634915920.883976000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d3d00000014030300010116030300280000000000000000958b47993e5a7c35d56552b3006203609a0e873d582c73130071569f8fe4bef2" } }, { "event_id": "evt-b50c1c55dc44d32c5576db3d", "kind": "unclassified_tcp", "frame_number": 57361, "timestamp_epoch": "1634915921.218809000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005341c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-271e3a45ae8e7574cf28044f", "kind": "unclassified_tcp", "frame_number": 57364, "timestamp_epoch": "1634915921.271261000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d3700000017030300280000000000000001c79c5082b0a7cabd66190f8e31d0ec5ff948cac5985c030c42a14995a298a434" } }, { "event_id": "evt-694b6fa5b98889d9d162d331", "kind": "unclassified_tcp", "frame_number": 57369, "timestamp_epoch": "1634915921.566602000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-81ba90f0a21fc3b795e0e1fc", "kind": "unclassified_tcp", "frame_number": 57373, "timestamp_epoch": "1634915921.605506000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99dd300000017030300c40000000000000001134fa16e960dcbd937f108eb766d59baebe6765588ec0df4b54f9be1d4e9ee587b8b337913c3638733add9753be1279680bde31a7c2f1a0f6c06032f8e44a170f624580086f0b721a15a3fef3907b63ca3769e252704d9bfb6f991e61cde06a5fae0d0a702419e2b8291b1ccce51855034ec79acb33c5cedfea5867ba55452308fbe905389d8d7da25811491a897a66c48cc4d453d21489dc03a3595792076277d79a334fc20f5bde732cddd565a49d20957e6cf23cebbecfb3b1d18" } }, { "event_id": "evt-996dc2d26b105878e390c0b3", "kind": "unclassified_tcp", "frame_number": 57381, "timestamp_epoch": "1634915921.928299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d95656c97a0bba83051f98ab", "kind": "unclassified_tcp", "frame_number": 57382, "timestamp_epoch": "1634915921.928312000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7e3e0fc89df574b68d051d82", "kind": "unclassified_tcp", "frame_number": 57383, "timestamp_epoch": "1634915921.928320000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eda32dfa66b9c73b4f37dfb2", "kind": "unclassified_tcp", "frame_number": 57387, "timestamp_epoch": "1634915921.928639000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5175e88485bf378944018d9a", "kind": "unclassified_tcp", "frame_number": 57390, "timestamp_epoch": "1634915921.992336000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5375d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a31383a3431202b303230300d0a" } }, { "event_id": "evt-8cc1463ae063a8c11541d00d", "kind": "unclassified_tcp", "frame_number": 57393, "timestamp_epoch": "1634915922.209821000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053488000000160303004610000042410457dcc5e15c79af48509fcad2f19fd3f3d36d4fbb6e44e892c947483176ec3d801779b8c3bf9b8ba3ad353a260de4dc8b653f7a5f3f2fe33b638136e60e989aed140303000101160303002800000000000000000f721fe7bc971d340b023987c3bf265c6948086fecfee9c04f001c7baa25bef6" } }, { "event_id": "evt-e48714e9286b780f393c24f3", "kind": "unclassified_tcp", "frame_number": 57399, "timestamp_epoch": "1634915922.410044000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d330000001703030024000000000000000219e621f84a5f9cc4eb8525c0bcc4717225a549a15c7197fae7980de0" } }, { "event_id": "evt-16ae27001a1ed9a3a0fea697", "kind": "unclassified_tcp", "frame_number": 57404, "timestamp_epoch": "1634915922.553284000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005343d00000014030300010116030300280000000000000000667c204ab0a6caceae9afd6bd1e27f4e5ef8b1d02ae569a48ede2c91d5e6086f" } }, { "event_id": "evt-13562e129902fcee69e8c329", "kind": "unclassified_tcp", "frame_number": 57407, "timestamp_epoch": "1634915922.617633000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5371a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-181ce74dd6d33bf78da98504", "kind": "unclassified_tcp", "frame_number": 57412, "timestamp_epoch": "1634915922.777439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d39000000170303002a0000000000000002b3828c90374efc0958d6730b6ea98ad7f8464ee27d1595a9662bbedd3b2fcfa92170" } }, { "event_id": "evt-51dc72b817e3d82d97f8aab7", "kind": "unclassified_tcp", "frame_number": 57415, "timestamp_epoch": "1634915922.976419000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053437000000170303002800000000000000012ae1866533003f090cf293d2d1238d8fd161c8038848241c4aace50fade2d829" } }, { "event_id": "evt-df72f8caf1661635051b5d37", "kind": "unclassified_tcp", "frame_number": 57419, "timestamp_epoch": "1634915923.190808000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d4d000000170303003e0000000000000003dc80bc257af4d0674ab0886c163c2fc7efdeb1640e26ba90bc952e210dd061ba863bf5806b0b68fa49968dea074b36974607e8ba0fb4" } }, { "event_id": "evt-3c8937568ad6aa7330a56baf", "kind": "unclassified_tcp", "frame_number": 57425, "timestamp_epoch": "1634915923.327071000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040705000534d300000017030300c400000000000000016e2ca071382d27c62495872d09d04a81a3620737c76539478e6df01154ba13b39116763973f4a0a7df6033a81f59d389ecd2292753f2880eecb75877435399a189e2ce53b4b456c4794f1c8544328972d3ac76347409edd01ee2a1067d974c6e2120b07f43712c2b88dbfc533342b8d537a5c01125eb6308d231bf3610843c45c1f14ac153dc000d9c52bae6c23f2384b4eba59a92cce3ce3f335643d3ecbd4cf85a07497788c54a99185d7f3557927867a12bf2c1ff1cc4f3c9ee18" } }, { "event_id": "evt-0c6cb8958a7298154659ba82", "kind": "unclassified_tcp", "frame_number": 57429, "timestamp_epoch": "1634915923.559401000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d39000000170303002a0000000000000003b6cc41b7a1e8cd9f10cc5c1b830f553f9f9fbd25025f10af56cdb30c7414fb50d796" } }, { "event_id": "evt-701c59b75f924310306dddab", "kind": "unclassified_tcp", "frame_number": 57432, "timestamp_epoch": "1634915923.843752000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040705000534330000001703030024000000000000000286135607b9e6fdce8bbd81ad723df38d92ca1e1320cceb82df7eb2f2" } }, { "event_id": "evt-8b0b593c46f00a9ec9d2cd2d", "kind": "unclassified_tcp", "frame_number": 57436, "timestamp_epoch": "1634915923.847838000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c537c40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-d16408fec3b3eafe3aaa5226", "kind": "unclassified_tcp", "frame_number": 57439, "timestamp_epoch": "1634915924.155582000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d39000000170303002a00000000000000042109848053f4bf2e530a773d9d9f9d24ffd0407332f759f4b9a04345baa4e2b43f0f" } }, { "event_id": "evt-a61e246ccc19d5930f5d4cb5", "kind": "unclassified_tcp", "frame_number": 57443, "timestamp_epoch": "1634915924.170982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053439000000170303002a00000000000000024b012e635981006a123fd8fccacaa15d5da67df7464e274d35be30d5120082969752" } }, { "event_id": "evt-9d0d90104204d0b0f1cfc176", "kind": "unclassified_tcp", "frame_number": 57450, "timestamp_epoch": "1634915924.369767000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c537140000005354415254544c530d0a" } }, { "event_id": "evt-c1c386a5fea07082dfb756d7", "kind": "unclassified_tcp", "frame_number": 57455, "timestamp_epoch": "1634915924.549600000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d4a000000170303003b0000000000000004a130accee387a4da8264d7436cf088dc1b265a892ff47d60bee7155134e821fb236b2ed021e433ba7ca69ce0dfe84cc6a16967" } }, { "event_id": "evt-cfc787b63ad402183d342996", "kind": "unclassified_tcp", "frame_number": 57457, "timestamp_epoch": "1634915924.559521000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005344d000000170303003e0000000000000003fb15604e0dfebca9bba20266de0dc8436b65495e0b0daf0a92e4e6510723f3d05af5529659bf33a211d458760c64c1bb07395e625dda" } }, { "event_id": "evt-349cd583adf52e13402f49e4", "kind": "unclassified_tcp", "frame_number": 57463, "timestamp_epoch": "1634915924.732350000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5371c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-aa0cd2a357d36d8134a33b25", "kind": "unclassified_tcp", "frame_number": 57466, "timestamp_epoch": "1634915924.858876000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d2a000000170303001b0000000000000005f79e285a662a36549c86f6e505ecce797df911" } }, { "event_id": "evt-f5c02929345cdc4c63d09f35", "kind": "unclassified_tcp", "frame_number": 57470, "timestamp_epoch": "1634915924.893828000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053439000000170303002a00000000000000030ba84c3ae5e56e6520297395a42c4df7f06f14687ca5427e0964e840237687b9a6c8" } }, { "event_id": "evt-a973a476da79aefb22c4f64b", "kind": "unclassified_tcp", "frame_number": 57473, "timestamp_epoch": "1634915925.103665000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c537180100001603010109010001050303baa7a7af6d4f3f9601babd92d17b40f01f637145650a8c0125ac587a3da4010b20ed2ad59da26e1e5d94d2a013511dd56d523e8a70d7c05642f47a52104cead1df0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000960000001700150000126d61696c2e626574686e65742e636f2e7a61000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020a5a13e20226e070def654e380a437ca09f6fd78722bc089bc81b2b9174985d13" } }, { "event_id": "evt-069e88bcb44c5f728d3cf39c", "kind": "unclassified_tcp", "frame_number": 57478, "timestamp_epoch": "1634915925.197119000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d410000001703030032000000000000000541a6c51fb3cdf5e1ac7a063c7b1e7bfb2338df3114a991a91eaf34acdfc5e91a99523f524628bcd41426" } }, { "event_id": "evt-d6ddc5797b41f77cd57ed545", "kind": "unclassified_tcp", "frame_number": 57482, "timestamp_epoch": "1634915925.289944000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500053439000000170303002a0000000000000004ff8b0220f3de98de73e32daf0f8227103ea8e5a04bd81cd9f2203c2d3c5696c72a4f" } }, { "event_id": "evt-8e51e0bf9af8d7cc77f21417", "kind": "unclassified_tcp", "frame_number": 57489, "timestamp_epoch": "1634915925.560948000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d2d000000170303001e0000000000000006237a619c5d064184f16b211ab97ff32c86e5b94fa456" } }, { "event_id": "evt-9ae1623da3f34d364ec58039", "kind": "unclassified_tcp", "frame_number": 57493, "timestamp_epoch": "1634915925.561407000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-05e9330f5ceb7a1a154c5870", "kind": "unclassified_tcp", "frame_number": 57494, "timestamp_epoch": "1634915925.561420000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-23e45d3a9267b7d348f36f2d", "kind": "unclassified_tcp", "frame_number": 57495, "timestamp_epoch": "1634915925.561426000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "31303132303139313430335a170d3234303933303138313430335a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a382014630820142300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106304b06082b06010505070101043f303d303b06082b06010505073002862f687474703a2f2f617070732e6964656e74727573742e636f6d2f726f6f74732f647374726f6f74636178332e703763301f0603551d23041830168014c4a7b1a47b2c71fadbe14b9075ffc4156085891030540603551d20044d304b3008060667810c010201303f060b2b0601040182df130101013030302e06082b060105050702011622687474703a2f2f6370732e726f6f742d78312e6c657473656e63727970742e6f7267303c0603551d1f043530333031a02fa02d862b687474703a2f2f63726c2e6964656e74727573742e636f6d2f445354524f4f544341583343524c2e63726c301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b050003820101000a73006c966eff0e52d0aedd8ce75a06ad2fa8e38fbfc90a031550c2e56c42bb6f9bf4b44fc244880875cceb079b14626e78deec27ba395cf5a2a16e5694701053b1bbe4afd0a2c32b01d496f4c5203533f9d86136e0718db4b8b5aa824595c0f2a92328e7d6a1cb6708daa0432caa1b931fc9def5ab695d13f55b865822ca4d55e470676dc257c5463941cf8a5883586d99fe57e8360ef00e23aafd8897d0e35c0e9449b5b51735d22ebf4e85ef18e08592" } }, { "event_id": "evt-5a916e12b134942a384e46fd", "kind": "unclassified_tcp", "frame_number": 57500, "timestamp_epoch": "1634915925.561739000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0cc689601575fcf30869fa8b", "kind": "unclassified_tcp", "frame_number": 57504, "timestamp_epoch": "1634915925.654175000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005344a000000170303003b0000000000000004ec16baabf13507ea0d5c2167c85801f2f5facd5a2cf48221001c1a0deffb2450bce7fb88046a96ae76dd94f13982c462877b52" } }, { "event_id": "evt-b19498675048cb11f6f86fa3", "kind": "unclassified_tcp", "frame_number": 57507, "timestamp_epoch": "1634915925.972164000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53788000000160303004610000042410487668269aa81a9a957c08e1ec5536c3304df41017637c35330dc0a55ff0fe7427cc01551abdf9da2c27aa226c2de9f2f982f9070034d39a8ab0cdd7b167ceee514030300010116030300280000000000000000ba99613173227c795cc8c0292321aef2a4e928588486245571c6c373e4a4074b" } }, { "event_id": "evt-ac97c0e8c1dcc646ab84c0ff", "kind": "unclassified_tcp", "frame_number": 57512, "timestamp_epoch": "1634915925.973370000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a99d760000001703030048000000000000000630c2803b24978867e23db867385e8813b88ef7a355846885370171b3a5abf26ffc26e560cc71c492a6cb3751ec9b2f69e5da61c386c03555e1d8f2de4f94b46d150303001a00000000000000070962f4917d8b9085db396b2c44779142ae4a" } }, { "event_id": "evt-f172988ddd6facbb54735589", "kind": "unclassified_tcp", "frame_number": 57516, "timestamp_epoch": "1634915925.973863000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400a99d0a000000" } }, { "event_id": "evt-7f001ecda4cbf1b06bc50778", "kind": "unclassified_tcp", "frame_number": 57519, "timestamp_epoch": "1634915926.060432000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac5f000000170303005071f7599a66274bfd1c883c27609b87cb8f42e42d64df6f12663255508eef0ca91016241d9df11dc1d3034a4ce69a233554b22a2eede01f9a6e37c50ad08eaf94d18689c6ef9b702b891a57480530cdaf" } }, { "event_id": "evt-746a283de170d60296060f0a", "kind": "unclassified_tcp", "frame_number": 57524, "timestamp_epoch": "1634915926.311515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5373d0000001403030001011603030028000000000000000019d7fd41f460fc0c22a4e7c3d300ee021c0d8fd67f5fc58e49f9cc4f8bd78ee0" } }, { "event_id": "evt-b2d81f74ad790f54b2d0bac9", "kind": "unclassified_tcp", "frame_number": 57527, "timestamp_epoch": "1634915926.482774000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005342a000000170303001b0000000000000005a4f1c70670b5e48f40de26c7e75574646895ae" } }, { "event_id": "evt-0ad0da1fa7db481ec20492a2", "kind": "unclassified_tcp", "frame_number": 57531, "timestamp_epoch": "1634915926.790106000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac3f0000001703030030a33df5a6bb198fb3edaf51bba7089adf1fe8d08a10ac70257687cfffcb25a1dc730fbdc17fbf0935602386b9c5a61678" } }, { "event_id": "evt-ff171db105ac0075480e0bdc", "kind": "unclassified_tcp", "frame_number": 57535, "timestamp_epoch": "1634915926.819441000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005344100000017030300320000000000000005eebc93345be8a2b6df3c1cf4eedf01fe6282943b09934a7c411fca2a48d7a4cd9753965d42c45bbb1acc" } }, { "event_id": "evt-97686f77113f150ef086bb64", "kind": "unclassified_tcp", "frame_number": 57538, "timestamp_epoch": "1634915926.995823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5373700000017030300280000000000000001b54393bf0d210529303135acd6dbe129d07b269d4143249ff52f58a60c22dee7" } }, { "event_id": "evt-f948396f28a6738b4f9f6c82", "kind": "unclassified_tcp", "frame_number": 57542, "timestamp_epoch": "1634915926.996344000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e0ac7f000000170303007029400d13b5c5fbfbdf4e78f94e1b3e5fa455c0a359c1d5f4a8008b05e7958e890802090f5ec8477bbc5333ae6e0c5782cbed686ad17fe333a3877c699a7f0199a12fe6c4673b81ef860262b66cc766e38d2b727f167aa3fd121661680d4baaa743906dc23914ca502cef15df66735a24" } }, { "event_id": "evt-7e21f7ffa0c1922d6d8e59b5", "kind": "unclassified_tcp", "frame_number": 57547, "timestamp_epoch": "1634915926.996635000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300e0ac0a000000" } }, { "event_id": "evt-3e9c8060864541153a526594", "kind": "unclassified_tcp", "frame_number": 57549, "timestamp_epoch": "1634915927.199348000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005342d000000170303001e0000000000000006a204e7edb721143e12ffba310470447466143d7f88f6" } }, { "event_id": "evt-9e15e4aafeae2b4315f5ce0e", "kind": "unclassified_tcp", "frame_number": 57558, "timestamp_epoch": "1634915927.507513000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c537d300000017030300c400000000000000010b2dd437fd078681c1ddef2059a4a87dafd53f2c9b80527b4d6760a2787369a63de01992c892f34add1797e8f83db099a47afa2b0fd74334de8775c14a40ea8cd3faa4f4810ab6666776e10287169165beea33254aaaaa1b3c3694b548dcdbcd119704634042726863f8cbeb58616eaacedb03ff2197d2f3e19a8d0133c5cf64726088f70e420f1fb3beceddfbff4ca0699224a2f3a00a05aa15a9de970559eac2d987c481e0fc9dfeea7a3eb3181b8f7784a2a25b913e5160e41b06" } }, { "event_id": "evt-cde6f363b34b56f62f94f82b", "kind": "unclassified_tcp", "frame_number": 57560, "timestamp_epoch": "1634915927.507797000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50096, "dst_port": 1187, "tcp_stream": 1056, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-358148e38c7edd6259cbb53e", "kind": "unclassified_tcp", "frame_number": 57565, "timestamp_epoch": "1634915927.532889000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050005347600000017030300480000000000000006de33eb78d4f9799ac014171f209ecc7c8163f386ac17e2fed8efb5dba16168dc7f253889e8dcc4ed2a9f10028043a849efd9c5fd573c55660e4f85bbd48404c4150303001a0000000000000007cf7680be2c7508c585ac05e77fbc4516149f" } }, { "event_id": "evt-30ddd843a9f63dfdb89df660", "kind": "unclassified_tcp", "frame_number": 57571, "timestamp_epoch": "1634915927.546838000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507050005340a000000" } }, { "event_id": "evt-810cdc4cd813454e96c26a72", "kind": "unclassified_tcp", "frame_number": 57576, "timestamp_epoch": "1634915928.122297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c537330000001703030024000000000000000275aa8b373c42a4b610388cd318233ad5be915211020743919e7e70f3" } }, { "event_id": "evt-fcdbf021655b1624ea63251b", "kind": "unclassified_tcp", "frame_number": 57577, "timestamp_epoch": "1634915928.122765000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb5f00000017030300502df5ac7276a68bf2f6a157cbd0d642c397fc252af00a532e43b0305e24d2daa7266612a1e2347a79ee677da26e589233f7f553a26a8c9003f3805a18ebb1b3e45950618648b7c956b38eea35871bc199" } }, { "event_id": "evt-d5754c59028dbf15d2c93cee", "kind": "unclassified_tcp", "frame_number": 57585, "timestamp_epoch": "1634915928.468364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53739000000170303002a0000000000000002687268378a2e5d20956014101924a11cc2f3f5d2b02f9038ee4f98747b323cf5c1cc" } }, { "event_id": "evt-14835c09cdadcd4b5ab4681e", "kind": "unclassified_tcp", "frame_number": 57587, "timestamp_epoch": "1634915928.471060000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb3f0000001703030030a8c4e6b5bb0dbcf80bfbef5f07cfd236c1bcec0eeb2b7472f195839ca05c4eb0fb2e5ac5b3690dabfb1e8d216403bddd" } }, { "event_id": "evt-29a39292343acf5daf822c58", "kind": "unclassified_tcp", "frame_number": 57593, "timestamp_epoch": "1634915928.736851000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5374d000000170303003e00000000000000035ff58f65aad6b7fa2c72c0ecdf411ab73a4b6f2f0c5f6aae0ba1732bfb827eabe83c28d1e49318aefe867f75f9ac69848cdbd3470500" } }, { "event_id": "evt-61d4fa7e3a57c902c26bb1fc", "kind": "unclassified_tcp", "frame_number": 57595, "timestamp_epoch": "1634915928.737706000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb7f000000170303007023f41b0457c414dd83b4865c60e4335cb3e9e3d07d8a97a0a71e77bcacdf579614aeca330c1562ca31f1bec987e02101833cbe4c1432e95bc94dda1977274fd5605508ad048c039c7425b7cca5e1aa4536d85319abc32ecc550095478c1586391c0ccdb1bbb571eab4bbe5335b420084" } }, { "event_id": "evt-4918f458a8d3075e6369cf18", "kind": "unclassified_tcp", "frame_number": 57599, "timestamp_epoch": "1634915928.738389000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200cccb0a000000" } }, { "event_id": "evt-efe40cd58422e0229bdc0d17", "kind": "unclassified_tcp", "frame_number": 57604, "timestamp_epoch": "1634915929.247473000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cccb3f000000150303003070fdbdefd51712975d753032b8b1e0ab27634d2848a0dbcd78e919895c16337b1cabb14897d5091f14c25578efc07174" } }, { "event_id": "evt-c159c971032a4bb0771b161a", "kind": "unclassified_tcp", "frame_number": 57605, "timestamp_epoch": "1634915929.247816000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53739000000170303002a0000000000000003c4846afce13b714833fb31e0ef5e032740c11eb8231feb1c63f3b1d48e3b8fe43a62" } }, { "event_id": "evt-4cbb962ddfce373663bfc5d1", "kind": "unclassified_tcp", "frame_number": 57610, "timestamp_epoch": "1634915929.560214000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200cccb0a000000" } }, { "event_id": "evt-1cb6e917ff572ae22d1e20b1", "kind": "unclassified_tcp", "frame_number": 57612, "timestamp_epoch": "1634915929.861776000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53739000000170303002a0000000000000004ebfe5f10b84888af6d75b72713b8b5dc70cca4ed5bb8c762bac3f3f35ec7ac607a15" } }, { "event_id": "evt-7b17c566ff69090fbfd4f447", "kind": "unclassified_tcp", "frame_number": 57618, "timestamp_epoch": "1634915930.326661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5374a000000170303003b0000000000000004032e5d4539b99bb0d83d5a2a18b6856f88abeb6ee32737469b545e54e1bffab649c1445e61323be84d3068d87451d2b831f469" } }, { "event_id": "evt-e1a34994547ab907a67ae9b0", "kind": "unclassified_tcp", "frame_number": 57621, "timestamp_epoch": "1634915930.783567000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5372a000000170303001b0000000000000005fdabbbec9a7114877315fa36ac26bc8ced01de" } }, { "event_id": "evt-212d613cd0a86e59facba0a5", "kind": "unclassified_tcp", "frame_number": 57628, "timestamp_epoch": "1634915931.280331000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53741000000170303003200000000000000052000b7f8c961734f484eea1b32407d7f29ccee5b92da305879274074d143453a658afd97c7920765c8a4" } }, { "event_id": "evt-86acd0cdedad7467e688237c", "kind": "unclassified_tcp", "frame_number": 57631, "timestamp_epoch": "1634915931.602645000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c5372d000000170303001e00000000000000067daa592cb2cae4e6d36ea6982c249205730075f269e7" } }, { "event_id": "evt-1eca38803a6375d58e91506c", "kind": "unclassified_tcp", "frame_number": 57640, "timestamp_epoch": "1634915931.948034000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c53776000000170303004800000000000000066cc58823563680aa5ef92d412844282267067b75be458709fcef7f69c23642d62ee917928311356b26c028105d85e95c33b1d076a45ae581c6ccbd51fde329c4150303001a0000000000000007642668d2fcb094a414ff89e9d9adb1e1c12b" } }, { "event_id": "evt-e938084404cd3060261def9f", "kind": "unclassified_tcp", "frame_number": 57646, "timestamp_epoch": "1634915931.963685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100c5370a000000" } }, { "event_id": "evt-0b29b17a01cc40bb5fa063f7", "kind": "unclassified_tcp", "frame_number": 57650, "timestamp_epoch": "1634915932.085825000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50097, "dst_port": 1187, "tcp_stream": 1058, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-de969dc1b8f92c6b867ce8ef", "kind": "unclassified_tcp", "frame_number": 57663, "timestamp_epoch": "1634915935.306000000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1e671c66965276b25e7c34dd", "kind": "unclassified_tcp", "frame_number": 57671, "timestamp_epoch": "1634915936.478654000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50098, "dst_port": 1187, "tcp_stream": 1059, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c8c6cb7218519ccd0841ea4b", "kind": "unclassified_tcp", "frame_number": 57684, "timestamp_epoch": "1634915940.816214000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50099, "dst_port": 1187, "tcp_stream": 1060, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cfa6394fccf320db403ab09d", "kind": "unclassified_tcp", "frame_number": 57696, "timestamp_epoch": "1634915945.150782000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50100, "dst_port": 1187, "tcp_stream": 1062, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-75d6f24589482af24cf8ee7c", "kind": "unclassified_tcp", "frame_number": 57710, "timestamp_epoch": "1634915949.460031000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50101, "dst_port": 1187, "tcp_stream": 1063, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-076a498f3548ccb43584425c", "kind": "unclassified_tcp", "frame_number": 57725, "timestamp_epoch": "1634915953.830484000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50102, "dst_port": 1187, "tcp_stream": 1064, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d7b742cc844fffe87d9dc662", "kind": "unclassified_tcp", "frame_number": 57727, "timestamp_epoch": "1634915954.025662000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50102, "dst_port": 1187, "tcp_stream": 1064, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-91d4ca86b53018a86683fbf0", "kind": "unclassified_tcp", "frame_number": 57740, "timestamp_epoch": "1634915958.300095000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50103, "dst_port": 1187, "tcp_stream": 1065, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1e13f6bfb4efde4f0213e7c8", "kind": "unclassified_tcp", "frame_number": 57754, "timestamp_epoch": "1634915962.725656000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50104, "dst_port": 1187, "tcp_stream": 1067, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c8b5e9719764f336641be8c2", "kind": "unclassified_tcp", "frame_number": 57770, "timestamp_epoch": "1634915967.048331000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50105, "dst_port": 1187, "tcp_stream": 1068, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-394e0b9fe0419ececd8998e1", "kind": "unclassified_tcp", "frame_number": 57772, "timestamp_epoch": "1634915967.103206000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50105, "dst_port": 1187, "tcp_stream": 1068, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c54a0f1ca666f12ff6f4c0d2", "kind": "unclassified_tcp", "frame_number": 57784, "timestamp_epoch": "1634915970.620715000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d1810c000000197b" } }, { "event_id": "evt-5adb8f9eb0ad6ca2689bfbc4", "kind": "unclassified_tcp", "frame_number": 57786, "timestamp_epoch": "1634915970.812885000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1810e00000005020002" } }, { "event_id": "evt-3918fdd027686392a3391577", "kind": "unclassified_tcp", "frame_number": 57787, "timestamp_epoch": "1634915970.813455000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d1810c0000000502" } }, { "event_id": "evt-081083f34ab30936292ca335", "kind": "unclassified_tcp", "frame_number": 57789, "timestamp_epoch": "1634915971.049620000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f849b5087e422fb970a97d0d", "kind": "unclassified_tcp", "frame_number": 57790, "timestamp_epoch": "1634915971.049948000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d1810c0000000100" } }, { "event_id": "evt-dd308c36140b5f07c08c2319", "kind": "unclassified_tcp", "frame_number": 57796, "timestamp_epoch": "1634915971.387448000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50106, "dst_port": 1187, "tcp_stream": 1069, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8b0a78ebb2dca7530c63a185", "kind": "unclassified_tcp", "frame_number": 57798, "timestamp_epoch": "1634915971.436241000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-119f7734de02e5ac713f97d5", "kind": "unclassified_tcp", "frame_number": 57805, "timestamp_epoch": "1634915971.552424000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18114000000050000010a0a169cc362" } }, { "event_id": "evt-d66d8052b02f4d632ab87640", "kind": "unclassified_tcp", "frame_number": 57809, "timestamp_epoch": "1634915971.602172000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1817900000032323020534139505230334341303031392e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a31393a3331202b303030300d0a" } }, { "event_id": "evt-84f3a5170e4e616e47c2fbde", "kind": "unclassified_tcp", "frame_number": 57812, "timestamp_epoch": "1634915971.983356000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1811a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-dd4751e8c2f6b30f16d7f729", "kind": "unclassified_tcp", "frame_number": 57817, "timestamp_epoch": "1634915972.033311000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181d80000003235302d534139505230334341303031392e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-c165e1137007975b826a81ab", "kind": "unclassified_tcp", "frame_number": 57821, "timestamp_epoch": "1634915972.353450000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181140000005354415254544c530d0a" } }, { "event_id": "evt-86e9babd145b8fbe3b797084", "kind": "unclassified_tcp", "frame_number": 57826, "timestamp_epoch": "1634915972.407278000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1812700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-d08b333921e8a711057531a8", "kind": "unclassified_tcp", "frame_number": 57829, "timestamp_epoch": "1634915972.749778000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5b47c719cf482db27f59165f", "kind": "unclassified_tcp", "frame_number": 57834, "timestamp_epoch": "1634915972.814307000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3e0362f92e28c9e28e35a184", "kind": "unclassified_tcp", "frame_number": 57841, "timestamp_epoch": "1634915972.880910000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b1ee9fe57e025d2bd62fa052", "kind": "unclassified_tcp", "frame_number": 57842, "timestamp_epoch": "1634915972.880923000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c29cfb59fdb30ce2de6334ad", "kind": "unclassified_tcp", "frame_number": 57846, "timestamp_epoch": "1634915972.927024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1816703000001cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313031363030343834395a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313031363030333330355aa011180f32303231313032323233343830355a300d06092a864886f70d01010b0500038201010021323f32c790aec311562a15aed61b9efc4772125d46493ee1088a4ec8b2a7f0d6176d9054298bd2ed03be9025e36e82e05ec519ebedcd178c1fe78f78db6f5846c6ffa2074bba60706b7c6b622d2cd69297dc7a906dfc5f1531257e374eb87f31fa27985b3efb89a2439593578e0ae3291314d0b4764514f25c9ed13755a3f1a23156cd432f8b4266c9658ca385b4b19ecd5fd064c85b805bac095e39f7791da1a55a8548e45827c10e66179ef63a2b6b5b7782e541753f23b44c55ab005edcfbe487937c490871ef19fa2bf9ee5b877f2babbfc0d88b385411358cd2432fa2f1ce66fff7c9d478c3eb6a8c2b2842dbde7ba13e0dc9399615e81832597a96ee0c0001690300186104dd18d8cede79474d145d5c06f9273e529ea8da1d30c1a5b8694a2f88b4c2473105877b9bdaa39f4f82b383927d600f22e498689ef2612165bb48ee7a0137d827e5b8dda480dd6a22fef7452569414e0b3a14fe7ae58ccdfed0b0aecc53880d8d040101002f7a2b67aeae998a1edbe6e05be7c2c8f8d27e52bed74bd549401d7ffd173a114e882ffa54310e98d6bf2f1e6477331c398c635ebe8e5b4b3c19340a9a11feb7c767aee4cdc5692162a97f062d6bb9c9bef652928a2e82c8b7b9919a194e35f225fe70ff5c0341b2a450b0bfbefdd278c9ec3247d8832a36a86e3ad05c7a98941f95cbf6d11c7a41670bbc40023cfa22d61e329a947e2f67daf011f36a37b3c26d1e565caeb30d7c1126a0efd610f40e067da6233432d86504be0b1c7c1fa3bfd93efcae6ed76880f8bd9c8fd0711aceb8664ef74ae0b7234713758fbb9fe2a7a9270d6238a37b5067dcf5a09e853e3206a8aa6b5414c04554a71b37f08dd8d20d00001a03010240001204010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-823fbc6840dbd037e51ea0e6", "kind": "unclassified_tcp", "frame_number": 57849, "timestamp_epoch": "1634915973.247182000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181b400000016030300070b00000300000016030300661000006261047bd8e5427aa6f026ba6e755e4f63e78d8730a3d9162bd0ca3441d0b64f2451df0f0e7963eeecd01de921adfebe0180a1bde3081ce8019fea2f20c45f787dd76bba5ab0a681d89cf7a03a8c915c028ad76a7ee76209aeb588bd0378c8b9a80fe7140303000101160303002800000000000000006d34c3cbdd6bfa02aab58ac220f3499a763afb93b511b1e63333fd58fc329034" } }, { "event_id": "evt-2fa4a07bcdd5c5da785fb377", "kind": "unclassified_tcp", "frame_number": 57854, "timestamp_epoch": "1634915973.298428000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1813d00000014030300010116030300280000000000000000c1b568f6538824731be01e0a77ef29b3f1efb3922fb50b08d433b969338b1ae5" } }, { "event_id": "evt-adffc70de80aaf03c8ab86f1", "kind": "unclassified_tcp", "frame_number": 57857, "timestamp_epoch": "1634915973.674791000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1813700000017030300280000000000000001db2d68031b607cf04333aef88d8f69479a9f58a87336e2e925374ce989f4e922" } }, { "event_id": "evt-df00b5eb807c7f0b98bbf3bb", "kind": "unclassified_tcp", "frame_number": 57861, "timestamp_epoch": "1634915973.725301000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a1ff35ba56ea6ec5fdfc4a47", "kind": "unclassified_tcp", "frame_number": 57865, "timestamp_epoch": "1634915975.023881000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181330000001703030024000000000000000284d683056a176ee4b240fec5300db057c528fb1a995627f0cfb74c06" } }, { "event_id": "evt-5c98fded2e3fb7771901a518", "kind": "unclassified_tcp", "frame_number": 57870, "timestamp_epoch": "1634915975.073348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18139000000170303002a00000000000000026ec7eddc6e16bf915da6fb4d73085f80bbf600f6427e19e2937b499208e4ae0dfee5" } }, { "event_id": "evt-dc193aa8130995d32cdfd4dd", "kind": "unclassified_tcp", "frame_number": 57874, "timestamp_epoch": "1634915975.542599000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18149000000170303003a000000000000000317bd0ea272d7cfe5b67d695d2238f786f40a36a6742774b03f9b3aef9f092d64dbacc10a0b3556bdfadd47b9a7cc6b28846b" } }, { "event_id": "evt-6cecf4e92e18ec7024d4c244", "kind": "unclassified_tcp", "frame_number": 57879, "timestamp_epoch": "1634915975.593328000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18139000000170303002a0000000000000003e8c98c4a445039d8ff2e3368031a3f39cf6827e1ba066c368d5386245356feb0b7e2" } }, { "event_id": "evt-8665dd4f8bbe4318e02edfbc", "kind": "unclassified_tcp", "frame_number": 57884, "timestamp_epoch": "1634915975.715213000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50107, "dst_port": 1187, "tcp_stream": 1071, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bc4bdf89158bd3afdd8ce7c3", "kind": "unclassified_tcp", "frame_number": 57887, "timestamp_epoch": "1634915975.928350000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18135000000170303002600000000000000046141896d0c3159cc78842894bbcc76efa9b5d85b9eaf9c452aa70e5b154f" } }, { "event_id": "evt-f2ca78566bd49668a39de364", "kind": "unclassified_tcp", "frame_number": 57907, "timestamp_epoch": "1634915980.067969000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50108, "dst_port": 1187, "tcp_stream": 1073, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3a66c74e99a8d333051f2f94", "kind": "unclassified_tcp", "frame_number": 57909, "timestamp_epoch": "1634915980.180434000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50108, "dst_port": 1187, "tcp_stream": 1073, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-21f390d43f9d6701f484822c", "kind": "unclassified_tcp", "frame_number": 57918, "timestamp_epoch": "1634915983.676111000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200696e0c000000197b" } }, { "event_id": "evt-23f8ed358b5727d89ff7778f", "kind": "unclassified_tcp", "frame_number": 57920, "timestamp_epoch": "1634915983.855985000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e0e00000005020002" } }, { "event_id": "evt-12a524d85fb07e40df676c06", "kind": "unclassified_tcp", "frame_number": 57921, "timestamp_epoch": "1634915983.856529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200696e0c0000000502" } }, { "event_id": "evt-9d95454abecaed5e3a597254", "kind": "unclassified_tcp", "frame_number": 57923, "timestamp_epoch": "1634915984.121693000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d73bbf5a9ed2a51e8f08fbff", "kind": "unclassified_tcp", "frame_number": 57924, "timestamp_epoch": "1634915984.122182000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200696e0c0000000100" } }, { "event_id": "evt-9a06a3275c179cfa88bc2002", "kind": "unclassified_tcp", "frame_number": 57932, "timestamp_epoch": "1634915984.406676000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50109, "dst_port": 1187, "tcp_stream": 1074, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0bf9d8fb4aa52b83b2ea4ed7", "kind": "unclassified_tcp", "frame_number": 57934, "timestamp_epoch": "1634915984.474965000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e2300000005010003126d61696c2e636f6d652d70617269732e66720019" } }, { "event_id": "evt-5b6589e7b0d21d808f6ec04c", "kind": "unclassified_tcp", "frame_number": 57943, "timestamp_epoch": "1634915984.930695000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e14000000050000010a0a169cc364" } }, { "event_id": "evt-a654f22d83cf44c1ce02c65b", "kind": "unclassified_tcp", "frame_number": 57946, "timestamp_epoch": "1634915985.085468000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e35000000323230204741524d2d31303452303035204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ef91d6ca093eb7b34ab2bac7", "kind": "unclassified_tcp", "frame_number": 57950, "timestamp_epoch": "1634915985.407629000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-09fff1c40634511f0d3f18d6", "kind": "unclassified_tcp", "frame_number": 57958, "timestamp_epoch": "1634915985.584529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-ebbf078b988cf5e7fe1ff189", "kind": "unclassified_tcp", "frame_number": 57960, "timestamp_epoch": "1634915985.845704000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e140000005354415254544c530d0a" } }, { "event_id": "evt-3c227f598199a86aa8454539", "kind": "unclassified_tcp", "frame_number": 57965, "timestamp_epoch": "1634915986.003563000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5c23ab4d37680255a4d0b49d", "kind": "unclassified_tcp", "frame_number": 57969, "timestamp_epoch": "1634915986.157113000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d181a0000000170303009100000000000000044164bf3bf4b102e823b31da1f801bc3a61d95de9f37c5f9cae7b22898b00daaf336f7454d84acf125c8f8557371cee23917dcc2d670b65b46b27e3c1945e46521c7be421581db46c7d1d2fc58992ad123b356831d39cd7e3ca0a9656028e6e5fa4e516f2b82d4f730d197fa352ffc9fdcc537c8b1632da333ffbd300e7163aa0e2831f2b6f7f27a01c" } }, { "event_id": "evt-10e47f5fbea90063a0379d25", "kind": "unclassified_tcp", "frame_number": 57973, "timestamp_epoch": "1634915987.005015000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-32216dc91fbb7c63cc1c62bc", "kind": "unclassified_tcp", "frame_number": 57982, "timestamp_epoch": "1634915987.215539000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b7101082f1f19877009c7515", "kind": "unclassified_tcp", "frame_number": 57983, "timestamp_epoch": "1634915987.215559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-265c1e2173b19b8a2ba789ed", "kind": "unclassified_tcp", "frame_number": 57988, "timestamp_epoch": "1634915988.136591000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e52000000727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b06010505" } }, { "event_id": "evt-c8fe59cc297075dfc98e1059", "kind": "unclassified_tcp", "frame_number": 57993, "timestamp_epoch": "1634915988.144355000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-daa346118f46262644750b43", "kind": "unclassified_tcp", "frame_number": 57994, "timestamp_epoch": "1634915988.144375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-aa43e5cf83b63b5bdb0f4d36", "kind": "unclassified_tcp", "frame_number": 58001, "timestamp_epoch": "1634915988.728739000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703005e870c000000197b" } }, { "event_id": "evt-6dfcb9522f01fe5844377ade", "kind": "unclassified_tcp", "frame_number": 58004, "timestamp_epoch": "1634915988.767631000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50110, "dst_port": 1187, "tcp_stream": 1076, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-35d7ee8bb468f736f353a274", "kind": "unclassified_tcp", "frame_number": 58007, "timestamp_epoch": "1634915988.906712000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696ee4000000160303008a10000086850401200b4aa04d73c9a8e1ca5ad85e300583b436108b7126c33910515bf007939fc1fd06cbbbb93b6a764ebbeba82f2592c6d6b986cdbfb319cc4cd4c5d30cacf6ee1f00fe9363493cad394688c52525262e098c665eea109674d27eee9d61ad1c8622fe8dc6f856c63d2091331728fd09d5b599736f52dbd36964003c2b9fa32c9b77cdb914030300010116030300403bca2d63425acd9b48ae1d57bb6547f1e1567e26b3a6e619f6a67806773eadd99fa257e930b92ead1ea8bf61274a5e759c013e1ed32e319beb2e2e287d35c723040703005e870e00000005020002" } }, { "event_id": "evt-5151df14d32fe944d2884c36", "kind": "unclassified_tcp", "frame_number": 58009, "timestamp_epoch": "1634915988.907351000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703005e870c0000000502" } }, { "event_id": "evt-78125abb6bb0c85d67523cbf", "kind": "unclassified_tcp", "frame_number": 58014, "timestamp_epoch": "1634915989.069375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e55000000140303000101160303004013ea6f18b862f0664ca7ff4de19923f6f988d19caf7b44694ef7218738f8135815f369fe7165d742cef23b9664e57f9dd167eff27bb992d96fadc2e70afc5c4b" } }, { "event_id": "evt-60a0d3041716f9f6f9ce66bd", "kind": "unclassified_tcp", "frame_number": 58018, "timestamp_epoch": "1634915989.277228000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703005e8720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6cd9762d332365101338fe51", "kind": "unclassified_tcp", "frame_number": 58019, "timestamp_epoch": "1634915989.277783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703005e870c0000000100" } }, { "event_id": "evt-db1a99abde76aeeb79003866", "kind": "unclassified_tcp", "frame_number": 58022, "timestamp_epoch": "1634915989.458932000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e4f0000001703030040fb100d50d6524f49dafe8170e1898c9d83f300fcbf27efed1d16b304b39712220e307c0f8bb87e09a4a492105d7ef3c53d4a32c77371c6bb18aabfb65963516f" } }, { "event_id": "evt-71e6e3322c0955ad4132dcdc", "kind": "unclassified_tcp", "frame_number": 58040, "timestamp_epoch": "1634915989.623451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ea784413c6798a1a7f340295", "kind": "unclassified_tcp", "frame_number": 58042, "timestamp_epoch": "1634915989.647877000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703005e872d000000050100031c6d61696c2e676f6c646d61726b636f6e73756c74616e74732e636f6d0019" } }, { "event_id": "evt-1972ff0d13c27af5dfcadaee", "kind": "unclassified_tcp", "frame_number": 58056, "timestamp_epoch": "1634915989.707589000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703005e8714000000050000010a0a169cc365" } }, { "event_id": "evt-14d7f1fe985079daf28d67cf", "kind": "unclassified_tcp", "frame_number": 58068, "timestamp_epoch": "1634915990.509227000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e4f0000001703030040ea9d511a6b4aa8ce23797a9b9f0f88ebb2fe9e061f86c61eaa17c78e0a33adbfb949e4e51901530b8848f1a553e4bc9c67ecf1efda91980492022655dfb19fa7" } }, { "event_id": "evt-f2490663918840147ae2af70", "kind": "unclassified_tcp", "frame_number": 58073, "timestamp_epoch": "1634915990.671709000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e4f00000017030300409aaf5cce5a6c2b26e22c5252e92f879b064a61a6a00c4faede8350a6039ac17623bdef8ab5804ed36fe4a559ab3045e55cf52856850ee440d0d602f529f48ee1" } }, { "event_id": "evt-70c4e380596025c6c4af24b0", "kind": "unclassified_tcp", "frame_number": 58076, "timestamp_epoch": "1634915991.203483000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e5f0000001703030050f289b16907d15c213af1eb241086e24f97f9fc44fa1e8532957a9245ed37a9991d8757c81f9bbc1ade9a4f71ae465332fd0d80eafa607a702c46116fe02fb461d408553ed5707479e29644b960a318a9" } }, { "event_id": "evt-5759308ad7c67ae1d28ddcdb", "kind": "unclassified_tcp", "frame_number": 58083, "timestamp_epoch": "1634915991.381736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e4f000000170303004017e74ec0d458f3fd4d5c5659bfee28c528a7c3e377fd43ea5f4f82cb84f98e18eddc346ee5e3ffdc5e31cfacf01c124912f2c7fc050cecc4508f207717ce8283" } }, { "event_id": "evt-5bc1541abe44705ca5209f20", "kind": "unclassified_tcp", "frame_number": 58086, "timestamp_epoch": "1634915991.630965000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e4f00000017030300402585c23ada33c6586dfc8479e7329a24fb6f71ce710ee727d20fc7b13712283437910c5cff3078eacdba3d399faec3c7a301e7d8272cfc9e3f66997a96101298" } }, { "event_id": "evt-17990bed682874a89131fa7d", "kind": "unclassified_tcp", "frame_number": 58091, "timestamp_epoch": "1634915992.126024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18175000000170303006600000000000000056fb981fb39aa2718b2f4f2522df08dd3b4c1dadd46e4a870c63d38b7247f8b0e6aec677980c74cdde5cc8746d56cdf081b19ae7ccafb52dcfa009925c0e5a8c2dbbe7e41a2730a39050e955416e012d7d199c42336279c8cbf60ebfdf9f2" } }, { "event_id": "evt-1c5f336ac5f35bc7cf84d848", "kind": "unclassified_tcp", "frame_number": 58095, "timestamp_epoch": "1634915992.396086000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d1812d000000170303001e00000000000000068a286f0d04e1c0f5de5d351348b3abe5f5c374ef6a15" } }, { "event_id": "evt-cc556d43890f6a60fa40490b", "kind": "unclassified_tcp", "frame_number": 58101, "timestamp_epoch": "1634915992.450427000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d18157000000170303004800000000000000063adf0f843a3f95535740177d3e942a0ef1ccbe7e9732d6da6b87cace147f986f077c1634942607844dc08000349ad62a9eae295ec2af40c17a0f01e6a9ddc835" } }, { "event_id": "evt-2049b7024f4d0dcf031628ef", "kind": "unclassified_tcp", "frame_number": 58105, "timestamp_epoch": "1634915992.451032000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d1810a000000" } }, { "event_id": "evt-1ff87cfe7da69bf5bba75961", "kind": "unclassified_tcp", "frame_number": 58111, "timestamp_epoch": "1634915993.072333000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50112, "dst_port": 1187, "tcp_stream": 1079, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-08307322e85442a232df5f05", "kind": "unclassified_tcp", "frame_number": 58114, "timestamp_epoch": "1634915993.176361000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e5f000000170303005003f9f2befdbb34dc756467708f88220145099ad82ad08343ff8cde101212718cc3886653862fae40c23646302c7fa05617667d0b521997e57b6d757f9eee7da7ebc8350e9436c6ec5e8643770e39d434" } }, { "event_id": "evt-fd2c91cdb1d89a9c1ed198de", "kind": "unclassified_tcp", "frame_number": 58119, "timestamp_epoch": "1634915993.426892000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e3f0000001703030030f6900a377e30d2cef06b691d6c46a68e2c1c69de2039f8e07675a6c8085124756e28876c06fac30dade956e94ac21714" } }, { "event_id": "evt-c5298d118b5deab9edbeb6b8", "kind": "unclassified_tcp", "frame_number": 58130, "timestamp_epoch": "1634915994.978040000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a4a4594f013f4cb68fc04835", "kind": "unclassified_tcp", "frame_number": 58138, "timestamp_epoch": "1634915997.395177000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50113, "dst_port": 1187, "tcp_stream": 1080, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5b7fbb9ea57ed44237a1f9e3", "kind": "unclassified_tcp", "frame_number": 58143, "timestamp_epoch": "1634916000.010660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100cfde0c000000197b" } }, { "event_id": "evt-c1f70164ce619b624dca9b18", "kind": "unclassified_tcp", "frame_number": 58145, "timestamp_epoch": "1634916000.216481000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde0e00000005020002" } }, { "event_id": "evt-69a658059f02fb49af7a40c8", "kind": "unclassified_tcp", "frame_number": 58146, "timestamp_epoch": "1634916000.217004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100cfde0c0000000502" } }, { "event_id": "evt-ecd7279c936225b5ab83976d", "kind": "unclassified_tcp", "frame_number": 58149, "timestamp_epoch": "1634916000.396254000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703005e870a000000" } }, { "event_id": "evt-d18dde0743c0ee2a1fba5fbc", "kind": "unclassified_tcp", "frame_number": 58157, "timestamp_epoch": "1634916000.580191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8b273ad25c4b92851e4b66ca", "kind": "unclassified_tcp", "frame_number": 58158, "timestamp_epoch": "1634916000.580746000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100cfde0c0000000100" } }, { "event_id": "evt-54f0fa2227fce1b8f607dde9", "kind": "unclassified_tcp", "frame_number": 58160, "timestamp_epoch": "1634916001.035341000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde1e000000050100030d6d61696c2e656f6c61732e66720019" } }, { "event_id": "evt-958cf89567012fac717ea61c", "kind": "unclassified_tcp", "frame_number": 58169, "timestamp_epoch": "1634916001.320076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde14000000050000010a0a169cc366" } }, { "event_id": "evt-9251052701381d7999cb4014", "kind": "unclassified_tcp", "frame_number": 58174, "timestamp_epoch": "1634916001.708268000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50114, "dst_port": 1187, "tcp_stream": 1082, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6879d382b277fdd75e813814", "kind": "unclassified_tcp", "frame_number": 58188, "timestamp_epoch": "1634916006.089119000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50115, "dst_port": 1187, "tcp_stream": 1083, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d35ecadb90e25ed8567b1c53", "kind": "unclassified_tcp", "frame_number": 58196, "timestamp_epoch": "1634916007.673019000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfdef000000032323020656d64762d6d6573672d66726f6e742d30322e656f6c61732d73657276696365732e636f6d2045534d54502053656e646d61696c20382e31342e332f382e31342e332f44656269616e2d392e343b204672692c203232204f637420323032312031373a32303a3036202b303230303b20284e6f205543452f55424529206c6f6767696e67206163636573732066726f6d3a203131322e7375622d3137332d36362d3134362e6265346d652e6e6574284f4b292d3131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a" } }, { "event_id": "evt-833ceaebc9c46c5e31620a69", "kind": "unclassified_tcp", "frame_number": 58199, "timestamp_epoch": "1634916008.202874000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f185bb6bc556bb94aeaa9724", "kind": "unclassified_tcp", "frame_number": 58205, "timestamp_epoch": "1634916008.368694000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3c4941dca24d4ba04ea60865", "kind": "unclassified_tcp", "frame_number": 58208, "timestamp_epoch": "1634916008.610018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde140000005354415254544c530d0a" } }, { "event_id": "evt-4965d5ce85d17ef14d4723b4", "kind": "unclassified_tcp", "frame_number": 58213, "timestamp_epoch": "1634916008.749851000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-58ee70fd90a0f56a8e844215", "kind": "unclassified_tcp", "frame_number": 58216, "timestamp_epoch": "1634916009.006327000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-baba84db683e2014703711f7", "kind": "unclassified_tcp", "frame_number": 58222, "timestamp_epoch": "1634916009.160345000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a2ed99f8fc93258e58d586d2", "kind": "unclassified_tcp", "frame_number": 58225, "timestamp_epoch": "1634916009.160711000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3eb620e54feaf73890b81277", "kind": "unclassified_tcp", "frame_number": 58228, "timestamp_epoch": "1634916009.165621000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde43020000018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c050003820201004e134096c9c3e66e5bc0e3baf417e1ae091fc9bfcb0c2516f27353b3761ab7ab4806d6cd007c204543456c165a1b1361d749baa402a4ace8cece2dc92a74a3dcdeaeabd06836f891af3c01f777d50bcf97abeb87e715a8fa305a617120b1c043c4b98f6d8a31eb153624fb62d50b9c8fe966bde661519793b61d87bdb0b56cfea6112906613431303d20277351d0de8583d37739204696daa7c65a162785b2cf4e0f4e8c5cbebe3800f84bf9727bd4f27ad7a22985d004bad3422c5188522ed13d246747ec55cc1bf4ca34ea26c1deddc42189f6ba7b321e8e965e844538cf80aa37698b6017741548919c6df04ea377ca1b1c48faf9cf49e85f4f850ae28f901bab704c9aebb7a63fb4ac5da45fcfe6d88a9690f74f268160765d0f247791b32a319f165ab25d8c1c29aa489c8e6fd3784070db77ecdde3d15705702de64998880584620570567686394ed3226f1dfe6df10eb362c43ccbc085b9611ebae1158059940cae05bb8c7f56be1cd25abf97f26a4cb0c67076b0908dc10b36b911d8d6285cea4ffe24b7180a9b0cd0c17c5cfb69bdcca24dc690bca64df2b1bad69a675b960252d082f9c40a5c0d28e03fc8fa959589d5a4be496c40b23ea86bb8d525b2c4fef1d3d7e7d6dc43017630fb3b8b5df74a897c9a35befccaf05701f08d3fa087327b475a974b82d266c2c42dea3f24f4a7f9a8b9e36ad91861a03b8c1516030100040e000000" } }, { "event_id": "evt-931ecbcb3d30282729fa30c6", "kind": "unclassified_tcp", "frame_number": 58233, "timestamp_epoch": "1634916009.617066000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a0b4671be156d5b64c029c08", "kind": "unclassified_tcp", "frame_number": 58238, "timestamp_epoch": "1634916009.784955000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde4500000014030100010116030100302c236f4f986404a055eb4c54d346563eaf2580615a01f6eed622d2746e688d460f76c7aed72d65d697439ace33c5642f" } }, { "event_id": "evt-27d0db5bfbe695f49b427b26", "kind": "unclassified_tcp", "frame_number": 58241, "timestamp_epoch": "1634916010.118598000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde640000001703010020e801303dcbb05636e4fcf001a106beab43d803ce9c4cf73be0f538aeba64c19817030100309df28cb55b7670de9c05118f7541468d9adcdebcfe387c55f36d411ae1faf419e3cace0c9e1667177069abba3dadc813" } }, { "event_id": "evt-ebd52f9c255a735a852f15a8", "kind": "unclassified_tcp", "frame_number": 58248, "timestamp_epoch": "1634916010.265540000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-572248b20bb3f38e8a52197a", "kind": "unclassified_tcp", "frame_number": 58255, "timestamp_epoch": "1634916010.446395000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50116, "dst_port": 1187, "tcp_stream": 1085, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f03de3db40f26d2e5f6a0914", "kind": "unclassified_tcp", "frame_number": 58258, "timestamp_epoch": "1634916010.669235000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde54000000170301002007207e1e9ab4a95bc433aa76276fa6163c49852a057225cb7b1e218e11bc68211703010020ecfa96193b726f1bdaec1f0d5060b2fc7e11333b323dd126d2e57409a76671f6" } }, { "event_id": "evt-337aaf1ae31f9bd654ac8fa8", "kind": "unclassified_tcp", "frame_number": 58263, "timestamp_epoch": "1634916010.818906000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde3f000000170301003031e061df8f33a2fb7055eacdf93383f88cc82549772133a3ac5ff0d90642ea1795aa1cb8f0ce1ef37e192726b85ed46e" } }, { "event_id": "evt-9d19edffb805ae8f288ced72", "kind": "unclassified_tcp", "frame_number": 58266, "timestamp_epoch": "1634916011.178976000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde6400000017030100205948c88f8fa66d5005cb3e158b26885492a2cff8ea4069a6f00d391c67d56bb617030100309145da30c6bf26a03c881504b353142002f1309cac6ea5cd552d0dfce0b9e51ec1d189e9da594aa43ebf489b4369b9fe" } }, { "event_id": "evt-327e87cee404b37ff8e4a5fc", "kind": "unclassified_tcp", "frame_number": 58272, "timestamp_epoch": "1634916011.329916000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde3f0000001703010030b84bc8f7fb765988ff14a5d16f0f20c1a02f85a1b5d9c2e64940b4a6646365387e6696e8d5015a7045389b2ae24166b5" } }, { "event_id": "evt-a92a4c643a2e67dbbb792af3", "kind": "unclassified_tcp", "frame_number": 58275, "timestamp_epoch": "1634916011.636532000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde640000001703010020cbe1d51b66aa543d6952e1035892480deb11d7a98ad337c729ff502533f70c0617030100303669b3c293da96386d7b6243853718da4e1ce2267b5070453be30ad69f5db30ffd45c951495777fbfad6872b8af9a63c" } }, { "event_id": "evt-4f7d7a0cd1dbe73d716a09f7", "kind": "unclassified_tcp", "frame_number": 58280, "timestamp_epoch": "1634916011.820011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde4f00000017030100408d1bce6f4b64a12c81f1bc8b02c14b43e8b2b02691ccc21cfb77581b9e9bf8c0b065af646bbd18af6f1594d0be433afaaf77c8282aaf8eae6ee90df82cea8171" } }, { "event_id": "evt-156e9008ec3ad4781dfb756c", "kind": "unclassified_tcp", "frame_number": 58283, "timestamp_epoch": "1634916012.094050000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde540000001703010020ace80654c9251a732c9a1398c595d959fa6173aefaeb975102de6a5b37fd7f091703010020685a63a86f5df785dbd0c33ddb7eb417b7cb32d47172b9acc08a31a5699e825e" } }, { "event_id": "evt-241c4536b878c8e51c74a26d", "kind": "unclassified_tcp", "frame_number": 58288, "timestamp_epoch": "1634916012.238750000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde4f0000001703010040b568d20aebd40bd2192c9aefc4725326c2cbcdc71873b316c1f3af5435f51fa1af8839e0e3bc596fa0252b18cc04a5a75616e8eb451dbded6d0f68e66480b363" } }, { "event_id": "evt-3cb9592ff61cd864fd374d51", "kind": "unclassified_tcp", "frame_number": 58292, "timestamp_epoch": "1634916012.503434000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde5400000017030100206cafe87eade6da9878320ca7c42661799e2613545b7d23507dcd78c9f5dcb3121703010020675ac54e0fd309069d791187d25f669a057ca34f40ff6ee4801471c6f10d5169" } }, { "event_id": "evt-da4c730aa03a7f16bec5844e", "kind": "unclassified_tcp", "frame_number": 58298, "timestamp_epoch": "1634916012.650428000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde940000001703010060b2873e38e1285a4eb9ab91c19cfe0602f894c038a69b61da52a2c4285acaf1f99c19642ee726298f7aaa6c113d20103b7a2dada4eefa94b9b21463763b04e5b00af8406a0761f56e847306f6816f538b9c9aca0ab5367de6f6dc66780699284f150301002034bfb357a303ac6a7dd644a41eacdc0bac9e6d10cf62050a5d65ea94fbed2fc6" } }, { "event_id": "evt-75e632151cfc1993a099a588", "kind": "unclassified_tcp", "frame_number": 58302, "timestamp_epoch": "1634916012.650935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100cfde0a000000" } }, { "event_id": "evt-2d4793f2b40c79e447f7df57", "kind": "unclassified_tcp", "frame_number": 58304, "timestamp_epoch": "1634916012.889440000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100cfde2f000000150301002092d37d0bc2db6c5e9d433fcec541c1e81ad345ccdc38f15745f75239525662cd" } }, { "event_id": "evt-cef0dbbad6c4bf33072c7afa", "kind": "unclassified_tcp", "frame_number": 58306, "timestamp_epoch": "1634916013.066367000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100cfde0a000000" } }, { "event_id": "evt-81878b15d11510dc50f0efe4", "kind": "unclassified_tcp", "frame_number": 58310, "timestamp_epoch": "1634916014.243774000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010061f60c000000197b" } }, { "event_id": "evt-82c8ef4591ee22dc7da7e57c", "kind": "unclassified_tcp", "frame_number": 58313, "timestamp_epoch": "1634916014.436413000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f60e00000005020002" } }, { "event_id": "evt-b72c4093a57b6143003c5e41", "kind": "unclassified_tcp", "frame_number": 58314, "timestamp_epoch": "1634916014.437007000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010061f60c0000000502" } }, { "event_id": "evt-cc4982dcd06007ce318e842d", "kind": "unclassified_tcp", "frame_number": 58319, "timestamp_epoch": "1634916014.679464000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5d3fd932a7461966c160dad4", "kind": "unclassified_tcp", "frame_number": 58320, "timestamp_epoch": "1634916014.680184000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010061f60c0000000100" } }, { "event_id": "evt-56d7e6cef83278799c09f21a", "kind": "unclassified_tcp", "frame_number": 58324, "timestamp_epoch": "1634916014.810577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50117, "dst_port": 1187, "tcp_stream": 1086, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fc0e1e8a31f6f45b95edf7f2", "kind": "unclassified_tcp", "frame_number": 58327, "timestamp_epoch": "1634916015.112068000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-0c6b5fc92cd609da4dce5e85", "kind": "unclassified_tcp", "frame_number": 58334, "timestamp_epoch": "1634916015.190425000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f614000000050000010a0a169cc368" } }, { "event_id": "evt-78b0e4ec7eeedf00b2d2d727", "kind": "unclassified_tcp", "frame_number": 58337, "timestamp_epoch": "1634916015.232135000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f67900000032323020534e36505230384341303033362e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a32303a3134202b303030300d0a" } }, { "event_id": "evt-0c36cbefd69ded71805c2899", "kind": "unclassified_tcp", "frame_number": 58341, "timestamp_epoch": "1634916015.606285000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f61a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-4dc45a7ce7cb97dec6a37f03", "kind": "unclassified_tcp", "frame_number": 58346, "timestamp_epoch": "1634916015.650957000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6d80000003235302d534e36505230384341303033362e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-d753c90b0eddc2fdb9652ec4", "kind": "unclassified_tcp", "frame_number": 58349, "timestamp_epoch": "1634916015.977198000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6140000005354415254544c530d0a" } }, { "event_id": "evt-bfab6fc485454d478452d9d2", "kind": "unclassified_tcp", "frame_number": 58353, "timestamp_epoch": "1634916016.019085000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f62700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-9626c37f82428c868734b8e3", "kind": "unclassified_tcp", "frame_number": 58357, "timestamp_epoch": "1634916016.379558000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f61601000016030101070100010303039aa57299fb6e5f77c8b52e4abe153f72bf79da1fd85540ae4d503043d811923f20c6cd93aaa6e9058ea5b0f590ce3de9e50909c14bd330488c1c6487399cfce31e0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e6f75746c6f6f6b2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020fb18311c857058c52935c7bea0b7030b494095791b3a55e6978b38ec11372e21" } }, { "event_id": "evt-9eeaaab55e24003216777711", "kind": "unclassified_tcp", "frame_number": 58362, "timestamp_epoch": "1634916016.431045000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2f37361e97b0a17f75f78056", "kind": "unclassified_tcp", "frame_number": 58367, "timestamp_epoch": "1634916016.443575000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f66e0a0000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d" } }, { "event_id": "evt-3fadf33e2e210bec4fbe30f3", "kind": "unclassified_tcp", "frame_number": 58368, "timestamp_epoch": "1634916016.443595000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032303030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032303030333330365aa011180f32303231313032363233343830365a300d06092a864886f70d01010b050003820101006bf3f7594585ecffdd9eb68654cae703784da91c4b574c2bbd04c454ba93e848d499002ffa60a7f368e18d33184835d8104a2b35417072de995f8f0b15d994647c5ea4b411088fdecffd8198857b25b05e694e2997ed62dbba8c49378e9ca61fec82afbf88244cc3b713073e35144ff7f26279a1ae42fd8ce0a11bee33165ace8db13e370148fe744aec9529c96f340cbc20037fe806735119aa027da0c1d0cb800dee3ce7cbff4d46c6cf39b38cd2c0b1ffdeaa8c0659a09886c2c443823d07f02c081176bdb4fd7f1f5f1a08d4ef1a90d4fdf30633363a8c6745f5ad942aef68860cc1c65e7aa6acecdd93dcc0b7e88d36dad74d6389f578994ada6cb2bdd70c00016903001861046d2f570f24de9d2ec40d1a0c5d653ef336612844ef679f5b1d005c0eeb5c2aef661d8c739e74a3d9a107f31ba4" } }, { "event_id": "evt-505bbceb0be0b9e21113bb1e", "kind": "unclassified_tcp", "frame_number": 58373, "timestamp_epoch": "1634916016.447669000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8c1067254159b4675643fd0b", "kind": "unclassified_tcp", "frame_number": 58375, "timestamp_epoch": "1634916016.816454000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6b400000016030300070b00000300000016030300661000006261040cf62f801af732b03620416dcf74a18457047ad4c094103e3e8f717ffa8a56bc621af2c47db84c6e53560763f0c69dc558775c00abb50311042038e67043a7b17e14a2f6c522bf8281633627a9984d4a1e49e65d59b51f2862fb0c5a07a606421403030001011603030028000000000000000021fd876656d7ca3b3d613fd5f477bd6d2edca02bbc4570369092fb0f139c306d" } }, { "event_id": "evt-bca4ee205e978718c2b6a653", "kind": "unclassified_tcp", "frame_number": 58380, "timestamp_epoch": "1634916016.871139000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f63d00000014030300010116030300280000000000000000b53fad1f9d0a92c386a5d74d3805e73189fe8ec65e9258dc02cb03cd7879a933" } }, { "event_id": "evt-fa82517fe4f6ad9f77ef0f7e", "kind": "unclassified_tcp", "frame_number": 58384, "timestamp_epoch": "1634916017.261996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f637000000170303002800000000000000016ea0d441b3d610645a09e56ba3456330abed2125139a0c6db2ccf616d794106f" } }, { "event_id": "evt-5727599122741692de8a35cd", "kind": "unclassified_tcp", "frame_number": 58388, "timestamp_epoch": "1634916017.304222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff892381e5a3ef782ea3b8fb", "kind": "unclassified_tcp", "frame_number": 58392, "timestamp_epoch": "1634916018.541722000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6330000001703030024000000000000000280a5fe52bdb39bf22eabb7c5cc688358b9eddcc34f22953f0154dc47" } }, { "event_id": "evt-924f0690bb21e946e543c821", "kind": "unclassified_tcp", "frame_number": 58397, "timestamp_epoch": "1634916018.592058000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f639000000170303002a0000000000000002e62568cfd239ff916f3097ddc1752e1bbedadc8f4d9dd2e19818263c7205af1514ab" } }, { "event_id": "evt-27b7bf596bfce030976b3f4f", "kind": "unclassified_tcp", "frame_number": 58400, "timestamp_epoch": "1634916018.963953000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f64500000017030300360000000000000003d51849a626a659faf88badb556a9904b55a5ee7c1b455c86d0a5cf8291c420fec6d1493d259ddddbda4e872b5d35" } }, { "event_id": "evt-b49dd11c1dad45aa63b64cf7", "kind": "unclassified_tcp", "frame_number": 58406, "timestamp_epoch": "1634916019.019588000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f639000000170303002a0000000000000003c510549de37c1c2ac00e138a3740891ce5b1fc00396df43290c121b46ddb66fa8ffd" } }, { "event_id": "evt-f379467f023b40ed4c30096a", "kind": "unclassified_tcp", "frame_number": 58412, "timestamp_epoch": "1634916019.266113000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50118, "dst_port": 1187, "tcp_stream": 1088, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-43b2fa6bf55915764a8d6295", "kind": "unclassified_tcp", "frame_number": 58414, "timestamp_epoch": "1634916019.343538000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6350000001703030026000000000000000486a03f9b4a722ac1eb097c197692bea86973e2aaa79e1f596ca374f4c866" } }, { "event_id": "evt-ec83cd12d9e20614c10e928c", "kind": "unclassified_tcp", "frame_number": 58417, "timestamp_epoch": "1634916019.369729000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50118, "dst_port": 1187, "tcp_stream": 1088, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-07475001cd0ff3f287cb6e20", "kind": "unclassified_tcp", "frame_number": 58434, "timestamp_epoch": "1634916023.679927000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50119, "dst_port": 1187, "tcp_stream": 1090, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-72c2be0e765a67a9971b9001", "kind": "unclassified_tcp", "frame_number": 58439, "timestamp_epoch": "1634916025.338136000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1df5c89d3beeee392747fb4b", "kind": "unclassified_tcp", "frame_number": 58444, "timestamp_epoch": "1634916026.702417000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e5f0000001703030050af08198f82ce5d68c8c74ab200323bc26626532e67860e1ac33780b31aa501dbe96192630a3720e48fb32772137e67a65b16f04b42ed9490632c763ae4eb2c0588f84125bb328dfe0df22cccafcf0a38" } }, { "event_id": "evt-b7f3e2ad6767886edceff50a", "kind": "unclassified_tcp", "frame_number": 58447, "timestamp_epoch": "1634916027.146469000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e3f0000001703030030f5a5a231c17fb19160a40cffd291be22e2f8975a93fb3b19e670ec7acc10e9177b8023f542a98a35faed8f2b50c7412e" } }, { "event_id": "evt-248280f91238a75c92bdbbfc", "kind": "unclassified_tcp", "frame_number": 58454, "timestamp_epoch": "1634916027.310181000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e6f000000170303006083922422ec775c6ea5d501cedbae9ee497f036125cd0fd0b815d75b1d24085b1955a36c53b8a65a4298d2195e68e8b41d5a4102feeb52fa96cd6e46ac3a020ca3e5eb3183a2d562bc2bac8688f64a958e569548fe20eb0d93567644ec6702313" } }, { "event_id": "evt-2df0a6e396b2266332d5bf6e", "kind": "unclassified_tcp", "frame_number": 58458, "timestamp_epoch": "1634916027.310695000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200696e0a000000" } }, { "event_id": "evt-2cb6764053363d7b14c550e2", "kind": "unclassified_tcp", "frame_number": 58460, "timestamp_epoch": "1634916027.604830000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200696e3f0000001503030030bcae785f1cbc52c4c44000d824c9cc1cc4f0e9471ea6a4ccf0d3b3c63207bfffd08ea14c4cb09b2d57679ea639fe5024" } }, { "event_id": "evt-dfeeea191ad8439137cd19a3", "kind": "unclassified_tcp", "frame_number": 58462, "timestamp_epoch": "1634916027.792496000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200696e0a000000" } }, { "event_id": "evt-69f57c349ac7c71c37366ad8", "kind": "unclassified_tcp", "frame_number": 58467, "timestamp_epoch": "1634916028.006431000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50120, "dst_port": 1187, "tcp_stream": 1091, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-000555859dc730a80dcbaef0", "kind": "unclassified_tcp", "frame_number": 58472, "timestamp_epoch": "1634916028.478390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6a00000001703030091000000000000000413d540ab3e972329c82fa0e8b1537144012afab4a61faea41ce59e9d07e33b87ad288dd525e0a7fa3541aee0ca07656a2a91d8f24e41e1ce99de42b6641a8b6c554677298a468da4616d85ccf70fb05e80f35b580f7ed587ccb73c958a3d317dac09c317dde53c5152729d90fd051e2643d7e0462e0934fa1317b0ae6e5db6ac688ac6d6903674c3bc" } }, { "event_id": "evt-5031f3bf0ce620cf217db8cf", "kind": "unclassified_tcp", "frame_number": 58475, "timestamp_epoch": "1634916028.724724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f62a000000170303001b00000000000000053590e41eca4f5ae390c844dcd9453a9886af5d" } }, { "event_id": "evt-087a8c692e3035ca679f7c9b", "kind": "unclassified_tcp", "frame_number": 58480, "timestamp_epoch": "1634916029.410444000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702005c880c000000197b" } }, { "event_id": "evt-515f8ed00bb3894ebf2e414a", "kind": "unclassified_tcp", "frame_number": 58483, "timestamp_epoch": "1634916029.600411000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c880e00000005020002" } }, { "event_id": "evt-b5eb18c11f4f1bf0affae4d0", "kind": "unclassified_tcp", "frame_number": 58484, "timestamp_epoch": "1634916029.600965000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005c880c0000000502" } }, { "event_id": "evt-134796612da6518354d4d27e", "kind": "unclassified_tcp", "frame_number": 58486, "timestamp_epoch": "1634916029.903543000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-be29290dbacff38f3bd8f683", "kind": "unclassified_tcp", "frame_number": 58487, "timestamp_epoch": "1634916029.904117000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005c880c0000000100" } }, { "event_id": "evt-9ea72933aea5fe0a2083c9ec", "kind": "unclassified_tcp", "frame_number": 58491, "timestamp_epoch": "1634916030.244607000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c881e000000050100030d6d61696c2e656f6c61732e66720019" } }, { "event_id": "evt-df84a36f72bc2ab85275d43d", "kind": "unclassified_tcp", "frame_number": 58497, "timestamp_epoch": "1634916030.388657000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8814000000050000010a0a169cc36a" } }, { "event_id": "evt-38d0c7f6aa869430948873ff", "kind": "unclassified_tcp", "frame_number": 58506, "timestamp_epoch": "1634916032.393894000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50121, "dst_port": 1187, "tcp_stream": 1093, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-44a1e4c025cb3960cbcef1c7", "kind": "unclassified_tcp", "frame_number": 58511, "timestamp_epoch": "1634916033.782712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f6750000001703030066000000000000000537e2443035a11e58290c3de82fef4573defe100183fd7c1e1ac213b44584720bf68df1f8ebc7e92cede3f260dbeb84d41d400fcc1b8fe62921e7d90c0237fc601142271a9b5467565d9271d39cfd397cd5fa3fe5731121af4131d95d3a70" } }, { "event_id": "evt-aba56e2b423086f73bd87287", "kind": "unclassified_tcp", "frame_number": 58515, "timestamp_epoch": "1634916034.058755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f62d000000170303001e0000000000000006022b235f8eae3a39ebb7e57d0c90128e38d9b691b3d4" } }, { "event_id": "evt-7846c510b257b93b50d07773", "kind": "unclassified_tcp", "frame_number": 58520, "timestamp_epoch": "1634916034.101552000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010061f65700000017030300480000000000000006cdfdd7f6a1a8dcf6b8808072157951563427b03f360b9c3ddaf6f3be8e3679b3495af3ef7ec47b4423d96f601a7dc7c975211e198d5dc7f5bb80cbcee2691f08" } }, { "event_id": "evt-bfac15a0b46592cdb71d5502", "kind": "unclassified_tcp", "frame_number": 58524, "timestamp_epoch": "1634916034.102182000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010061f60a000000" } }, { "event_id": "evt-b453eaf0b25d9b23b0647d4b", "kind": "unclassified_tcp", "frame_number": 58531, "timestamp_epoch": "1634916036.562086000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c88f000000032323020656d64762d6d6573672d66726f6e742d30322e656f6c61732d73657276696365732e636f6d2045534d54502053656e646d61696c20382e31342e332f382e31342e332f44656269616e2d392e343b204672692c203232204f637420323032312031373a32303a3335202b303230303b20284e6f205543452f55424529206c6f6767696e67206163636573732066726f6d3a203131322e7375622d3137332d36362d3134362e6265346d652e6e6574284f4b292d3131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a" } }, { "event_id": "evt-9c11365d0b049c0609718dbe", "kind": "unclassified_tcp", "frame_number": 58538, "timestamp_epoch": "1634916036.750785000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50122, "dst_port": 1187, "tcp_stream": 1094, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-97009f422e7801f4a5e33999", "kind": "unclassified_tcp", "frame_number": 58540, "timestamp_epoch": "1634916036.808738000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c881a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f9b1dcb0e5980e10b55176af", "kind": "unclassified_tcp", "frame_number": 58546, "timestamp_epoch": "1634916036.953580000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-abf43b5bc5e1d4adf598798c", "kind": "unclassified_tcp", "frame_number": 58549, "timestamp_epoch": "1634916037.221777000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c88140000005354415254544c530d0a" } }, { "event_id": "evt-a517ec4a58ccac6173804162", "kind": "unclassified_tcp", "frame_number": 58555, "timestamp_epoch": "1634916037.431057000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c882800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-e2fefe27ff785f5a22098ab7", "kind": "unclassified_tcp", "frame_number": 58560, "timestamp_epoch": "1634916037.694371000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e632a059eeb6f15c7d8918ef", "kind": "unclassified_tcp", "frame_number": 58568, "timestamp_epoch": "1634916037.851115000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-03e090c70d5dad7d65b4a07c", "kind": "unclassified_tcp", "frame_number": 58569, "timestamp_epoch": "1634916037.851136000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d587fdb1cfe561cf4c35612f", "kind": "unclassified_tcp", "frame_number": 58570, "timestamp_epoch": "1634916037.851147000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7b2f9dc622c0936f909e8001", "kind": "unclassified_tcp", "frame_number": 58575, "timestamp_epoch": "1634916038.338940000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8850010000160301010610000102010063f9fab5599d0ec27bf9a9526be1137f08d923c63c0be0f558dff59584934b73ff4f4bc3db84e0abe9d8925627ffd59241309efc262d4bd7eab8fe8a2d6b2b54d7562d716458630dff996ab94f1054cc3cf7acdee88c540a463767810c1fe4478847b0c75b6a7c7aa59b3264a157e23609e9b3c59bd6ddbbfd3b1da86a90ed90cc9962699492631457597fd83a6ffcfa5c6e3f97b81c04b604bac244fc99b5e0e210eb18e05a6848243fcd98132757a772620228c315813a371ec2f4745bca89aad1ceb430a6842c02eb9b584b7d26b2de8d1b69118d743829f7752cec04de6ae5360b3fc741c09b1f0b7805ba32610ed61b91bf926d424806f33a71254436c8140301000101160301003014e6f1086070296bcc32d118751309c1bf69962a6c5f0c40ab96fa904326c3cc4f248aca80f4f47b8b4bf843c5ad3c57" } }, { "event_id": "evt-3741074db9d055ed8b4edb90", "kind": "unclassified_tcp", "frame_number": 58580, "timestamp_epoch": "1634916038.503390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8845000000140301000101160301003084c4867b56bbfcb4aa1c92ade26cb73d89b14cc497be0113bf5ecc14b29a38a58a0e6954867d4ce5ffccb062ff8994fa" } }, { "event_id": "evt-84b815d6ffaa963b478537b0", "kind": "unclassified_tcp", "frame_number": 58583, "timestamp_epoch": "1634916038.762443000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c886400000017030100202d527632a9f6df95234b7c34492a311fb2ce17a11cc156433ca633b6b065ca761703010030546a01f273628b202e4ff1e260bbea82aeaa2708a1a966aad77ac76d3de1ec1b043df057820533f9c030b05715c57fb8" } }, { "event_id": "evt-def1acf257a03f6974ae091b", "kind": "unclassified_tcp", "frame_number": 58588, "timestamp_epoch": "1634916038.920642000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-922eee58439fab6cf60c53a2", "kind": "unclassified_tcp", "frame_number": 58592, "timestamp_epoch": "1634916039.741910000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c88540000001703010020bbe4ac38774a03b40597aa015f7659bf0f97d7233af46c75374a97211ba3518d170301002071d1f027b82b9e114a29864ce4234eb7b813f87dc8346ceb1a69df47a03f1e6a" } }, { "event_id": "evt-f5344655e920b0ce811f9ea6", "kind": "unclassified_tcp", "frame_number": 58597, "timestamp_epoch": "1634916039.888187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c883f00000017030100307daa5090b08545da3a45811700edd00eca11a22516d93d20b7085845f8320b67fc615fc085b2c4ce7eefeeaffcb8bd2f" } }, { "event_id": "evt-854fd75f4974595bc514ef29", "kind": "unclassified_tcp", "frame_number": 58600, "timestamp_epoch": "1634916040.136615000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8864000000170301002000caa4925795c4c358c09c341040e2e8d3f44ffee24b1aa48910cdcdf084cdbe170301003029081171b87e9ed8828a7eef00e8d3929286fabf2d985f945a8b84f41843b75edd5437eda8089301bd5c70e3f6bdb938" } }, { "event_id": "evt-1970f09f1c1001b751dbaf36", "kind": "unclassified_tcp", "frame_number": 58606, "timestamp_epoch": "1634916040.280798000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c883f00000017030100304846446e599af5eba4bce5cc699a57fb209dd67c2cedbd54812af268e1128252524311313acb601b0f40f2049a4859c7" } }, { "event_id": "evt-0ceaf2c388bd50e50e40e8da", "kind": "unclassified_tcp", "frame_number": 58609, "timestamp_epoch": "1634916040.521793000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c8864000000170301002063c756ffb648b1f6b934fd38abc9f395d65fdba75079a793258802005850637d1703010030017b56a9ac18f3cebb75704877fd5b265c55fc332ba5b9a0995fec740f54e8a22024e30e5da2ebb3502984beaf0511f4" } }, { "event_id": "evt-210c0e74c28a231c1edc0c07", "kind": "unclassified_tcp", "frame_number": 58615, "timestamp_epoch": "1634916040.678353000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c884f0000001703010040d4de61db7c5d7ad05e1677caf4f485ccdd32a47f7eb371dec3d17259d3e93568979bc77c7c11d667e2e5527363e6c3d7ba8c0636bbdc01341b45079129a0cd7c" } }, { "event_id": "evt-c269620b21529c2c37abdfb6", "kind": "unclassified_tcp", "frame_number": 58620, "timestamp_epoch": "1634916040.947984000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c885400000017030100206de1f4bab1c81bb4ba431e0bbbe0569d2ab48e318ce04374e62d0c9ac217a1fc17030100209b67496bdffc5299c7258759dc362c9941c7017fe8a7b0f7a7cb602c99138ed8" } }, { "event_id": "evt-84353d219e078d210e8f92c7", "kind": "unclassified_tcp", "frame_number": 58627, "timestamp_epoch": "1634916041.090106000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50123, "dst_port": 1187, "tcp_stream": 1096, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-97acc6a67eada76abdf484f9", "kind": "unclassified_tcp", "frame_number": 58630, "timestamp_epoch": "1634916041.100042000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c884f0000001703010040373cb39933901d8e0e012dbf5c33808ab629e9b07d8ff7157cd39fe3c73f24b58bc492236ee564985d5387b11e1ece0c855ca1a305fdeb4f79da5a99950812a4" } }, { "event_id": "evt-e2d4b3b9077dbe8569eb557f", "kind": "unclassified_tcp", "frame_number": 58635, "timestamp_epoch": "1634916041.359675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c88540000001703010020df3de42037e941b80a5802c11d5113dee3356c5145dfe3d87df670c22fcb85311703010020fdab9e10d877e7da6bc0771b65f77def340690fdc682943f5d4e632f916e0130" } }, { "event_id": "evt-1f3afd67e1e76479ff3e00b2", "kind": "unclassified_tcp", "frame_number": 58641, "timestamp_epoch": "1634916041.500982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c889400000017030100603c10de4ca1012a13ce84a93289fbe41debdc4f9509d5d8fb967c9ad59f477da085482f002da245fea0089f0722a6cbfda347c706eb44e50b2770035b59fde712d6cbe09c1d4275ce5c16238bd4d8a6fc6b9ff1b01c3e25d0f4b165ef1591c6c01503010020d1be4111bd0c8faf4da288f244e66c520cb31675174c7b21a6f39a40f6045e2d" } }, { "event_id": "evt-8b4f7ac33c249c3d3801e5ac", "kind": "unclassified_tcp", "frame_number": 58645, "timestamp_epoch": "1634916041.501472000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702005c880a000000" } }, { "event_id": "evt-074bd79c38b51628197703af", "kind": "unclassified_tcp", "frame_number": 58648, "timestamp_epoch": "1634916041.800479000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005c882f0000001503010020814bbf49008f7c42ebab44a75a6a4b643f29fd0e555f3dea8e7af1d57a26fa44" } }, { "event_id": "evt-878dcfc087a1fa751dd70e37", "kind": "unclassified_tcp", "frame_number": 58651, "timestamp_epoch": "1634916042.506785000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702005c880a000000" } }, { "event_id": "evt-dc574911f905e14bfe59acbf", "kind": "unclassified_tcp", "frame_number": 58662, "timestamp_epoch": "1634916045.398682000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50124, "dst_port": 1187, "tcp_stream": 1097, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ccdbfa826d731d038ab0a0c7", "kind": "unclassified_tcp", "frame_number": 58664, "timestamp_epoch": "1634916045.418222000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50124, "dst_port": 1187, "tcp_stream": 1097, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5e6f36e439ed1d8e43cfb8e5", "kind": "unclassified_tcp", "frame_number": 58677, "timestamp_epoch": "1634916049.718055000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50125, "dst_port": 1187, "tcp_stream": 1098, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-64608aa4a9e4fdf63cf326fd", "kind": "unclassified_tcp", "frame_number": 58692, "timestamp_epoch": "1634916054.179977000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50126, "dst_port": 1187, "tcp_stream": 1099, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-34c1d766442ed0e4af4f13ac", "kind": "unclassified_tcp", "frame_number": 58698, "timestamp_epoch": "1634916055.340742000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-77afba56b70ce5b8bcf320cd", "kind": "unclassified_tcp", "frame_number": 58729, "timestamp_epoch": "1634916058.720521000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50127, "dst_port": 1187, "tcp_stream": 1102, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-682fa59ba1ea2499d73da742", "kind": "unclassified_tcp", "frame_number": 58769, "timestamp_epoch": "1634916063.081248000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50128, "dst_port": 1187, "tcp_stream": 1104, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-cd550ae6f2607c10ea2de298", "kind": "unclassified_tcp", "frame_number": 58786, "timestamp_epoch": "1634916065.444788000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100c8df0c000000197b" } }, { "event_id": "evt-8f1d9d5f3706f8b6bfd1025e", "kind": "unclassified_tcp", "frame_number": 58788, "timestamp_epoch": "1634916065.638956000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df0e00000005020002" } }, { "event_id": "evt-c321cef46d7bef70792b85fc", "kind": "unclassified_tcp", "frame_number": 58789, "timestamp_epoch": "1634916065.639547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100c8df0c0000000502" } }, { "event_id": "evt-a8d61448f46701e61e818669", "kind": "unclassified_tcp", "frame_number": 58791, "timestamp_epoch": "1634916065.966628000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6a9a53aa458e104ccf65203b", "kind": "unclassified_tcp", "frame_number": 58792, "timestamp_epoch": "1634916065.967437000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100c8df0c0000000100" } }, { "event_id": "evt-68dd9775d8066730f1ee6e34", "kind": "unclassified_tcp", "frame_number": 58795, "timestamp_epoch": "1634916066.274485000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df2300000005010003126d61696c2e636f6d652d70617269732e66720019" } }, { "event_id": "evt-567c88928f98360dfa26999e", "kind": "unclassified_tcp", "frame_number": 58800, "timestamp_epoch": "1634916066.427225000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df14000000050000010a0a169cc36d" } }, { "event_id": "evt-49998e8ff5bc8a56109fa62a", "kind": "unclassified_tcp", "frame_number": 58803, "timestamp_epoch": "1634916066.571413000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df34000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-683db16dac63daeb04390ee5", "kind": "unclassified_tcp", "frame_number": 58810, "timestamp_epoch": "1634916067.315500000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-fbe79d2fd28e6936d08f2acc", "kind": "unclassified_tcp", "frame_number": 58816, "timestamp_epoch": "1634916067.444108000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50129, "dst_port": 1187, "tcp_stream": 1106, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4aacd0888ae5daaac1e1adf5", "kind": "unclassified_tcp", "frame_number": 58819, "timestamp_epoch": "1634916067.464083000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-dbfe72d81ae3320722c6625d", "kind": "unclassified_tcp", "frame_number": 58823, "timestamp_epoch": "1634916067.836402000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df140000005354415254544c530d0a" } }, { "event_id": "evt-b2c6c8c718cb600287aeb153", "kind": "unclassified_tcp", "frame_number": 58828, "timestamp_epoch": "1634916067.980606000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-162f0caef7899c5c26393b4c", "kind": "unclassified_tcp", "frame_number": 58832, "timestamp_epoch": "1634916068.322289000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df180100001603010109010001050303953c6557eb6084162390ce857840f8817bb973cbd3f9fed4a350b0f3a121237c203508d616511505af797470c8c7a9b2997dd2617d58e8a4458750d501096298b60026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000960000001700150000126d61696c2e636f6d652d70617269732e6672000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d002002dd58c2073f9e08b0626e8f39719cc4f3c6b3a7f6a243304d5072bf9ab36963" } }, { "event_id": "evt-e4de9e65a1d0b4b3419a6cde", "kind": "unclassified_tcp", "frame_number": 58842, "timestamp_epoch": "1634916068.700587000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f1ad6fc33b028ca2249556f", "kind": "unclassified_tcp", "frame_number": 58843, "timestamp_epoch": "1634916068.700601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e899c6ffa524b2d3ef052889", "kind": "unclassified_tcp", "frame_number": 58844, "timestamp_epoch": "1634916068.700609000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6a3b8794c8feaab55a5e4363", "kind": "unclassified_tcp", "frame_number": 58848, "timestamp_epoch": "1634916068.700958000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5f99b47fe9cbb4c17aa8154b", "kind": "unclassified_tcp", "frame_number": 58851, "timestamp_epoch": "1634916069.335988000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8dfe4000000160303008a1000008685040161e1c6dbd7e87a438d77c58ffb33c58c77d886fac23bd158dba0d8ca37ed0af121fc81e96e40f5adaa74d861b2b4967d5cc7800cd61093f92e870c01bcc3068404002318c9d422ecdb00cc6c8cb8e96e67e523f76278b0d0edb291409b9f26c986c1da439caea72da14a1cbc96068ac1e197a89a26c282bfa8c0519eab18582f187d521403030001011603030040c0f8380b5d383db4f1af03c85e07c59a832db92522e2ccbfc19fbf54a3d321b3221b5ef82db15b19cce075b9b560ea357ff2ea8296faa95150d2d7f355a2d8a5" } }, { "event_id": "evt-5adbae0b78c3bd3efcfcacba", "kind": "unclassified_tcp", "frame_number": 58856, "timestamp_epoch": "1634916069.499294000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df550000001403030001011603030040b934f926826b5ab6a66d95ea988d2528f0cddf4be67177f0c818bf628f86f052ee9d0eb2ea945db331c2635c48c0769aeb81eb55e9d8078ddf12f2ad4d251237" } }, { "event_id": "evt-a26fd5c56be98ad51d9665ae", "kind": "unclassified_tcp", "frame_number": 58859, "timestamp_epoch": "1634916069.753050000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df4f0000001703030040ec8161cedea8655224ac491bcad37ac84dce004a8858491ffd0aeb1b55a9085ba9e35ea92156df2f0facbdfc8aee64ecf31095301866ac5193b66b6f412093a3" } }, { "event_id": "evt-21e847f173fd748935de3923", "kind": "unclassified_tcp", "frame_number": 58866, "timestamp_epoch": "1634916069.909362000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8984d9b1cfc0398c7534254e", "kind": "unclassified_tcp", "frame_number": 58869, "timestamp_epoch": "1634916070.872054000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df4f000000170303004060ca2c8f8f0fd01ff7c924ae754bcbd39459d0f1d748bad0b8ec4483fd925f19e21a6699d073c1d2ad49ea215030a1d74ea04caa78d949a22031c5b4f0e276e6" } }, { "event_id": "evt-d27e0c104d878e875f1c7bc5", "kind": "unclassified_tcp", "frame_number": 58874, "timestamp_epoch": "1634916071.044995000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df4f0000001703030040a042719a5b2f4f132c6e4672e59fa76d90857e5e5c30b85076b7082da25f39d036cc42c1cef39393310f1a45a9a38b1eec29e2fb6c4cfde4fd83621482b1dcb7" } }, { "event_id": "evt-1d05cef19a3ebd153dcef705", "kind": "unclassified_tcp", "frame_number": 58878, "timestamp_epoch": "1634916071.342121000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df5f00000017030300505b15be1f3df5548ce0762cb9968e0728a9a91dd8b05867b13c232825c294de3a6cff0c44e9dd7a10b248e4a8af07e65c75c96bc1dc4242580c1c753f3d1fab674a1ea51b2ad18baddeedbc443a8e17cf" } }, { "event_id": "evt-cc8c6b7f0cf8d058a2a93dd9", "kind": "unclassified_tcp", "frame_number": 58883, "timestamp_epoch": "1634916071.497645000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df4f00000017030300401b9b40463889c6e7cc5135aa400e5a88030109e04b282eff467de5fa33604d466bdb4502cdaefedc9ba7ab33b1ab28ab0b04bbbd68204681f9e15a93ee04ad55" } }, { "event_id": "evt-8ad32ac0c41db7599264e637", "kind": "unclassified_tcp", "frame_number": 58888, "timestamp_epoch": "1634916071.774407000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df4f0000001703030040b945472a22f488d69ffeead0154d4016149855e4bfaf1f5222685676c68b6dff9be0d688aca60b01d31bda37a8bd35771e886f3e1cef4e72affcad29c78776c2" } }, { "event_id": "evt-c195685698372be9bdd68fdb", "kind": "unclassified_tcp", "frame_number": 58894, "timestamp_epoch": "1634916071.810432000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50130, "dst_port": 1187, "tcp_stream": 1107, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-90adf0d50d3f363455ea77ca", "kind": "unclassified_tcp", "frame_number": 58901, "timestamp_epoch": "1634916073.330380000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df5f000000170303005079edf805a3a432d32ac8b12e54dece95c9a01f33831c8c24afb54f4a63ff3bfcc6ea65ef2e6f4ededa9c5852cc3dbd650420b73e7d2c10a218200b389fa79d3f7581b1619e12c3881b280c9350d1fede" } }, { "event_id": "evt-f382c7ecd835e07dc7baefbd", "kind": "unclassified_tcp", "frame_number": 58904, "timestamp_epoch": "1634916073.636944000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df3f00000017030300301495ef44b50097290c48a9033089026cd657a2c2ac9d87f5ec86d8eb188658c2893b39bd39ba541bec3deaf5f6d49a3c" } }, { "event_id": "evt-acab71af4470ea1557b05e2a", "kind": "unclassified_tcp", "frame_number": 58916, "timestamp_epoch": "1634916076.127570000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50131, "dst_port": 1187, "tcp_stream": 1108, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fa918233054d49f8c778e8fb", "kind": "unclassified_tcp", "frame_number": 58925, "timestamp_epoch": "1634916079.680033000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020081320c000000197b" } }, { "event_id": "evt-3724b15d362daf4fb20dd5f1", "kind": "unclassified_tcp", "frame_number": 58929, "timestamp_epoch": "1634916079.868190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081320e00000005020002" } }, { "event_id": "evt-f742c798d7c41df7b40f9c2e", "kind": "unclassified_tcp", "frame_number": 58930, "timestamp_epoch": "1634916079.868743000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020081320c0000000502" } }, { "event_id": "evt-22bff32260a91c5e317acb1c", "kind": "unclassified_tcp", "frame_number": 58932, "timestamp_epoch": "1634916080.109682000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200813220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f33436cead112a02d681750c", "kind": "unclassified_tcp", "frame_number": 58933, "timestamp_epoch": "1634916080.110279000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020081320c0000000100" } }, { "event_id": "evt-f9825862f990b06fcafae312", "kind": "unclassified_tcp", "frame_number": 58937, "timestamp_epoch": "1634916080.399172000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081322200000005010003116d61696c2e70746f6c656d65652e636f6d0019" } }, { "event_id": "evt-943bb88b6649110d09f1e5a2", "kind": "unclassified_tcp", "frame_number": 58941, "timestamp_epoch": "1634916080.429818000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50132, "dst_port": 1187, "tcp_stream": 1110, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-19e1505e0a20a24e44f7442a", "kind": "unclassified_tcp", "frame_number": 58951, "timestamp_epoch": "1634916080.776376000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200813214000000050000010a0a169cc36f" } }, { "event_id": "evt-8573c88f10a73dc66dba2a66", "kind": "unclassified_tcp", "frame_number": 58968, "timestamp_epoch": "1634916080.926013000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200813234000000323230204741524d2d393747303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-5ca2323c5d01a54af229c8b0", "kind": "unclassified_tcp", "frame_number": 59141, "timestamp_epoch": "1634916081.264707000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081321a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-513fb97ed80ccac6e8947e94", "kind": "unclassified_tcp", "frame_number": 59223, "timestamp_epoch": "1634916081.412225000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008132240000003235302d4f564820534d54502050524f58592048656c6c6f0d0a" } }, { "event_id": "evt-08ee7418c6c75420c58e402f", "kind": "unclassified_tcp", "frame_number": 59227, "timestamp_epoch": "1634916081.412491000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081327f0000003235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-b94892bec90035abbd5fb94b", "kind": "unclassified_tcp", "frame_number": 59231, "timestamp_epoch": "1634916081.993270000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008132140000005354415254544c530d0a" } }, { "event_id": "evt-f887b33a979b06def4a06730", "kind": "unclassified_tcp", "frame_number": 59236, "timestamp_epoch": "1634916082.144638000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081322800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-982db86cd5e03997fa686f8f", "kind": "unclassified_tcp", "frame_number": 59240, "timestamp_epoch": "1634916082.508687000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-202222cd33fa732f70179c6d", "kind": "unclassified_tcp", "frame_number": 59250, "timestamp_epoch": "1634916082.672286000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d6ff5792c872b2c5245188a3", "kind": "unclassified_tcp", "frame_number": 59251, "timestamp_epoch": "1634916082.672299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372" } }, { "event_id": "evt-ab250343d306ae10a45befd3", "kind": "unclassified_tcp", "frame_number": 59252, "timestamp_epoch": "1634916082.672307000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d030019850400bbaf4b6c8f90bc3471a67fc3998d1b44de36d5f6c84c772b99b89568999c7b6c3f841c85a725f1a1294a656e6d9057752e2dc1d854ffee09cbc381406d20ef58e700da835ccb3a48965cd36a5945ea072e4a9e" } }, { "event_id": "evt-2c1accf7072ed5bc5de51ce3", "kind": "unclassified_tcp", "frame_number": 59256, "timestamp_epoch": "1634916082.672661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8e25e2da48659dea80362c29", "kind": "unclassified_tcp", "frame_number": 59259, "timestamp_epoch": "1634916083.364970000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008132e4000000160303008a10000086850400fe2124e667301322a44835c1c6c5f9c018a6b8aa75eb7a5d9f133da54454be1da71a3c3540b321b46b4d48bddfb9a5b528927df342925f89808beed8d06526cdfe0041529de4d2510a94aed073a0a8e87b4f2664599c7489ec7b41e87bc057bb4de99cdfc18a1c866234ed91e326ff4663ac9fc4f4c7fb6c704ce2094c6dad97fca41614030300010116030300405c972ed75b35227e2e5a9218c818b483d382e914593a2533294faa6aa38fd0dd825d72fb6076e8d2d855115d94a03f4db71b609f79cb21353e3606340dc436b7" } }, { "event_id": "evt-4301572bd19bddaaf62a267d", "kind": "unclassified_tcp", "frame_number": 59264, "timestamp_epoch": "1634916083.522101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008132550000001403030001011603030040c95f139323f191e4b03db4e1e32b47329760bc51fcedd0d6e2f4cd5c9d306486b861e01a53b6db9a2b77236b12ac45f9b77c7bb609c0dfb4f4c7ef34433891ec" } }, { "event_id": "evt-0174508e2ccfd790e4d6c4f8", "kind": "unclassified_tcp", "frame_number": 59268, "timestamp_epoch": "1634916083.907713000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081324f00000017030300402250ed64ebf19f32b0e4ef3554aa56156908b1210a80428017c1c576b65acf60f96e0181b3d1858a5184bde86640de4a51c642c9ba06ed8482b77ed8e50d946f" } }, { "event_id": "evt-efa4e927ddeec1baa425dc58", "kind": "unclassified_tcp", "frame_number": 59274, "timestamp_epoch": "1634916084.061812000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e8006c1c90eeeb4c0177cbd7", "kind": "unclassified_tcp", "frame_number": 59278, "timestamp_epoch": "1634916084.370447000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300e7ec0c000000197b" } }, { "event_id": "evt-6ca71d94cfa9327b58824e0b", "kind": "unclassified_tcp", "frame_number": 59280, "timestamp_epoch": "1634916084.551788000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e7ec0e00000005020002" } }, { "event_id": "evt-6685ad191d8eda3cc5b2ba0b", "kind": "unclassified_tcp", "frame_number": 59281, "timestamp_epoch": "1634916084.552272000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300e7ec0c0000000502" } }, { "event_id": "evt-4011c03489df710e91c4909f", "kind": "unclassified_tcp", "frame_number": 59289, "timestamp_epoch": "1634916084.818785000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50133, "dst_port": 1187, "tcp_stream": 1115, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d1eed67fc60ffec41a5e12d0", "kind": "unclassified_tcp", "frame_number": 59291, "timestamp_epoch": "1634916084.824022000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e7ec20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5512d222e6a5130caec765f1", "kind": "unclassified_tcp", "frame_number": 59292, "timestamp_epoch": "1634916084.824583000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300e7ec0c0000000100" } }, { "event_id": "evt-dfb05168cc23f3d942621a03", "kind": "unclassified_tcp", "frame_number": 59297, "timestamp_epoch": "1634916085.310787000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081324f0000001703030040220e8011b8906a34858c4740a98ffd178439524dd46468e223e9c9fb9cfd167917728f31602e5baee204845b4853069c82d4a747b6bf4ad18da6d301d877750104070300e7ec2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-5b23a7b7d629152ee3a0bb82", "kind": "unclassified_tcp", "frame_number": 59303, "timestamp_epoch": "1634916085.573607000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2c4ceb13235a10c345b73b37", "kind": "unclassified_tcp", "frame_number": 59322, "timestamp_epoch": "1634916089.177534000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50134, "dst_port": 1187, "tcp_stream": 1117, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a26e9844dd7a68d793b12f88", "kind": "unclassified_tcp", "frame_number": 59336, "timestamp_epoch": "1634916092.654530000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300e7ec1400000005040001000000000000" } }, { "event_id": "evt-de1be3c882dfc8be088b0e25", "kind": "unclassified_tcp", "frame_number": 59341, "timestamp_epoch": "1634916092.817392000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081324f0000001703030040d0d2e936aa82bf09ab63b26b0ea5ab9901fe2b52ca97b009c4d7345a61fc645fbffef737edb0783393867d2ca9c563eccbc5b330b75167c30393577587e96ed2" } }, { "event_id": "evt-06487643fbff57181078ab4e", "kind": "unclassified_tcp", "frame_number": 59344, "timestamp_epoch": "1634916092.987118000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300e7ec0a000000" } }, { "event_id": "evt-bc503de06071d7648d9c76e3", "kind": "unclassified_tcp", "frame_number": 59346, "timestamp_epoch": "1634916093.170165000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081326f000000170303006076e68ff8880477423ae63cf99ff6ed3ee415efd6bc9f4fb4082a96190bced58dbbc51fbefbfa05379133ce33331c409218ed928b6b462560cf2f52360db9711f37ba72f2dafda8323ac30f63007bac2e36e50a5d3dce0359153e528f1d651dbb" } }, { "event_id": "evt-a94940239f84fae4012ae7a3", "kind": "unclassified_tcp", "frame_number": 59353, "timestamp_epoch": "1634916093.331122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081324f00000017030300403add56df80d80c2ed8befd6b92100a51040223cb3b1d7e9cde1dc5113b9fc616b6fcda2fdc005f1d9075e1d62666153288240ea801272bb4856b6421881ef044" } }, { "event_id": "evt-1b59dd87518de71b59cf133a", "kind": "unclassified_tcp", "frame_number": 59361, "timestamp_epoch": "1634916093.514205000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50135, "dst_port": 1187, "tcp_stream": 1119, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d3c585477e7992d80e714506", "kind": "unclassified_tcp", "frame_number": 59363, "timestamp_epoch": "1634916093.579672000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081324f0000001703030040e515165de4864762627643898058b8912bf8b11356bd10ec2d54dc75dfc9fc7857f87ec551aa90e4660cab840e59cc990065f35614038759df4e1027d091f93b" } }, { "event_id": "evt-85ea672d5af2d55181da528b", "kind": "unclassified_tcp", "frame_number": 59374, "timestamp_epoch": "1634916095.346867000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081325f00000017030300504c4e2adac49c1b6e700f19d9776a4d16df314c6a17747497d1852f44035f510c3915d613cd145b88edb004720bb0dec53ba2cf020c3beb5b8df04e774e4a656e1fc362fbf14867e73dfde7525e40cb24" } }, { "event_id": "evt-1e61b8187333807de8cea114", "kind": "unclassified_tcp", "frame_number": 59377, "timestamp_epoch": "1634916095.858075000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081323f0000001703030030dd75cd9ead9dd8952df7874032461363cb8fbe4d8ed7c588fa60761069fd5a0228c2dffb9b21f1d2709c9797a94ac367" } }, { "event_id": "evt-73e8288b1fa5f980d7b44bd1", "kind": "unclassified_tcp", "frame_number": 59389, "timestamp_epoch": "1634916097.815020000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50136, "dst_port": 1187, "tcp_stream": 1121, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b9e4b5e5a084d39c04f5a6eb", "kind": "unclassified_tcp", "frame_number": 59391, "timestamp_epoch": "1634916097.856528000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50136, "dst_port": 1187, "tcp_stream": 1121, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b20b45316055c33fec3d211a", "kind": "unclassified_tcp", "frame_number": 59405, "timestamp_epoch": "1634916102.142582000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50137, "dst_port": 1187, "tcp_stream": 1124, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-aa80255e5d598bb9565fa0c0", "kind": "unclassified_tcp", "frame_number": 59428, "timestamp_epoch": "1634916106.509746000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50138, "dst_port": 1187, "tcp_stream": 1126, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6d5f5f663bcaf6096e78fc86", "kind": "unclassified_tcp", "frame_number": 59433, "timestamp_epoch": "1634916106.798699000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df5f00000017030300500e80f117e6840d3461ff6a1eeb2422c35941dbd67fb6d223c617b85fbfb6ab7c9f235cdc71f615e5d64846d30f561878983fe15d4d7358ab4e36c97d2d643b31bc119fa57da6e0ad16250dff261b506e" } }, { "event_id": "evt-977672536a158adc9ea40108", "kind": "unclassified_tcp", "frame_number": 59436, "timestamp_epoch": "1634916107.118566000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df3f000000170303003086ed8415196385e230cf2724a2d8b4af0e46da3fb40f7fd777f63f17c01f16e11bf2cc2429dfd4a0c58c2a629623efc7" } }, { "event_id": "evt-182863ef98aeacef9ddb865a", "kind": "unclassified_tcp", "frame_number": 59443, "timestamp_epoch": "1634916107.264073000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df6f000000170303006049d83473c7fd2d75a7f0719b67553f878d00cde82511ddeb08334b2ee6a0894f9ed44e2b06f77ea253bccc89c1eeaa9da42a60e5f0f97d8f51fed7e850c34858c0e5da775ea98ad90e84f840fd0d1ff41812f4de62f131138767dedc70600a16" } }, { "event_id": "evt-04949cbab559b8ad2ad9e14c", "kind": "unclassified_tcp", "frame_number": 59447, "timestamp_epoch": "1634916107.264474000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100c8df0a000000" } }, { "event_id": "evt-d732848ec7df4460953acacf", "kind": "unclassified_tcp", "frame_number": 59449, "timestamp_epoch": "1634916107.595912000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100c8df3f0000001503030030da2d6a8399eb740367f9a9bde45291d03abadcaa550459adfad6084f7d6fd5c36b3802ef88d20ab3b2e0fe5906990d07" } }, { "event_id": "evt-6353253192fe440807e56e78", "kind": "unclassified_tcp", "frame_number": 59451, "timestamp_epoch": "1634916107.778137000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100c8df0a000000" } }, { "event_id": "evt-4f8044fceaf0d4040363b8fb", "kind": "unclassified_tcp", "frame_number": 59464, "timestamp_epoch": "1634916110.882267000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50139, "dst_port": 1187, "tcp_stream": 1129, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-30f643c92376193912d78031", "kind": "unclassified_tcp", "frame_number": 59466, "timestamp_epoch": "1634916110.965570000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50139, "dst_port": 1187, "tcp_stream": 1129, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7930ec61896ba39b1cfb022d", "kind": "unclassified_tcp", "frame_number": 59478, "timestamp_epoch": "1634916114.998076000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3e3b535ca5bb1e31d880c9bc", "kind": "unclassified_tcp", "frame_number": 59485, "timestamp_epoch": "1634916115.229043000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50140, "dst_port": 1187, "tcp_stream": 1131, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-12b059a9273d479384f87220", "kind": "unclassified_tcp", "frame_number": 59493, "timestamp_epoch": "1634916115.591002000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2384a326afd5f216e98bf07e", "kind": "unclassified_tcp", "frame_number": 59498, "timestamp_epoch": "1634916116.645687000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010074a50c000000197b" } }, { "event_id": "evt-7eadefbbc22808fd3cc6ad66", "kind": "unclassified_tcp", "frame_number": 59500, "timestamp_epoch": "1634916116.944762000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a50e00000005020002" } }, { "event_id": "evt-339a5df1443ebec951fa32a2", "kind": "unclassified_tcp", "frame_number": 59501, "timestamp_epoch": "1634916116.945293000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010074a50c0000000502" } }, { "event_id": "evt-184aae810be7648abb18b4fd", "kind": "unclassified_tcp", "frame_number": 59503, "timestamp_epoch": "1634916117.238107000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8b8ce12a02babd5c69d04984", "kind": "unclassified_tcp", "frame_number": 59504, "timestamp_epoch": "1634916117.238514000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010074a50c0000000100" } }, { "event_id": "evt-6f27654254cba596296a07fe", "kind": "unclassified_tcp", "frame_number": 59507, "timestamp_epoch": "1634916117.525367000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a51f000000050100030e6d61696c2e636f7274656f2e66720019" } }, { "event_id": "evt-f40c678f5a42d4a86f35231e", "kind": "unclassified_tcp", "frame_number": 59517, "timestamp_epoch": "1634916118.122027000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a514000000050000010a0a169cc373" } }, { "event_id": "evt-d5b08c8d2960f54473e3d682", "kind": "unclassified_tcp", "frame_number": 59522, "timestamp_epoch": "1634916118.710807000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a535000000323230204741524d2d31303547303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-9b4a864357d5e34f2e3fef4c", "kind": "unclassified_tcp", "frame_number": 59526, "timestamp_epoch": "1634916119.206203000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a51a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e927ead8d4deb50bca4a3189", "kind": "unclassified_tcp", "frame_number": 59534, "timestamp_epoch": "1634916119.350181000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a5990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-117b51f42bb2bd6a7e65eaed", "kind": "unclassified_tcp", "frame_number": 59541, "timestamp_epoch": "1634916119.591618000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50141, "dst_port": 1187, "tcp_stream": 1135, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b000838c8c8e5e5544a8a33e", "kind": "unclassified_tcp", "frame_number": 59543, "timestamp_epoch": "1634916119.667121000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a5140000005354415254544c530d0a" } }, { "event_id": "evt-a56141eb3a3eda884ab1fe20", "kind": "unclassified_tcp", "frame_number": 59549, "timestamp_epoch": "1634916119.813068000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a52800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-dd417d4d3a0de8712dd5ceb0", "kind": "unclassified_tcp", "frame_number": 59552, "timestamp_epoch": "1634916120.116103000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4ba3959800869606e8cde3f1", "kind": "unclassified_tcp", "frame_number": 59563, "timestamp_epoch": "1634916120.287547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-461b587892a261f4daa342e4", "kind": "unclassified_tcp", "frame_number": 59564, "timestamp_epoch": "1634916120.287566000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5c11ff9770470694d8783c50", "kind": "unclassified_tcp", "frame_number": 59565, "timestamp_epoch": "1634916120.287574000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4a1ecdd5bfdea2fd9dea5a67", "kind": "unclassified_tcp", "frame_number": 59569, "timestamp_epoch": "1634916120.287889000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f24661ecbc9d5dd629e86a4c", "kind": "unclassified_tcp", "frame_number": 59572, "timestamp_epoch": "1634916120.639470000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a5e4000000160303008a10000086850400461ccd80c179fdddd531bfd94392f97fbed767af924242c0001972f818434544978a1b465098800eba6ab78835b30e2691f9596aea6741d2946a894c2f4838f01500e5de2042c6654e1f081d0d7a64ea1883a497acb6ebc75ee4460e475fd6b6543e6c408f096725973339b286edb96b25a6727b4b9c4252a388b9d5e32840ef145ca31403030001011603030040c365d0a386c5f3f1daf90a188ec0e93a521a176b218282072a4de7479f40b684b2220472cad322107770b78c557dd7a646740464ad3266023f178856792bb570" } }, { "event_id": "evt-a6599ed4d1b92e6c8311d37c", "kind": "unclassified_tcp", "frame_number": 59577, "timestamp_epoch": "1634916120.898627000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a55500000014030300010116030300409dbcc8ec58c5048beb802e27a5df965d7e3e0d425ddfb2f53154badabf02b03c5ddc59e9b59fba4669a3000f1b7b7b642d1a950e6ec803087f5f5827a3217f32" } }, { "event_id": "evt-49e127aa9ad547c978bca460", "kind": "unclassified_tcp", "frame_number": 59580, "timestamp_epoch": "1634916121.135507000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f00000017030300409722450e9cd3efbe68b4dab577d1a3b5fda496caae9544d0104ce27aec9414dce722c32c10ec482c54652eca202ba2686f6f8b8333691c6fc76ae9fc1caa0c50" } }, { "event_id": "evt-00facb41eadf49896a70e469", "kind": "unclassified_tcp", "frame_number": 59587, "timestamp_epoch": "1634916121.282970000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f0000001703030040cfa1d8e7569698f0d52211af54a97e9f68f66ffb38251517ed7e121a2269c561192052aa9559764945e12661dc125a348088cfbc9aec67d07b5289d0a3a98d86" } }, { "event_id": "evt-2b78ac8eea40828cb5422666", "kind": "unclassified_tcp", "frame_number": 59590, "timestamp_epoch": "1634916121.283206000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b998076e3b36a37a5cf9e3c7", "kind": "unclassified_tcp", "frame_number": 59594, "timestamp_epoch": "1634916122.380911000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f000000170303004047be80c14e9ccc56b699eacb514962a88840a2d247109efdfd2411fd5230011f686c6763d65ffbc842092e688435bf2d9b94fc9ac96722b626db4c0260b4f1e4" } }, { "event_id": "evt-eb31af7bc34ed7fdd3362907", "kind": "unclassified_tcp", "frame_number": 59599, "timestamp_epoch": "1634916122.530525000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f00000017030300402ea899cce3e7cbccf9aa451a1d80cbb8bed8daf8681857b098240e71d38933adf356b70a16798041beb34a172e1219e21cd49ad2dcbb06aa74d91ab3f296c8d5" } }, { "event_id": "evt-35d64c57ad69713d1ec0e49f", "kind": "unclassified_tcp", "frame_number": 59602, "timestamp_epoch": "1634916122.831391000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a55f000000170303005089b072d8b55c6a0ac869749afe812328c2119d151fc1fedb1654aa523ae5f87a03f4882ed29575e5703dfdc023f2bead5b94f181b0cb1333f73ce97ce7d05d3ea1242e777fc5a41c037855dd69825661" } }, { "event_id": "evt-775ffe9452bd11a9283663df", "kind": "unclassified_tcp", "frame_number": 59607, "timestamp_epoch": "1634916122.969845000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f0000001703030040ddb406012754340216ea3b4f1719ed9c9ef1312cf68fc1881f05a0b23ef751f5b1ff2eceb6f66dbc424a3062d8a4623dedd9056da03d69c9be6efac8160066b3" } }, { "event_id": "evt-053f08c9bf787c464c3357d9", "kind": "unclassified_tcp", "frame_number": 59611, "timestamp_epoch": "1634916123.344014000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a54f0000001703030040846f6ad744140c9aa6845c489235666b715e164073fbc6ed430e0114e5ce0ed48f7fb1c954b166176eaf885f490e289a9979a85eccd708e27f19c79a0ad2c65b" } }, { "event_id": "evt-4b62331e96cbaa900055c5a3", "kind": "unclassified_tcp", "frame_number": 59618, "timestamp_epoch": "1634916123.924166000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50142, "dst_port": 1187, "tcp_stream": 1136, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c5bc69c2de82e1c9327a1664", "kind": "unclassified_tcp", "frame_number": 59620, "timestamp_epoch": "1634916124.029697000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50142, "dst_port": 1187, "tcp_stream": 1136, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-df55d6e1338ab2c349d09b49", "kind": "unclassified_tcp", "frame_number": 59626, "timestamp_epoch": "1634916125.555276000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a55f0000001703030050f3b417cec1d5b5220cd44038a0cc42c0c908c5125f1a7eae5b9eaa0df6f0c9bc0fe7c80df07bb5cbefebf0fc30c6188504f7d12bd3f0d8dc00953f58453622330072adaed0987189a4b6ca3017e0feb4" } }, { "event_id": "evt-1d5a7ff68a89ca5df1b3331c", "kind": "unclassified_tcp", "frame_number": 59629, "timestamp_epoch": "1634916125.890367000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a53f0000001703030030cb06d0f7a6551bb87160e62c359d6c4b15ea3971e3b638181f92a4896b08ed568e3a65062519f85271f4ca84088f386f" } }, { "event_id": "evt-f1286cb9d77f9384aea394fe", "kind": "unclassified_tcp", "frame_number": 59640, "timestamp_epoch": "1634916128.228724000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50143, "dst_port": 1187, "tcp_stream": 1138, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4a3cf20550c5a6e2a1383b71", "kind": "unclassified_tcp", "frame_number": 59646, "timestamp_epoch": "1634916128.832125000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081325f0000001703030050669717218e73678dfd6e8def83c2f6b7d9ab656ad82d4cf7d2cb5c825bb5d1d001317c424a79334e8c624fe65ee5de8fd251e0bff3517b4d008dbb708d4c3fa42303d74fcf6c7ec87356dae44c3f21c6" } }, { "event_id": "evt-8dca374d2989a111a68912cb", "kind": "unclassified_tcp", "frame_number": 59649, "timestamp_epoch": "1634916129.193789000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081323f00000017030300300946cd070e830d4d02bcc257761d5969c10da4f40d57b6de28daa0868b25a933f5366ee77a0ed9c06026c8d5edd0adac" } }, { "event_id": "evt-cfa0f04b27173b2f9c10a084", "kind": "unclassified_tcp", "frame_number": 59656, "timestamp_epoch": "1634916129.342553000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081326f0000001703030060280c1d08232bc4c1b2e97329483c46584fbb76f8fa59dcf3350a03c1588e9546f1e684069d505c3bc72ad1c5a0b7db193d021507313e822b267a42d164513c1841ed7f6ca3b7ebd0adc50f17c88f1cf4e6b6fa530d53a6e957c8172ac204993d" } }, { "event_id": "evt-f86aec5cdc6e6fa1ace6cde7", "kind": "unclassified_tcp", "frame_number": 59660, "timestamp_epoch": "1634916129.343004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020081320a000000" } }, { "event_id": "evt-145818c6ee39870c31d1826f", "kind": "unclassified_tcp", "frame_number": 59664, "timestamp_epoch": "1634916129.749266000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020081323f0000001503030030da26c735782f57114d611165472db97e31e4983c18b7709c30decddb0cc67af35b577abe94b3c4e535a14a9d89dd0d7b" } }, { "event_id": "evt-bdf59285636edbc192d8f6cc", "kind": "unclassified_tcp", "frame_number": 59666, "timestamp_epoch": "1634916129.930381000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020081320a000000" } }, { "event_id": "evt-409311068ffcdadc4ca5eff6", "kind": "unclassified_tcp", "frame_number": 59686, "timestamp_epoch": "1634916132.550471000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50144, "dst_port": 1187, "tcp_stream": 1141, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00eb7a065af1349674d48bd0", "kind": "unclassified_tcp", "frame_number": 59708, "timestamp_epoch": "1634916136.922358000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50145, "dst_port": 1187, "tcp_stream": 1143, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3e9294343af06edb9aca043d", "kind": "unclassified_tcp", "frame_number": 59727, "timestamp_epoch": "1634916141.284422000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50146, "dst_port": 1187, "tcp_stream": 1146, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b9f1fee5a7c97edf4b1df04c", "kind": "unclassified_tcp", "frame_number": 59737, "timestamp_epoch": "1634916145.248089000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e304ff902261d321a0a75210", "kind": "unclassified_tcp", "frame_number": 59740, "timestamp_epoch": "1634916145.358247000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-77fa593ca09e60d4e2e0e07b", "kind": "unclassified_tcp", "frame_number": 59754, "timestamp_epoch": "1634916146.646726000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200c8390c000000197b" } }, { "event_id": "evt-5aaf8cf6ec53238d17debce0", "kind": "unclassified_tcp", "frame_number": 59756, "timestamp_epoch": "1634916146.850343000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8390e00000005020002" } }, { "event_id": "evt-3bb5aae5f8f940c6369bf1f7", "kind": "unclassified_tcp", "frame_number": 59757, "timestamp_epoch": "1634916146.850850000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200c8390c0000000502" } }, { "event_id": "evt-5c741fc51085842c3213ad8a", "kind": "unclassified_tcp", "frame_number": 59759, "timestamp_epoch": "1634916147.161527000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8dbd82ac2413cecc25dfcfbd", "kind": "unclassified_tcp", "frame_number": 59760, "timestamp_epoch": "1634916147.162168000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200c8390c0000000100" } }, { "event_id": "evt-4107e0ee042b6e8774d7b8b6", "kind": "unclassified_tcp", "frame_number": 59767, "timestamp_epoch": "1634916147.491767000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c839210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-915663a920a5025ee929ee08", "kind": "unclassified_tcp", "frame_number": 59774, "timestamp_epoch": "1634916147.576242000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83914000000050000010a0a169cc376" } }, { "event_id": "evt-4b38a058eb278629d2830ceb", "kind": "unclassified_tcp", "frame_number": 59777, "timestamp_epoch": "1634916147.625557000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8397b00000032323020534e345052303230314341303033372e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a32323a3237202b303030300d0a" } }, { "event_id": "evt-0253f76f3a838d3a1b84974a", "kind": "unclassified_tcp", "frame_number": 59780, "timestamp_epoch": "1634916147.991529000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8391a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c09175a22c9e4cb27c51066e", "kind": "unclassified_tcp", "frame_number": 59784, "timestamp_epoch": "1634916148.033117000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c839da0000003235302d534e345052303230314341303033372e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-423d2c4e6ae9eeee9badc433", "kind": "unclassified_tcp", "frame_number": 59789, "timestamp_epoch": "1634916148.354945000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c839140000005354415254544c530d0a" } }, { "event_id": "evt-433b149aae3e7e299078ca0c", "kind": "unclassified_tcp", "frame_number": 59794, "timestamp_epoch": "1634916148.405047000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8392700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-1e3c383087c80ea090b8a6e5", "kind": "unclassified_tcp", "frame_number": 59800, "timestamp_epoch": "1634916148.654455000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50147, "dst_port": 1187, "tcp_stream": 1148, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bcc4f05a08229e0ff6b211fa", "kind": "unclassified_tcp", "frame_number": 59802, "timestamp_epoch": "1634916148.754930000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c9c100238297766266d3de5e", "kind": "unclassified_tcp", "frame_number": 59808, "timestamp_epoch": "1634916148.815386000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b56a1f40824fdd601a767ec6", "kind": "unclassified_tcp", "frame_number": 59814, "timestamp_epoch": "1634916148.894064000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83952060000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d" } }, { "event_id": "evt-aa335a446df4c2a47c82e4d6", "kind": "unclassified_tcp", "frame_number": 59815, "timestamp_epoch": "1634916148.894085000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e63" } }, { "event_id": "evt-35f8e2fd81c3314297abef95", "kind": "unclassified_tcp", "frame_number": 59819, "timestamp_epoch": "1634916148.898948000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2b2030242481524f4ffbb227", "kind": "unclassified_tcp", "frame_number": 59823, "timestamp_epoch": "1634916148.933911000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7d00c368cbed9f0707c93dac", "kind": "unclassified_tcp", "frame_number": 59830, "timestamp_epoch": "1634916149.205716000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c839b400000016030300070b00000300000016030300661000006261044b82fb80136d1d2fbf7704b985108b879f7e966993ac9d917d327f6f99737870ed089067e6492e746eedb3cb27c0627b6b958f529bc2cd1422dbf076c2550c96e2e529972c1a015922f537056845b250042e5e2ef4399a21cd2aad9f2847c4c214030300010116030300280000000000000000e340a35b7081662e28e07ec29bc9238cc1cad8f20091384c0f3ad6bcf2f9b75a" } }, { "event_id": "evt-ce54d8947502887a239d2a10", "kind": "unclassified_tcp", "frame_number": 59836, "timestamp_epoch": "1634916149.271250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8393d00000014030300010116030300280000000000000000efc5a120ba6581b023ef241f0c3d3ff12e4c42878e857abd47689b093157eeb4" } }, { "event_id": "evt-e782f5770952bb99792b5877", "kind": "unclassified_tcp", "frame_number": 59840, "timestamp_epoch": "1634916149.575913000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8393700000017030300280000000000000001da0b519faa6936aa797f2fbe05e6556128ca24702c29ac3f8f0ef37edd062f8a" } }, { "event_id": "evt-99b575fab72aba956244489b", "kind": "unclassified_tcp", "frame_number": 59845, "timestamp_epoch": "1634916149.639303000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-27bda0c59f3e5a75cbcc253f", "kind": "unclassified_tcp", "frame_number": 59848, "timestamp_epoch": "1634916149.822839000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030006e10c000000197b" } }, { "event_id": "evt-f0ce8813fb4e99e86f270876", "kind": "unclassified_tcp", "frame_number": 59850, "timestamp_epoch": "1634916150.012990000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e10e0000000502000204070200c8393300000017030300240000000000000002291e07f3b0320df360f6c1896264b8812447064f59d05d99eb6293f9" } }, { "event_id": "evt-3199c952ce8dcb3a4c511845", "kind": "unclassified_tcp", "frame_number": 59851, "timestamp_epoch": "1634916150.013479000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030006e10c0000000502" } }, { "event_id": "evt-157327e95136a150ca2097ed", "kind": "unclassified_tcp", "frame_number": 59856, "timestamp_epoch": "1634916150.057093000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83939000000170303002a00000000000000028a0a006cf72eb72af22bbae88f25808106321b4cb9e05042eafbed6e5e0d992845aa" } }, { "event_id": "evt-85581ba22d97fb340488104c", "kind": "unclassified_tcp", "frame_number": 59862, "timestamp_epoch": "1634916150.325225000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e96d94ca81e0aa1f3c08428e", "kind": "unclassified_tcp", "frame_number": 59863, "timestamp_epoch": "1634916150.325735000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030006e10c0000000100" } }, { "event_id": "evt-8e68f7c423cf78897ba2eba4", "kind": "unclassified_tcp", "frame_number": 59865, "timestamp_epoch": "1634916150.523951000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83951000000170303004200000000000000038c452bd16ecb9ff3763b98d65fbdf2e09bbe95e35d64cb8200e4fa262f41c5214652a3fa9409c02a29ef7fc9e9d97b91a3cce58335bfad8ff245" } }, { "event_id": "evt-fccdcb6479a76fe9fff58af1", "kind": "unclassified_tcp", "frame_number": 59869, "timestamp_epoch": "1634916150.578126000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83939000000170303002a000000000000000340201949e7198f8c75993204ae20782bdcc5e4284c8ae3f2a33ef367ff9bf8019656" } }, { "event_id": "evt-0edbe460f5a9b1a1aa60abe7", "kind": "unclassified_tcp", "frame_number": 59872, "timestamp_epoch": "1634916150.713040000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e11b000000050100030a7663686262712e636f6d0019" } }, { "event_id": "evt-47e596876d9bed7aab8d3f11", "kind": "unclassified_tcp", "frame_number": 59880, "timestamp_epoch": "1634916150.827467000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e114000000050000010a0a169cc378" } }, { "event_id": "evt-04e5fe16bab5921f9ba8523e", "kind": "unclassified_tcp", "frame_number": 59882, "timestamp_epoch": "1634916150.900740000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c83939000000170303002a00000000000000040d0858078128bbbe4cd45ce465f4ae0df9d6b8986d86673f22d3b540ab9c2a9c1feb" } }, { "event_id": "evt-520dc4ab4e4408f6b681393f", "kind": "unclassified_tcp", "frame_number": 59894, "timestamp_epoch": "1634916152.959601000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50148, "dst_port": 1187, "tcp_stream": 1154, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-beb88eaa89784ecb954eb346", "kind": "unclassified_tcp", "frame_number": 59978, "timestamp_epoch": "1634916155.987125000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1c40000003232302d72656c69616e742e7765627369746577656c636f6d652e636f6d2045534d5450204578696d20342e39342e32202332204672692c203232204f637420323032312031303a32323a3335202d30353030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a" } }, { "event_id": "evt-72c1ac11c2c7ae0730a9f696", "kind": "unclassified_tcp", "frame_number": 59982, "timestamp_epoch": "1634916156.302167000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e11a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-928a35810bf6dbbcbd5be29e", "kind": "unclassified_tcp", "frame_number": 59987, "timestamp_epoch": "1634916156.373854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1cf0000003235302d72656c69616e742e7765627369746577656c636f6d652e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-52230fb573e80a991bfd4f2e", "kind": "unclassified_tcp", "frame_number": 59990, "timestamp_epoch": "1634916156.736039000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1140000005354415254544c530d0a" } }, { "event_id": "evt-e016091ef2e33b8e0f02a1ef", "kind": "unclassified_tcp", "frame_number": 59995, "timestamp_epoch": "1634916156.809630000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e11c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-1ae7c4decd639d4673775a30", "kind": "unclassified_tcp", "frame_number": 59999, "timestamp_epoch": "1634916157.194142000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-86cce8e8cc28edf287f17c86", "kind": "unclassified_tcp", "frame_number": 60005, "timestamp_epoch": "1634916157.271772000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7d99c2574c9faa48ca37cda", "kind": "unclassified_tcp", "frame_number": 60010, "timestamp_epoch": "1634916157.275474000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3ea9c8b6ebb7005ab9c64284", "kind": "unclassified_tcp", "frame_number": 60011, "timestamp_epoch": "1634916157.275489000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a2a8d0cc4b1b8e6b9f95f649", "kind": "unclassified_tcp", "frame_number": 60016, "timestamp_epoch": "1634916157.285178000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50149, "dst_port": 1187, "tcp_stream": 1160, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a70dfc2d3ad0133bb11646ef", "kind": "unclassified_tcp", "frame_number": 60019, "timestamp_epoch": "1634916158.220860000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1880000001603030046100000424104b408dadd6cf0221a66465f3db1aeed1c895c1f013e5b2a26828359b87e538ce526f1f57bfdde1326e39f46c44fae5870910c9980a9f1c77cd48266138fd23c77140303000101160303002800000000000000006e0a5226b0cdf38cc029a57d2074c65d969b273ffd195dbc5dcbac92097c3880" } }, { "event_id": "evt-7c0da1da8736e15f93999cd2", "kind": "unclassified_tcp", "frame_number": 60027, "timestamp_epoch": "1634916158.281714000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e13d000000140303000101160303002803218666d369e9fe1c0e4ade43ffda2ef31b2716a9c91ac9b0c8b9cf687fe74a2231e4eaa16fbd24" } }, { "event_id": "evt-599ffc552d5cd650899a048c", "kind": "unclassified_tcp", "frame_number": 60030, "timestamp_epoch": "1634916158.539273000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1370000001703030028000000000000000174f725391c7203de7464fcb7457ab005fbebf387ff0e9a6fda404837f995ee78" } }, { "event_id": "evt-4767a6a5821dc2c3012e70dc", "kind": "unclassified_tcp", "frame_number": 60034, "timestamp_epoch": "1634916158.588755000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e1de00000017030300cf03218666d369e9ffa56e570f79dd77ad29b7fb5c45b82bcfcfe7a7633cf58695cad8b57aaa3522fdb7c9bce69f0317de6b06f85a5828d633e550c93c9093857dce064f5c789d03672b84ab6baf08722e62d93dd185337c30dffbd649f7188a7e907a40bbfbbad2c26cd4d69d14ecb4e6181e697f43de1a6c61719a26708066be798aed51e35558e08262437388ca279caaa61737113f96de472dcc87a3c4079907fb941f838d72d9051d80549dd4639ab8debe762ceef7235b89206e6408843a3395505a7e8245d8725c3c3680cf88" } }, { "event_id": "evt-8b44480f9d15179c5a295829", "kind": "unclassified_tcp", "frame_number": 60038, "timestamp_epoch": "1634916158.988214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a55f00000017030300501c05a4b97992e388120e67944e2714f237dbe384ae951230af068abb23dae9c52256c87d9bc6f080ea375fc35236ea72527dedb3b120855cb8f100cc888ba77548c79bfb617731cb0ce6bc129f00281d" } }, { "event_id": "evt-e3223fe4a2e047e9fbb3e957", "kind": "unclassified_tcp", "frame_number": 60041, "timestamp_epoch": "1634916159.244871000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e13300000017030300240000000000000002b1db39311d0d6041193e089ba47d423811619aeaea3fdbeb1a63c996" } }, { "event_id": "evt-9af9c6f1c7d7d1ddace35cf7", "kind": "unclassified_tcp", "frame_number": 60048, "timestamp_epoch": "1634916159.313751000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e139000000170303002a03218666d369ea00c7a29b5fef24c22f529688a2325f6c976469bdd90f5280ad571f84c8779b7ace828b" } }, { "event_id": "evt-9a64d6115f1f03cf73bf7fa0", "kind": "unclassified_tcp", "frame_number": 60051, "timestamp_epoch": "1634916159.470691000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207040033580c000000197b0407040033580e000000050200020407010074a53f000000170303003017905832f4409f54791d11320957b83d40383e75aee76da6e6c995dca6b870430058695f4c3b0e677b527779543b9387" } }, { "event_id": "evt-bc4e645463e4d4dbc17362ee", "kind": "unclassified_tcp", "frame_number": 60052, "timestamp_epoch": "1634916159.471030000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307040033580c0000000502" } }, { "event_id": "evt-62aa8e86ef6328c55805cb42", "kind": "unclassified_tcp", "frame_number": 60059, "timestamp_epoch": "1634916159.669171000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010074a56f0000001703030060b805b001b54c73a40aea9f7a38cbca459b995577f440e016a63fd09852bbeb94fbeeaa4c852f55940018690572333bcf7287771ba7ff177c33ec049fa82b41e0b1ef63c160615a574b22e3af039054e683ace352c798c9749857c42cf6419a95" } }, { "event_id": "evt-9fec706aa562f9879637fb16", "kind": "unclassified_tcp", "frame_number": 60063, "timestamp_epoch": "1634916159.669391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010074a50a000000" } }, { "event_id": "evt-76b92432883572618eec8024", "kind": "unclassified_tcp", "frame_number": 60065, "timestamp_epoch": "1634916159.700827000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e13d000000170303002e0000000000000003347a55d12606e28ff9fd3d654349bf65c1bc8ab63f587d136dad1690d97630323667fc3db7db" } }, { "event_id": "evt-ceaf0e90d6b67965ad61f454", "kind": "unclassified_tcp", "frame_number": 60069, "timestamp_epoch": "1634916159.924974000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400335820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ac782a73bfff638748f4c96b", "kind": "unclassified_tcp", "frame_number": 60070, "timestamp_epoch": "1634916159.925528000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307040033580c0000000100" } }, { "event_id": "evt-2bcdfd74747f918f16a7261d", "kind": "unclassified_tcp", "frame_number": 60073, "timestamp_epoch": "1634916160.047160000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e139000000170303002a03218666d369ea017e94b2b265dccca09b05a3096eda410c4c888d81ee9874b5d599e7a2f6ed01493ed6" } }, { "event_id": "evt-6a7619b4a95b49c587ba2082", "kind": "unclassified_tcp", "frame_number": 60076, "timestamp_epoch": "1634916160.075552000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c839a200000017030300930000000000000004b469d7356d4f1e85d2578acbe751a9c9bad83ee04b20a5503164405db17a248ee19cb49cfac3527d3d47fb2bab8ab60c6991a33dd037cabf6c8c0737098a862133f0888ebae27b4f8d981df82e46487e70080d70a4fff22f37b3f2931b6c418b537f576799a7f592234a60ea342951fb60dad35530d1960d917043cd7d196f31ee364544c65bcd7eda3b5e" } }, { "event_id": "evt-9f8fddbff67a87377a2b05b5", "kind": "unclassified_tcp", "frame_number": 60080, "timestamp_epoch": "1634916160.203125000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033581f000000050100030e6d61696c2e636f7274656f2e66720019" } }, { "event_id": "evt-1195c94f5a4499b76d4bb5a8", "kind": "unclassified_tcp", "frame_number": 60084, "timestamp_epoch": "1634916160.595068000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8392a000000170303001b0000000000000005ac68355faddd5931fd4bf202c0cb1ed12dd1ca0407030006e13500000017030300260000000000000004faefebd37ee4a1b72db0b53c825fb8d83e72ee161a273c241e97fd82a600" } }, { "event_id": "evt-1c3d7fd668ffc1d694a5723a", "kind": "unclassified_tcp", "frame_number": 60096, "timestamp_epoch": "1634916161.411403000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400335814000000050000010a0a169cc37a" } }, { "event_id": "evt-f25208267f29943c576a7429", "kind": "unclassified_tcp", "frame_number": 60100, "timestamp_epoch": "1634916161.612062000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400335834000000323230204741524d2d393852303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-dd6a5f205f1dc1598d0c948d", "kind": "unclassified_tcp", "frame_number": 60105, "timestamp_epoch": "1634916161.662911000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50150, "dst_port": 1187, "tcp_stream": 1163, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-58d543a9a0a264892c9deffb", "kind": "unclassified_tcp", "frame_number": 60109, "timestamp_epoch": "1634916162.025705000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033581a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-58ab4a807ef535a06d0f91d4", "kind": "unclassified_tcp", "frame_number": 60116, "timestamp_epoch": "1634916162.215846000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-784a1c7cfa4b5a7a833b423e", "kind": "unclassified_tcp", "frame_number": 60120, "timestamp_epoch": "1634916162.522581000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e14a000000170303003b03218666d369ea0235397f1723e4fea95dcc42bf09df33d376f95a8c2106f325e626780b944ed6314d00078acfc3d3231a91de3e44e01b0d7c361c" } }, { "event_id": "evt-aac3f26ad90fc5de0e180ee8", "kind": "unclassified_tcp", "frame_number": 60123, "timestamp_epoch": "1634916163.238412000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358140000005354415254544c530d0a0407030006e12a000000170303001b00000000000000056bea957f9dd7351f41d37963d6a3c78f062b3c" } }, { "event_id": "evt-e98337f102254e84ecd50ef8", "kind": "unclassified_tcp", "frame_number": 60131, "timestamp_epoch": "1634916163.313473000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e141000000170303003203218666d369ea03495bfddabe779800f932ad91ae513a5ea0b40408d93558642317cfddd1c766c336250367a3dead8873e6" } }, { "event_id": "evt-137fe55eb8a7d760989bce05", "kind": "unclassified_tcp", "frame_number": 60135, "timestamp_epoch": "1634916163.412691000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033582800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-c0e050b8915efd206c474695", "kind": "unclassified_tcp", "frame_number": 60138, "timestamp_epoch": "1634916163.775124000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e12d000000170303001e0000000000000006aa7ffd56e8c5cc702005555f73eb1e031a1d6c8be4cc" } }, { "event_id": "evt-83a104627422cb8aba34ae89", "kind": "unclassified_tcp", "frame_number": 60143, "timestamp_epoch": "1634916163.821959000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030006e179000000170303004b03218666d369ea0480d025d4502d80b0d1b8084bec810748bc07ae88857b690e1311f12cdfdc5e8b2cf6892e8576a7f7c4e2a9f39d059f563ef72aaf4b06a7c0ff17a7dde27b1e0793e351150303001a03218666d369ea05a552e0855ffe344db84f862934ca9995adaf" } }, { "event_id": "evt-7e3b96dc234cc1a8c0a2d905", "kind": "unclassified_tcp", "frame_number": 60147, "timestamp_epoch": "1634916163.822579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030006e10a000000" } }, { "event_id": "evt-2b8f9d83153c4dc8020b45d9", "kind": "unclassified_tcp", "frame_number": 60149, "timestamp_epoch": "1634916163.970418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bac5155dc5bea736e2f4fab6", "kind": "unclassified_tcp", "frame_number": 60150, "timestamp_epoch": "1634916163.970901000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010037680c0000000502" } }, { "event_id": "evt-ffbac7786b133845a8ac1252", "kind": "unclassified_tcp", "frame_number": 60157, "timestamp_epoch": "1634916164.156435000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358ca0a000016030312330200005103036172d7440a776c259cbdf720af1d65f8ed9218798f89438542287312e3691d6d20841000006ef44e218886734ef64cd8f8d6aeb95959fb39c3b7bf416cf9740f1bc01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-f7bdb1ce0643bd845e40c11f", "kind": "unclassified_tcp", "frame_number": 60158, "timestamp_epoch": "1634916164.156444000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-28d0122fe82d39d64b2392ab", "kind": "unclassified_tcp", "frame_number": 60164, "timestamp_epoch": "1634916164.156939000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d39e59d4e8096777f10f8839", "kind": "unclassified_tcp", "frame_number": 60165, "timestamp_epoch": "1634916164.156947000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b83049653c0460080acc82874f578eb767a4b9ed77f8049d85d14954534e0ddd2348a2b8f161e1bc2be76b1917df8faebd5d9b3b9e148e0243489c2c56f8cc5e22ada427163eec2374fbf18b861f04495a94d66b51a72afdd6e0554dbf573d7f6353a11caf2944f8180e754bc319aa48c361373321d0a64adc5423bff319a46549be5d5aaa3b147a9ea978f3fe9762127e1433a15ed7bdf4dc355d6cf5b2e70d2d88f2d70d40ce55744a99571dbbe835ab4c9c6e2521da51971f7197107203f6a037ae07368a409d8e234b2d992f697b8a22085a47d08d72fefab18104ab7472f226396526242d42ff6323041ce72bec2e76823e2c40518ecb11c1e1c8d4195f4cf247249d5650aae1717dea82435832f22309b091d85429338a5496d8b128ee37c5029dbe9a3d1d0abc783a2877ec9aa569ac9aa527f7e6e929497b3ae79fe7929534f2bcff4f96d001121fac4678f36fdfb9919c87ad1b76600b67d139a8444c6540b920df2a3597e1d7f96a8c75fcd7374fdc11de8ecbbf7e08d3b3b2c7707c81ec3e0f7de0c69e16dfeceace1a4e22b408f7814dce404df2a72e7ba9a0c0483b75de3b9500360b9e9d5cc36835b5a0ad4b16dea31da142933a3cab9e332bb21a6bfbeae341e3e26b0e000000" } }, { "event_id": "evt-8e363f5f9c2c2d8b514da6b3", "kind": "unclassified_tcp", "frame_number": 60171, "timestamp_epoch": "1634916164.428331000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100376820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-df9cac9384fad9a1583a4268", "kind": "unclassified_tcp", "frame_number": 60172, "timestamp_epoch": "1634916164.428925000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010037680c0000000100" } }, { "event_id": "evt-80b5fd2ee4c8888250f503c7", "kind": "unclassified_tcp", "frame_number": 60174, "timestamp_epoch": "1634916164.771115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358e4000000160303008a1000008685040078fbbc91e302eb3d9d792b31617ed446bf24b0763280d0fa111645ecd1e2d01bf5e19ffeec780fff5983b522d19cd866fcd725280d2b1ed3043a80339ae73782da01d8e691d18836d19e049d4d26a64b2398255940e4c24671e45bec3f1dab4f25c9b1b39283787eb50665c119d35fec6a1ec0f4abfacad43583a4c1b4521333e16b54140303000101160303004000530ecb80b374441a4870381254f91e6441597241753687feac0f8b6870cac0f7160ba28cc24853916c3f02a1cc3925b726e32b821777219f4dfca42945c2bc" } }, { "event_id": "evt-5de11b74abd3fd27c428e65e", "kind": "unclassified_tcp", "frame_number": 60179, "timestamp_epoch": "1634916164.952566000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037682200000005010003116d61696c2e736f6e67617a696e652e66720019" } }, { "event_id": "evt-fc5e65c1b5ad57d08201ca80", "kind": "unclassified_tcp", "frame_number": 60187, "timestamp_epoch": "1634916165.252657000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358550000001403030001011603030040f927a2564418c37b0f6338060540133dd87820141694493692bf0a92c1e049e24a1a2a222f53ee76fd732043e8bb42f759f067afd804b3040fc514201db0afb8" } }, { "event_id": "evt-1e192b19705f584bdb86a3f8", "kind": "unclassified_tcp", "frame_number": 60192, "timestamp_epoch": "1634916165.403982000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100376814000000050000010a0a169cc37b" } }, { "event_id": "evt-1bb477debc3eb130c9940695", "kind": "unclassified_tcp", "frame_number": 60194, "timestamp_epoch": "1634916165.652078000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033584f00000017030300400ec645b5ddd8fdac65e272290530e446208942fe0433147e4282194d1ba15954a925ef524c65b0d010ccf494059023da015a4235da38497f0ea0cb3eaa28edc0" } }, { "event_id": "evt-04df3506698962123f40a676", "kind": "unclassified_tcp", "frame_number": 60198, "timestamp_epoch": "1634916165.653056000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8397700000017030300680000000000000005ec496a0277a369f205efe85f3c27f30296bd6d1151d19abfa4919c7224e6144a2e5d861e314bf0d562383e9cc70945ccd4118341f01106a8d0016356942a6959507e7d77d2b9ced9f5784f56d8727f0fbc6bff6735d611653e9f3dcda5f92036" } }, { "event_id": "evt-bddcdfd8250494dab77a6644", "kind": "unclassified_tcp", "frame_number": 60202, "timestamp_epoch": "1634916165.799127000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003358a801000017030300409a56f7561188971d48a1cc3bb27c0d9f844525dfa1a6f5e157e8af1f627c4a600b18c21095cf897ff44833c555a7b2f5f282a50a3ee92101875daf3a9f40e12017030300403bec3156408e811683110bd2a07eaee81146cb2835b36705603d3e9c45d86f010adb0ab380d7c17462f208a228a86d99abe0db8c48d2253edaefcd5736627c7d17030300404b6106f7b85f0f2d1c30a8399e68ba81b89e3a68ef638d4cb7ac331a7e0614b703852b639e82fe23eb11a1da85bc83b80cab0658d33deb05817c6c648dcd796a17030300408afa225b946b06490b2d54c80f15bfdbe56339748349be4abc9b84e0938626686c682ba7d4584bab1a77fad22d4f349db09749514269b71079e2cb8e18594c9f17030300401aa7027fa3ed9b4332645dd75af50ed2d0224f6f0573342367864ae9a03a486f9939b910cc9202714778e772bbe3390f50904b977f4b9deeda1907eabfce6b2c17030300407386b6764b86e9d275073d154d0d39c03621134cbb681fc2a6c82d5d8ecb404319ce8ec14357e63d594e48e0024e1c2b7db8a1779172e3948ee914376d96bdfc" } }, { "event_id": "evt-3eddde9333835db89dff5890", "kind": "unclassified_tcp", "frame_number": 60210, "timestamp_epoch": "1634916166.087549000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50151, "dst_port": 1187, "tcp_stream": 1167, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e2d6caf9c38d0f6997bbb2d0", "kind": "unclassified_tcp", "frame_number": 60212, "timestamp_epoch": "1634916166.116214000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8392d000000170303001e0000000000000006e713b2bfc7595656baf9a7abc1cda0697ff27a7b18dc" } }, { "event_id": "evt-2ff487756feceb61c6240333", "kind": "unclassified_tcp", "frame_number": 60216, "timestamp_epoch": "1634916166.138364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100376835000000323230204741524d2d31303652303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-3275ab1150f72d59d268fb5c", "kind": "unclassified_tcp", "frame_number": 60220, "timestamp_epoch": "1634916166.162871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c8395700000017030300480000000000000006acdb55e8027c87fa238556497e742cb8953e0976a60ba1931f77d76e8d6589683c2e0997fb6088d90e01acb597b6a5862905cdf0118a2f4b203b9e4a7adada91" } }, { "event_id": "evt-6716d45fb2987e32e974aa79", "kind": "unclassified_tcp", "frame_number": 60225, "timestamp_epoch": "1634916166.163192000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200c8390a000000" } }, { "event_id": "evt-a87f41d204b8f2ea4cd89fca", "kind": "unclassified_tcp", "frame_number": 60230, "timestamp_epoch": "1634916166.599557000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037681a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-dc65ce8596c4d80f5ab4e19c", "kind": "unclassified_tcp", "frame_number": 60237, "timestamp_epoch": "1634916166.752684000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003768990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-d66b87a869181ba11f317334", "kind": "unclassified_tcp", "frame_number": 60239, "timestamp_epoch": "1634916166.785992000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033584f00000017030300408327c6c08f325352cb812a517128dd9f01f87a28de4904db165dc90d777464a9fca44990f8b2933bf3321ebfa6eb6141de832610f9b4f53b44c3802e8c3d7b59" } }, { "event_id": "evt-0d77dbd06abd66e0c5f65e30", "kind": "unclassified_tcp", "frame_number": 60244, "timestamp_epoch": "1634916166.940023000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033584f0000001703030040599f66d6e6245d4a8952f8ebfacd304b3d7602200e9cb1fdfe46faf0209c69dc870a879c065ff43794e873ce41d0d6edfaed23591a66411de815a8f9f88bae7d" } }, { "event_id": "evt-d00c674e55fddabd64fd4a24", "kind": "unclassified_tcp", "frame_number": 60247, "timestamp_epoch": "1634916167.142010000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003768140000005354415254544c530d0a" } }, { "event_id": "evt-1f88ada2a8449ee94d170f40", "kind": "unclassified_tcp", "frame_number": 60253, "timestamp_epoch": "1634916167.296251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037682800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5ceab468514507157db59323", "kind": "unclassified_tcp", "frame_number": 60255, "timestamp_epoch": "1634916167.330556000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033585f000000170303005011b32de709be3f1d49928ae152da9c3c093be6d7f2a7847e001ecd74bc1035a41658d161a5d9943fba158e05044f554d87b9ecf9bf03b507058c1b7a1354f1707b19193c24013a48694462ec1eb27d54" } }, { "event_id": "evt-29cfa674d1ab5c2a6999d60c", "kind": "unclassified_tcp", "frame_number": 60262, "timestamp_epoch": "1634916167.485506000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033584f0000001703030040ae6538c9fb1038ac33b15af258c78619d39176fe2f48dff8f6ce5ca5b37ae685b4e41696ad89a4fbab00dd875f0526e1b2a9d6de95b191d7a632afb99c52b188" } }, { "event_id": "evt-b575a50007b741f8dd72b5c7", "kind": "unclassified_tcp", "frame_number": 60265, "timestamp_epoch": "1634916167.594996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-73020d92e8dc159a74c2da23", "kind": "unclassified_tcp", "frame_number": 60273, "timestamp_epoch": "1634916167.757969000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-50fd66f10c158b92ec1833a5", "kind": "unclassified_tcp", "frame_number": 60274, "timestamp_epoch": "1634916167.757984000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-49367188f3681a4cfae69743", "kind": "unclassified_tcp", "frame_number": 60275, "timestamp_epoch": "1634916167.757992000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f6cfa440038acd45c3a17009", "kind": "unclassified_tcp", "frame_number": 60279, "timestamp_epoch": "1634916167.758335000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b0a47a1945c452d8ff7dd78e", "kind": "unclassified_tcp", "frame_number": 60283, "timestamp_epoch": "1634916167.761145000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ba24683f4b1308f63c562611", "kind": "unclassified_tcp", "frame_number": 60285, "timestamp_epoch": "1634916167.886321000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033584f0000001703030040efdd15abf0ea0d62121a135a4dd49d7b249600a3f591395535c8e1d544faca42d9a63a4b236495d88b8bf0f44c74590a4201ea3b4e863afb9a6023dee1a71e6d" } }, { "event_id": "evt-0a6f5d8b3f683e31605ba310", "kind": "unclassified_tcp", "frame_number": 60294, "timestamp_epoch": "1634916168.410668000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003768e4000000160303008a100000868504018fcfa4b37dbc32dcf531b779df5dcfa0d107c96f780b38519ee8c717604556a02662640e486a968f1736320decb7758ff311eef644f04b2e0b8affc23e98c1fa280177973f05ebfffcb8e9818eff489d79ead9f4677e00f803a654c15a71d3b684ae5f4c61618c8b77997263b190bb447eadd272ee4d4806fa124ed8662c7320a894e214030300010116030300407899dcfb393410a1daab4ebcd87abc3816f1380b438c60b292fa8f086b4a8ac417ccf5ff56366e38750e1ef512c98dd320ee815d7ca2ad75f40176a9d877fcd5" } }, { "event_id": "evt-66b70158cf654c8cfb221ad1", "kind": "unclassified_tcp", "frame_number": 60299, "timestamp_epoch": "1634916168.606002000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037685500000014030300010116030300404c8df1b378c16ffb0526a3cdd71bbf614eb80d10bbc413855370a8b1a33e2aa4834b1632eeda6cf7d5c80d7b5f3f26c6db17a257cc087453ef6faf6137ac4abe" } }, { "event_id": "evt-fcc069ddc5a087eb17d67b72", "kind": "unclassified_tcp", "frame_number": 60302, "timestamp_epoch": "1634916168.975025000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037684f00000017030300403d8514e3315174dab854fa43875645358d9050f0ac37e6e671c925dcb9f0fa97c877b7046a722274cfdc5296ef0fb29ef6a198de7fc32dde5021cc6d210ffc6e" } }, { "event_id": "evt-7dc34daf7a8430731644d9e2", "kind": "unclassified_tcp", "frame_number": 60307, "timestamp_epoch": "1634916169.176040000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-50234e0731c04ccb99efacd6", "kind": "unclassified_tcp", "frame_number": 60311, "timestamp_epoch": "1634916169.896514000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037684f0000001703030040dae26c08566354037b096065b831b3515b8d34e3e610956ddf52b726e21cf2d6d483bb1e186b598f9f55008589a9f24d0fabb2404e1431340e4a68d4d7cb2d51" } }, { "event_id": "evt-0e76352eb1ec15f2f3a3405e", "kind": "unclassified_tcp", "frame_number": 60316, "timestamp_epoch": "1634916170.053493000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037684f0000001703030040d8708e84252a6c63450345a22e5ff1060fbfd6f30db88d77b4bfbc94976fc3fa0094fe1aabc56911c818bc4cf4f1142cee13881847fb9a3037b08989a21cab6d" } }, { "event_id": "evt-138a5d131c8e42c7dc20477d", "kind": "unclassified_tcp", "frame_number": 60320, "timestamp_epoch": "1634916170.232875000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033585f000000170303005090a7a3e9548610578eb839973beb94721bfcb5f2157fabc1c5c5c7d553007b5af7559fa1ce71baeb8a030997e135594ab33562748bb94b8223e3a3116d2035a3f169b0dee56a6059d2b6fd75fcde0f39" } }, { "event_id": "evt-7d11bf01c7202b00d8da311d", "kind": "unclassified_tcp", "frame_number": 60325, "timestamp_epoch": "1634916170.293115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037685f0000001703030050038559cd3be006384650458c7407400669873ffc48df32bd4eec7ec9873eb6ecec2d1365a09803f74a0ddb020eac246f537304808befd16568fc76ae7aa12f2ef6dcc3af1f5dd4c4a58f0fbb4792ebac" } }, { "event_id": "evt-097d4f4e49239876232f5901", "kind": "unclassified_tcp", "frame_number": 60332, "timestamp_epoch": "1634916170.442978000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037684f0000001703030040cfafe0a9bec1b3a0bb36a96b7934c19344b2204faaa05ee8cedb55714e3febb41f8ff5ea37e045e8cb5459a907209841afedf013422e33938ace5aa6a84f9aac" } }, { "event_id": "evt-1517c6d2a35a732e763464aa", "kind": "unclassified_tcp", "frame_number": 60337, "timestamp_epoch": "1634916170.541258000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50152, "dst_port": 1187, "tcp_stream": 1168, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fcfab11fda6d54d48dfe3eff", "kind": "unclassified_tcp", "frame_number": 60339, "timestamp_epoch": "1634916170.648739000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033583f0000001703030030edd321eb98d2f27864c1d43dcd0fa0a321b19b4bd9e5976572b2fdeb97b11cb50eff233f514192b5081b8ad9b2241360" } }, { "event_id": "evt-c75809b75e77f55daa9562c0", "kind": "unclassified_tcp", "frame_number": 60344, "timestamp_epoch": "1634916170.838948000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037684f000000170303004065ffd82bdb4c9db70502edd427a90aad3f20c26670c7fab4a6ce4946ded9c28e1f1a484d515ca24bb5f9cc9849d1583252eeec088536449c6d56b2e6ec305eb8" } }, { "event_id": "evt-31747cf9732894817634734c", "kind": "unclassified_tcp", "frame_number": 60354, "timestamp_epoch": "1634916173.582547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037685f00000017030300507c8e2e58170cd57a02075d95942bc69f7d26d12748f4acce2ac3429c857577b91b13f75157fd9a458d6f049b6f855e99e589598c26ad0699a5a1e20b3fd36049a1220bb82cef99547f4917dc553d4eeb" } }, { "event_id": "evt-33e2132b15336317e44b16f8", "kind": "unclassified_tcp", "frame_number": 60357, "timestamp_epoch": "1634916173.888268000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037683f0000001703030030acaa2371a135a6b8fffdc41efff9446c479356cfd3fc30bdf22ffc5bdba5aeb6f1bef1ad1bbe709c8303e3b2edcc018a" } }, { "event_id": "evt-005f71cba9b27431941cb1b4", "kind": "unclassified_tcp", "frame_number": 60367, "timestamp_epoch": "1634916174.967597000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50153, "dst_port": 1187, "tcp_stream": 1169, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fe6cdcae600ce591a24353d3", "kind": "unclassified_tcp", "frame_number": 60372, "timestamp_epoch": "1634916175.263930000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e3f01dc6d4b0736b6cffc14a", "kind": "unclassified_tcp", "frame_number": 60374, "timestamp_epoch": "1634916175.608837000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-373a1f8fa93dcb7e2fec1299", "kind": "unclassified_tcp", "frame_number": 60376, "timestamp_epoch": "1634916175.725637000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8df52abc7072e227b18dfb4c", "kind": "unclassified_tcp", "frame_number": 60385, "timestamp_epoch": "1634916179.301615000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50154, "dst_port": 1187, "tcp_stream": 1170, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fbe7327c83b59c34719a3016", "kind": "unclassified_tcp", "frame_number": 60416, "timestamp_epoch": "1634916183.663585000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50155, "dst_port": 1187, "tcp_stream": 1179, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2f5c34f25a495eecc6778ba4", "kind": "unclassified_tcp", "frame_number": 60439, "timestamp_epoch": "1634916188.003729000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50156, "dst_port": 1187, "tcp_stream": 1184, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f6903feaf888a8157cc5325d", "kind": "unclassified_tcp", "frame_number": 60467, "timestamp_epoch": "1634916192.372452000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50157, "dst_port": 1187, "tcp_stream": 1192, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4d1469408b2d2d996bc29fee", "kind": "unclassified_tcp", "frame_number": 60469, "timestamp_epoch": "1634916192.531768000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50157, "dst_port": 1187, "tcp_stream": 1192, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ad025694c5b8db8f2640e085", "kind": "unclassified_tcp", "frame_number": 60486, "timestamp_epoch": "1634916196.768066000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50158, "dst_port": 1187, "tcp_stream": 1193, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-931e980be874102df5df8cba", "kind": "unclassified_tcp", "frame_number": 60502, "timestamp_epoch": "1634916201.110245000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50159, "dst_port": 1187, "tcp_stream": 1194, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3fa418f2fcde3bba00f8fa8b", "kind": "unclassified_tcp", "frame_number": 60510, "timestamp_epoch": "1634916203.764297000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033585f000000170303005035b0c677b642d5f56b106b2ebd3b8fa12561f3c33e977dbf429bb8e68d5a881c745b946acd6798a58a9a954cbaaf9e083d6080c3cdf8a36ae84dd052034955c4028971a394d5fb4fcdc3610af7e0926e" } }, { "event_id": "evt-4d2872b5897bad9620533bdb", "kind": "unclassified_tcp", "frame_number": 60513, "timestamp_epoch": "1634916204.162229000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033583f0000001703030030e0829c84aa31729b677464b60f56dbbe065bcb9559cfcbdc37bd6f8509e1e6ae1206190f6a80be02774a7351618f6dee" } }, { "event_id": "evt-2b52265ac9c469eaa9bc8fe5", "kind": "unclassified_tcp", "frame_number": 60520, "timestamp_epoch": "1634916204.307450000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033586f00000017030300606f811aed8a8f06bff3d567f12671abfcd13a54d2cef7803636eded0ff85e7b3e47985ecd19be1d1d5e302e86197a98e261b61b53955b32118214902cafe68b5d8770bd20383b78711a05f67dcac9a4b130fbb6f131637b8b1912597a0d889a6c" } }, { "event_id": "evt-68936cdea34b7b01b09349f4", "kind": "unclassified_tcp", "frame_number": 60524, "timestamp_epoch": "1634916204.308063000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507040033580a000000" } }, { "event_id": "evt-79101fb2f72fbfed64e24fa9", "kind": "unclassified_tcp", "frame_number": 60526, "timestamp_epoch": "1634916204.599902000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033583f0000001503030030337c06dfbe383d9995fe168aa57cf643424998329dfb6c7309c4c0497bd0d002d7b03e194acfd87a20024207ea4d53a5" } }, { "event_id": "evt-859aeb5a24e0096024eb323d", "kind": "unclassified_tcp", "frame_number": 60528, "timestamp_epoch": "1634916204.779818000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507040033580a000000" } }, { "event_id": "evt-644751e8d2db5f538c235799", "kind": "unclassified_tcp", "frame_number": 60540, "timestamp_epoch": "1634916205.425760000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50160, "dst_port": 1187, "tcp_stream": 1195, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9a20f0039257dfee83bff360", "kind": "unclassified_tcp", "frame_number": 60560, "timestamp_epoch": "1634916205.742876000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-6517d569b8db1c7113809dbc", "kind": "unclassified_tcp", "frame_number": 60565, "timestamp_epoch": "1634916207.168928000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037685f0000001703030050316e08b850bf4023ae2bdf5dfaa9ed2f5fd8d7f30bef2afd814c1799c5395f0d62066937da074e9c9db49c43f9fad737b807095a08265e9bd4671a1e62a4600d88ade4a1c4347f679a8bc3ac69dbac35" } }, { "event_id": "evt-fcab2744f1e6f36380f7e2ba", "kind": "unclassified_tcp", "frame_number": 60569, "timestamp_epoch": "1634916207.491350000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037683f0000001703030030af81cde96d1911ed691f6d2a3f62e41827927584ebbb4184ba721a8c8bf6866cdfda6f59ec03a0a1f3b983dd9fa04a5a" } }, { "event_id": "evt-4eb15b400a751f0e90044034", "kind": "unclassified_tcp", "frame_number": 60576, "timestamp_epoch": "1634916207.650278000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037686f0000001703030060cb65f927a195b4cf5f6c4763298daf14587c4d4b036cf5d66746860229afabb10d5ff7c34f9f165b1e4b1e904221e38c2516d6e5deee6de34e63e2688770ef0d90c3e352cc79787ba43f0d40f3b4f1c6eebc69322ce6dea52ea76358ceae30b0" } }, { "event_id": "evt-0175aab93d0b60b7a0b14603", "kind": "unclassified_tcp", "frame_number": 60580, "timestamp_epoch": "1634916207.650860000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010037680a000000" } }, { "event_id": "evt-f51478dc9deaad8dfc1bca87", "kind": "unclassified_tcp", "frame_number": 60603, "timestamp_epoch": "1634916208.081787000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010037683f0000001503030030dc35b433be66aa98a324cf811d43f3548d32646e4996f0ee927d3a9ebaa3897fe4be300e2a5fcb78f3021ebbf6de7241" } }, { "event_id": "evt-c888c951ef776f1a302151df", "kind": "unclassified_tcp", "frame_number": 60606, "timestamp_epoch": "1634916208.397630000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010037680a000000" } }, { "event_id": "evt-cdaf1815f586ae1a2120bb79", "kind": "unclassified_tcp", "frame_number": 60614, "timestamp_epoch": "1634916209.792297000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50161, "dst_port": 1187, "tcp_stream": 1200, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6034bdfbd555866f183cf7af", "kind": "unclassified_tcp", "frame_number": 60628, "timestamp_epoch": "1634916214.164862000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50162, "dst_port": 1187, "tcp_stream": 1202, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e24bb6d040e8f3b48f0447cc", "kind": "unclassified_tcp", "frame_number": 60644, "timestamp_epoch": "1634916218.643704000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50163, "dst_port": 1187, "tcp_stream": 1204, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0fab5d05e2325ca2223040e0", "kind": "unclassified_tcp", "frame_number": 60646, "timestamp_epoch": "1634916218.656429000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50163, "dst_port": 1187, "tcp_stream": 1204, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-30ff187c27bac73c66882571", "kind": "unclassified_tcp", "frame_number": 60665, "timestamp_epoch": "1634916223.053447000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50164, "dst_port": 1187, "tcp_stream": 1207, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2d0d4a1afb948b4aa187684a", "kind": "unclassified_tcp", "frame_number": 60683, "timestamp_epoch": "1634916227.487234000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50165, "dst_port": 1187, "tcp_stream": 1209, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-598422cbd009244be81e4b6c", "kind": "unclassified_tcp", "frame_number": 60702, "timestamp_epoch": "1634916231.820978000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50166, "dst_port": 1187, "tcp_stream": 1211, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d519e06ac1011e8ec09a7747", "kind": "unclassified_tcp", "frame_number": 60714, "timestamp_epoch": "1634916234.936321000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701005f070c000000197b" } }, { "event_id": "evt-2717b05475a38f2f7312e497", "kind": "unclassified_tcp", "frame_number": 60717, "timestamp_epoch": "1634916235.231969000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f070e00000005020002" } }, { "event_id": "evt-7507373c2d4a95f1e8a5b0ee", "kind": "unclassified_tcp", "frame_number": 60718, "timestamp_epoch": "1634916235.232660000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701005f070c0000000502" } }, { "event_id": "evt-e05ef7507d2c557d3ef7c03c", "kind": "unclassified_tcp", "frame_number": 60721, "timestamp_epoch": "1634916235.297729000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-712cc8d6486dfac7508cdf5a", "kind": "unclassified_tcp", "frame_number": 60724, "timestamp_epoch": "1634916236.145595000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f0720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-dec1516ea3b9f2b6a2fffaf0", "kind": "unclassified_tcp", "frame_number": 60725, "timestamp_epoch": "1634916236.146205000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701005f070c0000000100" } }, { "event_id": "evt-1043680c827c0abfab1341de", "kind": "unclassified_tcp", "frame_number": 60729, "timestamp_epoch": "1634916236.178262000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50167, "dst_port": 1187, "tcp_stream": 1214, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-007c66deab23cea6c21991b0", "kind": "unclassified_tcp", "frame_number": 60733, "timestamp_epoch": "1634916236.458155000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f072400000005010003136d7830322e636f6c742d656e67696e652e69740019" } }, { "event_id": "evt-f0216e465a0584f5fb8f915b", "kind": "unclassified_tcp", "frame_number": 60741, "timestamp_epoch": "1634916237.031971000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f0714000000050000010a0a169cc387" } }, { "event_id": "evt-a0f25a0b3f7bed15de8b97ff", "kind": "unclassified_tcp", "frame_number": 60745, "timestamp_epoch": "1634916237.274088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f0732000000323230206d783032622e636f6c742d656e67696e652e69742045534d545020506f73746669780d0a" } }, { "event_id": "evt-01b228775c432bb7a82b23c0", "kind": "unclassified_tcp", "frame_number": 60749, "timestamp_epoch": "1634916237.580760000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b16da0921174d838b0d69b58", "kind": "unclassified_tcp", "frame_number": 60755, "timestamp_epoch": "1634916237.894086000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f07ad0000003235302d6d783032622e636f6c742d656e67696e652e69740d0a3235302d504950454c494e494e470d0a3235302d53495a452034373138353932300d0a3235302d4554524e0d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-89d155ff6820372fbd897b45", "kind": "unclassified_tcp", "frame_number": 60760, "timestamp_epoch": "1634916238.484962000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-10430d8664c87588dc693ad0", "kind": "unclassified_tcp", "frame_number": 60765, "timestamp_epoch": "1634916238.755493000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-fa798cdd5ee5f6cc8105555f", "kind": "unclassified_tcp", "frame_number": 60768, "timestamp_epoch": "1634916239.131697000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f07340000006157356d6230426a6233567564484a35614739316332566d5a57526c636d6c6a6279357064413d3d0d0a" } }, { "event_id": "evt-e9efa6876354632bcb71402e", "kind": "unclassified_tcp", "frame_number": 60774, "timestamp_epoch": "1634916239.309592000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-08d7bb8a20bcc1e5d10e0546", "kind": "unclassified_tcp", "frame_number": 60777, "timestamp_epoch": "1634916239.676968000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071c000000526d566b5a584a70593238794d4441330d0a" } }, { "event_id": "evt-4cfb7dd8966cf41c4b6fd19e", "kind": "unclassified_tcp", "frame_number": 60782, "timestamp_epoch": "1634916239.846409000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f072f00000032333520322e372e302041757468656e7469636174696f6e207375636365737366756c0d0a" } }, { "event_id": "evt-ed6df9f0d6e224ca31f31193", "kind": "unclassified_tcp", "frame_number": 60785, "timestamp_epoch": "1634916240.196069000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f07420000004d41494c2046524f4d3a3c696e666f40636f756e747279686f757365666564657269636f2e69743e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-75b3764bf7ad5ff1f056e94f", "kind": "unclassified_tcp", "frame_number": 60793, "timestamp_epoch": "1634916240.378009000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f071800000032353020322e312e30204f6b0d0a" } }, { "event_id": "evt-a47d0329031f4aa7016875f4", "kind": "unclassified_tcp", "frame_number": 60799, "timestamp_epoch": "1634916240.743038000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f072a0000005243505420544f3a3c67696c6c69616e2e64656f6e406d61696c2e72753e0d0a" } }, { "event_id": "evt-6f9bc038fb36fb76ae6d0618", "kind": "unclassified_tcp", "frame_number": 60804, "timestamp_epoch": "1634916240.744253000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50168, "dst_port": 1187, "tcp_stream": 1217, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-210a9f3c03e2db6baa20a474", "kind": "unclassified_tcp", "frame_number": 60806, "timestamp_epoch": "1634916240.781890000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50168, "dst_port": 1187, "tcp_stream": 1217, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-625f80f4c24c685d1a3f48c9", "kind": "unclassified_tcp", "frame_number": 60811, "timestamp_epoch": "1634916240.924047000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005f075700000035353420352e372e31203c6c6f63616c686f73743e3a2048656c6f20636f6d6d616e642072656a65637465643a20476f20617761792c206261642067757920286c6f63616c686f7374292e0d0a" } }, { "event_id": "evt-f92b9cdf18803b4982a10632", "kind": "unclassified_tcp", "frame_number": 60813, "timestamp_epoch": "1634916240.933581000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020012c90c000000197b0407020012c90e00000005020002" } }, { "event_id": "evt-0f6a32287fd90cf46446e09b", "kind": "unclassified_tcp", "frame_number": 60814, "timestamp_epoch": "1634916240.934492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020012c90c0000000502" } }, { "event_id": "evt-65ddfb4e97b2153be5c8296d", "kind": "unclassified_tcp", "frame_number": 60819, "timestamp_epoch": "1634916241.270437000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701005f070a000000" } }, { "event_id": "evt-d8fe60bce49d0086d586cdd5", "kind": "unclassified_tcp", "frame_number": 60825, "timestamp_epoch": "1634916241.469638000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020012c920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d857dfdfd46a8f37db01beba", "kind": "unclassified_tcp", "frame_number": 60826, "timestamp_epoch": "1634916241.469875000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020012c90c0000000100" } }, { "event_id": "evt-05cb518aa2da991fe9a13ed5", "kind": "unclassified_tcp", "frame_number": 60828, "timestamp_epoch": "1634916241.822001000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020012c9250000000501000314736d74702d72656c61792e676d61696c2e636f6d0019" } }, { "event_id": "evt-683e71cfddf49968337c646c", "kind": "unclassified_tcp", "frame_number": 60836, "timestamp_epoch": "1634916242.147262000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020012c914000000050000010a0a169cc388" } }, { "event_id": "evt-1848701ea546c75b46952c3c", "kind": "unclassified_tcp", "frame_number": 60839, "timestamp_epoch": "1634916242.226273000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020012c94300000032323020736d74702d72656c61792e676d61696c2e636f6d2045534d5450203235736d33373137323532706a672e32202d2067736d74700d0a" } }, { "event_id": "evt-04613407a08ca4f6dd91b46b", "kind": "unclassified_tcp", "frame_number": 60843, "timestamp_epoch": "1634916242.906936000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020012c90a000000" } }, { "event_id": "evt-9500a704920dd719217e89d9", "kind": "unclassified_tcp", "frame_number": 60849, "timestamp_epoch": "1634916243.090379000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010058a10c000000197b0407010058a10e00000005020002" } }, { "event_id": "evt-bb226da69951fa8496bdc33b", "kind": "unclassified_tcp", "frame_number": 60850, "timestamp_epoch": "1634916243.090921000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010058a10c0000000502" } }, { "event_id": "evt-c1ee647b683285528ba7ec7b", "kind": "unclassified_tcp", "frame_number": 60853, "timestamp_epoch": "1634916243.726661000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6b36c9412fa70aa189f123f9", "kind": "unclassified_tcp", "frame_number": 60855, "timestamp_epoch": "1634916243.727377000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010058a10c0000000100" } }, { "event_id": "evt-d26b621c2a543bd19648ae24", "kind": "unclassified_tcp", "frame_number": 60858, "timestamp_epoch": "1634916244.238272000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a11400000005010001229513f20019" } }, { "event_id": "evt-602a7c477371ac7a64e2b9e4", "kind": "unclassified_tcp", "frame_number": 60864, "timestamp_epoch": "1634916244.288939000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a114000000050000010a0a169cc38a" } }, { "event_id": "evt-a732b044bd5debc081442cdc", "kind": "unclassified_tcp", "frame_number": 60867, "timestamp_epoch": "1634916244.446100000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a1260000003232302d45534d5450206d782e686f7374696e6765722e636f6d0d0a" } }, { "event_id": "evt-295575861648358f8cf82832", "kind": "unclassified_tcp", "frame_number": 60876, "timestamp_epoch": "1634916245.161181000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50169, "dst_port": 1187, "tcp_stream": 1222, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-707d8d276422350d1a9dc84f", "kind": "unclassified_tcp", "frame_number": 60892, "timestamp_epoch": "1634916249.556856000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50170, "dst_port": 1187, "tcp_stream": 1224, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-53c2d6f14437f68deb4190ef", "kind": "unclassified_tcp", "frame_number": 60900, "timestamp_epoch": "1634916250.694430000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a1260000003232302045534d5450206d782e686f7374696e6765722e636f6d0d0a" } }, { "event_id": "evt-f00e02ced7c4e573f6e0650a", "kind": "unclassified_tcp", "frame_number": 60903, "timestamp_epoch": "1634916251.080858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a11a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ff7ab7e55d04f4bb7f9419c4", "kind": "unclassified_tcp", "frame_number": 60908, "timestamp_epoch": "1634916251.227640000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a1a20000003235302d6763702d6575726f70652d77657374342d632d736d7470696e342e686f7374696e6765722e696f0d0a3235302d504950454c494e494e470d0a3235302d53495a452036393733303330340d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-77b83cfa9ce23025de7ef067", "kind": "unclassified_tcp", "frame_number": 60912, "timestamp_epoch": "1634916251.491857000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a1140000005354415254544c530d0a" } }, { "event_id": "evt-f5c58a4979626cf00c60af9a", "kind": "unclassified_tcp", "frame_number": 60917, "timestamp_epoch": "1634916251.666414000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a12800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-44c8a9cde52973005ac2bdab", "kind": "unclassified_tcp", "frame_number": 60922, "timestamp_epoch": "1634916251.980184000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-99e3732b9d7fbf6d1a728e72", "kind": "unclassified_tcp", "frame_number": 60930, "timestamp_epoch": "1634916252.165995000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1175303218539a75e62ae2fb", "kind": "unclassified_tcp", "frame_number": 60931, "timestamp_epoch": "1634916252.166008000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2ee0c24b4a1dfde709afeef9", "kind": "unclassified_tcp", "frame_number": 60932, "timestamp_epoch": "1634916252.166016000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "5c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238" } }, { "event_id": "evt-e6d384bc7e4588f513e70c83", "kind": "unclassified_tcp", "frame_number": 60939, "timestamp_epoch": "1634916252.168593000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f041bfeb42222574fbe53566", "kind": "unclassified_tcp", "frame_number": 60940, "timestamp_epoch": "1634916252.168608000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "4fd53ebe96b0ebc8daeef5e1bd55b2e1dd0514e16d684df4a7ae0abf10ea73a2a0f3f9ebc1212fc404e410c6d16c1ba222800256276b97c56ead2f2c735246f0c2ebc34c332a75ac0f25fbdd9259f71b83831b0e41a714e665c1553caccd7c2100ee6a19150f5f294bcac4990516030300040e000000" } }, { "event_id": "evt-b2e1281338885afd5433e19e", "kind": "unclassified_tcp", "frame_number": 60944, "timestamp_epoch": "1634916252.656681000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a18800000016030300461000004241043a65eee9002f3d7ea4e7230fc0c10a3d66c16df359278b1f99764dfcbc0839939effe657ace79263cfd8550d83b019ae21f604ebd616d746d23962e007e5eb7f14030300010116030300280000000000000000e7555638257a9cc1d8b4a6a2bb9b68ca6b6ae5bd139d80d0027479632d929e74" } }, { "event_id": "evt-9db3e81382845cfe32a83975", "kind": "unclassified_tcp", "frame_number": 60949, "timestamp_epoch": "1634916252.798260000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a13d00000014030300010116030300285167cb95c20cf73fbb123d5e1bfc350eecf1fbf52009eb4cc42768d98fb10019e7a3715defd509fb" } }, { "event_id": "evt-17936443969a855300eccf84", "kind": "unclassified_tcp", "frame_number": 60954, "timestamp_epoch": "1634916253.100876000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a13700000017030300280000000000000001f4f967849c8a05e37e7f541dd0262711333055f556b3d02a57897cbafc86681a" } }, { "event_id": "evt-8f2fbdd2f126c3b76d8a4833", "kind": "unclassified_tcp", "frame_number": 60959, "timestamp_epoch": "1634916253.250332000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a1b100000017030300a25167cb95c20cf740017b23b86f19d0e8be71b5cb09a116e05033ad9dbcc857b3936f9dce7ed6fb677c9f2b1d86733aaece04796634eaaf55b7d087f14d3cbbaf51ec7e943fc367ceadd06af9b7e06c77ddf913a8bd68cc935d558de10cc25e6b9fad20cd4519716c7d76fd1a7c7dfda45ca2ba5bfb30a79693519b72332312cd59fcb36f2f566052c8538978d2ec184a3c98f4796b29d23c795b4e528402c3b7c1c9" } }, { "event_id": "evt-ad09d043d5ee178b646beb82", "kind": "unclassified_tcp", "frame_number": 60965, "timestamp_epoch": "1634916253.743218000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a15c000000170303004d00000000000000027688c644363f18c27452b49ddb35870376e07edffee48719dcafc1165d92b692d2e2e16c948d2a39ae05322a814f41c5560dd858b389c27e9ccabe01abfb7cb1ca38ae4a00" } }, { "event_id": "evt-f2e9df19403aac3e92f70499", "kind": "unclassified_tcp", "frame_number": 60972, "timestamp_epoch": "1634916253.911391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a15400000017030300455167cb95c20cf7419a00f6dfec0502bf70cc6cc5e93f52aa7cf9a0eff1461085ff812faee83a972fe212f2de7fb8decaaf4d12ff25ba90cc37f1873f1897a373169eca9ba6" } }, { "event_id": "evt-3cc0e1725b7f9d5e9d9afec7", "kind": "unclassified_tcp", "frame_number": 60976, "timestamp_epoch": "1634916253.932209000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50171, "dst_port": 1187, "tcp_stream": 1227, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d546034b1665f763379eb8b4", "kind": "unclassified_tcp", "frame_number": 60980, "timestamp_epoch": "1634916254.157633000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a12a000000170303001b0000000000000003f9c94b74c57920f42e5213f4aeb62cf596cab2" } }, { "event_id": "evt-c8024f1343a0a3b6065902c6", "kind": "unclassified_tcp", "frame_number": 60986, "timestamp_epoch": "1634916254.314247000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a15000000017030300415167cb95c20cf742f64b03186c3bd1130eecad2883f15edbfdcea8435e36711f12380e5ffa5a6a73e107697b551cb1da55f0cda88fda4c60e738d92a11fb709809" } }, { "event_id": "evt-408f5fab6309a29b9e2b0518", "kind": "unclassified_tcp", "frame_number": 60989, "timestamp_epoch": "1634916255.005202000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a12d000000170303001e000000000000000489b5267adcf394e1b099b34f6cdf7e669b97b97ad95e" } }, { "event_id": "evt-75cc6eda4e6d0e3a35d930b8", "kind": "unclassified_tcp", "frame_number": 60997, "timestamp_epoch": "1634916256.158525000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a15500000017030300275167cb95c20cf743f18f79b7df40a6e04d71da14739c0ad4058498824c0089015ea4a7669cdb48150303001a5167cb95c20cf744c17161a55aef135ae0a5e745f7c69e8c1d40" } }, { "event_id": "evt-2a448c3b738ce95a85676c44", "kind": "unclassified_tcp", "frame_number": 61001, "timestamp_epoch": "1634916256.420263000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010058a129000000150303001a0000000000000005a3474d9a671460c221c29a31702838256c5d" } }, { "event_id": "evt-3a63041a0a408ae58d163152", "kind": "unclassified_tcp", "frame_number": 61009, "timestamp_epoch": "1634916256.567700000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010058a10a000000" } }, { "event_id": "evt-db5f95cc1d4965d90f9155db", "kind": "unclassified_tcp", "frame_number": 61011, "timestamp_epoch": "1634916256.601081000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010058a10a000000" } }, { "event_id": "evt-b1a9311c0bf18b55c7365a9a", "kind": "unclassified_tcp", "frame_number": 61018, "timestamp_epoch": "1634916258.279838000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50172, "dst_port": 1187, "tcp_stream": 1228, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-caa7b981bad6217b370db17c", "kind": "unclassified_tcp", "frame_number": 61030, "timestamp_epoch": "1634916262.581634000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50173, "dst_port": 1187, "tcp_stream": 1230, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-14a5f2c02f8974828ee2e726", "kind": "unclassified_tcp", "frame_number": 61039, "timestamp_epoch": "1634916265.751861000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-57942736c39db4e4d0756173", "kind": "unclassified_tcp", "frame_number": 61045, "timestamp_epoch": "1634916266.884696000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50174, "dst_port": 1187, "tcp_stream": 1232, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f99f505dbdc149bd62388b29", "kind": "unclassified_tcp", "frame_number": 61047, "timestamp_epoch": "1634916266.907819000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50174, "dst_port": 1187, "tcp_stream": 1232, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dec465d031c5c25f7053cb71", "kind": "unclassified_tcp", "frame_number": 61067, "timestamp_epoch": "1634916271.241130000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50175, "dst_port": 1187, "tcp_stream": 1235, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-388f9f10b922c382967b287a", "kind": "unclassified_tcp", "frame_number": 61084, "timestamp_epoch": "1634916275.628570000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50176, "dst_port": 1187, "tcp_stream": 1237, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-48191d35e4f3a9dfaf54ac9c", "kind": "unclassified_tcp", "frame_number": 61101, "timestamp_epoch": "1634916279.994299000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50177, "dst_port": 1187, "tcp_stream": 1239, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6d59419e0445527f6cf2b768", "kind": "unclassified_tcp", "frame_number": 61116, "timestamp_epoch": "1634916284.316097000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50178, "dst_port": 1187, "tcp_stream": 1242, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-db1cd5ca2bd05fa196ca2610", "kind": "unclassified_tcp", "frame_number": 61130, "timestamp_epoch": "1634916288.630724000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50179, "dst_port": 1187, "tcp_stream": 1244, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a1f95fd67ef917a60b8dddda", "kind": "unclassified_tcp", "frame_number": 61146, "timestamp_epoch": "1634916292.952060000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50180, "dst_port": 1187, "tcp_stream": 1247, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-60be9216f6da776f2b0e2ffc", "kind": "unclassified_tcp", "frame_number": 61148, "timestamp_epoch": "1634916293.032732000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50180, "dst_port": 1187, "tcp_stream": 1247, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e76bbf7ab29db6837c0349c5", "kind": "unclassified_tcp", "frame_number": 61156, "timestamp_epoch": "1634916295.049197000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010016370c000000197b" } }, { "event_id": "evt-836daf91943512ed3eda6ce3", "kind": "unclassified_tcp", "frame_number": 61158, "timestamp_epoch": "1634916295.236651000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016370e000000050200020207020060950c000000197b0407020060950e00000005020002" } }, { "event_id": "evt-c2f49d8103330ef541609779", "kind": "unclassified_tcp", "frame_number": 61159, "timestamp_epoch": "1634916295.237172000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010016370c00000005020307020060950c0000000502" } }, { "event_id": "evt-3699ea9f47dd90c203758e02", "kind": "unclassified_tcp", "frame_number": 61164, "timestamp_epoch": "1634916295.503872000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100163720000000010432356d630f356f504d44384828685558534a2a5704070200609520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-39634c3ea2c6a38cd61c8331", "kind": "unclassified_tcp", "frame_number": 61165, "timestamp_epoch": "1634916295.504366000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010016370c00000001000307020060950c0000000100" } }, { "event_id": "evt-f1498b676c327eae106fc182", "kind": "unclassified_tcp", "frame_number": 61167, "timestamp_epoch": "1634916295.613099000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-278d939139b3c2a043a7d3d6", "kind": "unclassified_tcp", "frame_number": 61169, "timestamp_epoch": "1634916295.815573000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016372600000005010003156d61696c2e6272696e732d642d657665696c2e667200190407020060951f000000050100030e6d61696c2e6d61636c656e2e66720019" } }, { "event_id": "evt-a3e4e1500badbe241e14caad", "kind": "unclassified_tcp", "frame_number": 61184, "timestamp_epoch": "1634916296.420356000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100163714000000050000010a0a169cc38f04070100163734000000323230204741524d2d393852303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-895449b5b370703d4993c1b0", "kind": "unclassified_tcp", "frame_number": 61189, "timestamp_epoch": "1634916296.572346000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200609514000000050000010a0a169cc390" } }, { "event_id": "evt-64054d22cc0dd89f258777d1", "kind": "unclassified_tcp", "frame_number": 61191, "timestamp_epoch": "1634916296.701755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016371a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-d366124be5b3c451e9d79cdb", "kind": "unclassified_tcp", "frame_number": 61196, "timestamp_epoch": "1634916296.848435000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001637990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-608bc679ef23b8d311fa24cd", "kind": "unclassified_tcp", "frame_number": 61200, "timestamp_epoch": "1634916297.020932000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200609534000000323230204741524d2d393547303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-94b81754a9b3b72facf25b83", "kind": "unclassified_tcp", "frame_number": 61204, "timestamp_epoch": "1634916297.116562000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001637140000005354415254544c530d0a" } }, { "event_id": "evt-4c9684aaa491964c266bf6aa", "kind": "unclassified_tcp", "frame_number": 61212, "timestamp_epoch": "1634916297.267994000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016372800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-8675a8acae8612951f3be57f", "kind": "unclassified_tcp", "frame_number": 61216, "timestamp_epoch": "1634916297.306933000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50181, "dst_port": 1187, "tcp_stream": 1251, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-20f85e17ced0f7ce30a60f71", "kind": "unclassified_tcp", "frame_number": 61219, "timestamp_epoch": "1634916297.333329000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060951a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b6479cf10f24550df6d50ccf", "kind": "unclassified_tcp", "frame_number": 61225, "timestamp_epoch": "1634916297.491999000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006095990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-4742dfd3bcccdcea45941fa3", "kind": "unclassified_tcp", "frame_number": 61228, "timestamp_epoch": "1634916297.603882000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-88bcb45ed70531146a671398", "kind": "unclassified_tcp", "frame_number": 61233, "timestamp_epoch": "1634916297.764750000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016376a05000016030312330200005103036172d7c93b938d06a349e15b42c25a06313854896d2242a2d6e6eb45fd5f221620ba1700008291341dbdf4e75dba0d27b8c96e21a31858a080345ff7018441e9b3c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6" } }, { "event_id": "evt-f90a7b265ae8d56508bf02b7", "kind": "unclassified_tcp", "frame_number": 61239, "timestamp_epoch": "1634916297.768355000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e6390d5c09c6a9a6e6e5d2dc", "kind": "unclassified_tcp", "frame_number": 61240, "timestamp_epoch": "1634916297.768370000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-94cf30ed9465ca6c388082cc", "kind": "unclassified_tcp", "frame_number": 61241, "timestamp_epoch": "1634916297.768378000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-955682bc7420978d6d6a7fb7", "kind": "unclassified_tcp", "frame_number": 61245, "timestamp_epoch": "1634916297.812509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006095140000005354415254544c530d0a" } }, { "event_id": "evt-32e98dfc9a73cfc7f42fe4b0", "kind": "unclassified_tcp", "frame_number": 61250, "timestamp_epoch": "1634916297.966611000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060952800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5a77c8b9104465a421a9029c", "kind": "unclassified_tcp", "frame_number": 61253, "timestamp_epoch": "1634916298.201674000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001637e4000000160303008a10000086850400d3f7e911c4db9c0854a058033f18e5a099b7089152743023b10376be9feecba633834c2a69e77eb23518eb2db3faa56d8940aa98c4445058b2c0f42af18301ab6700c9072d98677b06b16904701d91025d9e14db615937b96650b3972559a6db9a894c07ac4e8ae4581ac34b582570d8a455994417b3bc15c1dafc5ced93a59ab59a541403030001011603030040736c37252a4951a7889b7ed6ae2fc61515f11254826f24b1fe9e083731a6d209755ce92b8dadfe2a56a952a4dbbf5aa99f1c78637518c01e22d8cb9fbf476a65" } }, { "event_id": "evt-aa6125e381a9655b15dd7ec1", "kind": "unclassified_tcp", "frame_number": 61259, "timestamp_epoch": "1634916298.373571000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016375500000014030300010116030300405405b58eb41739b8183e58dd16f9d093b2490244608f1851085baaed203ef14b46fb584fe3a13bbefc5db6dd0a286ce8d2a347fdc48db61013d896b09715c52d" } }, { "event_id": "evt-ba18ef2fe59258fb63abd91e", "kind": "unclassified_tcp", "frame_number": 61261, "timestamp_epoch": "1634916298.406666000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-adf3899bf5dc62aeb07e628b", "kind": "unclassified_tcp", "frame_number": 61271, "timestamp_epoch": "1634916298.605781000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006095220f000016030312330200005103036172d7ca7445a0a72ebb0f2a62ec96b63d81a19527fe1c0041e77009dfeebf5820e43c0000a124594fbf37ab32920c413c5e524d7d4489f975f1c26c63941af503c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-be8a2fae18d86f9bcf7d9866", "kind": "unclassified_tcp", "frame_number": 61272, "timestamp_epoch": "1634916298.605803000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-79ccbb4e865dc751f30c9677", "kind": "unclassified_tcp", "frame_number": 61273, "timestamp_epoch": "1634916298.605815000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4cb73f3f29a007b6aa20d460", "kind": "unclassified_tcp", "frame_number": 61279, "timestamp_epoch": "1634916298.610014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9a883de7b5dfb70f074a808e", "kind": "unclassified_tcp", "frame_number": 61281, "timestamp_epoch": "1634916298.774622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016374f00000017030300408de87feb0a0de2db54220b197fe977eaee9a2a9fef7d893e21298d1f6f49db8d46eb1981da5818afd79cbb274d10214fd2df25ceb0cff16bc337dce78dafedd9" } }, { "event_id": "evt-c2ee70854946a60fa2795255", "kind": "unclassified_tcp", "frame_number": 61286, "timestamp_epoch": "1634916298.933370000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6b41f91805623f6513e5ca82", "kind": "unclassified_tcp", "frame_number": 61288, "timestamp_epoch": "1634916298.963834000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006095e4000000160303008a10000086850401195d9c96cf408a816ffc01ad36bb1f106d0f548506f03f0d76b9df23cb7c082474d02435d2b5ef213249b20b86dea1f758e0514f3362ec96be1fb3e466729ca5740162bea26e3df00ff6e00da2e96d68b63dfc1ba372cad6aa9eef0b63d3d37e59e6232b19348fb6af986467b7f30eaaf3c17f4a89fe621c35a5c0bbdad588f37dfa4d14030300010116030300400cabec572267691c5f2497df068e534fb005ca80829d805f30e1e42cb7addcd53d01a242e91ce07f7c0a10bd24e96b3f64330fd64f517562490a09bcd1ecd971" } }, { "event_id": "evt-9476452f322e5ab6f3f0e02c", "kind": "unclassified_tcp", "frame_number": 61295, "timestamp_epoch": "1634916299.124157000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006095550000001403030001011603030040a6f2ba8e89f31aee785cb6fbfce11c3c74e30de522da650fcabaa99bfa1765457d6476db1e2f473da7a86964311511ebc0f05f48d3f5394de92a1989c98eac0c" } }, { "event_id": "evt-1c4450858fa7242607b38ee8", "kind": "unclassified_tcp", "frame_number": 61299, "timestamp_epoch": "1634916299.484642000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f0000001703030040541036b5d162694f9c88bdf7755fde21b18d678f5a05de6351776642907b92c0a19876cfd93efebcba1c50ce50fca7b0f2a0dae3c38c36655c59ccbeecb95f77" } }, { "event_id": "evt-7945e39eddfe53fe45fe34c1", "kind": "unclassified_tcp", "frame_number": 61304, "timestamp_epoch": "1634916299.653596000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ffdfb145f9b5a33ec94a88d1", "kind": "unclassified_tcp", "frame_number": 61307, "timestamp_epoch": "1634916299.722845000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016374f00000017030300401874a94ceae1cf9c2cd52e34253c7c05adc74a8dc2b6610be8affedb798cbb7fec38f5777900b687ebe95580d572c8dd92fa240c4b0002b676cd6c5810eea73f" } }, { "event_id": "evt-fbdb86fa90eff7376c93094f", "kind": "unclassified_tcp", "frame_number": 61312, "timestamp_epoch": "1634916299.879329000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016374f000000170303004007417cfcf64d8bade950d0196f9e2d3f723dc94d2fe80b0aa82534b18e9161408d45e27eb50a6c73c0189ed86deb8c10247809effdabbf0ce4832e4a7d63cba7" } }, { "event_id": "evt-33e3321a669d5d41851d3f72", "kind": "unclassified_tcp", "frame_number": 61315, "timestamp_epoch": "1634916300.147618000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016375f0000001703030050378bc9209b720325c480fbbdcb3aee2dd40e1feb3de8a3327dbd9086d9143b93dbaadb9e374ddd5d720ad987474e974f06c5ebac976c8e1115d882acbdb70f8c2dacbab7f649e827a8f52d975c2544a4" } }, { "event_id": "evt-3eaeeccabf0e57c112fa0623", "kind": "unclassified_tcp", "frame_number": 61321, "timestamp_epoch": "1634916300.297197000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016374f00000017030300408879130f1a90a31e5a0663675bf220d236048249470d190399308e401d5dcdac9258f9c9d2f211cb59d3657fe32b995230e0ef4c51410b5f2971804e9c4892b4" } }, { "event_id": "evt-84b3b35ba6c33df86ffb0983", "kind": "unclassified_tcp", "frame_number": 61324, "timestamp_epoch": "1634916300.570628000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016374f00000017030300403f113c8c956dced58653cce66b98f8c86688eeaa30fd9e07122564287d86189e500106b45d8c2e832893d9ec47a6826743c0c75f1e48503209f76de4e6c88ec2" } }, { "event_id": "evt-b2b9c919ed99458242849688", "kind": "unclassified_tcp", "frame_number": 61332, "timestamp_epoch": "1634916300.937881000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f00000017030300405939e076a9a243ee9d71a61d9bc182a4bc4341e2f942dd27ae975da44413df34f0969380a7667fb4e4330d8ff1084b3cae25a805b15894c6949cde31bb0efdef" } }, { "event_id": "evt-c0789e881efd81b42b4328bc", "kind": "unclassified_tcp", "frame_number": 61339, "timestamp_epoch": "1634916301.084844000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f0000001703030040d6949ee4c5313242d6167b61bd0aae6e6b43c3c227588e4f45bb53a8a967767bee6ccc9b4399c902722d89894d20332aa5244376ff9f38684a1c423fdf410798" } }, { "event_id": "evt-778b9edfb888b7385a12489f", "kind": "unclassified_tcp", "frame_number": 61343, "timestamp_epoch": "1634916301.453430000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f0000001703030040e835bc8689519cfe7c65bfce4b2504a6d397ade008147ae69ddf3b5a16b28ceb041c11215dbe056c6aba36e9f4865a1c2d6b2cb317c52d2f0e97d363197e4998" } }, { "event_id": "evt-97ada694a7bb199216fc9ec7", "kind": "unclassified_tcp", "frame_number": 61351, "timestamp_epoch": "1634916301.595272000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f000000170303004008e9a4164b8a137e7d692c2e36e0cb00ffce1266a1507c29ae2a09e6619f8b8fa43e4579962e346f39f4e19274ecc01d5c929e8ec34f81372282f60a48e5a3b1" } }, { "event_id": "evt-a0d2da65220e5c84c99cd3f6", "kind": "unclassified_tcp", "frame_number": 61355, "timestamp_epoch": "1634916301.652131000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50182, "dst_port": 1187, "tcp_stream": 1253, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e4ff01b59b377cddbae27a24", "kind": "unclassified_tcp", "frame_number": 61361, "timestamp_epoch": "1634916301.863860000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060954f00000017030300405cc86a4e623e815ec4f00719944db74adeb0140c4d1508fd580f05b3f746aa4b89513511b0c946329a6daad9a2c9ceac87b2fa3b4b5e385cb841cd614a171e2d" } }, { "event_id": "evt-4ee928f72d4be628ba737d65", "kind": "unclassified_tcp", "frame_number": 61366, "timestamp_epoch": "1634916302.223630000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016375f000000170303005003a4ddd53802293f7ca17ea43db5853e32a311c8584d54687fe1485f03d27e74faf777a1b8856964e26cb2cd7ae8f42de97c62aa362f68367e93a1488671205730204e7031e925c6d364c679b2ba6d47" } }, { "event_id": "evt-bf3ef77e7e920fa9ea0de2db", "kind": "unclassified_tcp", "frame_number": 61370, "timestamp_epoch": "1634916302.579731000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016373f00000017030300306bf0e6615aa6be98ae4c2678a78341e6c1baf4bf08ae5639ebfd1d798e40e8a240accc7f5a86ecb3318b30c20a184d0a" } }, { "event_id": "evt-3ccfae9cfa2d21606cf40bb5", "kind": "unclassified_tcp", "frame_number": 61377, "timestamp_epoch": "1634916304.451033000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060955f0000001703030050b60a16c7278b24ae6804815665e0c5a094f744ff6d63ed9b4490426a13c7c2d192e196d9d3a8e40bc5ec8acf009a46521bb8c52c0f6900287fd61e7fdf91cbeac2b6bb46479570c3dc34ff5b7445dcbd" } }, { "event_id": "evt-22353c2b358e41be5693b7c6", "kind": "unclassified_tcp", "frame_number": 61380, "timestamp_epoch": "1634916304.790990000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060953f0000001703030030720ae531063baf6a639d1486491890a63da5ce60a67165cd526f863592d2b93c6ad57c974f5070b69b15ec0ebf42f503" } }, { "event_id": "evt-1e4ac89cbc0592e28c6c456c", "kind": "unclassified_tcp", "frame_number": 61390, "timestamp_epoch": "1634916306.016927000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1dcf8965b43f8bd3cc1e24a8", "kind": "unclassified_tcp", "frame_number": 61392, "timestamp_epoch": "1634916306.111990000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3e1be80e46d7db67caf591ee", "kind": "unclassified_tcp", "frame_number": 61398, "timestamp_epoch": "1634916308.239410000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703007db00c000000197b" } }, { "event_id": "evt-1b7ee8ae8b855e5f0d8e41a5", "kind": "unclassified_tcp", "frame_number": 61401, "timestamp_epoch": "1634916308.431963000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db00e00000005020002" } }, { "event_id": "evt-db037792d0597ed0ecf82c4f", "kind": "unclassified_tcp", "frame_number": 61402, "timestamp_epoch": "1634916308.432539000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703007db00c0000000502" } }, { "event_id": "evt-6bf2b34a0469556d994261c6", "kind": "unclassified_tcp", "frame_number": 61404, "timestamp_epoch": "1634916309.212998000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9c91f51384cfb7feb117c1ed", "kind": "unclassified_tcp", "frame_number": 61405, "timestamp_epoch": "1634916309.213652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703007db00c0000000100" } }, { "event_id": "evt-ea485765af7f36cf6ba7f3c1", "kind": "unclassified_tcp", "frame_number": 61408, "timestamp_epoch": "1634916309.469721000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db01f000000050100030e6d61696c2e6d61636c656e2e66720019" } }, { "event_id": "evt-237c290a93d91af610040362", "kind": "unclassified_tcp", "frame_number": 61413, "timestamp_epoch": "1634916309.646444000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db014000000050000010a0a169cc392" } }, { "event_id": "evt-8251aa1b15a2923fa6734559", "kind": "unclassified_tcp", "frame_number": 61417, "timestamp_epoch": "1634916309.803406000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db034000000323230204741524d2d393852303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ac94b29904d5846f9abb0942", "kind": "unclassified_tcp", "frame_number": 61421, "timestamp_epoch": "1634916310.287430000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db01a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f7022dea2c891dc201c74dea", "kind": "unclassified_tcp", "frame_number": 61426, "timestamp_epoch": "1634916310.437778000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db0990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-78742b7bf51db3e2c85ddbee", "kind": "unclassified_tcp", "frame_number": 61429, "timestamp_epoch": "1634916310.669456000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070400275a0c000000197b" } }, { "event_id": "evt-eaf6217d7ac2383705808f59", "kind": "unclassified_tcp", "frame_number": 61431, "timestamp_epoch": "1634916310.874361000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a0e00000005020002040703007db0140000005354415254544c530d0a" } }, { "event_id": "evt-fca8d677c7dd19a0feff847e", "kind": "unclassified_tcp", "frame_number": 61432, "timestamp_epoch": "1634916310.874918000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400275a0c0000000502" } }, { "event_id": "evt-ce9ba6275586140e196dddef", "kind": "unclassified_tcp", "frame_number": 61437, "timestamp_epoch": "1634916311.016577000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db02800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5e350cd16dde99d469995833", "kind": "unclassified_tcp", "frame_number": 61440, "timestamp_epoch": "1634916311.119534000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-475da3188772b38e2905d2c2", "kind": "unclassified_tcp", "frame_number": 61441, "timestamp_epoch": "1634916311.120110000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400275a0c0000000100" } }, { "event_id": "evt-ff93dfb9feaa7fcfb9a40bde", "kind": "unclassified_tcp", "frame_number": 61443, "timestamp_epoch": "1634916311.158721000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9a043222c81e070ede3740ab", "kind": "unclassified_tcp", "frame_number": 61446, "timestamp_epoch": "1634916311.437055000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ec8a117b6a50b23c6a778f9e", "kind": "unclassified_tcp", "frame_number": 61455, "timestamp_epoch": "1634916311.599938000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-71b5b6639becf90263108cfb", "kind": "unclassified_tcp", "frame_number": 61456, "timestamp_epoch": "1634916311.599951000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-129684d84c0585411b35ffb7", "kind": "unclassified_tcp", "frame_number": 61457, "timestamp_epoch": "1634916311.599959000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2b677a93ed312bce34c2964e", "kind": "unclassified_tcp", "frame_number": 61461, "timestamp_epoch": "1634916311.600247000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f76a82759699966a67b28e07", "kind": "unclassified_tcp", "frame_number": 61463, "timestamp_epoch": "1634916311.628339000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a1f000000050100030e6d61696c2e6d61636c656e2e66720019" } }, { "event_id": "evt-9972b9d0fb35e2e7e4992cc2", "kind": "unclassified_tcp", "frame_number": 61468, "timestamp_epoch": "1634916311.778909000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a14000000050000010a0a169cc393" } }, { "event_id": "evt-8e0c65763f4d697df4ab66d7", "kind": "unclassified_tcp", "frame_number": 61471, "timestamp_epoch": "1634916311.932345000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a34000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-317f0de0fbb8f02bc87aa36c", "kind": "unclassified_tcp", "frame_number": 61473, "timestamp_epoch": "1634916311.945102000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db0e4000000160303008a10000086850400c318ae4328aab7bc0a9d67b9ab31ed00ddf065c5d5d3ea1ec22953c38bf9452a120cc913d80693c6a77b37c4a5af3109fb2f57d0eec06825bd6cbfcf3c14e3294d00fc551bf5eb716ec2edc679f61a961266a760f98a4b96fcb14cd1c7c2c1c3cff04ae5c43eac8b9fed7c82a89e31cfd2bf073bc34927f9262e81c33ad391ab06d4b2140303000101160303004039548f6bd46bdd51f81de13025eba676ca3e97cdd39ae1ff143e0d78e16507e35f48329127d24566482c1ed930d5e873b85a9d35b993892d7c4ed9cded5cf297" } }, { "event_id": "evt-7a65412593b1ac85e1fd1c6c", "kind": "unclassified_tcp", "frame_number": 61479, "timestamp_epoch": "1634916312.104894000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db0550000001403030001011603030040e49c90fc8ab3610b8f2c99de47d449e39a49dd5f922271c6bfe873fe2a4b5b98c1f3eb4b4b9484bb9af22480cd13f9acadb64af4bbe3669bd8c541982b421865" } }, { "event_id": "evt-b43163b09317ad0405135dfd", "kind": "unclassified_tcp", "frame_number": 61482, "timestamp_epoch": "1634916312.279868000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ce3081a2689082bc2863c4bc", "kind": "unclassified_tcp", "frame_number": 61488, "timestamp_epoch": "1634916312.453315000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-32fa7d0ce2bba1c45914c19f", "kind": "unclassified_tcp", "frame_number": 61490, "timestamp_epoch": "1634916312.465092000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f0000001703030040e9304925ce537c1073d029d7218487bb31bf7f0f9bce328eeb5889815d12838fa8c6fa0eed48ae9040c230c468b5875dda93c0b1270dd650ad5869c3086cc310" } }, { "event_id": "evt-8f046ddebc1d244e2e1665c2", "kind": "unclassified_tcp", "frame_number": 61498, "timestamp_epoch": "1634916312.612787000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e1d29fd878b89859bfc28c1e", "kind": "unclassified_tcp", "frame_number": 61500, "timestamp_epoch": "1634916312.765769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a140000005354415254544c530d0a" } }, { "event_id": "evt-6b2b3133942fa1f290885c0e", "kind": "unclassified_tcp", "frame_number": 61505, "timestamp_epoch": "1634916312.915484000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-4df762d80558c59e98f236b9", "kind": "unclassified_tcp", "frame_number": 61509, "timestamp_epoch": "1634916313.268284000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-17898de46cf2f4dacf9664eb", "kind": "unclassified_tcp", "frame_number": 61516, "timestamp_epoch": "1634916313.438317000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275aba0a000016030312330200005103036172d7d9385dc7e39575eebedc243191c5fdc9c238e5d21bbe868ca0b7f8a43c20fe2d00009041123fea6848d1952c97b16eb88d1656e529903c19fff893e6ccd4c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-013e01e21abb6d541df42924", "kind": "unclassified_tcp", "frame_number": 61517, "timestamp_epoch": "1634916313.438338000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d25" } }, { "event_id": "evt-5f09effbe7dc600848b24cf4", "kind": "unclassified_tcp", "frame_number": 61523, "timestamp_epoch": "1634916313.441022000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5a0fab39deaa02536ef2baf", "kind": "unclassified_tcp", "frame_number": 61524, "timestamp_epoch": "1634916313.441038000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-20c5cc639c7542a64bf64df1", "kind": "unclassified_tcp", "frame_number": 61528, "timestamp_epoch": "1634916313.974799000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f0000001703030040d4f3b25dcc211bb10fe9b11e08d6f6df1b9ab02ab6da429d7c85a9fd209a3b321de99ec413c77e8e9ac86bf778b79800252aba78a96c9f8401ac5b8df67f746c" } }, { "event_id": "evt-a9d643443eaef974b9e289ba", "kind": "unclassified_tcp", "frame_number": 61533, "timestamp_epoch": "1634916314.118785000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f000000170303004096b029ff557b39d7f428cdef5f3b2c73794cf266110bf4a144f2421eb478fa943fed164cd2e41825fdd972346ba7f3d063f2113dce3691cacbef4286519b0957" } }, { "event_id": "evt-3224e340f7c3dc6901d6c8e8", "kind": "unclassified_tcp", "frame_number": 61535, "timestamp_epoch": "1634916314.154414000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275ae4000000160303008a10000086850401c236e9bc9afc99fd9439f2f40482f05f4735dbf81cca51ff9c504710f1a51577158930c0a4d9865968c5afcb5f887807905eb4f8f9ca26ac830cefd579ea1b394c01c122390067e39b9f83175477cc7a861895a535aa59dd32dfa097829a08d28f215d5c3a3929dff59e280ed487b66533ea1fa3e7cab8de4ff6b73372154004d3870c1403030001011603030040eb5ba3e7ae0c1dced4bd68237769c99012ddc788d2ac9e1acb74caaf0937f18ae7291f06d803ca2139cadbddf457950c9bc96e2f3f21faf67b2ab2a8e656180b" } }, { "event_id": "evt-d7fb75d2e708d5894093916a", "kind": "unclassified_tcp", "frame_number": 61542, "timestamp_epoch": "1634916314.316727000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a550000001403030001011603030040de865143e7e74adfb4e9946cabc261d5488a8f9b30f736eb7da666f6536026c12dcdb8cfd8d7fd393acfe3c0672925f027265bb7deaac2dccefe3bec915a09e3" } }, { "event_id": "evt-c2283076501c96853f555df9", "kind": "unclassified_tcp", "frame_number": 61545, "timestamp_epoch": "1634916314.503018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f00000017030300402b959012c6666024d137149b30e2d91dd706d3cb41b0f89c7d7adcf6cb038427c0b4be19e35bf9c1369d6600bf6cb7bad7d11ff17fcf1295b45fbee283466cc2" } }, { "event_id": "evt-4ca68154b8e5ccfd00c2e1ef", "kind": "unclassified_tcp", "frame_number": 61550, "timestamp_epoch": "1634916314.663567000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f00000017030300400fe76e15c0958a18b00cbe99c8966c60c018ee4b57921c091435a56b0c95cd4d888e7ec4aebb6d74d0a6d7f45fc7cdf4450e0b9fbb95c8ae988ccf001deaf97d" } }, { "event_id": "evt-163ffac488b13b3fd8e7f5f9", "kind": "unclassified_tcp", "frame_number": 61552, "timestamp_epoch": "1634916314.699463000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f000000170303004017a8988398860cfff4c2cd85e5adfe1f35f65b28486e8474c904802eb59aa17254a31010b88ce5cfe3abf01657bfe84adfaa87fda15286a9b8e3edc20c2d0b5f" } }, { "event_id": "evt-4ab3e156694df16d38bd989a", "kind": "unclassified_tcp", "frame_number": 61560, "timestamp_epoch": "1634916314.850774000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8075bfe5de7ddfeceae1bfd1", "kind": "unclassified_tcp", "frame_number": 61562, "timestamp_epoch": "1634916314.977071000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db04f00000017030300409f97b2e4d35c8bb3c81d09ef4ecb1ac3f82da29139a55a437a5f71179b47abd33cdc8c3ac73d6b9afca231a896bfe6ad0f6b644e96a6a331abd5ff91c0b6c08a" } }, { "event_id": "evt-42e45c2df6be0033357240cb", "kind": "unclassified_tcp", "frame_number": 61567, "timestamp_epoch": "1634916316.222076000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f00ae7730177e5e94c650382", "kind": "unclassified_tcp", "frame_number": 61569, "timestamp_epoch": "1634916316.232552000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f000000170303004030a68f80871c9a73bad84731691458cc12492d6a56068d9127a6b24e5326673561ba29fae847dc420a764db2b1a81a682e1c066c52b15ed0a44827e423ea1020" } }, { "event_id": "evt-2a9dfd1629ad0732155e9649", "kind": "unclassified_tcp", "frame_number": 61575, "timestamp_epoch": "1634916316.404817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f0000001703030040ada573e4d8d342e3c7dfac2ea35d8b439043d93b0e3d8976460f8f6f049fa48c3d694223f48b14cbcd4d7d5135b7eebd13c76f18593b13a33f4d82d70e84124f" } }, { "event_id": "evt-87d31981df1f948c5b871724", "kind": "unclassified_tcp", "frame_number": 61578, "timestamp_epoch": "1634916316.701658000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f0000001703030040acd535facf59d162a4d8ddd969bda78e67cbc0af6c261cc32d09e4b72e66275003f32fd34f574021a96134813d9141d64211943ee0093fcc391031ab33bee07e" } }, { "event_id": "evt-176237a28998ae77246871f5", "kind": "unclassified_tcp", "frame_number": 61583, "timestamp_epoch": "1634916316.878455000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f000000170303004041fd6ef70bc107777e0a6295caa943ab06225b4880227293dd4b18919f02880c6e5d4486b9fb279f709c382d0c233d463cdb3891d9623bf216d10a9ac9d00339" } }, { "event_id": "evt-7b07aeda8d5db24935dd82d2", "kind": "unclassified_tcp", "frame_number": 61586, "timestamp_epoch": "1634916317.127778000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a4f0000001703030040583d9873fceb83a96732f1bf5189989604affeacfb274ff91e856f53ccde861e40056fff1e056feacb6ee17b1e421bd46411b1e813443effd6952b8ac56d8f97" } }, { "event_id": "evt-68125ae49538770a73c6a16a", "kind": "unclassified_tcp", "frame_number": 61592, "timestamp_epoch": "1634916317.452459000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db05f0000001703030050c50fbec7366812935a21829b0b3182afd273dce2b7622a451eaa3aa7fef223a65bcb4d84b38ab1695155e44ef2d3db0fc1677529c7b98736b789197240000e4a73c98795e485c786759a3561e41892a3" } }, { "event_id": "evt-9abb50ac40dfbad93a70410a", "kind": "unclassified_tcp", "frame_number": 61596, "timestamp_epoch": "1634916318.274819000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db03f00000017030300309ccd133cdcbb4931c21529013185f909868923966fca95470be7d46fdd51760369c14c0498cd6239321dce0f0ee9ed94" } }, { "event_id": "evt-532742ad11357f3ad6eba312", "kind": "unclassified_tcp", "frame_number": 61602, "timestamp_epoch": "1634916319.504123000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a5f000000170303005054013ea48d5a90df1058c0dc17b70ab8f78311e209334b2166451c32f87d2191cd2775818c81f7d9e14a3b9988e961ee9818528adeacc1e393c9e0d5b8ecaafdefef6efed961855ab00b90cd3ed3a404" } }, { "event_id": "evt-f16e6d6207dfebb3c52ac3d7", "kind": "unclassified_tcp", "frame_number": 61605, "timestamp_epoch": "1634916319.807246000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a3f0000001703030030e99ca604b71c7f0e0a3aa84c2ce08e824ed08f01326aba27e16617340530b44510ebf1381ebe61482498935cd1d90c26" } }, { "event_id": "evt-071c902526d963440cfe91da", "kind": "unclassified_tcp", "frame_number": 61611, "timestamp_epoch": "1634916321.268145000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8ce32297d14c428df8776a2c", "kind": "unclassified_tcp", "frame_number": 61624, "timestamp_epoch": "1634916326.299518000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-629db49a0d454b8b14b8d8e7", "kind": "unclassified_tcp", "frame_number": 61628, "timestamp_epoch": "1634916327.853028000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207050012d20c000000197b" } }, { "event_id": "evt-f78c42de5ce6a3dddfffc670", "kind": "unclassified_tcp", "frame_number": 61630, "timestamp_epoch": "1634916328.102731000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d20e00000005020002" } }, { "event_id": "evt-1a884e485ee4b20efc571063", "kind": "unclassified_tcp", "frame_number": 61631, "timestamp_epoch": "1634916328.103251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050012d20c0000000502" } }, { "event_id": "evt-f3a9bd4d1441278e8fbbd1de", "kind": "unclassified_tcp", "frame_number": 61636, "timestamp_epoch": "1634916328.512015000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-efb9b1d33b0c903445b98c92", "kind": "unclassified_tcp", "frame_number": 61637, "timestamp_epoch": "1634916328.512584000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307050012d20c0000000100" } }, { "event_id": "evt-4074be2fe088b5f9b8ddb51d", "kind": "unclassified_tcp", "frame_number": 61639, "timestamp_epoch": "1634916328.819193000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d2210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-90a7da76dc39c97e4700373c", "kind": "unclassified_tcp", "frame_number": 61646, "timestamp_epoch": "1634916328.909510000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d214000000050000010a0a169cc395" } }, { "event_id": "evt-5d8a113f43d567d4fa010f77", "kind": "unclassified_tcp", "frame_number": 61649, "timestamp_epoch": "1634916329.133521000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d27900000032323020534e36505230354341303030352e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a32353a3237202b303030300d0a" } }, { "event_id": "evt-b4173ba1204e87df5b05cd0c", "kind": "unclassified_tcp", "frame_number": 61653, "timestamp_epoch": "1634916329.547712000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d21a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1edd41080b0331c669a7a3de", "kind": "unclassified_tcp", "frame_number": 61658, "timestamp_epoch": "1634916329.740864000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d2d80000003235302d534e36505230354341303030352e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-9fc95af7c22c723ea919c265", "kind": "unclassified_tcp", "frame_number": 61662, "timestamp_epoch": "1634916330.062651000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d2140000005354415254544c530d0a" } }, { "event_id": "evt-f8340ac3fecc0968a2035659", "kind": "unclassified_tcp", "frame_number": 61666, "timestamp_epoch": "1634916330.108185000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d22700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-99549f2edf123008d5ab6a07", "kind": "unclassified_tcp", "frame_number": 61670, "timestamp_epoch": "1634916330.498124000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-26d003d33763a3395118b8c3", "kind": "unclassified_tcp", "frame_number": 61675, "timestamp_epoch": "1634916330.562994000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2f55ae264801644bd5df8c32", "kind": "unclassified_tcp", "frame_number": 61681, "timestamp_epoch": "1634916330.717383000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e9abf717b8261a9dbaf71196", "kind": "unclassified_tcp", "frame_number": 61682, "timestamp_epoch": "1634916330.717398000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0a5e927e6a0f15a52543710e", "kind": "unclassified_tcp", "frame_number": 61686, "timestamp_epoch": "1634916330.729314000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f96dfa24ad95d5426cfd9edc", "kind": "unclassified_tcp", "frame_number": 61689, "timestamp_epoch": "1634916331.006386000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d2b400000016030300070b00000300000016030300661000006261042b53e89e542b4da68af088610e7fd2e69c7ae3e534655b4d89348aab2112724599bc173bd9557fd2b7f053edc9cfd71b58b4c7be2c62be00a26ba0455d86c7f9ddc92a137cbf06a8bf01fcc05f52bbe6c3a439d1f356eb931398a7ef793c8f7c1403030001011603030028000000000000000036b0759fa48dc73abaa37fa3f8b47a85a1d306dbfb115327c5d3ba1a73151815" } }, { "event_id": "evt-9c18c5a8737b8f97ec0f2a46", "kind": "unclassified_tcp", "frame_number": 61694, "timestamp_epoch": "1634916331.057950000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d23d000000140303000101160303002800000000000000006e13ba3b46085343a15f8171ed2116ec1507523f0702af439e64736ea71f484b" } }, { "event_id": "evt-5d6aa549cad4042336a10163", "kind": "unclassified_tcp", "frame_number": 61698, "timestamp_epoch": "1634916331.331490000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-54967e260bb33425f9faa74c", "kind": "unclassified_tcp", "frame_number": 61700, "timestamp_epoch": "1634916331.406961000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d23700000017030300280000000000000001f4e1a9052cd81359d04a58bf450d623d9fa9b59e06758dfb5ffd9e11c336e6e9" } }, { "event_id": "evt-a92a53ebfec1aad74f2e253b", "kind": "unclassified_tcp", "frame_number": 61704, "timestamp_epoch": "1634916331.446108000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-305656989733c95d02272e47", "kind": "unclassified_tcp", "frame_number": 61708, "timestamp_epoch": "1634916332.308073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d23300000017030300240000000000000002593264039150ed88a80cad7732f5304d6578a0521d134a6ea45e3bd5" } }, { "event_id": "evt-6664157fd4aa6ef2ac572d5b", "kind": "unclassified_tcp", "frame_number": 61713, "timestamp_epoch": "1634916332.372953000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d239000000170303002a0000000000000002cb853e398e59399f9902714e07523a63621852f2f93ef503aee47b1e87827fd069d9" } }, { "event_id": "evt-1d2b386251bd501f0a4fb0cf", "kind": "unclassified_tcp", "frame_number": 61716, "timestamp_epoch": "1634916332.703263000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d249000000170303003a000000000000000351e8960dd2756dfa8ecbb05778598b441ecb2dc41a9882123228da0607928c2aec131e07f116d07a9b8869fe2534d72b2a6f" } }, { "event_id": "evt-0da9ee39e0547cae3aca833e", "kind": "unclassified_tcp", "frame_number": 61721, "timestamp_epoch": "1634916332.761193000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d239000000170303002a00000000000000037b75674ef31e396d4171160d5f7014126bdc30c2e99090bbc9754ca11e1d566fcf30" } }, { "event_id": "evt-bf5dd75548df4b7e8ef32de4", "kind": "unclassified_tcp", "frame_number": 61724, "timestamp_epoch": "1634916333.105360000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d239000000170303002a00000000000000046a9f6d787f34837ca2954a4671533123862932cf8b4c1e6935ebf76f7ce89c0fafe2" } }, { "event_id": "evt-295d05afaacdf022a7ea896c", "kind": "unclassified_tcp", "frame_number": 61730, "timestamp_epoch": "1634916334.658979000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207060060540c000000197b" } }, { "event_id": "evt-3b0d64763d5e799fedfda8f1", "kind": "unclassified_tcp", "frame_number": 61732, "timestamp_epoch": "1634916334.844173000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060540e00000005020002" } }, { "event_id": "evt-3b45eb3c7caec00c7ce0f79f", "kind": "unclassified_tcp", "frame_number": 61733, "timestamp_epoch": "1634916334.844953000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307060060540c0000000502" } }, { "event_id": "evt-4e8ad9c94c12ad52f4d8f96a", "kind": "unclassified_tcp", "frame_number": 61735, "timestamp_epoch": "1634916335.248085000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600605420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-b1e374abea96bcce8698a2fa", "kind": "unclassified_tcp", "frame_number": 61736, "timestamp_epoch": "1634916335.248678000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307060060540c0000000100" } }, { "event_id": "evt-4118ad69184e8a759c339185", "kind": "unclassified_tcp", "frame_number": 61739, "timestamp_epoch": "1634916335.647050000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060542600000005010003156d61696c2e6272696e732d642d657665696c2e66720019" } }, { "event_id": "evt-645dc9d763e3575818a88d1f", "kind": "unclassified_tcp", "frame_number": 61743, "timestamp_epoch": "1634916335.735318000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016375f00000017030300505c7a69d86ff40366cbae1b66ec6da8097fc53bcba9deb13c3ac76c7fb79abc8d65fe83eaa1f70b8175817c9bea5553f70c6b779409b19f317f999a867b70a10e03aa11c1ca02c41fa4362c5ef80eb4bd" } }, { "event_id": "evt-5ea22bf76ab23d777d4ea7ad", "kind": "unclassified_tcp", "frame_number": 61748, "timestamp_epoch": "1634916335.798519000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600605414000000050000010a0a169cc396" } }, { "event_id": "evt-8f3568515e4a92306ba27d98", "kind": "unclassified_tcp", "frame_number": 61751, "timestamp_epoch": "1634916335.983748000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600605435000000323230204741524d2d31303652303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-54c00cbc8e6e78ceab2172ad", "kind": "unclassified_tcp", "frame_number": 61754, "timestamp_epoch": "1634916336.097023000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016373f0000001703030030ad0107b27d4484eea1e9541dbc1054d054fcde192267a53d54c879827aed1a415479a19f598d86abdc820f526053321c" } }, { "event_id": "evt-89b215749b470a8d44f10964", "kind": "unclassified_tcp", "frame_number": 61762, "timestamp_epoch": "1634916336.239190000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010016376f0000001703030060678c3a60871c7fd30de0c29bd70d834fc5c86f67d4cb2e5555b9e3133d57345ca5a9cd89d886e68449ea0cd48f425c0db053707630e6ec0926885b5001e34d19d38432be647dec32415090093677dc5b2d2d2aae1c8151a26d1937c90420f098" } }, { "event_id": "evt-6cbd55eb469f5d8312383392", "kind": "unclassified_tcp", "frame_number": 61766, "timestamp_epoch": "1634916336.239778000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010016370a000000" } }, { "event_id": "evt-1f156739f4ca46c22b3931b7", "kind": "unclassified_tcp", "frame_number": 61769, "timestamp_epoch": "1634916336.362129000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060541a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-051128331d7d0cfda0c82416", "kind": "unclassified_tcp", "frame_number": 61771, "timestamp_epoch": "1634916336.362859000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8a58f3dfe26cd393221adfef", "kind": "unclassified_tcp", "frame_number": 61778, "timestamp_epoch": "1634916336.524639000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040706006054990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-addee8747db2c8419fedad61", "kind": "unclassified_tcp", "frame_number": 61780, "timestamp_epoch": "1634916336.789526000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040706006054140000005354415254544c530d0a" } }, { "event_id": "evt-4c91526ed75f57cb5cae4ecc", "kind": "unclassified_tcp", "frame_number": 61785, "timestamp_epoch": "1634916336.947217000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060542800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-7bf8fd35036a39367ffd7223", "kind": "unclassified_tcp", "frame_number": 61788, "timestamp_epoch": "1634916337.191759000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bea26cdec740983e83193e54", "kind": "unclassified_tcp", "frame_number": 61797, "timestamp_epoch": "1634916337.364900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1110515e15bb1e82e4150738", "kind": "unclassified_tcp", "frame_number": 61798, "timestamp_epoch": "1634916337.364921000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b679c47789f120f6eedbd61b", "kind": "unclassified_tcp", "frame_number": 61799, "timestamp_epoch": "1634916337.364933000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c9d9034c1a8782c46942fd2a", "kind": "unclassified_tcp", "frame_number": 61803, "timestamp_epoch": "1634916337.365369000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060542a000000c47171bbd68a79c92e6a45c32413823f569c597ca63face0d7d8d68bcaf3da1d" } }, { "event_id": "evt-bcb3e2f7bcc88d4b44b8d3fc", "kind": "unclassified_tcp", "frame_number": 61807, "timestamp_epoch": "1634916337.367527000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cc508a75829af2d68e8d3351", "kind": "unclassified_tcp", "frame_number": 61809, "timestamp_epoch": "1634916337.754568000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040706006054e4000000160303008a1000008685040008e0af97f80f1c7fd1aa8e43db0cf9b04a338f41a102119695c7dd196b132cbe0c44a94d6432ea32aadc8de914591db360b54c5f5fc4f62e42e793653568ff8e4000bbc78086ea4a1a689ba1aaf71afd3f743ef21366f0568d0178d664adb63c0b61221c38c57e6048ec0a20981b93b73862a99ccf105699565151ac456105190a55951403030001011603030040efe41f2b74dd7be27e91d5a9f98f6fc631c5c304709d87e5a62481fa655122a1579b8570ecde3e8c78d269e09892118d66db082217c115cd68cd3f448c38ccb6" } }, { "event_id": "evt-436b84330733b77a74eabcd5", "kind": "unclassified_tcp", "frame_number": 61815, "timestamp_epoch": "1634916337.914068000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040706006054550000001403030001011603030040cf21aab61e722f104e580725adb3ab46934f9ebd1ecaeb6be3a21a7e357403485c4bbb5b0a20bc835411933fd35d519020d6bdc3344426b7487f84f8ec432815" } }, { "event_id": "evt-d03806ec7e9cc47cea59931a", "kind": "unclassified_tcp", "frame_number": 61818, "timestamp_epoch": "1634916337.933601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060955f00000017030300505f232f794b62ac3f088205a19a74afad21e584d709b42a94f0844f26f24e47d95d16529c7f3631a09c5271ab0a347d350cd189045b67e47eed22ca4a063fd4967a4e290fefba88404e5c15fb9b1e3656" } }, { "event_id": "evt-c943b01f9baecab60b624982", "kind": "unclassified_tcp", "frame_number": 61823, "timestamp_epoch": "1634916338.308736000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060544f00000017030300400fb9446d25d60d473ca745568d09088a7300c2049a0ac940758c8583030e9b6834ca4fa3341803e20a228a37d651665cab6d93b0ce4051cb2d520c4d95e4ab05" } }, { "event_id": "evt-32e913e5571b70f4e8f12bec", "kind": "unclassified_tcp", "frame_number": 61828, "timestamp_epoch": "1634916338.460900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8efd67347a8606e56f3d7f6b", "kind": "unclassified_tcp", "frame_number": 61830, "timestamp_epoch": "1634916338.485665000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060953f0000001703030030ead85c0dd0e4fd3d1745fb7deac45c2edf5c789b538f9749dd4d8ac1af2eeb8156054594031510d3d94d3e43c06be7b7" } }, { "event_id": "evt-6326b7bc62ae7fa343c0e299", "kind": "unclassified_tcp", "frame_number": 61837, "timestamp_epoch": "1634916338.633280000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020060956f0000001703030060f237dd19d6d32f07c4fc8aff746a494aff72dba5df3c81f9c548fb69c3ffa23610367ed28617f3b09e23fc01b2818e906f37700d90eb5bd4fae87c8a145f53333ab8552dfe7ffa53178be85322731bd1957acecb10c898b66281845614a9ab80" } }, { "event_id": "evt-f246806297e9302e36d0962b", "kind": "unclassified_tcp", "frame_number": 61841, "timestamp_epoch": "1634916338.634011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020060950a000000" } }, { "event_id": "evt-b32ca5b4760a45ee6d24895b", "kind": "unclassified_tcp", "frame_number": 61844, "timestamp_epoch": "1634916339.369528000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060544f0000001703030040053dc57810f30be0ed13a37d1e5687b876072be5f5f6f446b1db562333658a8ff877970f94e075fa95410a19fb5c680780c27d85b52be0896cf5b3f2e3dafd14" } }, { "event_id": "evt-bf35e3bde7d60d449407406d", "kind": "unclassified_tcp", "frame_number": 61849, "timestamp_epoch": "1634916339.527374000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060544f00000017030300400c3e8a03904864ea9ff5d6f66da2333b717febb3173cbb0fa96f8e2ef7c4c5594a834d702a7bbb49fcf3378e63d0fb0281f13ac01183a8709963ee22f048dd33" } }, { "event_id": "evt-e05e8fcbd05dc2fe7273e396", "kind": "unclassified_tcp", "frame_number": 61852, "timestamp_epoch": "1634916339.809662000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060545f000000170303005088cb3eaa470429c12832a354c1d079e4ec7b93a1eeedeced195099dfcca83f58e0499c5018aa1e0675e9b2124bb4587db9c54cd1f3c47e80b3f8844a82efbae0c22c7b38087d46a05874c160258659f6" } }, { "event_id": "evt-ec35518ddffe6ef4612095a6", "kind": "unclassified_tcp", "frame_number": 61857, "timestamp_epoch": "1634916339.971854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060544f0000001703030040dab3a5b78337678cf4c299b1208d55ea3cb135807e37f9d1615cb290ed30f207a2eb8214b27ca67a3700c3a6013a9b9e76202676b433d358b89f7aaec397118d" } }, { "event_id": "evt-b232de1bd4c226678fda2fe0", "kind": "unclassified_tcp", "frame_number": 61861, "timestamp_epoch": "1634916340.358030000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060544f00000017030300406b098dcd971e069e7d623d4fbdd421ab2f3044b6df062590d9f95fd6735576e085d496ef42c4e9f4067985b5ced6c46607cfb42801e63d7345b9620b0ee4ff5a" } }, { "event_id": "evt-2260896f82109b422308c5a9", "kind": "unclassified_tcp", "frame_number": 61865, "timestamp_epoch": "1634916340.545573000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d6090c000000197b04070100d6090e00000005020002" } }, { "event_id": "evt-9a7b2af4e636cf71a410a298", "kind": "unclassified_tcp", "frame_number": 61866, "timestamp_epoch": "1634916340.546894000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d6090c0000000502" } }, { "event_id": "evt-706809112891f1f9e6b31929", "kind": "unclassified_tcp", "frame_number": 61869, "timestamp_epoch": "1634916340.828509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d60920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-63491bd6c0b9f410b6601672", "kind": "unclassified_tcp", "frame_number": 61870, "timestamp_epoch": "1634916340.829335000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d6090c0000000100" } }, { "event_id": "evt-c30d79c42abcfd5653ceb167", "kind": "unclassified_tcp", "frame_number": 61872, "timestamp_epoch": "1634916341.173774000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6092600000005010003156d61696c2e6272696e732d642d657665696c2e66720019" } }, { "event_id": "evt-da65f310812a0ef8ee9cff72", "kind": "unclassified_tcp", "frame_number": 61878, "timestamp_epoch": "1634916341.316942000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d60914000000050000010a0a169cc398" } }, { "event_id": "evt-7c335d0cfbcbd5ca1cfc6b10", "kind": "unclassified_tcp", "frame_number": 61880, "timestamp_epoch": "1634916341.395258000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-90fc7507a5c694906cecbdfb", "kind": "unclassified_tcp", "frame_number": 61883, "timestamp_epoch": "1634916341.453148000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d60935000000323230204741524d2d31303652303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-38b1b114d334a8f17bf83430", "kind": "unclassified_tcp", "frame_number": 61886, "timestamp_epoch": "1634916341.748606000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6091a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-574ec8fa672fd8553a3c39a2", "kind": "unclassified_tcp", "frame_number": 61894, "timestamp_epoch": "1634916341.917026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d609990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-0c573c0aea9f6cfa2ea53922", "kind": "unclassified_tcp", "frame_number": 61896, "timestamp_epoch": "1634916342.161572000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d609140000005354415254544c530d0a" } }, { "event_id": "evt-3332fe4ed8cb3913e3444a3c", "kind": "unclassified_tcp", "frame_number": 61902, "timestamp_epoch": "1634916342.320837000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6092800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-b5c0a92b02adfd378026e021", "kind": "unclassified_tcp", "frame_number": 61906, "timestamp_epoch": "1634916342.520492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060545f00000017030300509deac304ace82351e4be764eb5d70ac2114ad55550ae7125631afc64d7a22f602ac1caa862e99486b88b49d3e157528e278e73b6d59a400840ef52a3f76bec1fca9e2da3e4b65b93707df24c4b787d88" } }, { "event_id": "evt-9c36bd89f838d093990998a7", "kind": "unclassified_tcp", "frame_number": 61909, "timestamp_epoch": "1634916342.634652000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7826c172ac2d1caa6190068f", "kind": "unclassified_tcp", "frame_number": 61914, "timestamp_epoch": "1634916342.729166000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d2a000000017030300910000000000000004dfec69f74450e3d053c23a3c09a6a7385fe74bd682d7fe5bd691f7912d20d455c9908aec6d7608c7cc426b8e0d377852a9fdf718498e6f7409377739184e1582f8f793ecb0b9343141857721386fa5f7807af218dd9390659da41ec2739881761b153b9116478040c08ef190f4012de05ef35df361282374347def7eaf194047246ff8d8e1312859fe" } }, { "event_id": "evt-bd713dd1167a3d01f487a294", "kind": "unclassified_tcp", "frame_number": 61922, "timestamp_epoch": "1634916342.822016000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-886c26a5ec821a221adcf7bd", "kind": "unclassified_tcp", "frame_number": 61923, "timestamp_epoch": "1634916342.822042000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f2f3d251f6e96c8415a03832", "kind": "unclassified_tcp", "frame_number": 61924, "timestamp_epoch": "1634916342.822055000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e4cc50001defb2092d3bf52e", "kind": "unclassified_tcp", "frame_number": 61928, "timestamp_epoch": "1634916342.822857000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d60942020000c47171bbd68a79c92e6a45c32413823f569c597ca63face0d7d8d68bcaf3da1d9cb41157d567087bb5dee57669724d54040102001db13a0071a214c002a767637cba0cea7ce38b1c0bd8c73cb5026b00179423f90fb838b9dfed43836767246e0013273bf0f7250229898fc3b5f8d595ed07f29544b370e59e26e23029545db38ece9be264fccc594de5e6a780ff8156722d82d4dc20aa19a479f1a1d777740a3699afe66b48a76707abcc0e431b8e519d666a4f3f031925c902965ce0923e7ecd16e8c237cac760a3cc437fa808cb8c18aea4af290c2d1b9c961dd7455c783de0db2aa89e8b655ae6af21ecadcf13fe117d946df19548d2a3845b97e989f57d15219559e740453d9121dffc75d77f9a9ea5e4978ebaf58d5c784530d25cd04c4350d6c5668248b9f450da1596de7e3d27d363826401beb8084f8a661d66c5209a15e692d6ce11318c3c81701ee4fe1562512fa1056668a4738941351c8183bed06831bbc65435f141260584eb2068bec786cfff83bde40cd827ebcb6434c0d24f413acc860203cf2494b01e9e1b491715c0463be18deb857d72379cc3b0619bde0487450dbe5ff05437456db5ddd868c5e376547fbde0fb34f8bd85d908e861507dd306b4025f2ab47120206db78211fb21c59dabda49ee82ad5435279eb9a2a1598f91599307b71f60d3ba80ab66a22a0d50846286890d84ace2e5b9f86eafe4e96e02e35dd325048d2bab0393553ed01ea20570291480d95435d85e3ebee3dd9103ffa625a74d5abfb1d863030257de37474b0e000000" } }, { "event_id": "evt-d2364865fa6c82276fe986bc", "kind": "unclassified_tcp", "frame_number": 61930, "timestamp_epoch": "1634916342.991595000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060543f0000001703030030a5cc729b3608e5d049061ecae5c6d109377e1d5a21078e7e7ade74727c42eb22198b908e53a9bb57f754aa179de5b694" } }, { "event_id": "evt-9a60f97176d803ebefd03957", "kind": "unclassified_tcp", "frame_number": 61934, "timestamp_epoch": "1634916343.206777000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-616d2255692e1688950c8946", "kind": "unclassified_tcp", "frame_number": 61942, "timestamp_epoch": "1634916343.395308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d609550000001403030001011603030040002998877f3093af112e8f8a45550b3d2070e1f121d519b759e3b1c75a11fcc7b42415188ab07342c8d641f7f9879e49d1bcbf361e5dca7b56fb2042dcdff328" } }, { "event_id": "evt-11f2966f5b2aef20627b4adb", "kind": "unclassified_tcp", "frame_number": 61946, "timestamp_epoch": "1634916343.822653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6094f00000017030300404cd8f8bfe531a6d26df5f674056723b1b75332081d01f560607b817698bb1d1e3c69787394da0ddd27136f51b35a92b9559e95d9d30bcb2524ebfc3fc52dfee2" } }, { "event_id": "evt-4bb31fe7eb984f3c9534f161", "kind": "unclassified_tcp", "frame_number": 61953, "timestamp_epoch": "1634916344.002666000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-96ff4a438c120755bc17a0f8", "kind": "unclassified_tcp", "frame_number": 61956, "timestamp_epoch": "1634916345.206429000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6094f0000001703030040895dd5e13fb0084add9dc582b579969b26a408e9dc0cba4fd4eb0cc155b4216f16369bbc522dc59c93daec71057053a6d25798f416ff5d93f0589fb0c7cd8a41" } }, { "event_id": "evt-69f2d5ae0c0d135ffd6a315f", "kind": "unclassified_tcp", "frame_number": 61962, "timestamp_epoch": "1634916345.386291000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6094f00000017030300408f5eb5381f6a17e10101ec30f1b1af86b6d1f6c6c839d5df42d42e4c496bdbd57ed95e050e3ff92d67f0583b816194542c05e6b45fb7edfdba219d34b808805c" } }, { "event_id": "evt-fa6439fb60b2abe4b03d33b2", "kind": "unclassified_tcp", "frame_number": 61965, "timestamp_epoch": "1634916345.820703000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6095f0000001703030050e6d469690b70584a3b85ffc8aba5985271cd78cf8b83c4d02da60ccd27014134315b38756d83733a70f23a4bfcf488c2120910dd7a9dca7bbd7d7ecc0e529efa23c7a57fb4e9477e53dfb87d75d7ea93" } }, { "event_id": "evt-2f25670e567c6f428fed00e7", "kind": "unclassified_tcp", "frame_number": 61970, "timestamp_epoch": "1634916346.017391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6094f00000017030300403389a478b05c5b56f95ce993d35fdc09de4c0ba1542ef09552a2e3aecbd68346aaa8a4d7b5458018978bb5072b115b84eb4bca51e8a913ef42af4b7e37556f13" } }, { "event_id": "evt-6568af4cc106b4de8d4bb643", "kind": "unclassified_tcp", "frame_number": 61974, "timestamp_epoch": "1634916346.475421000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6094f000000170303004099b319265be5ee84ae928d0333c12f16b413313ffeb52b9f147619e852393aa5ad1b94c14a6b87751a5330f8c1d050cd609131d597e9931cdb4a2f8c4df90779" } }, { "event_id": "evt-10a3afb9842fd56be397a1f7", "kind": "unclassified_tcp", "frame_number": 61981, "timestamp_epoch": "1634916347.395137000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-14b2d8ef39dfe24876f91ffe", "kind": "unclassified_tcp", "frame_number": 61983, "timestamp_epoch": "1634916347.559060000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200024a0c000000197b" } }, { "event_id": "evt-80b5335aab2802ac28f29ec9", "kind": "unclassified_tcp", "frame_number": 61985, "timestamp_epoch": "1634916347.753085000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200024a0e00000005020002" } }, { "event_id": "evt-06f32b9512e91deef2530782", "kind": "unclassified_tcp", "frame_number": 61986, "timestamp_epoch": "1634916347.753352000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200024a0c0000000502" } }, { "event_id": "evt-c5bf312a7f1067fe08a919cd", "kind": "unclassified_tcp", "frame_number": 61992, "timestamp_epoch": "1634916348.381906000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200024a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-dff5dcfcc75c56f1aa42159a", "kind": "unclassified_tcp", "frame_number": 61993, "timestamp_epoch": "1634916348.382439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d27500000017030300660000000000000005cf2b360f90436b709ef77cfa09cd9ad335f5b3e038d515eaf0b570e7e5b1f23a24c511a92f2273271d5cc89ac724b840eae96ea917e680901c1079eeaaf3116cb0473b11a2359813d3b409369e7fd43278db7166fe66518dc73be9af20fa03070200024a0c0000000100" } }, { "event_id": "evt-02722f252aab57dc589ba91e", "kind": "unclassified_tcp", "frame_number": 61995, "timestamp_epoch": "1634916348.382887000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6095f000000170303005073277796ee48a4df22dbba2796bd2df6e830ed2fc2d838436f49b4e34d737cb60b78bd535aefb8c73eae20545e9980a107066e9132d3c1505657e74597dfc7005223f163fa4ee313a09c809a1aad13e1" } }, { "event_id": "evt-ddcdce6783f1a9bdd1bf5943", "kind": "unclassified_tcp", "frame_number": 61999, "timestamp_epoch": "1634916348.674899000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200024a2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d00190407050012d22d000000170303001e00000000000000065501154af0047affe6ba4a5ae592f3a9384fedf286bb" } }, { "event_id": "evt-bc2f53f6f1cc5675f408aa72", "kind": "unclassified_tcp", "frame_number": 62003, "timestamp_epoch": "1634916348.936671000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6093f0000001703030030eb68daefb4a7709c243b228791e06508e6e688e44758803e2c1b61b4393ed4253ffd186c62ca14211af83f9f94f48f26" } }, { "event_id": "evt-25f9c15184b221cb17e4da58", "kind": "unclassified_tcp", "frame_number": 62014, "timestamp_epoch": "1634916352.395368000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b0166012ee4d3f1a959b2765", "kind": "unclassified_tcp", "frame_number": 62025, "timestamp_epoch": "1634916355.316121000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-26d7431d2093f1d87d30e4df", "kind": "unclassified_tcp", "frame_number": 62032, "timestamp_epoch": "1634916356.906181000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200024a1400000005040001000000000000" } }, { "event_id": "evt-fa6825fe2a3caacc27437b36", "kind": "unclassified_tcp", "frame_number": 62036, "timestamp_epoch": "1634916356.906559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db05f000000170303005091ca6b4cf44cbf0f15107f301337442bbd2708ad28b1ab6adbd240cfaef74f3c712b9e1c8d66714652e34ed6ed7d65b26a0880aeb14d66303dd6c928aa27a9d4b16859eee8e2f581c8a3c1e3657b5f8104070400275a5f00000017030300507bb14ad3c494bea2396c4a94bd9b6f70b3c8e1dcfcdef4f1934c054e2eb567fed13bb25a884f68f12a83203c8a354e80c068936b561d1798b3e6678a046e7b19b84dddf7c2824a973d56dad8c7a17aba" } }, { "event_id": "evt-6d028d2f0db05e9e13a1dc66", "kind": "unclassified_tcp", "frame_number": 62041, "timestamp_epoch": "1634916356.942274000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407050012d25700000017030300480000000000000006123e2a2bf8b8a195e6df83f2f68fe2480bc6899d0136192c08a992f5329cf0fc22f321dfca625a86639099599a1d96ef12dbd2f82753c44af39d5261a257da28" } }, { "event_id": "evt-a68c3752b9eeee33c0e773d4", "kind": "unclassified_tcp", "frame_number": 62047, "timestamp_epoch": "1634916356.946485000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507050012d20a000000" } }, { "event_id": "evt-7d7e1cc3f6b5c46e27e24fa2", "kind": "unclassified_tcp", "frame_number": 62050, "timestamp_epoch": "1634916357.307951000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200024a0a000000" } }, { "event_id": "evt-5025d0909c1f55371943200c", "kind": "unclassified_tcp", "frame_number": 62052, "timestamp_epoch": "1634916357.497754000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db03f00000017030300300b26ea3a7316b7a996e9ea0a115b0ed781946a29210965cea6c74c0aafcc8bfe4762180adf1f81fd626f300b99916e8804070400275a3f0000001703030030bc01a3ee80b7444bd1694a8151ffe5fca7e954865c3f188bebdae656814b09a7b0a76c2a5bb79f9a6d9eb9d2b11f3a94" } }, { "event_id": "evt-3d9860a7e8983acf535034e9", "kind": "unclassified_tcp", "frame_number": 62060, "timestamp_epoch": "1634916357.638033000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db06f0000001703030060a57fbe20b8b89c182df32ba464019f61b7eba2e554bf45ecce0383badb403c607a5d08ab04c4ec622ac982503418dd91fa31f9c6a50a51c71d46ab2bdc46bdc8a5aa9d9b7b49c4fb1cc5b525c4d68d40ba83fe0d2c80b1548c18e338388ba84e" } }, { "event_id": "evt-acd4fb626400e887ad5e3dab", "kind": "unclassified_tcp", "frame_number": 62064, "timestamp_epoch": "1634916357.638538000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703007db00a000000" } }, { "event_id": "evt-675d43f624080d5c12d10653", "kind": "unclassified_tcp", "frame_number": 62068, "timestamp_epoch": "1634916357.655794000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400275a6f000000170303006054e7d79c1a21eb82cd0399b98acabb6aa7a3a4ca9e51edd9522b047b3fa5f6979058d57ccc17e8e8efff763af5467d582ac788bbd4de24e5339f0b1c4b56435ab540519dd8c776fa32878b325ce385cf56a403f5a9ed97584d19f65b4c3e27d7" } }, { "event_id": "evt-b796496114ace6e9c86e3c26", "kind": "unclassified_tcp", "frame_number": 62072, "timestamp_epoch": "1634916357.656118000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400275a0a000000" } }, { "event_id": "evt-4812da1ba64f7aba1f53638c", "kind": "unclassified_tcp", "frame_number": 62075, "timestamp_epoch": "1634916357.969675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007db03f00000015030300301533ce9cd332ac40bd68ea1ea136aadd8cc7f5937128d18b1ccb9166cadfd10826192255be9ae0ceeb8fa2bdbedde685" } }, { "event_id": "evt-3dae9fff9e2b3026dd486f8e", "kind": "unclassified_tcp", "frame_number": 62077, "timestamp_epoch": "1634916358.153886000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703007db00a000000" } }, { "event_id": "evt-3b281ebbbb5fc42c71293e23", "kind": "unclassified_tcp", "frame_number": 62080, "timestamp_epoch": "1634916358.395584000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e935e7ff625067a3253efcfe", "kind": "unclassified_tcp", "frame_number": 62165, "timestamp_epoch": "1634916363.427167000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c2bbe4a96b1d1787823a6407", "kind": "unclassified_tcp", "frame_number": 62187, "timestamp_epoch": "1634916368.427605000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f9d1536b164249753b1e3c89", "kind": "unclassified_tcp", "frame_number": 62197, "timestamp_epoch": "1634916373.458323000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-beef588b126f8a039dbe33a2", "kind": "unclassified_tcp", "frame_number": 62206, "timestamp_epoch": "1634916376.011967000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060545f000000170303005016f80c8ab1298e3a98ea29b1ac885ca292b4fd401aec4c48ab78b340bd718b4db5cc697c18bb6cd38192d50617d0ae56f6f0fae9142792d3392b899981d9ebffa76450cbfc1cb36427ffa733aa9e865c" } }, { "event_id": "evt-4e612f14a194585228f1fa43", "kind": "unclassified_tcp", "frame_number": 62210, "timestamp_epoch": "1634916376.377116000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060543f00000017030300309233f9b06dcba5cd5e7c0163316dc0d4b5e0f928990f62a1fd1fcaa5d8cfbc92526b78c285977a5d2b6b00c0ecdc4a2a" } }, { "event_id": "evt-f69d37f806f47e9a362bae3f", "kind": "unclassified_tcp", "frame_number": 62216, "timestamp_epoch": "1634916376.529826000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060546f000000170303006069ad97742fd49b6c881613d1101ad42ce34cd6ff4aedd2c01795cd8d2b8e221835e28c4db58b68032089232268fcb532648fede934bd000a59c82c7a789bd088fdc494bd60f93396313ba447a3e233ad6fbf6be5767e0ba62cb22e7f92f425c5" } }, { "event_id": "evt-048b92d332065fc45e79fdff", "kind": "unclassified_tcp", "frame_number": 62220, "timestamp_epoch": "1634916376.530362000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507060060540a000000" } }, { "event_id": "evt-ad62414130205e59c2e80dcd", "kind": "unclassified_tcp", "frame_number": 62222, "timestamp_epoch": "1634916376.876282000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407060060543f000000150303003023296767bc54b49b0b4b033f18440518f5e97e5daf8f98a9b533f29dc107befbdc4fd07b63cd4349c77c6d333b36d309" } }, { "event_id": "evt-0071b30b4f58799c63eef3c5", "kind": "unclassified_tcp", "frame_number": 62224, "timestamp_epoch": "1634916377.054323000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507060060540a000000" } }, { "event_id": "evt-83221ac1d8e95f673ba84f4e", "kind": "unclassified_tcp", "frame_number": 62228, "timestamp_epoch": "1634916378.504582000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-52fc9aff8b9512e05d055262", "kind": "unclassified_tcp", "frame_number": 62235, "timestamp_epoch": "1634916382.174776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6095f000000170303005057454941c26620529c7c7da17f168b5ace863a3d75106cec772870d9e92666fe6704fd62a043400498ee475dc588e612ae7f37e6182c8130cda36c856a83da0d0c4b824fe79303af9799e0dbd4c9259d" } }, { "event_id": "evt-57bd05e9653f47f14e1202d9", "kind": "unclassified_tcp", "frame_number": 62239, "timestamp_epoch": "1634916382.469288000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6093f000000170303003026437aef1980fc98a0ff69c2b0f06ea2ff00263f5c39ec6191f11c86b2df04efc1c3a83fd7df960e7abdf4ba9101bd69" } }, { "event_id": "evt-1c18692cdb05739d118eff7a", "kind": "unclassified_tcp", "frame_number": 62245, "timestamp_epoch": "1634916382.607985000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6096f00000017030300606f6eecd661e111e1ea9af90abad3ec1d7962d9a790f61f757fb12d5648302b828cbfbf6efd32ea879deecf9a9b5e1640c036ad6b5b87511e1545cefacb79d00b73c680cd4768042ae330029dd3f05a73945fbc47f54952ca76c0e369ba5aa3c1" } }, { "event_id": "evt-9cdb14cba3374bcd88aebc28", "kind": "unclassified_tcp", "frame_number": 62249, "timestamp_epoch": "1634916382.608437000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d6090a000000" } }, { "event_id": "evt-4495c1b329ed64ecae159d4e", "kind": "unclassified_tcp", "frame_number": 62251, "timestamp_epoch": "1634916382.910349000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6093f0000001503030030d4d8a593f4e8a00f58cb234524c94ab50216f50e5c4ae8b0d4455af37765db4a4bc79aba3eb99595019b6a62bc8ffaa3" } }, { "event_id": "evt-b220d31a4f7bf2bae384933e", "kind": "unclassified_tcp", "frame_number": 62253, "timestamp_epoch": "1634916383.092858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d6090a000000" } }, { "event_id": "evt-f129bac181bfcd250721391a", "kind": "unclassified_tcp", "frame_number": 62256, "timestamp_epoch": "1634916383.536395000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fbbe9d0fe4e31e7a4c490db7", "kind": "unclassified_tcp", "frame_number": 62275, "timestamp_epoch": "1634916385.769433000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-73a42a7106da9414efdd866e", "kind": "unclassified_tcp", "frame_number": 62295, "timestamp_epoch": "1634916388.536837000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cc8bdf76010210eadcec924d", "kind": "unclassified_tcp", "frame_number": 62319, "timestamp_epoch": "1634916393.537429000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f3242eb1867241847629aa7", "kind": "unclassified_tcp", "frame_number": 64199, "timestamp_epoch": "1634916398.614126000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d3ec864499cafe3bd1983b43", "kind": "unclassified_tcp", "frame_number": 64297, "timestamp_epoch": "1634916403.660742000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-59e2d424bc7efe09c0ebc92a", "kind": "unclassified_tcp", "frame_number": 64310, "timestamp_epoch": "1634916408.692987000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f3333ad34efcb138a1358cbc", "kind": "unclassified_tcp", "frame_number": 64319, "timestamp_epoch": "1634916413.755623000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d176e50b5af36a6cd1c27133", "kind": "unclassified_tcp", "frame_number": 64324, "timestamp_epoch": "1634916415.629425000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-bf1a5b35dedf5b487ca93b82", "kind": "unclassified_tcp", "frame_number": 64331, "timestamp_epoch": "1634916419.754237000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d6d3d6c5fd41970d3eaa61b7", "kind": "unclassified_tcp", "frame_number": 64342, "timestamp_epoch": "1634916424.787435000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bcff82bfa0ed6e75aa570762", "kind": "unclassified_tcp", "frame_number": 64349, "timestamp_epoch": "1634916429.787559000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ab3c0ccc6a36102aa502e056", "kind": "unclassified_tcp", "frame_number": 64359, "timestamp_epoch": "1634916434.788407000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-722cf96b7282be3ae83ca081", "kind": "unclassified_tcp", "frame_number": 64368, "timestamp_epoch": "1634916439.788685000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-29f5174d4b43a0f1e90cd8e1", "kind": "unclassified_tcp", "frame_number": 64376, "timestamp_epoch": "1634916444.788755000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6f5f3de95cef295ada636d59", "kind": "unclassified_tcp", "frame_number": 64386, "timestamp_epoch": "1634916450.788475000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dad4837f8736dcec58b156e5", "kind": "unclassified_tcp", "frame_number": 64395, "timestamp_epoch": "1634916455.819489000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6ead369861321b41f3cf886b", "kind": "unclassified_tcp", "frame_number": 64406, "timestamp_epoch": "1634916460.408389000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100a2ef0c000000197b" } }, { "event_id": "evt-a5ac5408fafb633eec1ab738", "kind": "unclassified_tcp", "frame_number": 64408, "timestamp_epoch": "1634916460.603290000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef0e00000005020002" } }, { "event_id": "evt-739b90e64f9d3c8d7035adf7", "kind": "unclassified_tcp", "frame_number": 64409, "timestamp_epoch": "1634916460.603832000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a2ef0c0000000502" } }, { "event_id": "evt-c30494be54bac301f3a7edc5", "kind": "unclassified_tcp", "frame_number": 64411, "timestamp_epoch": "1634916460.835122000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-85cc7b8a8f6c087bb0eacb5b", "kind": "unclassified_tcp", "frame_number": 64413, "timestamp_epoch": "1634916461.125371000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-94e9e00486d376ea4ccae4bf", "kind": "unclassified_tcp", "frame_number": 64414, "timestamp_epoch": "1634916461.125835000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a2ef0c0000000100" } }, { "event_id": "evt-70ac2fcbf03948bc3d38c6fc", "kind": "unclassified_tcp", "frame_number": 64417, "timestamp_epoch": "1634916461.485890000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef2800000005010003176d61696c2e6d6963726f7669737461746563682e636f6d0019" } }, { "event_id": "evt-43a3d642c30812a108878f36", "kind": "unclassified_tcp", "frame_number": 64425, "timestamp_epoch": "1634916461.945233000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef14000000050000010a0a169cc3a2" } }, { "event_id": "evt-200c7bea4e01d13712731cea", "kind": "unclassified_tcp", "frame_number": 64428, "timestamp_epoch": "1634916462.113039000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef68000000323230206d61696c2e6d6963726f76697374612e696e2045534d5450204d61696c456e61626c6520536572766963652c2056657273696f6e3a2031302e33342d2d2072656164792061742031302f32322f32312032303a35373a34310d0a" } }, { "event_id": "evt-22e4cc2435683aa5ae8fcfba", "kind": "unclassified_tcp", "frame_number": 64433, "timestamp_epoch": "1634916462.470522000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-0d1eb91788f1bfc2c252b6d7", "kind": "unclassified_tcp", "frame_number": 64438, "timestamp_epoch": "1634916462.637050000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef9a0000003235302d6d6963726f76697374612e696e205b3137332e36362e3134362e3131325d2c207468697320736572766572206f6666657273203520657874656e73696f6e730d0a3235302d41555448204c4f47494e0d0a3235302d53495a452037313732393135320d0a3235302d48454c500d0a3235302d415554483d4c4f47494e0d0a323530205354415254544c530d0a" } }, { "event_id": "evt-9222c2d19ee077db6a7d4025", "kind": "unclassified_tcp", "frame_number": 64441, "timestamp_epoch": "1634916462.981065000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef140000005354415254544c530d0a" } }, { "event_id": "evt-09a0ec9aa9ea0b93df11d5b2", "kind": "unclassified_tcp", "frame_number": 64446, "timestamp_epoch": "1634916463.138829000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef2200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-7bec0e17007ef75dc739bee9", "kind": "unclassified_tcp", "frame_number": 64450, "timestamp_epoch": "1634916463.457322000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-815d458aa11d8537de9394c8", "kind": "unclassified_tcp", "frame_number": 64457, "timestamp_epoch": "1634916463.623486000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-69f69da41460c211dbf3e363", "kind": "unclassified_tcp", "frame_number": 64458, "timestamp_epoch": "1634916463.623500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-11375ec8388868547ea772f9", "kind": "unclassified_tcp", "frame_number": 64462, "timestamp_epoch": "1634916463.626757000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef3a030000c2160001fb010001f7308201f30a0100a08201ec308201e806092b0601050507300101048201d9308201d53081bea1343032310b300906035504061302555331163014060355040a130d4c6574277320456e6372797074310b3009060355040313025233180f32303231313032313134333230305a30753073304b300906052b0e03021a0500041448dac9a0fb2bd32d4ff0de68d2f567b735f9b3c40414142eb317b75856cbae500940e61faf9d8b14c2c602120361578228d09509755be4c2de42c45aaf018000180f32303231313032313134303030305aa011180f32303231313032383133353935385a300d06092a864886f70d01010b05000382010100473a90ba7b7b30f080c1f23294fda5bd8a3d96e6cef61980b7fe4605d41a6220d045b3a39faa468bba892151df112f3a6533bb94b1551e5cd028f50f2ddffa9839257af0c6904d0d5ecb3affbba2994b05b64bad137dbbff06e6532f33f77988679725702e46019633bca1efa64d7805d676657eae4e3522eb1fa1853e0171ba3ae676dd2d28267fc033e55318f534da8721c4d84cbab040c8e7ec6bed7faf17174003c147914ad713438d3e2ddd69f46e75eb5c5fe35606b75fc2e474e058be7431a6e0cc4be279f3c61296e157c962692509c887a4f44dc14b413412c653ee77bb1905fa3162219f9ee2ae636a0ff86e3ac17426a6534d956c4560fd1719b90c00012803001d206d9411fdbcac80490cc613d5d080368e45ae7a6ed8b27913efdeb04f41dbd44704010100825650f9aa57a0d54eaf8c75046afab475d474178df6820c8bfe1af23dcc9f21cc550ef555bfb2cb2df6df773cf8a925513ee87669cbd57d37390f390e13c4ba324c4492cadb501f348e5556ebb395d0792e80fcdd8237876adc9e30980dd64ec6fa3f01092e3ec8f48f7ac6bd0d4bd0dbf4093cd53da08523f1345f8ec9aa9af6afad4a8ffce2fa69884d1e4ea0444d7494835fb7dde40f5dc88a9791f5d82e2a7bcced9f88d4f28ba9cfebe833b45fc3e9809a5558529e4a0f5058883b01f29785403ed971b65bb63195082b3c6a3f7b5e8fb0be62223834ee032560c8ba1a767748ae30ef75b940383a3a6209a8de5ab5feb82a48cfa4bc71f53d9c2029490e000000" } }, { "event_id": "evt-53938153ea90277dd3a4ac91", "kind": "unclassified_tcp", "frame_number": 64465, "timestamp_epoch": "1634916463.922817000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef6700000016030300251000002120a934534fbe37151ea9a98fab018dadbc3d2678e49101aaa49ceff1b0f590984a140303000101160303002800000000000000005b49830bec9a6d677e9b482321e0f79cd8151b6272e25328e55b32d3a09c60c6" } }, { "event_id": "evt-cb967c0b01e23cb37393829f", "kind": "unclassified_tcp", "frame_number": 64470, "timestamp_epoch": "1634916464.100575000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef3d0000001403030001011603030028000000000000000039bc5d9a812cf7c82e2dca732efb807b870e46c41a883337c2dd7cc0eba13d56" } }, { "event_id": "evt-62f63e9bea409acff3559b36", "kind": "unclassified_tcp", "frame_number": 64474, "timestamp_epoch": "1634916464.364316000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef3700000017030300280000000000000001965a170c7e1308d5fd1f3c24908281cc8d92049887abbd12ea7aebe632ab265f" } }, { "event_id": "evt-dcb487e43f5562f61a19bdae", "kind": "unclassified_tcp", "frame_number": 64479, "timestamp_epoch": "1634916464.527107000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2efb700000017030300a80000000000000001f01fbc8aa00373fc167d0df9cdbc0415d2047d7a3b8a1e79fb86cfddabf1fafa1c00b67fc2d77f6f734da7ed308ec950e49789b489f720705a30fecd73ee46d10ed23ecc30f5879c480897a37bd6cc4f31874e3c2624fa38a9664a2e9d6ca6315e615d4170f0f84a6d2ac6aac259dcc910ba2d3a59702097022118d82e93d0c5f7e090a0cfb765336eeb95106060bfd56b15966147f34f3cd8408d341fc329d6" } }, { "event_id": "evt-c9baaa3a872db9199fb5357b", "kind": "unclassified_tcp", "frame_number": 64483, "timestamp_epoch": "1634916465.325939000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef3300000017030300240000000000000002dad33c848d567c489336ea502d244c50c0cf12f4161fbdafff40dd9e" } }, { "event_id": "evt-88c58664c920f9cba0ba19b7", "kind": "unclassified_tcp", "frame_number": 64488, "timestamp_epoch": "1634916465.481833000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef39000000170303002a0000000000000002cee7db3178ce717ba0da7aeb5525c0022c7c1bc2d1629d46847522ca725987b6d6ed" } }, { "event_id": "evt-f1a140834ef6cb6d89cbe1bb", "kind": "unclassified_tcp", "frame_number": 64491, "timestamp_epoch": "1634916465.816189000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef4d000000170303003e00000000000000032c6b242334e65bbf7d27c6a410113fb191d739d77a40b89f488fca0866deadb52c8f4594ff503b08adac1c4aa110acc12598e3844db5" } }, { "event_id": "evt-f4c138e97c16ea6d8e74ee7f", "kind": "unclassified_tcp", "frame_number": 64495, "timestamp_epoch": "1634916465.880811000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b2b63a89899adf53a4dfd195", "kind": "unclassified_tcp", "frame_number": 64498, "timestamp_epoch": "1634916465.981769000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef39000000170303002a0000000000000003f71223f6f46b584fa5d57eee359e032bee4f596ac384942feab9085b4170c8178221" } }, { "event_id": "evt-3d86263a12b55eaed9097451", "kind": "unclassified_tcp", "frame_number": 64506, "timestamp_epoch": "1634916466.226780000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef3500000017030300260000000000000004f5840e6c8310f3d75bf4b23d6b211f88b14957ac7a60c87091e25bb97cf6" } }, { "event_id": "evt-898b5d69809690bfeee1cea2", "kind": "unclassified_tcp", "frame_number": 64522, "timestamp_epoch": "1634916466.389326000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef49000000170303003a000000000000000438e9187060b2bdf02b668776da09a48496849ca59fc0b57a4c6aa1e4d65683b33c088b098d4772e012c71a469a4cdac855e9" } }, { "event_id": "evt-911293ec84cdfd35623e1c20", "kind": "unclassified_tcp", "frame_number": 64527, "timestamp_epoch": "1634916466.660827000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef2a000000170303001b0000000000000005ed1a0929cd79b6822e7c6456a0a78c11f91adc" } }, { "event_id": "evt-99bcd0cad6bf9adaa72de620", "kind": "unclassified_tcp", "frame_number": 64532, "timestamp_epoch": "1634916466.817039000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef4500000017030300360000000000000005bb9c49e86f4c52b0a1465e20eb5402499749d052a617d0a05a72e5ba42e2db969ce9dc470e01699ab3c70974b38e" } }, { "event_id": "evt-032d1613bed381342282d098", "kind": "unclassified_tcp", "frame_number": 64535, "timestamp_epoch": "1634916467.110688000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef2d000000170303001e00000000000000063f03ba79b2317cef9d21d8848bf79abe40538b215f44" } }, { "event_id": "evt-6c24c185ee85f4ea64a0a0f6", "kind": "unclassified_tcp", "frame_number": 64540, "timestamp_epoch": "1634916467.262906000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef59000000170303004a00000000000000067b2e27bad726e77e7c26a0b3c7f98034de91ee51fa54e75aca6e34ed63a612b324d56338bcc6b79a38d39baa5773833bf8817611f18df0ea1e16a0b2d5c5ee7a9eb4" } }, { "event_id": "evt-f366ee0ea17aae6210e1c08b", "kind": "unclassified_tcp", "frame_number": 64548, "timestamp_epoch": "1634916467.590977000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2ef29000000150303001a0000000000000007cd09e86272e602a55d4f9fca9ec85172c2ff" } }, { "event_id": "evt-d5b4ab32af72034959b976f9", "kind": "unclassified_tcp", "frame_number": 64552, "timestamp_epoch": "1634916467.768625000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100a2ef0a000000" } }, { "event_id": "evt-0cf52617923b6e786804e8d3", "kind": "unclassified_tcp", "frame_number": 64561, "timestamp_epoch": "1634916470.898431000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a0a8ad62ceddb7a340587339", "kind": "unclassified_tcp", "frame_number": 64565, "timestamp_epoch": "1634916471.776696000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010030c90c000000197b" } }, { "event_id": "evt-fa1b0b440c934ee0f1686978", "kind": "unclassified_tcp", "frame_number": 64567, "timestamp_epoch": "1634916471.992534000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c90e00000005020002" } }, { "event_id": "evt-3a4dd6581bb63fb9c3e5b157", "kind": "unclassified_tcp", "frame_number": 64568, "timestamp_epoch": "1634916471.993078000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010030c90c0000000502" } }, { "event_id": "evt-5482b329a4d0deaff75dea94", "kind": "unclassified_tcp", "frame_number": 64570, "timestamp_epoch": "1634916472.258115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-4a66bb8159940e2c00a1b327", "kind": "unclassified_tcp", "frame_number": 64571, "timestamp_epoch": "1634916472.258677000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010030c90c0000000100" } }, { "event_id": "evt-22c44c87efe1606546c90867", "kind": "unclassified_tcp", "frame_number": 64575, "timestamp_epoch": "1634916472.803803000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-a5000efcc9f71270243c03ce", "kind": "unclassified_tcp", "frame_number": 64582, "timestamp_epoch": "1634916472.906592000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c914000000050000010a0a169cc3a4" } }, { "event_id": "evt-391a5f96d7fdb9a66c722728", "kind": "unclassified_tcp", "frame_number": 64585, "timestamp_epoch": "1634916472.959045000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c97900000032323020534139505231334341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a32373a3532202b303030300d0a" } }, { "event_id": "evt-247ebeead0d55af4c78a9dd6", "kind": "unclassified_tcp", "frame_number": 64589, "timestamp_epoch": "1634916473.620178000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c91a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-73016054d19129148055fdc7", "kind": "unclassified_tcp", "frame_number": 64594, "timestamp_epoch": "1634916473.684948000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9d80000003235302d534139505231334341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-85589fef25fce4b3ed50f10d", "kind": "unclassified_tcp", "frame_number": 64597, "timestamp_epoch": "1634916474.008710000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9140000005354415254544c530d0a" } }, { "event_id": "evt-efa26ea945d7063f9ba5032e", "kind": "unclassified_tcp", "frame_number": 64602, "timestamp_epoch": "1634916474.087357000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c92700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-72c59e215d2a8cd92332713d", "kind": "unclassified_tcp", "frame_number": 64607, "timestamp_epoch": "1634916474.388723000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-573511841ed92e88057d0674", "kind": "unclassified_tcp", "frame_number": 64612, "timestamp_epoch": "1634916474.445277000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c61438f1c07762d2ff48ffff", "kind": "unclassified_tcp", "frame_number": 64618, "timestamp_epoch": "1634916474.562209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-41b5194cc2f7a5ee9f74b0d2", "kind": "unclassified_tcp", "frame_number": 64619, "timestamp_epoch": "1634916474.562229000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bfd4cd133adcfd3c25016037", "kind": "unclassified_tcp", "frame_number": 64623, "timestamp_epoch": "1634916474.605294000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-14834c9755bb399609064395", "kind": "unclassified_tcp", "frame_number": 64630, "timestamp_epoch": "1634916474.946224000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9b400000016030300070b0000030000001603030066100000626104826cf83ff74a02b52e314957ee4d3181f91781bbef669614744a25787160650f510bec11239e972fc4eb8b96d7a8348a820ab528d42d1c68ceed2cf3fca82fb51f1eb696821b3c024fa30de4e98fa54c7172d5a0a7a14327925546b57dfcd7c814030300010116030300280000000000000000c5e87de97d8ab9b36f8e1bc8259bd4841a546184b8faad9a78598d583acb4cd5" } }, { "event_id": "evt-70b9c7481d7477b18bbc2aac", "kind": "unclassified_tcp", "frame_number": 64635, "timestamp_epoch": "1634916475.017921000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c93d000000140303000101160303002800000000000000005d6098e504a7f6a16332076de1eecc9529d919b51c1b224137dcc31ddc047ef5" } }, { "event_id": "evt-cea74dffeb4fecb5e6368c39", "kind": "unclassified_tcp", "frame_number": 64639, "timestamp_epoch": "1634916475.333833000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0cb1492b4131543a8ab69f93", "kind": "unclassified_tcp", "frame_number": 64641, "timestamp_epoch": "1634916475.400664000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9370000001703030028000000000000000125111e46f5e7850386f5f28b64a2ad56834bc6c3cf2eb1c2d7aa661aac89f6f5" } }, { "event_id": "evt-1a9ae3280941b34351230617", "kind": "unclassified_tcp", "frame_number": 64646, "timestamp_epoch": "1634916475.460883000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9d6d1342bd262883d2ee91bc", "kind": "unclassified_tcp", "frame_number": 64649, "timestamp_epoch": "1634916475.898828000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-44ab84c06fd7c5876c03895e", "kind": "unclassified_tcp", "frame_number": 64651, "timestamp_epoch": "1634916476.182049000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c93300000017030300240000000000000002a56d022f82cfff1a06a852825ae549ebb1f60bc7b842ccabdaf4bba4" } }, { "event_id": "evt-f6f260dc4e7394601939ce9b", "kind": "unclassified_tcp", "frame_number": 64655, "timestamp_epoch": "1634916476.236059000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c939000000170303002a00000000000000028f10821ea03e6f963ea1341b2119795d675a082c6db8fef6e26e63772ab8122e4015" } }, { "event_id": "evt-db6086424970a1d21793a336", "kind": "unclassified_tcp", "frame_number": 64659, "timestamp_epoch": "1634916476.690330000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c94500000017030300360000000000000003c45279d691d371ddb05a65cf415806a426e929184142fb3839820be39d8cc80f2335cd40f8ffee637c0f18c10813" } }, { "event_id": "evt-81af8c0138f7c65b76d7ade9", "kind": "unclassified_tcp", "frame_number": 64664, "timestamp_epoch": "1634916476.759217000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c939000000170303002a0000000000000003d754bc3a413eb7f58321dfd48385894fa8f07bd551fb18ff84c5f2f7bc91a98d45f4" } }, { "event_id": "evt-f25da6f414408452b481ef10", "kind": "unclassified_tcp", "frame_number": 64667, "timestamp_epoch": "1634916477.111911000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c93500000017030300260000000000000004ce21cfc9c43032c919c8789d88fb4c833d8d70dd3a1ce3de8428c349e27b" } }, { "event_id": "evt-17d016285e33a24abafedf45", "kind": "unclassified_tcp", "frame_number": 64675, "timestamp_epoch": "1634916480.899199000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bdb749dec1233f2a3bccf96a", "kind": "unclassified_tcp", "frame_number": 64679, "timestamp_epoch": "1634916482.834244000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200e3110c000000197b" } }, { "event_id": "evt-25dfe5dfad5dd9530b01dd79", "kind": "unclassified_tcp", "frame_number": 64681, "timestamp_epoch": "1634916483.019559000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3110e00000005020002" } }, { "event_id": "evt-03acea9727417460c44098f5", "kind": "unclassified_tcp", "frame_number": 64682, "timestamp_epoch": "1634916483.020122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e3110c0000000502" } }, { "event_id": "evt-0b224e7c6a94edc9d0c1d6de", "kind": "unclassified_tcp", "frame_number": 64685, "timestamp_epoch": "1634916483.151957000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c9a000000017030300910000000000000004975b9b599b62eb03e53a8603b995d57d89de3e1e11ba3d31598f9653b9333a9d97ea9fb83eeb8543053486a7da7b65df1b65815a3f5bc7caa622d262c8eab8c990a644c0c24f5c1aae7791fea87b279439b7fd41bf7e6f34064cc0d3ee845be843d517d068f15c229abfdae527882b190a0022252f834614fec317ab5ca3ce83bd68b7e4f43ad1fc18" } }, { "event_id": "evt-67cf16043c9dc6567b0561e1", "kind": "unclassified_tcp", "frame_number": 64689, "timestamp_epoch": "1634916483.365015000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ce0c489b2e976ed532c49176", "kind": "unclassified_tcp", "frame_number": 64690, "timestamp_epoch": "1634916483.365776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e3110c0000000100" } }, { "event_id": "evt-c695fa31da47ffb7713d3990", "kind": "unclassified_tcp", "frame_number": 64692, "timestamp_epoch": "1634916483.552699000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c92a000000170303001b000000000000000519c7c73e3936dfbceec97c914686bb0c11299b" } }, { "event_id": "evt-9a8a7290f0ad1e0aa0f46efe", "kind": "unclassified_tcp", "frame_number": 64696, "timestamp_epoch": "1634916483.813694000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3112100000005010003106d78312e6d61696c2e3133392e636f6d0019" } }, { "event_id": "evt-0c8545547452a6211175b3c7", "kind": "unclassified_tcp", "frame_number": 64703, "timestamp_epoch": "1634916484.172685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31114000000050000010a0a169cc3a5" } }, { "event_id": "evt-c842b1243d609b2848d28573", "kind": "unclassified_tcp", "frame_number": 64707, "timestamp_epoch": "1634916484.677896000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31144000000323230206c6f63616c686f737420726963686d61696c2073797374656d20763130283266323236313732643838346362372d3565333330290d0a" } }, { "event_id": "evt-25a74632eb42468009270968", "kind": "unclassified_tcp", "frame_number": 64710, "timestamp_epoch": "1634916485.189513000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3111a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-639798845943adc3b8890595", "kind": "unclassified_tcp", "frame_number": 64716, "timestamp_epoch": "1634916485.498275000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e311780000003235302d6d61696c0d0a3235302d5354415254544c530d0a3235302d582d504152540d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-9c8d96af84d4a9176a2973cb", "kind": "unclassified_tcp", "frame_number": 64721, "timestamp_epoch": "1634916485.744351000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e311140000005354415254544c530d0a" } }, { "event_id": "evt-4046d50ac3f78e0848934236", "kind": "unclassified_tcp", "frame_number": 64726, "timestamp_epoch": "1634916486.111771000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3112200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-a46de5314ef03536fdd5426b", "kind": "unclassified_tcp", "frame_number": 64730, "timestamp_epoch": "1634916486.624194000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b268cfaf60b57a9750ca5e2e", "kind": "unclassified_tcp", "frame_number": 64734, "timestamp_epoch": "1634916486.899185000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-47d19fad000ea0173feae042", "kind": "unclassified_tcp", "frame_number": 64741, "timestamp_epoch": "1634916486.931668000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-12be01f8724d8a4d8e30c614", "kind": "unclassified_tcp", "frame_number": 64742, "timestamp_epoch": "1634916486.931690000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0b2996603548166f32d27800", "kind": "unclassified_tcp", "frame_number": 64743, "timestamp_epoch": "1634916486.931701000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e030ba958ff014a0bdfb36a0", "kind": "unclassified_tcp", "frame_number": 64747, "timestamp_epoch": "1634916486.932184000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ba5cedf10991608069bbe93a", "kind": "unclassified_tcp", "frame_number": 64750, "timestamp_epoch": "1634916487.441939000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-10a0f31ce4d05181cd8105d8", "kind": "unclassified_tcp", "frame_number": 64755, "timestamp_epoch": "1634916487.852294000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3113d000000140303000101160303002842321f31581d0bbab63b3a3f26a4d8a81d74f725e80bb4202250d5d2ff0225a00257f46ed9914d12" } }, { "event_id": "evt-f6c77a06170e471df1b9e2b7", "kind": "unclassified_tcp", "frame_number": 64758, "timestamp_epoch": "1634916488.200747000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e311370000001703030028000000000000000180c18ce538b2d4832bd80ed9f0e8e08d35e1bd5c36a92f40e47f2394e9783d2e" } }, { "event_id": "evt-57d44c015dea46f11224af53", "kind": "unclassified_tcp", "frame_number": 64764, "timestamp_epoch": "1634916488.569686000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31187000000170303007842321f31581d0bbb82d3470b88ec49644c1d4fb9e0d11b677317a0d08d6c8c07048d232839f236ff0a0e508a098a949a5ee49d7c73e6069f3895abae038a23b5e67094709de9869ae27f792f741c21bf73c6234272ae3431951c059d52c99f06cfdf55c3710e24173226ef37ef88fcb172221f81a1a63d52" } }, { "event_id": "evt-aba640d83b785768e1be0e98", "kind": "unclassified_tcp", "frame_number": 64767, "timestamp_epoch": "1634916488.608611000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c97500000017030300660000000000000005a32539ec6e2f71a4c9c3444cf4436a95f4b9e16415ca915b5d02386ee452bcca9acd039f783f9327fa26ca4e2c981a7571e6a60ae413a49436557751b2f29b1e8bae7e4d50b90da6c7c1119fce71911d7d3d2182cb1208a42860f81041ed" } }, { "event_id": "evt-b08dacdcb151c22702268386", "kind": "unclassified_tcp", "frame_number": 64771, "timestamp_epoch": "1634916489.011160000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c92d000000170303001e0000000000000006f3d15e2eca191c96ce19d32bfb3f21254584c3cb5125" } }, { "event_id": "evt-77bc51bdcceaa7cb841bb8cf", "kind": "unclassified_tcp", "frame_number": 64776, "timestamp_epoch": "1634916489.052438000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c95700000017030300480000000000000006887c8c3b2da2def6a9bfa81ee3f1e055c27755f762e1284eff1a6016d4ed87644196bc9829cb35cc118c52c0a7353925c67a61c7344cab533d4e7ea5f192be00" } }, { "event_id": "evt-0446e214dd12962986e19b8f", "kind": "unclassified_tcp", "frame_number": 64782, "timestamp_epoch": "1634916489.057088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010030c90a000000" } }, { "event_id": "evt-d6500ce65a78a9391db3742b", "kind": "unclassified_tcp", "frame_number": 64785, "timestamp_epoch": "1634916489.380477000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010030c929000000150303001a00000000000000073c724c2375c01e19a7754dafe67cef152a4d" } }, { "event_id": "evt-f3e278f45f1a33e3f9a89031", "kind": "unclassified_tcp", "frame_number": 64787, "timestamp_epoch": "1634916489.569644000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010030c90a00000004070200e31133000000170303002400000000000000025c963616cb35884f729f7ef152749869b9bde25184fd0573b8361296" } }, { "event_id": "evt-92b920c9338d2a4b12ad62c4", "kind": "unclassified_tcp", "frame_number": 64792, "timestamp_epoch": "1634916489.900346000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31139000000170303002a42321f31581d0bbc076d211d3e3b30f0acbfd0219b86b917a6636caa55f9fc52a426f261716d51e37646" } }, { "event_id": "evt-fbf04daa00594cedd4048b6d", "kind": "unclassified_tcp", "frame_number": 64796, "timestamp_epoch": "1634916490.412273000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31145000000170303003600000000000000031c3f494f399f342ed549e8e6485152f6e15a7e90ef7f725f312cd7cd7608f672f450dec9b054e4353e99e962cd21" } }, { "event_id": "evt-61b5cbf49ae3839094b92801", "kind": "unclassified_tcp", "frame_number": 64801, "timestamp_epoch": "1634916490.720733000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31139000000170303002a42321f31581d0bbd38df4914754e572001c3b623e4cc02996e3168da84c0340c39fe51296359631d4d71" } }, { "event_id": "evt-54837762a3fe3267ae48939e", "kind": "unclassified_tcp", "frame_number": 64804, "timestamp_epoch": "1634916491.054707000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e311350000001703030026000000000000000414528838b55ae6157a0c4a2589cc0640aa387a942d415ea01a1e3310fd41" } }, { "event_id": "evt-67da4ca59cb20f8752afa4a4", "kind": "unclassified_tcp", "frame_number": 64810, "timestamp_epoch": "1634916491.436776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31168000000170303005942321f31581d0bbe27ce323d4f2b7e306f13f7b6ed0d462db1e7187bc14f21fa91dc702633a459b37f594a967b7ec73b69ce2dd4cf8ca6e3a90d0b114eeb85d37660b42b96532022e600ead45a6a0c4ecd444f13973d17c9d0" } }, { "event_id": "evt-96ca0aab0806d5c72750c756", "kind": "unclassified_tcp", "frame_number": 64813, "timestamp_epoch": "1634916491.731750000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3112a000000170303001b00000000000000050bbac53af8f97728efa4ca7ccbbae81b6f52f9" } }, { "event_id": "evt-9f3967efc8aabf3cefa37a8a", "kind": "unclassified_tcp", "frame_number": 64817, "timestamp_epoch": "1634916491.899390000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9a5bbcbaed4d1c29d8f6f739", "kind": "unclassified_tcp", "frame_number": 64820, "timestamp_epoch": "1634916492.051227000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31144000000170303003542321f31581d0bbf41032abccfdbb8f60a65ea42c28c05aff9f642e5dfcd072f48c37afd4db211b1d7a338c96cc07b4e0b1561f10d" } }, { "event_id": "evt-e81264082471da6dba4691cb", "kind": "unclassified_tcp", "frame_number": 64824, "timestamp_epoch": "1634916492.299317000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e3112d000000170303001e0000000000000006294603c42ee526d492864bbc2d898de743f7e7bcfa3b" } }, { "event_id": "evt-74c688d382c6eb1e18e8292e", "kind": "unclassified_tcp", "frame_number": 64830, "timestamp_epoch": "1634916492.665999000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e31163000000170303005442321f31581d0bc0b2502f7edc4a05320369cbf759857d679a1c7bce3dc62009f04504b0a03e066fea79bcc3e820d1f49d75c8bc7f6087486315d240ed65241bd3588592e4850261962a8fe612dc76cf2e01a564" } }, { "event_id": "evt-1d55053bbfbccd3e18370f43", "kind": "unclassified_tcp", "frame_number": 64834, "timestamp_epoch": "1634916492.666512000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200e3110a000000" } }, { "event_id": "evt-9785476052bc8a77a0ef5055", "kind": "unclassified_tcp", "frame_number": 64840, "timestamp_epoch": "1634916496.930706000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1fb35f2adb3eb430d6dddfe9", "kind": "unclassified_tcp", "frame_number": 64847, "timestamp_epoch": "1634916501.931082000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c693b135e7a0216951452649", "kind": "unclassified_tcp", "frame_number": 64853, "timestamp_epoch": "1634916505.790114000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-b29a2af0c53c98ba13e19921", "kind": "unclassified_tcp", "frame_number": 64856, "timestamp_epoch": "1634916506.693777000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100fa5e0c000000197b" } }, { "event_id": "evt-ac2ca0b9ff66dffc04dc7495", "kind": "unclassified_tcp", "frame_number": 64858, "timestamp_epoch": "1634916506.789972000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e0e00000005020002" } }, { "event_id": "evt-740cbc84922616a85dbd80d0", "kind": "unclassified_tcp", "frame_number": 64859, "timestamp_epoch": "1634916506.790314000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100fa5e0c0000000502" } }, { "event_id": "evt-2e1b7f65dd25b02209211923", "kind": "unclassified_tcp", "frame_number": 64861, "timestamp_epoch": "1634916506.960802000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8b690eb57d549f616f8950d7", "kind": "unclassified_tcp", "frame_number": 64864, "timestamp_epoch": "1634916507.308125000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-af8d594b94af690d303ec1ae", "kind": "unclassified_tcp", "frame_number": 64865, "timestamp_epoch": "1634916507.308398000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100fa5e0c0000000100" } }, { "event_id": "evt-2045d60470e163d55ddf2016", "kind": "unclassified_tcp", "frame_number": 64867, "timestamp_epoch": "1634916507.657786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e1f000000050100030e6d61696c2e69706167652e636f6d0019" } }, { "event_id": "evt-03938ffb660e96bfe33c03f3", "kind": "unclassified_tcp", "frame_number": 64874, "timestamp_epoch": "1634916507.786996000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e14000000050000010a0a169cc3a6" } }, { "event_id": "evt-bc2d73575c3dce53469bd6c1", "kind": "unclassified_tcp", "frame_number": 64877, "timestamp_epoch": "1634916507.855785000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e4e0000003232302045534d5450204672692c203232204f637420323032312031313a32383a3237202d303430303a20554345207374726963746c792070726f686962697465640d0a" } }, { "event_id": "evt-afc419ad85769fcb5d680be9", "kind": "unclassified_tcp", "frame_number": 64880, "timestamp_epoch": "1634916508.215231000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-19d2d09af748e226a8e6be45", "kind": "unclassified_tcp", "frame_number": 64886, "timestamp_epoch": "1634916508.297153000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5ed40000003235302d626f7361757468736d747031322e796f7572686f7374696e676163636f756e742e636f6d2048656c6c6f206c6f63616c686f7374205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033343630333030380d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-a7880d404d847d5bcef1579e", "kind": "unclassified_tcp", "frame_number": 64889, "timestamp_epoch": "1634916508.550185000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e140000005354415254544c530d0a" } }, { "event_id": "evt-15bcfad0d807027b76ac4512", "kind": "unclassified_tcp", "frame_number": 64894, "timestamp_epoch": "1634916508.625874000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e1c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-fbde44f3c9121e478a269565", "kind": "unclassified_tcp", "frame_number": 64897, "timestamp_epoch": "1634916508.959312000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5740183672c3041128e85f47", "kind": "unclassified_tcp", "frame_number": 64906, "timestamp_epoch": "1634916509.043508000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e0a100000160303005d020000590303a44b132ee133e3a0411f99b873b17ca027801930f65a964280f9e0befcaf84c720512cd3e205e9b657742f4aed807987381523df3fd2045f29e9e062a853f6ae57c02f00001100000000ff01000100000b00040300010216030311dd0b0011d90011d60006313082062d30820515a00302010202102c66b80820755f5d73bb3468a579f603300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303632393030303030305a170d3232303733303233353935395a30163114301206035504030c0b2a2e69706167652e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100ae267b32e75161bd5a8a689f445af4e4728ada9c1e541e0703b2658f54360e24db1a6e9b40b5c8d9eb10852add6e40c9e469f0e8e7ee70280a456dcb72e51a86c54bd1ea6fdc981eb8967e51dd6678898d7624dfcee97d1a200937d1daab28799bd834bf136b21ad1a9bfa9953c68b62bb939499e363f571a5966dc074a14fc8f364d69e7af834984170c747dc73c419af424b005b27e0d663890e3d57bb63cc0263c615d05a87939d6be14fcb06806a8715fd08837bb1e01eaaafc8cfc764d3422cab5a76c9f3b475523fab86dcd5621e68c07aed2608acff3a2c91275e8af850de00fd07db10a16da3ce26e1adf7be94061bf88a743f39b69cb3170efb88cb0203010001a38202fb308202f7301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e04160414fe698858e0804e815acfa01e15d8fa51cbd0becb300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d30210603551d11041a3018820b2a2e69706167652e636f6d820969706167652e636f6d30820181060a2b06010401d679020402048201710482016d016b00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017a58602a6200000403004830460221009a2ceb1e947763aaa1e9dc78a447608127be150c22f629cf2142a8ef3a617aa1022100815251ff2635d7159b009553acf8783ceceabfc48f37103d86a9a24b93a1934d00770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017a58602a240000040300483046022100c799d313aabed00b48d6fdf1ffc9526306e25768cfb8dfc2d8e52e86daf543460221008e24dec8dce5c0a640ce174a57f3b4b1ca5df1312341a2ed581a35dbd9a771510077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017a586029fa0000040300483046022100e764e97282a8912fab22523500b6797886e09fbf8d258d38b59278932cc39ab9022100ec9548546b96364273edb28a444f546a1ea1df97d9543b923aef19b28f9a5bd3300d06092a864886f70d01010b05000382010100b69bcd3cf45b17c6" } }, { "event_id": "evt-84561fd7d52de85158c292d2", "kind": "unclassified_tcp", "frame_number": 64907, "timestamp_epoch": "1634916509.043521000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dfa4d8bce262217b51c2d4bb", "kind": "unclassified_tcp", "frame_number": 64908, "timestamp_epoch": "1634916509.043528000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5a7952b09a79a73938c0714", "kind": "unclassified_tcp", "frame_number": 64912, "timestamp_epoch": "1634916509.043766000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d5077cf0551a841eac2a0d54", "kind": "unclassified_tcp", "frame_number": 64915, "timestamp_epoch": "1634916509.405985000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e880000001603030046100000424104c09fe92a18b7b0c38a1f2a38bf6ea55b504e76c408094c2b993a71ab9a5ef06eeb34ee3fcc7bb4ca1016ab98deabc12898c3796806d2fd114c67c3098a9c068f14030300010116030300280000000000000000f34b8d1ced963f12caf7fc2135f09e4140d855cf4f1e25249b872654678fbf06" } }, { "event_id": "evt-7dc18f36d955b53aa88a5b62", "kind": "unclassified_tcp", "frame_number": 64920, "timestamp_epoch": "1634916509.485681000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e3d00000014030300010116030300289905ba5edab828fd95f77878f695b425b355ee6788eab7af2868d499324d750e1c6ad93386922948" } }, { "event_id": "evt-84cbbb126fabe902a71f0d26", "kind": "unclassified_tcp", "frame_number": 64923, "timestamp_epoch": "1634916509.843370000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e3700000017030300280000000000000001472a8677177a1f6799c601a8a58232361985dad28f12964e61a764603506dc9a" } }, { "event_id": "evt-c57f816661ebfcfa4cda31aa", "kind": "unclassified_tcp", "frame_number": 64928, "timestamp_epoch": "1634916509.914673000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5ee300000017030300d49905ba5edab828fe93afc3cf432b0ade6187ee09197ae04ba19ac44532d3cb3bd93fe2b73a4c567635fcd31027d54a17ad0097107708c5c32f6350d0659a37f41ad6c524619737edb7652b64e13728bc613a5b0de3f3a915c93f988b64eb80a86b0b205147f856955fc27b11da4a83d3b303a1b91bbb838794bb506f3bc18de767bba2624a678b2d40fe7797f8d75ae8bf804068d0381c65ec9dfc9db0c10945638d4decf4e2fb628bcfcb39db48d86f46c6ceb355ea80dc00acffc64b209ccbae9d16e26161662d3b359f10686f678c577bf863" } }, { "event_id": "evt-c51dc4b17a019d9e153a3d3f", "kind": "unclassified_tcp", "frame_number": 64934, "timestamp_epoch": "1634916511.173559000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e3300000017030300240000000000000002e5a101f368ace4796e5b59774b87af0230133307df5fd27893e43a65" } }, { "event_id": "evt-177557b721ad2e2515b8099e", "kind": "unclassified_tcp", "frame_number": 64939, "timestamp_epoch": "1634916511.255012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e39000000170303002a9905ba5edab828ffbe09b002de2a05f0da04e3279ba7d56099ddfa440f05aa19d90a9138a4aeba5cb978" } }, { "event_id": "evt-1e6eae8e2742ee082031dc55", "kind": "unclassified_tcp", "frame_number": 64943, "timestamp_epoch": "1634916511.575787000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e4d000000170303003e000000000000000383a39ff423b08cc8e6f3b2371866042211dda3e901aa7fdecee4e8592536d5503c99e7eb810ec397c1f9fce5c0526746dec36377eaea" } }, { "event_id": "evt-91759f9450eeab2a568dcf0b", "kind": "unclassified_tcp", "frame_number": 64950, "timestamp_epoch": "1634916511.647034000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e39000000170303002a9905ba5edab829003b873c948ea35e2fee16ed50fb137ddb14d8b43d91477d4ed64e27d62930e8328fbb" } }, { "event_id": "evt-8f09644d26df007a77d6f774", "kind": "unclassified_tcp", "frame_number": 64953, "timestamp_epoch": "1634916511.982088000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e3500000017030300260000000000000004edf161f449848681f6c393b7685b5d6906f6706ad33dd0c0b305838fa853" } }, { "event_id": "evt-f4cc5048080d982c703a6127", "kind": "unclassified_tcp", "frame_number": 64956, "timestamp_epoch": "1634916512.008511000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a95fa6b02e0dd2bdebbd8a31", "kind": "unclassified_tcp", "frame_number": 64965, "timestamp_epoch": "1634916513.248504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e4a000000170303003b9905ba5edab82901fe6609c38f79e1540daa078eb2a7c684ff5ff2ccfedd6a2134dd58f656215ff1bddfb640d067877d0aca520def104e131cf9a8" } }, { "event_id": "evt-08a2729674c3886ff5477c5d", "kind": "unclassified_tcp", "frame_number": 64969, "timestamp_epoch": "1634916513.780972000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e2a000000170303001b0000000000000005afdf5210443a929036b2bc068a8bc6a3e545d6" } }, { "event_id": "evt-9795f2f9c119a7cdba62a9f5", "kind": "unclassified_tcp", "frame_number": 64974, "timestamp_epoch": "1634916513.865835000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e4100000017030300329905ba5edab8290268eaf38a9189cfd1ed978bdabb4e4f349e6c030cbe73ceaac2e8172efe6e09b4b672b4f2c00c9376818c" } }, { "event_id": "evt-781462a2dacda3ec95699afb", "kind": "unclassified_tcp", "frame_number": 64977, "timestamp_epoch": "1634916514.211536000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e2d000000170303001e00000000000000067bd771379d8373f4fd65ccf5477b12e41272da046a45" } }, { "event_id": "evt-a91e3a5fe520cc7ce31e53c0", "kind": "unclassified_tcp", "frame_number": 64984, "timestamp_epoch": "1634916514.289330000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e8300000017030300559905ba5edab82903bed8290978757c1eb3941028bda5a5083591adb83b5cb2ce9c590efc95c073a502c204514540bbc279965f4fb21761ac11ad473b73f5f4c04e346f2fb9385301ccef7395605da0d9abab9795c5150303001a9905ba5edab82904700f498ed4d1666fbe7ef06ca12174e130a5" } }, { "event_id": "evt-e3ab39bf7af0fd54ce194adb", "kind": "unclassified_tcp", "frame_number": 64988, "timestamp_epoch": "1634916514.289831000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100fa5e0a000000" } }, { "event_id": "evt-85924c340567901bb28ab829", "kind": "unclassified_tcp", "frame_number": 64990, "timestamp_epoch": "1634916514.660324000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fa5e29000000150303001a0000000000000007d1dd3c65a9a87ed97b082473cd64863b0383" } }, { "event_id": "evt-a7614a055d57a00c1118e50e", "kind": "unclassified_tcp", "frame_number": 64992, "timestamp_epoch": "1634916514.841348000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100fa5e0a000000" } }, { "event_id": "evt-c819ed0653468b941ff3c847", "kind": "unclassified_tcp", "frame_number": 64996, "timestamp_epoch": "1634916517.039866000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f931394d2a60bbc3deb4771e", "kind": "unclassified_tcp", "frame_number": 65003, "timestamp_epoch": "1634916522.040767000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5dbc956edc517c8105adbb26", "kind": "unclassified_tcp", "frame_number": 65010, "timestamp_epoch": "1634916527.071656000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-24d5618013ee450ffc5f0c45", "kind": "unclassified_tcp", "frame_number": 65015, "timestamp_epoch": "1634916529.734988000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010035cd0c000000197b" } }, { "event_id": "evt-32923f48b36aeeddc02426dc", "kind": "unclassified_tcp", "frame_number": 65017, "timestamp_epoch": "1634916529.924546000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd0e00000005020002" } }, { "event_id": "evt-d1237171cb2fd1d58a045f16", "kind": "unclassified_tcp", "frame_number": 65018, "timestamp_epoch": "1634916529.925052000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010035cd0c0000000502" } }, { "event_id": "evt-c7239de08955d1de991d2c7e", "kind": "unclassified_tcp", "frame_number": 65020, "timestamp_epoch": "1634916530.220941000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-247decc4df633dc307fdcc66", "kind": "unclassified_tcp", "frame_number": 65021, "timestamp_epoch": "1634916530.221398000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010035cd0c0000000100" } }, { "event_id": "evt-240cd6356fb59900fd6c5b62", "kind": "unclassified_tcp", "frame_number": 65024, "timestamp_epoch": "1634916530.577524000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd1f000000050100030e61762e6469616c2d75702e6e65740019" } }, { "event_id": "evt-4ddf1725425a61e9004efb0f", "kind": "unclassified_tcp", "frame_number": 65033, "timestamp_epoch": "1634916531.373732000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd14000000050000010a0a169cc3a7" } }, { "event_id": "evt-49f97b62b1f29a06c902a3a8", "kind": "unclassified_tcp", "frame_number": 65036, "timestamp_epoch": "1634916532.100994000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5e7baf6c60f412ab70fc6a61", "kind": "unclassified_tcp", "frame_number": 65044, "timestamp_epoch": "1634916535.649470000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1316cf5038c931cd7a11cddb", "kind": "unclassified_tcp", "frame_number": 65047, "timestamp_epoch": "1634916537.150442000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5822f474a0326e69a65470af", "kind": "unclassified_tcp", "frame_number": 65051, "timestamp_epoch": "1634916538.030405000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd4f00000032323020766973702d6d61696c342e697364736c2e6e65742045534d5450204578696d204672692c203232204f637420323032312031373a32383a3537202b303230300d0a" } }, { "event_id": "evt-15ef0aa5e0ff3df0ccb24f09", "kind": "unclassified_tcp", "frame_number": 65054, "timestamp_epoch": "1634916538.148769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200146c0c000000197b" } }, { "event_id": "evt-f0d73e7674d532dec8ec4ff9", "kind": "unclassified_tcp", "frame_number": 65057, "timestamp_epoch": "1634916538.335132000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c0e000000050200020407010035cd1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-6aea50f7fbb1991b6a720717", "kind": "unclassified_tcp", "frame_number": 65058, "timestamp_epoch": "1634916538.335555000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200146c0c0000000502" } }, { "event_id": "evt-d3b89a322c30d76df65760eb", "kind": "unclassified_tcp", "frame_number": 65062, "timestamp_epoch": "1634916538.730740000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-bdd94add266f0efde4e017c2", "kind": "unclassified_tcp", "frame_number": 65064, "timestamp_epoch": "1634916538.731074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200146c0c0000000100" } }, { "event_id": "evt-1fe72a48be88a65e08271633", "kind": "unclassified_tcp", "frame_number": 65066, "timestamp_epoch": "1634916538.731323000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cdb70000003235302d766973702d6d61696c342e697364736c2e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302048454c500d0a" } }, { "event_id": "evt-37c59daae8dd234c6de33527", "kind": "unclassified_tcp", "frame_number": 65069, "timestamp_epoch": "1634916539.197310000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-3223c06acb3b911b0a62db87", "kind": "unclassified_tcp", "frame_number": 65078, "timestamp_epoch": "1634916539.378068000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c14000000050000010a0a169cc3a8" } }, { "event_id": "evt-0aa53f820e85ccadb48a0388", "kind": "unclassified_tcp", "frame_number": 65081, "timestamp_epoch": "1634916539.558923000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c7900000032323020534130505231314341303037312e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a32383a3539202b303030300d0a" } }, { "event_id": "evt-ebcf1e4a59629964f72e8f56", "kind": "unclassified_tcp", "frame_number": 65084, "timestamp_epoch": "1634916539.756651000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd1600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-10859815efed3b2b3930c787", "kind": "unclassified_tcp", "frame_number": 65089, "timestamp_epoch": "1634916540.435347000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-0c4d4b9eaa36d4975d1682c3", "kind": "unclassified_tcp", "frame_number": 65096, "timestamp_epoch": "1634916540.618161000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146cd80000003235302d534130505231314341303037312e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-04c6160cde225c46b8eb8bc7", "kind": "unclassified_tcp", "frame_number": 65100, "timestamp_epoch": "1634916540.995031000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c140000005354415254544c530d0a" } }, { "event_id": "evt-686ef876e831121998e9d043", "kind": "unclassified_tcp", "frame_number": 65105, "timestamp_epoch": "1634916541.164228000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-84809408980b6fbcb664e4a0", "kind": "unclassified_tcp", "frame_number": 65110, "timestamp_epoch": "1634916541.311234000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd1c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-2d7d10ab137055fd3d11cbab", "kind": "unclassified_tcp", "frame_number": 65113, "timestamp_epoch": "1634916541.492038000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c1601000016030101070100010303036cf617867cfac34677cf77df5428418d9d1246421b56501ed43d562fd2b68f0620f7db05782c47350f66c0588955280cff85ac2f212540f01333be027e216e9d920026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e6f75746c6f6f6b2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020d5d07cddf55d8b5f67599f032f4dba82aac6f2ffe833ce28dce0dec368414256" } }, { "event_id": "evt-bb54c9df6edcd5e3f13727ae", "kind": "unclassified_tcp", "frame_number": 65118, "timestamp_epoch": "1634916541.682768000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c3c05000016030310f00200005103036172d8bd9e392fc655a5349ccdc676d9213e4b1377cc067b942728456bf49b1820a10b0000ac065fd2c527dce872d949c17368fe0e873dabdcdf92bf65ed443ab1c03000000900050000ff010001000b000d23000d200008303082082c30820714a00302010202100ccac32b0ef281026392b8852ab15642300d06092a864886f70d01010b0500304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d31301e170d3231303132323030303030305a170d3232303132313233353935395a306a310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e311430120603550403130b6f75746c6f6f6b2e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100b5de7ec750ed549d110cf273b19417492549937eb558162209a15a4db807edf797f76448efc134fec8eb8c39fb02f923bcd0cc6acadcb9b1059df7e1e10f7832a725b924591ad0b1813218bdc0dd0807f4884500856cb39a43e2fc46d1a56fe42c6f952de1b04750584c8b084d26177f86bdfa21e6feca5699c1c0d513a11f1fd73ffc34af94b5113e238eb25393157902135258a4915ba6a9f2aa7a78baba9a438e460df1e92f46abb7eab76814b548acb855936cb13408a474d03b1e8281e87fb76d4baeacdb4dbc2601841f12d1f062f956351e3ca239f89a437c5c92112cf675c1c8c32020f8071c1db875e37f7222a15eaae26e1765519a2e438d202b4b0203010001a38204eb308204e7301f0603551d23041830168014dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7301d0603551d0e04160414c2ef36cd677376d10f5529bdcec9c73a0ee58f39308202100603551d11048202073082020382162a2e636c6f2e666f6f747072696e74646e732e636f6d820d2a2e686f746d61696c2e636f6d82162a2e696e7465726e616c2e6f75746c6f6f6b2e636f6d820a2a2e6c6976652e636f6d82162a2e6e72622e666f6f747072696e74646e732e636f6d820c2a2e6f66666963652e636f6d820f2a2e6f66666963653336352e636f6d820d2a2e6f75746c6f6f6b2e636f6d82172a2e6f75746c6f6f6b2e6f66666963653336352e636f6d821b6174746163686d656e742e6f75746c6f6f6b2e6c6976652e6e6574821d6174746163686d656e742e6f75746c6f6f6b2e6f66666963652e6e657482206174746163686d656e742e6f75746c6f6f6b2e6f66666963657070652e6e657482166174746163686d656e74732e6f66666963652e6e6574821a6174746163686d656e74732d7364662e6f66666963652e6e6574821d6363732e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d82216363732d7364662e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d820b686f746d61696c2e636f6d82166d61696c2e73657276696365732e6c6976652e636f6d820d6f66666963653336352e636f6d820b6f75746c6f6f6b2e636f6d82126f75746c6f6f6b2e6f66666963652e636f6d82147375627374726174652e6f66666963652e636f6d82187375627374726174652d7364662e6f66666963652e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230818d0603551d1f048185308182303fa03da03b8639" } }, { "event_id": "evt-1d269fa1009329ed060897da", "kind": "unclassified_tcp", "frame_number": 65123, "timestamp_epoch": "1634916541.857650000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd280000006332397564473941615735726232786c6132387559323875656d453d0d0a" } }, { "event_id": "evt-8ad22e857a21992bd3b017ec", "kind": "unclassified_tcp", "frame_number": 65125, "timestamp_epoch": "1634916541.858417000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c80a7e7510b66225dd715216", "kind": "unclassified_tcp", "frame_number": 65126, "timestamp_epoch": "1634916541.858439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e63" } }, { "event_id": "evt-f61e2d43bd69b1e3a64bfd10", "kind": "unclassified_tcp", "frame_number": 65132, "timestamp_epoch": "1634916542.041842000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-68a50f677a617a2ccebeed58", "kind": "unclassified_tcp", "frame_number": 65137, "timestamp_epoch": "1634916542.180793000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8710bc4f700711f373f9d1a5", "kind": "unclassified_tcp", "frame_number": 65141, "timestamp_epoch": "1634916542.219578000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd1c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-d80fcb03be548d5ff191f310", "kind": "unclassified_tcp", "frame_number": 65143, "timestamp_epoch": "1634916542.219860000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-71e422bdb4d46b41747d34b6", "kind": "unclassified_tcp", "frame_number": 65148, "timestamp_epoch": "1634916542.692785000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd1c000000615735726232786c613238784d413d3d0d0a" } }, { "event_id": "evt-64ced78257a7e95f082a994d", "kind": "unclassified_tcp", "frame_number": 65152, "timestamp_epoch": "1634916542.874637000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146cb400000016030300070b0000030000001603030066100000626104315ec9baec977b3ae311b715ce5ca70209c097df0bfb8a03deae7fd53d45463a46857aa60192dd5cf4a8d43b5e938ded4e44312127af3bfe6f1cde8b351276b22ce79d42c6c0bab241ef27cdc821531d57cb56cce7e58c85b76d2d5ad11e562114030300010116030300280000000000000000cefccf833c4c7906d7393c7eee7c6d8f154aada8ff96d16957a78c559b3bc1e0" } }, { "event_id": "evt-7845c640ab30d1350e8186ca", "kind": "unclassified_tcp", "frame_number": 65157, "timestamp_epoch": "1634916542.932470000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c3d0000001403030001011603030028000000000000000060b78d5a636681106d1421e81cafefa8ec54d084f0f0ce2799f4c8cd0ff76f16" } }, { "event_id": "evt-cbcf722af0be371f9ac369e9", "kind": "unclassified_tcp", "frame_number": 65161, "timestamp_epoch": "1634916543.003528000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd280000003233352041757468656e7469636174696f6e207375636365656465640d0a" } }, { "event_id": "evt-b5ce84c8a7735016ab6e929d", "kind": "unclassified_tcp", "frame_number": 65165, "timestamp_epoch": "1634916543.323600000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c3700000017030300280000000000000001139912013796618f4e0157494fd5921725d7eda49ef1759c70c7b631afb0dbbc" } }, { "event_id": "evt-54e1d7a51770cf19abd82acf", "kind": "unclassified_tcp", "frame_number": 65170, "timestamp_epoch": "1634916543.367446000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d5c24f3de4b882f891eaf601", "kind": "unclassified_tcp", "frame_number": 65173, "timestamp_epoch": "1634916543.502597000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd3a0000004d41494c2046524f4d3a3c736f6e746f40696e6b6f6c656b6f2e636f2e7a613e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-8ebcfc85e09bc52c2e896103", "kind": "unclassified_tcp", "frame_number": 65178, "timestamp_epoch": "1634916543.866563000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd12000000323530204f4b0d0a" } }, { "event_id": "evt-039f69ff0acc07f6ef19b56e", "kind": "unclassified_tcp", "frame_number": 65181, "timestamp_epoch": "1634916544.215814000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd2b0000005243505420544f3a3c616e6472655f73616e74616e61406d61696c2e72753e0d0a" } }, { "event_id": "evt-fb6dd984184121cc9ccb5280", "kind": "unclassified_tcp", "frame_number": 65187, "timestamp_epoch": "1634916544.585296000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010035cd6a0000003535302d736f6e746f40696e6b6f6c656b6f2e636f2e7a612069732073656e64696e6720746f6f206d75636820656d61696c20746f6f20717569636b6c792e20285370616d0d0a3535302070726f74656374696f6e20656e61626c6564290d0a" } }, { "event_id": "evt-7f10a0654f895cb8a8dcf023", "kind": "unclassified_tcp", "frame_number": 65190, "timestamp_epoch": "1634916544.648927000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c3300000017030300240000000000000002c6d9d0e8eec49972b250bb1be4041399ee09627318c1f58e5386b296" } }, { "event_id": "evt-e7469822918a28c77a3349ee", "kind": "unclassified_tcp", "frame_number": 65194, "timestamp_epoch": "1634916544.699706000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c39000000170303002a00000000000000027ae189864ee1ffb713bb42df70b589469ef1b95f299db8eb21fb9c1960f4947a823e" } }, { "event_id": "evt-6dd06a9d897bfca8e07b8347", "kind": "unclassified_tcp", "frame_number": 65197, "timestamp_epoch": "1634916544.936948000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010035cd0a000000" } }, { "event_id": "evt-0a96ca898b40e60db47f3f71", "kind": "unclassified_tcp", "frame_number": 65201, "timestamp_epoch": "1634916545.114644000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c49000000170303003a00000000000000036c74db71a1b12ee269aa1df28715b5ce1b3df28dacbf34a22a6147e7aa3dc4b70e702a5c03ab039479e04dd7b794a8c94c20" } }, { "event_id": "evt-fad0c660fdf821c6f4168282", "kind": "unclassified_tcp", "frame_number": 65205, "timestamp_epoch": "1634916545.166646000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c39000000170303002a0000000000000003888b4a7948a9b38771e3581ddde98a9e1f303a78fd49a7d49f94ec950c762956e2e0" } }, { "event_id": "evt-8b58d94b58cf0e4a82e68271", "kind": "unclassified_tcp", "frame_number": 65213, "timestamp_epoch": "1634916545.478358000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c39000000170303002a000000000000000464cb1098433336e0c865b035e97e50bd0a4807d14957817768c229480059cb3803cc" } }, { "event_id": "evt-deb92a7a65548005049e0f11", "kind": "unclassified_tcp", "frame_number": 65218, "timestamp_epoch": "1634916547.242410000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-702081d268a04d08970e4bdd", "kind": "unclassified_tcp", "frame_number": 65225, "timestamp_epoch": "1634916552.258430000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e8b45a3abdbce7eded8a049c", "kind": "unclassified_tcp", "frame_number": 65232, "timestamp_epoch": "1634916555.348190000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146ca00000001703030091000000000000000407912d9244d0b4f0a7c1cef39bcbc18a96b6922a1da013fd5f08eb3231359948856cac46a4444f5260994954eb677757dd7b5271f5b9a0721f180a479776bfbc2bde80cb6d7c6e29e3e6539876eb2f7f5c03decaca06f2c5e6fafd27df179617b9a388aaf217d3a5f49b7239c20157b90bddab125379ad93a136ebe9a27d4c990f766879545171cc51" } }, { "event_id": "evt-59ba89ca30975b9012bdb43d", "kind": "unclassified_tcp", "frame_number": 65235, "timestamp_epoch": "1634916555.657348000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c2a000000170303001b000000000000000530bc5b936d4ac8384ed3b131934dcd93064359" } }, { "event_id": "evt-429f72d68f4d487634aaa26c", "kind": "unclassified_tcp", "frame_number": 65240, "timestamp_epoch": "1634916557.258502000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d32717f63a2e30629ddcc37b", "kind": "unclassified_tcp", "frame_number": 65243, "timestamp_epoch": "1634916557.894577000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010087670c000000197b" } }, { "event_id": "evt-bfb9ee92db3c85333a641ca4", "kind": "unclassified_tcp", "frame_number": 65245, "timestamp_epoch": "1634916558.203130000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087670e00000005020002" } }, { "event_id": "evt-ba4e1faf9cb34214f1183f8d", "kind": "unclassified_tcp", "frame_number": 65246, "timestamp_epoch": "1634916558.203463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010087670c0000000502" } }, { "event_id": "evt-c39907ffbb8b45af7f96f7ef", "kind": "unclassified_tcp", "frame_number": 65249, "timestamp_epoch": "1634916558.525023000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-0972f08c8097df9a3eb58f45", "kind": "unclassified_tcp", "frame_number": 65250, "timestamp_epoch": "1634916558.525543000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010087670c0000000100" } }, { "event_id": "evt-9ea6e253d2d675cdd587b75d", "kind": "unclassified_tcp", "frame_number": 65252, "timestamp_epoch": "1634916559.021359000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876727000000050100031677303064386234652e6b61737365727665722e636f6d0019" } }, { "event_id": "evt-550aefd0bb71abc4fdf0de9c", "kind": "unclassified_tcp", "frame_number": 65261, "timestamp_epoch": "1634916559.365061000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876714000000050000010a0a169cc3a9" } }, { "event_id": "evt-db6b072ec9d3b0999a69bb0f", "kind": "unclassified_tcp", "frame_number": 65264, "timestamp_epoch": "1634916560.045978000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087672a000000323230206464373531342e6b61737365727665722e636f6d2045534d54500d0a" } }, { "event_id": "evt-e9c08464d070da727e56910a", "kind": "unclassified_tcp", "frame_number": 65268, "timestamp_epoch": "1634916560.352952000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087671a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c6e123756850fb44438f6c15", "kind": "unclassified_tcp", "frame_number": 65273, "timestamp_epoch": "1634916560.516980000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008767c60000003235302d6464373531342e6b61737365727665722e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a45203130323430303030300d0a3235302d565246590d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-95cb16afe4d0dc16719531e3", "kind": "unclassified_tcp", "frame_number": 65277, "timestamp_epoch": "1634916560.723597000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c75000000170303006600000000000000054247cb00adcd3035cacbb2f68aaa7154f412488a016684962594a02426bb92f743f7022482a7a8cfd79d0139dff3fdf552097dff4ce9a4c292275becf1150f6d79c5f406151474b167da8328d9deb3608bb18cc54b22ad5ec762f3a35621" } }, { "event_id": "evt-b22af9bead9dd1490c9f8187", "kind": "unclassified_tcp", "frame_number": 65280, "timestamp_epoch": "1634916560.817015000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008767140000005354415254544c530d0a" } }, { "event_id": "evt-7fc419c0857d41b13fcc729e", "kind": "unclassified_tcp", "frame_number": 65285, "timestamp_epoch": "1634916560.988840000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087672800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5148d079c5bd8de914343687", "kind": "unclassified_tcp", "frame_number": 65288, "timestamp_epoch": "1634916561.043756000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c2d000000170303001e00000000000000067a196ad8aa9c5eeaac478b22f6476e8f9a1a1a4ce955" } }, { "event_id": "evt-2fb890e359dcd1eca08aa541", "kind": "unclassified_tcp", "frame_number": 65294, "timestamp_epoch": "1634916561.094088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200146c57000000170303004800000000000000062e0d2abe0d5fe8a0b64278bad34732674091bd9c8bb7d256dc71c343351e12c9758d958a1d0397748c3c01fbe3830861d28a2a9834acdd2e30834efc48d0b4db" } }, { "event_id": "evt-caaf8aa9d0bba074feb2e018", "kind": "unclassified_tcp", "frame_number": 65298, "timestamp_epoch": "1634916561.094770000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200146c0a000000" } }, { "event_id": "evt-e2f91cddf580013fa26f3961", "kind": "unclassified_tcp", "frame_number": 65301, "timestamp_epoch": "1634916561.312358000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4c8161812a92bed00352f1eb", "kind": "unclassified_tcp", "frame_number": 65309, "timestamp_epoch": "1634916561.495640000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9df1cad620a9accecb7b7d04", "kind": "unclassified_tcp", "frame_number": 65310, "timestamp_epoch": "1634916561.495663000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0a95c44b4282b797b2a882b5", "kind": "unclassified_tcp", "frame_number": 65311, "timestamp_epoch": "1634916561.495675000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8378d92b3f71c86f75286bab", "kind": "unclassified_tcp", "frame_number": 65315, "timestamp_epoch": "1634916561.968161000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087678800000016030300461000004241042b17698602be59a05ff8a619386fec148e8f837096622a9064e45e9cb3b3a467ed1266adfa2fbbfc3b4e1957d78c848fc17a7be15e59a3f50b9659f361da8c47140303000101160303002800000000000000007eb96096f7572ea428555659cc773fac4600bff47c594d60849c4a9c6433a3d1" } }, { "event_id": "evt-58d1722e4801570ef3605bd2", "kind": "unclassified_tcp", "frame_number": 65320, "timestamp_epoch": "1634916562.139831000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087673d000000140303000101160303002888d1855688969cf22102732c2553ae2a0c5d5209dd7a0e826a4ea72534d4c5271cb58b2f61ad00e5" } }, { "event_id": "evt-88c0167d577efbd4fbdf8144", "kind": "unclassified_tcp", "frame_number": 65324, "timestamp_epoch": "1634916562.290776000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-042526d42d64cdc2b59137fe", "kind": "unclassified_tcp", "frame_number": 65326, "timestamp_epoch": "1634916562.499229000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087673700000017030300280000000000000001ffcb4c2f8d587188f77e2b3a13f4c79f8d515161890d54457e3d704c9b2c473e" } }, { "event_id": "evt-b40e63f23040556b825f57f2", "kind": "unclassified_tcp", "frame_number": 65331, "timestamp_epoch": "1634916562.678660000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008767d500000017030300c688d1855688969cf3b31503fc7bf5c56fd2d69eb4bfb5bdfbdfea4a79ac84da84a0d3289999addb6bd6a2f10589d5a422dfd3b4b433a4ba97392088da4d7456925c035bc0a049b449db878f2ae51c5b738bb693a4c36f6a5bfcc62c246c8467a69a297fd2d02e0084c30ed8fcd4bca207b133fbed351524fe9951e1333250d27cf4071141864d43f9363f75b395975d19aba4f782d14a313a9b5b802f57e0570dae63aa2c1493faac2ffa73f51ae10f9466abcbf5805637dabf7032eb70ea2cd00f56b5575c8d" } }, { "event_id": "evt-c205270ef21b961da340710e", "kind": "unclassified_tcp", "frame_number": 65336, "timestamp_epoch": "1634916563.736909000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087673300000017030300240000000000000002e837c387c1b5bf87609c0949de80079efc44351418171d05c3cde23d" } }, { "event_id": "evt-e39e097362c6fc25c95992be", "kind": "unclassified_tcp", "frame_number": 65346, "timestamp_epoch": "1634916564.315762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876739000000170303002a88d1855688969cf444c5243243a4f1320d212dd9313467c41cb174c125fd233fa892138f9a1d56073122" } }, { "event_id": "evt-7a4e971f148434186ef51fb8", "kind": "unclassified_tcp", "frame_number": 65349, "timestamp_epoch": "1634916564.543609000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087674500000017030300360000000000000003ad6546a208ff56871b53df22e103a2bf14d324d920043518665bfe8c28be630955bee0ab39aa51e083e1b444dfa7" } }, { "event_id": "evt-c52db299413fb9eb9e3934b0", "kind": "unclassified_tcp", "frame_number": 65354, "timestamp_epoch": "1634916564.701246000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876739000000170303002a88d1855688969cf5f3851c40d18d0f7a871bb30f64f8bb80239c553926dbebaea831e0aa028ba7579d71" } }, { "event_id": "evt-ad8bc4426d1a2acc1c8172f3", "kind": "unclassified_tcp", "frame_number": 65357, "timestamp_epoch": "1634916564.935190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087673500000017030300260000000000000004978ae2cd8e56e6c47d358fef9cc2ac9a3fbfd2b1002b0eaca4f4d9b9affc" } }, { "event_id": "evt-e019a9419dd7e9b0ed45b919", "kind": "unclassified_tcp", "frame_number": 65365, "timestamp_epoch": "1634916566.709625000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087675d000000170303004e88d1855688969cf62558538b1fdb38d8e6a4a486bade66ce1136397a73e340773dd102d07964984d610b5996194ce55966040b57481ce3c89c60bd4601a3456ec65e69deb44580072944164f2315" } }, { "event_id": "evt-30b2cb1909dfeaf8435f8c22", "kind": "unclassified_tcp", "frame_number": 65369, "timestamp_epoch": "1634916567.073184000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087672a000000170303001b0000000000000005fe43082514d05a7a079f9894b9bbd8c6ea530e" } }, { "event_id": "evt-e213a47b04183734b14a74dc", "kind": "unclassified_tcp", "frame_number": 65374, "timestamp_epoch": "1634916567.253801000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876750000000170303004188d1855688969cf77f4464a36644d1ef952f01a32b5151bb0cf124ea23cf63c552445f0c931e0c09a01a47363b2782e21c6cbdd10bf04e8d343c71daa1cb2cb9f7" } }, { "event_id": "evt-aa32f05c8d73867f3c062793", "kind": "unclassified_tcp", "frame_number": 65377, "timestamp_epoch": "1634916567.290831000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-aae12b52e64cc46351c60075", "kind": "unclassified_tcp", "frame_number": 65380, "timestamp_epoch": "1634916567.599244000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087672d000000170303001e0000000000000006b7af12f06a3a1e56f3d22e83232c33eed2058babd47b" } }, { "event_id": "evt-776796e3ce141148737bdc61", "kind": "unclassified_tcp", "frame_number": 65391, "timestamp_epoch": "1634916571.822704000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876736000000170303002788d1855688969cf844df4b0347d378b0ff48c03f592e917852de77d32e36eff8020c6c4007c962" } }, { "event_id": "evt-6c3b63a5badde4378fe724b1", "kind": "unclassified_tcp", "frame_number": 65394, "timestamp_epoch": "1634916572.105269000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876729000000150303001a00000000000000076546e34bbf11c6a11d1e9c96bef3c0ec844d" } }, { "event_id": "evt-58174e5f3a202a9b70b51b21", "kind": "unclassified_tcp", "frame_number": 65401, "timestamp_epoch": "1634916572.147991000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100876729000000150303001a88d1855688969cf9ef86d2ba44bd9dbbcd1e041eb3f3f75477f7" } }, { "event_id": "evt-56fb64a6b160851e2d90e9df", "kind": "unclassified_tcp", "frame_number": 65408, "timestamp_epoch": "1634916572.268464000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010087670a000000" } }, { "event_id": "evt-17062d7ca97ef17114f0ee1d", "kind": "unclassified_tcp", "frame_number": 65411, "timestamp_epoch": "1634916572.303068000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010087670a000000" } }, { "event_id": "evt-417e8f5e26577aeb0ebcbae5", "kind": "unclassified_tcp", "frame_number": 65412, "timestamp_epoch": "1634916572.322815000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5fc88c3c5def5f015bf29ae4", "kind": "unclassified_tcp", "frame_number": 65420, "timestamp_epoch": "1634916577.384329000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a8b053efc143743ffb689097", "kind": "unclassified_tcp", "frame_number": 65427, "timestamp_epoch": "1634916582.401469000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fa92de1e11e0306a5f5a6829", "kind": "unclassified_tcp", "frame_number": 65434, "timestamp_epoch": "1634916587.413192000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5e2146a03d54e3b41bb7a1aa", "kind": "unclassified_tcp", "frame_number": 65441, "timestamp_epoch": "1634916591.881323000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100b3150c000000197b" } }, { "event_id": "evt-49c455b3a00ddcbffcfa2cf2", "kind": "unclassified_tcp", "frame_number": 65443, "timestamp_epoch": "1634916592.087813000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b3150e00000005020002" } }, { "event_id": "evt-1980feb99889f9bc16a8e1bb", "kind": "unclassified_tcp", "frame_number": 65444, "timestamp_epoch": "1634916592.088390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b3150c0000000502" } }, { "event_id": "evt-5d06f1cde71dd59b4df08609", "kind": "unclassified_tcp", "frame_number": 65447, "timestamp_epoch": "1634916592.328806000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b31520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a6e3e11676be5edfa159032a", "kind": "unclassified_tcp", "frame_number": 65448, "timestamp_epoch": "1634916592.329212000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b3150c0000000100" } }, { "event_id": "evt-e07a5ca4d8da1723ecd8b873", "kind": "unclassified_tcp", "frame_number": 65450, "timestamp_epoch": "1634916592.467390000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5e11720ffbe0da73a7bc33d8", "kind": "unclassified_tcp", "frame_number": 65452, "timestamp_epoch": "1634916592.695400000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b3152300000005010003126d61696c2e74656373696e6469612e636f6d0019" } }, { "event_id": "evt-a0923991a8ae43c7fd269919", "kind": "unclassified_tcp", "frame_number": 65462, "timestamp_epoch": "1634916593.518187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b31514000000050000010a0a169cc3aa" } }, { "event_id": "evt-177e9c1d511f726456c889ac", "kind": "unclassified_tcp", "frame_number": 65468, "timestamp_epoch": "1634916594.950005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b31553000000343231203c415353502e6e6f7370616d3e20736572766963652074656d706f726172696c7920756e617661696c61626c652c20636c6f73696e67207472616e736d697373696f6e0d0a" } }, { "event_id": "evt-7bbe5f5ace278541d91b79c8", "kind": "unclassified_tcp", "frame_number": 65472, "timestamp_epoch": "1634916594.950604000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100b3150a000000" } }, { "event_id": "evt-f1b6a4bdb9f2c07257932a72", "kind": "unclassified_tcp", "frame_number": 65475, "timestamp_epoch": "1634916595.295786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100b3150a000000" } }, { "event_id": "evt-38abb2223c7984b45147e3b8", "kind": "unclassified_tcp", "frame_number": 65476, "timestamp_epoch": "1634916595.322278000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-caca1b4b2163ac3c59a10e39", "kind": "unclassified_tcp", "frame_number": 65481, "timestamp_epoch": "1634916597.507175000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f8265404659ed7eaf9d3d39", "kind": "unclassified_tcp", "frame_number": 65490, "timestamp_epoch": "1634916602.519790000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a43aaaee9ca1598677228b3b", "kind": "unclassified_tcp", "frame_number": 65498, "timestamp_epoch": "1634916608.515653000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-efca42a1db57c387d6bdca90", "kind": "unclassified_tcp", "frame_number": 65506, "timestamp_epoch": "1634916614.512697000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9f10509d829e9cd39339ba14", "kind": "unclassified_tcp", "frame_number": 65513, "timestamp_epoch": "1634916619.511872000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6e80f04c5a7cb563d803e148", "kind": "unclassified_tcp", "frame_number": 65521, "timestamp_epoch": "1634916625.509628000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-07abeae1fc8e0d0e7112329a", "kind": "unclassified_tcp", "frame_number": 65523, "timestamp_epoch": "1634916625.791251000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-efaefb23eb2868880abb15c5", "kind": "unclassified_tcp", "frame_number": 65534, "timestamp_epoch": "1634916630.510004000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50183, "dst_port": 1187, "tcp_stream": 1254, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7661844bb8fee0cca74881d6", "kind": "unclassified_tcp", "frame_number": 65550, "timestamp_epoch": "1634916640.715173000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50184, "dst_port": 1187, "tcp_stream": 1282, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-599aaa44f34db758c4c23db5", "kind": "unclassified_tcp", "frame_number": 65565, "timestamp_epoch": "1634916648.179193000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50185, "dst_port": 1187, "tcp_stream": 1283, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e794a65dd6d9abf1a64972c9", "kind": "unclassified_tcp", "frame_number": 65631, "timestamp_epoch": "1634916652.525936000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50186, "dst_port": 1187, "tcp_stream": 1287, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-62cdc2d7f6483ba96231612a", "kind": "unclassified_tcp", "frame_number": 65635, "timestamp_epoch": "1634916652.990893000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010019e70c000000197b" } }, { "event_id": "evt-a03463f54cf0b4371c36c054", "kind": "unclassified_tcp", "frame_number": 65637, "timestamp_epoch": "1634916653.180439000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e70e00000005020002" } }, { "event_id": "evt-cd106291c28ae7b68e612161", "kind": "unclassified_tcp", "frame_number": 65638, "timestamp_epoch": "1634916653.180797000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010019e70c0000000502" } }, { "event_id": "evt-04670377e993607be2e304c1", "kind": "unclassified_tcp", "frame_number": 65641, "timestamp_epoch": "1634916653.430382000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-09263574fe241da954fac85c", "kind": "unclassified_tcp", "frame_number": 65642, "timestamp_epoch": "1634916653.430940000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010019e70c0000000100" } }, { "event_id": "evt-b6951d90c8f3c555f460f6de", "kind": "unclassified_tcp", "frame_number": 65645, "timestamp_epoch": "1634916653.912600000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e72c000000050100031b796561686d7830312e6d786d61696c2e6e6574656173652e636f6d0019" } }, { "event_id": "evt-b9ca26a1cc5a89262b10c112", "kind": "unclassified_tcp", "frame_number": 65655, "timestamp_epoch": "1634916654.527715000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e714000000050000010a0a169cc3ae" } }, { "event_id": "evt-a3a8f1c8e4fa40281706893b", "kind": "unclassified_tcp", "frame_number": 65681, "timestamp_epoch": "1634916655.632042000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0d65aa605b005d4eec92b0e1", "kind": "unclassified_tcp", "frame_number": 65692, "timestamp_epoch": "1634916655.961251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e74a00000032323020796561682e6e657420416e74692d7370616d20475420666f7220436f72656d61696c2053797374656d2028796561685b32303134313031365d290d0a" } }, { "event_id": "evt-5b54355f0b1569816840518f", "kind": "unclassified_tcp", "frame_number": 65696, "timestamp_epoch": "1634916656.292569000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e71a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b1566941ec0d519926669244", "kind": "unclassified_tcp", "frame_number": 65702, "timestamp_epoch": "1634916656.691439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7e40000003235302d6d61696c0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d636f72656d61696c203155787232784b6a376b4730786b4931377847725537493073384659325533556a38437a3238783155555555553749633249305932557230755a764955436130784472555555556a0d0a3235302d5354415254544c530d0a3235302d53495a452037333430303332300d0a3235302d534d5450555446380d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-be0ff9a289ef73bf53bd5b20", "kind": "unclassified_tcp", "frame_number": 65709, "timestamp_epoch": "1634916656.904792000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50188, "dst_port": 1187, "tcp_stream": 1290, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-af5d3d5f44757e355112a3cf", "kind": "unclassified_tcp", "frame_number": 65711, "timestamp_epoch": "1634916656.948569000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7140000005354415254544c530d0a" } }, { "event_id": "evt-9c129d0fd9fa9f27bd815c39", "kind": "unclassified_tcp", "frame_number": 65718, "timestamp_epoch": "1634916657.410394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e72200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-8218664a3b6bf714e3958947", "kind": "unclassified_tcp", "frame_number": 65721, "timestamp_epoch": "1634916657.697483000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-903e0f7635f8b62979256f94", "kind": "unclassified_tcp", "frame_number": 65729, "timestamp_epoch": "1634916658.217133000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-585d4fa27822daa6fe43322e", "kind": "unclassified_tcp", "frame_number": 65730, "timestamp_epoch": "1634916658.217147000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "ef4aad7e97b92e4a4d6302e3d54ec661fdbcdeb9d5c862193e7db1b86209feefe0c68535bc36368df1fc88d186194e90b5c57b59de8796b8a5ec851a1ee2eeb9da7be8a62b83275fdee6f92b609383e5eacfc0763e5f703c7802666e5b0393ac4fc0970b94df4bc204180d612161ef4a96a06047d6e87e2a25bacdfe0980d8fc58cf9a68c6b570e86230d3daed7c9ec03c24b495363dd8aa35c44c754f73ceea593f4c3ac8f5be4e6462591276f84be77d713205cfe13ab9f8752158112fbeacff8c245be1267ea2184aaeafaa862af07203e138cb3427fb3b0c396c82fc6c446f1ac133b6c3845cb4097caf3f94d64414142395c21bdcd58f3c48b10f83ceafc538555d67a9d247363c450d0e155b3e1d234faf6227f41adb6179b725d3a91b7af135c08c86e4a34567cd38c1fb2fd76dee75e8259c7882c0cc571f29e7c9045adb23fb7c782d13d61fb3d4b21db144bad8fd4344f4f97799f561d65e07439677824d336d022bec92cfdf3d7d4e54bf33602e884a509b88b794eeddef9fd87467d77f737779e94ff14d438a3e64ae7a40569f3eac57f7887972739ed36aa8d74a46c0220336c0fdaedb118346d6e00c2ebe2dd3ea66824e6e9d187f826e13a13773a1a2aee861782b08ed593cf82217ef6f4c15a23c478dcdf6e6c7c038a437facbe3dc38c9d9ac325372377206c83654aada74fee105054f08145ba7fbc78d558281dbe8a62f95a20ffb616740573e087b3ae0afece3165e7991e1c463bc403f3a3e295534497c7c87bb188495acd4ef07d89754f7698cbef3b6b25535685d6073991b8e7f28ef298e5504e5ce725c70f19566a5c6db8213dbd88b7677512b3054c9f2f74033ea0fb4ed088ff6f56b56f5d51bfcfb894bc04907cd9b3cf2dc6830598a797c71c0731145c18b1a85d55cf95d9b00fdba6f24e8bb0f167efdc464a84988d2639c2ad9f430835dbf58bc67e0966104b46733a7bc1523f1aed2fb1055ccae5e26d889760ff86326bd33e922d730f2647c9a956074890e586d5021a7218450bd0fe565b489d92e46ac04bec49ab134ed85a04f19aeef554fdb6337430df072d94f5b732d123f17ed81e9a5cc3e9db5534e0df0aed5061ef38929eaa3211db1ab4cf19ed4e3a9bc6e930b1ef045dce89febf6a29bd92ee2477c28746c9ca15a4303db809580127ebf5cd5c9ef54990202bfe7cdab9082350e62946b52e034892db597a1915e6ec7eaaf347e792f164659a8439e6a53c8754f7ad4f1c67ecb40da0f4c9a887d180ee1c0679256f2e34f9a318bd2ed1f04f5b03a0ac4d2f80d68c48ed3e8649bf7ffad57cda4b47fc96d223e4cf976095596b4e7ab1ba15fa06a04d2068f4e4311cac5e0a249fac157fd51e3df746e9ad2e533f726453fbbb633482f9a115a3df4442c48da84d13bbf87d27f00599dfbdb405e892302de25b8b269e9028ef7031e60bff8399736ef85346ab25a9167fa18c38e751666a60c65e0b3801000c2d48ee3b08d5c0b968f8b745ef3630feaf8ee35063d308f145f33e38f24cd8c0d719e56753aa0628ddc89b96133941d0fff0a345e0c4c4076ed735de898b5b5aaf464a74fe0b9d805a02da14ef751d0e443b2dc4ef699795dd4d07ffc99beb1b4e17e45d1b5164db5fe61c2f082326cea952a714cd20ed903e52165ebfe285304b5dab4bbea38ac02e834307b0a48a9ba5d4f2bd5077c401de3e28071464a66a3308221c09f99d98e8d15b919517195f691227f3eedd7df79947b3a3d8cd9242cd17a936608ef8f914b2f43ea173ee2598d49d16ab9e27d3a07bf56af67db2ae60c0ec7e1224dd49e0ea6b9dc7e26bd8c308aba8be11be1d8adb8b268f0fbdbebabf7c9ba4ad8234a3465116be94503102d7a119c897632f1bd9dd0ae1db94c97e9a3587d7bc56fad95abefe3bef352b1db5833f61db813312390b86f8ee313442a996773fe99f0711bb420beba83088a359fc090136bb032d445ee3e9b1770f715e4a927e8729050dc3a1ebad44acb24df29910c371c85b9b7714ffbc94e6992ba94f3c5d9aea463d44136" } }, { "event_id": "evt-407efd373d10285599f925cf", "kind": "unclassified_tcp", "frame_number": 65731, "timestamp_epoch": "1634916658.217154000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "a3e055c3f612dc26824abc90a98d7bcd719b3d3c3f216ade9355fb95bfb309f3e6141703535daed275f786525d96a885d146e646ab54a1381ee3433cb436a2aa6dc941c051143b4ce85d1710fab1dbb69fc51c57c581c64a75a50fd8aa78cec5d77f4d01a97873815daf11442ee92617e5ced11f5e5e4891cf7479ed0b1e394b8e00426bca88cdeb97fe668edd4bbaeb54f1a504ad48d5429b4b5f061ab4e0d87d1e52f10d06e2f5340688bfad9fdb7b801bbe534b0f44871b2e34bc1deb2ec063d0c1cde973daec8b409ab9b2bb539d9e1a916f344d8ee6e0473073eb93904b51f2b8212e997b902e2c826400e91cb712dfd72fd8e254dbe3394ee612723273b3ad20139beacaaafb8db9d1dd6c766095e62deb13b9ec4d635a93fcc645b315d63ce5dbc212ac5b5ef1efba1851ab63d71fb9f5f8384eaccf9d7be331c26ce9e3d429d12d5298daeb5ae0a1d19762b329e9565f857c63e9159b2dbd170303011924d4f58aba76e3e2b701e9382e2a994ef704cea2f685047e6b42db5b6e5caf143114d46b5d55b46457ead66d3128cc82920edd80f7364f380afd70cd02aba8a1cf187fa1e08c2e2dc5a1278e6b3810f4bff218276d458238d3511afd91c87f30fbe38d90978f6f50d70c2859f2dc98e323b22750871542e30937eb5633e66c9a12f15ae9a1ef08fbfd48afccfb8a78b62fd01313121ec4427c2105b77a5d04dcec5a574848dce423dce6e3bb000c6887319902254e09e041b01cfd4ac00130a0dd747269819b42659ab153ffd9138434d274e04381999127702684ecc28d3d60c07cbb26de3e6328484c0149b4453e52b3dcdf1ad9e331277782a2dc9e1b1a2c8a1436ba616252d402171db6969bb93e26929e16746442c11c170303003561187507cdd48e4d2956b8ec9451b6a1cd58a116dd56b7ee0b4ea62515bfea6f39885d3ad76f705c3e6bf24017cd5f224f2d29eee3" } }, { "event_id": "evt-e1e2066f11583563d2f62bf9", "kind": "unclassified_tcp", "frame_number": 65736, "timestamp_epoch": "1634916658.930190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7700000001403030001011703030035f30fe012f1d0dac3b3048646751da121a6f2ad66679911477103e1f2f5189ca7a436be68cbbc046a1dc031f4039454d2143c461b8917030300210f160c68d9d84fc53245c49e890b1b35ee2eec472e8b81d01013b5078988822712" } }, { "event_id": "evt-36ac6c04577aff63a5563635", "kind": "unclassified_tcp", "frame_number": 65743, "timestamp_epoch": "1634916660.673309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7b802000017030300da7c654365a2fea7bfd733a9219b0972a1c4c6f0fbbfc46a55c1a56f0fb9bb1e569bc0cc856e8f22e86bfd1da227447c9030e960b9d5284ae793cf3baf0220f5bd0fedc17721f351d6ccbf0260b6b33ed0c4afe3c5a3217f797521002b72c64075c148a440ffd4f3485720b2dab92711485498f07abaced30274baf79d20cab6c323c5d5192cfb3cf2927185f3928aef48540a1e2ee720212eefd0588bc959b1bf9bfc9b320404db42e5897b5a75aecc3b8a15aab6286decaa0b89a06b79378e7c868742b10ce25653f9eb0dc338e9f3b7a589e454064bc2828d6917030300dadf2e882a3992132cea142ad6c05db35086686e9385653922566ee2848bdd614c725110865c76b74a476a3e77a654844ca5dcf28f3fd60603c246e9f9301cc42207c4aebbbb0b8ee0efe7f8d823ded165c3efea14931e9d9d40df25035ed5b3d8c196af99942c4152ead5f6c75198669380b7b3d87152e37213fb491d773e6ffb839ef75a4d97abea848f3df84be45779382c38eb6dce81c3a728053551f3b4e893bc503a76522a50bfd8005abdfea2afdcefd9d503442fa05cb3592b00bfb08509e1300394e42fd56299ed6655fd11bdf09348b25ff02e6b0c8317030300eb04b824cf6efd411ad72f37baa34d8f869a44c9a9a2d3cdfd85dc279aa304d5e0dfcb1d0cd6655d55fd8eaf189a472b843f111180ed38efe61f05840dbda78184ec65adbd2878dc581e8169404f2fcd24e91aabf959e826c0f47b05efb0893c3203c792e8e878aca1a6f8cffe408449a45df4e5bc652d93a3efc2ca6f9ad92e980faabea172757d60130672ae235358af34d46e61b388bc1d3f7405262e0d825a331a9bccbec706a41d3305590bd83357d7b71c9b7ef1b4cb50094efc54b58d77629d59fc87d8f11ed0502eeae7706cb4ef500c3ff329d7663a392f877fc448867d5bf469b02e2d275aeb56" } }, { "event_id": "evt-b95d4c70749b945ba6171b53", "kind": "unclassified_tcp", "frame_number": 65757, "timestamp_epoch": "1634916661.336913000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50189, "dst_port": 1187, "tcp_stream": 1291, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-485b54e9d7bf22a78f7ae8e3", "kind": "unclassified_tcp", "frame_number": 65760, "timestamp_epoch": "1634916661.906017000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e72c000000170303001daea281615f5cbd25f72219be9382c63156236510cd9afae0ac09d43275" } }, { "event_id": "evt-60db5e3dd13f782ab83c2751", "kind": "unclassified_tcp", "frame_number": 65766, "timestamp_epoch": "1634916662.412063000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7320000001703030023c470cbd8a3abfd6146ad1bf89a9ff44610b1375f5e9d5ded18d97b2b8f5896a9568aba" } }, { "event_id": "evt-b8e89958eecd7d289f12144b", "kind": "unclassified_tcp", "frame_number": 65769, "timestamp_epoch": "1634916662.746287000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e74200000017030300338e25f08ebfb106f6afc01250a277a9a8d9240f638fe391fb9d6b073ad3c25e004d59e59585c85ac8cc20662ab08042109db466" } }, { "event_id": "evt-0a56316ee268b5c7c7cc60b9", "kind": "unclassified_tcp", "frame_number": 65774, "timestamp_epoch": "1634916663.236444000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e732000000170303002327c6a15a56c672cdd4cdbd4ce53c904063994224fb85a4dcbceb59872dacb63f0dcd53" } }, { "event_id": "evt-143f473b01df336cd0820297", "kind": "unclassified_tcp", "frame_number": 65778, "timestamp_epoch": "1634916663.610171000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e72a000000170303001b6a0d7835f6507dda9b67b3779c30f0f7254f6e956692227a16bc13" } }, { "event_id": "evt-c5730c9b1903f12c7ff6e3e8", "kind": "unclassified_tcp", "frame_number": 65783, "timestamp_epoch": "1634916664.152757000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e73f00000017030300305881d36aa33423c173588482f89bb1656620074f2b18dd76aa5611542d88a2c6fbdb6a6f26f77a46ee0cb206b9e9d76b" } }, { "event_id": "evt-d7feb444b014474a2f3829e6", "kind": "unclassified_tcp", "frame_number": 65787, "timestamp_epoch": "1634916664.510408000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7530000001703030044d1151c427b0d2e8c2e863f982794a6ddd877ab8c23f9ab78746d85efbc8a42de3624274c82ebb8fab15a7eee51ce9fb26a2f96fb2eaa56b4c7cb57c151de71a815a4f6e4" } }, { "event_id": "evt-8a93ee97d1c3c81e82bc3316", "kind": "unclassified_tcp", "frame_number": 65792, "timestamp_epoch": "1634916664.973150000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7720000001703030063ad591d3f9a96a0da3c915f5d43ecfaab103292418fe1f4b11adb1c8f6ac8064673594560492a38af064649cda068624b17f8103fd9ccd56a2dc756d6b62509f6d2e0a9d34f07e17dcb9e18dc753ff2cd6e6d2080590ce36d54e32fa3af768462005092" } }, { "event_id": "evt-148d36e383deb1ce4130508f", "kind": "unclassified_tcp", "frame_number": 65796, "timestamp_epoch": "1634916665.310360000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010019e7220000001703030013251761f496c575282386a7892284489e9e467d" } }, { "event_id": "evt-5c0d16e0d21a0b8ab47db315", "kind": "unclassified_tcp", "frame_number": 65801, "timestamp_epoch": "1634916665.515463000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010019e70a000000" } }, { "event_id": "evt-42730c4fb26793986e76fa0e", "kind": "unclassified_tcp", "frame_number": 65809, "timestamp_epoch": "1634916665.727685000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50190, "dst_port": 1187, "tcp_stream": 1292, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-72683998c0350fdba902eee6", "kind": "unclassified_tcp", "frame_number": 65840, "timestamp_epoch": "1634916670.084474000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50191, "dst_port": 1187, "tcp_stream": 1294, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ed05d9dc31f650b128aad5f7", "kind": "unclassified_tcp", "frame_number": 65844, "timestamp_epoch": "1634916670.501078000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010052100c000000197b" } }, { "event_id": "evt-7cbdc170daaf5a00c129ea6a", "kind": "unclassified_tcp", "frame_number": 65846, "timestamp_epoch": "1634916670.689546000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010052100e00000005020002" } }, { "event_id": "evt-04da1866d6cf3453ead76e7b", "kind": "unclassified_tcp", "frame_number": 65847, "timestamp_epoch": "1634916670.690041000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010052100c0000000502" } }, { "event_id": "evt-1f82eb59dd28ac4efb80156a", "kind": "unclassified_tcp", "frame_number": 65849, "timestamp_epoch": "1634916670.947569000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100521020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5fe4e60b4ef77288f5ca5d69", "kind": "unclassified_tcp", "frame_number": 65850, "timestamp_epoch": "1634916670.948160000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010052100c0000000100" } }, { "event_id": "evt-82a9440800014aeecb2667f3", "kind": "unclassified_tcp", "frame_number": 65853, "timestamp_epoch": "1634916671.265911000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005210210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-82afa57acf356c366f675bd8", "kind": "unclassified_tcp", "frame_number": 65866, "timestamp_epoch": "1634916674.188492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100521014000000050000010a0a169cc3af" } }, { "event_id": "evt-f18ed93277f4757cfea2ca33", "kind": "unclassified_tcp", "frame_number": 65873, "timestamp_epoch": "1634916674.406463000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50192, "dst_port": 1187, "tcp_stream": 1296, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-297906845a9be1ff4c6f90d4", "kind": "unclassified_tcp", "frame_number": 65877, "timestamp_epoch": "1634916676.235558000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020046bc0c000000197b" } }, { "event_id": "evt-9f59432a08533baff7bcbb88", "kind": "unclassified_tcp", "frame_number": 65880, "timestamp_epoch": "1634916676.418468000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc0e00000005020002" } }, { "event_id": "evt-73b48d3bfff1ce5724130377", "kind": "unclassified_tcp", "frame_number": 65881, "timestamp_epoch": "1634916676.419027000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020046bc0c0000000502" } }, { "event_id": "evt-61a6cbf62688a526b38d26c1", "kind": "unclassified_tcp", "frame_number": 65883, "timestamp_epoch": "1634916676.716012000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6d26aea6875002c18c3b30d9", "kind": "unclassified_tcp", "frame_number": 65884, "timestamp_epoch": "1634916676.716668000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020046bc0c0000000100" } }, { "event_id": "evt-8a5eb4f77775f63446c68d55", "kind": "unclassified_tcp", "frame_number": 65887, "timestamp_epoch": "1634916677.264251000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-3b5d7705920e7d41f7c1b600", "kind": "unclassified_tcp", "frame_number": 65892, "timestamp_epoch": "1634916677.670536000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc14000000050000010a0a169cc3b0" } }, { "event_id": "evt-3f1ae72c6042537eec6a61eb", "kind": "unclassified_tcp", "frame_number": 65898, "timestamp_epoch": "1634916678.716876000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50193, "dst_port": 1187, "tcp_stream": 1298, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ecce13b152e29d35a163acd4", "kind": "unclassified_tcp", "frame_number": 65903, "timestamp_epoch": "1634916679.206130000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010052104000000032323020736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-bf180bf77b4b4e4f210f3860", "kind": "unclassified_tcp", "frame_number": 65905, "timestamp_epoch": "1634916679.206531000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc4000000032323020736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-6decfd5106233434a1290a3e", "kind": "unclassified_tcp", "frame_number": 65910, "timestamp_epoch": "1634916679.450589000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010052101a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ef35df3da35408dfbf1b73f1", "kind": "unclassified_tcp", "frame_number": 65914, "timestamp_epoch": "1634916679.731636000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-aa84dca1c455e62fc90040f1", "kind": "unclassified_tcp", "frame_number": 65919, "timestamp_epoch": "1634916679.905205000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005210820000003235302d736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-f157059f80e9b451dd1ce99b", "kind": "unclassified_tcp", "frame_number": 65923, "timestamp_epoch": "1634916680.104268000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc820000003235302d736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-426c39c6853cb38b42d6b3e1", "kind": "unclassified_tcp", "frame_number": 65926, "timestamp_epoch": "1634916680.242249000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005210140000005354415254544c530d0a" } }, { "event_id": "evt-375371932ba93feaa56d5adf", "kind": "unclassified_tcp", "frame_number": 65939, "timestamp_epoch": "1634916680.418660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc140000005354415254544c530d0a" } }, { "event_id": "evt-4f690326b352f31270b64b47", "kind": "unclassified_tcp", "frame_number": 65944, "timestamp_epoch": "1634916680.740594000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010052101d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-f0234451da85362edc3190a6", "kind": "unclassified_tcp", "frame_number": 65948, "timestamp_epoch": "1634916680.794268000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-5fd05daacbe4e50a2aabe9a1", "kind": "unclassified_tcp", "frame_number": 65951, "timestamp_epoch": "1634916681.108615000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f0a681e8ffcc55b3e458a320", "kind": "unclassified_tcp", "frame_number": 65956, "timestamp_epoch": "1634916681.289120000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc1601000016030101070100010303034e4500174093592a817e36969fa3db54b412c6a2fa50b37cc9c5a956fed0d4632067f38490af333ea9aab7dcfb0790cbcffd731de0d3f2b63f3bca84e0c03dc29b0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e73696e612e636f6d2e636e000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00207898ea9a4296a4e625220504f08fd884bd8a434d3b83b0b630aeac11ca1aa64b" } }, { "event_id": "evt-e5dc7d7590ed77c2f32d0cf3", "kind": "unclassified_tcp", "frame_number": 65964, "timestamp_epoch": "1634916681.661250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-91ede75cb25f7b4ffdb460b4", "kind": "unclassified_tcp", "frame_number": 65965, "timestamp_epoch": "1634916681.661269000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-104d022e16008447c54f9819", "kind": "unclassified_tcp", "frame_number": 65966, "timestamp_epoch": "1634916681.661281000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-819ac3c8fdc9b18563beb747", "kind": "unclassified_tcp", "frame_number": 65974, "timestamp_epoch": "1634916681.678571000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dfd0235c21b3b24e9397b2da", "kind": "unclassified_tcp", "frame_number": 65975, "timestamp_epoch": "1634916681.678594000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-35ff46d4fcf7a3e3cf46b2fd", "kind": "unclassified_tcp", "frame_number": 65976, "timestamp_epoch": "1634916681.678606000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3e796a75b2ff85d3cfd1d2c6", "kind": "unclassified_tcp", "frame_number": 65980, "timestamp_epoch": "1634916681.927660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-46f5eeb30ed687e60e042f71", "kind": "unclassified_tcp", "frame_number": 65984, "timestamp_epoch": "1634916682.198528000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2837cc47729a63440ea07b16", "kind": "unclassified_tcp", "frame_number": 65990, "timestamp_epoch": "1634916682.687390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc3d0000001403030001011603030028be3ef750a6a4fd490e15a05338df90a7795fd3017aef2bcd49ede9c9f698acb35cabf94a7f149fb1" } }, { "event_id": "evt-b8f1354d8794aca052d6cef2", "kind": "unclassified_tcp", "frame_number": 65998, "timestamp_epoch": "1634916683.043281000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50194, "dst_port": 1187, "tcp_stream": 1299, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e60261902b7662083ecacb51", "kind": "unclassified_tcp", "frame_number": 66000, "timestamp_epoch": "1634916683.084467000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc37000000170303002800000000000000015b92b7bc3dee86e1f70ff30b834d228ce6d25c7843de7cddfb6a8abc21661ce7" } }, { "event_id": "evt-3a51ae292b097e1fba4927d3", "kind": "unclassified_tcp", "frame_number": 66011, "timestamp_epoch": "1634916683.711962000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010052100a000000" } }, { "event_id": "evt-e3dc51c8e99b2a103e11abf0", "kind": "unclassified_tcp", "frame_number": 66015, "timestamp_epoch": "1634916684.531725000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc9f0000001703030090be3ef750a6a4fd4a618b04ddcdf244d3ac4a7f1f29ac20cca45724d9ecf48310b0cefa0db3d1040aecc1a0cfeabdc0c5f4181446acc336e26d7066b18983de4ab0a85b515f7f657c02552df30873a7e6a0947acf8f692c3daaec88405fb57a482cf76bf5538a443ed8464546546191580d85530d134164abb9804e3ae8b1f25733733bc94811e51f624006b711c9ca33" } }, { "event_id": "evt-f511179974244da4da60d1f9", "kind": "unclassified_tcp", "frame_number": 66018, "timestamp_epoch": "1634916685.042101000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc3300000017030300240000000000000002fde06e4b3afb117d6aebf6361d05fe39bbe693e3282def9452b5d7e1" } }, { "event_id": "evt-6ef3e64ed0e924a432f55a94", "kind": "unclassified_tcp", "frame_number": 66025, "timestamp_epoch": "1634916685.452385000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc39000000170303002abe3ef750a6a4fd4ba0f620e03ce602b47b4365c21939f3586fc84788b203383b5a1f57cfe165bd4b3334" } }, { "event_id": "evt-db530d8dbe2384b5f3c30c11", "kind": "unclassified_tcp", "frame_number": 66028, "timestamp_epoch": "1634916685.945661000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3ec0a7f8473ac74669a79d0c", "kind": "unclassified_tcp", "frame_number": 66030, "timestamp_epoch": "1634916685.963808000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc41000000170303003200000000000000038467d708ff8ebecc45e0b5f1f7bd294b8711fe0d2241a7f8d979011742ffbe692b2b9e220108900908da" } }, { "event_id": "evt-4e9745410c0cfeff927e6844", "kind": "unclassified_tcp", "frame_number": 66035, "timestamp_epoch": "1634916686.373476000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d6480c000000197b" } }, { "event_id": "evt-8fc951cd757efdbb69dc8f31", "kind": "unclassified_tcp", "frame_number": 66037, "timestamp_epoch": "1634916686.374632000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc39000000170303002abe3ef750a6a4fd4cd5424e1d97634e9097d2ae77333b3eb60ca0ec80c87ac2cc11c0b1acb875bbec3bea" } }, { "event_id": "evt-ffa77a64423583ceff78f530", "kind": "unclassified_tcp", "frame_number": 66040, "timestamp_epoch": "1634916686.559372000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6480e00000005020002" } }, { "event_id": "evt-4bfd296407294410f1563c4b", "kind": "unclassified_tcp", "frame_number": 66041, "timestamp_epoch": "1634916686.559589000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d6480c0000000502" } }, { "event_id": "evt-7871ae18c02322db289f52ea", "kind": "unclassified_tcp", "frame_number": 66044, "timestamp_epoch": "1634916686.885261000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc31000000170303002200000000000000047ea4e997659a47dfd6711655a5954902cf05c50caf522d9bdba7" } }, { "event_id": "evt-e97938eac3f19bcb3504e4ba", "kind": "unclassified_tcp", "frame_number": 66048, "timestamp_epoch": "1634916687.073642000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d64820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-758d69656bfc0d034661ddf9", "kind": "unclassified_tcp", "frame_number": 66049, "timestamp_epoch": "1634916687.074187000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d6480c0000000100" } }, { "event_id": "evt-2cc054db3776f76e087cf8b7", "kind": "unclassified_tcp", "frame_number": 66055, "timestamp_epoch": "1634916687.305944000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d648210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-0818227f75700a4e79634e57", "kind": "unclassified_tcp", "frame_number": 66060, "timestamp_epoch": "1634916687.418208000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50195, "dst_port": 1187, "tcp_stream": 1300, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-77235f1c09c54ce54a78e448", "kind": "unclassified_tcp", "frame_number": 66063, "timestamp_epoch": "1634916687.528407000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc480000001703030039be3ef750a6a4fd4dfe1ee6b5c486f4de463474fbea631209082d3ccfb44a1ffedf782902831619cbb6099893745076cf0debf99e0d2c414f8b" } }, { "event_id": "evt-9f9c7bfee90d493e922afc8d", "kind": "unclassified_tcp", "frame_number": 66069, "timestamp_epoch": "1634916687.752314000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d64814000000050000010a0a169cc3b1" } }, { "event_id": "evt-8103822b0145e4fc9cf13733", "kind": "unclassified_tcp", "frame_number": 66071, "timestamp_epoch": "1634916687.769717000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc2a000000170303001b0000000000000005366f5d1f9faf52c2ae21c84e18626b264f10a6" } }, { "event_id": "evt-ad3dd3bb168d04158de58fed", "kind": "unclassified_tcp", "frame_number": 66076, "timestamp_epoch": "1634916688.235383000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc430000001703030034be3ef750a6a4fd4e8ce2a19f6ff990caf14fcfbd0e5bb84abc880dc45e3b841d094465c41d0ff2ad057959c09a66a1695f77449c" } }, { "event_id": "evt-05dcb98dd567fc5150c21f5a", "kind": "unclassified_tcp", "frame_number": 66080, "timestamp_epoch": "1634916688.601218000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc2d000000170303001e0000000000000006511c492647ecabfb10101d58fd3f0b11eda04fc0f7e2" } }, { "event_id": "evt-97282375ef3b04a62c1b9b06", "kind": "unclassified_tcp", "frame_number": 66086, "timestamp_epoch": "1634916689.036613000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc760000001703030048be3ef750a6a4fd4f13c7ffcc1fe59cdfd47eb482e3a37c4953382759f2a3583504214e197de38672e88d5bb0504f2c25426f988e3b484f19d35a3cf97379672c8644718983013209150303001abe3ef750a6a4fd507f62eb785f25e22c7f78008df0d72f998ad1" } }, { "event_id": "evt-14249a66f367d08cbe401ae3", "kind": "unclassified_tcp", "frame_number": 66090, "timestamp_epoch": "1634916689.037217000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020046bc0a000000" } }, { "event_id": "evt-bbb55e6f11df86ca5f6cd371", "kind": "unclassified_tcp", "frame_number": 66094, "timestamp_epoch": "1634916689.272775000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6484000000032323020736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-17fdcf344c0c8220894c9593", "kind": "unclassified_tcp", "frame_number": 66097, "timestamp_epoch": "1634916689.374572000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020046bc29000000150303001a00000000000000071b7d7a9df5e43f069dec9bda2f5100389bc1" } }, { "event_id": "evt-ab6abf57756031f2331f0743", "kind": "unclassified_tcp", "frame_number": 66099, "timestamp_epoch": "1634916689.548225000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020046bc0a000000" } }, { "event_id": "evt-de07a33e6c05bb89bdd3ba1f", "kind": "unclassified_tcp", "frame_number": 66101, "timestamp_epoch": "1634916689.730971000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6481a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-9196dfd0f284f59ab0f11d84", "kind": "unclassified_tcp", "frame_number": 66107, "timestamp_epoch": "1634916690.264821000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d648820000003235302d736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-9f02b3d58f83d915ca5cb120", "kind": "unclassified_tcp", "frame_number": 66110, "timestamp_epoch": "1634916690.542299000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d648140000005354415254544c530d0a" } }, { "event_id": "evt-275dbe0a9bc40fad9964b2e5", "kind": "unclassified_tcp", "frame_number": 66115, "timestamp_epoch": "1634916691.086370000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6481d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-e19dd623302b1d430881e6da", "kind": "unclassified_tcp", "frame_number": 66119, "timestamp_epoch": "1634916691.327752000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b73d9a1dd79be626a1ba306d", "kind": "unclassified_tcp", "frame_number": 66128, "timestamp_epoch": "1634916691.768077000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50196, "dst_port": 1187, "tcp_stream": 1302, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-af242877eb307ca4a6361601", "kind": "unclassified_tcp", "frame_number": 66136, "timestamp_epoch": "1634916693.133507000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d6486c0c000016030300510200004d03034198f6c05dfdf9641c1b406fbbe64c0a8dcf26cc991c6685ca955439220a98f5200be4ee42191e9468b0747d1d6306de370c5249d1ae794a0703c64c594ea17094009c000005ff010001001603030bfe0b000bfa000bf70006d3308206cf308205b7a003020102021001021b75fe3940175a34ab49a5290525300d06092a864886f70d01010b0500305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e20525341204341204731301e170d3139313032323030303030305a170d3232303132303132303030305a30818c310b300906035504061302434e3110300e060355040813074265696a696e67312a3028060355040a132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c7464312a3028060355040b132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c74643113301106035504030c0a2a2e73696e612e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afca8a8e52c691e3f0acf73d511dca772206440ebad2392ed09cd40708006010432db966d2bd0e98f1a3a0b8d7741f1fccfef8ec9730b5858a904720a96f065757b71805efecb702536f108dd2853a2fbc55c28c5c565776c09777de66d5ffa3207e2f15cd798b657873c9d68749e8a431a8cdd5ce6d3df49d72ce85e1c59adf62627b1134e93a91cac7278e9337c89020afd4a14c0cfadc6a8d2e9f6d27451ee97cd94de0adc2c3f807bb3c6a43e31aadb0fe2f7a3c7d968bc2b4c7c4676db1a3947d7b238c35d2ee206e133c830d43db28a16bb3ba7ab6f4803e88c379088121cc0e247eb96b89476268b83749b020402f8525e2d3bb83e29b216fcfa2e5a70203010001a382035730820353301f0603551d23041830168014919f5e3115ae109fad60c1f7c1ccaa48342f0c26301d0603551d0e04160414c6cddfc1597f2dcba3570852d940e8d0a2e9c5c0301f0603551d1104183016820a2a2e73696e612e636f6d820873696e612e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230750603551d1f046e306c3034a032a030862e687474703a2f2f63726c332e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c3034a032a030862e687474703a2f2f63726c342e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c304c0603551d2004453043303706096086480186fd6c0101302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f4350533008060667810c010202306f06082b0601050507010104633061302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e303c06082b060105050730028630687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f47656f5472757374434e525341434147312e63727430090603551d13040230003082017e060a2b06010401d6790204020482016e0482016a0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df237acfc000004030047304502206a9c64dcfed001f85a13ae5ddbd38b8f0957fd13e4f227a5d1ebe53e86916d54022100b0d2e6c3c70cb0c731ce01873608b1a4218cf30970ab1c1982658c5dacc988d10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df237ad31000004030046304402206160c50a411342e0c49c30e769358bab7eabee356b7280a1704bf000121baced0220096bd4ec0f6bdaeff39efdf390147faaa37e1a37092c86841621b9068654e6" } }, { "event_id": "evt-a78a8d181bba7bdfa5277c87", "kind": "unclassified_tcp", "frame_number": 66137, "timestamp_epoch": "1634916693.133529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5bc0a7246a2215fbd3c227b6", "kind": "unclassified_tcp", "frame_number": 66138, "timestamp_epoch": "1634916693.133540000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-52e4b5d5b8073bfb5939e63f", "kind": "unclassified_tcp", "frame_number": 66143, "timestamp_epoch": "1634916693.680755000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-93087f0df17e4b316d51efe0", "kind": "unclassified_tcp", "frame_number": 66151, "timestamp_epoch": "1634916693.781160000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d6480a000000" } }, { "event_id": "evt-d7a635e25c17d810f8acd812", "kind": "unclassified_tcp", "frame_number": 66158, "timestamp_epoch": "1634916696.089087000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50197, "dst_port": 1187, "tcp_stream": 1303, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-67ae9217df05bc8affbf3a40", "kind": "unclassified_tcp", "frame_number": 66162, "timestamp_epoch": "1634916697.125421000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010083110c000000197b" } }, { "event_id": "evt-590f9cb7bed77272a5a4baf4", "kind": "unclassified_tcp", "frame_number": 66165, "timestamp_epoch": "1634916697.307769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010083110e00000005020002" } }, { "event_id": "evt-e684276618890d860125d681", "kind": "unclassified_tcp", "frame_number": 66166, "timestamp_epoch": "1634916697.308329000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010083110c0000000502" } }, { "event_id": "evt-224bb22dcaa1cc98dd52efd0", "kind": "unclassified_tcp", "frame_number": 66168, "timestamp_epoch": "1634916697.664731000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100831120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e48d7d4804f392c70a3ce7ed", "kind": "unclassified_tcp", "frame_number": 66169, "timestamp_epoch": "1634916697.665186000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010083110c0000000100" } }, { "event_id": "evt-61086a47cd70b23c8540b74e", "kind": "unclassified_tcp", "frame_number": 66171, "timestamp_epoch": "1634916698.149479000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010083111f000000050100030e736d74702e766f782e636f2e7a610019" } }, { "event_id": "evt-28f9fae787494734d1be1ad7", "kind": "unclassified_tcp", "frame_number": 66180, "timestamp_epoch": "1634916698.709922000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100831114000000050000010a0a169cc3b2" } }, { "event_id": "evt-f41beb496bbd487afa5280b6", "kind": "unclassified_tcp", "frame_number": 66183, "timestamp_epoch": "1634916698.857665000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010083110a000000" } }, { "event_id": "evt-eff910cd0b9eb818396bc959", "kind": "unclassified_tcp", "frame_number": 66190, "timestamp_epoch": "1634916700.416358000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50198, "dst_port": 1187, "tcp_stream": 1305, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fa39ae22f71655e4e882f28f", "kind": "unclassified_tcp", "frame_number": 66200, "timestamp_epoch": "1634916704.723054000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50199, "dst_port": 1187, "tcp_stream": 1306, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-41ab735b34318307248f62e7", "kind": "unclassified_tcp", "frame_number": 66202, "timestamp_epoch": "1634916704.759564000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50199, "dst_port": 1187, "tcp_stream": 1306, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9d8eabd2685c7fd6297dd320", "kind": "unclassified_tcp", "frame_number": 66214, "timestamp_epoch": "1634916709.065052000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50200, "dst_port": 1187, "tcp_stream": 1307, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f3841671366c0e49e2d61e00", "kind": "unclassified_tcp", "frame_number": 66242, "timestamp_epoch": "1634916713.456368000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50201, "dst_port": 1187, "tcp_stream": 1308, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-dd583addd13197f02cdd0acd", "kind": "unclassified_tcp", "frame_number": 66270, "timestamp_epoch": "1634916715.320116000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-055e8cc2453faaee77b0e04c", "kind": "unclassified_tcp", "frame_number": 66279, "timestamp_epoch": "1634916715.960987000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-034f35ca63521b09319ebe3f", "kind": "unclassified_tcp", "frame_number": 66288, "timestamp_epoch": "1634916717.796413000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50202, "dst_port": 1187, "tcp_stream": 1310, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5f612a4208d8d969c36d7ab6", "kind": "unclassified_tcp", "frame_number": 66290, "timestamp_epoch": "1634916717.820167000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50202, "dst_port": 1187, "tcp_stream": 1310, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-664a892035dc6ad713052942", "kind": "unclassified_tcp", "frame_number": 66304, "timestamp_epoch": "1634916722.118598000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50203, "dst_port": 1187, "tcp_stream": 1311, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fe9dd348c0b9dcef92c8bb75", "kind": "unclassified_tcp", "frame_number": 66322, "timestamp_epoch": "1634916726.462368000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50204, "dst_port": 1187, "tcp_stream": 1312, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-670c6a97f9e6482cc38f6f1d", "kind": "unclassified_tcp", "frame_number": 66333, "timestamp_epoch": "1634916730.846908000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50205, "dst_port": 1187, "tcp_stream": 1313, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-dde3f407e6e97499884c05e5", "kind": "unclassified_tcp", "frame_number": 66335, "timestamp_epoch": "1634916730.900155000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50205, "dst_port": 1187, "tcp_stream": 1313, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b56ef33d9ed5b21f90af31e4", "kind": "unclassified_tcp", "frame_number": 66352, "timestamp_epoch": "1634916735.270210000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50206, "dst_port": 1187, "tcp_stream": 1314, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b3e0010fe561ef6f4212fbd5", "kind": "unclassified_tcp", "frame_number": 66366, "timestamp_epoch": "1634916739.792991000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50207, "dst_port": 1187, "tcp_stream": 1315, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-70ecece131b7e67948ab014e", "kind": "unclassified_tcp", "frame_number": 66368, "timestamp_epoch": "1634916739.932122000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50207, "dst_port": 1187, "tcp_stream": 1315, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f54bac5ab259bff12c9802ab", "kind": "unclassified_tcp", "frame_number": 66396, "timestamp_epoch": "1634916744.191341000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50208, "dst_port": 1187, "tcp_stream": 1316, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d52bfca7511715663bae4432", "kind": "unclassified_tcp", "frame_number": 66402, "timestamp_epoch": "1634916745.618069000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0050c98b78c76e59fcfb8393", "kind": "unclassified_tcp", "frame_number": 66404, "timestamp_epoch": "1634916745.805957000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8c6d160f1c14822c44c4c62e", "kind": "unclassified_tcp", "frame_number": 66447, "timestamp_epoch": "1634916748.540004000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50209, "dst_port": 1187, "tcp_stream": 1318, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ba71f9478f1fcf3095152d08", "kind": "unclassified_tcp", "frame_number": 66463, "timestamp_epoch": "1634916752.887462000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50210, "dst_port": 1187, "tcp_stream": 1319, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-21021fa8c948651e162b0f57", "kind": "unclassified_tcp", "frame_number": 66465, "timestamp_epoch": "1634916752.993849000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50210, "dst_port": 1187, "tcp_stream": 1319, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-103ffa1acfd929835440f806", "kind": "unclassified_tcp", "frame_number": 66483, "timestamp_epoch": "1634916757.253752000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50211, "dst_port": 1187, "tcp_stream": 1320, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ca2f1d91a64c58ac21f3c98b", "kind": "unclassified_tcp", "frame_number": 66496, "timestamp_epoch": "1634916761.660114000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50212, "dst_port": 1187, "tcp_stream": 1321, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d5e88b22c1feb5e2a78455ec", "kind": "unclassified_tcp", "frame_number": 66520, "timestamp_epoch": "1634916766.018060000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50213, "dst_port": 1187, "tcp_stream": 1327, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7cb7ab7642260c26bbbdb1a1", "kind": "unclassified_tcp", "frame_number": 66522, "timestamp_epoch": "1634916766.042054000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50213, "dst_port": 1187, "tcp_stream": 1327, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-50a5057ce66b64138bc9f8b3", "kind": "unclassified_tcp", "frame_number": 66541, "timestamp_epoch": "1634916770.497830000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50214, "dst_port": 1187, "tcp_stream": 1333, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d0e7013748bdc975d1e63349", "kind": "unclassified_tcp", "frame_number": 66562, "timestamp_epoch": "1634916774.863253000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50215, "dst_port": 1187, "tcp_stream": 1339, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-becce036f7bb82112981ac8c", "kind": "unclassified_tcp", "frame_number": 66565, "timestamp_epoch": "1634916775.633489000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d89c6a771ff18c4bc48e7b78", "kind": "unclassified_tcp", "frame_number": 66567, "timestamp_epoch": "1634916775.667293000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701009a6e0c000000197b" } }, { "event_id": "evt-f080e495796a770ba404ddd4", "kind": "unclassified_tcp", "frame_number": 66569, "timestamp_epoch": "1634916775.861472000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e0e00000005020002" } }, { "event_id": "evt-80c2eba7748242dc46ee1535", "kind": "unclassified_tcp", "frame_number": 66570, "timestamp_epoch": "1634916775.862011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009a6e0c0000000502" } }, { "event_id": "evt-3862e922a7911d06f9de1be2", "kind": "unclassified_tcp", "frame_number": 66572, "timestamp_epoch": "1634916775.979904000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e75d596968ee6b5e17fd4df4", "kind": "unclassified_tcp", "frame_number": 66574, "timestamp_epoch": "1634916776.082345000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-cb2b273a37719a876fa02815", "kind": "unclassified_tcp", "frame_number": 66576, "timestamp_epoch": "1634916776.109301000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e4f24579e2b2ad77772d2eaf", "kind": "unclassified_tcp", "frame_number": 66577, "timestamp_epoch": "1634916776.109857000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009a6e0c0000000100" } }, { "event_id": "evt-d68ae2685ebde6c7b057a9da", "kind": "unclassified_tcp", "frame_number": 66579, "timestamp_epoch": "1634916776.489227000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-027650a8626abe3737b20e50", "kind": "unclassified_tcp", "frame_number": 66586, "timestamp_epoch": "1634916776.595558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e14000000050000010a0a169cc3ba" } }, { "event_id": "evt-b4f792c0bed413376da249b1", "kind": "unclassified_tcp", "frame_number": 66589, "timestamp_epoch": "1634916776.644669000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e7b00000032323020534e345052303630314341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a33323a3535202b303030300d0a" } }, { "event_id": "evt-6792e2a1edb9460ddd9c5124", "kind": "unclassified_tcp", "frame_number": 66592, "timestamp_epoch": "1634916777.028418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-befbb4d4419452c4f138f90c", "kind": "unclassified_tcp", "frame_number": 66597, "timestamp_epoch": "1634916777.078746000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6eda0000003235302d534e345052303630314341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-95fca0bb66d71d4c0d8b0763", "kind": "unclassified_tcp", "frame_number": 66600, "timestamp_epoch": "1634916777.435070000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e140000005354415254544c530d0a" } }, { "event_id": "evt-4d333970aa539f7d549b11bf", "kind": "unclassified_tcp", "frame_number": 66605, "timestamp_epoch": "1634916777.488450000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-3e3f1f47d40e517633fd7f8f", "kind": "unclassified_tcp", "frame_number": 66608, "timestamp_epoch": "1634916777.831996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-05578a3eca41806ccae44eb3", "kind": "unclassified_tcp", "frame_number": 66613, "timestamp_epoch": "1634916777.899960000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-48f3a1e0d564c2bef9bd7808", "kind": "unclassified_tcp", "frame_number": 66620, "timestamp_epoch": "1634916777.981027000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-25cceb3a11144f92f790bfe6", "kind": "unclassified_tcp", "frame_number": 66621, "timestamp_epoch": "1634916777.981042000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f322c69322da38fbe7a9717", "kind": "unclassified_tcp", "frame_number": 66626, "timestamp_epoch": "1634916778.028146000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b62e42dddb7ac11869012298", "kind": "unclassified_tcp", "frame_number": 66628, "timestamp_epoch": "1634916778.287344000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6eb400000016030300070b0000030000001603030066100000626104952bf9f013ba3d671bfb076fa1865146d756c93d2c997a6cc1822df342de0ec2c2512e52cc67239a070e450f1f6eee0db5810f42045a151284580d80274b0d1eaf219575f4565c93f1516c0c1d9fe69018203ad2972bdb1c56e2f190569bd0561403030001011603030028000000000000000009b3dcb34e4853f349efe2bf2e456d6bd329d12c1022f01f50e983f64e8bf049" } }, { "event_id": "evt-6de546edb845eb889f683717", "kind": "unclassified_tcp", "frame_number": 66633, "timestamp_epoch": "1634916778.348783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e3d00000014030300010116030300280000000000000000d458c773bcfcbd302a4abbffab8fda2720480734ae18203ee12e368fcddd1513" } }, { "event_id": "evt-29dea0dd396f3e5960b92b7e", "kind": "unclassified_tcp", "frame_number": 66636, "timestamp_epoch": "1634916778.723257000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e3700000017030300280000000000000001441cfb5b11aa55faa61ca1b700dbb50834c9bdc09dd4d0521ecb8be51d55fd36" } }, { "event_id": "evt-7d83f63bdc0377c9324e4111", "kind": "unclassified_tcp", "frame_number": 66641, "timestamp_epoch": "1634916778.804846000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dcdd745d60bbd041bef5e002", "kind": "unclassified_tcp", "frame_number": 66651, "timestamp_epoch": "1634916779.174577000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50216, "dst_port": 1187, "tcp_stream": 1341, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1ffd402b56204e07cb788609", "kind": "unclassified_tcp", "frame_number": 66654, "timestamp_epoch": "1634916779.970068000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e3300000017030300240000000000000002b44ca73397aa243f6493272a0d6ecdf835b08ae76c16b22dfdca2ced" } }, { "event_id": "evt-3eaab3c6eba26f2afb6df572", "kind": "unclassified_tcp", "frame_number": 66659, "timestamp_epoch": "1634916780.025460000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e39000000170303002a0000000000000002904c8420447899758b98084ccebdd861573808ce707980c32ada925ae1311c2d6042" } }, { "event_id": "evt-db54ebff6cba3f992ce193cd", "kind": "unclassified_tcp", "frame_number": 66662, "timestamp_epoch": "1634916780.407177000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e550000001703030046000000000000000395c1bb9cdc82412c505ab85e57125f08617ed54c8c9e834dd04eb91b4f2aa0045f87b352445f405a02fd2299c569a3426a60c1203d55ded41bc72926142c" } }, { "event_id": "evt-0290ba7d87b513cc359b76e3", "kind": "unclassified_tcp", "frame_number": 66667, "timestamp_epoch": "1634916780.453991000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e39000000170303002a00000000000000039a30c30f112e7b27e4d141109b01ff6cf93a3659fd6ee251b4dbe8d34cbdcbe77dc6" } }, { "event_id": "evt-b4eaaced3180b5499bc0d827", "kind": "unclassified_tcp", "frame_number": 66674, "timestamp_epoch": "1634916780.993026000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e35000000170303002600000000000000043b4f7f70b36a6c4627f5c643b8994cc0861a557f80fb7206f8201b9601ca" } }, { "event_id": "evt-0ed88b62e06804d9f35187d3", "kind": "unclassified_tcp", "frame_number": 66694, "timestamp_epoch": "1634916783.480754000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50217, "dst_port": 1187, "tcp_stream": 1343, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-66f115236b03d8368f189e01", "kind": "unclassified_tcp", "frame_number": 67278, "timestamp_epoch": "1634916787.122644000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6ea2000000170303009300000000000000040b731905bb621cd844366573f9921c210a1a1c7d97c486906d5f6d069d10019049557bfd882d7d07435e353abdd1abe59e9397fb5fc8de060c18527e8ed4db70799aab468a63d8cdc3fb33a01873828d94c261d4bde12959e71f2ad48a06bd36728e45a87976ee93db2eb98feb9737f8c455a03f00e07317f686bea707a482bd76050d972353dcdf12dd6f" } }, { "event_id": "evt-1d71f64cfb3a9e90d176b4c3", "kind": "unclassified_tcp", "frame_number": 67318, "timestamp_epoch": "1634916787.420868000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e2a000000170303001b0000000000000005bcbdad1f037825b12d55e315757f2dd4625ef9" } }, { "event_id": "evt-9f40365933a2e6927600a843", "kind": "unclassified_tcp", "frame_number": 67501, "timestamp_epoch": "1634916787.900972000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50218, "dst_port": 1187, "tcp_stream": 1345, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4451faee754e4abcd1a42546", "kind": "unclassified_tcp", "frame_number": 67535, "timestamp_epoch": "1634916792.304293000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50219, "dst_port": 1187, "tcp_stream": 1348, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4ce3bd366bec8f63d52c0b1d", "kind": "unclassified_tcp", "frame_number": 67539, "timestamp_epoch": "1634916792.496756000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e770000001703030068000000000000000553db8e7b8eb7d5b5066d969ca466d560ed2d8c6a0b71ab4d3f64940f32e551a3e6e2375e8b939da30a600757400e66767acbb2122b89062d6b30fd78a69946e98a96984adddfab6e72f729b269c49bbca9bdf145ceb51fd9c4f925b542c65342" } }, { "event_id": "evt-f516f57f61ec2b8ad0ce3de7", "kind": "unclassified_tcp", "frame_number": 67542, "timestamp_epoch": "1634916792.803466000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e2d000000170303001e000000000000000649591f7e8b84f5e9fdf395802694292def61d9cc059e" } }, { "event_id": "evt-2a8a0d85eb90356eef825ef4", "kind": "unclassified_tcp", "frame_number": 67548, "timestamp_epoch": "1634916792.875668000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e5700000017030300480000000000000006c49c2563a2bd456e4f38e035adeae2d54c5143497199bada2b319ee83211e6874b0408aa1c052a9684466e491ed2a2d0fc31bbc790b3bca68d209adae6905c1f" } }, { "event_id": "evt-d531afd53f7c5d79517d308a", "kind": "unclassified_tcp", "frame_number": 67552, "timestamp_epoch": "1634916792.876258000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009a6e0a000000" } }, { "event_id": "evt-73d2b1cbeece4c35168127a6", "kind": "unclassified_tcp", "frame_number": 67554, "timestamp_epoch": "1634916793.242645000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009a6e29000000150303001a00000000000000076a271c35ffc9cf192126e0558768ad42f8d4" } }, { "event_id": "evt-2459517b6e254223899a708a", "kind": "unclassified_tcp", "frame_number": 67556, "timestamp_epoch": "1634916793.451366000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009a6e0a000000" } }, { "event_id": "evt-3b5897c9af079553f4036da7", "kind": "unclassified_tcp", "frame_number": 67591, "timestamp_epoch": "1634916796.727652000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50220, "dst_port": 1187, "tcp_stream": 1350, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b90784a46ab6e2108087b8f2", "kind": "unclassified_tcp", "frame_number": 67597, "timestamp_epoch": "1634916801.054677000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50221, "dst_port": 1187, "tcp_stream": 1351, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-eebef65154bf850815ee1b0e", "kind": "unclassified_tcp", "frame_number": 67603, "timestamp_epoch": "1634916805.493824000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50222, "dst_port": 1187, "tcp_stream": 1352, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5a42850fd702821ef400a4f6", "kind": "unclassified_tcp", "frame_number": 67606, "timestamp_epoch": "1634916806.098705000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-87ecddb638992d9b5c6950db", "kind": "unclassified_tcp", "frame_number": 67608, "timestamp_epoch": "1634916808.743312000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701007b3b0c000000197b" } }, { "event_id": "evt-3eee205cd7f815770249d733", "kind": "unclassified_tcp", "frame_number": 67610, "timestamp_epoch": "1634916809.051515000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b0e00000005020002" } }, { "event_id": "evt-1de1a864082536a2739e0eed", "kind": "unclassified_tcp", "frame_number": 67611, "timestamp_epoch": "1634916809.052100000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007b3b0c0000000502" } }, { "event_id": "evt-2273875a166c00afeaea00a2", "kind": "unclassified_tcp", "frame_number": 67613, "timestamp_epoch": "1634916809.396454000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1169674bc9cd1df49b8b8984", "kind": "unclassified_tcp", "frame_number": 67614, "timestamp_epoch": "1634916809.396793000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007b3b0c0000000100" } }, { "event_id": "evt-b756cf5e7ffdda3dd1cae9a8", "kind": "unclassified_tcp", "frame_number": 67617, "timestamp_epoch": "1634916809.751721000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b2900000005010003186d61696c2e76657269666963616c697461736f63612e65730019" } }, { "event_id": "evt-3302669062f89092a57df3bc", "kind": "unclassified_tcp", "frame_number": 67622, "timestamp_epoch": "1634916809.794850000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50223, "dst_port": 1187, "tcp_stream": 1353, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e4072b85892a9dccc3fbea57", "kind": "unclassified_tcp", "frame_number": 67630, "timestamp_epoch": "1634916810.215322000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b14000000050000010a0a169cc3c2" } }, { "event_id": "evt-c4d0810b5527a5d790d02bf1", "kind": "unclassified_tcp", "frame_number": 67633, "timestamp_epoch": "1634916810.791923000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b3100000032323020766c32343131382e64696e617365727665722e636f6d20534d54502052656164790d0a" } }, { "event_id": "evt-c07c791c5662fba51bb848b0", "kind": "unclassified_tcp", "frame_number": 67638, "timestamp_epoch": "1634916811.084860000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-d7161d8a5a31f8a12cd262ed", "kind": "unclassified_tcp", "frame_number": 67643, "timestamp_epoch": "1634916811.248639000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3bbd0000003235302d766c32343131382e64696e617365727665722e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452033313435373238300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-cd75641b38e1e786e9ca10c8", "kind": "unclassified_tcp", "frame_number": 67646, "timestamp_epoch": "1634916811.529410000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b140000005354415254544c530d0a" } }, { "event_id": "evt-b75814fc0b10894365ad9164", "kind": "unclassified_tcp", "frame_number": 67651, "timestamp_epoch": "1634916811.686615000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-b9250f3a894d5de2a286fc96", "kind": "unclassified_tcp", "frame_number": 67654, "timestamp_epoch": "1634916811.993093000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c4ba810970c8bcf3ddcd5f0a", "kind": "unclassified_tcp", "frame_number": 67662, "timestamp_epoch": "1634916812.170332000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-518d8d37f2ac7f2bf7ce588a", "kind": "unclassified_tcp", "frame_number": 67663, "timestamp_epoch": "1634916812.170358000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2d6dcf812c396f184c7efc0f", "kind": "unclassified_tcp", "frame_number": 67664, "timestamp_epoch": "1634916812.170372000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7faf2be48a01f1608b814d8", "kind": "unclassified_tcp", "frame_number": 67670, "timestamp_epoch": "1634916812.329610000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b0e0000000e000000" } }, { "event_id": "evt-24ade08c76974d04d512e760", "kind": "unclassified_tcp", "frame_number": 67673, "timestamp_epoch": "1634916812.692617000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b8800000016030300461000004241045a6cdc1e0e703dbf21ee2594db0d8db5d43f40f4ba7b10e11d2fe82b4484da3f9bdd35326e2abc0d3a62ed07f4ebe24c6aad4f098e9ec958fed3fe749a8a4c5814030300010116030300280000000000000000ac6ead37c2c8bcde92413af4a5a11564b6968168b8589f235c6f419ac26af867" } }, { "event_id": "evt-9fcddd74320183c4841fe21f", "kind": "unclassified_tcp", "frame_number": 67678, "timestamp_epoch": "1634916812.855495000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b3d0000001403030001011603030028c2fd67261177450405c6c4bd8967ad01f067eaacd54613c0b642cbf9570b2cedf7646ab0254aa9b6" } }, { "event_id": "evt-2ae3299318ad1beddd942dcc", "kind": "unclassified_tcp", "frame_number": 67681, "timestamp_epoch": "1634916813.230653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b3700000017030300280000000000000001c1f9f94ebc10632ed97453a29c6427726cbbeca34d27977879f89d1a3c4e30df" } }, { "event_id": "evt-44526bc0d4c1cb38d468c9d4", "kind": "unclassified_tcp", "frame_number": 67686, "timestamp_epoch": "1634916813.384300000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3bcc00000017030300bdc2fd672611774505e0e0f98a37acb8117c0b0f7fd56fada146f2639dc51e10b99297783628889d9c9446e3cf4ca356c426541924c679e9dcdcc418032433c7b6b4ebf48ca2944c2751e69bab340a3eccd36129320888eb78e177c365921435de0637b59de829c2391c64b13f4dea80f6c03dbc1abf10280c94a0b0e8ec16a6c0f1de18fddb7ee57b1ca337ee69969d5ae243548ea0a069c47fe037045c65f860c8837410c867ebc709df57659bbcf279fc80bf30815cbea33eea012970" } }, { "event_id": "evt-84ea73b27d275fff7f160845", "kind": "unclassified_tcp", "frame_number": 67694, "timestamp_epoch": "1634916814.159819000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50224, "dst_port": 1187, "tcp_stream": 1355, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e46b9483c520e1b4ef22816c", "kind": "unclassified_tcp", "frame_number": 67699, "timestamp_epoch": "1634916814.682547000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b3300000017030300240000000000000002c1b6b4af0b1510a7e03f43b1b1798a311cdaf9d159b5d90eddff4eb8" } }, { "event_id": "evt-0e52ec2a5e0c56c0eced5dfa", "kind": "unclassified_tcp", "frame_number": 67706, "timestamp_epoch": "1634916814.856468000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b39000000170303002ac2fd672611774506b5fb94e0e03f9e24c0c0d332b57267a598cb8eff10be2f21b20e1ce7de05f23dc44b" } }, { "event_id": "evt-f50a1683a6ab3f82dc20a5c3", "kind": "unclassified_tcp", "frame_number": 67709, "timestamp_epoch": "1634916815.113858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b55000000170303004600000000000000033b7cccfc16d67b94190058f3166a83bffb9920a2c8c2b62a801082458d09999fba5792e5d0d2a04c85d2b88b577f205d0a77bb9b6f57acb0a28e62c0b044" } }, { "event_id": "evt-d2ca14537018322ba88cb88a", "kind": "unclassified_tcp", "frame_number": 67714, "timestamp_epoch": "1634916815.275634000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b39000000170303002ac2fd672611774507935275e78022bc22a50acc732121fcb6ca4db8735a4110600c308446e5883aaeee53" } }, { "event_id": "evt-ca71564d8a783f7d888e7599", "kind": "unclassified_tcp", "frame_number": 67717, "timestamp_epoch": "1634916815.547962000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b39000000170303002a00000000000000041e7d944511514996606941101630361d3057e52197108bb17ea64d3f1033fa0b0e1b" } }, { "event_id": "evt-ea8b512862f385bddf8680b4", "kind": "unclassified_tcp", "frame_number": 67722, "timestamp_epoch": "1634916817.243326000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b5d000000170303004ec2fd672611774508c066d0f7d9144e9b4c6c0350be1cb86bd4678c7fff78e0503980d677d581eb3e4cc705b7e27df67865703eee51fcf1ac6f723712a4c8cf59cb968857cdf4567e5c0a80ee7de2" } }, { "event_id": "evt-481b81e18ba76120af251a6e", "kind": "unclassified_tcp", "frame_number": 67725, "timestamp_epoch": "1634916817.594806000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b2a000000170303001b0000000000000005559ede0eb036b1dcdb19ab299dbc033a04ef10" } }, { "event_id": "evt-768378cb321102308cbf05ee", "kind": "unclassified_tcp", "frame_number": 67730, "timestamp_epoch": "1634916817.759910000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b500000001703030041c2fd67261177450996e28561fbf97d76c437dd8daec800618a9bd806050f30c3346e865f8e4b81f5a67b22219521e0a7ee5f06b1ed03c1da8ea4d983a6a4c0e848" } }, { "event_id": "evt-4ff8f92961c3ae8f5930b9ed", "kind": "unclassified_tcp", "frame_number": 67733, "timestamp_epoch": "1634916818.058886000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b2d000000170303001e0000000000000006e29752a9e36106971d39f80d1ba977815d783fc34239" } }, { "event_id": "evt-ea6ad846d5801e3f618ce773", "kind": "unclassified_tcp", "frame_number": 67740, "timestamp_epoch": "1634916818.221804000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b550000001703030027c2fd67261177450a39de89476c3063629558b0b0610eb3bfaa1875a51ad16ca8a56bfb66ba9a0a150303001ac2fd67261177450ba04affc185398e09b6e71eb44b50af3822b5" } }, { "event_id": "evt-287c28fb972e1ea298124c85", "kind": "unclassified_tcp", "frame_number": 67744, "timestamp_epoch": "1634916818.222254000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007b3b0a000000" } }, { "event_id": "evt-e6ef02ffd89a49c72fd3cbf6", "kind": "unclassified_tcp", "frame_number": 67749, "timestamp_epoch": "1634916818.497825000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007b3b29000000150303001a000000000000000772563e9b00519b347815b4b3c2ab98934997" } }, { "event_id": "evt-b49fb2f407d0de2071d476ea", "kind": "unclassified_tcp", "frame_number": 67752, "timestamp_epoch": "1634916818.502007000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50225, "dst_port": 1187, "tcp_stream": 1356, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c1a60688aa829405b369914a", "kind": "unclassified_tcp", "frame_number": 67756, "timestamp_epoch": "1634916818.680593000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007b3b0a000000" } }, { "event_id": "evt-ab1253bbb5d130c5f575b116", "kind": "unclassified_tcp", "frame_number": 67763, "timestamp_epoch": "1634916822.931378000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50226, "dst_port": 1187, "tcp_stream": 1357, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bb5d02d3a451941966e1c90b", "kind": "unclassified_tcp", "frame_number": 67769, "timestamp_epoch": "1634916827.247365000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50227, "dst_port": 1187, "tcp_stream": 1358, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2fac933f5953ef72253ee59d", "kind": "unclassified_tcp", "frame_number": 67771, "timestamp_epoch": "1634916827.275669000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100e52e0c000000197b" } }, { "event_id": "evt-4817150519f2704192d3d711", "kind": "unclassified_tcp", "frame_number": 67774, "timestamp_epoch": "1634916827.453143000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e0e00000005020002" } }, { "event_id": "evt-25dcfc85476274df01d80a27", "kind": "unclassified_tcp", "frame_number": 67775, "timestamp_epoch": "1634916827.453696000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e52e0c0000000502" } }, { "event_id": "evt-aafc8be6b65bfc25df5ad54b", "kind": "unclassified_tcp", "frame_number": 67777, "timestamp_epoch": "1634916827.767025000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e6d746d0b842c3e3b1b9aae0", "kind": "unclassified_tcp", "frame_number": 67778, "timestamp_epoch": "1634916827.767605000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e52e0c0000000100" } }, { "event_id": "evt-a21e509a219ee705a7f6ba3e", "kind": "unclassified_tcp", "frame_number": 67780, "timestamp_epoch": "1634916828.024175000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-52b23e8e4a6cf71795108bfb", "kind": "unclassified_tcp", "frame_number": 67787, "timestamp_epoch": "1634916828.114175000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e14000000050000010a0a169cc3c3" } }, { "event_id": "evt-4123e40537b071328a0a41b5", "kind": "unclassified_tcp", "frame_number": 67790, "timestamp_epoch": "1634916828.161910000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e7900000032323020534e37505230344341303032322e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a33333a3437202b303030300d0a" } }, { "event_id": "evt-0f154a54b01257ac6a758268", "kind": "unclassified_tcp", "frame_number": 67793, "timestamp_epoch": "1634916828.540253000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1bfaeb308b4c7482e0a4b17a", "kind": "unclassified_tcp", "frame_number": 67798, "timestamp_epoch": "1634916828.588451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52ed80000003235302d534e37505230344341303032322e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-11bae0e8d5266f4100a6e795", "kind": "unclassified_tcp", "frame_number": 67801, "timestamp_epoch": "1634916828.883871000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e140000005354415254544c530d0a" } }, { "event_id": "evt-e7b8fbe0c4edee60af7caedf", "kind": "unclassified_tcp", "frame_number": 67806, "timestamp_epoch": "1634916828.931306000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-41e8d8e2af975eacf99e59f2", "kind": "unclassified_tcp", "frame_number": 67809, "timestamp_epoch": "1634916829.279890000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c23a74795e7807cdede1a472", "kind": "unclassified_tcp", "frame_number": 67814, "timestamp_epoch": "1634916829.328899000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f76c54a993c536521ea28682", "kind": "unclassified_tcp", "frame_number": 67818, "timestamp_epoch": "1634916829.332409000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-33844203b1ea45f91512e61a", "kind": "unclassified_tcp", "frame_number": 67821, "timestamp_epoch": "1634916829.335150000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e404c8aaa8ea59eddfd2a912", "kind": "unclassified_tcp", "frame_number": 67825, "timestamp_epoch": "1634916829.338364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e69010000b1cc6bfd135dc409146fd1d7604d5ecc15c164ee23415b30192d1b6b28b1708726454a8d2a4c26b9cccd92543fd101749739f908040100825fe2d4e457ab917fdf3a7a5248cc076ff0242167cadf753d3661214ba10cc097201fcf068563d78f9eaa2f0fb1757984a50f6ba6e84cc07722469437f601f318876be77097736a22162bf15ae241308d2786af9fb1cd1e1fbb5d1aa163f1c841d2b85e04f33717c94fbc2086c94710a9abef910df9eb2d0a4388da777490add2e2de4eee2ec5fa2d4f52325ff10c48e73a5dfacd072a0e8313f9b19005a0dda260c6b8cc0fcca506276b70e9e89112d49fed9d2c915d029597f1a22c45a4cdd44c92647ddc5ffbe32e7659b20abe09291eaed3da4d78d20cf48d9668b3f5e560fa77e7d2bf5308aff26736b9c6740b8d506d1a181f2eb4eb31923c75ef01120d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-b480f531363201c3db82c615", "kind": "unclassified_tcp", "frame_number": 67827, "timestamp_epoch": "1634916829.809061000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52eb400000016030300070b0000030000001603030066100000626104003d490a09c6ab611f4a32449962167a36b20265167d89dabd7822e6d4f5ba3fab2d7085130b274014a340762a810e880dba17a8e0075f15b7fc51e34ea66bd47d25bcb87c4184fed4ad8a1d47d1d336b6c5b786bcd8b7829a6d32efa41eefb4140303000101160303002800000000000000006c586218671345a2851ae78ffe853968065fb17f77c6f186e363fb301bc96ea8" } }, { "event_id": "evt-f789bea65acb7a86315fcd18", "kind": "unclassified_tcp", "frame_number": 67832, "timestamp_epoch": "1634916829.858871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e3d00000014030300010116030300280000000000000000d0d9e6f0da5297b1765cb07e30ed8b53f77ce458aabb95f821c886ba7377a21b" } }, { "event_id": "evt-6e39937e04345a447c9fe67f", "kind": "unclassified_tcp", "frame_number": 67835, "timestamp_epoch": "1634916830.198339000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e3700000017030300280000000000000001542025d9107fce4ac045f78ff9af4f4583f2442487e8221010b962f77d99d479" } }, { "event_id": "evt-1354dfe9b982cba5e4e002d7", "kind": "unclassified_tcp", "frame_number": 67840, "timestamp_epoch": "1634916830.244961000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52eff00000017030300f00000000000000001be909e412cf85c52bbab5e1ebe83ace3b70f1d7b62a5ab12a01317270191f185711acd7e11c43c8326e9d57893231e31c1020a97a716b7265b6b2f451c7caad3d7472f5c9b590ae02659dd2bc8f0c64672e962877f80993d2ef214cdb12384bd2edfa3abbfb204dbd40a4458eb06f17dc639f0019eaeb7a0846436fdd5cf5b0a5a404830a72061beb68582b5a7d8d41b937d7926cea69f649a77b6119c761b79d3f79322dce0886f909507cfbdade9377464097d27067e0660ec8f2fd26b5c9a87c304445be1c24a4adbf34480f6b207cd16621325de226f0a4a0321ce7f0bec4f905d16f6558e35" } }, { "event_id": "evt-3fe29817f492fe2be3143944", "kind": "unclassified_tcp", "frame_number": 67844, "timestamp_epoch": "1634916831.422322000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e33000000170303002400000000000000025a5943fa76f6718aa4838266bc30943d58dbfcc2bddb2aaeb8be6fad" } }, { "event_id": "evt-130f75d71174ecf3b232f953", "kind": "unclassified_tcp", "frame_number": 67849, "timestamp_epoch": "1634916831.477755000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e39000000170303002a000000000000000268798cf849fc288ea09f4999b3a6d8b5463e19e945dea2a6a71e2de163ebbf36e9b6" } }, { "event_id": "evt-5e1a2d57ae75fc8062ae7144", "kind": "unclassified_tcp", "frame_number": 67854, "timestamp_epoch": "1634916831.562493000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50228, "dst_port": 1187, "tcp_stream": 1360, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1a9a772fd43e275ce77bcdb9", "kind": "unclassified_tcp", "frame_number": 67857, "timestamp_epoch": "1634916831.830285000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e49000000170303003a0000000000000003ac64801e1011568597f3f7564eb6d08ddefa623ed0623ef5ce778561c8e40c8f0900ed09e53dc2651761e6daa81fae37a408" } }, { "event_id": "evt-308c886a455ac48c490b6c07", "kind": "unclassified_tcp", "frame_number": 67861, "timestamp_epoch": "1634916831.867418000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e39000000170303002a0000000000000003ce858b4b7f6ce9287de9d96195ceefd8774057829e85ea3065918e08781097abb665" } }, { "event_id": "evt-bdf030c6c1f45c3c3cc7899f", "kind": "unclassified_tcp", "frame_number": 67865, "timestamp_epoch": "1634916832.235096000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e3500000017030300260000000000000004d738d4536aed1b602e819862c5fa738a401b0765f7932c76f36d3f962f13" } }, { "event_id": "evt-6d82f906d604c8a44ecb12b0", "kind": "unclassified_tcp", "frame_number": 67871, "timestamp_epoch": "1634916835.636712000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-317146e56bd97ab3aeeff581", "kind": "unclassified_tcp", "frame_number": 67876, "timestamp_epoch": "1634916835.869627000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50229, "dst_port": 1187, "tcp_stream": 1361, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-63b26a860d16df4de3064fea", "kind": "unclassified_tcp", "frame_number": 67880, "timestamp_epoch": "1634916839.341235000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52ea0000000170303009100000000000000043ebee3657aee5d8660914bf81d281ad991f47c0053b38d9876c3f47ae366f958053abefd03d269a5f5227a36b55bab9cddad39c6ab08443458c96a598a25c4f1d353c129444694ea8f6126dd69313655c8de7bd969fb3b2ce4dc7276b582f1135f982d64c27dc3b5f283e732befe5d4f302ed9f5b67a157fb471e8fda7a84702de73d7a27669f89819" } }, { "event_id": "evt-9e8719897a7fa88de872301a", "kind": "unclassified_tcp", "frame_number": 67883, "timestamp_epoch": "1634916839.636100000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e2a000000170303001b000000000000000544f67c548c4297aac35e019f0da8121c819920" } }, { "event_id": "evt-e4dd4669f8ee14ca004e3840", "kind": "unclassified_tcp", "frame_number": 67892, "timestamp_epoch": "1634916840.518077000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50230, "dst_port": 1187, "tcp_stream": 1362, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-abac3c23afdc4a01affa283e", "kind": "unclassified_tcp", "frame_number": 67897, "timestamp_epoch": "1634916844.693313000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e7500000017030300660000000000000005f254839063e98b0e8ca879dd590bed442b1c3878fa7d861b64f795e531e9f9e9d4744663955ba63daf6ec7a8c58dab79a7389d48c2df034711119be2b0bb004b33a3940b083f7ca7b8751271c57f17e3965dca5903b769718f3c1710bcd0" } }, { "event_id": "evt-50f67597d01048fb6062ebff", "kind": "unclassified_tcp", "frame_number": 67904, "timestamp_epoch": "1634916844.884624000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50231, "dst_port": 1187, "tcp_stream": 1363, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ea1007794371217d7fc9d702", "kind": "unclassified_tcp", "frame_number": 67906, "timestamp_epoch": "1634916845.059309000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e2d000000170303001e0000000000000006abcc4e5dfd1f8c1dce63ee00b183521e73c9c39e99da" } }, { "event_id": "evt-fe30531201c42a2ccd4ebdbb", "kind": "unclassified_tcp", "frame_number": 67912, "timestamp_epoch": "1634916845.099223000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e5700000017030300480000000000000006e75aa5fd13c651addf0e9de6ff34c51d49f6aa4d085640680fc5d0f2459ed933179b6258c989a098e6f04344cd12ef0b3dee64350a5d054ec3127a1709cf4237" } }, { "event_id": "evt-43fcb297b47aa51bc5df0f37", "kind": "unclassified_tcp", "frame_number": 67916, "timestamp_epoch": "1634916845.099771000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100e52e0a000000" } }, { "event_id": "evt-dae22d54dec587dc5454dcfd", "kind": "unclassified_tcp", "frame_number": 67918, "timestamp_epoch": "1634916845.491391000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e52e29000000150303001a000000000000000730eb46897f29a2e378fcbb48c542e9f57b2f" } }, { "event_id": "evt-e2662630d56126e43371540f", "kind": "unclassified_tcp", "frame_number": 67942, "timestamp_epoch": "1634916849.305461000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50232, "dst_port": 1187, "tcp_stream": 1365, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2db11d3828fa3ce17f733627", "kind": "unclassified_tcp", "frame_number": 67956, "timestamp_epoch": "1634916853.620724000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50233, "dst_port": 1187, "tcp_stream": 1366, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c6e9b21640a0a58816a2aefb", "kind": "unclassified_tcp", "frame_number": 67962, "timestamp_epoch": "1634916857.958110000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50234, "dst_port": 1187, "tcp_stream": 1367, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3901580a89765466656d9aa2", "kind": "unclassified_tcp", "frame_number": 67968, "timestamp_epoch": "1634916862.278336000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50235, "dst_port": 1187, "tcp_stream": 1368, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7a1a7b05de8b68bf31e79958", "kind": "unclassified_tcp", "frame_number": 67973, "timestamp_epoch": "1634916866.105316000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-596cc89831c8da11d18e4758", "kind": "unclassified_tcp", "frame_number": 67980, "timestamp_epoch": "1634916866.656220000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50236, "dst_port": 1187, "tcp_stream": 1369, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1be1503f77041e871176f767", "kind": "unclassified_tcp", "frame_number": 67993, "timestamp_epoch": "1634916871.040271000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50237, "dst_port": 1187, "tcp_stream": 1370, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9cabd46069bed1fdc6bb793e", "kind": "unclassified_tcp", "frame_number": 68001, "timestamp_epoch": "1634916875.403917000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50238, "dst_port": 1187, "tcp_stream": 1371, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ba2a12a1441918ff1d6b7fbc", "kind": "unclassified_tcp", "frame_number": 68007, "timestamp_epoch": "1634916879.727224000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50239, "dst_port": 1187, "tcp_stream": 1372, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-81000b8b3dc5041cef797292", "kind": "unclassified_tcp", "frame_number": 68013, "timestamp_epoch": "1634916884.210967000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50240, "dst_port": 1187, "tcp_stream": 1373, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1048394f9a19595992513d64", "kind": "unclassified_tcp", "frame_number": 68019, "timestamp_epoch": "1634916888.697161000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50241, "dst_port": 1187, "tcp_stream": 1374, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5e94d03f4ca5902f329a8c49", "kind": "unclassified_tcp", "frame_number": 68060, "timestamp_epoch": "1634916893.081645000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50243, "dst_port": 1187, "tcp_stream": 1376, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00ed2d837e8c4c19be4010f9", "kind": "unclassified_tcp", "frame_number": 68068, "timestamp_epoch": "1634916895.996628000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c74e144709b81eaf54d83e4b", "kind": "unclassified_tcp", "frame_number": 68075, "timestamp_epoch": "1634916897.542535000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50244, "dst_port": 1187, "tcp_stream": 1377, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3ea3daa404253c4a0a3ce382", "kind": "unclassified_tcp", "frame_number": 68083, "timestamp_epoch": "1634916901.927399000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50245, "dst_port": 1187, "tcp_stream": 1378, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-65fea73a2ad502e4317333d1", "kind": "unclassified_tcp", "frame_number": 68086, "timestamp_epoch": "1634916904.283602000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010054400c000000197b" } }, { "event_id": "evt-ee4bb5e4647af634ce285071", "kind": "unclassified_tcp", "frame_number": 68088, "timestamp_epoch": "1634916904.482401000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054400e00000005020002" } }, { "event_id": "evt-16c7d4abc80661893447a228", "kind": "unclassified_tcp", "frame_number": 68089, "timestamp_epoch": "1634916904.482919000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010054400c0000000502" } }, { "event_id": "evt-612917ac6ff27cd9b7a00677", "kind": "unclassified_tcp", "frame_number": 68091, "timestamp_epoch": "1634916905.107405000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100544020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-55e81ee662f7818b8be31414", "kind": "unclassified_tcp", "frame_number": 68092, "timestamp_epoch": "1634916905.107842000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010054400c0000000100" } }, { "event_id": "evt-5d408bd12cea28395de92849", "kind": "unclassified_tcp", "frame_number": 68094, "timestamp_epoch": "1634916905.474686000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054402a00000005010003196d61696c2e70657270657475616c706c61717565732e636f6d0019" } }, { "event_id": "evt-b820d0375a619fa99785d643", "kind": "unclassified_tcp", "frame_number": 68102, "timestamp_epoch": "1634916905.631631000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100544014000000050000010a0a169cc3c5" } }, { "event_id": "evt-0fbf204484dc916a83dd9411", "kind": "unclassified_tcp", "frame_number": 68105, "timestamp_epoch": "1634916905.702651000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100544028000000323230206d61696c2e77656273697465636f6e74726f6c732e636f6d0d0a" } }, { "event_id": "evt-d1c0aa6592ea2009500fd553", "kind": "unclassified_tcp", "frame_number": 68108, "timestamp_epoch": "1634916906.056555000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054401a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-2e5605e3e76bbb9043ffcd35", "kind": "unclassified_tcp", "frame_number": 68114, "timestamp_epoch": "1634916906.129941000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005440980000003235302d6d61696c2e77656273697465636f6e74726f6c732e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035353932343035330d0a3235302d41555448204c4f47494e204352414d2d4d44350d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d44534e0d0a323530204f4b0d0a" } }, { "event_id": "evt-da88e9df23a9ef02c09b266d", "kind": "unclassified_tcp", "frame_number": 68119, "timestamp_epoch": "1634916906.235534000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50246, "dst_port": 1187, "tcp_stream": 1380, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-74439d6d0728b460a4d5dd49", "kind": "unclassified_tcp", "frame_number": 68122, "timestamp_epoch": "1634916906.379307000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005440140000005354415254544c530d0a" } }, { "event_id": "evt-c3113f5bea22a95b5215e89c", "kind": "unclassified_tcp", "frame_number": 68127, "timestamp_epoch": "1634916906.441324000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054402500000032323020537461727420544c53206e65676f74696174696f6e0d0a" } }, { "event_id": "evt-a5e1d48ea405cae1d1a6a344", "kind": "unclassified_tcp", "frame_number": 68130, "timestamp_epoch": "1634916906.734579000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-618918f89163f28bae343ef7", "kind": "unclassified_tcp", "frame_number": 68137, "timestamp_epoch": "1634916906.816288000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-437a08ef50b17b5718f24760", "kind": "unclassified_tcp", "frame_number": 68138, "timestamp_epoch": "1634916906.816309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-60253932b2fa57110bd244e8", "kind": "unclassified_tcp", "frame_number": 68142, "timestamp_epoch": "1634916906.817099000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cb6909da8310f55bf01a014e", "kind": "unclassified_tcp", "frame_number": 68145, "timestamp_epoch": "1634916907.190846000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005440a00000001603030046100000424104cdcbd7f9426b1c31723f2ee19d1979627f31944d64842547ea8cbdb56fa9ca260d0d7ac98624e506b261a2d450d4cecadcab84c0d61937483893ceebd7413172140303000101160303004006540da8841c5de7d847627f821283e8fa3482325756ac59e42accd9433a9086f304ce046f33d3a7315e31d15374ded9684fb75a1c5e71f3bf25d8c66b14e46a" } }, { "event_id": "evt-fbe0c49522cc527f94da4325", "kind": "unclassified_tcp", "frame_number": 68150, "timestamp_epoch": "1634916907.259898000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054405500000014030300010116030300401f05790414df2c62ab3b45412a87f11274434d403527f29fe9c4b11c1074ea7c325bdf03bc52fb26158e4808019f200bbd3684fd9b72026ac483402923794ef6" } }, { "event_id": "evt-9a44d112ae725612936fd493", "kind": "unclassified_tcp", "frame_number": 68153, "timestamp_epoch": "1634916907.616030000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f0000001703030040b50fee680e7d768fdebef2fa50892589be00fc52c9f1ffeaf71f46494fb8297adb2900424db7efc8f79bda2e0cf26d83c82f3fe3c78d470de911314d7f818a6c" } }, { "event_id": "evt-513ca76ae32564a4beb18c78", "kind": "unclassified_tcp", "frame_number": 68158, "timestamp_epoch": "1634916907.705080000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005440bf00000017030300b0323d59e32da6c7e8f69ac7d27b2c2c8f8303c39d6dcfd5c0de0827e2af4dc8939a3fb33d645517c1ee7bcacd500c04a8b0830410796e9c38fa9713b1e89c4de74811eff146aa4c41ccc77fb6cfbc6fbc76ed1205477fbac6ec0bb5325baf606d51ce39fa3659a37ab7cfe9364b9e96970a99c13fe2c0ba00b0e216b5f9fda588ef9e2eb410c4b3bcd250787227d09707e2528f08ddf9c0aabfcdbfb7754bbb46cd598919d533787a5f05756ae3a3a210" } }, { "event_id": "evt-4194ed6e9825d11d634a06b4", "kind": "unclassified_tcp", "frame_number": 68161, "timestamp_epoch": "1634916909.096759000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f0000001703030040854ea5715592800b4ef1f187341c374c5d33dbc738f8cf896431339434d47b613071e47bf071a2bceeeb3f3d42bed1c3122ddeaadf92a83bea84f8ee7965b62f" } }, { "event_id": "evt-8f266ae2797093b42565092b", "kind": "unclassified_tcp", "frame_number": 68166, "timestamp_epoch": "1634916909.171249000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f00000017030300405fa1c41f4dbb7fe00ad075fe1dd3409b698c04e0042bb771bf67b0ebbb96ebd40d3a7c0a21efc385b041b4866d1c0a3b899efbc386807e25d0266fb0631bb177" } }, { "event_id": "evt-f220c2144443188c74a18b41", "kind": "unclassified_tcp", "frame_number": 68169, "timestamp_epoch": "1634916909.442076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054405f000000170303005013cfa3da6742252dca56c203f33a026d3897af6766b4e3207f9dcf8005b9cfc38f261715ac502785b322fbd8a21767661f1d17ec73d4be2d8a89aadc0269d0c6567a33d3dc64364a15cea7d90e042be7" } }, { "event_id": "evt-84b3b207b2a3c18e602ec2db", "kind": "unclassified_tcp", "frame_number": 68174, "timestamp_epoch": "1634916909.514508000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f0000001703030040bb09edfc95f753b12977f78dc204e2d97ab85209aba0d94eb72db3e23fb092c9b9757a1d9249daea370ba338251278075883bec3ecf1cf03744976eecbadb888" } }, { "event_id": "evt-6d60cbd85d2004807c18abc9", "kind": "unclassified_tcp", "frame_number": 68177, "timestamp_epoch": "1634916909.882692000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f00000017030300405a6a9fc5f3d95359c086587f72d2540916565a0243484535cac2631f16ad15959023997014fdae87baf7617fec173b91e48e8ab7311c21ae429ea0e579d65c8e" } }, { "event_id": "evt-390d53242ed5d34b0a2b3939", "kind": "unclassified_tcp", "frame_number": 68182, "timestamp_epoch": "1634916909.960138000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f0000001703030040a392368953af5e725e17e5ac57a6adb4e55b135dd7f663821dfad7ffcd7bf06f23bbea36cc803214668b8718247051a11d5b0af94aba93505482819c1ed59e0e" } }, { "event_id": "evt-ed4c8370d8891186c127c5b8", "kind": "unclassified_tcp", "frame_number": 68187, "timestamp_epoch": "1634916910.265679000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054403f000000170303003051b4546bd7c95ec98f2fb8945917c277ac02a0f115f9d3e0eda93df48389efc1b8ec52731e3d80b50e3f50e469105810" } }, { "event_id": "evt-fdb0c017d81dc3042f825a39", "kind": "unclassified_tcp", "frame_number": 68192, "timestamp_epoch": "1634916910.335356000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054404f00000017030300407c0de0d3cf6de7998855f674e34d88bfa93a8872f6c269658dcb45cdfe0dc74799ae174ee1049d4dfb9536fd8690d1b0225516f0ab01477a41ac2e05525cbccc" } }, { "event_id": "evt-821c40c0b056f60b532e49c5", "kind": "unclassified_tcp", "frame_number": 68198, "timestamp_epoch": "1634916910.539727000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50247, "dst_port": 1187, "tcp_stream": 1381, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-06a50e0bab822e3df9737b81", "kind": "unclassified_tcp", "frame_number": 68203, "timestamp_epoch": "1634916910.722631000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054403f0000001703030030af14f82bb7a834b8d1c19f544a6c115d9952543af470a3e8afa3dbcbcf9b9891a1274992ee7d3c60738e7d5c9085ed0d" } }, { "event_id": "evt-fd0d39d5d83cd963e9bd6e67", "kind": "unclassified_tcp", "frame_number": 68210, "timestamp_epoch": "1634916910.790450000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054405f00000017030300509e566a32cccb53e06f26de5b6da5702bc17aa2ab83e0517a737c3c298a622bee23e80ff7fe97c78bdcc570326fe0f906b90b30c907d98ce81e8dc341eb7b7eebc5e3fc08ca2ede3a71ea0d8a9a2b9016" } }, { "event_id": "evt-90c4d5ffa49bfba5ae0b490e", "kind": "unclassified_tcp", "frame_number": 68214, "timestamp_epoch": "1634916910.791147000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010054400a000000" } }, { "event_id": "evt-06fb38a065be32d540e3c8fd", "kind": "unclassified_tcp", "frame_number": 68216, "timestamp_epoch": "1634916911.113623000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010054403f0000001503030030982e953e9b7c5718e20c18ab97fd9d664d6646b1a8b9ccab475979a375f72b8468b4ca137214ea3cf6203d367be07afb" } }, { "event_id": "evt-c75d399efa542e565d60b73a", "kind": "unclassified_tcp", "frame_number": 68218, "timestamp_epoch": "1634916911.295591000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010054400a000000" } }, { "event_id": "evt-c3ce38e3cef42fe5ef487c0c", "kind": "unclassified_tcp", "frame_number": 68231, "timestamp_epoch": "1634916914.855964000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50248, "dst_port": 1187, "tcp_stream": 1382, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-87cc5e1b53d6a4fea8077e00", "kind": "unclassified_tcp", "frame_number": 68239, "timestamp_epoch": "1634916919.228026000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50249, "dst_port": 1187, "tcp_stream": 1383, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3caeb388a6734f804381f021", "kind": "unclassified_tcp", "frame_number": 68247, "timestamp_epoch": "1634916923.689188000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50250, "dst_port": 1187, "tcp_stream": 1384, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7e8805ab62af9984afe4e288", "kind": "unclassified_tcp", "frame_number": 68255, "timestamp_epoch": "1634916928.109894000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50251, "dst_port": 1187, "tcp_stream": 1385, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f959255a49bf93983ae7df9d", "kind": "unclassified_tcp", "frame_number": 68261, "timestamp_epoch": "1634916932.548019000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50252, "dst_port": 1187, "tcp_stream": 1386, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a82e8b4c2537f11d79c55948", "kind": "unclassified_tcp", "frame_number": 68267, "timestamp_epoch": "1634916936.951325000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50253, "dst_port": 1187, "tcp_stream": 1387, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-39b3d610e483162c6df64dd4", "kind": "unclassified_tcp", "frame_number": 68269, "timestamp_epoch": "1634916936.998657000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50253, "dst_port": 1187, "tcp_stream": 1387, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ebef66f7146f8974ed392f5b", "kind": "unclassified_tcp", "frame_number": 68275, "timestamp_epoch": "1634916941.354480000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50254, "dst_port": 1187, "tcp_stream": 1388, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9e6836198ed8d0e218508eb1", "kind": "unclassified_tcp", "frame_number": 68283, "timestamp_epoch": "1634916945.798383000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50255, "dst_port": 1187, "tcp_stream": 1389, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5b461462fa0d4762c1998d55", "kind": "unclassified_tcp", "frame_number": 68299, "timestamp_epoch": "1634916950.309262000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50256, "dst_port": 1187, "tcp_stream": 1390, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-51c033ca4a8b63efd8cc9530", "kind": "unclassified_tcp", "frame_number": 68314, "timestamp_epoch": "1634916954.706721000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50259, "dst_port": 1187, "tcp_stream": 1392, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-357884048a429dce50d7ccc6", "kind": "unclassified_tcp", "frame_number": 68322, "timestamp_epoch": "1634916955.656392000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e2e3388c2a18d592f6d191ae", "kind": "unclassified_tcp", "frame_number": 68329, "timestamp_epoch": "1634916959.052552000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50260, "dst_port": 1187, "tcp_stream": 1393, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ee1eae0b0694ed1caba85dbf", "kind": "unclassified_tcp", "frame_number": 68364, "timestamp_epoch": "1634916963.473107000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50261, "dst_port": 1187, "tcp_stream": 1395, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9e4d2c873dcf3121ec2ad9ba", "kind": "unclassified_tcp", "frame_number": 68374, "timestamp_epoch": "1634916967.876500000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50262, "dst_port": 1187, "tcp_stream": 1396, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8133953d183c54e8a4c0f602", "kind": "unclassified_tcp", "frame_number": 68382, "timestamp_epoch": "1634916972.251893000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50263, "dst_port": 1187, "tcp_stream": 1397, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a689c542a67f3a34e58e6630", "kind": "unclassified_tcp", "frame_number": 68384, "timestamp_epoch": "1634916972.263823000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50263, "dst_port": 1187, "tcp_stream": 1397, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-78b21b61e43e7ee748d200ac", "kind": "unclassified_tcp", "frame_number": 68415, "timestamp_epoch": "1634916976.620432000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50264, "dst_port": 1187, "tcp_stream": 1399, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d2e0875bf650f523b6f8b2f2", "kind": "unclassified_tcp", "frame_number": 68423, "timestamp_epoch": "1634916980.982277000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50265, "dst_port": 1187, "tcp_stream": 1400, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6a6c9e4c054758ca043cd70c", "kind": "unclassified_tcp", "frame_number": 68431, "timestamp_epoch": "1634916985.312471000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50266, "dst_port": 1187, "tcp_stream": 1401, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6700d8d946f763cf57f67cc5", "kind": "unclassified_tcp", "frame_number": 68434, "timestamp_epoch": "1634916986.124941000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ca4a68d4685ddc6387c3ff46", "kind": "unclassified_tcp", "frame_number": 68440, "timestamp_epoch": "1634916989.665138000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50267, "dst_port": 1187, "tcp_stream": 1402, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4127905f09cbd0cb6ce8c19a", "kind": "unclassified_tcp", "frame_number": 68446, "timestamp_epoch": "1634916994.003787000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50268, "dst_port": 1187, "tcp_stream": 1403, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4bfa3d3d151852de589bcea9", "kind": "unclassified_tcp", "frame_number": 68454, "timestamp_epoch": "1634916998.359132000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50269, "dst_port": 1187, "tcp_stream": 1404, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d34e4d0eabc2081efd4ab20d", "kind": "unclassified_tcp", "frame_number": 68456, "timestamp_epoch": "1634916998.390387000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50269, "dst_port": 1187, "tcp_stream": 1404, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b13fd87b9f90f5cc1eadb728", "kind": "unclassified_tcp", "frame_number": 68464, "timestamp_epoch": "1634917002.730384000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50270, "dst_port": 1187, "tcp_stream": 1405, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-304818b710f4274dfc57a773", "kind": "unclassified_tcp", "frame_number": 68473, "timestamp_epoch": "1634917007.113719000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50271, "dst_port": 1187, "tcp_stream": 1406, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-915ce307a42f79d2b057c6fc", "kind": "unclassified_tcp", "frame_number": 68484, "timestamp_epoch": "1634917011.500596000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50272, "dst_port": 1187, "tcp_stream": 1407, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d5645e136970865067c1127f", "kind": "unclassified_tcp", "frame_number": 68487, "timestamp_epoch": "1634917012.109837000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010044130c000000197b" } }, { "event_id": "evt-534daf65449d0c790443de35", "kind": "unclassified_tcp", "frame_number": 68489, "timestamp_epoch": "1634917012.417282000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044130e00000005020002" } }, { "event_id": "evt-16e9c875ca6208320deeb22d", "kind": "unclassified_tcp", "frame_number": 68490, "timestamp_epoch": "1634917012.417817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010044130c0000000502" } }, { "event_id": "evt-b23e9cc10d345bb8cfd29d73", "kind": "unclassified_tcp", "frame_number": 68493, "timestamp_epoch": "1634917012.817521000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8620117deb7e64d827e1fd98", "kind": "unclassified_tcp", "frame_number": 68494, "timestamp_epoch": "1634917012.818106000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010044130c0000000100" } }, { "event_id": "evt-c2aef8bc4544456576d7a1bb", "kind": "unclassified_tcp", "frame_number": 68496, "timestamp_epoch": "1634917013.133922000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004413210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-f37551ae44ccf24f8874a8b7", "kind": "unclassified_tcp", "frame_number": 68503, "timestamp_epoch": "1634917013.229668000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441314000000050000010a0a169cc3c6" } }, { "event_id": "evt-7d0500e37cf10de726aa62f6", "kind": "unclassified_tcp", "frame_number": 68506, "timestamp_epoch": "1634917013.383424000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044137900000032323020534e36505230354341303031372e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a33363a3532202b303030300d0a" } }, { "event_id": "evt-44a12eda9a2cc5cf1ab0ef69", "kind": "unclassified_tcp", "frame_number": 68509, "timestamp_epoch": "1634917013.752363000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020083ab0c000000197b" } }, { "event_id": "evt-d77b9c298b5495455aa1b2cc", "kind": "unclassified_tcp", "frame_number": 68511, "timestamp_epoch": "1634917013.925501000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020083ab0e000000050200020407010044131a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-163479c727b39a0de125acb1", "kind": "unclassified_tcp", "frame_number": 68512, "timestamp_epoch": "1634917013.926049000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020083ab0c0000000502" } }, { "event_id": "evt-9829462488eb782a6fb65094", "kind": "unclassified_tcp", "frame_number": 68517, "timestamp_epoch": "1634917014.057883000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004413d80000003235302d534e36505230354341303031372e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-2b52cee0eab7102784f92016", "kind": "unclassified_tcp", "frame_number": 68521, "timestamp_epoch": "1634917014.288283000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020083ab20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-55d8907205c527b8afef75a2", "kind": "unclassified_tcp", "frame_number": 68522, "timestamp_epoch": "1634917014.288716000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020083ab0c0000000100" } }, { "event_id": "evt-1a7e6b2329b779d7bf6233f2", "kind": "unclassified_tcp", "frame_number": 68524, "timestamp_epoch": "1634917014.468276000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004413140000005354415254544c530d0a" } }, { "event_id": "evt-1c0ce78f35d3b4ed94a4f89b", "kind": "unclassified_tcp", "frame_number": 68529, "timestamp_epoch": "1634917014.514902000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044132700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-8cba7f4e56049256ab6152e4", "kind": "unclassified_tcp", "frame_number": 68532, "timestamp_epoch": "1634917014.644872000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020083ab2800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-9c2338241f21dc0487b68cf8", "kind": "unclassified_tcp", "frame_number": 68536, "timestamp_epoch": "1634917014.825288000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eb804f621ffddf3cafdd5625", "kind": "unclassified_tcp", "frame_number": 68543, "timestamp_epoch": "1634917015.052444000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-385049fd4b5d0da4614b1694", "kind": "unclassified_tcp", "frame_number": 68548, "timestamp_epoch": "1634917015.194881000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-09eb6f831521ad8a2d031477", "kind": "unclassified_tcp", "frame_number": 68551, "timestamp_epoch": "1634917015.195092000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133c050000bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313031373030343835305a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313031373030333330355aa011180f32303231313032333233343830355a300d06092a864886f70d01010b05000382010100494cfbfb5a7353b1df240c83f1916e0570c2ac2ad56d2ba5ed6a7849c22d27e07d7d49d4d4c86d9414e9bcc84ec1e5b204f6cb531cceed1db4ec654dfdf600a6643b71ed9d6da9e249c448698b82644513c5f84a5a096733d8d25429751d8ed490c8888482b9d9cc3907b3bcdb04b0bf24fdc679539d783fac2b869a9352b9b55a999387933c19601ab033ce896d12dcaf4a6f5eee0db1f01a54f894a8fe87c8643b8d5a84281bd081efce518f6ba436d80f9d493ebf32f16c86ea011fdf7480c2d46b2a649c94e7f137d90d973a0b02cec6faa22348fed312752c12dc126ddb99f9ec71da0c3e502c6393846aeb171ed98523659a672cceeca0fd3c595f610c0c00016903001861043da2f1db496a715f717ee1d584a05be9d2949ea38c45ffa8784f9842f9ea139ed827ca2ad523310df5e0bad8d0" } }, { "event_id": "evt-dd1414ef719c6bfd7b983e2b", "kind": "unclassified_tcp", "frame_number": 68554, "timestamp_epoch": "1634917015.207251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f1ad14ee24e25950ec5b6c0f", "kind": "unclassified_tcp", "frame_number": 68557, "timestamp_epoch": "1634917015.703629000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004413b400000016030300070b00000300000016030300661000006261046fdb4bf4722f931addc90a9c542efc11088093b96b62ed6d9a41c367306e1480f9745bf9d1d015feed16225da5f9848b01444dcc2c4ace63c7de73b6956f7b3c8b365b86218975c1a44adcee0a524bc7ea6ae1a0dc213a81ef77de2019a49c941403030001011603030028000000000000000050ba12ddb822997d281e4dd681a1955a067917d8baa0bc165d806921902b4bf4" } }, { "event_id": "evt-5db2334513e13091fcced30a", "kind": "unclassified_tcp", "frame_number": 68563, "timestamp_epoch": "1634917015.765585000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133d000000140303000101160303002800000000000000008fc56fb4ebeefd63bb26eed4bf3c5b821a5649cfdd83292df64a28be807f0293" } }, { "event_id": "evt-dbc992b92eb6b49ef03bdc41", "kind": "unclassified_tcp", "frame_number": 68568, "timestamp_epoch": "1634917015.874656000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50273, "dst_port": 1187, "tcp_stream": 1410, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7b606435075961ed2224b5eb", "kind": "unclassified_tcp", "frame_number": 68570, "timestamp_epoch": "1634917016.015691000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-b8b342baa741d7df4ea01e6b", "kind": "unclassified_tcp", "frame_number": 68574, "timestamp_epoch": "1634917016.043451000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133700000017030300280000000000000001c3d879f503a89983f5b3a35c74e718b11f42a0578868499a3d0649774ac4ab61" } }, { "event_id": "evt-39940eea7af5215ba79444d6", "kind": "unclassified_tcp", "frame_number": 68578, "timestamp_epoch": "1634917016.084551000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-456f7f74481802bebbeb8842", "kind": "unclassified_tcp", "frame_number": 68581, "timestamp_epoch": "1634917016.469550000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133300000017030300240000000000000002cb66d00da0d38d68bd39e95bffbb953d3c12e653b55cea39be19106a" } }, { "event_id": "evt-99c2f546d156b2172eaaec62", "kind": "unclassified_tcp", "frame_number": 68586, "timestamp_epoch": "1634917016.515232000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441339000000170303002a0000000000000002116db55c63b0b583c70b71f3dc77536e5c50612aa870f8544f22f88a4d1dd5993cec" } }, { "event_id": "evt-1cb69b3555d99c7f2112b984", "kind": "unclassified_tcp", "frame_number": 68589, "timestamp_epoch": "1634917017.046021000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044135100000017030300420000000000000003289515b930be58f48651b543df2245dbc72cda0a7f694c532d77938bd7b58e3ffb6ea6458f793b5ab7dc475c306590e01cd8093a84c97cc10b3a" } }, { "event_id": "evt-5d5977f02970274b15d21715", "kind": "unclassified_tcp", "frame_number": 68594, "timestamp_epoch": "1634917017.104292000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441339000000170303002a0000000000000003b3dd84c228da0e79e24d1177473c771b9d88df032e0f8cbf3ba479b8c29447f11795" } }, { "event_id": "evt-e08dcacbf95a32c03667c756", "kind": "unclassified_tcp", "frame_number": 68597, "timestamp_epoch": "1634917017.382413000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441339000000170303002a00000000000000041e7af128d7b1340711f037569d245f604cc24c3620e9fd7c6b004d03486189808e8a" } }, { "event_id": "evt-a44e189dabdf1d6f69de9378", "kind": "unclassified_tcp", "frame_number": 68607, "timestamp_epoch": "1634917018.565688000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044134c000000170303003d0000000000000004e4df5cdc466d8f0cd341995dbacc31e065edb97a1ff461f76424e72557d0f250d1f9aa9e096288aefd0ef4f6cb98e3f1a866190803" } }, { "event_id": "evt-fe4338bb1cb4f57c56c5b465", "kind": "unclassified_tcp", "frame_number": 68610, "timestamp_epoch": "1634917018.804610000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044136000000017030300510000000000000005ce9fb43df7c7fe119c40d0cf8d2c145c4933b5e818a3d633cabef5c5ca90d149bb90754fcf552cd8cdbff5f4b8c94f33d65a512c1019de8cd0bb230eea03a165e332f10901918f1f29" } }, { "event_id": "evt-a2b144527b060af66eda25a6", "kind": "unclassified_tcp", "frame_number": 68614, "timestamp_epoch": "1634917018.853988000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133c000000170303002d00000000000000054d4425bbb9918121ea6f912bb6b8ff363fbff7f2760ef1958112d4586294bb388591b3cddf" } }, { "event_id": "evt-04e6c2111ac46e282aec94af", "kind": "unclassified_tcp", "frame_number": 68617, "timestamp_epoch": "1634917019.202461000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441347000000170303003800000000000000060e2b33c0aee11b24ed8a92d68e75e15b90e614aa273d9a13ed48053c248e7c56feeb5b2fee3c632d837c919c8e338e2f" } }, { "event_id": "evt-d05ed0eda5e34533b4fda84a", "kind": "unclassified_tcp", "frame_number": 68621, "timestamp_epoch": "1634917019.247417000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044133f0000001703030030000000000000000645abdb17746a6186de0cab0402737b644460ad2f298e1d46bba7abe48241bf0b07316c0624eb8cfe" } }, { "event_id": "evt-40b1bde511b2a5651f1101f2", "kind": "unclassified_tcp", "frame_number": 68624, "timestamp_epoch": "1634917019.608510000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010044132d000000170303001e00000000000000073594ac955ded7440c2ac467cede2c43e05654053f940" } }, { "event_id": "evt-11694fd9a2b38228d6f71230", "kind": "unclassified_tcp", "frame_number": 68629, "timestamp_epoch": "1634917019.662765000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441355000000170303004600000000000000079c247d6b8e1b413df2702472952d199e4f07c5800585ab9313cf3001c57fdbce74de3e6e129587d7b84a4fc57083474042301880e3f53d994dfa07e2bed7" } }, { "event_id": "evt-0d29a907e439dd216eddab02", "kind": "unclassified_tcp", "frame_number": 68633, "timestamp_epoch": "1634917020.039297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8817861bdc4261bb0b55069a", "kind": "unclassified_tcp", "frame_number": 68639, "timestamp_epoch": "1634917020.187432000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50274, "dst_port": 1187, "tcp_stream": 1411, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-42abc641127a0cf87546ad40", "kind": "unclassified_tcp", "frame_number": 68643, "timestamp_epoch": "1634917020.355500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701004413b900000017030300aa00000000000000086665f386094391755da36bfee6e55592e6b4c5c291b37701157ec161d974061b85efc0917c43cd41148c94d3c3dbb0e12fa7713a4569796b7f77fa81cf105d6a13de898a9c5bd907d22b9713aa654780e8cdc142c535bfb5a493ff57b811a5bb46363b64a4034143bd9432c7b519ec159420aa083ad28a05f155692619a6088b779d19ab8cdf2be3aa830078f24bdab9c4788c41eae4ddeba83a7cad48da069a9789" } }, { "event_id": "evt-8c59ccacc140e912fe61098f", "kind": "unclassified_tcp", "frame_number": 68648, "timestamp_epoch": "1634917020.609592000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100441329000000150303001a00000000000000093b9dc665ade634beadb0c2bc7e99e34c2468" } }, { "event_id": "evt-e2e61cf43085acddcfcd5ba2", "kind": "unclassified_tcp", "frame_number": 68656, "timestamp_epoch": "1634917020.652212000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010044130a000000" } }, { "event_id": "evt-005178878b204e05b056bdb6", "kind": "unclassified_tcp", "frame_number": 68661, "timestamp_epoch": "1634917020.794660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010044130a000000" } }, { "event_id": "evt-258d13a6115494b8bf10e541", "kind": "unclassified_tcp", "frame_number": 68664, "timestamp_epoch": "1634917023.684899000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020083ab0a000000" } }, { "event_id": "evt-af65d5f6920f9d44ac6e9e5a", "kind": "unclassified_tcp", "frame_number": 68671, "timestamp_epoch": "1634917024.541930000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50275, "dst_port": 1187, "tcp_stream": 1412, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-af9f5ee25b9f33322817d6f6", "kind": "unclassified_tcp", "frame_number": 68683, "timestamp_epoch": "1634917028.911909000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50276, "dst_port": 1187, "tcp_stream": 1413, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-34185cbb41cb26fe9911a4e2", "kind": "unclassified_tcp", "frame_number": 68699, "timestamp_epoch": "1634917033.260684000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50277, "dst_port": 1187, "tcp_stream": 1414, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-faa05a41276a04c12da76369", "kind": "unclassified_tcp", "frame_number": 68702, "timestamp_epoch": "1634917034.070485000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010050440c000000197b" } }, { "event_id": "evt-2688c6140666e64ac009fc8b", "kind": "unclassified_tcp", "frame_number": 68704, "timestamp_epoch": "1634917034.255713000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050440e00000005020002" } }, { "event_id": "evt-209a14ad2e2b8497334826e3", "kind": "unclassified_tcp", "frame_number": 68705, "timestamp_epoch": "1634917034.256247000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010050440c0000000502" } }, { "event_id": "evt-ee648797da85baebc6d54b64", "kind": "unclassified_tcp", "frame_number": 68707, "timestamp_epoch": "1634917034.509048000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-48fb34d5f3ed4e95431b0588", "kind": "unclassified_tcp", "frame_number": 68708, "timestamp_epoch": "1634917034.509529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010050440c0000000100" } }, { "event_id": "evt-3158f30af18f5cce15ab31a8", "kind": "unclassified_tcp", "frame_number": 68710, "timestamp_epoch": "1634917034.797523000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005044270000000501000316736d74702e6d65646963696e616675747572612e69740019" } }, { "event_id": "evt-ce952339ce14a34bfb5ed75c", "kind": "unclassified_tcp", "frame_number": 68718, "timestamp_epoch": "1634917035.338897000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504414000000050000010a0a169cc3c8" } }, { "event_id": "evt-410b6c8f445eb44f89e70a2b", "kind": "unclassified_tcp", "frame_number": 68721, "timestamp_epoch": "1634917035.536562000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050444c00000032323020736d7470646830322e61642e61727562612e6974204172756261204f7574676f696e6720536d7470202045534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-0b6bd76fc6801101585c6e04", "kind": "unclassified_tcp", "frame_number": 68724, "timestamp_epoch": "1634917035.771718000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050441a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-d92c62cae34cde443c4d8c5a", "kind": "unclassified_tcp", "frame_number": 68729, "timestamp_epoch": "1634917035.958242000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005044c10000003235302d736d7470646830322e61642e61727562612e69742068656c6c6f205b3137332e36362e3134362e3131325d2c20706c656173656420746f206d65657420796f750d0a3235302d48454c500d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d53495a45203532343238383030300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302d5354415254544c530d0a323530204f4b0d0a" } }, { "event_id": "evt-952132e4cd2a741751b0bace", "kind": "unclassified_tcp", "frame_number": 68732, "timestamp_epoch": "1634917036.224859000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005044140000005354415254544c530d0a" } }, { "event_id": "evt-45ea77fd5625a7a45f7740a9", "kind": "unclassified_tcp", "frame_number": 68737, "timestamp_epoch": "1634917036.398076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050442800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-eabd0d2063cfff7d20f4085c", "kind": "unclassified_tcp", "frame_number": 68740, "timestamp_epoch": "1634917036.630991000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9a7fdff43c01c1ecbc89bcf9", "kind": "unclassified_tcp", "frame_number": 68745, "timestamp_epoch": "1634917036.808122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050446a0500001603030059020000550303dbfa48d3a43ab5ca3d2f5c19da0d7935d37f7664a4acb377e67b26a75498d38520b8e225376eade39a0cabd00c957f5b1ac52d209852cfe25bb37186d21f175d84c03000000dff01000100000b0004030001021603030f480b000f44000f410007c2308207be308205a6a003020102021027c8c5fefdf214556bedaa4192319a2d300d06092a864886f70d01010b0500308189310b30090603550406130249543110300e06035504080c0742657267616d6f3119301706035504070c10506f6e74652053616e2050696574726f31173015060355040a0c0e416374616c697320532e702e412e3134303206035504030c2b416374616c6973204f7267616e697a6174696f6e2056616c69646174656420536572766572204341204733301e170d3231303531313133323432315a170d3232303531313133323432315a3066310b30090603550406130249543110300e06035504080c0742657267616d6f3119301706035504070c10506f6e74652053616e2050696574726f31153013060355040a0c0c417275626120532e702e412e3113301106035504030c0a2a2e61727562612e697430820122300d06092a864886f70d01010105000382010f003082010a0282010100abe7b1d875e41f314422ed2438adb0cc1e558bcd34dffacc5663f45d060a630a74f4de37e19b8c1936bcf1974bfa27f24a496d1fee1294caf15f9ffde614628ba405eee7167be53127eba8c6937668b41804e6cc8f4a64e862212e295ab497fc018c9bfb3a2e3b8fa647b9cf0d34674a8ce1389dad856a97f5fdb01e463b4171d09be0008cda7dfc620158eac36730be459c6a72f272655dc5cf16f160d044c572e3eaca9229f86ec0a3c7e0715f742a369a40e24046b81251e4723e0275ae9e91006df0a6293020384b40eeda2e55de64c4e40af8e3c150708ddb91bedcee6f9f4dcda1f4a781362c6e397caab9aa4598526786798acb957924a4b27ef6ca550203010001a38203423082033e300c0603551d130101ff04023000301f0603551d230418301680149f8ab1b5f1b1de82f4277cbe88cddea94381a34b307e06082b0601050507010104723070303b06082b06010505073002862f687474703a2f2f6361636572742e616374616c69732e69742f63657274732f616374616c69732d617574686f766733303106082b060105050730018625687474703a2f2f6f63737030392e616374616c69732e69742f56412f415554484f562d4733301f0603551d1104183016820a2a2e61727562612e6974820861727562612e697430510603551d20044a3048303c06062b811f0113013032303006082b06010505070201162468747470733a2f2f7777772e616374616c69732e69742f617265612d646f776e6c6f61643008060667810c010202301d0603551d250416301406082b0601050507030206082b0601050507030130480603551d1f0441303f303da03ba0398637687474703a2f2f63726c30392e616374616c69732e69742f5265706f7369746f72792f415554484f562d47332f6765744c61737443524c301d0603551d0e041604147539bcfbdcbff1383a258d1e73dada0b16e821ba300e0603551d0f0101ff0404030205a03082017f060a2b06010401d6790204020482016f0482016b016900760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001795ba2bdad00000403004730450220564cfcd33c963f6272934182ed7edb6cb91915406dd35ac2d9168595cddc8ce4022100b861d38c5d028cc25c29f4802a2d32e496eda9f241afd0a8246cf4078443354f0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001795ba2bdd80000040300483046022100" } }, { "event_id": "evt-bcfd3787dbc7af76519c7f38", "kind": "unclassified_tcp", "frame_number": 68749, "timestamp_epoch": "1634917036.808806000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-51aa88dc7ce53ec090b5b96b", "kind": "unclassified_tcp", "frame_number": 68754, "timestamp_epoch": "1634917036.809214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9472127acbf655fd7cbb8b34", "kind": "unclassified_tcp", "frame_number": 68755, "timestamp_epoch": "1634917036.809227000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "5d805cf0036e44b9f9ef51917d7fce213bd75c6f1536c0f991aceb0052e72bd5f8dbf68aeafbf64857f9aa9eaab47b92a6ef17459c3a9d6814b51ab16bf30dfb29b13213e5c0a7b685ffd9b7aec3567f570d152a5df9d3472830fe0c4c73f7e79a8783df36a86b5620db7edae94ec61aa7f16f1aa9f04443df681d1d82bde07e28fdbce6a258c4967674c9fc2597ae565cebd616030300040e000000" } }, { "event_id": "evt-8fb50182250486fb286b66cf", "kind": "unclassified_tcp", "frame_number": 68759, "timestamp_epoch": "1634917037.459968000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504488000000160303004610000042410459f0e32bf0832b27ccaa2f03f8233945a52dc7004f02774adfde409b321a2e503527116f367df5b372a0ca61aac0cb9657c558130290ea376568dfe5778538f2140303000101160303002800000000000000008037e9c598ac50dc18181342e6072379bb9842c5c84a18301f8b562f20fa94a0" } }, { "event_id": "evt-3a2b4cceccfe86be78131fbd", "kind": "unclassified_tcp", "frame_number": 68765, "timestamp_epoch": "1634917037.579797000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50278, "dst_port": 1187, "tcp_stream": 1416, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-194ec629158ab55841476af0", "kind": "unclassified_tcp", "frame_number": 68767, "timestamp_epoch": "1634917037.594967000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50278, "dst_port": 1187, "tcp_stream": 1416, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-247300ce9969fcc92789871a", "kind": "unclassified_tcp", "frame_number": 68770, "timestamp_epoch": "1634917037.632055000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050443d0000001403030001011603030028ced046b2322cf9f762e2c2ed3b85236db313cf3519004c02f2e8af715b2052f37e93d2ddd7749a33" } }, { "event_id": "evt-6357454692487b9085068fcd", "kind": "unclassified_tcp", "frame_number": 68774, "timestamp_epoch": "1634917037.965195000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050443700000017030300280000000000000001fe5db40575fbe23cc8e9783e3daf7b1818cfe4874ddc59187877c01896daf264" } }, { "event_id": "evt-686f55e4b157c18f5b0ebaf9", "kind": "unclassified_tcp", "frame_number": 68779, "timestamp_epoch": "1634917038.138983000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005044d000000017030300c1ced046b2322cf9f89502403507b9c14f88209398966fb77a0063bab90c6c3c5d1bbe83c0531cd5a43f34c901d96f968632c408cef7bd087dee5524f39aeb5075dcbf125d3d63c2868cb8475bbc2f016062833f2a998766f2d304ea450d86a676af583d6068789cb6abf8b2a77c9defd626ed2947485ab8ab048be5f852a5fe6ecb9e8c6aea0d438513d5669d0da0cc6f1f9ae4ea2673d4f78a0e4d4ffcfd4579a0dcd77d0f584a7dc3b2fcd5a5bb48d6fa7fe053ad4a1c194863515affc510bb94" } }, { "event_id": "evt-622428bd01cfaad29751d4ce", "kind": "unclassified_tcp", "frame_number": 68782, "timestamp_epoch": "1634917038.942284000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050443300000017030300240000000000000002cf23848b6d63f5dc33c14af15177f9dd2441adb874f59ab84a06fc03" } }, { "event_id": "evt-687fcd1a3b65d3015c2cf0f7", "kind": "unclassified_tcp", "frame_number": 68787, "timestamp_epoch": "1634917039.123543000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504439000000170303002aced046b2322cf9f9cd1bf2045b4bd3eb4fa8404848b90b1e1cc7300e31bdcc8c8b91f6566c29b47c6cea" } }, { "event_id": "evt-69dea049fff3639c16ac6c04", "kind": "unclassified_tcp", "frame_number": 68790, "timestamp_epoch": "1634917039.367078000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504459000000170303004a0000000000000003ff4317dd6c7f5002bd583270b77cdd07b26407750647cd5b830d265521fe829d38e5b925a45d3a64a73e114f91d30dc890587bcba9d715916ba994dd7f73305a30bd" } }, { "event_id": "evt-9f7bb03f85fdfd91c0967442", "kind": "unclassified_tcp", "frame_number": 68795, "timestamp_epoch": "1634917039.539665000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504439000000170303002aced046b2322cf9fa8dda691d00c2d4712999570a1f442fcbe85acc4a7f6728ce5d8ea39cd5ec0fea1a04" } }, { "event_id": "evt-02c4933b1d842863a5745caf", "kind": "unclassified_tcp", "frame_number": 68798, "timestamp_epoch": "1634917039.813869000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050443100000017030300220000000000000004fb7da12a8c80beeda6a29dd864c90eba05d4d705e220679b43a2" } }, { "event_id": "evt-edde15321479d05824f3bb6e", "kind": "unclassified_tcp", "frame_number": 68803, "timestamp_epoch": "1634917040.014157000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050444f0000001703030040ced046b2322cf9fb61109c894d99c5e9fa9a8ee055b0ab4cf71af806ca8fd1afe4f620f49cd4656838baf94eae29a0a25c319caa9895d3cf5aa7f13752aa6921" } }, { "event_id": "evt-44f119a8ccb0336cf59269ac", "kind": "unclassified_tcp", "frame_number": 68806, "timestamp_epoch": "1634917040.240859000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504466000000170303005700000000000000055cc489732e23990fcf03bf51fa90dccdc67616ae1afd91a3ae362b5b4a749edad46cd6c67b4a1f0a7b44a3da70faedf18bf065ed11a60151a1b82122b96fa1b855fa5df5e0cbbc8bbbf416f49323a0" } }, { "event_id": "evt-f18744d4c91ace01ed76e09e", "kind": "unclassified_tcp", "frame_number": 68811, "timestamp_epoch": "1634917040.422533000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010050447f0000001703030070ced046b2322cf9fcfcbed9f7c828c327e28198e57a4140d93cacfc7abeab70b4d7ed724ad048bbb391668e0411b2b27d8ee91bdda5c8e4a703311ecc3c3b2c70c56a144bc605548534707db7e614b6a19cb030a052710d34cf90cdaaaf70821aa87936d2f1fb61e471068d0927a0b36d" } }, { "event_id": "evt-84048a7eaa285b836a5afc31", "kind": "unclassified_tcp", "frame_number": 68814, "timestamp_epoch": "1634917040.679212000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504429000000150303001a00000000000000065b2dbf05fd660488948ee5fb9b51294c702a" } }, { "event_id": "evt-1900867b2cd1ba4dfa99f105", "kind": "unclassified_tcp", "frame_number": 68821, "timestamp_epoch": "1634917040.861904000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100504429000000150303001aced046b2322cf9fdebbfe783b532340d39c8e69e51d29e349071" } }, { "event_id": "evt-b858e20c3327d6725ca6278c", "kind": "unclassified_tcp", "frame_number": 68825, "timestamp_epoch": "1634917040.862462000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010050440a000000" } }, { "event_id": "evt-90ecfa550e4de3ee959e67a6", "kind": "unclassified_tcp", "frame_number": 68827, "timestamp_epoch": "1634917040.865089000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010050440a000000" } }, { "event_id": "evt-e9790516ad5c9c6f782619d8", "kind": "unclassified_tcp", "frame_number": 68832, "timestamp_epoch": "1634917041.903719000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50279, "dst_port": 1187, "tcp_stream": 1417, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b1355416d280e99ec090a0d3", "kind": "unclassified_tcp", "frame_number": 68838, "timestamp_epoch": "1634917046.211967000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50280, "dst_port": 1187, "tcp_stream": 1418, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6c22cad39a503a693ad8be8a", "kind": "unclassified_tcp", "frame_number": 68846, "timestamp_epoch": "1634917050.588654000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50281, "dst_port": 1187, "tcp_stream": 1419, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c094a07354e06fc6b5d0c7d7", "kind": "unclassified_tcp", "frame_number": 68848, "timestamp_epoch": "1634917050.657732000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50281, "dst_port": 1187, "tcp_stream": 1419, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f7a463ab4d1d97baa3f7a89e", "kind": "unclassified_tcp", "frame_number": 68851, "timestamp_epoch": "1634917053.589437000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100193d0c000000197b" } }, { "event_id": "evt-ea925070a99c3ae32a0ffaff", "kind": "unclassified_tcp", "frame_number": 68853, "timestamp_epoch": "1634917053.791921000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d0e00000005020002" } }, { "event_id": "evt-8578785fcafde0369f45b694", "kind": "unclassified_tcp", "frame_number": 68854, "timestamp_epoch": "1634917053.792673000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100193d0c0000000502" } }, { "event_id": "evt-c9e1ad125eb69aae8a62a73f", "kind": "unclassified_tcp", "frame_number": 68856, "timestamp_epoch": "1634917054.114423000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-784e2a1e4edf529d707cadf5", "kind": "unclassified_tcp", "frame_number": 68857, "timestamp_epoch": "1634917054.114916000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100193d0c0000000100" } }, { "event_id": "evt-83737981cb0691b6a8275a44", "kind": "unclassified_tcp", "frame_number": 68859, "timestamp_epoch": "1634917054.462237000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d1d000000050100030c6d74612e3231636e2e636f6d0019" } }, { "event_id": "evt-d1f2467cc001a20244d4ac78", "kind": "unclassified_tcp", "frame_number": 68870, "timestamp_epoch": "1634917054.830318000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d14000000050000010a0a169cc3c9" } }, { "event_id": "evt-5a3e0e87bc12f9fafbb26d95", "kind": "unclassified_tcp", "frame_number": 68874, "timestamp_epoch": "1634917054.981253000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50282, "dst_port": 1187, "tcp_stream": 1421, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-41efc16334da5fd8fe6636b1", "kind": "unclassified_tcp", "frame_number": 68877, "timestamp_epoch": "1634917055.118777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d18000000323230203231636e2e636f6d0d0a" } }, { "event_id": "evt-503328526fb20bd802c6416a", "kind": "unclassified_tcp", "frame_number": 68881, "timestamp_epoch": "1634917055.408831000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100193d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b7c850ac80d459b366b6cd62", "kind": "unclassified_tcp", "frame_number": 68894, "timestamp_epoch": "1634917059.331460000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50283, "dst_port": 1187, "tcp_stream": 1422, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f93b28a3632cf13542c0d9de", "kind": "unclassified_tcp", "frame_number": 68900, "timestamp_epoch": "1634917063.640535000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50284, "dst_port": 1187, "tcp_stream": 1423, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-23781aa25a56ab505299bd77", "kind": "unclassified_tcp", "frame_number": 68904, "timestamp_epoch": "1634917065.157477000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100193d0a000000" } }, { "event_id": "evt-0f8ec3a16c6117a8797fd5d5", "kind": "unclassified_tcp", "frame_number": 68924, "timestamp_epoch": "1634917067.985717000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50285, "dst_port": 1187, "tcp_stream": 1425, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-862407f7d75ce3f8de9d169b", "kind": "unclassified_tcp", "frame_number": 68931, "timestamp_epoch": "1634917072.453420000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50286, "dst_port": 1187, "tcp_stream": 1426, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a7e3a99d5760f1d3876939f6", "kind": "unclassified_tcp", "frame_number": 68936, "timestamp_epoch": "1634917075.689207000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-4847a2e96df45a7b403a3b3e", "kind": "unclassified_tcp", "frame_number": 68943, "timestamp_epoch": "1634917076.870596000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50287, "dst_port": 1187, "tcp_stream": 1427, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-991affdfd9678886a34c9783", "kind": "unclassified_tcp", "frame_number": 68945, "timestamp_epoch": "1634917076.891699000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50287, "dst_port": 1187, "tcp_stream": 1427, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5ded2fc9114e1454018dd768", "kind": "unclassified_tcp", "frame_number": 68948, "timestamp_epoch": "1634917078.982013000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010064760c000000197b" } }, { "event_id": "evt-9f4fe8ea043c88f22fb0f714", "kind": "unclassified_tcp", "frame_number": 68950, "timestamp_epoch": "1634917079.165480000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064760e00000005020002" } }, { "event_id": "evt-04a4f2a8804899e9cac3a702", "kind": "unclassified_tcp", "frame_number": 68951, "timestamp_epoch": "1634917079.165993000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010064760c0000000502" } }, { "event_id": "evt-ded38d31ed0a0ac54cadafc6", "kind": "unclassified_tcp", "frame_number": 68953, "timestamp_epoch": "1634917079.406382000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100647620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1dc0233366ab01b1cad0b653", "kind": "unclassified_tcp", "frame_number": 68954, "timestamp_epoch": "1634917079.407044000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010064760c0000000100" } }, { "event_id": "evt-9fb6f43c1e69368474a5f77b", "kind": "unclassified_tcp", "frame_number": 68956, "timestamp_epoch": "1634917079.725436000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100647620000000050100030f6d61696c2e70616e6769612e62697a0019" } }, { "event_id": "evt-13bdbb38acf162083779161d", "kind": "unclassified_tcp", "frame_number": 68963, "timestamp_epoch": "1634917079.845273000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100647614000000050000010a0a169cc3ca" } }, { "event_id": "evt-f838a1bb2f696969e326cf23", "kind": "unclassified_tcp", "frame_number": 68966, "timestamp_epoch": "1634917079.918389000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064762c000000323230204d61696c32576f726c6420534d5450205365727665722052656164790d0a" } }, { "event_id": "evt-8b7d074a554564ed1c1e5bbb", "kind": "unclassified_tcp", "frame_number": 68969, "timestamp_epoch": "1634917080.229482000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200cfcb0c000000197b" } }, { "event_id": "evt-dce02d4340e986916ecd03da", "kind": "unclassified_tcp", "frame_number": 68971, "timestamp_epoch": "1634917080.413868000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb0e000000050200020407010064761a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-cdda133792e8864947e6a7bf", "kind": "unclassified_tcp", "frame_number": 68972, "timestamp_epoch": "1634917080.414408000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cfcb0c0000000502" } }, { "event_id": "evt-468a1d68e3564eb603884273", "kind": "unclassified_tcp", "frame_number": 68977, "timestamp_epoch": "1634917080.516354000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006476520000003235302d53495a4520300d0a3235302d41555448204c4f47494e0d0a3235302d415554483d4c4f47494e0d0a3235302d384249544d494d450d0a323530205354415254544c530d0a" } }, { "event_id": "evt-23d270eed55d744c082f058d", "kind": "unclassified_tcp", "frame_number": 68980, "timestamp_epoch": "1634917080.699683000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-216f39ecc3ad9ad56ff13020", "kind": "unclassified_tcp", "frame_number": 68981, "timestamp_epoch": "1634917080.700219000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200cfcb0c0000000100" } }, { "event_id": "evt-8112b714ccc007ffb331b53d", "kind": "unclassified_tcp", "frame_number": 68984, "timestamp_epoch": "1634917081.075756000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006476140000005354415254544c530d0a" } }, { "event_id": "evt-331e6b4d78e6f3303abc39c1", "kind": "unclassified_tcp", "frame_number": 68991, "timestamp_epoch": "1634917081.147512000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064762200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-3ffaf525f48b4ce8a587950b", "kind": "unclassified_tcp", "frame_number": 68996, "timestamp_epoch": "1634917081.244617000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50288, "dst_port": 1187, "tcp_stream": 1429, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-43df4f48af9178f48045bc80", "kind": "unclassified_tcp", "frame_number": 68998, "timestamp_epoch": "1634917081.267418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-596eee4005ff1f7e06eb1cea", "kind": "unclassified_tcp", "frame_number": 69003, "timestamp_epoch": "1634917081.497754000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-11d51f6b11ad443a8af5504e", "kind": "unclassified_tcp", "frame_number": 69013, "timestamp_epoch": "1634917081.593847000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006476830d0000160303005b020000570303dc859a3bffd4e029bfff9779031f5ac2f96a90fdd7129fff8a023beb18715a41200ae0ccbbdfa4c01ef2a8624944ed68a57e259813dd6115f79ed036b2167db8b7c01300000fff0100010000000000000b000201001603030bb90b000bb5000bb20006be308206ba308205a2a00302010202100955d487dbd42bbfb63ee316e2177902300d06092a864886f70d01010b0500304f310b300906035504061302555331153013060355040a130c446967694365727420496e633129302706035504031320446967694365727420544c532052534120534841323536203230323020434131301e170d3231303530333030303030305a170d3232303630333233353935395a306a310b3009060355040613025553311330110603550408130a43616c69666f726e6961311430120603550407130b4c6f7320416e67656c657331193017060355040a13104d61696c32576f726c642c20496e632e3115301306035504030c0c2a2e70616e6769612e62697a30820122300d06092a864886f70d01010105000382010f003082010a0282010100d1fa394582a296bba572ac059707dbaf6d6de6f4f7d23a58777ca6b5752278b2f99b92d88e21a31e94c6c019221d6153e303549a25c618dd0d606f063a102a55d18523da4aefca7e3f22f7c7e9014d9a488470cdb2f4d9990fdf516afbeadc2b1f8fa0f6b5aa7bedcccee022c19230d1ee978e461cadbe47d2857c742c65964a2147cebbcbda885ec8b999b2e0d5ddff2fa151b037af21ef2de33d5897d826ff4679494dea35410e03bfee887c171676c873accb6bc2694e8a272b80511c9c07fbec2a10d4438f398c45697d2035e2251272633d743793cac9b572ff187d40fc1486b9bcf29f575eeaec086a892fe370e259e9dd01a9c79fa54df8096491dce90203010001a382037530820371301f0603551d23041830168014b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4301d0603551d0e04160414962c5fa0a8dec8ada086adb03880300d2f477d8730230603551d11041c301a820c2a2e70616e6769612e62697a820a70616e6769612e62697a300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230818b0603551d1f048183308180303ea03ca03a8638687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274544c53525341534841323536323032304341312e63726c303ea03ca03a8638687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274544c53525341534841323536323032304341312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307d06082b060105050701010471306f302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304706082b06010505073002863b687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274544c53525341534841323536323032304341312e637274300c0603551d130101ff040230003082017e060a2b06010401d6790204020482016e0482016a01680076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017932cac90e0000040300473045022100bb0eb3b40cb34116e530bd2166b6cb35d465df44205e66236423b09c488649c20220696395a2599575639be322e60e9d8243240e72fe9ceadcb6444b83e7508d10900077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017932cac5f200000403004830460221009dac3f2ecabeb30cd7a59c5363895a6fa25219cebe347d11debb6e87c010d5a3022100cd3f9b78adf2c7bec6dbbc6a6a8e0aad81b3336febfdc205ff698de70cafa6eb00750051a3b0f5fd" } }, { "event_id": "evt-fc5301f2da199fc888b690f6", "kind": "unclassified_tcp", "frame_number": 69014, "timestamp_epoch": "1634917081.593868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-387a06401366f7c7d37fc2f8", "kind": "unclassified_tcp", "frame_number": 69015, "timestamp_epoch": "1634917081.593891000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8ecab376b55df7a19bfa5e15", "kind": "unclassified_tcp", "frame_number": 69021, "timestamp_epoch": "1634917081.932697000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb14000000050000010a0a169cc3cb" } }, { "event_id": "evt-526bbbee39d734a38bffe62e", "kind": "unclassified_tcp", "frame_number": 69023, "timestamp_epoch": "1634917082.025793000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006476a00000001603030046100000424104957039d85d432506198191803497fd275427324e7d50c68d10229c3e09b20943452291e23df55f0f6d631140f13b4816a1430a5005434e2e8eba17425539b2bd14030300010116030300401f9a849d7f094b685f99012cf2a3ba80d01dc4e47a09e29897206ee8bc899d6cba671e9896e25e1c2943dae10d51adc47f3aa025c3464d81999bddbd1758ee31" } }, { "event_id": "evt-c082ce18e118c399c029c74c", "kind": "unclassified_tcp", "frame_number": 69028, "timestamp_epoch": "1634917082.104000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100647655000000140303000101160303004060fbb5265fad9f73d95c1a08584bfd7431eb647c9b0a381ac5e19c5d65b5612b1d460371a3998c1eaef5159fd747d916cc798a0de640a65248356d291974083b" } }, { "event_id": "evt-c28d8c5f4dbac9918b25203b", "kind": "unclassified_tcp", "frame_number": 69031, "timestamp_epoch": "1634917082.447486000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064764f0000001703030040f4a6354da8718ed70d43b2f66a8cc763aa478af25c5b8282c0569d0fb4621b98ed7e2fbbb98c93e1d56b484a118446d69d6adeda62ba4d853af93ba1c1fe8ae5" } }, { "event_id": "evt-d97cf25bd095e1210ecc85a7", "kind": "unclassified_tcp", "frame_number": 69036, "timestamp_epoch": "1634917082.518979000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064766f000000170303006078607b5d5bbc0fcffef9547081662c5b6ed3f9cc90285fd5d3a82952d8480469329f66f2608ba28fa068199d23529fd901d9360278fc89b6a8a8fac40e80f3b803704d463771b99586af35cb8f7a31888547fe4ed7181e863591ea2612d1f0f1" } }, { "event_id": "evt-408780de30a06924987b0316", "kind": "unclassified_tcp", "frame_number": 69039, "timestamp_epoch": "1634917083.384520000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064764f0000001703030040d9dbc51971e4545bb1d6168a568fa9f92d7ac93a6dd6f460527306bb3dfe18e5e22742a0851cecf167532881af63947715fe57a0d43edf93047faf61fadb6dc6" } }, { "event_id": "evt-1c62d89fff9ff7c5b689a1c4", "kind": "unclassified_tcp", "frame_number": 69044, "timestamp_epoch": "1634917083.456420000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064764f0000001703030040c0d3ef2bf1096a8cbc58faaa08e69b757617ecfee3bbe2c2e69a8b91ae6e76b24c7f94696140f337a3fc65119cfce3db7698855cf31dad1b971ce2294e2fbf27" } }, { "event_id": "evt-f171e6b4388a14f797e9c5bf", "kind": "unclassified_tcp", "frame_number": 69047, "timestamp_epoch": "1634917083.797776000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064764f0000001703030040cde224e28d2396eb4a6cd02c14e827b6cd4a49fa625b4c2f8be48b07daeeec1da63c6593241dbbaaa20067a93506ff0c28c1069b92cdec3ea7d89c8e7a10b734" } }, { "event_id": "evt-eb4191bc55f647e64fb4c3b0", "kind": "unclassified_tcp", "frame_number": 69052, "timestamp_epoch": "1634917083.865884000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064764f0000001703030040e1771a411401afd784e329ca5bb9c9cffcb662c6bd92a92f51efdb14ff27509ad798c465be425a699875cb61ff668ca61ca7aa0b38859f547089965c15dbbe70" } }, { "event_id": "evt-3a457fec79911e97c7353feb", "kind": "unclassified_tcp", "frame_number": 69055, "timestamp_epoch": "1634917084.302764000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064763f0000001703030030a8c339fce5cc60c5cbc7a33f0231558bb73cb9521de7a6861c17aaf5125a14878abe42ecb8df81b989eb3b1a8cbc4676" } }, { "event_id": "evt-b0f6c8ff764ca7e0d6773fd8", "kind": "unclassified_tcp", "frame_number": 69060, "timestamp_epoch": "1634917084.395976000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064768f00000017030300806bf3b06b4cf2af8805ff167aa2da0637fd4089676d87b06599a4b6dbbdbe6b4afc72311fd559c3f31dc079e34a1a618db43856fcce1b7d1df04ed33f87a93e0c1a659e658763bcbcb6f0700de74e09ff6b61342b69f393936c1a94b85044c4f495e9c6eec9927f395233accae4edae03999f1dcc108b6f07450f94549fa1fe24" } }, { "event_id": "evt-c8e1e7aebec2d494011e4bab", "kind": "unclassified_tcp", "frame_number": 69063, "timestamp_epoch": "1634917084.723699000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064763f0000001703030030e53cc9ef919ee8ed061a48e7f971c72fa28ad9fbe9ccd5090990ca2fefa7222addb9d4061922d03da52914c27a352c68" } }, { "event_id": "evt-520929d945b94834cb243b62", "kind": "unclassified_tcp", "frame_number": 69068, "timestamp_epoch": "1634917084.787074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064765f00000017030300500b1f221cbde4ca98d97a33bcf03b7fa5e1fbc893748fd5e86850f4b8ebed83f9c012de5ddd746b9b0a4d63549027319a96707e9ac678f0337c810cb537645eb2f6a85642ccbe80d985d54caba795476a" } }, { "event_id": "evt-ee69936a4b85fafad4154fb5", "kind": "unclassified_tcp", "frame_number": 69072, "timestamp_epoch": "1634917084.905862000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb4000000032323020736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-28a155aafaf313791c2d2aef", "kind": "unclassified_tcp", "frame_number": 69075, "timestamp_epoch": "1634917085.163595000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064763f000000170303003039f08314f5df0997a5aa0b2915f7c4ca9017f16cf708cb385d82e3657b86e4188e927eb9ab3bdd4cd4501f5e4a57d470" } }, { "event_id": "evt-acb89df3c62134ba155557b5", "kind": "unclassified_tcp", "frame_number": 69081, "timestamp_epoch": "1634917085.238490000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010064766f0000001703030060418daa86d3bdeb8e3488016c287a10d61329252c4aa6c8edb951d005531f66a1779a8bc58c4272a7c7a7e3e3df5c0ad1ae0c630df36c25428a6ca357586bd22d5e75480f1d02eb8e363b04542dcdff50dcbaf42595b2e71aa0d5b03de5e26405" } }, { "event_id": "evt-8483a7218bf17bd1ebb108bd", "kind": "unclassified_tcp", "frame_number": 69085, "timestamp_epoch": "1634917085.238928000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010064760a000000" } }, { "event_id": "evt-c7d793b13d4d7b7b0f66f32e", "kind": "unclassified_tcp", "frame_number": 69087, "timestamp_epoch": "1634917085.347467000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e5459ea02f61afde9fe0c1df", "kind": "unclassified_tcp", "frame_number": 69096, "timestamp_epoch": "1634917085.621590000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50289, "dst_port": 1187, "tcp_stream": 1431, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-55abec37a601e3b79bc0b8db", "kind": "unclassified_tcp", "frame_number": 69100, "timestamp_epoch": "1634917085.807381000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb820000003235302d736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-00b2f79566680006b621eb39", "kind": "unclassified_tcp", "frame_number": 69103, "timestamp_epoch": "1634917086.045844000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb140000005354415254544c530d0a" } }, { "event_id": "evt-097e861fcf436a4d8a30cdf1", "kind": "unclassified_tcp", "frame_number": 69108, "timestamp_epoch": "1634917087.890799000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-b025b1f673eabcdee4504c02", "kind": "unclassified_tcp", "frame_number": 69111, "timestamp_epoch": "1634917088.151820000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-531902d397d3cca1a043b82e", "kind": "unclassified_tcp", "frame_number": 69117, "timestamp_epoch": "1634917089.897454000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb7605000016030300510200004d03035db3bb1cd05ba12a4312cf6747d7f9a041a3d21ee61201d04b87bde2296c8cc12084d7b6f37ccbbd39d1ccb85dea03e98723cb4fea1f7104c8ea22d82d22d0a6c1009c000005ff010001001603030bfe0b000bfa000bf70006d3308206cf308205b7a003020102021001021b75fe3940175a34ab49a5290525300d06092a864886f70d01010b0500305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e20525341204341204731301e170d3139313032323030303030305a170d3232303132303132303030305a30818c310b300906035504061302434e3110300e060355040813074265696a696e67312a3028060355040a132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c7464312a3028060355040b132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c74643113301106035504030c0a2a2e73696e612e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afca8a8e52c691e3f0acf73d511dca772206440ebad2392ed09cd40708006010432db966d2bd0e98f1a3a0b8d7741f1fccfef8ec9730b5858a904720a96f065757b71805efecb702536f108dd2853a2fbc55c28c5c565776c09777de66d5ffa3207e2f15cd798b657873c9d68749e8a431a8cdd5ce6d3df49d72ce85e1c59adf62627b1134e93a91cac7278e9337c89020afd4a14c0cfadc6a8d2e9f6d27451ee97cd94de0adc2c3f807bb3c6a43e31aadb0fe2f7a3c7d968bc2b4c7c4676db1a3947d7b238c35d2ee206e133c830d43db28a16bb3ba7ab6f4803e88c379088121cc0e247eb96b89476268b83749b020402f8525e2d3bb83e29b216fcfa2e5a70203010001a382035730820353301f0603551d23041830168014919f5e3115ae109fad60c1f7c1ccaa48342f0c26301d0603551d0e04160414c6cddfc1597f2dcba3570852d940e8d0a2e9c5c0301f0603551d1104183016820a2a2e73696e612e636f6d820873696e612e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230750603551d1f046e306c3034a032a030862e687474703a2f2f63726c332e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c3034a032a030862e687474703a2f2f63726c342e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c304c0603551d2004453043303706096086480186fd6c0101302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f4350533008060667810c010202306f06082b0601050507010104633061302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e303c06082b060105050730028630687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f47656f5472757374434e525341434147312e63727430090603551d13040230003082017e060a2b06010401d6790204020482016e0482016a0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df237acfc000004030047304502206a9c64dcfed001f85a13ae5ddbd38b8f0957fd13e4f227a5d1ebe53e86916d54022100b0d2e6c3c70cb0c731ce01873608b1a4218cf30970ab1c1982658c5dacc988d10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df237ad31000004030046304402206160c5" } }, { "event_id": "evt-9b1c80d41f78b421d63115a3", "kind": "unclassified_tcp", "frame_number": 69121, "timestamp_epoch": "1634917089.900110000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d9194f1ecdcf081e065165a9", "kind": "unclassified_tcp", "frame_number": 69124, "timestamp_epoch": "1634917089.902773000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7f341063ff8940470e5f16ff", "kind": "unclassified_tcp", "frame_number": 69128, "timestamp_epoch": "1634917089.940492000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50290, "dst_port": 1187, "tcp_stream": 1432, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-64196e8d89fbb7385260a8aa", "kind": "unclassified_tcp", "frame_number": 69131, "timestamp_epoch": "1634917090.002016000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50290, "dst_port": 1187, "tcp_stream": 1432, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-01c45e72d472531534a1ffda", "kind": "unclassified_tcp", "frame_number": 69135, "timestamp_epoch": "1634917090.335494000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb480100001603030106100001020100ad5e45092edc980f98d1d9d3857cc010712f21b16c7555b31c2d7d97c074fa120405490c8295c161c71174af5a08a2d5bbd29f1e445b68ba23569072e52de8c71ca5e71b2a0831db73978804306b4124f444b6a94ddd00a80fb3b922519d8c20386b174e45d4823aff9282e4e6d91fdf9d64e06eb542cc153023cb866cde396d8a6e6712b7d04b6d9966e1a8e7560671c8ada3a7120a9f13ecc8d39433fe30462620472cf7a324df31a994aad383e66299ab38696d23d6b3544fb40737729280b0dd6ae442d07e7b17c3f085c6df36ff2cbb7d45d2794c93ae8f5d2c7d75020ec7c18ee570fcb27002451ef74d82a8b9e6490007b183a5f79d505b65ea9cd551140303000101160303002800000000000000001af93c40cf1cb11ab5dcffd146dde06045200ea8bba7343506041cb9addf50a3" } }, { "event_id": "evt-70fc1c8fcdaac2c80da31b96", "kind": "unclassified_tcp", "frame_number": 69140, "timestamp_epoch": "1634917090.860331000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb3d000000140303000101160303002857e35bbcf76c5c28530b210d1aff49bba19bc39248d1054fa46806f44f62cca94b73f2ed2e186244" } }, { "event_id": "evt-e340a929b66abcca6212d317", "kind": "unclassified_tcp", "frame_number": 69143, "timestamp_epoch": "1634917091.131762000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200cfcb37000000170303002800000000000000013054dce57293964ed230ca0b0b13c0e57802dc67c41f7641a5f9b55b572730f8" } }, { "event_id": "evt-4c365b5c880caa0544af3006", "kind": "unclassified_tcp", "frame_number": 69147, "timestamp_epoch": "1634917092.395484000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200cfcb0a000000" } }, { "event_id": "evt-9406606434697ee9eaf85530", "kind": "unclassified_tcp", "frame_number": 69162, "timestamp_epoch": "1634917094.253123000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50291, "dst_port": 1187, "tcp_stream": 1433, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-22b613b36779e28436e2441a", "kind": "unclassified_tcp", "frame_number": 69171, "timestamp_epoch": "1634917098.569073000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50292, "dst_port": 1187, "tcp_stream": 1434, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5adb911aa983c65c872cc3d2", "kind": "unclassified_tcp", "frame_number": 69179, "timestamp_epoch": "1634917102.932334000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50293, "dst_port": 1187, "tcp_stream": 1435, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-07de9fba3c5df179695e218e", "kind": "unclassified_tcp", "frame_number": 69181, "timestamp_epoch": "1634917103.033467000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50293, "dst_port": 1187, "tcp_stream": 1435, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-acf70bcfd1b0811c594f283a", "kind": "unclassified_tcp", "frame_number": 69186, "timestamp_epoch": "1634917106.143078000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-48a95f1fec606b4198cac5b7", "kind": "unclassified_tcp", "frame_number": 69194, "timestamp_epoch": "1634917107.343877000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50294, "dst_port": 1187, "tcp_stream": 1436, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d17b3948ac44ec66f29c954b", "kind": "unclassified_tcp", "frame_number": 69197, "timestamp_epoch": "1634917108.162776000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100d3e60c000000197b" } }, { "event_id": "evt-ba6a8311043d64d31141825b", "kind": "unclassified_tcp", "frame_number": 69199, "timestamp_epoch": "1634917108.469824000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e60e00000005020002" } }, { "event_id": "evt-aec69298a37e924768cf1017", "kind": "unclassified_tcp", "frame_number": 69200, "timestamp_epoch": "1634917108.470313000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d3e60c0000000502" } }, { "event_id": "evt-7ba8c9b83e75e38eab95eba1", "kind": "unclassified_tcp", "frame_number": 69202, "timestamp_epoch": "1634917108.899111000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f150e5a4506f7cf10211a8d2", "kind": "unclassified_tcp", "frame_number": 69203, "timestamp_epoch": "1634917108.899685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100d3e60c0000000100" } }, { "event_id": "evt-897676cfefa51d6a69ca7572", "kind": "unclassified_tcp", "frame_number": 69205, "timestamp_epoch": "1634917109.394474000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e62400000005010003136d61696c2e68726374756e697369612e636f6d0019" } }, { "event_id": "evt-34d998122e2e1eb77e748e4b", "kind": "unclassified_tcp", "frame_number": 69213, "timestamp_epoch": "1634917109.860364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e614000000050000010a0a169cc3cc" } }, { "event_id": "evt-fac29a1be74ef3435e0db124", "kind": "unclassified_tcp", "frame_number": 69216, "timestamp_epoch": "1634917110.316401000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e634000000323230204741524d2d393747303032204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ecea9932134a4e5a78d898b9", "kind": "unclassified_tcp", "frame_number": 69219, "timestamp_epoch": "1634917110.729251000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e61a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8cb0c2ea0d7fcf2fc99969ee", "kind": "unclassified_tcp", "frame_number": 69226, "timestamp_epoch": "1634917110.901949000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e6990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-bb6c295fa6361819602be00e", "kind": "unclassified_tcp", "frame_number": 69230, "timestamp_epoch": "1634917111.256172000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e6140000005354415254544c530d0a" } }, { "event_id": "evt-f49d660c2595f3d9cc734e8c", "kind": "unclassified_tcp", "frame_number": 69235, "timestamp_epoch": "1634917111.439371000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e62800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-7104cd70dcb451b8debf92ef", "kind": "unclassified_tcp", "frame_number": 69240, "timestamp_epoch": "1634917111.750847000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-43e35e9d60bb40fc987635d2", "kind": "unclassified_tcp", "frame_number": 69247, "timestamp_epoch": "1634917111.913312000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50295, "dst_port": 1187, "tcp_stream": 1438, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6912333e8ca6ce0b23bd424c", "kind": "unclassified_tcp", "frame_number": 69252, "timestamp_epoch": "1634917111.921559000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e61a0a000016030312330200005103036172daf739878d8b1a90e13e8d3b36417bc15b503942c12b96dcd530f2b8a95e203a26000086d371b0953d2f4fdcca2bc86695ccb19779128614f627a941e46b37c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e6cf5" } }, { "event_id": "evt-9a6f215817b32d5afa1f6df7", "kind": "unclassified_tcp", "frame_number": 69253, "timestamp_epoch": "1634917111.921577000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5dce54ac94a5d40be574b5c0", "kind": "unclassified_tcp", "frame_number": 69259, "timestamp_epoch": "1634917111.924785000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ec47fbae04b2c230ad807e8d", "kind": "unclassified_tcp", "frame_number": 69260, "timestamp_epoch": "1634917111.924800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ef693fa266bf36890c936548", "kind": "unclassified_tcp", "frame_number": 69264, "timestamp_epoch": "1634917112.488800000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e6e4000000160303008a10000086850400408adca9ba2aa3e8f1923ce0455f30d2578b0458c4d76f3e7aedcf4bf55b2889f33ccdfba1206c04e49c415684b191175625bbe0a01dcecbad49a821a705d6a76a00f598eae59f7d56cd2fb3712af603c128985b7e7606f2c9e9f910fb02b77080372ec5bdeb371c0e3fe40f82208fd08f4c933f288a7e0ddcc02cb76b0e532a6c577914030300010116030300400c5a3885ec3ab01ccf4fdb6817d5c96f46dfaca80b377b7c166796cd4005f9e69d3295b5e7a3f34b61f5f3187694db246482a0e4b565f1e94770f09f05f6bf7a" } }, { "event_id": "evt-f4a44569c2c1ccc5e4560f78", "kind": "unclassified_tcp", "frame_number": 69269, "timestamp_epoch": "1634917112.645595000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e6550000001403030001011603030040b9e2573a02959db8b715d9a6cc49f924d6e7d2e3ed3a292f03ed33144a55da59532d1d4e163e1a3c2d6eca3d1f22537f7b0429b3a1ec88e299af307f1d6778ff" } }, { "event_id": "evt-5a1dcc8bc3fbba8473431467", "kind": "unclassified_tcp", "frame_number": 69272, "timestamp_epoch": "1634917112.963898000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e64f000000170303004093a8b481dfe08df862b40654481fdc0a2ab24651b1adb6b0655d528f9e52f7bec1638f0a9f1adedc57526a6994346560b7011caf0cfab4854aaa89197854e7fd" } }, { "event_id": "evt-b8ec8d146e3561627c1038bc", "kind": "unclassified_tcp", "frame_number": 69277, "timestamp_epoch": "1634917113.160862000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-33f5a91896fbdfae2140527e", "kind": "unclassified_tcp", "frame_number": 69282, "timestamp_epoch": "1634917114.309704000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e64f000000170303004066c9329d9fc9806d326f31debf8e2a7a52912484e561e18425dabc24a6fc8be6f63fcba3b5fc6f7b4ccbc14a55b49c8f5ecb64037ed1ba31da9ebee95cf0a745" } }, { "event_id": "evt-1b5b4c8afc6b03cd8b2f8770", "kind": "unclassified_tcp", "frame_number": 69287, "timestamp_epoch": "1634917114.463680000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e64f000000170303004010be5cf599bb50ef2ec5e8da0e2b88beaeaf77aca9f488fe68b406596f8626b5fb2aa961256e523b27a787cd8c6f360936214ad206cae4cb7789ef52f82c861c" } }, { "event_id": "evt-5dc2bd63f0558572a8daa10d", "kind": "unclassified_tcp", "frame_number": 69292, "timestamp_epoch": "1634917114.707174000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e65f0000001703030050baf70cbc2ae2733f7fdd9ea742e0881fa88f32d4a37de9d3a8dcb3519b4e89d35c8e269fbd562b3d0d0a74a4cea83497ebdaf304d771a4dd82133ef9abab8cb3eaa25a2b0ad1a8bed76cea60bbcb710c" } }, { "event_id": "evt-7ed1621c1dc7615bb42cc92c", "kind": "unclassified_tcp", "frame_number": 69297, "timestamp_epoch": "1634917114.853871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e64f00000017030300403d10a7f306623d4cf29fc9dab260d03e6ad5a481775ff162ce83cd3df8fed1df8c1171902191e6bc127693f77e2ff43bd3a22c60cc8e1a81fb0c47ab09488653" } }, { "event_id": "evt-f86b79e78a5b3fa3e7adf0dd", "kind": "unclassified_tcp", "frame_number": 69300, "timestamp_epoch": "1634917115.135235000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e64f0000001703030040d70a2e63fa4a3c4815dfc2cb9dfaaaa9df221a3675082482a458d34a4b47003d246fa34caec89a630fd1cbdc0551c3ca2429d6dc0f3fec46acf6211c8c51a021" } }, { "event_id": "evt-51c522c77e913122d5031843", "kind": "unclassified_tcp", "frame_number": 69307, "timestamp_epoch": "1634917116.227597000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50296, "dst_port": 1187, "tcp_stream": 1439, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4ec5597ab84ef976b61f0ca2", "kind": "unclassified_tcp", "frame_number": 69311, "timestamp_epoch": "1634917117.687097000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e65f00000017030300504708744cb0b8075818bfdbc5ff2cf615cda3f692fe85e7269c185e87f2e192e60787ef3dcede5787d215ff501465f1a6d6691ace5acc995b48c2885a0859b718fdf9771b21017d612002010645e28afb" } }, { "event_id": "evt-05b15e86b995748fe4d9baf8", "kind": "unclassified_tcp", "frame_number": 69314, "timestamp_epoch": "1634917118.200878000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e63f0000001703030030df928e7077b26db0bafc96109d3fdc74ef84ac4f3f02296358ec4995ad7b9d3da04eaf18f16e386547a80c2af1f23110" } }, { "event_id": "evt-336506ac68f0298005838d01", "kind": "unclassified_tcp", "frame_number": 69321, "timestamp_epoch": "1634917120.553487000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50297, "dst_port": 1187, "tcp_stream": 1440, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-82efa4cd3a17342f75e98664", "kind": "unclassified_tcp", "frame_number": 69324, "timestamp_epoch": "1634917121.477821000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702003b150c000000197b" } }, { "event_id": "evt-afdeca2387611b33fa070332", "kind": "unclassified_tcp", "frame_number": 69326, "timestamp_epoch": "1634917121.668213000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b150e00000005020002" } }, { "event_id": "evt-d76fa849dc547ebc810b2c1f", "kind": "unclassified_tcp", "frame_number": 69327, "timestamp_epoch": "1634917121.668777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702003b150c0000000502" } }, { "event_id": "evt-12d83720582230585edddac6", "kind": "unclassified_tcp", "frame_number": 69329, "timestamp_epoch": "1634917121.926002000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-58e481733eaa61ce63c59059", "kind": "unclassified_tcp", "frame_number": 69330, "timestamp_epoch": "1634917121.926565000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702003b150c0000000100" } }, { "event_id": "evt-844b5d3bad7b388e959f9784", "kind": "unclassified_tcp", "frame_number": 69332, "timestamp_epoch": "1634917122.213396000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-2f0ee85dc67f6c031774804e", "kind": "unclassified_tcp", "frame_number": 69339, "timestamp_epoch": "1634917122.307477000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1514000000050000010a0a169cc3cd" } }, { "event_id": "evt-3451aee9391fe2713b335e40", "kind": "unclassified_tcp", "frame_number": 69342, "timestamp_epoch": "1634917122.360130000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b157900000032323020534130505231314341303137312e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a33383a3431202b303030300d0a" } }, { "event_id": "evt-7565d06cbf8989547ffd364a", "kind": "unclassified_tcp", "frame_number": 69345, "timestamp_epoch": "1634917122.811438000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b151a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c1f279bbc6f483c7a0e57300", "kind": "unclassified_tcp", "frame_number": 69349, "timestamp_epoch": "1634917122.856631000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15d80000003235302d534130505231314341303137312e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-a39b52016fec712ae01db356", "kind": "unclassified_tcp", "frame_number": 69352, "timestamp_epoch": "1634917123.132123000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15140000005354415254544c530d0a" } }, { "event_id": "evt-7f08d6fca7926a119d6e6022", "kind": "unclassified_tcp", "frame_number": 69357, "timestamp_epoch": "1634917123.179070000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b152700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-3ff561aaea7f029fabf7bbd0", "kind": "unclassified_tcp", "frame_number": 69360, "timestamp_epoch": "1634917123.463560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4801a9ad684ef10866d2b719", "kind": "unclassified_tcp", "frame_number": 69370, "timestamp_epoch": "1634917123.518236000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b150a10000016030310f00200005103036172db03ac42f5b979e7cd61e23b0c2d10dd94ac0f3aa1914b6c42fc61063b01201d18000089c98106a7655d42f1260cd4d5815ed16f4f74cc80dde5dc58fb4b6ec03000000900050000ff010001000b000d23000d200008303082082c30820714a00302010202100ccac32b0ef281026392b8852ab15642300d06092a864886f70d01010b0500304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d31301e170d3231303132323030303030305a170d3232303132313233353935395a306a310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e311430120603550403130b6f75746c6f6f6b2e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100b5de7ec750ed549d110cf273b19417492549937eb558162209a15a4db807edf797f76448efc134fec8eb8c39fb02f923bcd0cc6acadcb9b1059df7e1e10f7832a725b924591ad0b1813218bdc0dd0807f4884500856cb39a43e2fc46d1a56fe42c6f952de1b04750584c8b084d26177f86bdfa21e6feca5699c1c0d513a11f1fd73ffc34af94b5113e238eb25393157902135258a4915ba6a9f2aa7a78baba9a438e460df1e92f46abb7eab76814b548acb855936cb13408a474d03b1e8281e87fb76d4baeacdb4dbc2601841f12d1f062f956351e3ca239f89a437c5c92112cf675c1c8c32020f8071c1db875e37f7222a15eaae26e1765519a2e438d202b4b0203010001a38204eb308204e7301f0603551d23041830168014dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7301d0603551d0e04160414c2ef36cd677376d10f5529bdcec9c73a0ee58f39308202100603551d11048202073082020382162a2e636c6f2e666f6f747072696e74646e732e636f6d820d2a2e686f746d61696c2e636f6d82162a2e696e7465726e616c2e6f75746c6f6f6b2e636f6d820a2a2e6c6976652e636f6d82162a2e6e72622e666f6f747072696e74646e732e636f6d820c2a2e6f66666963652e636f6d820f2a2e6f66666963653336352e636f6d820d2a2e6f75746c6f6f6b2e636f6d82172a2e6f75746c6f6f6b2e6f66666963653336352e636f6d821b6174746163686d656e742e6f75746c6f6f6b2e6c6976652e6e6574821d6174746163686d656e742e6f75746c6f6f6b2e6f66666963652e6e657482206174746163686d656e742e6f75746c6f6f6b2e6f66666963657070652e6e657482166174746163686d656e74732e6f66666963652e6e6574821a6174746163686d656e74732d7364662e6f66666963652e6e6574821d6363732e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d82216363732d7364662e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d820b686f746d61696c2e636f6d82166d61696c2e73657276696365732e6c6976652e636f6d820d6f66666963653336352e636f6d820b6f75746c6f6f6b2e636f6d82126f75746c6f6f6b2e6f66666963652e636f6d82147375627374726174652e6f66666963652e636f6d82187375627374726174652d7364662e6f66666963652e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230818d0603551d1f048185308182303fa03da03b8639687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63" } }, { "event_id": "evt-f8da29be7b07eda1caf87a3f", "kind": "unclassified_tcp", "frame_number": 69371, "timestamp_epoch": "1634917123.518248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105" } }, { "event_id": "evt-729a73e9e6bde0073c5a3303", "kind": "unclassified_tcp", "frame_number": 69372, "timestamp_epoch": "1634917123.518255000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032303030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032303030333330365aa011180f32303231313032363233343830365a300d06092a864886f70d01010b050003820101006bf3f7594585ecffdd9eb68654cae703784da91c4b574c2bbd04c454ba93e848d499002ffa60a7f368e18d33184835d8104a2b35417072de995f8f0b15d994647c5ea4b411088fdecffd8198857b25b05e694e2997ed62dbba8c49378e9ca61fec82afbf88244cc3b713073e35144ff7f26279a1ae42fd8ce0a11bee33165ace8db13e370148fe744aec9529c96f340cbc20037fe806735119aa027da0c1d0cb800dee3ce7cbff4d46c6cf39b38cd2c0b1ffdeaa8c0659a09886c2c443823d07f02c081176bdb4fd7f1f5f1a08d4ef1a90d4fdf30633363a8c6745f5ad942aef68860cc1c65e7aa6acecdd93dcc0b7e88d36dad74d6389f578994ada6cb2bdd70c0001690300186104d56a29db37facd8d3d2696754909a33223b0ada1b890219b3f387ce6a447a456266d2a34a225b65b5611ca48b7ad8bf79dc4c1b0a81b8bb08bf090b9b1f693fb9802ce900190d2164b70383a3e1f786e91f3964412066d80ef3c50a71a0435d9080401007251eb911984280f3aeacb7e62d5e1e7b09699b362c6945e0d683c477b3d1c1967f9cf707c0e885ff7d3ec155b6f91bee8e961" } }, { "event_id": "evt-b5afb04533191cf2dd49ab0f", "kind": "unclassified_tcp", "frame_number": 69376, "timestamp_epoch": "1634917123.518456000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f3b7a129b8a78e0cfd33b67", "kind": "unclassified_tcp", "frame_number": 69378, "timestamp_epoch": "1634917123.876039000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15b400000016030300070b0000030000001603030066100000626104fe2c6b3959ddaf138bdf15e8619b1f10f1aad60a50133d01af0e6fe59175abbf7320e72282c9f4dca4007043003e1c8c0a29e49498283686dbeb0c762e4f8e9ed6f5abf887a5ba63b140ad4d9501bcf7f5876f34a9607cf6f5f9f823fadc70151403030001011603030028000000000000000028c889529b2670d1de47f48de903f14dc222afa5bcf73335523287ce3d1b2afa" } }, { "event_id": "evt-6e86ecf82e21c93430319a37", "kind": "unclassified_tcp", "frame_number": 69383, "timestamp_epoch": "1634917123.934879000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b153d0000001403030001011603030028000000000000000000ee93e0d2f9288cf213a525c87e0f325b38b63073c428064d92ee6ddbd6e840" } }, { "event_id": "evt-1b071b6ef6cd0991afd51d42", "kind": "unclassified_tcp", "frame_number": 69386, "timestamp_epoch": "1634917124.258291000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b153700000017030300280000000000000001de7876ff568056688fdc8e55f9926491cb72e6053dbe22b1c0e1a0b54e5b37ee" } }, { "event_id": "evt-2b0dc57ec6bddeaece0cb355", "kind": "unclassified_tcp", "frame_number": 69391, "timestamp_epoch": "1634917124.305346000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eae79d18739c33e25c2474cf", "kind": "unclassified_tcp", "frame_number": 69394, "timestamp_epoch": "1634917124.638692000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1533000000170303002400000000000000024ab841a585dfb5150d55f93945d21035aa79384061a843db9482505c" } }, { "event_id": "evt-2a51c500f10e544b85b408a4", "kind": "unclassified_tcp", "frame_number": 69399, "timestamp_epoch": "1634917124.689025000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1539000000170303002a0000000000000002c149a5b0f8da6cf26e0cb033833b4a485a9c2bd0ad3a823d2cc64c9d191d36aa1159" } }, { "event_id": "evt-b8cb342c4233cdd434aed286", "kind": "unclassified_tcp", "frame_number": 69405, "timestamp_epoch": "1634917124.850532000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50298, "dst_port": 1187, "tcp_stream": 1442, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a5d96b254aff69be78a5e94c", "kind": "unclassified_tcp", "frame_number": 69408, "timestamp_epoch": "1634917124.995473000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15410000001703030032000000000000000393699802dc86931978a1e63b0275e19ffcea92f7910adcedb031c67f935633b91fe39bc43c2c64a35d91" } }, { "event_id": "evt-f0023c1612623e4c03c709af", "kind": "unclassified_tcp", "frame_number": 69412, "timestamp_epoch": "1634917125.040143000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1539000000170303002a000000000000000327a7b2c8a4be059e73f7374085680a439c96045fbdd5af40d4c8f2f403e6da113777" } }, { "event_id": "evt-b8fedcfb22386bb2fb1a5b1b", "kind": "unclassified_tcp", "frame_number": 69415, "timestamp_epoch": "1634917125.365355000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b153500000017030300260000000000000004156436fbe589d6c080e73a43eb57318204e0a06d3398c0c2e0d8df9b9415" } }, { "event_id": "evt-ed36d30beffcf7b562cb938c", "kind": "unclassified_tcp", "frame_number": 69424, "timestamp_epoch": "1634917129.313705000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50299, "dst_port": 1187, "tcp_stream": 1443, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0da393cf12493f931a4025fd", "kind": "unclassified_tcp", "frame_number": 69434, "timestamp_epoch": "1634917133.816788000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50300, "dst_port": 1187, "tcp_stream": 1444, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a665052d33abd9418ca14261", "kind": "unclassified_tcp", "frame_number": 69439, "timestamp_epoch": "1634917135.610032000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15a000000017030300910000000000000004cec50c32e96bf119a8c3855d8160b17119a76b93a3dd5e06038b5e886971f992f7853a8cc3b6e04c4e29b0f1f3a779c7adc1a4bbd7205e393e123bcbf71ab671cd0dc758f9dc71d83e7c02250281014c8bc49b9dddf9e8a64e0c3e35ae66a445d84e4c5596118cf182d64c37ab3f66211f73b2898687e3244e1364bc2968b1a1d0e5557f1435774302" } }, { "event_id": "evt-d0f782e03f7e26e9100b33b7", "kind": "unclassified_tcp", "frame_number": 69442, "timestamp_epoch": "1634917135.997054000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b152a000000170303001b0000000000000005bf039d2273183e1250a2126cc198b13c2f98e0" } }, { "event_id": "evt-6967fea03ff0354901c3dd37", "kind": "unclassified_tcp", "frame_number": 69445, "timestamp_epoch": "1634917136.034528000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-81ed208eda973a4d22f6d71b", "kind": "unclassified_tcp", "frame_number": 69448, "timestamp_epoch": "1634917136.633297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300288c0c000000197b" } }, { "event_id": "evt-33aae37d32fc8765871595b7", "kind": "unclassified_tcp", "frame_number": 69450, "timestamp_epoch": "1634917136.820823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300288c0e00000005020002" } }, { "event_id": "evt-1b562a8b6020c97f7b0af7e2", "kind": "unclassified_tcp", "frame_number": 69451, "timestamp_epoch": "1634917136.821380000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300288c0c0000000502" } }, { "event_id": "evt-2ffb5770658a86749848da41", "kind": "unclassified_tcp", "frame_number": 69453, "timestamp_epoch": "1634917137.072801000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300288c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-90c704b773afc211f63996d9", "kind": "unclassified_tcp", "frame_number": 69454, "timestamp_epoch": "1634917137.073365000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300288c0c0000000100" } }, { "event_id": "evt-efb7b83966abd783fe4fa173", "kind": "unclassified_tcp", "frame_number": 69456, "timestamp_epoch": "1634917137.356624000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300288c2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-f5b069a062290ee75d7510d1", "kind": "unclassified_tcp", "frame_number": 69465, "timestamp_epoch": "1634917138.216239000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50301, "dst_port": 1187, "tcp_stream": 1445, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e7afecc84b4fb7f9207082ea", "kind": "unclassified_tcp", "frame_number": 69467, "timestamp_epoch": "1634917138.269907000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50301, "dst_port": 1187, "tcp_stream": 1445, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bb7a3410b057b940e559480e", "kind": "unclassified_tcp", "frame_number": 69479, "timestamp_epoch": "1634917142.711466000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50302, "dst_port": 1187, "tcp_stream": 1446, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7bea6338219f0ca499ac0f8b", "kind": "unclassified_tcp", "frame_number": 69484, "timestamp_epoch": "1634917145.723492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300288c1400000005040001000000000000" } }, { "event_id": "evt-c3915c4529d9f43254440e38", "kind": "unclassified_tcp", "frame_number": 69486, "timestamp_epoch": "1634917145.723798000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15750000001703030066000000000000000546341b7dc38ea7484deeb96a8f7e02ccdf5e795c9989efd5dc031bfe877dce4428aca217225a99e7cbdc02751e8fcc2703db152cd4b3c06153a236db41ac8a54832566cd00585798750719769ebef835efd62043748b31221a9050681eed" } }, { "event_id": "evt-a5a6008afce83c50fceed290", "kind": "unclassified_tcp", "frame_number": 69488, "timestamp_epoch": "1634917145.974360000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300288c0a000000" } }, { "event_id": "evt-08fc456cb14bc6728433b611", "kind": "unclassified_tcp", "frame_number": 69490, "timestamp_epoch": "1634917146.342494000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b152d000000170303001e0000000000000006c2294d466fa072dffcacfe0db64c9a28965a0e5b8096" } }, { "event_id": "evt-d57250b98b351062f81a6165", "kind": "unclassified_tcp", "frame_number": 69496, "timestamp_epoch": "1634917146.509308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b15570000001703030048000000000000000692bea73ef092c3b8a5f1ea98e2e84d5fd258448a5a07bd5843a46f24cc4dc0217e91a2167cc9d00072c9fa389ae705d52c35a3646044bf82228467fd249eb7db" } }, { "event_id": "evt-f86bd5e757cdc9b8f5a11e7d", "kind": "unclassified_tcp", "frame_number": 69500, "timestamp_epoch": "1634917146.509925000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702003b150a000000" } }, { "event_id": "evt-227dcbe021bf1e989807c2b4", "kind": "unclassified_tcp", "frame_number": 69502, "timestamp_epoch": "1634917146.794524000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003b1529000000150303001a00000000000000073057c3c224a50b906a183955c18486159b6d" } }, { "event_id": "evt-8a0732a57fec7f971e44a704", "kind": "unclassified_tcp", "frame_number": 69505, "timestamp_epoch": "1634917146.968954000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702003b150a000000" } }, { "event_id": "evt-6a35676f4ab83c14c88f0b52", "kind": "unclassified_tcp", "frame_number": 69509, "timestamp_epoch": "1634917147.068599000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50303, "dst_port": 1187, "tcp_stream": 1447, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-96707bd06ec4e5edc662e9e4", "kind": "unclassified_tcp", "frame_number": 69512, "timestamp_epoch": "1634917149.355504000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200f6f50c000000197b" } }, { "event_id": "evt-2bf392541b748c242e394a8d", "kind": "unclassified_tcp", "frame_number": 69514, "timestamp_epoch": "1634917149.540057000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f50e00000005020002" } }, { "event_id": "evt-2647b8b406d4e1d390ef495b", "kind": "unclassified_tcp", "frame_number": 69515, "timestamp_epoch": "1634917149.540600000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200f6f50c0000000502" } }, { "event_id": "evt-20de40c2d53df94ffdce25f1", "kind": "unclassified_tcp", "frame_number": 69517, "timestamp_epoch": "1634917149.842121000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-da30a57f370d2dcec9697d20", "kind": "unclassified_tcp", "frame_number": 69518, "timestamp_epoch": "1634917149.842651000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200f6f50c0000000100" } }, { "event_id": "evt-c3cc5c753412be766a7a2a47", "kind": "unclassified_tcp", "frame_number": 69520, "timestamp_epoch": "1634917150.023364000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030079f50c000000197b0407030079f50e00000005020002" } }, { "event_id": "evt-84ab5c92901a6f40792ba43b", "kind": "unclassified_tcp", "frame_number": 69521, "timestamp_epoch": "1634917150.024141000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030079f50c0000000502" } }, { "event_id": "evt-a53afdb5e84a98602706cc24", "kind": "unclassified_tcp", "frame_number": 69523, "timestamp_epoch": "1634917150.226566000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f51f000000050100030e6d61696c2e63736e6572742e66720019" } }, { "event_id": "evt-1e7d87011deddf6034f8387d", "kind": "unclassified_tcp", "frame_number": 69527, "timestamp_epoch": "1634917150.407863000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030079f520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ae1c24906099b3d95a3eee9f", "kind": "unclassified_tcp", "frame_number": 69533, "timestamp_epoch": "1634917150.664496000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030079f50c0000000100" } }, { "event_id": "evt-4a733aa3792d9b4b87f9cba2", "kind": "unclassified_tcp", "frame_number": 69537, "timestamp_epoch": "1634917150.820855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f514000000050000010a0a169cc3ce" } }, { "event_id": "evt-33f5faf4cd88885a6b096242", "kind": "unclassified_tcp", "frame_number": 69539, "timestamp_epoch": "1634917151.043782000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030079f52800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-1a2ede1c3a3bc4f5d6c75d6e", "kind": "unclassified_tcp", "frame_number": 69543, "timestamp_epoch": "1634917151.119542000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e65f00000017030300509d9eb4bce607a6025ec667f0f2cd8cbf579c402b950c704fa4fc52c23e669fc49179be23dec0b82b05e6b145ff8deb8fed924f993fcf14ad712c509b7a004bb855f46cdffe9bbd4b2a7778a92af08441" } }, { "event_id": "evt-4e9fb072331a03ab1eb98ba5", "kind": "unclassified_tcp", "frame_number": 69547, "timestamp_epoch": "1634917151.212637000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f535000000323230204741524d2d31303547303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-37dc4044349f62657bb3e9f9", "kind": "unclassified_tcp", "frame_number": 69553, "timestamp_epoch": "1634917151.396603000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3937cdc401bb23228c58f862", "kind": "unclassified_tcp", "frame_number": 69555, "timestamp_epoch": "1634917151.549076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e63f00000017030300307efe5c44b550ec57da1fc03701bbe88674bcceea194ef8c61b9335d1c50477a3b7b05c5852c8b283245ff0d309d069aa" } }, { "event_id": "evt-bfe734634348c3ae5565e81d", "kind": "unclassified_tcp", "frame_number": 69562, "timestamp_epoch": "1634917151.727945000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100d3e66f0000001703030060f3f4301ffcafcfe62066d89d19945321c8c1f4cd02d3e21667ef8bd840ba04e49d21f7323725d7019443ebfa135d9755837a5d4585dc35fcafc7dc0a6b215304687f7ab45a890181508c031ac39ef5c76c6695de1dd6ed8fab933355ef291ed7" } }, { "event_id": "evt-81af691b23fab4b807f9372b", "kind": "unclassified_tcp", "frame_number": 69566, "timestamp_epoch": "1634917151.728287000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100d3e60a000000" } }, { "event_id": "evt-72448f82f10f16cf4bb2cd9d", "kind": "unclassified_tcp", "frame_number": 69568, "timestamp_epoch": "1634917151.760016000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f51a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-a1f5a347a17dd5cbac31cce9", "kind": "unclassified_tcp", "frame_number": 69573, "timestamp_epoch": "1634917151.918024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f5990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-31b3df4f9b09ac1114bfcda0", "kind": "unclassified_tcp", "frame_number": 69577, "timestamp_epoch": "1634917152.355996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f5140000005354415254544c530d0a" } }, { "event_id": "evt-1e0d677114f9ba21531cacf2", "kind": "unclassified_tcp", "frame_number": 69580, "timestamp_epoch": "1634917152.380226000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6620fba47234d482fad8d76c", "kind": "unclassified_tcp", "frame_number": 69584, "timestamp_epoch": "1634917152.533397000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f52800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-264c9c8b9990a52241fe8acb", "kind": "unclassified_tcp", "frame_number": 69587, "timestamp_epoch": "1634917152.829018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-805de87f9f9977e501a834a1", "kind": "unclassified_tcp", "frame_number": 69595, "timestamp_epoch": "1634917153.022377000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-742dd5d93e3ba759108d7f06", "kind": "unclassified_tcp", "frame_number": 69596, "timestamp_epoch": "1634917153.022393000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fdba6eacbe560c1d1e72ae81", "kind": "unclassified_tcp", "frame_number": 69597, "timestamp_epoch": "1634917153.022402000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ddf365b8420c962ab2f420eb", "kind": "unclassified_tcp", "frame_number": 69600, "timestamp_epoch": "1634917153.022683000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f562000000c158846214f7060a329ce45636f424a4f1b7c429ff81b5cbfd0afb9001cc489727a639f38091dbd70e89a73cbb4f19bb040102007277e0fcd46aee9598e476153708ff8edb0c03b45045218ca2208632d93dceca256b48fc" } }, { "event_id": "evt-4cba89ca3a825d1561a72855", "kind": "unclassified_tcp", "frame_number": 69605, "timestamp_epoch": "1634917153.032107000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e2bdba14f2421a22a1856d44", "kind": "unclassified_tcp", "frame_number": 69615, "timestamp_epoch": "1634917153.359303000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f5e4000000160303008a10000086850400ec59fbe6d94b18dad877f4f4cc48fbab24aa5db6c2c95fa9e98ccb02c62faa006b3ac7d45a38206acc3bdbd89e3981df1a3122ffa517f332504a914f67c0092178010db828df81b4c9ade192e6e6f20d42b30e3b9d2caf1c6c5c8d78c2ff9e46407e37720c6ba5b3335f261fb2d7d15b5a3a7fe1bc35b5df56125359e4f050b96e5cfd14030300010116030300400107462710a6977de1eefd7cb8255bb9dcd2bcf052b2d82b739410902c99bf4b8213e84a94af81b0712cab9212634362ee724f8b2fba0dde458c63e5b5313b1f" } }, { "event_id": "evt-00ad9d60560a54950ba5c399", "kind": "unclassified_tcp", "frame_number": 69620, "timestamp_epoch": "1634917153.514306000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f5550000001403030001011603030040c1395f4f742620fa45b4f799e4df56ef508a30f8772aade3cac492c05487f80fdf0240e0c0ae38a7e0a3c1b61c235e257ff53954dcb19f5564c65f04b604a0b9" } }, { "event_id": "evt-a3ff0d9cb32eeb66b9287bc8", "kind": "unclassified_tcp", "frame_number": 69623, "timestamp_epoch": "1634917153.758922000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f54f00000017030300404badb084c7b6d205996a1116688d76ab6e98134fb3257c5801c454fe6f46194265cf5360669c53ef5e8032446527db6a84bcf78ccf2edfbc17d2c1ecd03ba23f" } }, { "event_id": "evt-10f0d98b7af27e8d4bacb12b", "kind": "unclassified_tcp", "frame_number": 69630, "timestamp_epoch": "1634917153.902737000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-da5643de64620a702c039395", "kind": "unclassified_tcp", "frame_number": 69635, "timestamp_epoch": "1634917155.270336000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f54f00000017030300403f9476426009786e4bb15f3a21562a6b58ada0465d08e46109635e3b800195f8fd2dcba913e2b1d37e08ba0536736219adcf50750d6a40b88a817531a0fe6873" } }, { "event_id": "evt-f7ff77bbd734c5a2f24cbcf7", "kind": "unclassified_tcp", "frame_number": 69640, "timestamp_epoch": "1634917155.433798000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f54f000000170303004099c3c3c84a09f962507d27db3150a82b2f77930b6490840a9325130260639e5e01e470036d8d5e2ef11c6a41041380e2101f6aa1441a6fac3130ae8136ebf14e" } }, { "event_id": "evt-ad040b963fb128d89c856dff", "kind": "unclassified_tcp", "frame_number": 69643, "timestamp_epoch": "1634917155.718037000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f55f00000017030300504090556f41e86c7056b82c5b71b84c2dadcc369bc08cc9bc7d92f849c6b13ad31d7429a13ecccb447f3ba1b394169fc97a17484f48407b22e6e9814286dbace77ed9f49adcc9558e71248d722851371c" } }, { "event_id": "evt-ba8e863656a8b412caba1ef8", "kind": "unclassified_tcp", "frame_number": 69648, "timestamp_epoch": "1634917155.860823000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f54f0000001703030040200b2b935836297ee04c33f9d89fc5b8b05843afda7d8e45ff06da518ae4c4e3d7b66669035699dea864b590e30db8bbda811bcc9a2a7560e8dfc94e46633dbc" } }, { "event_id": "evt-9e9ddf8d0da9b5802fd0b018", "kind": "unclassified_tcp", "frame_number": 69651, "timestamp_epoch": "1634917156.231127000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f54f000000170303004019818e0d724b5eb6d5803d11a66daca486ad7d388bd770007a552166b15d803fa36af7391ffd849849490b664db6a37f5c74119c677a7996338972fcbd3dd798" } }, { "event_id": "evt-9ceef1e6142bdd2868cbc4ee", "kind": "unclassified_tcp", "frame_number": 69657, "timestamp_epoch": "1634917157.411214000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-04482df1a1dc94c8b5885be9", "kind": "unclassified_tcp", "frame_number": 69672, "timestamp_epoch": "1634917158.402526000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f55f0000001703030050031e27d1e8491471b4888a72bb356c508a8aee6c901bdb65ec114951c79314622cf415de0413b71e55271cb16baf6f5bf9948182c34b49544bb11662b411dc12c9924d960355c5e687489b0f7e93081d" } }, { "event_id": "evt-d01f7fe37c2c9cf3c150760b", "kind": "unclassified_tcp", "frame_number": 69675, "timestamp_epoch": "1634917158.715311000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f53f000000170303003017cf904a41d71b569b7a3246f47d3a883623254a83546ff2bedc96054ebabf607df4eb47da55fe6e1225cecc7be07b48" } }, { "event_id": "evt-aebd340a2fd99c81923bfa92", "kind": "unclassified_tcp", "frame_number": 69679, "timestamp_epoch": "1634917160.083251000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030079f50a000000" } }, { "event_id": "evt-284b02be70f769723256384d", "kind": "unclassified_tcp", "frame_number": 69683, "timestamp_epoch": "1634917162.457823000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-97e9317bce9c164736fe2670", "kind": "unclassified_tcp", "frame_number": 69702, "timestamp_epoch": "1634917167.489331000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-90b7237f93f87fffefeabd24", "kind": "unclassified_tcp", "frame_number": 69704, "timestamp_epoch": "1634917172.519748000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0238971243c9dc7fe3c29303", "kind": "unclassified_tcp", "frame_number": 69708, "timestamp_epoch": "1634917177.551911000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a49676cfb5e361a07c5a9532", "kind": "unclassified_tcp", "frame_number": 69710, "timestamp_epoch": "1634917182.612527000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9567d76ca44ab1e83d26a500", "kind": "unclassified_tcp", "frame_number": 69712, "timestamp_epoch": "1634917187.631219000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-31e27b1920a84d3370f0ba69", "kind": "unclassified_tcp", "frame_number": 69714, "timestamp_epoch": "1634917189.125113000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701009c890c000000197b" } }, { "event_id": "evt-813ebaef07144f9e4bb9ac1c", "kind": "unclassified_tcp", "frame_number": 69716, "timestamp_epoch": "1634917189.308642000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c890e00000005020002" } }, { "event_id": "evt-9207e3edc6c3b5c908b9a069", "kind": "unclassified_tcp", "frame_number": 69717, "timestamp_epoch": "1634917189.309186000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009c890c0000000502" } }, { "event_id": "evt-d69c882cfb79def94260a0d9", "kind": "unclassified_tcp", "frame_number": 69719, "timestamp_epoch": "1634917189.585403000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c8920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a9a3e3f69a92ec3badd1b954", "kind": "unclassified_tcp", "frame_number": 69720, "timestamp_epoch": "1634917189.585961000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009c890c0000000100" } }, { "event_id": "evt-0c11d0c340a19ccb8b2e9909", "kind": "unclassified_tcp", "frame_number": 69722, "timestamp_epoch": "1634917189.937972000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c89290000000501000318736d74702e756c7069616e6f636172726173636f2e636f6d0019" } }, { "event_id": "evt-af94d5e26622f6a5d82972a7", "kind": "unclassified_tcp", "frame_number": 69730, "timestamp_epoch": "1634917190.372997000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c8914000000050000010a0a169cc3d1" } }, { "event_id": "evt-627361e579f976fd6c1daa06", "kind": "unclassified_tcp", "frame_number": 69734, "timestamp_epoch": "1634917190.820475000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c89380000003232302072656c61796f757430382d6473702e646f6d696e696f6162736f6c75746f2e6e65742045534d54500d0a" } }, { "event_id": "evt-57108040b17f22db56a7b082", "kind": "unclassified_tcp", "frame_number": 69737, "timestamp_epoch": "1634917191.315647000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c891a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e37647337598e0a752d5000f", "kind": "unclassified_tcp", "frame_number": 69742, "timestamp_epoch": "1634917191.513493000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c89ca0000003235302d72656c61796f757430382d6473702e646f6d696e696f6162736f6c75746f2e6e65740d0a3235302d504950454c494e494e470d0a3235302d53495a45203135323430303030300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-f5bf55c260cbf1c971515363", "kind": "unclassified_tcp", "frame_number": 69745, "timestamp_epoch": "1634917191.780856000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c89140000005354415254544c530d0a" } }, { "event_id": "evt-936a2b6eeb9023488fc343e0", "kind": "unclassified_tcp", "frame_number": 69751, "timestamp_epoch": "1634917191.922394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f55f0000001703030050b7bbb6d5de2b51d1279b54229672032013196db3c7405b0c7a3a9bd0a79ddb861e700fd8862eb59041f885826bda9cfd5ed3918f9a25ffe5e452e5559cdc4ab2632069f69b1123abb83c6b4be8ef6bc5" } }, { "event_id": "evt-d0aa940841047f048f76915c", "kind": "unclassified_tcp", "frame_number": 69755, "timestamp_epoch": "1634917191.984439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c892800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-de0545b3b3506025dde8a172", "kind": "unclassified_tcp", "frame_number": 69758, "timestamp_epoch": "1634917192.227814000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f53f0000001703030030f43139454d862490ad619f4be4cd22f791e0f6df827f3c90a51139c554062db1e42df0dd4f31313c475356ef0a0c02bb" } }, { "event_id": "evt-442ff2fde14ac09631f9819d", "kind": "unclassified_tcp", "frame_number": 69764, "timestamp_epoch": "1634917192.381140000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200f6f56f000000170303006003cc3add3230ef464a34121b03bb3df86bf705f038cc587a52878b5376c55e1895ea26da01d531fdbf177c023d55933c08d50f3b5e4ce7de5fadee38d4a5e23777990663e1e76dbeb85c653579c33284c438f967384c4e7f908c189e49d845d6" } }, { "event_id": "evt-aa58d390820c083452a45ad0", "kind": "unclassified_tcp", "frame_number": 69768, "timestamp_epoch": "1634917192.381739000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200f6f50a000000" } }, { "event_id": "evt-adcda352de41d7b278908615", "kind": "unclassified_tcp", "frame_number": 69770, "timestamp_epoch": "1634917192.468859000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4be8e0b862c6d7b0da581d1a", "kind": "unclassified_tcp", "frame_number": 69778, "timestamp_epoch": "1634917192.649280000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f76351e7c108d35ffab987c9", "kind": "unclassified_tcp", "frame_number": 69779, "timestamp_epoch": "1634917192.649301000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c2f9944280c4c6e0b85f22d6", "kind": "unclassified_tcp", "frame_number": 69780, "timestamp_epoch": "1634917192.649312000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d71037a9c3bfe84a14a5ef91", "kind": "unclassified_tcp", "frame_number": 69784, "timestamp_epoch": "1634917192.661925000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f3db0f98f5a246a5be16c43d", "kind": "unclassified_tcp", "frame_number": 69787, "timestamp_epoch": "1634917194.387918000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c898800000016030300461000004241048780f7ea49ddeeeb79e99c9ff0fa8673aa0ebb633a8577af44a704bc4c362cf691c7954ef850c5bd4822aa2a0463501989da17475f5f29b18e14641e1e8315ef140303000101160303002800000000000000006494b5cde230d7e55447b471341cb3a94490d1ac22315800ffcaa6b4487c3628" } }, { "event_id": "evt-a2d98b37d5f9eea80063d05d", "kind": "unclassified_tcp", "frame_number": 69792, "timestamp_epoch": "1634917194.558381000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c893d00000014030300010116030300288b23d03c3fff8238336560b1e9effaa6da640321856383e97264bf7a38ebf47d294652772f664158" } }, { "event_id": "evt-2ac0d9db9bfa9ebb64493762", "kind": "unclassified_tcp", "frame_number": 69797, "timestamp_epoch": "1634917194.854847000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c893700000017030300280000000000000001fdb14af7e5c4535f19cf953ed16fa97f4733109addcbf7e2bb165e4649b08390" } }, { "event_id": "evt-e9a00cd65215b8bb33e6b4b9", "kind": "unclassified_tcp", "frame_number": 69803, "timestamp_epoch": "1634917195.019211000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c89d900000017030300ca8b23d03c3fff823979877480d3a1b2e65188228cbcf2d1377e48be8ca1a5fdabb61347bae144f03ffc343df62c7ed7c2e0a3a0ecb11e037783eb6acc9e2f877ec14902483b930fcb9a4acbb85b50102814b7fa93a26ec2cfaa4b8df80bd8f16fc2ea9588ae047a0218e1a04978a54b679ac154660233da1effa53498bd14f8a864625ed7056c7390da97fdb078a591b619de55dded2a0c2ddba664c0fe1e908e70b797926294d285c2d59c1ab6fae6b3a185d8209b28f97e865308bc04f9a7928b14a4adfe328e6c59c5" } }, { "event_id": "evt-13d9eb5f3cd6fbaa3bfe278a", "kind": "unclassified_tcp", "frame_number": 69808, "timestamp_epoch": "1634917195.706939000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a801987ad2249cbfebd261ec", "kind": "unclassified_tcp", "frame_number": 69810, "timestamp_epoch": "1634917195.822154000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c893300000017030300240000000000000002d34eb28ae2804300fef1298f207c245a8b2130a9ef086a94449193df" } }, { "event_id": "evt-a399047f912a23c2eaeca09e", "kind": "unclassified_tcp", "frame_number": 69815, "timestamp_epoch": "1634917196.005521000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c8939000000170303002a8b23d03c3fff823a782e315c475e21af5d16d6e2744d0374f014f8bed6ff4ca047d12250465db18aaaf7" } }, { "event_id": "evt-23a5dbff2daf4eca11f5bd4b", "kind": "unclassified_tcp", "frame_number": 69818, "timestamp_epoch": "1634917196.333484000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c8949000000170303003a0000000000000003cf1a68b1ae96b0c9104bd9fc69edd6fc0a63591f86ab379051eaaf1a1e51d4a4173b8d91175df95305bc52f4a75dc6fbf444" } }, { "event_id": "evt-2c9184c2ec84c992f92b7d83", "kind": "unclassified_tcp", "frame_number": 69823, "timestamp_epoch": "1634917196.510653000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c8939000000170303002a8b23d03c3fff823b7ae46d3dadf00a95b17354ab4d3b17c43444c276984207c03ae620683a49ec790a43" } }, { "event_id": "evt-1dcb061411510a7ee5ece0c0", "kind": "unclassified_tcp", "frame_number": 69826, "timestamp_epoch": "1634917196.882863000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c893500000017030300260000000000000004c22471923f69234ad988d9af3d771901dcf5db19e393c67aadca917708b8" } }, { "event_id": "evt-b3a2194ba266d38f7991e871", "kind": "unclassified_tcp", "frame_number": 69831, "timestamp_epoch": "1634917198.586866000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c895d000000170303004e8b23d03c3fff823ca7d9b149ca0fd8dcf0dbd3c816df18a74841956d4e740aa1c3696f06d2d29b111639fc3326be8974394305345accd8a714d11977f74c12a7c3da06a760119979385d44ab4f99" } }, { "event_id": "evt-09bb3d4fcca74e782e191b3f", "kind": "unclassified_tcp", "frame_number": 69834, "timestamp_epoch": "1634917198.662013000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d80e802ecf2c8575dec83603", "kind": "unclassified_tcp", "frame_number": 69836, "timestamp_epoch": "1634917198.963077000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c892a000000170303001b00000000000000055effeabacf214354dd33e736a411d4041844c7" } }, { "event_id": "evt-aacf35fcf2ac4bc87bb181a7", "kind": "unclassified_tcp", "frame_number": 69841, "timestamp_epoch": "1634917199.128721000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c895000000017030300418b23d03c3fff823d57155dd508885094903f2e9a500c1cba3909bad8c583dea101a0760fa7e1f857c18127405ff828ab1454b43dcd10e89942f475fc33056fd5df" } }, { "event_id": "evt-f7a42a9dba0f92b0dca44cdf", "kind": "unclassified_tcp", "frame_number": 69844, "timestamp_epoch": "1634917199.474827000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c892d000000170303001e00000000000000065520938bdf97b4f542c0844d6f8347ace7f4b77ea6e2" } }, { "event_id": "evt-051267d9b23a285d09df5dfd", "kind": "unclassified_tcp", "frame_number": 69850, "timestamp_epoch": "1634917199.636461000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009c895500000017030300278b23d03c3fff823e75b552c4e763871110d6d819dd0e85f7eb90c1303c7f13f3d5779f295b4b7a150303001a8b23d03c3fff823f747d5e7e06d8fde1eb18878f08cc1698fa0a" } }, { "event_id": "evt-09eecfe8ca9085e85beb221e", "kind": "unclassified_tcp", "frame_number": 69854, "timestamp_epoch": "1634917199.636900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009c890a000000" } }, { "event_id": "evt-819cf3b6901f15e61b2280f1", "kind": "unclassified_tcp", "frame_number": 69856, "timestamp_epoch": "1634917199.958073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200e5a80c000000197b" } }, { "event_id": "evt-6ffdfafd3675585cfde4311d", "kind": "unclassified_tcp", "frame_number": 69858, "timestamp_epoch": "1634917200.132665000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200e5a80e00000005020002040701009c8929000000150303001a0000000000000007a0b774d6a201a85367fb8e88919a70faf77a050701009c890a000000" } }, { "event_id": "evt-ea22b74764cf9bd4e500ac4c", "kind": "unclassified_tcp", "frame_number": 69859, "timestamp_epoch": "1634917200.132900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200e5a80c0000000502" } }, { "event_id": "evt-57cbf8776540b503063c36ce", "kind": "unclassified_tcp", "frame_number": 69861, "timestamp_epoch": "1634917200.343392000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010017070c000000197b" } }, { "event_id": "evt-73e925f566c6ed9e6c4a2a01", "kind": "unclassified_tcp", "frame_number": 69863, "timestamp_epoch": "1634917200.522023000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017070e0000000502000204070200e5a820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-55ccab30d8ab760a3c013282", "kind": "unclassified_tcp", "frame_number": 69864, "timestamp_epoch": "1634917200.522591000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010017070c000000050203070200e5a80c0000000100" } }, { "event_id": "evt-ac22c63cba889c0ed1d1b73a", "kind": "unclassified_tcp", "frame_number": 69866, "timestamp_epoch": "1634917200.839171000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100170720000000010432356d630f356f504d44384828685558534a2a5704070200e5a82700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-6e66ca3d883b9623e955fabf", "kind": "unclassified_tcp", "frame_number": 69873, "timestamp_epoch": "1634917203.692663000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2a66b62c11e998599bf33ff2", "kind": "unclassified_tcp", "frame_number": 69877, "timestamp_epoch": "1634917208.708628000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a855d3dfd7ff2cf32fd0ff21", "kind": "unclassified_tcp", "frame_number": 69880, "timestamp_epoch": "1634917209.209410000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010017070c000000010004070200e5a81400000005040001000000000000" } }, { "event_id": "evt-0aab61359de49119018460df", "kind": "unclassified_tcp", "frame_number": 69882, "timestamp_epoch": "1634917209.457457000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200e5a80a000000" } }, { "event_id": "evt-a59397dfeafe6ddb26a1045f", "kind": "unclassified_tcp", "frame_number": 69884, "timestamp_epoch": "1634917209.630371000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017071e000000050100030d736d74702e6a756e6f2e636f6d0019" } }, { "event_id": "evt-b964a28edb817a2b62533eed", "kind": "unclassified_tcp", "frame_number": 69891, "timestamp_epoch": "1634917209.744640000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100170714000000050000010a0a169cc3d2" } }, { "event_id": "evt-f5d7dfbf714ba7af0b9febb4", "kind": "unclassified_tcp", "frame_number": 69894, "timestamp_epoch": "1634917209.847042000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017072c00000032323020736d74706f757430342e7667732e756e74642e636f6d2045534d54500d0a" } }, { "event_id": "evt-a318b69e74ee97333a065a63", "kind": "unclassified_tcp", "frame_number": 69897, "timestamp_epoch": "1634917210.195577000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017071a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ef95ba7c286630b354a09b49", "kind": "unclassified_tcp", "frame_number": 69902, "timestamp_epoch": "1634917210.259094000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017079e0000003235302d736d74706f757430342e7667732e756e74642e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e657420706c656173656420746f206d65657420796f750d0a3235302d53495a450d0a3235302d384249544d494d450d0a3235302d41555448204c4f47494e20504c41494e204352414d2d4d44350d0a3235302048454c500d0a" } }, { "event_id": "evt-faa42e9934971a67c9857874", "kind": "unclassified_tcp", "frame_number": 69905, "timestamp_epoch": "1634917211.079101000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017071600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-920c66783e5cadc48b1ad27e", "kind": "unclassified_tcp", "frame_number": 69910, "timestamp_epoch": "1634917211.152917000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017071c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-0bda9783b68a9d551578c46f", "kind": "unclassified_tcp", "frame_number": 69913, "timestamp_epoch": "1634917211.515107000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001707280000006447397462334a695a5852305a554271645735764c6d4e7662513d3d0d0a" } }, { "event_id": "evt-46d57b7cb6727672fd656486", "kind": "unclassified_tcp", "frame_number": 69918, "timestamp_epoch": "1634917211.580851000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017071c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-3a35642f2067db71eec7b565", "kind": "unclassified_tcp", "frame_number": 69921, "timestamp_epoch": "1634917212.103313000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001707180000005a6e4a316158526a5957746c0d0a" } }, { "event_id": "evt-4f65e3b2c87bb24ad43b3e6e", "kind": "unclassified_tcp", "frame_number": 69926, "timestamp_epoch": "1634917212.188067000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017073800000032333520736d74706f757430342e7667732e756e74642e636f6d2061757468206f6b2c20676f2061686561640d0a" } }, { "event_id": "evt-a8de0aa5c9e85f3dd79b0fd1", "kind": "unclassified_tcp", "frame_number": 69929, "timestamp_epoch": "1634917212.433311000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001707390000004d41494c2046524f4d3a3c746f6d6f726265747465406a756e6f2e636f6d3e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-3e63d35bd62088f18e1d009b", "kind": "unclassified_tcp", "frame_number": 69934, "timestamp_epoch": "1634917212.499789000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017073000000032353020746f6d6f726265747465406a756e6f2e636f6d2e2e2e2053656e646572204f4b0d0a" } }, { "event_id": "evt-26a039f3e46dba5817ce21ad", "kind": "unclassified_tcp", "frame_number": 69937, "timestamp_epoch": "1634917212.862093000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017072b0000005243505420544f3a3c616e6472655f73616e74616e61406d61696c2e72753e0d0a" } }, { "event_id": "evt-1d7868a7200d56f80c350f8f", "kind": "unclassified_tcp", "frame_number": 69942, "timestamp_epoch": "1634917212.929671000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017073500000032353020616e6472655f73616e74616e61406d61696c2e72752e2e2e20526563697069656e74204f4b0d0a" } }, { "event_id": "evt-a85f3d461c7cf784fff582c4", "kind": "unclassified_tcp", "frame_number": 69949, "timestamp_epoch": "1634917213.307422000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100170710000000444154410d0a" } }, { "event_id": "evt-1ce4cda3538ce2d3f064884e", "kind": "unclassified_tcp", "frame_number": 69954, "timestamp_epoch": "1634917213.388800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010017073c00000033353420456e746572206d61696c2c20656e64207769746820222e22206f6e2061206c696e6520627920697473656c660d0a" } }, { "event_id": "evt-2e65b5b877812b25296b37ee", "kind": "unclassified_tcp", "frame_number": 69961, "timestamp_epoch": "1634917213.772540000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-da61ce09b7206e517750f078", "kind": "unclassified_tcp", "frame_number": 69963, "timestamp_epoch": "1634917213.844065000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-826cc61b9317b43c1c3c9360", "kind": "unclassified_tcp", "frame_number": 69969, "timestamp_epoch": "1634917213.929693000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100170789000000353530204d45535341474520424c4f434b45442e204348414e474520594f55522050415353574f524420544f2052452d53454e4420594f5552204d45535341474520414e4420544f204d41494e5441494e204f4e474f494e4720534543555249545920415420485454503a2f2f5745424d41494c2e4a554e4f2e434f4d2f0a" } }, { "event_id": "evt-c9c777f758be93da82fe5e53", "kind": "unclassified_tcp", "frame_number": 69973, "timestamp_epoch": "1634917213.930222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010017070a000000" } }, { "event_id": "evt-d8e913e34d667beac5f811dd", "kind": "unclassified_tcp", "frame_number": 69975, "timestamp_epoch": "1634917214.272298000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010017070a000000" } }, { "event_id": "evt-3f1c32e6e3888bc42f954f18", "kind": "unclassified_tcp", "frame_number": 69977, "timestamp_epoch": "1634917216.506511000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010032460c000000197b" } }, { "event_id": "evt-ed192c02905077eda4470124", "kind": "unclassified_tcp", "frame_number": 69979, "timestamp_epoch": "1634917216.701212000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032460e00000005020002" } }, { "event_id": "evt-59069e4d4493a0eb0f811535", "kind": "unclassified_tcp", "frame_number": 69980, "timestamp_epoch": "1634917216.701780000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010032460c0000000502" } }, { "event_id": "evt-248f0b31343753c11adc282e", "kind": "unclassified_tcp", "frame_number": 69982, "timestamp_epoch": "1634917216.942847000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100324620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-820926290cb711228b91c429", "kind": "unclassified_tcp", "frame_number": 69983, "timestamp_epoch": "1634917216.943275000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010032460c0000000100" } }, { "event_id": "evt-5c2260e7f7bc6e9e0d0a4aca", "kind": "unclassified_tcp", "frame_number": 69985, "timestamp_epoch": "1634917217.428099000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032462a00000005010003196d61696c2e63686f6b736869616e6463686f6b7368692e696e0019" } }, { "event_id": "evt-e8205fd48aefec2249a38ffd", "kind": "unclassified_tcp", "frame_number": 69992, "timestamp_epoch": "1634917217.841044000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100324614000000050000010a0a169cc3d3" } }, { "event_id": "evt-515ea5240d499bdcc9f7568c", "kind": "unclassified_tcp", "frame_number": 69995, "timestamp_epoch": "1634917218.138975000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032465100000032323020636f6d70616e792e6d61696c2045534d5450204d4461656d6f6e20382e312e333b204672692c203232204f637420323032312032313a31303a3037202b303533300d0a" } }, { "event_id": "evt-89f990948b534b89c16258ce", "kind": "unclassified_tcp", "frame_number": 69998, "timestamp_epoch": "1634917218.398301000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032461a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-946fd87a432944949afddb92", "kind": "unclassified_tcp", "frame_number": 70003, "timestamp_epoch": "1634917218.760054000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003246410000003235302d636f6d70616e792e6d61696c2048656c6c6f206c6f63616c686f73742c20706c656173656420746f206d65657420796f750d0a" } }, { "event_id": "evt-ecd7aab8affef51a6073de57", "kind": "unclassified_tcp", "frame_number": 70007, "timestamp_epoch": "1634917219.063500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032465e0000003235302d4554524e0d0a3235302d415554483d4c4f47494e0d0a3235302d41555448204c4f47494e204352414d2d4d44350d0a3235302d384249544d494d450d0a3235302053495a452033303030303030300d0a" } }, { "event_id": "evt-453f3dcac929e0996b367c30", "kind": "unclassified_tcp", "frame_number": 70010, "timestamp_epoch": "1634917219.772832000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5b207dba1a240035df365e24", "kind": "unclassified_tcp", "frame_number": 70012, "timestamp_epoch": "1634917220.398891000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032461600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-2892b9b6e909574a67c9cf15", "kind": "unclassified_tcp", "frame_number": 70016, "timestamp_epoch": "1634917220.583970000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702004d8c0c000000197b040702004d8c0e00000005020002" } }, { "event_id": "evt-c2e6ff2bac72b3245b632e25", "kind": "unclassified_tcp", "frame_number": 70017, "timestamp_epoch": "1634917220.584541000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702004d8c0c0000000502" } }, { "event_id": "evt-e48c7c1eea58f93bad9662de", "kind": "unclassified_tcp", "frame_number": 70020, "timestamp_epoch": "1634917220.695850000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032461c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-c52a881acd68d32eecf8b696", "kind": "unclassified_tcp", "frame_number": 70023, "timestamp_epoch": "1634917220.981460000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-308355c8d66bd15481816b4e", "kind": "unclassified_tcp", "frame_number": 70024, "timestamp_epoch": "1634917220.982012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702004d8c0c0000000100" } }, { "event_id": "evt-757850cda731ea2c37e65697", "kind": "unclassified_tcp", "frame_number": 70026, "timestamp_epoch": "1634917221.171653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032462c0000005a5746415932687661334e6f615746755a474e6f6232747a61476b756157343d0d0a" } }, { "event_id": "evt-1c84230dc670fe70a39d0684", "kind": "unclassified_tcp", "frame_number": 70030, "timestamp_epoch": "1634917221.440057000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-f54e742fc3295bc7e69e04e0", "kind": "unclassified_tcp", "frame_number": 70036, "timestamp_epoch": "1634917221.492818000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032461c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-9fb5b9ff3b02fad74af5ba75", "kind": "unclassified_tcp", "frame_number": 70041, "timestamp_epoch": "1634917221.539099000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c14000000050000010a0a169cc3d4" } }, { "event_id": "evt-e853863cd09102e1bbbc37cb", "kind": "unclassified_tcp", "frame_number": 70044, "timestamp_epoch": "1634917221.590823000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c7900000032323020534e36505231364341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34303a3231202b303030300d0a" } }, { "event_id": "evt-c83d82960d878ac38de0d5db", "kind": "unclassified_tcp", "frame_number": 70046, "timestamp_epoch": "1634917221.628453000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030089420c000000197b0407030089420e00000005020002" } }, { "event_id": "evt-c797f7847f5cf7c7de78568f", "kind": "unclassified_tcp", "frame_number": 70047, "timestamp_epoch": "1634917221.629116000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030089420c0000000502" } }, { "event_id": "evt-922f08c1505aef056424cf13", "kind": "unclassified_tcp", "frame_number": 70050, "timestamp_epoch": "1634917221.822954000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032461800000049325668633268414d54513d0d0a" } }, { "event_id": "evt-bdc9224872d958a5864b9edc", "kind": "unclassified_tcp", "frame_number": 70054, "timestamp_epoch": "1634917222.017888000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-db8a7541f429f9b7e4a9c9ce", "kind": "unclassified_tcp", "frame_number": 70058, "timestamp_epoch": "1634917222.077044000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8cd80000003235302d534e36505231364341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-11462cd04a046d52b7d2708a", "kind": "unclassified_tcp", "frame_number": 70062, "timestamp_epoch": "1634917222.150004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003246250000003533352041757468656e7469636174696f6e206661696c65640d0a" } }, { "event_id": "evt-646f3be3d75f081fb1345a01", "kind": "unclassified_tcp", "frame_number": 70065, "timestamp_epoch": "1634917222.282952000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1ee09d361ee59b1987a41dd5", "kind": "unclassified_tcp", "frame_number": 70066, "timestamp_epoch": "1634917222.283515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030089420c0000000100" } }, { "event_id": "evt-7399eacce52d7ebbc064567e", "kind": "unclassified_tcp", "frame_number": 70068, "timestamp_epoch": "1634917222.462185000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c140000005354415254544c530d0a" } }, { "event_id": "evt-9f7f6f0936b76071e5bcafab", "kind": "unclassified_tcp", "frame_number": 70075, "timestamp_epoch": "1634917222.514224000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-df45b57cb6eacbb5b2decd79", "kind": "unclassified_tcp", "frame_number": 70078, "timestamp_epoch": "1634917222.655302000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032460d0000002a0d0a" } }, { "event_id": "evt-bddea1ae13945cc519e371fd", "kind": "unclassified_tcp", "frame_number": 70082, "timestamp_epoch": "1634917222.833655000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-2ebdb33e71c2a80e624ac1e4", "kind": "unclassified_tcp", "frame_number": 70086, "timestamp_epoch": "1634917222.879327000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894214000000050000010a0a169cc3d5" } }, { "event_id": "evt-faad7005aa3098a4b578a232", "kind": "unclassified_tcp", "frame_number": 70089, "timestamp_epoch": "1634917222.932373000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089427900000032323020534e36505231364341303034302e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34303a3232202b303030300d0a" } }, { "event_id": "evt-5d89e9c14073eeffc7dc5749", "kind": "unclassified_tcp", "frame_number": 70092, "timestamp_epoch": "1634917222.950259000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010032462e00000035303020576861743f204920646f6e277420756e6465727374616e6420746861742e0d0a" } }, { "event_id": "evt-14fb945ffc4164dacfe0ee15", "kind": "unclassified_tcp", "frame_number": 70096, "timestamp_epoch": "1634917223.010420000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d340d216811dd6379d3c4471", "kind": "unclassified_tcp", "frame_number": 70105, "timestamp_epoch": "1634917223.066405000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5732b9bac00556adde783eb6", "kind": "unclassified_tcp", "frame_number": 70106, "timestamp_epoch": "1634917223.066425000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-22e4efad96c52e0e4b7b7b31", "kind": "unclassified_tcp", "frame_number": 70107, "timestamp_epoch": "1634917223.066438000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032313030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032313030333330365aa011180f32303231313032373233343830365a300d06092a864886f70d01010b0500038201010038d81d53fb061c4e82a09dde79fc0078f46ac616442bf6bfbf953e6311ad5c454a94775b60189ccef4275ae984954abadf1975242cfc19de3c18f7b8250e24226ce54d4809d4c454ad082c35732f1bc3190c9773efa7c3a5425e34abda2e95c20241753916d8fdb398351a4f7f47a7b119adfb2c49f64754c51e92729f276616eb4edcc11af740aed3b07066a9ece1f3fac5fa38bd2f33e1872c6688fcce5a99a773564c9b554115a4d9f59b840e20542d489895a9a9f46423bc98219222aaf9094c41bca42ab388a21700c4dd6e4630543f30056f8327588e2170d8d545e5aba6f9e23fc5ff8a573b2a12be85693508fc7576695f8235bcb17ef66048060ae40c00016903001861043a9e6d90cbf48bad60955a7baadb3f533d36fa7ddbb58587f2a5c927df7954efb7b9f7873d94ac04edfd4403c55ec755d007b367438d71edc45b610676eda7b777473cd1111e04e16aeabcd3b5fb2942df153f08d92abef43a7d303b7268927c08040100a9dee321598cde0a423f6c2c2270e43584f6fc1693c6205ea9da4375a710d5c8fbfbec93920cb80b115e9c5d1dfda17d2992cd" } }, { "event_id": "evt-e99b71c3096abb7d222b53f8", "kind": "unclassified_tcp", "frame_number": 70110, "timestamp_epoch": "1634917223.066719000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3d0705196c8ddec4410665d3", "kind": "unclassified_tcp", "frame_number": 70113, "timestamp_epoch": "1634917223.257509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100324610000000515549540d0a0407030089421a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-6175f81454583aad5bbb3bac", "kind": "unclassified_tcp", "frame_number": 70120, "timestamp_epoch": "1634917223.313091000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942d80000003235302d534e36505231364341303034302e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-2ebe7c1a1647052d5c6d886e", "kind": "unclassified_tcp", "frame_number": 70123, "timestamp_epoch": "1634917223.478996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8cb400000016030300070b000003000000160303006610000062610437b0c742e2028df757051204ed2444dce17749f067d282ca867441fe769cfa4ef036284e210eea502c6bbe75ea1c6b22728a6647183c16a0490580a3fd67572803ec1ef99274bc15206ee4b5926bf3b72685bfce580f2ad898970b29e7b9429514030300010116030300280000000000000000e7b0c6f7937dd09d30193bce945fc6f2685e9938d1c558d851142fc5bc7eccfd" } }, { "event_id": "evt-d05fbb586959280ffe9acb45", "kind": "unclassified_tcp", "frame_number": 70128, "timestamp_epoch": "1634917223.525156000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c3d00000014030300010116030300280000000000000000c18a2644b5ffc7d18991589cda8cebbe100fc2c214a0f66db0ab4feb38a7af15" } }, { "event_id": "evt-1022ef856bfe540048b7f764", "kind": "unclassified_tcp", "frame_number": 70132, "timestamp_epoch": "1634917223.553673000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003246240000003232312053656520796120696e20637962657273706163650d0a" } }, { "event_id": "evt-07b2a19ed4866c6422f95ec7", "kind": "unclassified_tcp", "frame_number": 70136, "timestamp_epoch": "1634917223.554012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010032460a000000" } }, { "event_id": "evt-9c1ce063fc4e71eeb03320dc", "kind": "unclassified_tcp", "frame_number": 70140, "timestamp_epoch": "1634917223.648232000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942140000005354415254544c530d0a" } }, { "event_id": "evt-381e0ffb161769d2225b6fc3", "kind": "unclassified_tcp", "frame_number": 70145, "timestamp_epoch": "1634917223.701222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089422700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-ca2046e2ca8b4164f9809552", "kind": "unclassified_tcp", "frame_number": 70148, "timestamp_epoch": "1634917223.872036000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c3700000017030300280000000000000001c11275a99a1bc3d9a4dd47a3ed1a46171793327b2cefbc769c45c4f849cf4d0c" } }, { "event_id": "evt-e236431312667cf809bd626a", "kind": "unclassified_tcp", "frame_number": 70153, "timestamp_epoch": "1634917223.918007000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c6c3a0c85983e46a1706a9e5", "kind": "unclassified_tcp", "frame_number": 70156, "timestamp_epoch": "1634917224.080225000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100f64a0c000000197b" } }, { "event_id": "evt-9bdb354c6c273f7149a8e79b", "kind": "unclassified_tcp", "frame_number": 70158, "timestamp_epoch": "1634917224.267427000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-af09e575600807e2195ff613", "kind": "unclassified_tcp", "frame_number": 70159, "timestamp_epoch": "1634917224.267987000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f64a0c0000000502" } }, { "event_id": "evt-d92f73faa13f64247ae675f5", "kind": "unclassified_tcp", "frame_number": 70164, "timestamp_epoch": "1634917224.316879000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1476faf0eac1f46c2263df92", "kind": "unclassified_tcp", "frame_number": 70171, "timestamp_epoch": "1634917224.320572000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-567dd6a62aa4782269fb6dc6", "kind": "unclassified_tcp", "frame_number": 70172, "timestamp_epoch": "1634917224.320584000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-746814472c944c21455438dc", "kind": "unclassified_tcp", "frame_number": 70173, "timestamp_epoch": "1634917224.320592000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "841455d6d44a15c47dd08196174f263601a1f2b055be2a3eaaf1968a8f95fd3ba42936d5d1d9163c61bb051ea35fc19fcc7dafeae763e3cdbe6eb844780d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-e11b43fccda26cab639f3799", "kind": "unclassified_tcp", "frame_number": 70177, "timestamp_epoch": "1634917224.528576000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-17c428c822723dea1b090dc9", "kind": "unclassified_tcp", "frame_number": 70178, "timestamp_epoch": "1634917224.529225000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f64a0c0000000100" } }, { "event_id": "evt-3374a352009a46188518f0e1", "kind": "unclassified_tcp", "frame_number": 70180, "timestamp_epoch": "1634917224.887885000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942b400000016030300070b0000030000001603030066100000626104b991089c7df066be08010bc9273b569c9b0300a5c45cff5d6cbd07cde9e33511fd1912f62d5e59c137c32dfb2d384c3fd0353bffbca93b2d38bd35baa272f24b71df40e98c3493e41745adea1bb8b5ac1c08e0109ff2cc1638b0be760ceeb4d71403030001011603030028000000000000000018d82f60f74b37c881844aa0ba25bd8f94cca2477c853761ebf65d21598d4deb" } }, { "event_id": "evt-8284df309d87e8f5f9333d7d", "kind": "unclassified_tcp", "frame_number": 70185, "timestamp_epoch": "1634917224.958926000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089423d000000140303000101160303002800000000000000009124011cef19819aa0c5f087180c84bbdc10ba293f6f7a7fbaa4ed190fc1bea6" } }, { "event_id": "evt-7ab56662f4e8536d0734d737", "kind": "unclassified_tcp", "frame_number": 70188, "timestamp_epoch": "1634917225.072340000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c3300000017030300240000000000000002866ec96338ee8f73309d5217fc0aeb19cd639246dad01c8b0e62c1a404070100f64a2b000000050100031a736d74702e756e6973616e7261666661656c652e676f762e69740019" } }, { "event_id": "evt-b5ff5ee3119d7f96e9a484de", "kind": "unclassified_tcp", "frame_number": 70198, "timestamp_epoch": "1634917225.301867000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c39000000170303002a00000000000000022292c8e7aed6ebd2366c87132a341b473ac983bc73c94af65cfbd49649cf598d66fe" } }, { "event_id": "evt-d9f9aa9bcb405d09a0e1a7af", "kind": "unclassified_tcp", "frame_number": 70201, "timestamp_epoch": "1634917225.432319000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942370000001703030028000000000000000166a1fc9630d567156810f09284551e1ffe6236194f7a09795929a8b193585b75" } }, { "event_id": "evt-e1a7e5e10e0e243826db3cd4", "kind": "unclassified_tcp", "frame_number": 70206, "timestamp_epoch": "1634917225.448735000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a14000000050000010a0a169cc3d6" } }, { "event_id": "evt-d9fa9efcac87c25d50e78630", "kind": "unclassified_tcp", "frame_number": 70209, "timestamp_epoch": "1634917225.488457000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1a743ec093811bdb7547aecb", "kind": "unclassified_tcp", "frame_number": 70212, "timestamp_epoch": "1634917225.620478000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c49000000170303003a0000000000000003b5a8da2874f98406550f5db7c65eeb190fb2f39b3d559c50b0a5055f5eac829a6d1960f928b3011c2a176babbbce7239f4ab" } }, { "event_id": "evt-e8f49f3eefc864e16d9a04a0", "kind": "unclassified_tcp", "frame_number": 70216, "timestamp_epoch": "1634917225.637882000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a4c00000032323020736d7470646830322e61642e61727562612e6974204172756261204f7574676f696e6720536d7470202045534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-3c0482bb2635a5d515127018", "kind": "unclassified_tcp", "frame_number": 70219, "timestamp_epoch": "1634917225.667034000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c39000000170303002a0000000000000003132a48b4732b086da1206258d63a0b4a488ed208a6f26569799e139561b220cfb0e6" } }, { "event_id": "evt-4764752e4b3f4f049c08134e", "kind": "unclassified_tcp", "frame_number": 70223, "timestamp_epoch": "1634917225.786537000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-129fe65d4904b10749486eaa", "kind": "unclassified_tcp", "frame_number": 70225, "timestamp_epoch": "1634917225.817520000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070400e4320c000000197b" } }, { "event_id": "evt-710bf60d3808aadf283fde6a", "kind": "unclassified_tcp", "frame_number": 70227, "timestamp_epoch": "1634917226.001513000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4320e00000005020002" } }, { "event_id": "evt-acde8fb8caba33984532e7c7", "kind": "unclassified_tcp", "frame_number": 70228, "timestamp_epoch": "1634917226.002067000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400e4320c0000000502" } }, { "event_id": "evt-208b927fc7ac89cff7cbb24a", "kind": "unclassified_tcp", "frame_number": 70230, "timestamp_epoch": "1634917226.162230000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0282bf3d4ac2198c63d5c6e3", "kind": "unclassified_tcp", "frame_number": 70232, "timestamp_epoch": "1634917226.180525000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a1a00000045484c4f206c6f63616c686f73740d0a040702004d8c3500000017030300260000000000000004ef3aa0f71c5ee40199ffbff4f6bbb03dd3bc289ca45821bca03a1ac76e0c0407030089423300000017030300240000000000000002eea66bd2248b03ea047f3077a32ca5918254e8769f08f1d24fd8ffd3" } }, { "event_id": "evt-e3dd5d5626ccb7ce7a4803c6", "kind": "unclassified_tcp", "frame_number": 70240, "timestamp_epoch": "1634917226.235842000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894239000000170303002a0000000000000002a851037cec1d2eaf6fb8a4ccbdd767ffee1f3851a03e325d2077b774752e854f3e42" } }, { "event_id": "evt-3fba1658c18af8f781b5226c", "kind": "unclassified_tcp", "frame_number": 70245, "timestamp_epoch": "1634917226.354219000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64ac10000003235302d736d7470646830322e61642e61727562612e69742068656c6c6f205b3137332e36362e3134362e3131325d2c20706c656173656420746f206d65657420796f750d0a3235302d48454c500d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d53495a45203532343238383030300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302d5354415254544c530d0a323530204f4b0d0a" } }, { "event_id": "evt-10303ed16eb6fafe5eb9501a", "kind": "unclassified_tcp", "frame_number": 70247, "timestamp_epoch": "1634917226.357540000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e0f3c9c7e3c78419ea9353b1", "kind": "unclassified_tcp", "frame_number": 70248, "timestamp_epoch": "1634917226.358076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070400e4320c0000000100" } }, { "event_id": "evt-e63ff24dcaf998842ed08245", "kind": "unclassified_tcp", "frame_number": 70251, "timestamp_epoch": "1634917226.583573000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894251000000170303004200000000000000032426394e8579a023f8b4cbd8ff78ed72cfed00aa3e5e874d6e7e1308968ac650bf008e741d54640b2947aa115af5781e1ed211227b081dc4b608" } }, { "event_id": "evt-38f9c0f49d11e871efebf1fc", "kind": "unclassified_tcp", "frame_number": 70255, "timestamp_epoch": "1634917226.638101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894239000000170303002a0000000000000003dc0141c283c7ee0cf3a8e3abce1909647bebe4f01d451b448e4000cd41933af989fb" } }, { "event_id": "evt-076fc6e1c53dd6ce599e21b1", "kind": "unclassified_tcp", "frame_number": 70259, "timestamp_epoch": "1634917226.770418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a140000005354415254544c530d0a" } }, { "event_id": "evt-d8631578e890c2e414998718", "kind": "unclassified_tcp", "frame_number": 70264, "timestamp_epoch": "1634917226.944708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-642f35984f3338d8b442438d", "kind": "unclassified_tcp", "frame_number": 70266, "timestamp_epoch": "1634917226.947773000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e432210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-de8fc86ec56ed4820eefbf46", "kind": "unclassified_tcp", "frame_number": 70271, "timestamp_epoch": "1634917227.134556000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894235000000170303002600000000000000040a2e0e53c8293ed19b24009f8bdb83daa8bf770cc02335cfa88ae44e97ff" } }, { "event_id": "evt-71b30e7521276538573322ac", "kind": "unclassified_tcp", "frame_number": 70273, "timestamp_epoch": "1634917227.314600000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f52051776e660bb95d3f2856", "kind": "unclassified_tcp", "frame_number": 70289, "timestamp_epoch": "1634917228.493870000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-52fef22c1f65496bb1ce9388", "kind": "unclassified_tcp", "frame_number": 70290, "timestamp_epoch": "1634917228.493891000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8daff87589f2fac5eb7d7952", "kind": "unclassified_tcp", "frame_number": 70291, "timestamp_epoch": "1634917228.493902000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-50c26be17c69c8498d103785", "kind": "unclassified_tcp", "frame_number": 70295, "timestamp_epoch": "1634917228.494230000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-930c30d1cf9bfea952007222", "kind": "unclassified_tcp", "frame_number": 70299, "timestamp_epoch": "1634917228.795741000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43214000000050000010a0a169cc3d7" } }, { "event_id": "evt-a8ca9e9656a2379207e5cad3", "kind": "unclassified_tcp", "frame_number": 70301, "timestamp_epoch": "1634917228.831318000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a880000001603030046100000424104d0b86418e7c62dabeb990f324d28335d24ebdfc290a15b470e87b4ac06f332c445f3ea42b5309bb2180549d480f3d4a37da274bfd22efc4f67bb1c152f5b9aa8140303000101160303002800000000000000006e402514704a2ebd31fb4971785c32b53a4a82beaf6cacdd81a8779d263aad4e" } }, { "event_id": "evt-e1e29c94e097c636b3b92a39", "kind": "unclassified_tcp", "frame_number": 70306, "timestamp_epoch": "1634917229.005250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a3d000000140303000101160303002881e796524f02320385d1ee88e57b0e7a19c35635f2bb974c487d784076c36683f2585f42faf2199a" } }, { "event_id": "evt-14186309b30708dd2d788737", "kind": "unclassified_tcp", "frame_number": 70309, "timestamp_epoch": "1634917229.303509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a37000000170303002800000000000000011f6d335a52b39f2c0fa4e8c62cf919266b898bb32db17d7c5c57952175616408" } }, { "event_id": "evt-d09cc6a6914d88f6e39f7c33", "kind": "unclassified_tcp", "frame_number": 70314, "timestamp_epoch": "1634917229.493410000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64ad000000017030300c181e796524f023204b3c17c2b06bce8da7f0f521101f2c9b650d6699f43b7ce47bce23d4ab93c57455cb2057dd43719ea4deeca1b6ad58efa2b0370547ca3d1c0e2026424f82f135f5f7a836e90c80dbb6ab6dfbbfb14981966a7f2e748da00a6642e89cf35770a51824cc895e3285718aa21f3c899614385556c35817bf492c8904c177b9d7bd1068c1199d7e72db93ff3dce30690f3207ba6ee582bec0578df7bacbda529d2a3ac409a4da84c70130246ef29435601572a061c0f5b05d4a6a4c4" } }, { "event_id": "evt-67e170514eb9fe940c9a21ed", "kind": "unclassified_tcp", "frame_number": 70317, "timestamp_epoch": "1634917229.822596000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a3300000017030300240000000000000002dc3defc3bcbfea45d38e028aba67ac2b595e3119a61203d2d90e3ffa" } }, { "event_id": "evt-f954aac3f31dbc17f0536c49", "kind": "unclassified_tcp", "frame_number": 70322, "timestamp_epoch": "1634917230.025064000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a39000000170303002a81e796524f0232050aa66b4465745592de35720b11c9ff2938ca475fdd3f7c69602f08df4b242f7b3d1b" } }, { "event_id": "evt-a915fc5a639846aa078a10f3", "kind": "unclassified_tcp", "frame_number": 70327, "timestamp_epoch": "1634917230.316488000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a610000001703030052000000000000000363d38e415cee06c76a80212612721f5b44358711a0f29a11f6551664b6c1f558a06d9fc2bde5c2ce320e8161369e0f0cfa772b3ec331ad88522402c3209a9b5e6380e14f9d88c0602073" } }, { "event_id": "evt-7b2a54f8cb313edd8b569c05", "kind": "unclassified_tcp", "frame_number": 70332, "timestamp_epoch": "1634917230.506378000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a39000000170303002a81e796524f023206ee98a1c21d82ea06a4bb74aaa53c0cdd509f8e2f6ddc6d8bc35b90539d0e87e6eb2c" } }, { "event_id": "evt-608776a379046903091b3b43", "kind": "unclassified_tcp", "frame_number": 70337, "timestamp_epoch": "1634917230.832964000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-19621232e12c725360659d67", "kind": "unclassified_tcp", "frame_number": 70339, "timestamp_epoch": "1634917230.842164000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a3d000000170303002e000000000000000440e56da02fc5bccbbaa0f8032b176cccb63dcdd957f499d799c03ba0d14425d77b69a8d5beba" } }, { "event_id": "evt-480811ff0ed3efc29e1ec141", "kind": "unclassified_tcp", "frame_number": 70346, "timestamp_epoch": "1634917231.150753000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a4f000000170303004081e796524f023207cc865034c200d88af8565ec7dc68deb9ed4062778a8624f0368070b29bc1a4a01522d7552cd54e5dc6c0e9ff030a7dddc1bd54b667f4ae79" } }, { "event_id": "evt-288282ccc466a268df38e826", "kind": "unclassified_tcp", "frame_number": 70349, "timestamp_epoch": "1634917231.559695000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a6b000000170303005c00000000000000057ae9a5abe742e498532df5a64425bd9456a5e6cc7a59a2a9a078db25f87120209e169c38cc9383416396517cf379c63c413776dbee22893c1198ef9c47ae6c67ce092cc3208400e30e875a296bcf3062e36b0fe3" } }, { "event_id": "evt-fa0086ebc177221c55208487", "kind": "unclassified_tcp", "frame_number": 70354, "timestamp_epoch": "1634917231.784258000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4324000000032323020736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-76e57967efc8b702703bb19f", "kind": "unclassified_tcp", "frame_number": 70357, "timestamp_epoch": "1634917231.808377000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a84000000170303007581e796524f0232086d69b56fbfd40e85af6df64b1774c3d352d64d0077b334bedc50b18c5883b4f9884491b5347a778ad1342e8dfac5c183821fd6f41f8016b8b0753d8849b6619a6b1ac714ba3ed2eb6ef4125edfe1e879680fef4cf77e4ceabf16e4aee59f1851cbf950966c9734148e316a634d" } }, { "event_id": "evt-901c45164c114ef7ed1251b7", "kind": "unclassified_tcp", "frame_number": 70361, "timestamp_epoch": "1634917232.190484000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4321a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-bb7ecc637b1b098bb5d882c8", "kind": "unclassified_tcp", "frame_number": 70365, "timestamp_epoch": "1634917232.370444000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f64a29000000150303001a00000000000000068a786f8568dbe9e9320835caaf38c8449cbb05070100f64a0a000000" } }, { "event_id": "evt-0495fd1b68788d29254a6852", "kind": "unclassified_tcp", "frame_number": 70372, "timestamp_epoch": "1634917232.480185000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8ca000000017030300910000000000000004cc0596119c9c239057837fb7319b1c85d65d95389f211a8a7b42c88b0a635cf7bd4b4517373fe00ebbc9496c667f76d5fce2d873b360f375bd3c2b6dd8e4b0da90c8186bb8b43045abec059ee8aba250fa8c87c35d3103623b52e8bf73472462ac3ff334d185bd07b7ed26091fda7dd3e0a07700e88bde2c76d0712e1beb70a47267fede125ceee7d9" } }, { "event_id": "evt-ff3b60674a52c08689e55702", "kind": "unclassified_tcp", "frame_number": 70378, "timestamp_epoch": "1634917232.647218000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e432820000003235302d736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-dea8f84c8d731cbcd218b0eb", "kind": "unclassified_tcp", "frame_number": 70381, "timestamp_epoch": "1634917232.741363000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c2a000000170303001b0000000000000005e34edf95fe2f5a339a51a95ce41c0ff054bc70" } }, { "event_id": "evt-dc05c88f05d2847e2e35daa3", "kind": "unclassified_tcp", "frame_number": 70385, "timestamp_epoch": "1634917233.067179000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e432140000005354415254544c530d0a" } }, { "event_id": "evt-ef2babbf9918f39a04aeb1c9", "kind": "unclassified_tcp", "frame_number": 70390, "timestamp_epoch": "1634917233.608150000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4321d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-a6900f8eddbedf78e4c040fa", "kind": "unclassified_tcp", "frame_number": 70393, "timestamp_epoch": "1634917233.974691000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9d2c42e8f9d5a06a17f69629", "kind": "unclassified_tcp", "frame_number": 70401, "timestamp_epoch": "1634917234.530054000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4326c0c000016030300510200004d030351b394c3ca339c995c63e406fde56b3744a5b4097b1b9119fb81ba6c18127f38204b1fbdec10863b130064338560d381ed4a4d8acb194ff01c744068b129608488009c000005ff010001001603030bfe0b000bfa000bf70006d3308206cf308205b7a003020102021001021b75fe3940175a34ab49a5290525300d06092a864886f70d01010b0500305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e20525341204341204731301e170d3139313032323030303030305a170d3232303132303132303030305a30818c310b300906035504061302434e3110300e060355040813074265696a696e67312a3028060355040a132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c7464312a3028060355040b132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c74643113301106035504030c0a2a2e73696e612e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afca8a8e52c691e3f0acf73d511dca772206440ebad2392ed09cd40708006010432db966d2bd0e98f1a3a0b8d7741f1fccfef8ec9730b5858a904720a96f065757b71805efecb702536f108dd2853a2fbc55c28c5c565776c09777de66d5ffa3207e2f15cd798b657873c9d68749e8a431a8cdd5ce6d3df49d72ce85e1c59adf62627b1134e93a91cac7278e9337c89020afd4a14c0cfadc6a8d2e9f6d27451ee97cd94de0adc2c3f807bb3c6a43e31aadb0fe2f7a3c7d968bc2b4c7c4676db1a3947d7b238c35d2ee206e133c830d43db28a16bb3ba7ab6f4803e88c379088121cc0e247eb96b89476268b83749b020402f8525e2d3bb83e29b216fcfa2e5a70203010001a382035730820353301f0603551d23041830168014919f5e3115ae109fad60c1f7c1ccaa48342f0c26301d0603551d0e04160414c6cddfc1597f2dcba3570852d940e8d0a2e9c5c0301f0603551d1104183016820a2a2e73696e612e636f6d820873696e612e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230750603551d1f046e306c3034a032a030862e687474703a2f2f63726c332e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c3034a032a030862e687474703a2f2f63726c342e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c304c0603551d2004453043303706096086480186fd6c0101302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f4350533008060667810c010202306f06082b0601050507010104633061302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e303c06082b060105050730028630687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f47656f5472757374434e525341434147312e63727430090603551d13040230003082017e060a2b06010401d6790204020482016e0482016a0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df237acfc000004030047304502206a9c64dcfed001f85a13ae5ddbd38b8f0957fd13e4f227a5d1ebe53e86916d54022100b0d2e6c3c70cb0c731ce01873608b1a4218cf30970ab1c1982658c5dacc988d10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df237ad31000004030046304402206160c50a411342e0c49c30e769358bab7eabee356b7280a1704bf000121baced0220096bd4ec0f6bdaeff39efdf390147faaa37e1a37092c86841621b9068654e6" } }, { "event_id": "evt-61d0b0edf5ced9bbf2d62c71", "kind": "unclassified_tcp", "frame_number": 70402, "timestamp_epoch": "1634917234.530076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-10cd71c1cf2b5d383baddee2", "kind": "unclassified_tcp", "frame_number": 70403, "timestamp_epoch": "1634917234.530090000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e7a010f27e730261d4326a2", "kind": "unclassified_tcp", "frame_number": 70407, "timestamp_epoch": "1634917235.142176000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4324801000016030301061000010201009c08b6d3b5430ef32cd76f2622d886f8182e1d53ec312347f4752f63b4934595f447945154f388208334aef330ae2548fd65fdaf1011e395db6618f11ed854fd484eea989f832638955aea4c41a0f5ad243c20449ca07ff8b295712fb61627ea6fa6c5b95f0ba8cb968db9739ea5ee03f23ce8dd58c6d8217d0c35428eeb5ba92738bdcc5cbf57d1470e62cf123167e9aa7e3e30776c0ff2fe6ecd16482eda15039551c4653b693dde6c04076bf7ba109749f02ba411b1c0b3ffcebea71f39abe0466a6912d49f48c88100ca55730070358eca262ea4321753535dc5d2009505fbd39bee6f0745878eeb2d2ac7a61a37b009a34497daea8fe0f549dda21b03b0140303000101160303002800000000000000006335135c06d9da48c538f255c08984f41e28e50ad264540f0bb471960c638033" } }, { "event_id": "evt-82a892d278225bbce238e7d5", "kind": "unclassified_tcp", "frame_number": 70412, "timestamp_epoch": "1634917235.653317000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4323d000000140303000101160303002846cc005b46ecbac2721aa04dacbf43698b9bcdb5fbbce4f635bf1d5de9e6b7c2782894cc1c343edf" } }, { "event_id": "evt-6d031abc25b2f6868185e7c3", "kind": "unclassified_tcp", "frame_number": 70415, "timestamp_epoch": "1634917235.896212000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9961eeebb46e250f5ecc93b8", "kind": "unclassified_tcp", "frame_number": 70417, "timestamp_epoch": "1634917235.987901000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43237000000170303002800000000000000010f3dab4141834af7e6046dbebe9a152509a83ef39d97e0444117649f1e9c49c4" } }, { "event_id": "evt-9161b091c8aaab507c879d83", "kind": "unclassified_tcp", "frame_number": 70422, "timestamp_epoch": "1634917236.678101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4329f000000170303009046cc005b46ecbac37472d6b106b3ace7418c38814b1b113b4fd23cd2f7c66bc855dc365934603e6007c086cd25ea528769144460375c4076318f4bb55af430c8d4c4deb5a5474af4452d6fc18fb648a481ab3cd04c3a4994b75693e8c531b546f882903fc160d325ec6ff714b59fad53a9527173af60a686c82bc0a188959c1c85587e15966702f8e0d16230fb28e630" } }, { "event_id": "evt-d78bd1ad309daaa1e981021d", "kind": "unclassified_tcp", "frame_number": 70425, "timestamp_epoch": "1634917237.291151000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43233000000170303002400000000000000029aba8f7a48ad66b772b08f5d10d2ad7d9d10b055dd2aa10ae96c12ac" } }, { "event_id": "evt-68d05a69b345f0c4c032c9b3", "kind": "unclassified_tcp", "frame_number": 70430, "timestamp_epoch": "1634917237.803545000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43239000000170303002a46cc005b46ecbac4eea1934e0e0bd754acba296af6205cf756d0a6ec558043dd6643347ee09c7efce4cc" } }, { "event_id": "evt-5e79b4b938fc481eeaeb3cd6", "kind": "unclassified_tcp", "frame_number": 70433, "timestamp_epoch": "1634917237.810954000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c7500000017030300660000000000000005aa5f40177b41e67e0275a0546fafca3eab1c373a61320ddedf4df4418576d848693b16abba1d25b1c7ac6a8b2dc572ecfae5d5654ca0bd3f1b51665ea4d1246409da202f73fd4c7d68fec26f326a7ae38d3e4445f02d19368b6b0a72b694" } }, { "event_id": "evt-eb22c64aa55277e21de0a76e", "kind": "unclassified_tcp", "frame_number": 70437, "timestamp_epoch": "1634917238.255445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4324500000017030300360000000000000003f5a1c0dae63549e4e129f121ceb12db079a7f77eddf1d3068d9b6ebf115fcbd392b57c68ed0b903fa355f9846eca" } }, { "event_id": "evt-a007873872cef6b693b4976d", "kind": "unclassified_tcp", "frame_number": 70441, "timestamp_epoch": "1634917238.483297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c2d000000170303001e00000000000000069ccc7a20d36a42633a4db40708da1dbd34a99b9859c5" } }, { "event_id": "evt-d024991f9d35e8a05cbd7594", "kind": "unclassified_tcp", "frame_number": 70445, "timestamp_epoch": "1634917238.484122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703008942a000000017030300910000000000000004ae613c496e0cac5a8a52c69e5160f67364dcbb9a33a14de11f78a5d39075d4158032a281efd886a86b373bdb340f8016a2595888a3fc22aa682fdbc0591f480efeeae8f0a57bb1f45fdcc35722e486476c3f0681e237409161619f9c637b100fd4ea23d97102e8ff2fe4b665fe68242ed9200f10e73657d20772df509c2e8940833f67dfc81532b75d" } }, { "event_id": "evt-cb64ec8176bd46cf8881f587", "kind": "unclassified_tcp", "frame_number": 70449, "timestamp_epoch": "1634917238.728625000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010087100c000000197b0407010087100e00000005020002" } }, { "event_id": "evt-582bd25864696b0feca1dc58", "kind": "unclassified_tcp", "frame_number": 70452, "timestamp_epoch": "1634917238.729351000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43239000000170303002a46cc005b46ecbac5c76791bd7118af1182f290d2c535334e324bf03ed228a8f224908b3f481f5aabdfa50307010087100c0000000502" } }, { "event_id": "evt-db7ffa92ae93595cd5aeb2cb", "kind": "unclassified_tcp", "frame_number": 70454, "timestamp_epoch": "1634917238.729815000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702004d8c5700000017030300480000000000000006cf95073357a2fd29f3410855915230b1dd6cf1e3add411561ee50b6ebcc0374290914450b4450b2866d49998aba99d80fc39e0cca3ae7725e9a3cfe31a01de7a" } }, { "event_id": "evt-9725e9283a6c556301b1344e", "kind": "unclassified_tcp", "frame_number": 70458, "timestamp_epoch": "1634917238.730140000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702004d8c0a000000" } }, { "event_id": "evt-2333032ac87b96b2dc16a452", "kind": "unclassified_tcp", "frame_number": 70461, "timestamp_epoch": "1634917238.977666000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089422a000000170303001b0000000000000005b9a4918e9fcdb15adad06e84cd03db0a7a271f" } }, { "event_id": "evt-d5680467265cb61c0c70d0fd", "kind": "unclassified_tcp", "frame_number": 70465, "timestamp_epoch": "1634917239.181842000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871020000000010432356d630f356f504d44384828685558534a2a5704070400e4323500000017030300260000000000000004829e4c2ab8bfd803a8e2483ed7da88472030ca50e58ee22775c8d2172ed9" } }, { "event_id": "evt-cfd38fe920bf445879e3de1f", "kind": "unclassified_tcp", "frame_number": 70466, "timestamp_epoch": "1634917239.182256000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010087100c0000000100" } }, { "event_id": "evt-27d95216553a8914391612fc", "kind": "unclassified_tcp", "frame_number": 70470, "timestamp_epoch": "1634917239.548654000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-1ce7135b3b848626957cb666", "kind": "unclassified_tcp", "frame_number": 70474, "timestamp_epoch": "1634917239.667324000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43248000000170303003946cc005b46ecbac650d47214a038ddf503fa450ef7b92099e6530748ad2a260aec19fc520a2a3432253e02900ebaa8db958e1df876d94d1ed3" } }, { "event_id": "evt-9685135bc49c89ba0e38d987", "kind": "unclassified_tcp", "frame_number": 70479, "timestamp_epoch": "1634917239.925576000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871014000000050000010a0a169cc3d8" } }, { "event_id": "evt-699a3283369fe94ba6c9ca57", "kind": "unclassified_tcp", "frame_number": 70481, "timestamp_epoch": "1634917240.045046000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4322a000000170303001b00000000000000056d1c9e473a5b2d992b666d7104f471634dbe01" } }, { "event_id": "evt-b8ae2dc77e6bedc3db4534bf", "kind": "unclassified_tcp", "frame_number": 70485, "timestamp_epoch": "1634917240.944651000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-18979ac4fe089d671bc2f233", "kind": "unclassified_tcp", "frame_number": 70488, "timestamp_epoch": "1634917241.215518000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087104000000032323020736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-8808af371e1da0d66439df6a", "kind": "unclassified_tcp", "frame_number": 70491, "timestamp_epoch": "1634917241.453641000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087101a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-d81c02b6acd62919ce2e2e8f", "kind": "unclassified_tcp", "frame_number": 70496, "timestamp_epoch": "1634917243.238604000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710820000003235302d736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-7e0a77ad03c9ce882f6ece2d", "kind": "unclassified_tcp", "frame_number": 70499, "timestamp_epoch": "1634917243.624649000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710140000005354415254544c530d0a" } }, { "event_id": "evt-edd8e065d0c18b0c4b57a645", "kind": "unclassified_tcp", "frame_number": 70504, "timestamp_epoch": "1634917243.997509000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087101d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-580488d618d63b976aea8dd3", "kind": "unclassified_tcp", "frame_number": 70507, "timestamp_epoch": "1634917244.043000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300894275000000170303006600000000000000057d03a64c2030cd350b0f2ab0f9ebe9afd63f507db331bb7bb5e41b0a6ac00f505355f1ed5c3d9c0078b9afaca356d1fd4a877d4f858ea99fd72da144a1360e76ff0bb0a4659933c4ed3e96bc7768ea96985c697ebf34457a030497115a2c" } }, { "event_id": "evt-f75d6c1493731c862f2c692c", "kind": "unclassified_tcp", "frame_number": 70511, "timestamp_epoch": "1634917244.234320000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6e57f4759d388971497baa81", "kind": "unclassified_tcp", "frame_number": 70516, "timestamp_epoch": "1634917244.302871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43243000000170303003446cc005b46ecbac703f76e61658f6c0a40f7be00907c557bb0036e7088c339f9d09dd565661e323f5aa8a1e511e7e8a8fc126b57" } }, { "event_id": "evt-12b3878779ef089ebd68cba4", "kind": "unclassified_tcp", "frame_number": 70519, "timestamp_epoch": "1634917244.523780000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089422d000000170303001e00000000000000064d70eb58ca535c38904444e5a6d5795e71c9a221e2f3" } }, { "event_id": "evt-1ed299611173155f9e155ae0", "kind": "unclassified_tcp", "frame_number": 70525, "timestamp_epoch": "1634917244.574397000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030089425700000017030300480000000000000006f963be592fa68a7c61904561390662a195da49281adc0e0af7723ebcfa408909f718594378ed3fc0e63f4baf22703c4db1e86a8fba9c274cef88706f6f29215d" } }, { "event_id": "evt-d60a86ea0676e50d7d7e737c", "kind": "unclassified_tcp", "frame_number": 70529, "timestamp_epoch": "1634917244.574976000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030089420a000000" } }, { "event_id": "evt-9302b37ada6bea9ab1d1019d", "kind": "unclassified_tcp", "frame_number": 70535, "timestamp_epoch": "1634917244.617160000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a360c4478f87ad6d9eac9b3a", "kind": "unclassified_tcp", "frame_number": 70536, "timestamp_epoch": "1634917244.617181000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cd220072cca53ad007bd32cc", "kind": "unclassified_tcp", "frame_number": 70537, "timestamp_epoch": "1634917244.617192000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-30b0e1c9331f5d259e61cc8b", "kind": "unclassified_tcp", "frame_number": 70541, "timestamp_epoch": "1634917244.701222000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e4322d000000170303001e0000000000000006775b0d7ddb6c47c215c3433083c081035c797878716d" } }, { "event_id": "evt-fb9b64715a08b688aa7292ea", "kind": "unclassified_tcp", "frame_number": 70545, "timestamp_epoch": "1634917244.997879000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-618a419730fb89a2262a63cf", "kind": "unclassified_tcp", "frame_number": 70550, "timestamp_epoch": "1634917245.483836000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087103d0000001403030001011603030028a132316a6012b9524924da2cacc44d0c862e923fc87a67810431427f2c51f39a12e3149ab8bb4e29" } }, { "event_id": "evt-f0e445f3a312eb6f08abcbae", "kind": "unclassified_tcp", "frame_number": 70553, "timestamp_epoch": "1634917245.895519000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087103700000017030300280000000000000001acc85230ce0b5bd1924d35fe65863710fbf23f050295e0e0053b22f202893990" } }, { "event_id": "evt-2bf21211481be4fdcf584610", "kind": "unclassified_tcp", "frame_number": 70557, "timestamp_epoch": "1634917245.974121000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7d070510a64153d8f4096955", "kind": "unclassified_tcp", "frame_number": 70561, "timestamp_epoch": "1634917246.211544000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43276000000170303004846cc005b46ecbac871076e7891232e3e8ab17fa2b40638d75dda2af56ca6815c4b69b12d7e18f4112f816e83d2a318089eb8cf3256ff9b9aaf660eaa100847b4997905cb6ae77ac2150303001a46cc005b46ecbac90e0000df6608981b507904d4f68cabd5494b" } }, { "event_id": "evt-24753a5c0b56f81e55c2b026", "kind": "unclassified_tcp", "frame_number": 70565, "timestamp_epoch": "1634917246.212016000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400e4320a000000" } }, { "event_id": "evt-ea59cdacbf50069cf6a228d0", "kind": "unclassified_tcp", "frame_number": 70568, "timestamp_epoch": "1634917246.264602000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087109f0000001703030090a132316a6012b953f9f31aa6e047cb49c0139c2767fe34b731cdd949f7680ea668cd09799e2e62131d5733c5389430db5d32e03b9ba7f06472e8b7be6f84520cc4e5692bc9b84182777c6410c8ce8b452a9535c6f0f970f7e85405e164af9973dd27efd5f245898371be36d40d0f965c3999663b8625515fd2cf832bb670cb3106584fc51eed0b4d11100040a7179ce8" } }, { "event_id": "evt-48af064571b58dfd28c5da38", "kind": "unclassified_tcp", "frame_number": 70571, "timestamp_epoch": "1634917246.462699000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400e43229000000150303001a000000000000000746b0ad1dacc45fbfbcb48dce056b1603516a" } }, { "event_id": "evt-c78804fccddcda21fe15e482", "kind": "unclassified_tcp", "frame_number": 70573, "timestamp_epoch": "1634917246.657743000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400e4320a000000" } }, { "event_id": "evt-b942972954b403810e40f621", "kind": "unclassified_tcp", "frame_number": 70575, "timestamp_epoch": "1634917247.226986000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087103300000017030300240000000000000002b1db5e96982ef84b83edf86b3a07fc0accb7ad5cc8ba7d43ca99719c" } }, { "event_id": "evt-d058889de70f96456cbbfe04", "kind": "unclassified_tcp", "frame_number": 70580, "timestamp_epoch": "1634917247.637282000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871039000000170303002aa132316a6012b954ccaef211de9de1cc7eafc3c6dd8870b71fd04fdd0654fa1ee12def59e1d4622046c6" } }, { "event_id": "evt-f6412434ea6037d0594ca019", "kind": "unclassified_tcp", "frame_number": 70583, "timestamp_epoch": "1634917247.997887000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087104100000017030300320000000000000003ec007fba0581e36889de0b8f05f5d063623fd432e2b5df0555bf272948510317771cf50737de83db743f" } }, { "event_id": "evt-ea1cf4b7e70e9190f3e9e4b2", "kind": "unclassified_tcp", "frame_number": 70588, "timestamp_epoch": "1634917248.459246000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871039000000170303002aa132316a6012b955279b3435cefde1a920d6541454cc1732192cac196d9fb74dc10fb05cf6e324855fda" } }, { "event_id": "evt-7de97c9144072a9a69b6a34d", "kind": "unclassified_tcp", "frame_number": 70591, "timestamp_epoch": "1634917248.815720000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871039000000170303002a00000000000000041a0813623f172e266fe02010007db9bf9499c004f38ee0c078285c080f1c8cfc0825" } }, { "event_id": "evt-4b3d03420d89e0c1e3291841", "kind": "unclassified_tcp", "frame_number": 70596, "timestamp_epoch": "1634917249.283906000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710480000001703030039a132316a6012b956146c1364f948277b7921b5f807ffacf839f0098b4ce63b70f76a030f8e78801978cd9e8e2c513aae2e00295b0830de32d2" } }, { "event_id": "evt-4b81fa5343a148b1057a3be6", "kind": "unclassified_tcp", "frame_number": 70599, "timestamp_epoch": "1634917249.673237000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087102a000000170303001b0000000000000005c4b0f816bf38589f6b840f99b4f416dc7789e7" } }, { "event_id": "evt-5d55df84b529249ec360bbaa", "kind": "unclassified_tcp", "frame_number": 70604, "timestamp_epoch": "1634917250.198178000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710430000001703030034a132316a6012b957023ce068e07e4a707553ab4868a662d05016a15a3b421de77e3c6270b6a4701584f6c3dff0b91fbf4cfba555" } }, { "event_id": "evt-30b9b2d5a4fae991ae197705", "kind": "unclassified_tcp", "frame_number": 70612, "timestamp_epoch": "1634917250.641547000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010087102d000000170303001e000000000000000629df893a0bca60e3b31f7871fa2ad61b46b73d794594" } }, { "event_id": "evt-7507171aac29e0f2d911f05f", "kind": "unclassified_tcp", "frame_number": 70622, "timestamp_epoch": "1634917250.833995000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200121c0c000000197b04070200121c0e00000005020002" } }, { "event_id": "evt-c79c08d785c5b2e133397b9c", "kind": "unclassified_tcp", "frame_number": 70623, "timestamp_epoch": "1634917250.834893000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200121c0c0000000502" } }, { "event_id": "evt-07a8566e16f4848b899ce52e", "kind": "unclassified_tcp", "frame_number": 70625, "timestamp_epoch": "1634917250.991418000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e6bba02debe9052d625b7547", "kind": "unclassified_tcp", "frame_number": 70629, "timestamp_epoch": "1634917251.024736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008710760000001703030048a132316a6012b958b1d441e5828fc12202746b04f2abd9878796f1ff0147852435e0cdc2c2539935ed3966826bfc82e18a963600090d677e42fb7c420c24548fa67ff617dbde36ad150303001aa132316a6012b9592d73128bda9a0408e6cd39f694275cf0e1b5" } }, { "event_id": "evt-7d644cac5c84680d253ce26f", "kind": "unclassified_tcp", "frame_number": 70633, "timestamp_epoch": "1634917251.025097000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010087100a000000" } }, { "event_id": "evt-906fb7fea87d6e16b41217d8", "kind": "unclassified_tcp", "frame_number": 70635, "timestamp_epoch": "1634917251.114411000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-667dc5607297f4b384a453d2", "kind": "unclassified_tcp", "frame_number": 70636, "timestamp_epoch": "1634917251.114797000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200121c0c0000000100" } }, { "event_id": "evt-ae81bca52e2e62b719266984", "kind": "unclassified_tcp", "frame_number": 70639, "timestamp_epoch": "1634917251.370506000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100871029000000150303001a00000000000000077c7ee97d1da9f657f4f078e67a5b52f4a7cb" } }, { "event_id": "evt-2ee1c660de0d5f7bdd56a710", "kind": "unclassified_tcp", "frame_number": 70641, "timestamp_epoch": "1634917251.565971000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100bcf50c000000197b04070100bcf50e00000005020002" } }, { "event_id": "evt-6aca6adb712a7ef8c3afbdf5", "kind": "unclassified_tcp", "frame_number": 70642, "timestamp_epoch": "1634917251.566683000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bcf50c0000000502" } }, { "event_id": "evt-559dec446a2e2e6fa03341f4", "kind": "unclassified_tcp", "frame_number": 70644, "timestamp_epoch": "1634917251.758862000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-c6cbd5ff96d9c80e9a92b332", "kind": "unclassified_tcp", "frame_number": 70647, "timestamp_epoch": "1634917251.956710000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-fa354d843e87e67df8f5daa2", "kind": "unclassified_tcp", "frame_number": 70648, "timestamp_epoch": "1634917251.957221000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100bcf50c0000000100" } }, { "event_id": "evt-185f8ef1983257405b11109b", "kind": "unclassified_tcp", "frame_number": 70650, "timestamp_epoch": "1634917252.430546000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf51d000000050100030c6d74612e3231636e2e636f6d0019" } }, { "event_id": "evt-fdf9df554cf88cdfd59d5cca", "kind": "unclassified_tcp", "frame_number": 70657, "timestamp_epoch": "1634917252.774352000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf514000000050000010a0a169cc3da" } }, { "event_id": "evt-185a3be108aff4d3237b418e", "kind": "unclassified_tcp", "frame_number": 70662, "timestamp_epoch": "1634917253.111732000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf518000000323230203231636e2e636f6d0d0a" } }, { "event_id": "evt-ff7d737eba6c160ca57a27ad", "kind": "unclassified_tcp", "frame_number": 70667, "timestamp_epoch": "1634917253.267801000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c14000000050000010a0a169cc3d9" } }, { "event_id": "evt-f5cb2bfdf01137128761dc55", "kind": "unclassified_tcp", "frame_number": 70669, "timestamp_epoch": "1634917253.387727000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf51a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-17375ea46f5f06c815eaeccf", "kind": "unclassified_tcp", "frame_number": 70674, "timestamp_epoch": "1634917253.684355000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5400000003235302d6d61696c0d0a3235302d5354415254544c530d0a3235302d41555448204c4f47494e0d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-904d630a804f590c3c395b8e", "kind": "unclassified_tcp", "frame_number": 70677, "timestamp_epoch": "1634917254.194431000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5140000005354415254544c530d0a" } }, { "event_id": "evt-85195b5d74271cf4599637f1", "kind": "unclassified_tcp", "frame_number": 70683, "timestamp_epoch": "1634917254.600428000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf52200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-2a94390f7a9d506bbaf92fcd", "kind": "unclassified_tcp", "frame_number": 70686, "timestamp_epoch": "1634917255.111898000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5120100001603010103010000ff03031beceb7df434eb8093347a2e25c00e927063fa6a33d2f59a3da3fd50032bad092029bcbcfed1ef1d43f23859ae4e6803181d13d94ea4851a924bff01bab9485e430026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009000000011000f00000c6d74612e3231636e2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020b8b05d443a3931192d6bb594f9868b17772070a6ea2693220523aeabfc188c7b" } }, { "event_id": "evt-fc9dd73be7a1bbd5e13e2d8d", "kind": "unclassified_tcp", "frame_number": 70690, "timestamp_epoch": "1634917255.991374000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0ad080d5d9da851559c980c5", "kind": "unclassified_tcp", "frame_number": 70693, "timestamp_epoch": "1634917256.034299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c4000000032323020736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-a52840da787a3271797118a0", "kind": "unclassified_tcp", "frame_number": 70695, "timestamp_epoch": "1634917256.052974000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-2c2de1efc53f9dbb9a3a2ef7", "kind": "unclassified_tcp", "frame_number": 70701, "timestamp_epoch": "1634917256.368952000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf56a050000160303007a0200007603034f9732ae371deec6daa3345e7c53ea809881536306787e17fdbf8dc245b70e692029bcbcfed1ef1d43f23859ae4e6803181d13d94ea4851a924bff01bab9485e43130100002e002b0002030400330024001d00201960e0ce69eb0f262a8325f0b93193b79f36d6f2477047ea028947f23135266b14030300010117030300179ecf94b783ba79cf03b68dc10fade61ba8a0552ebad81b1703030e76aa101a060d920c2bb59fb053911f99f73cf4542dd386c1aea131a90e7b523cf1249231bcfa03b48546ee2ad1bdf71afaaaa9e4fece85662a6b0d2cabcbeb5b19805ef3f4bffb808ab051ab7bce9636cc5e225e7c5a415cb7f28b72c2fcc85f4f09401dfd3e6b7cff96a3f80d5e118490f61958e66b782ab2d68b95bb70f54545a00dc7322edb2bdf760e2733228ed6bb9d6c1bdedff69394bf8875f907f6cdef7459b9745b1f005785fb95beb85851e0bc3abea475b562136ebcd529601bec1e26cf193e12dec4240df6f75423fbc280c232a7a451527a2dcfa2e65ae1df96bfcbf75b4b691f934bbbfbc8e86ac27ff443a8c1157f858ec5a0706223ba3feb342a1496a3e70879299375c64051199f370dbaafe8f4bbddd37974d3185e4ede7f9a2bd53d20d94971942b333ed22712c48b9421f7c0440a979f9ce168b9f2fd4f28d803b1a632f39c3a73e0676ee4d84c30dffad957602151e1d76689f262dd3228dbf550cc19a4c46de1c457261d1bffa2555cb0fb3a2d74c2a628f4b1845069ee725117ac8b28dd019fef0970f0a5f80c0e3e42142f2c1dd29bb75e03b345b8d5a594416a6a12252db47a446e5c283bce2c38a6a79b72e1e34253c1a02e942e4233c4a5fc56e3d1452257fe56d2b101c3be96a6356eadc7429ad0d622c19cedf9b074745bf71f1b6720790e0f440c9268b179bad558488512e52f84454caeacf850593344f3dd676aca410084c605335faa5f6bde6c258de4c8f670042b9326ab10bb2e62e410c6a9c952f9c7ee9cf5778d0fba4805578b82a08c18fde6c2add6d9df47254f13a34e5b5d4569fcfed8b3f2a8dd789e5b688e69f5f67d6e0c2d66e78e8947aa6de10d2ebd732f2d780f14b541b848677361bd2a0a5ea6ffc57b9b87da2286c94524e9a2d4f492808b6b18a29eaccc774791308547d5f6f7c52df13dbd5554df1ada83c49e3b9ccfa6be5405ef52d49cfb2173f0d966186757c125431f900770ffd5e69cb956a26069fb69288a2d03c1a23840dd1d051ea4fc193eec4b6443bffc0f9f8d14b089a7d09d222ddd7e0c33db7d2d720755b9d50000952df52231484636d9b9b9cf5a3fd1de04089ad34cd30adcaec4cf61efd99fd6e73ac9a28a1515eb562748798e1191f4f4775e51ff5d5efe7115308f65267c28063deef9769a8e6c8d55baa44824332b7f9c385e0266df54bade3f6afa73eff01a31d4eea34a2a4a04361cb989f3cea4202b543aeb9a07b71da10aa4cacdb43654f38cb0a94e54386472c2c7baf4555a7bec49764085cc5a9ad9024e869c7c87a5d36c560546b4a625c1f8d7035cd05461bafb002c54bb1728b31afcda46c53feeae271e6308df3ecd63a2e2af6ddd2a451cbf68d206d3ea03c8b66138b03d3aad764c4d4843a5f00a6fdcaac09782ac837a2e6bb37f22f455fb0c16ac25a301bbd1952b405eb3629ac367a417dd9176afb9dfb8336d47ed7c8396e851638a9ae2d7c0f3a5bd38f07e9cb540fdfb16ea90043822eda360abecc0e254713438c7747c0aa49c39a8e753cbb6b5fa4be93fa761e8f3d8cf36a66dae24ad52123acaf82e932865661a57c91df4360f1a08d163469397a0281cc046a3728a4a8e32310656b075cf937c1bbbc21f3460a0f58dafeb7996d7365a2d9771929356351b37a13eabd1e1b8e5c72347985c26edd603678a46aa458bf4d6bce0" } }, { "event_id": "evt-a8a7af9f27719fe80691b287", "kind": "unclassified_tcp", "frame_number": 70705, "timestamp_epoch": "1634917256.409817000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ec6a300ffd02678a3aca27a5", "kind": "unclassified_tcp", "frame_number": 70713, "timestamp_epoch": "1634917256.650751000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9457c33cf344b5c6c438f1ab", "kind": "unclassified_tcp", "frame_number": 70714, "timestamp_epoch": "1634917256.650772000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8a02edfdcf11b42af2fba339", "kind": "unclassified_tcp", "frame_number": 70718, "timestamp_epoch": "1634917256.863388000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c820000003235302d736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-e780befdd71cd94cedb2b2cc", "kind": "unclassified_tcp", "frame_number": 70721, "timestamp_epoch": "1634917256.915972000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5700000001403030001011703030035699a066a3ea83feb3411fd8ab80dddf7dfc2caba4178327cae0bf1d9309260639b527c50fa6e30c2d3762ca40c2cce3948e38d52fa170303002174a2f01af24347f7cdf64340d117095ef01f64dc294661aca1a2c900309cd23985" } }, { "event_id": "evt-ccbd082750ee13dd7d10f874", "kind": "unclassified_tcp", "frame_number": 70726, "timestamp_epoch": "1634917257.194650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-18ec6a33443b13776598ed6a", "kind": "unclassified_tcp", "frame_number": 70728, "timestamp_epoch": "1634917257.212062000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c140000005354415254544c530d0a" } }, { "event_id": "evt-81d56f9cd19bbdeb647759d0", "kind": "unclassified_tcp", "frame_number": 70734, "timestamp_epoch": "1634917257.484467000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5560000001703030047b52643f8d15464fa9f593e224e77da125aa9fdbda6944ea6cf5d4aad98bdab03be48a59fffa61f931332b33296635ca6e45ebde81fcf34001f2c0512b667a94a8251b675162923" } }, { "event_id": "evt-872468bc372169d88d2641cd", "kind": "unclassified_tcp", "frame_number": 70740, "timestamp_epoch": "1634917257.662899000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-b55504985dba0f69712729f4", "kind": "unclassified_tcp", "frame_number": 70743, "timestamp_epoch": "1634917258.015837000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f320b6e8af77c6067d86612a", "kind": "unclassified_tcp", "frame_number": 70747, "timestamp_epoch": "1634917258.189182000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf52c000000170303001de5986554ab03112f44731ffa72bdf551a8bfc5b52987a00f3d2ae57370" } }, { "event_id": "evt-5abadc7bcefba108bcfc6c49", "kind": "unclassified_tcp", "frame_number": 70756, "timestamp_epoch": "1634917258.594651000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c6c0c000016030300510200004d03032ee04b47c8cd7641ec993a621e0c27af07c3e3dcc0c085e36a057b6d494b1b44200256d33aa77afd582ed6fdb8be5bad7189889075c499718d337f4ba7eb1f22ab009c000005ff010001001603030bfe0b000bfa000bf70006d3308206cf308205b7a003020102021001021b75fe3940175a34ab49a5290525300d06092a864886f70d01010b0500305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e20525341204341204731301e170d3139313032323030303030305a170d3232303132303132303030305a30818c310b300906035504061302434e3110300e060355040813074265696a696e67312a3028060355040a132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c7464312a3028060355040b132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c74643113301106035504030c0a2a2e73696e612e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afca8a8e52c691e3f0acf73d511dca772206440ebad2392ed09cd40708006010432db966d2bd0e98f1a3a0b8d7741f1fccfef8ec9730b5858a904720a96f065757b71805efecb702536f108dd2853a2fbc55c28c5c565776c09777de66d5ffa3207e2f15cd798b657873c9d68749e8a431a8cdd5ce6d3df49d72ce85e1c59adf62627b1134e93a91cac7278e9337c89020afd4a14c0cfadc6a8d2e9f6d27451ee97cd94de0adc2c3f807bb3c6a43e31aadb0fe2f7a3c7d968bc2b4c7c4676db1a3947d7b238c35d2ee206e133c830d43db28a16bb3ba7ab6f4803e88c379088121cc0e247eb96b89476268b83749b020402f8525e2d3bb83e29b216fcfa2e5a70203010001a382035730820353301f0603551d23041830168014919f5e3115ae109fad60c1f7c1ccaa48342f0c26301d0603551d0e04160414c6cddfc1597f2dcba3570852d940e8d0a2e9c5c0301f0603551d1104183016820a2a2e73696e612e636f6d820873696e612e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230750603551d1f046e306c3034a032a030862e687474703a2f2f63726c332e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c3034a032a030862e687474703a2f2f63726c342e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c304c0603551d2004453043303706096086480186fd6c0101302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f4350533008060667810c010202306f06082b0601050507010104633061302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e303c06082b060105050730028630687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f47656f5472757374434e525341434147312e63727430090603551d13040230003082017e060a2b06010401d6790204020482016e0482016a0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df237acfc000004030047304502206a9c64dcfed001f85a13ae5ddbd38b8f0957fd13e4f227a5d1ebe53e86916d54022100b0d2e6c3c70cb0c731ce01873608b1a4218cf30970ab1c1982658c5dacc988d10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df237ad31000004030046304402206160c50a411342e0c49c30e769358bab7eabee356b7280a1704bf000121baced0220096bd4ec0f6bdaeff39efdf390147faaa37e1a37092c86841621b9068654e6" } }, { "event_id": "evt-b54d183bf53450463702745e", "kind": "unclassified_tcp", "frame_number": 70757, "timestamp_epoch": "1634917258.594684000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "260077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016df237ad230000040300483046022100fd253bfae5446644fe0268a17e1f6174456e0080a3d76137e3ed2697f9db0200022100cefd8bc8da4cb3408fb2a98e7f3d22190c3f86405b579518753b8bf769173d87300d06092a864886f70d01010b050003820101009836823c43e330f3ac8c9390b9e880e5d1f2e07724132301edb98c07366aec859307e22c9b26f14e251a3f09f37be4ba6059f5e692d232f320cb064e39ccd04870b81ee4e6c09a58d6af5c41ac66160865cb9fc7cb0e5b41aff5522ab8b7c35304ff2e94d1ff56896c8213e53bc19c3a0f222b437b51bcdc1262e7bef992c88905d607ea2baeb7654ef3f133b2151933d33bc82704c25e7eec21b4b2fd385cbb05db6c1c3e84b9e5bb8ed9ba1935a3e4feea6d278545c48d98bd9403bed772d47b3de738a090c1d4b525952a5dc392f645e33e4032198207bf8340c9585595f50004162d9cf4fd662620f32458a9d9433a368f38bb61d9c5806ce50c7c0524ed00051e3082051a30820402a00302010202100a0470d096bc8a12c890a6df826eec4b300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3139303632303132323735385a170d3239303632303132323735385a305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e2052534120434120473130820122300d06092a864886f70d01010105000382010f003082010a0282010100b149fa3d4a799546e23ce04286f6de543c3c950d858df5b9f66286e53185873a1d25382f0d1fc5f038ddaf43a4997be0cdc4e85d5944139f27e7569da8b2603d0fc51210778c098acb62e1469dbf3eb521863fa10fc497193f5fb1850eab98bb1092c81747b5354c5c2c454af4360bfee35991437c618a28da104a2272c037bc8a21db50e6a42cc99798e4d9c9626715d47f4c7e5835388c2823543c7025786e088a01b10f22ff81bc2b7433626c30389543610f4c4dbcf8d0f0134aaa6e47583be2ad4b87742fb88698b41893b7e0ede2891575e989964ee54535ba142c3674f8f42d72d2676ada6e64a3c6c8a5fa8c2a4fbf3ccfc3f12134396911dad81d930203010001a38201ce308201ca301d0603551d0e04160414919f5e3115ae109fad60c1f7c1ccaa48342f0c26301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302300f0603551d130101ff040530030101ff303106082b0601050507010104253023302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e30440603551d1f043d303b3039a037a0358633687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3081ce0603551d200481c63081c33081c00604551d20003081b7302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f43505330818a06082b06010505070202307e0c7c416e7920757365206f66207468697320436572746966696361746520636f6e737469747574657320616363657074616e6365206f66207468652052656c79696e672050617274792041677265656d656e74206c6f63617465642061742068747470733a2f2f7777772e64696769636572742e636f6d2f7270612d7561300d06092a864886f70d01010b0500038201010017e0797af1" } }, { "event_id": "evt-9c99ff9b1d18b7fa8c5fa62c", "kind": "unclassified_tcp", "frame_number": 70758, "timestamp_epoch": "1634917258.594717000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d515ef9b3c6ccdbc2c69510e", "kind": "unclassified_tcp", "frame_number": 70762, "timestamp_epoch": "1634917258.594924000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5320000001703030023292d6b179154b07c190db5ae1c8468544c1fdf1b3a288cd575e0699428c59c7b16f906" } }, { "event_id": "evt-8c9da1e33ac07f6115c5f5d9", "kind": "unclassified_tcp", "frame_number": 70765, "timestamp_epoch": "1634917259.181147000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b15dafa0cc87b20fe15986a3", "kind": "unclassified_tcp", "frame_number": 70772, "timestamp_epoch": "1634917259.515935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5320000001703030023842f4302b4e08fd74af58e64dbef8e4f25a7f89e4838cd67154c016a7f041cbdaa25cb" } }, { "event_id": "evt-a114ad72a435028f3a10b58d", "kind": "unclassified_tcp", "frame_number": 70776, "timestamp_epoch": "1634917259.669296000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c3d00000014030300010116030300288d66cc18ca11beae4ec2c81287afb0fddc0b1cfed63fde4949a68254a796b3ddbbc142d7ce5dc69c" } }, { "event_id": "evt-09df81fb037c9d2c35c9425b", "kind": "unclassified_tcp", "frame_number": 70779, "timestamp_epoch": "1634917259.935797000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5320000001703030023e53810c7a5e0af578ec9dfa104558bfe9fdbb922697db4b4172b721fd95363561c5194" } }, { "event_id": "evt-a882ed1302ffbcf1294c57dd", "kind": "unclassified_tcp", "frame_number": 70783, "timestamp_epoch": "1634917260.121110000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c3700000017030300280000000000000001d757dbc8a28d90e2d25fdfde1e8cc36bd6a724068b3202c00cadff2773cc28e0" } }, { "event_id": "evt-66ef6a27562c946fd7a11819", "kind": "unclassified_tcp", "frame_number": 70788, "timestamp_epoch": "1634917260.642360000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c9f00000017030300908d66cc18ca11beaf2ffdb9a6c0979491fd48eeefdf90494126cf20bc98562f161b83f8bc95fd2ab02e50742a29a716b7199195412b641774b6418e6173d6d1334e202d2d552ad9fa9b27666d99d3cf56c1c05e5385be8061340c975edae107b70e07130c746dc7000ebf796673b98e93f9c461bd3aac73d14637ec9b8bfb57d5422fe6227b4155f7eb64ec5da29b8e2f" } }, { "event_id": "evt-aa2e692269004dbc17ac8a6b", "kind": "unclassified_tcp", "frame_number": 70791, "timestamp_epoch": "1634917260.658900000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf53f0000001703030030f369c3d8c8d87126969bed2910051649578ffd6e5a13fda44de8fa07bbc549b6e75eba5c63b651eaf76e0982e32a3856" } }, { "event_id": "evt-13ee49ed87bca412151138d7", "kind": "unclassified_tcp", "frame_number": 70795, "timestamp_epoch": "1634917261.023066000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ee54c2b3416cf0688dfd096a", "kind": "unclassified_tcp", "frame_number": 70797, "timestamp_epoch": "1634917261.174918000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf54c000000170303003d3fff4832234efecec4b580da7a773244c9932cce4d806ce7c0cda3e6b1e1bc8adc3577a039eccdb627bc4669c57f1ad4363f88ca364d8c18b2a13f4487" } }, { "event_id": "evt-7d6d8e0f94704b6b105d0e76", "kind": "unclassified_tcp", "frame_number": 70801, "timestamp_epoch": "1634917261.870503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c33000000170303002400000000000000027221094c6c895ae037d7e44faaea763c5980ef0d0bb36f1a1e166d3d" } }, { "event_id": "evt-7b040083c9d9691be563bdb5", "kind": "unclassified_tcp", "frame_number": 70806, "timestamp_epoch": "1634917262.273985000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5280000001703030019d670f6643139382621b47ef715da798b2315b93e2aa24e0d4b" } }, { "event_id": "evt-ca388b2a527e022fa706868f", "kind": "unclassified_tcp", "frame_number": 70809, "timestamp_epoch": "1634917262.604722000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5410000001703030032639b97e8b0ab5c28ddb03f7506da157e18fb7eb84ece21c523d1867a96fa69b46ff38696b8b97a336c79cbf83247acc00cca" } }, { "event_id": "evt-c436f2c575b504b9dae5fe9d", "kind": "unclassified_tcp", "frame_number": 70814, "timestamp_epoch": "1634917262.981377000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf54b000000170303003c3c812f50e8f8766e67414ec0600154448ad825c7c5b4d4a820c5bd59476556d0d03a8bb6770dc0c2d704b77e339b2ad192666ad0b73e9b2b3f4b2cfc" } }, { "event_id": "evt-e6a6b1c8737e035987250196", "kind": "unclassified_tcp", "frame_number": 70819, "timestamp_epoch": "1634917263.271845000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5260000001703030017cac1ecad8eac76e9e4dee1eee68ae9705ef4bc14139a21" } }, { "event_id": "evt-16c9d0478d19949016864893", "kind": "unclassified_tcp", "frame_number": 70823, "timestamp_epoch": "1634917263.449790000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030065980c000000197b" } }, { "event_id": "evt-1ee32ba691f60d5ee919de80", "kind": "unclassified_tcp", "frame_number": 70826, "timestamp_epoch": "1634917263.554764000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf5450000001703030036829d5b3e87266b97ef1b4a05071ed19ba2c2ad991fd1bfc92347c0bb15f0bc48a012c8e238e543fbb8d1cfc7684f7a89f71b9ebee92e" } }, { "event_id": "evt-d1aa6b345bcd1cb017acfafc", "kind": "unclassified_tcp", "frame_number": 70829, "timestamp_epoch": "1634917263.661178000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065980e00000005020002" } }, { "event_id": "evt-b76724abab8c05807bb57d66", "kind": "unclassified_tcp", "frame_number": 70830, "timestamp_epoch": "1634917263.661675000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030065980c0000000502" } }, { "event_id": "evt-619d9ba3235bde00ad256cf3", "kind": "unclassified_tcp", "frame_number": 70832, "timestamp_epoch": "1634917263.864448000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f3a04ee73708927166a4b646", "kind": "unclassified_tcp", "frame_number": 70837, "timestamp_epoch": "1634917264.005126000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c39000000170303002a8d66cc18ca11beb0140a664c6b50ae1921bb35a1bf73ed2179f4bea72df051c13d892c6e45ea44497fa9" } }, { "event_id": "evt-d66e0ec32fec33cc2cbf8465", "kind": "unclassified_tcp", "frame_number": 70840, "timestamp_epoch": "1634917264.122248000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300659820000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d0d3a8284a07d4d5297dfa96", "kind": "unclassified_tcp", "frame_number": 70841, "timestamp_epoch": "1634917264.122796000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030065980c0000000100" } }, { "event_id": "evt-89138ed49f44beb1ae8a42ae", "kind": "unclassified_tcp", "frame_number": 70844, "timestamp_epoch": "1634917264.164975000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf54e000000170303003f9ad754d9ed1af0d9e5b3ea39687217739efedcc388c6d5f15f6293a8014fce3e2dab5e3877f02c8b0ab075aacda8745e8dc9b5a1b2b14968196d1caab43299" } }, { "event_id": "evt-6ea2a833cdda04964007c8a2", "kind": "unclassified_tcp", "frame_number": 70847, "timestamp_epoch": "1634917264.307492000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c4500000017030300360000000000000003f5cafa271d461da99c0f08f962ae19199c8079838a07b22777e4a084c3983d270701894b8f9205880fab4ccbbd1e" } }, { "event_id": "evt-71013cbdea46842221c6c651", "kind": "unclassified_tcp", "frame_number": 70851, "timestamp_epoch": "1634917264.560718000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100bcf522000000170303001312dc2cd2a6aa9f6815bf19f661903a1be053520407030065981e000000050100030d6d782e63656c6c656e6f2e69740019" } }, { "event_id": "evt-13835f3fd3f18becae3b7e2b", "kind": "unclassified_tcp", "frame_number": 70855, "timestamp_epoch": "1634917264.754340000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100bcf50a000000" } }, { "event_id": "evt-d4cfec916e6f065a41c2151d", "kind": "unclassified_tcp", "frame_number": 70863, "timestamp_epoch": "1634917264.768093000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c39000000170303002a8d66cc18ca11beb1374d0c57be5292190e37008a189abdfb49dabba7a6851e72991e58b6bd8cfbde60b2" } }, { "event_id": "evt-5f3910b6562a0c84eae6f772", "kind": "unclassified_tcp", "frame_number": 70868, "timestamp_epoch": "1634917264.933752000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300659814000000050000010a0a169cc3db" } }, { "event_id": "evt-15474e0b8e0e7e2fd53a7e98", "kind": "unclassified_tcp", "frame_number": 70871, "timestamp_epoch": "1634917265.106849000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065985a000000323230206d782e63656c6c656e6f2e69742045534d54502049636557617270204465657020436173746c6520313b204672692c203232204f637420323032312031373a34313a3035202b303230300d0a" } }, { "event_id": "evt-da1f1df8916a3f95b0a300bc", "kind": "unclassified_tcp", "frame_number": 70873, "timestamp_epoch": "1634917265.118215000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c35000000170303002600000000000000041998eaee7de8a97db50a6eed2fbc941e1de6f0161d2b9b1eea459319a0db" } }, { "event_id": "evt-3f2099aa410bb1ff0b90d5ef", "kind": "unclassified_tcp", "frame_number": 70882, "timestamp_epoch": "1634917265.531593000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065981a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-ce80f22b1bfa4f188bebd18f", "kind": "unclassified_tcp", "frame_number": 70887, "timestamp_epoch": "1634917265.728873000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006598f90000003235302d6d782e63656c6c656e6f2e69742048656c6c6f206c6f63616c686f7374205b3137332e36362e3134362e3131325d2c20706c656173656420746f206d65657420796f752e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d53495a452032303937313532300d0a3235302d4558504e0d0a3235302d4554524e0d0a3235302d4154524e0d0a3235302d44534e0d0a3235302d434845434b504f494e540d0a3235302d384249544d494d450d0a3235302d4155544820504c41494e204c4f47494e204449474553542d4d4435204352414d2d4d44350d0a3235302048454c500d0a" } }, { "event_id": "evt-c456e5b4384262fea77ff07e", "kind": "unclassified_tcp", "frame_number": 70890, "timestamp_epoch": "1634917266.297042000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065981600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-21f337e82a5834b02d620d65", "kind": "unclassified_tcp", "frame_number": 70895, "timestamp_epoch": "1634917266.489760000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065981c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-1dbbce97b54969c11f6f492b", "kind": "unclassified_tcp", "frame_number": 70898, "timestamp_epoch": "1634917266.990330000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006598300000005a693570595778705147787063326c6c596d4679644739736232316c6153357064413d3d0d0a" } }, { "event_id": "evt-97a68ea96a08ba798a0cd7fc", "kind": "unclassified_tcp", "frame_number": 70901, "timestamp_epoch": "1634917267.021153000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9795003d4c408f56ddd6a745", "kind": "unclassified_tcp", "frame_number": 70905, "timestamp_epoch": "1634917267.182394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065981c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-f505ef244744185727d43a2e", "kind": "unclassified_tcp", "frame_number": 70908, "timestamp_epoch": "1634917267.450059000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006598180000005a6d566b5a584a705932453d0d0a" } }, { "event_id": "evt-10fcb6c3c1e5fa00b985a36a", "kind": "unclassified_tcp", "frame_number": 70913, "timestamp_epoch": "1634917267.628892000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065982f00000032333520322e302e302041757468656e7469636174696f6e207375636365737366756c0d0a" } }, { "event_id": "evt-8e661aa2dad0e34d25a5767d", "kind": "unclassified_tcp", "frame_number": 70916, "timestamp_epoch": "1634917267.868171000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065983f0000004d41494c2046524f4d3a3c662e69616c69406c69736965626172746f6c6f6d65692e69743e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-578abe19101dfd933022b2d4", "kind": "unclassified_tcp", "frame_number": 70921, "timestamp_epoch": "1634917268.049890000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030065984600000035303120352e372e31203c662e69616c69406c69736965626172746f6c6f6d65692e69743e2e2e2e205065726d697373696f6e2064656e6965640d0a" } }, { "event_id": "evt-df6450bff69d70494f9981d9", "kind": "unclassified_tcp", "frame_number": 70925, "timestamp_epoch": "1634917268.190030000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c4800000017030300398d66cc18ca11beb2354ac5c22ec98baa8550c971e2bb89fc17258ecebdadc8307ad68ddede680dd8d37f30ecca511fb8878aeabb0ae324d3aa" } }, { "event_id": "evt-68cface42e935a5db79b696c", "kind": "unclassified_tcp", "frame_number": 70928, "timestamp_epoch": "1634917268.286822000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030065980a000000" } }, { "event_id": "evt-702bf0df6e0bd328755fd5fc", "kind": "unclassified_tcp", "frame_number": 70934, "timestamp_epoch": "1634917268.620964000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c2a000000170303001b00000000000000052797a9ea245f0642fa3ec69e1a12d29e25faea" } }, { "event_id": "evt-b66a2e142efe6524a1ac111c", "kind": "unclassified_tcp", "frame_number": 70943, "timestamp_epoch": "1634917270.166615000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c4300000017030300348d66cc18ca11beb3893b207d26d52a5ccbf620e018c095a32d6231b9db1b01210373dd23fd3efdd8e8d3169a0dacfff7a2a41dd7" } }, { "event_id": "evt-0f90cf795befe492eb15a69a", "kind": "unclassified_tcp", "frame_number": 70946, "timestamp_epoch": "1634917270.507182000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c2d000000170303001e00000000000000060dcb50541a3c5796943d9fad2e9d9e4f19fe9ee4778a" } }, { "event_id": "evt-dfeb23ac9d0a7c06f8c4ef09", "kind": "unclassified_tcp", "frame_number": 70952, "timestamp_epoch": "1634917270.985130000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200121c7600000017030300488d66cc18ca11beb49d4e77975e7b40b579d846de1ec733cf98e108b69d33b7222ee336580be7b4bba73da30573d39d1ff87b9288a34df54a4f3e3cb94fc26bf663be1f2703c66ee0150303001a8d66cc18ca11beb5d57174fdfb5ba1c34541e77f31bb10c030eb" } }, { "event_id": "evt-87276b34d4f07efd79ae6886", "kind": "unclassified_tcp", "frame_number": 70956, "timestamp_epoch": "1634917270.985715000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200121c0a000000" } }, { "event_id": "evt-269de8d73aedc51699c2b7ae", "kind": "unclassified_tcp", "frame_number": 70958, "timestamp_epoch": "1634917272.053628000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0d9c33a06287ebdacb8b3070", "kind": "unclassified_tcp", "frame_number": 70968, "timestamp_epoch": "1634917275.489847000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701005b060c000000197b" } }, { "event_id": "evt-119d42ef66076354b9bd9d00", "kind": "unclassified_tcp", "frame_number": 70970, "timestamp_epoch": "1634917275.673097000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b060e00000005020002" } }, { "event_id": "evt-3ffd052c4d9b532adc34090d", "kind": "unclassified_tcp", "frame_number": 70971, "timestamp_epoch": "1634917275.673467000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701005b060c0000000502" } }, { "event_id": "evt-35de061561a73d3de0b574cf", "kind": "unclassified_tcp", "frame_number": 70973, "timestamp_epoch": "1634917276.065202000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b0620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e0cdf66a2128ffd318a74f75", "kind": "unclassified_tcp", "frame_number": 70974, "timestamp_epoch": "1634917276.065611000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701005b060c0000000100" } }, { "event_id": "evt-fd8493206270d5180b118134", "kind": "unclassified_tcp", "frame_number": 70976, "timestamp_epoch": "1634917276.411134000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b06210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-719617547b1af2f07502b4ce", "kind": "unclassified_tcp", "frame_number": 70981, "timestamp_epoch": "1634917276.924890000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b0614000000050000010a0a169cc3dc" } }, { "event_id": "evt-7dc2b5a6253a4303a40f911a", "kind": "unclassified_tcp", "frame_number": 70983, "timestamp_epoch": "1634917277.100780000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4892f441fbced665cc2d5b7f", "kind": "unclassified_tcp", "frame_number": 70987, "timestamp_epoch": "1634917278.256279000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b064000000032323020736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-2a083bf996aba14607522c8c", "kind": "unclassified_tcp", "frame_number": 70990, "timestamp_epoch": "1634917278.611413000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b061a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8b57c467f8fc74e212d3564a", "kind": "unclassified_tcp", "frame_number": 70995, "timestamp_epoch": "1634917279.074512000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b06820000003235302d736d74702d39372d33352e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-8e1a2982dc953fd58d50f8a7", "kind": "unclassified_tcp", "frame_number": 70998, "timestamp_epoch": "1634917279.548431000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b06140000005354415254544c530d0a" } }, { "event_id": "evt-8855345ee366daa26cdf4eea", "kind": "unclassified_tcp", "frame_number": 71003, "timestamp_epoch": "1634917279.996122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b061d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-a3cc64558e6ed5f6337c619d", "kind": "unclassified_tcp", "frame_number": 71006, "timestamp_epoch": "1634917280.507503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702000faa0c000000197b" } }, { "event_id": "evt-f61ab34af04e9d23460722f2", "kind": "unclassified_tcp", "frame_number": 71008, "timestamp_epoch": "1634917280.692560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d3416d71538b387f61a691f9", "kind": "unclassified_tcp", "frame_number": 71009, "timestamp_epoch": "1634917280.692978000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702000faa0c0000000502" } }, { "event_id": "evt-2e004109083eccb3c0a8c7b7", "kind": "unclassified_tcp", "frame_number": 71013, "timestamp_epoch": "1634917280.988002000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-45e17f9100530f6680590915", "kind": "unclassified_tcp", "frame_number": 71014, "timestamp_epoch": "1634917280.988570000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702000faa0c0000000100" } }, { "event_id": "evt-7c9db2345e0d1f79bbe38d48", "kind": "unclassified_tcp", "frame_number": 71016, "timestamp_epoch": "1634917281.365490000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa1d000000050100030c6d74612e3231636e2e636f6d0019" } }, { "event_id": "evt-dc0aff592540a59356606891", "kind": "unclassified_tcp", "frame_number": 71021, "timestamp_epoch": "1634917281.741063000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa14000000050000010a0a169cc3dd" } }, { "event_id": "evt-3fd3e72a46e5e27147f792f4", "kind": "unclassified_tcp", "frame_number": 71024, "timestamp_epoch": "1634917282.033205000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa18000000323230203231636e2e636f6d0d0a" } }, { "event_id": "evt-3e9abecb9c34caabf255a137", "kind": "unclassified_tcp", "frame_number": 71027, "timestamp_epoch": "1634917282.133363000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-40e766aa19eedb4f2b5dc483", "kind": "unclassified_tcp", "frame_number": 71029, "timestamp_epoch": "1634917282.298349000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b332b86dc96f1c09d7d2232b", "kind": "unclassified_tcp", "frame_number": 71034, "timestamp_epoch": "1634917282.479630000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b1619619a21a7283300cf76d", "kind": "unclassified_tcp", "frame_number": 71038, "timestamp_epoch": "1634917282.588399000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa400000003235302d6d61696c0d0a3235302d5354415254544c530d0a3235302d41555448204c4f47494e0d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-52233e0386b4979811b2c3f0", "kind": "unclassified_tcp", "frame_number": 71041, "timestamp_epoch": "1634917283.049570000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa140000005354415254544c530d0a" } }, { "event_id": "evt-bf98f6964c39fd756b7aef97", "kind": "unclassified_tcp", "frame_number": 71046, "timestamp_epoch": "1634917283.375427000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa2200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-687e5c845678bcc64f480a8b", "kind": "unclassified_tcp", "frame_number": 71049, "timestamp_epoch": "1634917283.680608000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cfdf6c2ea52eed14d64e1ae2", "kind": "unclassified_tcp", "frame_number": 71054, "timestamp_epoch": "1634917284.195149000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3d8d3040dcc0d6c949d18b2b", "kind": "unclassified_tcp", "frame_number": 71059, "timestamp_epoch": "1634917284.771712000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9442b0e1521f501974cfc970", "kind": "unclassified_tcp", "frame_number": 71063, "timestamp_epoch": "1634917284.772372000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701005b060a000000" } }, { "event_id": "evt-e6e0a0bb4a13125336138cd1", "kind": "unclassified_tcp", "frame_number": 71065, "timestamp_epoch": "1634917285.139934000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701005b06480100001603030106100001020100219ac0bdd0b827454739ebeada0a3170ae2a04d37c5ecbe2e6efb0268cbbec878d528216ed23306f59abe3900ad597226858aa0875a39e91b4856127044653aa641f4595367b3adb71ee07a611af967964edc95d7d87f2188bd36f5e4067545c7a4f62db2233938a939c47b2711f2c112d9da6ad022f5016128f905bda455562177bcb74db7ccf3969e1197a2f37d94877b32cf17a5b9dbc67663884daa36b1c4a4c5418cdab1316aa3b7a97aaf31e58f2208382f735e0df16568ee070af14259ba4137da63e9b4486c9977309b97376d46e1c212ae3984abcd235dfe75989878bbdb724cf60afb45be0b665498608c5be6aba67392dfdcd137c6d1c28c95ebc14030300010116030300280000000000000000979496b7d45a8362c3e621665e877639a68eb46371f64443de3ceff4c6826523" } }, { "event_id": "evt-50ab3600b28bc0fe8b38f538", "kind": "unclassified_tcp", "frame_number": 71070, "timestamp_epoch": "1634917285.140957000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ee14e49b6711cee5bbe4d723", "kind": "unclassified_tcp", "frame_number": 71071, "timestamp_epoch": "1634917285.140978000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f9ef0a6f4607b61091b942b1", "kind": "unclassified_tcp", "frame_number": 71072, "timestamp_epoch": "1634917285.140989000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0b34b0f430b3ea2108a94418", "kind": "unclassified_tcp", "frame_number": 71075, "timestamp_epoch": "1634917285.141261000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa7e000000492ecbea5a120fa4320a4dbef21aea97e7f18f594318dcae64e44da95413c84d405722791dcd18e37948125f031c1a5163d7e4ce2a39f1990adb1703030035d1282dd8003785e784d1406699ddcebc042b480e3f9deace6f2e84e365d92c499e08eb832d0a43b71e8ba7fff5556403457e77ca11" } }, { "event_id": "evt-6e0e57c030179094a1710cd9", "kind": "unclassified_tcp", "frame_number": 71078, "timestamp_epoch": "1634917285.348489000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030075000c000000197b" } }, { "event_id": "evt-19981860a7e7825b10e362d5", "kind": "unclassified_tcp", "frame_number": 71080, "timestamp_epoch": "1634917285.629512000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075000e0000000502000202070100fb260c000000197b04070100fb260e00000005020002" } }, { "event_id": "evt-3043d44ed4c1a325da2da36f", "kind": "unclassified_tcp", "frame_number": 71081, "timestamp_epoch": "1634917285.630428000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030075000c000000050203070100fb260c0000000502" } }, { "event_id": "evt-b7e988c0a7d0245a65407f7f", "kind": "unclassified_tcp", "frame_number": 71083, "timestamp_epoch": "1634917285.934920000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa7000000014030300010117030300351e5bd96d1cfa3a53d61c304bf8d865480152a7e38fade998f6e6bb260821ea8d66921e51c99dab3205b7d73b44f963e400d48e31c4170303002183d5ebd5648b0854fe4a0ea478c4c4a526c51f57647786f6f2fe4b1c076b3b71f3" } }, { "event_id": "evt-512b3022ed46eb57b87efd29", "kind": "unclassified_tcp", "frame_number": 71087, "timestamp_epoch": "1634917286.146160000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb2620000000010432356d630f356f504d44384828685558534a2a5704070300750020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-83592cee878b6b03ac5d00a5", "kind": "unclassified_tcp", "frame_number": 71088, "timestamp_epoch": "1634917286.146850000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100fb260c00000001000307030075000c0000000100" } }, { "event_id": "evt-5ac19c059c380dae33766fc9", "kind": "unclassified_tcp", "frame_number": 71091, "timestamp_epoch": "1634917286.252151000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6e8abe2c4601a32b23cbff7a", "kind": "unclassified_tcp", "frame_number": 71094, "timestamp_epoch": "1634917286.365494000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-8015e9b3e771e9740dae1621", "kind": "unclassified_tcp", "frame_number": 71097, "timestamp_epoch": "1634917286.573030000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa5600000017030300473162d7e82f73579340939fe3832fb8cf39238ad89e00c14e32001c2d45e0cb790b2a8e515e6be3d8c98d952294cbf79382869b40fdfeaceef969c9c7b47b2362da06343f15875f" } }, { "event_id": "evt-da211fcda019883a64c59158", "kind": "unclassified_tcp", "frame_number": 71100, "timestamp_epoch": "1634917286.959516000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb26210000000501000310736d74702e73696e612e636f6d2e636e00190407030075001e000000050100030d736d74702e6a756e6f2e636f6d0019" } }, { "event_id": "evt-f4a21cc4d49b32749c3c7f36", "kind": "unclassified_tcp", "frame_number": 71108, "timestamp_epoch": "1634917287.050463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300750014000000050000010a0a169cc3df" } }, { "event_id": "evt-cf149d08516e595964ce9707", "kind": "unclassified_tcp", "frame_number": 71113, "timestamp_epoch": "1634917287.134621000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075002c00000032323020736d74706f757430342e7667732e756e74642e636f6d2045534d54500d0a" } }, { "event_id": "evt-e931fa177947f2606d471070", "kind": "unclassified_tcp", "frame_number": 71115, "timestamp_epoch": "1634917287.166928000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa2c000000170303001dd5782cbec68b388e8f68569330b2c70e6bf08dfe0098013644f0abd088" } }, { "event_id": "evt-64d38b5cb78393fa692dea2a", "kind": "unclassified_tcp", "frame_number": 71121, "timestamp_epoch": "1634917287.450378000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa320000001703030023bbd91cf7919f494e867dd5980e2783c51ae5ea04bc1033958f099dde50bf32c84fc2c5" } }, { "event_id": "evt-8af3ff85fcbda9b8b1a55b61", "kind": "unclassified_tcp", "frame_number": 71123, "timestamp_epoch": "1634917287.481443000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075001a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-48d8ef004de78a2e727826a7", "kind": "unclassified_tcp", "frame_number": 71129, "timestamp_epoch": "1634917287.569911000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075009e0000003235302d736d74706f757430342e7667732e756e74642e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e657420706c656173656420746f206d65657420796f750d0a3235302d53495a450d0a3235302d384249544d494d450d0a3235302d41555448204c4f47494e20504c41494e204352414d2d4d44350d0a3235302048454c500d0a" } }, { "event_id": "evt-28fc8c521e5df77226eb11e5", "kind": "unclassified_tcp", "frame_number": 71132, "timestamp_epoch": "1634917287.730808000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa360000001703030027a4b971f7c0376d58edae42ef15bddf122b5504a989b12d65092687e8457d70654bb1fb2f429b65" } }, { "event_id": "evt-acc3758ee124acb219ab262b", "kind": "unclassified_tcp", "frame_number": 71138, "timestamp_epoch": "1634917288.038168000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa3200000017030300234d48970de003f93efdd88ade1546caa1615d29f5b6a6d2171dc9a5a014d23d5314fe7a" } }, { "event_id": "evt-126ef20afbc26757afdd3e19", "kind": "unclassified_tcp", "frame_number": 71141, "timestamp_epoch": "1634917288.147279000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7c0ea7fd4552f580289650b0", "kind": "unclassified_tcp", "frame_number": 71145, "timestamp_epoch": "1634917288.344507000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb2614000000050000010a0a169cc3de" } }, { "event_id": "evt-ec1c515a587a749b4c64d977", "kind": "unclassified_tcp", "frame_number": 71147, "timestamp_epoch": "1634917288.450294000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa2e000000170303001fda119165abf9c21d2b13f474cce92ebb95e73f323179a9cc8d4a719eca9622" } }, { "event_id": "evt-3ce2c6cabfec987e5fdb910d", "kind": "unclassified_tcp", "frame_number": 71151, "timestamp_epoch": "1634917288.637544000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075001600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-9af7105babf4af33ce79c813", "kind": "unclassified_tcp", "frame_number": 71156, "timestamp_epoch": "1634917288.710074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075001c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-38cf0815571d36ded3a8792d", "kind": "unclassified_tcp", "frame_number": 71160, "timestamp_epoch": "1634917288.825112000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa3f0000001703030030551cbf1fb4caa0df3267cd4ff392cd97b937a15769064794311372618133bbfff83df263cac3f7d27fd02a6178fe15bc" } }, { "event_id": "evt-4f6431cba520396b1c0f8f4b", "kind": "unclassified_tcp", "frame_number": 71163, "timestamp_epoch": "1634917288.981486000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007500200000005a47467a5a484e41616e56756279356a6232303d0d0a" } }, { "event_id": "evt-83c4acd8c4c70e0575425248", "kind": "unclassified_tcp", "frame_number": 71168, "timestamp_epoch": "1634917289.074073000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075001c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-68bcef21e08c510640efa6c1", "kind": "unclassified_tcp", "frame_number": 71171, "timestamp_epoch": "1634917289.324521000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa4b000000170303003c97ba137af3d2baa7f58480253f8e8cad93fe2f1379c71f00c8d3e86815c1d23e834d1e75b253c3b043643a9fe9ef33081af0586a49c0466cb51f1c6a" } }, { "event_id": "evt-041ed52d311d8fb72e1eddb7", "kind": "unclassified_tcp", "frame_number": 71175, "timestamp_epoch": "1634917289.504555000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007500140000004d54497a4e4455320d0a" } }, { "event_id": "evt-cf2cafef71846204af5db706", "kind": "unclassified_tcp", "frame_number": 71180, "timestamp_epoch": "1634917289.572650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075003800000032333520736d74706f757430342e7667732e756e74642e636f6d2061757468206f6b2c20676f2061686561640d0a" } }, { "event_id": "evt-b21e02f65d489418ad972236", "kind": "unclassified_tcp", "frame_number": 71184, "timestamp_epoch": "1634917289.619595000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa280000001703030019911d2313e5458cb87c66be1bc156d164e719975b59e3cb4d45" } }, { "event_id": "evt-e846eeb6153b00c7e3d094fe", "kind": "unclassified_tcp", "frame_number": 71188, "timestamp_epoch": "1634917289.806850000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb264000000032323020736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-bec889db27bf1a2309a12534", "kind": "unclassified_tcp", "frame_number": 71190, "timestamp_epoch": "1634917289.822326000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703007500340000004d41494c2046524f4d3a3c6461736473406a756e6f2e636f6d3e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-28de18cafab6d5cb39816d12", "kind": "unclassified_tcp", "frame_number": 71196, "timestamp_epoch": "1634917289.889202000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075002b000000323530206461736473406a756e6f2e636f6d2e2e2e2053656e646572204f4b0d0a" } }, { "event_id": "evt-f31ac3db745bed6ae87cd20d", "kind": "unclassified_tcp", "frame_number": 71199, "timestamp_epoch": "1634917290.114703000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa4100000017030300324862aeb6aed7d93d0e6721a9a8cb9fa61ab4d7ec7c87b4583a512d05cf8a0289671e0f6e17dc3dc60323ecbde34661841a36" } }, { "event_id": "evt-3fb7260425c3cc0f2d6d114d", "kind": "unclassified_tcp", "frame_number": 71203, "timestamp_epoch": "1634917290.293389000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb261a00000045484c4f206c6f63616c686f73740d0a0407030075002b0000005243505420544f3a3c616e6472655f73616e74616e61406d61696c2e72753e0d0a" } }, { "event_id": "evt-983a2cce6e2bfd04bad03f9a", "kind": "unclassified_tcp", "frame_number": 71210, "timestamp_epoch": "1634917290.385376000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075003500000032353020616e6472655f73616e74616e61406d61696c2e72752e2e2e20526563697069656e74204f4b0d0a" } }, { "event_id": "evt-d26d3408ecd946cac6b02adf", "kind": "unclassified_tcp", "frame_number": 71213, "timestamp_epoch": "1634917290.423455000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa4b000000170303003c6ccda032be180d5ec5a90241990e29cc645cf7fc1f766c457b221922c1d3bf445b11ae9497b2e3bf3fd3fb3f22f81aeadc7f4cddab7eff431d279471" } }, { "event_id": "evt-0e43d7eb81ce0851ad2ddda4", "kind": "unclassified_tcp", "frame_number": 71217, "timestamp_epoch": "1634917290.748091000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300750010000000444154410d0a" } }, { "event_id": "evt-a70e2d72fedb5a241e0d7cf6", "kind": "unclassified_tcp", "frame_number": 71221, "timestamp_epoch": "1634917290.749115000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb26820000003235302d736d74702d39372d32372e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-7f7fb99a35fc975016a9eab3", "kind": "unclassified_tcp", "frame_number": 71225, "timestamp_epoch": "1634917290.838598000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030075003c00000033353420456e746572206d61696c2c20656e64207769746820222e22206f6e2061206c696e6520627920697473656c660d0a" } }, { "event_id": "evt-9d0529967e478487bb7309fb", "kind": "unclassified_tcp", "frame_number": 71230, "timestamp_epoch": "1634917291.158066000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa2600000017030300179635546d5f316b51a3f5b9d0a2930c948f5296a9d378ad" } }, { "event_id": "evt-d250554b13f02046bd4262ea", "kind": "unclassified_tcp", "frame_number": 71235, "timestamp_epoch": "1634917291.468342000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa450000001703030036b51dccfa9c4962237b8af683db361a8e86c76cc1d9d184e23133d69e752f8a24c6fa00978e23c3bf468ec89079d522d97d6f8cca5582" } }, { "event_id": "evt-f2b4140c8c9dd6b9e53c6967", "kind": "unclassified_tcp", "frame_number": 71238, "timestamp_epoch": "1634917291.591344000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a75efb00d827c12c805d14bd", "kind": "unclassified_tcp", "frame_number": 71246, "timestamp_epoch": "1634917291.667282000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300750089000000353530204d45535341474520424c4f434b45442e204348414e474520594f55522050415353574f524420544f2052452d53454e4420594f5552204d45535341474520414e4420544f204d41494e5441494e204f4e474f494e4720534543555249545920415420485454503a2f2f5745424d41494c2e4a554e4f2e434f4d2f0a" } }, { "event_id": "evt-f80e7d53c22ca55ce0ecaab8", "kind": "unclassified_tcp", "frame_number": 71250, "timestamp_epoch": "1634917291.667787000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030075000a000000" } }, { "event_id": "evt-635468c4c3570e718442af00", "kind": "unclassified_tcp", "frame_number": 71252, "timestamp_epoch": "1634917291.791421000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-01f3f98844f2d5a028d62b49", "kind": "unclassified_tcp", "frame_number": 71257, "timestamp_epoch": "1634917291.975198000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb261d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-6edcc87dd0624369110ee9dd", "kind": "unclassified_tcp", "frame_number": 71261, "timestamp_epoch": "1634917292.077708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa4e000000170303003fa8a0d2f0a4670e3ff574f899226e5b3e8e635eeefb7b5b98022bb4117de50355ad2fae7846a174e00982db48ab5efef83e93f7f74d4a0412420635c4717f36" } }, { "event_id": "evt-51a0f3c468384608e55a6542", "kind": "unclassified_tcp", "frame_number": 71264, "timestamp_epoch": "1634917292.403109000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-778195cd123ce1f66aea0814", "kind": "unclassified_tcp", "frame_number": 71268, "timestamp_epoch": "1634917292.603413000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702000faa220000001703030013b273291ea28b2acecd03e2c85b4fcbdd874702050702000faa0a000000" } }, { "event_id": "evt-e89177915ad2283255fbe369", "kind": "unclassified_tcp", "frame_number": 71275, "timestamp_epoch": "1634917292.782424000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb267605000016030300510200004d03036edd49ad25e059a42c3a691670afb6f206ec2c919f828da984fab08ada2a676520ea0d428472797abd1a94b55964980bffcd5500346451ba45cf2327abffca4a0f009c000005ff010001001603030bfe0b000bfa000bf70006d3308206cf308205b7a003020102021001021b75fe3940175a34ab49a5290525300d06092a864886f70d01010b0500305f310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d311e301c0603550403131547656f547275737420434e20525341204341204731301e170d3139313032323030303030305a170d3232303132303132303030305a30818c310b300906035504061302434e3110300e060355040813074265696a696e67312a3028060355040a132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c7464312a3028060355040b132153696e612e636f6d20546563686e6f6c6f6779284368696e6129436f2e2c6c74643113301106035504030c0a2a2e73696e612e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afca8a8e52c691e3f0acf73d511dca772206440ebad2392ed09cd40708006010432db966d2bd0e98f1a3a0b8d7741f1fccfef8ec9730b5858a904720a96f065757b71805efecb702536f108dd2853a2fbc55c28c5c565776c09777de66d5ffa3207e2f15cd798b657873c9d68749e8a431a8cdd5ce6d3df49d72ce85e1c59adf62627b1134e93a91cac7278e9337c89020afd4a14c0cfadc6a8d2e9f6d27451ee97cd94de0adc2c3f807bb3c6a43e31aadb0fe2f7a3c7d968bc2b4c7c4676db1a3947d7b238c35d2ee206e133c830d43db28a16bb3ba7ab6f4803e88c379088121cc0e247eb96b89476268b83749b020402f8525e2d3bb83e29b216fcfa2e5a70203010001a382035730820353301f0603551d23041830168014919f5e3115ae109fad60c1f7c1ccaa48342f0c26301d0603551d0e04160414c6cddfc1597f2dcba3570852d940e8d0a2e9c5c0301f0603551d1104183016820a2a2e73696e612e636f6d820873696e612e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230750603551d1f046e306c3034a032a030862e687474703a2f2f63726c332e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c3034a032a030862e687474703a2f2f63726c342e64696769636572742e636f6d2f47656f5472757374434e525341434147312e63726c304c0603551d2004453043303706096086480186fd6c0101302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f4350533008060667810c010202306f06082b0601050507010104633061302106082b060105050730018615687474703a2f2f6f6373702e64636f6373702e636e303c06082b060105050730028630687474703a2f2f63726c2e64696769636572742d636e2e636f6d2f47656f5472757374434e525341434147312e63727430090603551d13040230003082017e060a2b06010401d6790204020482016e0482016a0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df237acfc000004030047304502206a9c64dcfed001f85a13ae5ddbd38b8f0957fd13e4f227a5d1ebe53e86916d54022100b0d2e6c3c70cb0c731ce01873608b1a4218cf30970ab1c1982658c5dacc988d10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df237ad31000004030046304402206160c5" } }, { "event_id": "evt-0c384167ec784a78100dff6c", "kind": "unclassified_tcp", "frame_number": 71280, "timestamp_epoch": "1634917292.786151000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1e151ead1f2b8c363b762fba", "kind": "unclassified_tcp", "frame_number": 71281, "timestamp_epoch": "1634917292.786172000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-152299b6124e8f114e84f21f", "kind": "unclassified_tcp", "frame_number": 71286, "timestamp_epoch": "1634917293.195553000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cb9b91dbd715fd2c52e5bbe0", "kind": "unclassified_tcp", "frame_number": 71288, "timestamp_epoch": "1634917293.364851000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c49039b9d309dd02db04616b", "kind": "unclassified_tcp", "frame_number": 71293, "timestamp_epoch": "1634917293.820300000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb263d00000014030300010116030300280d8b058ea66d8f793da7871cb84e3294c9140b001ec82bfe6872ddd11c804c97a23a3de5b89fc433" } }, { "event_id": "evt-47a0e20a949ebcdb59a61455", "kind": "unclassified_tcp", "frame_number": 71296, "timestamp_epoch": "1634917294.208816000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb263700000017030300280000000000000001d29a58159d10be664c6969d19b3977de3af2bfc7fbfa906c9a812cde6d13db3d" } }, { "event_id": "evt-44d61e4b22a515d696b27469", "kind": "unclassified_tcp", "frame_number": 71301, "timestamp_epoch": "1634917294.642922000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb269f00000017030300900d8b058ea66d8f7a7274d946a045b22ec1642bb332a5253d061810a1bdc307e226ff48d05d11a4cfcd1d43319533139b29662bff20b974d209d7178b0abc7990a7161495cfac25154c053f551288a11ec7dfc7e3a356a1213c63a4fa3c5ab934f6c566b016ea1d47df9e77e4db68ee9dff3f33bcb6c702848eed05908b3f34162ccd72d9af1e071e51ff76b375f16d05" } }, { "event_id": "evt-7d1651a5f523df9ce1d0b670", "kind": "unclassified_tcp", "frame_number": 71304, "timestamp_epoch": "1634917295.663046000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb263300000017030300240000000000000002c63563ac594b6b0cad1187f1cbd87b6344d6b7fe922f7c0ebf82b0c9" } }, { "event_id": "evt-0e765978e65db93a2ca78dfa", "kind": "unclassified_tcp", "frame_number": 71309, "timestamp_epoch": "1634917296.172834000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb2639000000170303002a0d8b058ea66d8f7b005b04649a5059cf60a95a322524575b8c6554d32b9d8a6821e7d978ff3f69ced021" } }, { "event_id": "evt-ebb36eb8f3fa11b48cf2f1d9", "kind": "unclassified_tcp", "frame_number": 71312, "timestamp_epoch": "1634917296.445329000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb26450000001703030036000000000000000351816eec17fb13ea03d108bc29b3eaa70ddced55d313cbcb439beb8dbd4b88642d02f811c815b3c20ff201e467f1" } }, { "event_id": "evt-c47e9968cecbda8172c0045c", "kind": "unclassified_tcp", "frame_number": 71317, "timestamp_epoch": "1634917296.892610000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb2639000000170303002a0d8b058ea66d8f7c55b05353e0d31c933374236cfecac531788f4cf902ce4c4b80f3e2463788fb50a580" } }, { "event_id": "evt-34b76b484c275f16f00f3f91", "kind": "unclassified_tcp", "frame_number": 71320, "timestamp_epoch": "1634917297.216597000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb263500000017030300260000000000000004d0816d8c9397352a3281a58601e938ee31dbd7b98415021f5f45e7a2a75d" } }, { "event_id": "evt-4052d6c1d34712d5db56ad68", "kind": "unclassified_tcp", "frame_number": 71325, "timestamp_epoch": "1634917297.711441000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb264800000017030300390d8b058ea66d8f7d42bb3d1cd9ac25699f72c3b8a512cbefa5c5baacc2d2f08e34272ebfbd8131eaafddeed5b63dae50a8e3b2fa5f31bdf060" } }, { "event_id": "evt-a6284aca4e69e63744380a44", "kind": "unclassified_tcp", "frame_number": 71328, "timestamp_epoch": "1634917298.120584000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb262a000000170303001b0000000000000005a537b19c6eb2e600d89e3599a7f0d79d695393" } }, { "event_id": "evt-9b9922446df48621977df37e", "kind": "unclassified_tcp", "frame_number": 71332, "timestamp_epoch": "1634917298.241344000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f257f5521b5934a8abd5f42c", "kind": "unclassified_tcp", "frame_number": 71335, "timestamp_epoch": "1634917298.739935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb264300000017030300340d8b058ea66d8f7e6ccb8a8692fccda2a3e4f63f41a58f5b6c9be4c898e50509aa56a130fc9c560be33a95aa9677e308a299c7f1" } }, { "event_id": "evt-cd9d0215ee1ef8fed5853b98", "kind": "unclassified_tcp", "frame_number": 71338, "timestamp_epoch": "1634917299.070430000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb262d000000170303001e00000000000000069c79996ea8482ac6d333d47b4a79d2ac659ff0a7125c" } }, { "event_id": "evt-038103935594aac82450253b", "kind": "unclassified_tcp", "frame_number": 71344, "timestamp_epoch": "1634917299.554895000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb267600000017030300480d8b058ea66d8f7f8e8a2d54c0897999b61c4ac6e1475060961a41bff9fc848ba175cc4c99077482c97960802b9ac58504d864e991f1ca89133da7cb6541877a741dbfe828c1277f150303001a0d8b058ea66d8f80c8168cd4d884bc51d7b03f259f41f1e876d2" } }, { "event_id": "evt-412c86f0b98a413de1c009dc", "kind": "unclassified_tcp", "frame_number": 71348, "timestamp_epoch": "1634917299.555276000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100fb260a000000" } }, { "event_id": "evt-f4aa30bb9b46bd8ae6579b6d", "kind": "unclassified_tcp", "frame_number": 71350, "timestamp_epoch": "1634917299.942638000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100fb2629000000150303001a000000000000000710cd3b073ef301cc31ffd08cc7c14fc49ab7" } }, { "event_id": "evt-1ba5a891f24601ab7cf624f7", "kind": "unclassified_tcp", "frame_number": 71352, "timestamp_epoch": "1634917300.475739000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100299d0c000000197b" } }, { "event_id": "evt-ed502e9336da385e45b7adf0", "kind": "unclassified_tcp", "frame_number": 71354, "timestamp_epoch": "1634917300.783056000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100299d0e00000005020002" } }, { "event_id": "evt-ad22a42da8b5f16c84641537", "kind": "unclassified_tcp", "frame_number": 71355, "timestamp_epoch": "1634917300.783463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100299d0c0000000502" } }, { "event_id": "evt-23683370f07f3b0a0e56bfd8", "kind": "unclassified_tcp", "frame_number": 71357, "timestamp_epoch": "1634917301.295155000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100299d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a39fba489d4abb0cee344462", "kind": "unclassified_tcp", "frame_number": 71358, "timestamp_epoch": "1634917301.295720000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100299d0c0000000100" } }, { "event_id": "evt-4141275c3d4d40ecf33042b2", "kind": "unclassified_tcp", "frame_number": 71360, "timestamp_epoch": "1634917301.724792000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100299d2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-5265bbfcaf47e3092da82b08", "kind": "unclassified_tcp", "frame_number": 71365, "timestamp_epoch": "1634917303.240657000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200c5fe0c000000197b" } }, { "event_id": "evt-3abed371c35583fbe126cfea", "kind": "unclassified_tcp", "frame_number": 71366, "timestamp_epoch": "1634917303.274792000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e82c70fb7ef4d5768a30587e", "kind": "unclassified_tcp", "frame_number": 71369, "timestamp_epoch": "1634917303.442913000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c5fe0e00000005020002" } }, { "event_id": "evt-f059634b5c40490a21f8f10f", "kind": "unclassified_tcp", "frame_number": 71372, "timestamp_epoch": "1634917308.303839000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-19a5addb69892556cc14e615", "kind": "unclassified_tcp", "frame_number": 71378, "timestamp_epoch": "1634917309.930523000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100299d140000000504000100000000000003070200c5fe0c0000000502" } }, { "event_id": "evt-c5cc70bf6b5cbfd80ab4da30", "kind": "unclassified_tcp", "frame_number": 71380, "timestamp_epoch": "1634917310.204020000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100299d0a000000" } }, { "event_id": "evt-4563160364edc14fad06e9ff", "kind": "unclassified_tcp", "frame_number": 71382, "timestamp_epoch": "1634917310.511785000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c5fe20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-583c8316db44f50ff76d7430", "kind": "unclassified_tcp", "frame_number": 71383, "timestamp_epoch": "1634917310.512351000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200c5fe0c0000000100" } }, { "event_id": "evt-14185c11f65e3e80203285e7", "kind": "unclassified_tcp", "frame_number": 71385, "timestamp_epoch": "1634917311.023281000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c5fe210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-c471b8085aea8011386c0813", "kind": "unclassified_tcp", "frame_number": 71395, "timestamp_epoch": "1634917312.867248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200c5fe14000000050000010a0a169cc3e0" } }, { "event_id": "evt-0832d702d80f80c723ddecb5", "kind": "unclassified_tcp", "frame_number": 71399, "timestamp_epoch": "1634917313.208897000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200c5fe0a000000" } }, { "event_id": "evt-c999bc9d688826fc1398b2cb", "kind": "unclassified_tcp", "frame_number": 71403, "timestamp_epoch": "1634917313.351331000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fae731fc72ca7eca0f6909df", "kind": "unclassified_tcp", "frame_number": 71411, "timestamp_epoch": "1634917315.726266000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c3027786a1d44ec16d76fc3c", "kind": "unclassified_tcp", "frame_number": 71416, "timestamp_epoch": "1634917316.384096000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-51fe0ec8a5e8998771e01f03", "kind": "unclassified_tcp", "frame_number": 71418, "timestamp_epoch": "1634917318.383399000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7dbae93b1b5861e4670f134a", "kind": "unclassified_tcp", "frame_number": 71420, "timestamp_epoch": "1634917323.009975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010080ad0c000000197b" } }, { "event_id": "evt-f0fe55a38e90afbcc6f80d57", "kind": "unclassified_tcp", "frame_number": 71422, "timestamp_epoch": "1634917323.311632000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad0e00000005020002" } }, { "event_id": "evt-c051e1ef4cc1a83ce0573e61", "kind": "unclassified_tcp", "frame_number": 71423, "timestamp_epoch": "1634917323.312131000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010080ad0c0000000502" } }, { "event_id": "evt-a76e02d87311e80416f273c0", "kind": "unclassified_tcp", "frame_number": 71425, "timestamp_epoch": "1634917323.446874000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6a63ff0c20f2c0aaf744ef6a", "kind": "unclassified_tcp", "frame_number": 71427, "timestamp_epoch": "1634917324.745017000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d715a103922f9e7d699a5684", "kind": "unclassified_tcp", "frame_number": 71428, "timestamp_epoch": "1634917324.745652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010080ad0c0000000100" } }, { "event_id": "evt-95f4a81bc631aa1c0000b32c", "kind": "unclassified_tcp", "frame_number": 71430, "timestamp_epoch": "1634917325.052246000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020089970c000000197b0407020089970e00000005020002" } }, { "event_id": "evt-dccf4a3f7fb23be30a32c445", "kind": "unclassified_tcp", "frame_number": 71431, "timestamp_epoch": "1634917325.052913000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020089970c0000000502" } }, { "event_id": "evt-b3189ff4e8579fbb317dc57e", "kind": "unclassified_tcp", "frame_number": 71433, "timestamp_epoch": "1634917325.256605000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad210000000501000310736d74702e73696e612e636f6d2e636e0019" } }, { "event_id": "evt-1f11901828f80353c72fdf3d", "kind": "unclassified_tcp", "frame_number": 71436, "timestamp_epoch": "1634917325.563677000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200899720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-81e31df34230d7d17fa76e85", "kind": "unclassified_tcp", "frame_number": 71437, "timestamp_epoch": "1634917325.564304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020089970c0000000100" } }, { "event_id": "evt-aa6e71d18617208e8bb36cef", "kind": "unclassified_tcp", "frame_number": 71441, "timestamp_epoch": "1634917325.727004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad14000000050000010a0a169cc3e1" } }, { "event_id": "evt-4328977b201f50a1b5d6730c", "kind": "unclassified_tcp", "frame_number": 71443, "timestamp_epoch": "1634917326.099443000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089971e000000050100030d6d61696c2e616a65656c2e66720019" } }, { "event_id": "evt-2026421be305b6dbf962f272", "kind": "unclassified_tcp", "frame_number": 71447, "timestamp_epoch": "1634917326.383442000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030038f20c000000197b0407030038f20e0000000502000202070400a2960c000000197b04070400a2960e00000005020002" } }, { "event_id": "evt-7318591235a46358b8969908", "kind": "unclassified_tcp", "frame_number": 71455, "timestamp_epoch": "1634917328.525351000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a5d3859f942194e266945b41", "kind": "unclassified_tcp", "frame_number": 71460, "timestamp_epoch": "1634917329.866234000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030038f20c000000050203070400a2960c00000005020407010080ad4000000032323020736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-f0d42b06b19f94a5c771746e", "kind": "unclassified_tcp", "frame_number": 71463, "timestamp_epoch": "1634917330.171395000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad1a00000045484c4f206c6f63616c686f73740d0a0407030038f220000000010432356d630f356f504d44384828685558534a2a5704070400a29620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-4cc36d17170d0fb5c90f315c", "kind": "unclassified_tcp", "frame_number": 71465, "timestamp_epoch": "1634917330.171889000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030038f20c000000010003070400a2960c0000000100" } }, { "event_id": "evt-e62625b8d3c0d3ae8d295351", "kind": "unclassified_tcp", "frame_number": 71469, "timestamp_epoch": "1634917330.172257000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200899714000000050000010a0a169cc3e2" } }, { "event_id": "evt-df7a5158f0818f801e4d42f8", "kind": "unclassified_tcp", "frame_number": 71472, "timestamp_epoch": "1634917330.482508000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200899734000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-bf0797dd83f4098c4469656d", "kind": "unclassified_tcp", "frame_number": 71475, "timestamp_epoch": "1634917330.544519000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f21d000000050100030c6d74612e3231636e2e636f6d001904070400a296210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-947d6fdf76a93e96d23803ed", "kind": "unclassified_tcp", "frame_number": 71483, "timestamp_epoch": "1634917330.840811000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f214000000050000010a0a169cc3e3" } }, { "event_id": "evt-c8fc951dfc9c1ccdc05d6a87", "kind": "unclassified_tcp", "frame_number": 71485, "timestamp_epoch": "1634917331.091353000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089971a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-6b4ed90d47c008d6eb113448", "kind": "unclassified_tcp", "frame_number": 71489, "timestamp_epoch": "1634917331.129275000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f218000000323230203231636e2e636f6d0d0a" } }, { "event_id": "evt-c1a2f305e250f38235c3e1a7", "kind": "unclassified_tcp", "frame_number": 71499, "timestamp_epoch": "1634917331.238061000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008997990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-81380f9c6a7404289dc984fb", "kind": "unclassified_tcp", "frame_number": 71501, "timestamp_epoch": "1634917331.494292000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f21a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-915d97dba7a3c1680da02b37", "kind": "unclassified_tcp", "frame_number": 71508, "timestamp_epoch": "1634917331.654060000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a29614000000050000010a0a169cc3e4" } }, { "event_id": "evt-bc2bcd130d86fb9122aa0e47", "kind": "unclassified_tcp", "frame_number": 71510, "timestamp_epoch": "1634917331.681191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008997140000005354415254544c530d0a" } }, { "event_id": "evt-88a12e5f2c2560b2c9a1c291", "kind": "unclassified_tcp", "frame_number": 71514, "timestamp_epoch": "1634917331.704708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2967900000032323020534e37503232324341303032372e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34323a3130202b303030300d0a" } }, { "event_id": "evt-45559c332f11b01400284b1c", "kind": "unclassified_tcp", "frame_number": 71518, "timestamp_epoch": "1634917331.796652000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2400000003235302d6d61696c0d0a3235302d5354415254544c530d0a3235302d41555448204c4f47494e0d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-cefc53dc2fce107395036e92", "kind": "unclassified_tcp", "frame_number": 71521, "timestamp_epoch": "1634917331.829406000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089972800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-599b6c0d286112044cf5635f", "kind": "unclassified_tcp", "frame_number": 71524, "timestamp_epoch": "1634917331.860286000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070500b4a40c000000197b04070500b4a40e00000005020002" } }, { "event_id": "evt-2290157e5432d0e6eacd2b82", "kind": "unclassified_tcp", "frame_number": 71525, "timestamp_epoch": "1634917331.860942000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070500b4a40c0000000502" } }, { "event_id": "evt-47c71f60068b52e85ec650cb", "kind": "unclassified_tcp", "frame_number": 71529, "timestamp_epoch": "1634917332.246948000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad820000003235302d736d74702d39372d32332e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-90c42ba9f10f1ffc2df5b125", "kind": "unclassified_tcp", "frame_number": 71531, "timestamp_epoch": "1634917332.273914000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4ae79573019ecad8ff952a0e", "kind": "unclassified_tcp", "frame_number": 71541, "timestamp_epoch": "1634917332.326050000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296d80000003235302d534e37503232324341303032372e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-741aa0069e66bdee7fd4a3ed", "kind": "unclassified_tcp", "frame_number": 71545, "timestamp_epoch": "1634917332.435970000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c6dd09e726f4be8555cdcb8e", "kind": "unclassified_tcp", "frame_number": 71551, "timestamp_epoch": "1634917332.443661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac27de0d5c8bedd9a10b281e", "kind": "unclassified_tcp", "frame_number": 71552, "timestamp_epoch": "1634917332.443677000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "73742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d030019850400114ade5db87bdfe5931918c560770b5998663057d196158baf7a026efa8e6e71a02fcda7cfb2d430473086ac2f7c815dc7d30548aacf1059a08dbd1010e8a34112009fd08ae6ede0ad9b1058c71e870c25fa89c07a207f89216782bf1b228b24582ef6d836e5cd192f0d086ecb8038816126f5740b34ed92151fa7aa766cbeaaa686f204010200569b2fae93e871f9bba5a9e1a077f27f4096558d1e1680f6d0fdb625549abfb4e59b08d1db850d08e51dd49213b57a3d01aca3f457ba64162bcebc97e27aa2f64d76025c72158daf57edba709a899b2fab1c51ba6cbb3f3107dbd4565d7ca2eb8b39d41c07b100cb4c4db284b225e01bd9f640dd99847a8aa341e5ac9bd2917c08857089651714931305" } }, { "event_id": "evt-12f304b73b0585faf9fc8a3f", "kind": "unclassified_tcp", "frame_number": 71553, "timestamp_epoch": "1634917332.443684000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d08ea18e0cb6f16ddc8ed6f5", "kind": "unclassified_tcp", "frame_number": 71557, "timestamp_epoch": "1634917332.450309000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-62ad22ba3bac0ddf97a82639", "kind": "unclassified_tcp", "frame_number": 71558, "timestamp_epoch": "1634917332.450906000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070500b4a40c0000000100" } }, { "event_id": "evt-ac4e9dea85ddc7494fcc67e5", "kind": "unclassified_tcp", "frame_number": 71561, "timestamp_epoch": "1634917332.569011000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f22200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-830cc91828988302cbdf67c7", "kind": "unclassified_tcp", "frame_number": 71564, "timestamp_epoch": "1634917332.643049000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad140000005354415254544c530d0a" } }, { "event_id": "evt-f8fb535fcfe9d99cda006da4", "kind": "unclassified_tcp", "frame_number": 71568, "timestamp_epoch": "1634917332.820311000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296140000005354415254544c530d0a" } }, { "event_id": "evt-f4c20033eb9dff36b059a5ec", "kind": "unclassified_tcp", "frame_number": 71572, "timestamp_epoch": "1634917332.870282000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2962700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-e9ca0a749662a71badc02c60", "kind": "unclassified_tcp", "frame_number": 71577, "timestamp_epoch": "1634917333.006513000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d1faeed7afbb932b59ac66df", "kind": "unclassified_tcp", "frame_number": 71585, "timestamp_epoch": "1634917333.100836000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010080ad1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-175cdc0d3f139e7352e6bcc7", "kind": "unclassified_tcp", "frame_number": 71588, "timestamp_epoch": "1634917333.160176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702008997550000001403030001011603030040d4bf4bda58691be5d3b67959e158b016121ae23754d4f2c96061da502184fc6b67306d1eea6c180fa442104adad64873fd89d22d4422441ebb1e6d7c6d1d4510" } }, { "event_id": "evt-62a142ae233a5c25098318a3", "kind": "unclassified_tcp", "frame_number": 71592, "timestamp_epoch": "1634917333.247588000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ea2f2b633c250959d6455700", "kind": "unclassified_tcp", "frame_number": 71596, "timestamp_epoch": "1634917333.281905000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2f2b08a8901645c3642bafbc", "kind": "unclassified_tcp", "frame_number": 71600, "timestamp_epoch": "1634917333.285326000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3ca61e67f91db44aa8aaacac", "kind": "unclassified_tcp", "frame_number": 71603, "timestamp_epoch": "1634917333.288410000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-75149e703998584c60bf50eb", "kind": "unclassified_tcp", "frame_number": 71604, "timestamp_epoch": "1634917333.288427000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "f74698e4d6ac1fac71a5" } }, { "event_id": "evt-c5b74f80b5c4ab6fa56a1563", "kind": "unclassified_tcp", "frame_number": 71608, "timestamp_epoch": "1634917333.316244000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c9bd32dff256997c9e0a32da", "kind": "unclassified_tcp", "frame_number": 71615, "timestamp_epoch": "1634917333.320632000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296cd0b0000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d" } }, { "event_id": "evt-d31156fdfefbff4f90b45aa5", "kind": "unclassified_tcp", "frame_number": 71616, "timestamp_epoch": "1634917333.320646000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-967a6c62e65aeba4e4463a73", "kind": "unclassified_tcp", "frame_number": 71617, "timestamp_epoch": "1634917333.320655000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "46d03708a6a3b8e29aa762d09b5d7d42579193036483606a55a0c7a4f7e93dab7d67cc1fbd02debc0f9ed88961bff31d2c1b52a4eaf0b44e6831fa58140d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-3af5081f089cccbe33a0211a", "kind": "unclassified_tcp", "frame_number": 71622, "timestamp_epoch": "1634917333.425270000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-04acae52eb112c60349b9760", "kind": "unclassified_tcp", "frame_number": 71630, "timestamp_epoch": "1634917333.674068000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089974f00000017030300407a2fbddd1b47a59a4157beb299c84acd20c0886e537128761fb476499cc9d8a1b70d290a1784f8ef51f48e6ec1ac66a7291404ff86d584c7f1cbf353e9cfa6850407030038f2700000001403030001011703030035e6f8033ebc3a88c68280c2cdcefa9f3575a2ee12ee1c833231fd0c4fd69eb3d43788f933797091341b96235f41de8b348fb1fda1d71703030021d82e6d2f3e52b998d1a09ed2d18fc0c247d2f1d7f6468a5e45ad9786c9b80f88df" } }, { "event_id": "evt-0122700ec20961dbfa9affe9", "kind": "unclassified_tcp", "frame_number": 71641, "timestamp_epoch": "1634917333.817720000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7eb04cc2588bf96371d1396b", "kind": "unclassified_tcp", "frame_number": 71649, "timestamp_epoch": "1634917333.835854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-78579feba8a305b63d5f11e9", "kind": "unclassified_tcp", "frame_number": 71650, "timestamp_epoch": "1634917333.835874000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9d4b271745f521cc6a4a61ab", "kind": "unclassified_tcp", "frame_number": 71651, "timestamp_epoch": "1634917333.835886000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2fed424202b25d27077b4928", "kind": "unclassified_tcp", "frame_number": 71655, "timestamp_epoch": "1634917333.851162000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296b400000016030300070b00000300000016030300661000006261042d1db5201ce2ed521bd9ddf97d8c43508ddca44aabc69fce4414ef48f9377d56ceba8ae8ea5a356fbb82ed241c05d4b462581ea2816e3bc91862d93af424ccad1796344eaee351786cf8e8855e50f4df8e73e6c8157bf657c9a2196678ef753a14030300010116030300280000000000000000ccf5438d453ba1c5b09a6985bc30cc9c739c886214e8c5e36c01a19b01523435" } }, { "event_id": "evt-6a1b15ea681758a0f8f848d5", "kind": "unclassified_tcp", "frame_number": 71660, "timestamp_epoch": "1634917333.933057000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2963d000000140303000101160303002800000000000000001530c929129f53b38675d1fb27c08ee4db35e8665c8d122cbc29c62e080daa74" } }, { "event_id": "evt-798280ca2329176cc7755190", "kind": "unclassified_tcp", "frame_number": 71664, "timestamp_epoch": "1634917334.168726000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070600c28d0c000000197b" } }, { "event_id": "evt-0d24b70cacb4e1eb0e86346d", "kind": "unclassified_tcp", "frame_number": 71666, "timestamp_epoch": "1634917334.372520000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-12f7d6080cf051bc9d17682b", "kind": "unclassified_tcp", "frame_number": 71667, "timestamp_epoch": "1634917334.372980000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070600c28d0c0000000502" } }, { "event_id": "evt-bc84473073dff0d92ffb00f4", "kind": "unclassified_tcp", "frame_number": 71671, "timestamp_epoch": "1634917334.525568000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a0734d3e724a81945b5ea110", "kind": "unclassified_tcp", "frame_number": 71673, "timestamp_epoch": "1634917334.585038000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296370000001703030028000000000000000113c02b695d396c3b54019dec64875c9cbc3753df3afdf509af9eebc78f56245c" } }, { "event_id": "evt-f1d8f062ae50118c5ef4cc3c", "kind": "unclassified_tcp", "frame_number": 71678, "timestamp_epoch": "1634917334.656046000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-07c7b21b85a942ba3a7f72b3", "kind": "unclassified_tcp", "frame_number": 71682, "timestamp_epoch": "1634917334.664956000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a414000000050000010a0a169cc3e5" } }, { "event_id": "evt-0a4db86797cde755b589db25", "kind": "unclassified_tcp", "frame_number": 71686, "timestamp_epoch": "1634917334.764029000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ca42895e11e29f0728556132", "kind": "unclassified_tcp", "frame_number": 71688, "timestamp_epoch": "1634917334.797236000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d20000000010432356d630f356f504d44384828685558534a2a570407020089974f0000001703030040b9b2ea3ca35b80dd185d11b72c48f8edece10da01bfe6a50c6a2c3077c88ce927292961c02876d0e85273ad1aa635a84363ff13803789acf4306b27e18ce3fa0" } }, { "event_id": "evt-f0dbe21f1fb40b037b07c656", "kind": "unclassified_tcp", "frame_number": 71689, "timestamp_epoch": "1634917334.797517000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070600c28d0c0000000100" } }, { "event_id": "evt-da9c6cfcd290120a2890d204", "kind": "unclassified_tcp", "frame_number": 71695, "timestamp_epoch": "1634917334.984407000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089974f00000017030300406961269849d56dcf54618fe625ebe63533792f350df1f4936d8fc3d1b030d9f9c2c2d6590380305b7b8c5f4b251958a1ae80d81ec51577c2e20a30545aae7ae6" } }, { "event_id": "evt-df6a66d4916c500ac15ebcda", "kind": "unclassified_tcp", "frame_number": 71699, "timestamp_epoch": "1634917335.077713000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2560000001703030047cbee9aa6d7c45d3f39d8a8b36b256aaad83a29f98a82bbc7bfc58ad69361ac744b72ed16888b77c37e45ccef2d81840705e77a7f465c9e3ca8d03af769abcdf0ce3261c896353a" } }, { "event_id": "evt-d4e3d997a5146172d2c6d9b7", "kind": "unclassified_tcp", "frame_number": 71702, "timestamp_epoch": "1634917335.481823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089975f000000170303005079b5307cbf07546526d8de3f13ada27b74257c61ecfa85bdf3a53e0c30642078fa2d0b306715caa038ea40ce0b7045e20b2ec0b2adff1ee2c3337dd3630952940e2ff36fdab216c26b7ebc66c380dd3704070600c28d210000000501000310736d74702e6e65747a65726f2e636f6d0019" } }, { "event_id": "evt-c1834ab10fa59fa74ef72343", "kind": "unclassified_tcp", "frame_number": 71711, "timestamp_epoch": "1634917335.648218000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d14000000050000010a0a169cc3e6" } }, { "event_id": "evt-fd3754e3341390c8dc413644", "kind": "unclassified_tcp", "frame_number": 71715, "timestamp_epoch": "1634917335.765176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a44000000032323020736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d2045534d54500d0a" } }, { "event_id": "evt-d4b1897b650f93f5c954873b", "kind": "unclassified_tcp", "frame_number": 71717, "timestamp_epoch": "1634917335.765591000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d2c00000032323020736d74706f757430332e7667732e756e74642e636f6d2045534d54500d0a" } }, { "event_id": "evt-94394f19b9b4353365e56f23", "kind": "unclassified_tcp", "frame_number": 71725, "timestamp_epoch": "1634917335.850140000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010080ad0a000000" } }, { "event_id": "evt-7c8c9085d9357ba8df26a360", "kind": "unclassified_tcp", "frame_number": 71727, "timestamp_epoch": "1634917335.931332000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a296330000001703030024000000000000000209f83de6c807bd9ec6da50d865eec8e35b5bc7991464598e1f48b851" } }, { "event_id": "evt-99ef5ce33e54ea9be4f9e7dc", "kind": "unclassified_tcp", "frame_number": 71732, "timestamp_epoch": "1634917335.999576000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a29639000000170303002a0000000000000002452ae8ce29dafd85491a8dd9d9679a2a2224956d30a15c3a4747966905f6b5e46af2" } }, { "event_id": "evt-20b60a6b9d4e1e3247705d83", "kind": "unclassified_tcp", "frame_number": 71737, "timestamp_epoch": "1634917336.150294000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f22c000000170303001d8f4356eb1eb164f80c01b9053ac52191fa0b2016772cd4fe4605003eaa04070500b4a41a00000045484c4f206c6f63616c686f73740d0a04070600c28d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f664656434e7025b081348e8", "kind": "unclassified_tcp", "frame_number": 71745, "timestamp_epoch": "1634917336.173255000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089974f0000001703030040d1c870a42d101db3006842bb56a0c9ff254b5d8d29a2e043ca501dca2951a78cb93f87ee4d6a53c35fab093b3209c3d4c2f83bd05e3ebd6c851947428687617c" } }, { "event_id": "evt-efc98727aa0c2b4efb770387", "kind": "unclassified_tcp", "frame_number": 71749, "timestamp_epoch": "1634917336.253079000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d9e0000003235302d736d74706f757430332e7667732e756e74642e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e657420706c656173656420746f206d65657420796f750d0a3235302d53495a450d0a3235302d384249544d494d450d0a3235302d41555448204c4f47494e20504c41494e204352414d2d4d44350d0a3235302048454c500d0a" } }, { "event_id": "evt-f7eb890515cd375f8e3f7aa9", "kind": "unclassified_tcp", "frame_number": 71752, "timestamp_epoch": "1634917336.386858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2964500000017030300360000000000000003f953abbdab8fd24c5edb97f5610271babe26620c46b8ae8f54187ac017ba24cb6af4a256fe133e462840a37362a1" } }, { "event_id": "evt-548fc0807bf9eb67f205d385", "kind": "unclassified_tcp", "frame_number": 71756, "timestamp_epoch": "1634917336.437970000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a29639000000170303002a00000000000000039914c4d89830ee9bafcee42fca2faad692123c44fa4d915995bb291915db91b099ae" } }, { "event_id": "evt-14b92c862e234bd749279b46", "kind": "unclassified_tcp", "frame_number": 71759, "timestamp_epoch": "1634917336.446009000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f23200000017030300236998bf4343b5402153178214d0b3c259329f8ea86843069bd9e385770ab94aca8f2cbc" } }, { "event_id": "evt-12f918f7df88a27bf9c46bf1", "kind": "unclassified_tcp", "frame_number": 71764, "timestamp_epoch": "1634917336.612776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a4820000003235302d736d74702d39372d33322e736d7470736d61696c2e666d61696c2e62782e73696e616e6f64652e636f6d0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-007a7f85e4988c2d22880784", "kind": "unclassified_tcp", "frame_number": 71767, "timestamp_epoch": "1634917336.781456000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089974f00000017030300402f549d8d890ccfbe256e23ddff28c4f0f4a0046b95ac9a873e4fb9a736bcc9b06d332156ecf7ddabdbbe0a5d1d22ef1f193fb1471c8ae58e4fd77ccf1b24dddc" } }, { "event_id": "evt-c6ba46c20610ab9fe35d439e", "kind": "unclassified_tcp", "frame_number": 71771, "timestamp_epoch": "1634917336.960555000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f23e000000170303002f5cac39d818c36ed2794a58a8bd46eea2bd4cbfe658edbe2437115b49a58eaf03c9081f15a9ef5d953dadb179468e8204070400a296350000001703030026000000000000000406272b467273ca8417a0d09fecb8289713ff7f98927f7eaef840c6f62bed04070600c28d1600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-9ae04de1302116220afdb5c9", "kind": "unclassified_tcp", "frame_number": 71780, "timestamp_epoch": "1634917337.038737000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d1c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-8e52f2035c10397cb59f6885", "kind": "unclassified_tcp", "frame_number": 71783, "timestamp_epoch": "1634917337.185539000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a4140000005354415254544c530d0a" } }, { "event_id": "evt-fcc9607c1dd07039d1668161", "kind": "unclassified_tcp", "frame_number": 71788, "timestamp_epoch": "1634917337.260026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2320000001703030023d9da9cb2620cefcfefac9145b495e255108ef3f866d33f5f0622a10fcb43788afba872" } }, { "event_id": "evt-289848848cca695790ea5e9f", "kind": "unclassified_tcp", "frame_number": 71791, "timestamp_epoch": "1634917337.360520000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d24000000656e6c74595467315147356c6448706c636d3875593239740d0a" } }, { "event_id": "evt-3bbcf5c734260f0ce2ed5616", "kind": "unclassified_tcp", "frame_number": 71796, "timestamp_epoch": "1634917337.435876000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d1c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-626d0e4072e3fa2199730f8a", "kind": "unclassified_tcp", "frame_number": 71799, "timestamp_epoch": "1634917337.622379000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f22e000000170303001f84c093f24b4806ea410ec61e0daa8fbad588c9200d81bc577c51d31578b485" } }, { "event_id": "evt-c2ee4d6ae178ffcba9ea0fa2", "kind": "unclassified_tcp", "frame_number": 71803, "timestamp_epoch": "1634917337.638000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070500b4a41d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-f999fea0187fbba59103de4a", "kind": "unclassified_tcp", "frame_number": 71806, "timestamp_epoch": "1634917337.908412000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d1400000063334276636e527a0d0a" } }, { "event_id": "evt-eac2e464d5dee98f04b0e885", "kind": "unclassified_tcp", "frame_number": 71811, "timestamp_epoch": "1634917337.973562000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d3800000032333520736d74706f757430332e7667732e756e74642e636f6d2061757468206f6b2c20676f2061686561640d0a" } }, { "event_id": "evt-be3524dfdbde7e3033324efb", "kind": "unclassified_tcp", "frame_number": 71814, "timestamp_epoch": "1634917337.976270000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f23f000000170303003023d406ad420995f53bc221ff9c79ff0fd5852ac3254f66ecfc6169df404a07522a3f5b66561316f582961e4d1329164d" } }, { "event_id": "evt-ff9ccc55083b4ee82aacfa54", "kind": "unclassified_tcp", "frame_number": 71818, "timestamp_epoch": "1634917338.085467000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-13bc6cd22ad34dd396656bba", "kind": "unclassified_tcp", "frame_number": 71822, "timestamp_epoch": "1634917338.300298000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d380000004d41494c2046524f4d3a3c7a796d613835406e65747a65726f2e636f6d3e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-499e3e4a70f88da9d36d6a2f", "kind": "unclassified_tcp", "frame_number": 71827, "timestamp_epoch": "1634917338.382176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d2f000000323530207a796d613835406e65747a65726f2e636f6d2e2e2e2053656e646572204f4b0d0a" } }, { "event_id": "evt-460d671624d50d5c11fa253a", "kind": "unclassified_tcp", "frame_number": 71830, "timestamp_epoch": "1634917338.487010000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f24f0000001703030040f929c8d4a775678615914500648e110e5f614abd92a42e5236d0495f002d6f881ec4407d62413362bdf3ac5de61a9291b5d16743ead8fa25f173f04835cc20cf" } }, { "event_id": "evt-0859c1495ab847aaab2c37cc", "kind": "unclassified_tcp", "frame_number": 71838, "timestamp_epoch": "1634917338.546690000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5cf4ad24d045515ef6408438", "kind": "unclassified_tcp", "frame_number": 71839, "timestamp_epoch": "1634917338.546713000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bb9d0a106b934f8c9082cbda", "kind": "unclassified_tcp", "frame_number": 71840, "timestamp_epoch": "1634917338.546725000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "22bb658b106ff8a3037aa2b1b4d25b6622c3cc90641827781c8eb75f9792e811252419fa988f5e615aebeea38b4e9ed688ed3649fd58ae96b3fde3d28d9ebce28f3d5001a9c4e7db81548cbe8fdad3b9ffdb6d235162f1cda26140d2ee940097c305acc587fcb703fc8259282079d450d4e586ccb2975673bd50b86c3a48e210ba424246ca773530da9848c8fcb596e140dc371dd4a67133b435cfc9fe92b655973a7c56ca060b299b374773a8cc286dade258ac5c4cac4b7c0f720d1a35faf539d979fa6ca1dcc9cc2b4f1fea94d7bddb8bcfe41988887c2182fe67a41681367d7b68e757c8eeba65f523c19eedc65db4d9d3081f2115fc062d4016030300040e000000" } }, { "event_id": "evt-683da7d716e21b83044d49ee", "kind": "unclassified_tcp", "frame_number": 71845, "timestamp_epoch": "1634917338.553043000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089975f0000001703030050a91e53c72f6c41f4a3f765cf9156550a7dd5a709dc607b7a115e75caa83c14bf84d5de18727c7edef45c0e183f9b153c71882398ab9058ee44152297ea0a5bd7df8ef4eeee250576eb366ee838203f8d" } }, { "event_id": "evt-a639ced958fc462252fefade", "kind": "unclassified_tcp", "frame_number": 71848, "timestamp_epoch": "1634917338.723403000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d2b0000005243505420544f3a3c616e6472655f73616e74616e61406d61696c2e72753e0d0a" } }, { "event_id": "evt-dc314e445b25d0216ca42577", "kind": "unclassified_tcp", "frame_number": 71853, "timestamp_epoch": "1634917338.783572000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2280000001703030019a08566e32e86e6920066f1d032cf71fabab030117899fa1423" } }, { "event_id": "evt-e722c734352f42bc1f4a51d6", "kind": "unclassified_tcp", "frame_number": 71856, "timestamp_epoch": "1634917338.797878000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d3500000032353020616e6472655f73616e74616e61406d61696c2e72752e2e2e20526563697069656e74204f4b0d0a" } }, { "event_id": "evt-21a0c8fce3cd563343d46469", "kind": "unclassified_tcp", "frame_number": 71860, "timestamp_epoch": "1634917338.972415000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-33c8cd203e504d774428d10f", "kind": "unclassified_tcp", "frame_number": 71868, "timestamp_epoch": "1634917339.320496000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2410000001703030032e1bacc6f5dbd4ccdc09b6b96139d6b844070c3472db944509df6fdfe98442415de74ffd5a1bd707a5b256a6b51981a99f54204070600c28d10000000444154410d0a" } }, { "event_id": "evt-d14229b1131081909d716fc7", "kind": "unclassified_tcp", "frame_number": 71875, "timestamp_epoch": "1634917339.400807000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d3c00000033353420456e746572206d61696c2c20656e64207769746820222e22206f6e2061206c696e6520627920697473656c660d0a" } }, { "event_id": "evt-cfff88259fc2fd9016bad5d4", "kind": "unclassified_tcp", "frame_number": 71879, "timestamp_epoch": "1634917339.696507000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f24b000000170303003c742df02dc90caf33179465cc881fea9442b2c6737e7344691eee46387d3865bea98cd50f66020c383bae568f0ea2c6452b47020736a4c2d6f85f723f" } }, { "event_id": "evt-68f5dd1ec872adc7f36e3bbf", "kind": "unclassified_tcp", "frame_number": 71882, "timestamp_epoch": "1634917339.745723000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7bc26e0fc3c4c18aee5eb26", "kind": "unclassified_tcp", "frame_number": 71888, "timestamp_epoch": "1634917339.842004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070600c28d8c000000353530204d45535341474520424c4f434b45442e204348414e474520594f55522050415353574f524420544f2052452d53454e4420594f5552204d45535341474520414e4420544f204d41494e5441494e204f4e474f494e4720534543555249545920415420485454503a2f2f5745424d41494c2e4e45545a45524f2e4e45542f0a" } }, { "event_id": "evt-bf8cbd21df000371a9a30477", "kind": "unclassified_tcp", "frame_number": 71892, "timestamp_epoch": "1634917339.842471000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070600c28d0a000000" } }, { "event_id": "evt-ea26cd12b6029450d03b3df6", "kind": "unclassified_tcp", "frame_number": 71894, "timestamp_epoch": "1634917340.065773000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2260000001703030017da1ed6b4bb6ef4ffaa2716370c07583147de3cf365c452" } }, { "event_id": "evt-0d052c94be8410c13f525706", "kind": "unclassified_tcp", "frame_number": 71899, "timestamp_epoch": "1634917340.418000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f2450000001703030036ec1f96a8c8b15a88e263681ae4d532c38d05e550596325fa4c623f2c6fca3a25fc5fc2a81d31a9aa78a4783d888261d9ce88e2f3733f" } }, { "event_id": "evt-42fdf4df534d805c9a2d67fb", "kind": "unclassified_tcp", "frame_number": 71902, "timestamp_epoch": "1634917340.525833000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-798e3edd91b73e369ea9bc28", "kind": "unclassified_tcp", "frame_number": 71908, "timestamp_epoch": "1634917340.542641000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070500b4a40a000000" } }, { "event_id": "evt-fa3ead003a0ca22462a3581b", "kind": "unclassified_tcp", "frame_number": 71910, "timestamp_epoch": "1634917340.661247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4ec796bda267c0704d30515d", "kind": "unclassified_tcp", "frame_number": 71915, "timestamp_epoch": "1634917340.972895000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f24e000000170303003fbd7a1496a324a72d3229e4558ea0969e0c64b9865c123513e447e0ac2716f5df8de3b7e7a8379f3b0d60aab38132885b60b0db9017372323e08071323577d4" } }, { "event_id": "evt-57318cfecbbe26630230f93e", "kind": "unclassified_tcp", "frame_number": 71918, "timestamp_epoch": "1634917341.304506000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030038f22200000017030300138ff4083a3fa64aea481e1c704361b92b28e672" } }, { "event_id": "evt-620c5b584155ac8343799840", "kind": "unclassified_tcp", "frame_number": 71922, "timestamp_epoch": "1634917341.481355000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030038f20a000000" } }, { "event_id": "evt-89b5e013a657939ab16ab33b", "kind": "unclassified_tcp", "frame_number": 71929, "timestamp_epoch": "1634917343.178171000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2969f000000170303009000000000000000045996a4b1a3b7ebcce8335f4fabff0a85f35ce4fa7b80c16adf4e832371f8bae66667e78c0283c1c106b6a5463e2980039b87c1d9c8ff6df4034bef3057967791182c0432f0451866a10dd06ac8320f9394404ffa5d6fa976ccad9e412de18ae07e34e0c405bf42538da52b5fa0ee2fe2cabb77c8083da2874aaf0cea81cebe535c4b31c1893faf9e" } }, { "event_id": "evt-b16720ed6fac385c26befbbe", "kind": "unclassified_tcp", "frame_number": 71932, "timestamp_epoch": "1634917343.544560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2962a000000170303001b0000000000000005643edab7011bcf7a9e02c35e420992be6266a4" } }, { "event_id": "evt-29289655cd50fb2b9286f45b", "kind": "unclassified_tcp", "frame_number": 71938, "timestamp_epoch": "1634917345.992790000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-f0bcde595db2db09dba5befc", "kind": "unclassified_tcp", "frame_number": 71940, "timestamp_epoch": "1634917346.181323000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-bd58722c0d63bb021c2386a2", "kind": "unclassified_tcp", "frame_number": 71946, "timestamp_epoch": "1634917346.540352000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f9f9ff9303e4f35cb62b593a", "kind": "unclassified_tcp", "frame_number": 71954, "timestamp_epoch": "1634917348.712471000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2967400000017030300650000000000000005588d820fde21b02fa065581e0dce240e487ac54f3dbcdcb6abf9bb360cf822924710381adcf6739da7849b5ce090c25b88b41955c666200c9da5913b17a3b1a3a604fd2a65b18b0806d354d2e1cb2cdffd854815dba3e39ef18c794430" } }, { "event_id": "evt-75daea4b84b4a9f4513c94bf", "kind": "unclassified_tcp", "frame_number": 71957, "timestamp_epoch": "1634917349.017726000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a2962d000000170303001e0000000000000006c63ee26a7ad95794cf357bc60990281bd10518c23ec5" } }, { "event_id": "evt-7d164da497fd98a666935ae3", "kind": "unclassified_tcp", "frame_number": 71962, "timestamp_epoch": "1634917349.061456000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a29657000000170303004800000000000000062327c5ec043f0ebb5152e08184063bd82ce26a45ee20547caa3da1f6bfeffb6f2e9b4175f72e200444a46b726b9fcd2806e3731329798b49f02721555a6406d8" } }, { "event_id": "evt-9688b584c33df726da805c15", "kind": "unclassified_tcp", "frame_number": 71966, "timestamp_epoch": "1634917349.062055000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400a2960a000000" } }, { "event_id": "evt-ceb5b80d2f5265784b71d77d", "kind": "unclassified_tcp", "frame_number": 71972, "timestamp_epoch": "1634917349.331677000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400a29629000000150303001a0000000000000007bfc5c0eb580122be946f4792fe7e9c9c8f5f" } }, { "event_id": "evt-68568ed1d72598d7bd89fca0", "kind": "unclassified_tcp", "frame_number": 71974, "timestamp_epoch": "1634917349.525540000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070400a2960a000000" } }, { "event_id": "evt-ec33fd163898412da26c041b", "kind": "unclassified_tcp", "frame_number": 71978, "timestamp_epoch": "1634917351.587696000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9a68c3fbb1f5c655f1af2822", "kind": "unclassified_tcp", "frame_number": 71980, "timestamp_epoch": "1634917354.953254000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100f04f0c000000197b" } }, { "event_id": "evt-59648731f30f7f6677cf3c29", "kind": "unclassified_tcp", "frame_number": 71982, "timestamp_epoch": "1634917355.157051000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f04f0e00000005020002" } }, { "event_id": "evt-67126f4be068671123462574", "kind": "unclassified_tcp", "frame_number": 71983, "timestamp_epoch": "1634917355.157504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f04f0c0000000502" } }, { "event_id": "evt-544e217679e5605ee0913391", "kind": "unclassified_tcp", "frame_number": 71985, "timestamp_epoch": "1634917355.447512000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f04f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-98d1a49381620bbaac1a1c26", "kind": "unclassified_tcp", "frame_number": 71986, "timestamp_epoch": "1634917355.448069000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f04f0c0000000100" } }, { "event_id": "evt-41ac2f7f5b8f322126a85ca2", "kind": "unclassified_tcp", "frame_number": 71988, "timestamp_epoch": "1634917355.854700000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f04f2700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-130cb02e5d4fdb297fba3a7c", "kind": "unclassified_tcp", "frame_number": 71992, "timestamp_epoch": "1634917356.635470000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fd88cc09d8a49a083421bd7f", "kind": "unclassified_tcp", "frame_number": 71996, "timestamp_epoch": "1634917361.648846000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-63fb85129073cd49f39f9e15", "kind": "unclassified_tcp", "frame_number": 72000, "timestamp_epoch": "1634917364.400301000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f04f1400000005040001000000000000" } }, { "event_id": "evt-fcd723cc1b498626ae163588", "kind": "unclassified_tcp", "frame_number": 72002, "timestamp_epoch": "1634917364.660660000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100f04f0a000000" } }, { "event_id": "evt-7c9cbfafa97413842cbdfbec", "kind": "unclassified_tcp", "frame_number": 72006, "timestamp_epoch": "1634917366.727359000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2686e60f2d1ff28c368b2912", "kind": "unclassified_tcp", "frame_number": 72009, "timestamp_epoch": "1634917371.775774000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-28988cf0d6b4aa117ab1ac02", "kind": "unclassified_tcp", "frame_number": 72013, "timestamp_epoch": "1634917372.160055000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089975f00000017030300503e2de42d98420b2566e077814794a8f3d2c94c5b12fa65656992c9911e495d8ff9455c07b1696ccc28ecc727179d586b0ff06f6cf980d9ce619660b70dde5abd12e6b53da3721c9632a0ea8c67b896de" } }, { "event_id": "evt-085afe8588e6964af9d70f32", "kind": "unclassified_tcp", "frame_number": 72017, "timestamp_epoch": "1634917372.465954000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100db8f0c000000197b04070100db8f0e00000005020002" } }, { "event_id": "evt-8dca03ed747e4a6bc61d1aa8", "kind": "unclassified_tcp", "frame_number": 72018, "timestamp_epoch": "1634917372.466462000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100db8f0c0000000502" } }, { "event_id": "evt-32fb841c440a3b7fcd2af811", "kind": "unclassified_tcp", "frame_number": 72020, "timestamp_epoch": "1634917372.771503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089973f0000001703030030dfc0d2c1f5a9a3ac93bceed5d56af4a74bf77df2871b26b1d6d56735592b42ae8f323b3d560bce1f62b51662b1b719b1" } }, { "event_id": "evt-c847b22d7d6f38ae1eab3767", "kind": "unclassified_tcp", "frame_number": 72027, "timestamp_epoch": "1634917372.957245000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020089976f0000001703030060f47b29733840010497b0a33e9c3dfd577074d8992f2594e90b9f4cd2f2aa127e9412a961e33f1c974869c80130e562a766bd36ddf6399a7c9cc46de42a9cd86224ffdb1ba75f4baee93a7d9535688b4fb910704270c397bb208d4bd2ce8b18be" } }, { "event_id": "evt-5ceb84701a29723c6a2feef1", "kind": "unclassified_tcp", "frame_number": 72031, "timestamp_epoch": "1634917372.958005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020089970a000000" } }, { "event_id": "evt-df5727362f0da251655177d5", "kind": "unclassified_tcp", "frame_number": 72033, "timestamp_epoch": "1634917372.993607000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9ef9f66eccb80c880601337b", "kind": "unclassified_tcp", "frame_number": 72034, "timestamp_epoch": "1634917372.994068000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100db8f0c0000000100" } }, { "event_id": "evt-ab91426ece8c56af5950b0c0", "kind": "unclassified_tcp", "frame_number": 72036, "timestamp_epoch": "1634917373.590649000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f2100000005010003106d61696c2e69736f6c6472792e636f6d0019" } }, { "event_id": "evt-e660cfa2627767b20b47c5b9", "kind": "unclassified_tcp", "frame_number": 72043, "timestamp_epoch": "1634917373.775111000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f14000000050000010a0a169cc3e7" } }, { "event_id": "evt-1b3cd5285ad007b6407c89fc", "kind": "unclassified_tcp", "frame_number": 72046, "timestamp_epoch": "1634917374.149441000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f35000000323230204741524d2d31303147303034204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-944ba584f23f749244536dba", "kind": "unclassified_tcp", "frame_number": 72050, "timestamp_epoch": "1634917374.512018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-61d32984f14e2c13cf8d049c", "kind": "unclassified_tcp", "frame_number": 72058, "timestamp_epoch": "1634917374.678141000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-750e0195709a96a91c944d89", "kind": "unclassified_tcp", "frame_number": 72081, "timestamp_epoch": "1634917375.042753000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f140000005354415254544c530d0a" } }, { "event_id": "evt-16f1221a33d4f0a92909a2a8", "kind": "unclassified_tcp", "frame_number": 72093, "timestamp_epoch": "1634917375.202421000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-702b4c2011e0179040193996", "kind": "unclassified_tcp", "frame_number": 72110, "timestamp_epoch": "1634917375.741133000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f1601000016030101070100010303033ee472950a1ee3252e7c2e9003b9afece048340c54770cf573128692df6fc9e820bff0b98dd5f1cb66f6908223abc878fea727ed8efa293bade438bab331b379b00026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000940000001500130000106d61696c2e69736f6c6472792e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00208b693f1216c91e724c0c35b10040f81e564141ef05c40b4d83ddcbf2fd6a7764" } }, { "event_id": "evt-3561657c4bac8881d57683fc", "kind": "unclassified_tcp", "frame_number": 72121, "timestamp_epoch": "1634917375.919312000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0a277189f5e92fccdace40a0", "kind": "unclassified_tcp", "frame_number": 72122, "timestamp_epoch": "1634917375.919334000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9708e1e9651a914c53a34cb4", "kind": "unclassified_tcp", "frame_number": 72126, "timestamp_epoch": "1634917375.921919000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f6a0500002b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d030019850400a0cb75eddb4fb0c6e29918644ff8cfc76b7cbdfca25d6afadb682429cb8487baeb948cb04b2c8ce45d82d97e551a15eb4040f2bbbb744718f72c0e7a77b78c7e48019c618b9b125e0ecd49f92ea9fea4cf04055894d57f481b0d362737fb8a18cd83dccf2b592104188c1f2f4bf0a929b0837c" } }, { "event_id": "evt-3f4880fac146286a9678433c", "kind": "unclassified_tcp", "frame_number": 72130, "timestamp_epoch": "1634917375.944201000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4b58064f8c1ef4039f253a5f", "kind": "unclassified_tcp", "frame_number": 72132, "timestamp_epoch": "1634917376.025646000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-42838fe674e48f54afea7034", "kind": "unclassified_tcp", "frame_number": 72134, "timestamp_epoch": "1634917376.415717000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a11df74710e89185195f553d", "kind": "unclassified_tcp", "frame_number": 72136, "timestamp_epoch": "1634917376.456877000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-b54afc8e4368637af69b304f", "kind": "unclassified_tcp", "frame_number": 72262, "timestamp_epoch": "1634917376.658638000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8fe4000000160303008a10000086850400aef7bbba1e5e892dabcd028282cd6f81c49777cf1de3885546f96da3ddd0e19a2f902b52bf3ffbeac6ba6bad8688d09d2579c3a8d23007f1576eaf282b22dfadb2014b8e51b0fa3fb74a61fb6e84cdb5cc8726d5a9e3ae05458da46c7c3daec6727207ffd8e4e374c03b0e5874c41d83d1f960aa4644aa01b6fc142b55fda95f8def131403030001011603030040ed72a6eddef5b9d99f07d60ecae85ef2b3281b1540a16a4c520ff300e23e557365c6ce434b93091957526ea3d4fc353bbd69b9f5a3cb9fb330c8b6acf1b588f2" } }, { "event_id": "evt-bce6de954d6272263ea5ee7b", "kind": "unclassified_tcp", "frame_number": 72332, "timestamp_epoch": "1634917376.776757000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7719a9d57b51fb31d25a506d", "kind": "unclassified_tcp", "frame_number": 72409, "timestamp_epoch": "1634917376.963308000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f5500000014030300010116030300402bc103bd6834bdca5ae5753f4b37b585a91b5d3518adc58c4e123b88768c1ea4b8e93cbdbfd3769846e56d6635dbf527fac981894c234a6bd7d3a71a26d88395" } }, { "event_id": "evt-a1c18a7ac64b82f2f4e21fb5", "kind": "unclassified_tcp", "frame_number": 72481, "timestamp_epoch": "1634917377.401182000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f4f0000001703030040168fbbbf25a891a3ba1475f75a4eb58264a45f9d866caa4446bf70f803ef40bb00d00aac45739d993d8b6a475a330dfb18d44f4501730542193ddcee5811854c" } }, { "event_id": "evt-dd11b3a7f784c8c19a554dd1", "kind": "unclassified_tcp", "frame_number": 72555, "timestamp_epoch": "1634917377.580617000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8fa80100001703030040391a8a2a7f0937882b35e656a1fec5a969665b3a8b1c60077f266e81194739e3521f4c7674405abc1a686d487e92bc2947024f4ef75aa2eb4e119877308d181117030300400e6b7aa4854027acf433a718e3eaba2433118cd845492217f15b3b0842b031769d0cbb96f4eb76ca6c017ee20229668edf8275e26fb5dd24302b4db46dbaced11703030040dee67059fc63e18be952554a32823cab9d6fcd77b06b25757c0fa24de4738537c48e5acfcab00b1feb95ceb609e10c2eec6857573175ae7d18c06891ebd8881a170303004023bd06417e399bf9d454e143d557255f217c24bd8832351a9ace3b8affe4f14dd2f8f5d6e85a8f1c1f6734c05c9fe8d1eb0a86f5353506a968ce558976dffae21703030040ff108b13306a708c380b56ac63282877b2d5eab442e48d61b34c025dce42b3477117365d61075ce9fb30a3ef015962c4b0774c1f526da4fcf3c670243928575617030300401b10dc7310860ea000b8ebc91a5482de91027c65c0a4372b5254e507c7aa4c2b71bd594604fdbd046e645862feaaf69afef5449ade90118b06f392aecadb237a" } }, { "event_id": "evt-bb01a40bfefd90ab0d831c8e", "kind": "unclassified_tcp", "frame_number": 72745, "timestamp_epoch": "1634917378.021753000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f4f0000001703030040807a5c789ee7985312dfdedfde221211f62b98d80c160acebcf12bf57ae91298d2396032ea23f1a6b30d8efc2558965936e59c7de616dc29b35a1886d2a3672f" } }, { "event_id": "evt-f9cd07b9a41c0864b1518427", "kind": "unclassified_tcp", "frame_number": 72750, "timestamp_epoch": "1634917378.169204000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f4f00000017030300407ddd7bad4efb42e958fd2f44aa4399722377001e3470de2ac832429dddd6a94da316b7614cf61f0afea4dd468843c897ed616cc8252598decd8f9bbecaa87bfe" } }, { "event_id": "evt-52dd5476cfb6e3656422f3b2", "kind": "unclassified_tcp", "frame_number": 72753, "timestamp_epoch": "1634917378.420923000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f5f000000170303005075f68f811eea1525fec080eb1fc85e5b6f3201ff88f0da48d4e7e7499269f93ad7c384b308da397aeacb1f144cbf12155224dc6a3dfe1eb3836cdf21022d35af165f48e5293006f0a9b25d6825980534" } }, { "event_id": "evt-cab1b63e04eccb8275769a9a", "kind": "unclassified_tcp", "frame_number": 72758, "timestamp_epoch": "1634917378.574158000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f4f0000001703030040e7d5574018a0f6178ff237e8bf3432902fc0f38f3482497438af18e0f38d5a15ba923e6cd6e3a649326bc3bc100e9a8357ef87114abd2d78b8b711810b2b0177" } }, { "event_id": "evt-b921562a378242c1f1e18982", "kind": "unclassified_tcp", "frame_number": 72761, "timestamp_epoch": "1634917378.889880000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f4f00000017030300408125b2473fa119b8383944d43a66b52620ef4b2f3312558cf0fcaf416a95c89ca9f9e3b50b7a9f65c202d8171c35f3e15590eee338c9c218c5354c700352cd37" } }, { "event_id": "evt-7ff38cbbd928869e9d95764e", "kind": "unclassified_tcp", "frame_number": 72769, "timestamp_epoch": "1634917379.381073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020008500c000000197b" } }, { "event_id": "evt-152c594cc1ff8d34f9b1b2b4", "kind": "unclassified_tcp", "frame_number": 72783, "timestamp_epoch": "1634917379.561864000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020008500e00000005020002" } }, { "event_id": "evt-c87bfee31d6a10cccf06b475", "kind": "unclassified_tcp", "frame_number": 72784, "timestamp_epoch": "1634917379.562367000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020008500c0000000502" } }, { "event_id": "evt-1c40fa4645f633f2d4f46cec", "kind": "unclassified_tcp", "frame_number": 72797, "timestamp_epoch": "1634917379.819423000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200085020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f1126a927acca58191227763", "kind": "unclassified_tcp", "frame_number": 72798, "timestamp_epoch": "1634917379.820160000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020008500c0000000100" } }, { "event_id": "evt-b0fa29bbc39c6f9efc9d8ca6", "kind": "unclassified_tcp", "frame_number": 72800, "timestamp_epoch": "1634917380.180951000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020008502700000005010003166d61696c2e61757374696e6a6f75726e6c732e636f6d0019" } }, { "event_id": "evt-73fdaece2c89d1d57a76161d", "kind": "unclassified_tcp", "frame_number": 73427, "timestamp_epoch": "1634917382.776902000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-62bfbc1303a7dd4b709e439e", "kind": "unclassified_tcp", "frame_number": 73431, "timestamp_epoch": "1634917387.807123000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-29e4b20ad65ce4fecfcd33bf", "kind": "unclassified_tcp", "frame_number": 73434, "timestamp_epoch": "1634917388.083883000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020008501400000005040001000000000000" } }, { "event_id": "evt-77ea2d1cd39866eae61f2aa3", "kind": "unclassified_tcp", "frame_number": 73436, "timestamp_epoch": "1634917388.085520000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f5f00000017030300504a6ca7955e558046b035a9b0b5362cf2ba9afb7d828f09743fd3b53046789ed1a3794484582d3dbfb81f7ec8e615ae532fbbfe9c451b9165f3b2a2eb5c3a9a5490ca457ede1c1175d5e5a421ae27be06" } }, { "event_id": "evt-5f0523c25139580ad1e44c8a", "kind": "unclassified_tcp", "frame_number": 73438, "timestamp_epoch": "1634917388.395982000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020008500a000000" } }, { "event_id": "evt-4732ae6389b6635ca6c2583d", "kind": "unclassified_tcp", "frame_number": 73440, "timestamp_epoch": "1634917388.611409000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f3f000000170303003005b13734b10d80b892e822f6d78af1da80fd9fc23eda94d77170a61f16403677f9b63b78b6a0b5d8023edff3925bac97" } }, { "event_id": "evt-d304c6910138bdd9379f13ff", "kind": "unclassified_tcp", "frame_number": 73446, "timestamp_epoch": "1634917392.868759000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-32dcfda5b1a26bcc5ca31e57", "kind": "unclassified_tcp", "frame_number": 73458, "timestamp_epoch": "1634917397.931713000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5f276846d5136443b9af2f3d", "kind": "unclassified_tcp", "frame_number": 73460, "timestamp_epoch": "1634917402.948930000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7d1d60a4424f590b8827210f", "kind": "unclassified_tcp", "frame_number": 73462, "timestamp_epoch": "1634917406.471415000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5468bc8408f4ee535b70428a", "kind": "unclassified_tcp", "frame_number": 73464, "timestamp_epoch": "1634917407.978384000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dc3b91fcc46369ba9aceb577", "kind": "unclassified_tcp", "frame_number": 73473, "timestamp_epoch": "1634917413.027442000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b7df1aafc3ee705f91e5a11f", "kind": "unclassified_tcp", "frame_number": 73478, "timestamp_epoch": "1634917414.968643000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f5f0000001703030050d9bb8599636c6a5dc84458c706da60e3a2e2087270c214450c78748da05351db814e6c6d105698c844cd6cbe145cb93736bb4526c9ea39cbed9a6715df21d552629ece47cf8234eeddfe943b592512e1" } }, { "event_id": "evt-f56fc4af407e076baa8a35b8", "kind": "unclassified_tcp", "frame_number": 73481, "timestamp_epoch": "1634917415.286299000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f3f0000001703030030338c230c4031ad55227ad14c8449672c4026fd78f8b01568b46e602bac2409bad1a3767f813dd94c5b8c8fa631c66aaf" } }, { "event_id": "evt-41b205b4de7ea508fedf3512", "kind": "unclassified_tcp", "frame_number": 73487, "timestamp_epoch": "1634917415.430064000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f6f0000001703030060a803f274c3740e8a5fbafc84d527481f22a9c97d0c16573a674ea713fcaf637fe609eb9514aff10136dfddcd7a4b1296b05279f48542994005e8574de65447e6d35c78a4c6769bcabfef26b65becb282c892aa3b8d83c065ddeb7e22cf2065b6" } }, { "event_id": "evt-a52364bbab7b94991347ee04", "kind": "unclassified_tcp", "frame_number": 73491, "timestamp_epoch": "1634917415.430479000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100db8f0a000000" } }, { "event_id": "evt-5c6f5b1ef3906f6fc55d6062", "kind": "unclassified_tcp", "frame_number": 73493, "timestamp_epoch": "1634917415.755714000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100db8f3f000000150303003003db205883e81a5e4ad5225d4b00461d851a83b0426d5abcb6e74e56d151f5c7fde40de17347e5f2f87db765a2158d3e" } }, { "event_id": "evt-1a27174e452b4881f3fd042f", "kind": "unclassified_tcp", "frame_number": 73495, "timestamp_epoch": "1634917415.959288000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100db8f0a000000" } }, { "event_id": "evt-b7b6b34b90e46a6813123a42", "kind": "unclassified_tcp", "frame_number": 73497, "timestamp_epoch": "1634917416.242625000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010095ed0c000000197b" } }, { "event_id": "evt-e66bac7f3fa4cdfc26456897", "kind": "unclassified_tcp", "frame_number": 73499, "timestamp_epoch": "1634917416.420431000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed0e00000005020002" } }, { "event_id": "evt-630f0fbf520afa3aa9ed0b32", "kind": "unclassified_tcp", "frame_number": 73500, "timestamp_epoch": "1634917416.420959000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010095ed0c0000000502" } }, { "event_id": "evt-8c9d8c605dfadbb6e87602c3", "kind": "unclassified_tcp", "frame_number": 73502, "timestamp_epoch": "1634917416.742715000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5b0608b7eda0101002a6f99d", "kind": "unclassified_tcp", "frame_number": 73503, "timestamp_epoch": "1634917416.743227000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010095ed0c0000000100" } }, { "event_id": "evt-1e6fcbc4fc6da94372af4bae", "kind": "unclassified_tcp", "frame_number": 73505, "timestamp_epoch": "1634917417.520884000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-9ad2be9cbd1e07c6df2eaac4", "kind": "unclassified_tcp", "frame_number": 73512, "timestamp_epoch": "1634917417.633122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed14000000050000010a0a169cc3e8" } }, { "event_id": "evt-e8f3b22d26e054c1f5ec2993", "kind": "unclassified_tcp", "frame_number": 73515, "timestamp_epoch": "1634917417.683348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed7900000032323020534130505231314341303133362e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34333a3337202b303030300d0a" } }, { "event_id": "evt-4a877cb3308bdefcc70f8956", "kind": "unclassified_tcp", "frame_number": 73518, "timestamp_epoch": "1634917418.073468000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-27103e19e0c6699e3be5018c", "kind": "unclassified_tcp", "frame_number": 73520, "timestamp_epoch": "1634917418.114699000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f6c0ebc48e2864363cf7314d", "kind": "unclassified_tcp", "frame_number": 73525, "timestamp_epoch": "1634917418.176026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095edd80000003235302d534130505231314341303133362e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-0800d5847ff35ef3c3576bfb", "kind": "unclassified_tcp", "frame_number": 73528, "timestamp_epoch": "1634917418.470125000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed140000005354415254544c530d0a" } }, { "event_id": "evt-cc42ecce6237496efc6093bc", "kind": "unclassified_tcp", "frame_number": 73532, "timestamp_epoch": "1634917418.521233000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-a2d5e083600159e3975e1c22", "kind": "unclassified_tcp", "frame_number": 73535, "timestamp_epoch": "1634917418.840565000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-feeebaf6efe9450287d4331d", "kind": "unclassified_tcp", "frame_number": 73540, "timestamp_epoch": "1634917418.897904000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed3c05000016030310f00200005103036172dc2a5fff61590dc0ae01bb7d7a0c0acb190524994a94b317a5fbb3e8ed6f20813d0000bbc601c99e32f1892db38d540c2587070e804c0b09ccc3b75b57e3e6c03000000900050000ff010001000b000d23000d200008303082082c30820714a00302010202100ccac32b0ef281026392b8852ab15642300d06092a864886f70d01010b0500304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d31301e170d3231303132323030303030305a170d3232303132313233353935395a306a310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e311430120603550403130b6f75746c6f6f6b2e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100b5de7ec750ed549d110cf273b19417492549937eb558162209a15a4db807edf797f76448efc134fec8eb8c39fb02f923bcd0cc6acadcb9b1059df7e1e10f7832a725b924591ad0b1813218bdc0dd0807f4884500856cb39a43e2fc46d1a56fe42c6f952de1b04750584c8b084d26177f86bdfa21e6feca5699c1c0d513a11f1fd73ffc34af94b5113e238eb25393157902135258a4915ba6a9f2aa7a78baba9a438e460df1e92f46abb7eab76814b548acb855936cb13408a474d03b1e8281e87fb76d4baeacdb4dbc2601841f12d1f062f956351e3ca239f89a437c5c92112cf675c1c8c32020f8071c1db875e37f7222a15eaae26e1765519a2e438d202b4b0203010001a38204eb308204e7301f0603551d23041830168014dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7301d0603551d0e04160414c2ef36cd677376d10f5529bdcec9c73a0ee58f39308202100603551d11048202073082020382162a2e636c6f2e666f6f747072696e74646e732e636f6d820d2a2e686f746d61696c2e636f6d82162a2e696e7465726e616c2e6f75746c6f6f6b2e636f6d820a2a2e6c6976652e636f6d82162a2e6e72622e666f6f747072696e74646e732e636f6d820c2a2e6f66666963652e636f6d820f2a2e6f66666963653336352e636f6d820d2a2e6f75746c6f6f6b2e636f6d82172a2e6f75746c6f6f6b2e6f66666963653336352e636f6d821b6174746163686d656e742e6f75746c6f6f6b2e6c6976652e6e6574821d6174746163686d656e742e6f75746c6f6f6b2e6f66666963652e6e657482206174746163686d656e742e6f75746c6f6f6b2e6f66666963657070652e6e657482166174746163686d656e74732e6f66666963652e6e6574821a6174746163686d656e74732d7364662e6f66666963652e6e6574821d6363732e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d82216363732d7364662e6c6f67696e2e6d6963726f736f66746f6e6c696e652e636f6d820b686f746d61696c2e636f6d82166d61696c2e73657276696365732e6c6976652e636f6d820d6f66666963653336352e636f6d820b6f75746c6f6f6b2e636f6d82126f75746c6f6f6b2e6f66666963652e636f6d82147375627374726174652e6f66666963652e636f6d82187375627374726174652d7364662e6f66666963652e636f6d300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b0601050507030230818d0603551d1f048185308182303fa03da03b8639" } }, { "event_id": "evt-af159f565b77fac2d9773638", "kind": "unclassified_tcp", "frame_number": 73547, "timestamp_epoch": "1634917418.901761000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8db1399b210c0a57d5d1aeee", "kind": "unclassified_tcp", "frame_number": 73548, "timestamp_epoch": "1634917418.901775000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0b2ed98d71d85b26a0810e1a", "kind": "unclassified_tcp", "frame_number": 73549, "timestamp_epoch": "1634917418.901784000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "c584ccd6dd6594d94b63aa7a0c273d098b761d078e1b72965d344b6deb6f372d732abff3a52843adc1721aaa85d3d3f91418a6bb084a0d5edff10e563a0d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-5ff237b7109c8d38fb509522", "kind": "unclassified_tcp", "frame_number": 73553, "timestamp_epoch": "1634917419.390429000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095edb400000016030300070b000003000000160303006610000062610423a2b1ae3dd07aad6f10ee8e1076b82d94a25221f213b345048042ae3a3e97af2062651c5acf9ce1b5b80ed4b509b7fa7ad9e1cebdadea7a0944565a4c96d5fe7ef245c7cfd2a37aece517130c72c498da3a597b88bf4de197d1024921794ebc140303000101160303002800000000000000005785209aac9cd1534e845d3c69e647538f2f00a339b66b9b2f670d4a821ad6bb" } }, { "event_id": "evt-6806b4be0a82ee8badcd3a14", "kind": "unclassified_tcp", "frame_number": 73558, "timestamp_epoch": "1634917419.454389000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed3d00000014030300010116030300280000000000000000c60f573057829e7be0bfcc7810e4d665c251903ee8620162f6a9063522136162" } }, { "event_id": "evt-b6362c8cc71b484d0dd9b45f", "kind": "unclassified_tcp", "frame_number": 73561, "timestamp_epoch": "1634917419.770725000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed3700000017030300280000000000000001c578a326aaa2730b0c10948c21c12331c11fed578868898926b1e38be78e3574" } }, { "event_id": "evt-3371d590a5aefd5683ab8a68", "kind": "unclassified_tcp", "frame_number": 73566, "timestamp_epoch": "1634917419.837092000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095edff00000017030300f000000000000000010dfb3c2f1fafb5b1a1b4b86c8929bdcddbc51c55ebf1d366eabf02a49ff1dd5f271b17bd8663e80129dc6f689a1dcce53c213b621ac07e4e23d8017c1857a13be5ef75cccbfd0e538d8e22c2bbe679dc88bcbb3fef277f2ebf71440808b5382d9040415f96936430f14424e6518c7c030ed90e909ce1a52a1c8ecd7e467cf33741e81eaef804e6968400643188807a67ab98835ea69d6bc8d57b524e730b8630b7c4ac9093a79563e7f83e87251f57450ddcede4081e68184323eaea87757a1edf55bd2c78a99fa5e897f1ae5de18686ad12078591abcfc029eb77a9795eacfd2a7189ff31e3bd51" } }, { "event_id": "evt-20d8cd16486a2ea2bb2dfe78", "kind": "unclassified_tcp", "frame_number": 73569, "timestamp_epoch": "1634917421.204284000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed3300000017030300240000000000000002a6b734031d6d4993ffc21ed541b02677b7fdc2d2a2383f3a3006b829" } }, { "event_id": "evt-c06612dc7bc1dde76b4a2983", "kind": "unclassified_tcp", "frame_number": 73573, "timestamp_epoch": "1634917421.253360000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed39000000170303002a0000000000000002de66d637f698e86a82dc40a3cff5d5ca20bc32009558a6c5bd9ddd2c137fe6f528a7" } }, { "event_id": "evt-3d45aeae885b00fb14c48610", "kind": "unclassified_tcp", "frame_number": 73576, "timestamp_epoch": "1634917421.519659000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed4500000017030300360000000000000003279da0b3eb0a63bf1dd68f66f726ab991e9475a2d455ae3c945ac61853d5711aa4f48969a49356a287ff1912a005" } }, { "event_id": "evt-7adad50ca5b9914f72d439fa", "kind": "unclassified_tcp", "frame_number": 73580, "timestamp_epoch": "1634917421.569094000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed39000000170303002a0000000000000003fb618048ccd21177b5285279e3b12fc420570dd91af4718ee074de409d7ef9c45f1b" } }, { "event_id": "evt-e2572427d4b88e3cc24e1fed", "kind": "unclassified_tcp", "frame_number": 73583, "timestamp_epoch": "1634917421.893358000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed3500000017030300260000000000000004ae7a619754e7822098372962557c7a63302288a3dd2a1d3eaf3703faf733" } }, { "event_id": "evt-6db5ad736aefc2d390d073c1", "kind": "unclassified_tcp", "frame_number": 73589, "timestamp_epoch": "1634917423.136364000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-35d9d227d1fc5c7bb84ba1a8", "kind": "unclassified_tcp", "frame_number": 73591, "timestamp_epoch": "1634917428.151242000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6b8bc5556c3ff3ab83362d2f", "kind": "unclassified_tcp", "frame_number": 73594, "timestamp_epoch": "1634917428.682454000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095eda000000017030300910000000000000004360f1570401ee378647c84089393059bd4edcff9dcd3c269d31c14c7f9ae3f9f124d3869a485c56da2440896ebb53d57d0991a39585ffe89701ef5136f302a0c662c5cdc1ff1bbbe1dae0de177165803eadab0d8d69854bd59582694dc5c62fa9942bff698a6bcd5cf93f96869f189ccb3701bb5471a4b988a7c3829705f6ee01604046a1d3437e3d2" } }, { "event_id": "evt-0e65383e16fb99b53b9dcc12", "kind": "unclassified_tcp", "frame_number": 73597, "timestamp_epoch": "1634917428.932570000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed2a000000170303001b0000000000000005a9a8b3802a8bd146625141dbe672fe038e7dbc" } }, { "event_id": "evt-588e400459e2dc720f1ad9f2", "kind": "unclassified_tcp", "frame_number": 73601, "timestamp_epoch": "1634917431.652330000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702005cdc0c000000197b" } }, { "event_id": "evt-253a9cc42081e33df9d967e8", "kind": "unclassified_tcp", "frame_number": 73603, "timestamp_epoch": "1634917431.838548000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc0e000000050200020207030044d20c000000197b0407030044d20e00000005020002" } }, { "event_id": "evt-4178b99786594d7d0b5ed661", "kind": "unclassified_tcp", "frame_number": 73604, "timestamp_epoch": "1634917431.839201000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005cdc0c00000005020307030044d20c0000000502" } }, { "event_id": "evt-306d85af7480e6e00b370656", "kind": "unclassified_tcp", "frame_number": 73607, "timestamp_epoch": "1634917432.082487000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc20000000010432356d630f356f504d44384828685558534a2a570407030044d220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-36ad35581d15458e9d59c165", "kind": "unclassified_tcp", "frame_number": 73608, "timestamp_epoch": "1634917432.083052000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005cdc0c00000001000307030044d20c0000000100" } }, { "event_id": "evt-086ade8339a527ec15c9c865", "kind": "unclassified_tcp", "frame_number": 73610, "timestamp_epoch": "1634917432.409831000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc210000000501000310736d74702e6f75746c6f6f6b2e636f6d00190407030044d220000000050100030f6d61696c2e627572676572732e63630019" } }, { "event_id": "evt-6a64fe20006706c37a00300f", "kind": "unclassified_tcp", "frame_number": 73623, "timestamp_epoch": "1634917433.087856000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc14000000050000010a0a169cc3e9040702005cdc7900000032323020534139505231334341303032372e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34333a3532202b303030300d0a" } }, { "event_id": "evt-76fe1131c4bcdc95d02121cb", "kind": "unclassified_tcp", "frame_number": 73625, "timestamp_epoch": "1634917433.199447000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-eb488865c5c68bff9de6ebbb", "kind": "unclassified_tcp", "frame_number": 73627, "timestamp_epoch": "1634917433.332824000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-749ca2acc100115686f526a2", "kind": "unclassified_tcp", "frame_number": 73631, "timestamp_epoch": "1634917433.380809000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdcd80000003235302d534139505231334341303032372e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-14bd9c679a0ee62ab46a970c", "kind": "unclassified_tcp", "frame_number": 73635, "timestamp_epoch": "1634917433.401278000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d214000000050000010a0a169cc3ea" } }, { "event_id": "evt-0f66627cff55c4ed1debe1d4", "kind": "unclassified_tcp", "frame_number": 73640, "timestamp_epoch": "1634917433.706400000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d26d00000032323020766d30312d7465656e792e7765626f6e6c696e652e62697a2045534d5450204d61696c456e61626c6520536572766963652c2056657273696f6e3a20342e32362d2d2072656164792061742031302f32322f32312031373a34333a35330d0a" } }, { "event_id": "evt-98ac7eab16793ee780af8c2a", "kind": "unclassified_tcp", "frame_number": 73643, "timestamp_epoch": "1634917433.808140000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc140000005354415254544c530d0a" } }, { "event_id": "evt-09d57de47a1be8b9c8f16e5b", "kind": "unclassified_tcp", "frame_number": 73647, "timestamp_epoch": "1634917433.848309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-8d4f34162719cf31fe67543e", "kind": "unclassified_tcp", "frame_number": 73651, "timestamp_epoch": "1634917433.995542000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed75000000170303006600000000000000053c19bd438c842eb7efd13fafd91c3c42bcee9121e4901ace917f5bbc35fa8897be90261a0e2e8ccb41fcf6835b267bdb4e07eb505b26ebfaea6e9cb5423e81f80f472926597b643dbd4c61b55193af7479439a9f86aed3c28ca731c18f2c" } }, { "event_id": "evt-75db4cf4301123ab861bc22a", "kind": "unclassified_tcp", "frame_number": 73654, "timestamp_epoch": "1634917434.210675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d21a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-633f80fd407413691716bc91", "kind": "unclassified_tcp", "frame_number": 73658, "timestamp_epoch": "1634917434.390704000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7f5b3e3c09f40891f597af2d", "kind": "unclassified_tcp", "frame_number": 73666, "timestamp_epoch": "1634917434.444517000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010095ed5700000017030300480000000000000006b4fba59558767433f23ff19d97b3df8210700363ce66b1e4f044d21f349985a375e2d954c8f4cd26b256b0a42b84ccf5e13e7b337337fa0aa59401d042a03405" } }, { "event_id": "evt-0b3ef32bbd39b9b53a038c38", "kind": "unclassified_tcp", "frame_number": 73670, "timestamp_epoch": "1634917434.445008000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010095ed0a000000" } }, { "event_id": "evt-fb5ea5e27ae6ea209aad5431", "kind": "unclassified_tcp", "frame_number": 73673, "timestamp_epoch": "1634917434.447384000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-70fa20f34602ec0e16d55a9d", "kind": "unclassified_tcp", "frame_number": 73680, "timestamp_epoch": "1634917434.452018000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-82f864c601caebb8f2c6ea2a", "kind": "unclassified_tcp", "frame_number": 73681, "timestamp_epoch": "1634917434.452032000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a4225222c9cc4538309c7019", "kind": "unclassified_tcp", "frame_number": 73682, "timestamp_epoch": "1634917434.452040000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "3784ef46174eb28f762d5ee327d5bd2dfa31ca1c604deaa46289d82c3d610b78bbab4282b0165a759c288bbc56068bd94b16f628a9c829e8cf0d83effd0d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-d14415f46bbab90dd19d6910", "kind": "unclassified_tcp", "frame_number": 73687, "timestamp_epoch": "1634917434.526375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d2970000003235302d766d30312d7465656e792e7765626f6e6c696e652e62697a205b3137332e36362e3134362e3131325d2c207468697320736572766572206f6666657273203420657874656e73696f6e730d0a3235302d41555448204c4f47494e0d0a3235302d53495a452032303937313532300d0a3235302d48454c500d0a32353020415554483d4c4f47494e0d0a" } }, { "event_id": "evt-13d6a735a5a9ada091bffd9c", "kind": "unclassified_tcp", "frame_number": 73691, "timestamp_epoch": "1634917435.102937000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdcb400000016030300070b0000030000001603030066100000626104ecd9cf3e6c8c106b5b5f3fe4e0121f0c263cb168cc29f1472165edfc8ec10f47b215ca46e249d182cf1518c07a79247b494c3f56bc44787b5d1205e8a66eb33e9d18308f5aa6e87f5ed25bf047896523e2e869f52aa6093997e4166236f1464c14030300010116030300280000000000000000964e7b1b13b9ef9c5d3620cdcd30c83161e48d6504951022e65db5d89a0bea2e" } }, { "event_id": "evt-1c481d9a8af84651962c6df9", "kind": "unclassified_tcp", "frame_number": 73696, "timestamp_epoch": "1634917435.157289000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc3d00000014030300010116030300280000000000000000042383f52ae3241debc9f8bb7f05cae17a53d1ff40909301caaf1f31f539f779" } }, { "event_id": "evt-9d01c63ed357dcf6b2ed5805", "kind": "unclassified_tcp", "frame_number": 73699, "timestamp_epoch": "1634917435.646029000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc3700000017030300280000000000000001ce45a256bafbe4c92d6d7667a523a4881358c13447e3818807b1c62a42735238" } }, { "event_id": "evt-3ff7c501b2af826f3b2fc4a0", "kind": "unclassified_tcp", "frame_number": 73704, "timestamp_epoch": "1634917435.699353000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6f1441bc13d22eb85b8b6321", "kind": "unclassified_tcp", "frame_number": 73707, "timestamp_epoch": "1634917435.957701000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d21600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-8f9c5401001e5cd07ecdb8dd", "kind": "unclassified_tcp", "frame_number": 73711, "timestamp_epoch": "1634917436.025891000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1558ad656b95957b14cd8b23", "kind": "unclassified_tcp", "frame_number": 73714, "timestamp_epoch": "1634917436.260789000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d21c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-022e860860e6d3320b61c9da", "kind": "unclassified_tcp", "frame_number": 73717, "timestamp_epoch": "1634917436.456634000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc3300000017030300240000000000000002edf6cd1cfda82ffcc11c8b4f001bab3797463683130ee9fd373a47d2" } }, { "event_id": "evt-829157cde0cf0ce612e6ec1b", "kind": "unclassified_tcp", "frame_number": 73722, "timestamp_epoch": "1634917436.535241000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc39000000170303002a0000000000000002d3408e602758c72041fe51e5b126e68bc0f43f82192646b5fef6f6bc99b21d3be168" } }, { "event_id": "evt-6d6cf9026cedd003704cb814", "kind": "unclassified_tcp", "frame_number": 73725, "timestamp_epoch": "1634917436.640924000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d2240000005a6d39315932686c51474a31636d646c636e4d7559324d3d0d0a" } }, { "event_id": "evt-3274632b9389022a574c7869", "kind": "unclassified_tcp", "frame_number": 73729, "timestamp_epoch": "1634917436.931649000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc49000000170303003a00000000000000032c040249cd458db03ed3a9848f6c45bc9a506db3f2efcbaa67e9f8d6b3dfc4ab46a0c6732c2d9b2c4e8fa611025089173369" } }, { "event_id": "evt-b91ce3ccad7c4d1be9293237", "kind": "unclassified_tcp", "frame_number": 73733, "timestamp_epoch": "1634917436.956847000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d21c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-94433f047f4cb48c64bc4a88", "kind": "unclassified_tcp", "frame_number": 73736, "timestamp_epoch": "1634917436.996343000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc39000000170303002a00000000000000034d44bb536596a6cbf24dc59b475b4930d49c5b338b20b8e3d716df5e92b2757c5e91" } }, { "event_id": "evt-3e2301e5456a1090caaf8dea", "kind": "unclassified_tcp", "frame_number": 73761, "timestamp_epoch": "1634917437.405000000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d21c000000596e56795a325679637a49774d544d3d0d0a" } }, { "event_id": "evt-7bdefc59cd17dd4643d202d9", "kind": "unclassified_tcp", "frame_number": 73769, "timestamp_epoch": "1634917437.587768000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc3500000017030300260000000000000004ac38b3e94feff33f86a285264e17d4a34cd0db7acec0d937825bbcebae2e" } }, { "event_id": "evt-7a9cb0886b9ffcaf74677ba9", "kind": "unclassified_tcp", "frame_number": 73774, "timestamp_epoch": "1634917437.717549000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d22c00000035303420496e76616c696420557365726e616d65206f722050617373776f72640d0a" } }, { "event_id": "evt-741339dc02333bbb998c9f09", "kind": "unclassified_tcp", "frame_number": 73877, "timestamp_epoch": "1634917437.999345000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d20d0000002a0d0a" } }, { "event_id": "evt-937bfaa054ed3f3d642d2f1a", "kind": "unclassified_tcp", "frame_number": 74202, "timestamp_epoch": "1634917438.398026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d228000000353033204261642073657175656e6365206f6620636f6d6d616e64730d0a" } }, { "event_id": "evt-d0b20832cdebacc2223bb80f", "kind": "unclassified_tcp", "frame_number": 74376, "timestamp_epoch": "1634917438.780583000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d210000000515549540d0a" } }, { "event_id": "evt-c8c88b2feb0e47b5e32df7da", "kind": "unclassified_tcp", "frame_number": 74381, "timestamp_epoch": "1634917439.127758000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030044d234000000323231205365727669636520636c6f73696e67207472616e736d697373696f6e206368616e6e656c0d0a" } }, { "event_id": "evt-b1ad4daa355a888cae35e597", "kind": "unclassified_tcp", "frame_number": 74384, "timestamp_epoch": "1634917439.198033000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b0e14cd299352daf2bbff2d3", "kind": "unclassified_tcp", "frame_number": 74386, "timestamp_epoch": "1634917439.395054000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030044d20a000000" } }, { "event_id": "evt-ceed654b4e8078cc414d330d", "kind": "unclassified_tcp", "frame_number": 74392, "timestamp_epoch": "1634917444.278095000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-357fe1e5c38a64b78b40fde6", "kind": "unclassified_tcp", "frame_number": 74396, "timestamp_epoch": "1634917448.038026000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdca000000017030300910000000000000004fb10223cb6ae50d399cc4108b4a1540359ab39c74b932d9f761e7ae837515f1d7e55bccd9d98a6cffccc2716dc9cee4294796afa741e5e9ce3ac4a7102709cead02d1c3ce35341db7b847daa14eac457ea209489d24c7fab458677184e30b75d94077102609fb95ca0224640b183cdfa33abef2e1668e516af1eba801ccb0857622ff118b2c88f9832" } }, { "event_id": "evt-038c7d65b0978fc2eaf08020", "kind": "unclassified_tcp", "frame_number": 74399, "timestamp_epoch": "1634917448.340840000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc2a000000170303001b00000000000000059b52501bf06998f1756fbbc80e4904e05726b1" } }, { "event_id": "evt-d68654021251143ad7a7eddc", "kind": "unclassified_tcp", "frame_number": 74405, "timestamp_epoch": "1634917449.323996000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a4810bff086b958aa7442202", "kind": "unclassified_tcp", "frame_number": 74408, "timestamp_epoch": "1634917453.466923000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc7500000017030300660000000000000005ff26f88ab9019def835bd23c93a169cf51fad4d114bb527a08534a29787be40192f466e17620731466d20895137aba1f5adf7f46b8925eb72f97c487bd316178d0f9ff90f8cf43dcfca4e4c7214ecefe28c89be32011488c75b561e5c154" } }, { "event_id": "evt-a7d85cad3be00e7d5ce976ec", "kind": "unclassified_tcp", "frame_number": 74411, "timestamp_epoch": "1634917453.813005000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc2d000000170303001e000000000000000699e802a6edd3a5cbf862333a73f2617164bbb2f3bd9b" } }, { "event_id": "evt-0db5a1f6d5e16313d396c700", "kind": "unclassified_tcp", "frame_number": 74417, "timestamp_epoch": "1634917453.859031000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005cdc57000000170303004800000000000000066a91a8bd1baff27cb15594561e5b409a99f8e3f086cf5b72e37464bf540364bc89159b6ed00149f95aa7c39d6a59961709adf10fdaf0deda4eb0f4733a68d810" } }, { "event_id": "evt-077bb54b24e607b7c6566617", "kind": "unclassified_tcp", "frame_number": 74421, "timestamp_epoch": "1634917453.859375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702005cdc0a000000" } }, { "event_id": "evt-be9ae7f26702b6b63dd9477d", "kind": "unclassified_tcp", "frame_number": 74431, "timestamp_epoch": "1634917454.386669000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-74d8707ed65f02aae465cb4c", "kind": "unclassified_tcp", "frame_number": 74433, "timestamp_epoch": "1634917454.897471000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701009bc70c000000197b" } }, { "event_id": "evt-7baf6e87d67123d8099dede6", "kind": "unclassified_tcp", "frame_number": 74435, "timestamp_epoch": "1634917455.100203000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc70e00000005020002" } }, { "event_id": "evt-3bbeea080f2610fc7d756c8a", "kind": "unclassified_tcp", "frame_number": 74436, "timestamp_epoch": "1634917455.100661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009bc70c0000000502" } }, { "event_id": "evt-65c38992e3199e59c8661764", "kind": "unclassified_tcp", "frame_number": 74438, "timestamp_epoch": "1634917455.363320000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc720000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-88080233422b33653d1d5168", "kind": "unclassified_tcp", "frame_number": 74439, "timestamp_epoch": "1634917455.363855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701009bc70c0000000100" } }, { "event_id": "evt-fac54dd20f9be635d9e00481", "kind": "unclassified_tcp", "frame_number": 74441, "timestamp_epoch": "1634917455.671831000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-fa4b26db18e98faa0e46c798", "kind": "unclassified_tcp", "frame_number": 74448, "timestamp_epoch": "1634917455.769804000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc714000000050000010a0a169cc3eb" } }, { "event_id": "evt-7733da1c4a2c3d685cc4a3ad", "kind": "unclassified_tcp", "frame_number": 74451, "timestamp_epoch": "1634917455.813021000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc77900000032323020534130505231314341303034322e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a34343a3135202b303030300d0a" } }, { "event_id": "evt-d0d945b50c1f6fa76233ad23", "kind": "unclassified_tcp", "frame_number": 74454, "timestamp_epoch": "1634917456.216133000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc71a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-a79e475332bfaf86daf81a35", "kind": "unclassified_tcp", "frame_number": 74459, "timestamp_epoch": "1634917456.267610000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7d80000003235302d534130505231314341303034322e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-933f7ebb00586a7ae8eac9b9", "kind": "unclassified_tcp", "frame_number": 74462, "timestamp_epoch": "1634917456.602927000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7140000005354415254544c530d0a" } }, { "event_id": "evt-93c61f93aeccf66cad15754b", "kind": "unclassified_tcp", "frame_number": 74467, "timestamp_epoch": "1634917456.656544000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc72700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-cb5c5106000cc72ddc093124", "kind": "unclassified_tcp", "frame_number": 74470, "timestamp_epoch": "1634917457.032366000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d88b164307118bfe7eb720ed", "kind": "unclassified_tcp", "frame_number": 74475, "timestamp_epoch": "1634917457.095813000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f1f35a66d6a73965169e9af", "kind": "unclassified_tcp", "frame_number": 74482, "timestamp_epoch": "1634917457.184394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a97f93faa958b0870ca738ea", "kind": "unclassified_tcp", "frame_number": 74483, "timestamp_epoch": "1634917457.184408000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-09dd52f4ff8c76d7a4478a52", "kind": "unclassified_tcp", "frame_number": 74487, "timestamp_epoch": "1634917457.243949000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a52e86722d5162229c71d9b7", "kind": "unclassified_tcp", "frame_number": 74490, "timestamp_epoch": "1634917457.612289000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7b400000016030300070b00000300000016030300661000006261045be586123e78b2ccf9bec6c7b89cc23512924c0769aa94bc59e59afba44b9d2ff3c82d6c3a5de9e7ef8c0d4e7de1816c51ce21a65cd2deef6b4162cfabca65641b856d286d58ba6a1b5ab21db6187590af8d276c9ce56bcedff1087fbe5db17614030300010116030300280000000000000000f32d2daca83bffe19134cf214c6b5f14170d6e0bd548ea3838c2be58dcc0e1e6" } }, { "event_id": "evt-05806c0c22e10b304a7c8e0a", "kind": "unclassified_tcp", "frame_number": 74495, "timestamp_epoch": "1634917457.691892000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc73d00000014030300010116030300280000000000000000e304bdc453568fb1bae3d2764bd1ef840be0dc67174f09759161e3222c9c9368" } }, { "event_id": "evt-1b5475817ff470296f6c315a", "kind": "unclassified_tcp", "frame_number": 74498, "timestamp_epoch": "1634917458.037723000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc73700000017030300280000000000000001026462abf6988dde38dba2db316fd3b390f229b3ee9583e6f60f2b235299abb6" } }, { "event_id": "evt-6a8964907e8232d7ff5768e5", "kind": "unclassified_tcp", "frame_number": 74502, "timestamp_epoch": "1634917458.088227000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a81c38e18b36e46d58789138", "kind": "unclassified_tcp", "frame_number": 74505, "timestamp_epoch": "1634917459.387976000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-74c7a77447aae41628f11270", "kind": "unclassified_tcp", "frame_number": 74507, "timestamp_epoch": "1634917459.403776000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc733000000170303002400000000000000029d83488917a593404f27100326844e35563f1f204b92a36193e34c12" } }, { "event_id": "evt-43c52ac3781db8105affe07c", "kind": "unclassified_tcp", "frame_number": 74512, "timestamp_epoch": "1634917459.571865000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc739000000170303002a00000000000000029de8c16055277e334cd9ed129bac167fa099c21be7239305319449278ba1e4cce40c" } }, { "event_id": "evt-04213236840e8b23d8b471cb", "kind": "unclassified_tcp", "frame_number": 74515, "timestamp_epoch": "1634917459.868201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc74500000017030300360000000000000003fe763d0de643b856d3b3b40e8b627d84dd507f2ae8d6d16ba176b1840e795b7f17e2e468dee9420f6ba091e4a85d" } }, { "event_id": "evt-78b39de2e1cc5a2a77f2f5cf", "kind": "unclassified_tcp", "frame_number": 74519, "timestamp_epoch": "1634917459.911946000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc739000000170303002a0000000000000003853fbfab86514adcc7f72758fc1ff6353807f695aeb3718fefbfa5af050ebc1aeaee" } }, { "event_id": "evt-a1ff92195231c00448f2a641", "kind": "unclassified_tcp", "frame_number": 74524, "timestamp_epoch": "1634917460.304281000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7350000001703030026000000000000000482901b21464bea66f79adb95a471a735b0d3eae04ee320eeb487619c4863" } }, { "event_id": "evt-4b82589b9f323608b92ab441", "kind": "unclassified_tcp", "frame_number": 74543, "timestamp_epoch": "1634917462.050409000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020021e50c000000197b" } }, { "event_id": "evt-7dfc2382c41c8c3305b1fbd6", "kind": "unclassified_tcp", "frame_number": 74545, "timestamp_epoch": "1634917462.232446000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e50e00000005020002" } }, { "event_id": "evt-dac4864e3203315452cf2555", "kind": "unclassified_tcp", "frame_number": 74546, "timestamp_epoch": "1634917462.233009000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020021e50c0000000502" } }, { "event_id": "evt-6f7eecf166a0a445993e050d", "kind": "unclassified_tcp", "frame_number": 74548, "timestamp_epoch": "1634917462.528063000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e520000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-96fb6aaf60553d06dba864a5", "kind": "unclassified_tcp", "frame_number": 74549, "timestamp_epoch": "1634917462.528402000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020021e50c0000000100" } }, { "event_id": "evt-a177347a12a43427dfb5c6dc", "kind": "unclassified_tcp", "frame_number": 74551, "timestamp_epoch": "1634917462.902814000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e52600000005010003156d61696c2e74636761736f636961646f732e636f6d0019" } }, { "event_id": "evt-41bad1b1b98ff1c26b08bfe9", "kind": "unclassified_tcp", "frame_number": 74559, "timestamp_epoch": "1634917463.115770000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e514000000050000010a0a169cc3ed" } }, { "event_id": "evt-7732265380f744b3f81cdd12", "kind": "unclassified_tcp", "frame_number": 74562, "timestamp_epoch": "1634917463.188846000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e54e0000003232302045534d5450204672692c203232204f637420323032312031313a34343a3233202d303430303a20554345207374726963746c792070726f686962697465640d0a" } }, { "event_id": "evt-f652c81d476711e26c6d8697", "kind": "unclassified_tcp", "frame_number": 74565, "timestamp_epoch": "1634917463.537437000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e51a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-01478613ad4205a8c1353b34", "kind": "unclassified_tcp", "frame_number": 74570, "timestamp_epoch": "1634917463.611645000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5d40000003235302d626f7361757468736d747031382e796f7572686f7374696e676163636f756e742e636f6d2048656c6c6f206c6f63616c686f7374205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033343630333030380d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-e4984f766ac6be3b2c0e4e32", "kind": "unclassified_tcp", "frame_number": 74574, "timestamp_epoch": "1634917463.876411000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5140000005354415254544c530d0a" } }, { "event_id": "evt-18e2bb9dd69bfe9952d33ada", "kind": "unclassified_tcp", "frame_number": 74579, "timestamp_epoch": "1634917463.948715000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e51c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-99117b903dc324735b6e4dd3", "kind": "unclassified_tcp", "frame_number": 74582, "timestamp_epoch": "1634917464.269578000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2b398fb44cff8453d01ce280", "kind": "unclassified_tcp", "frame_number": 74587, "timestamp_epoch": "1634917464.351489000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7dcf354daac3d7cdf0a54c81", "kind": "unclassified_tcp", "frame_number": 74592, "timestamp_epoch": "1634917464.359669000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-38e533c1f4959ad9a7a8d8c8", "kind": "unclassified_tcp", "frame_number": 74593, "timestamp_epoch": "1634917464.359690000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b3b0612a02d27e6a92976919", "kind": "unclassified_tcp", "frame_number": 74596, "timestamp_epoch": "1634917464.818323000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5880000001603030046100000424104d9069ec43da464f16c2c6f40c938ce25a91a0f3f22804a534f621982c17ec77e548f877278f6703ad67ea6f90487ae3cc9c9d4980e46883dfd76f260f513c43314030300010116030300280000000000000000b62a977b92b1fce5d564a21a9da22e28799d82e7c6590ff9175e307607226125" } }, { "event_id": "evt-a119612f1911ff5457a960ee", "kind": "unclassified_tcp", "frame_number": 74601, "timestamp_epoch": "1634917464.887571000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e53d00000014030300010116030300282e2d987b1af99aae4573df2570490844b02b335b0fee858e709e0a93ee12bb3f4e096bc9b3f98519" } }, { "event_id": "evt-020d017effdd47769b419142", "kind": "unclassified_tcp", "frame_number": 74605, "timestamp_epoch": "1634917465.246308000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5370000001703030028000000000000000191534cfd258e73259b7e390a53012c9739bee942134edc53923c35b200973de7" } }, { "event_id": "evt-339d084ec26084d7aa845f95", "kind": "unclassified_tcp", "frame_number": 74610, "timestamp_epoch": "1634917465.336400000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5e300000017030300d42e2d987b1af99aafff04d1f7cd6d99e7820dafdacfdd5bdf321c34953cfc74b82ff03f334af8bbe35a763f9ef63c1483f2b34812b854eea2de2a208f77643e0a08237894e42217c2bb21e4363724f4b94ebf28ed845c98cb43374f2e63c7066698e00ae8506911540be501fbeb7a53db8796e72ae21efbebf8a6172e7d54e78b4667f7609f0bb778e908f7c6ce3c58a753af7ff6ce6082f1e232e92a4b783c00391ba220b1fa3ea3c27df5abf57c8562bb4d6af73e4042b44f018e9682748a70d9c9e745adbd333afe8434e8e522ecbdffc6d9f3" } }, { "event_id": "evt-3b9d77ffa8236cd53e25544e", "kind": "unclassified_tcp", "frame_number": 74613, "timestamp_epoch": "1634917465.387421000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fe0151b1c0bbe2aca45eedf2", "kind": "unclassified_tcp", "frame_number": 74615, "timestamp_epoch": "1634917466.479616000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-da6603ada5e8dc06b0e157d0", "kind": "unclassified_tcp", "frame_number": 74620, "timestamp_epoch": "1634917466.607006000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e5330000001703030024000000000000000259ec58e22888e7524462435a520f796e13dc4386fc9b35799969f3f4" } }, { "event_id": "evt-c339254dad6bb8285337aa8c", "kind": "unclassified_tcp", "frame_number": 74626, "timestamp_epoch": "1634917466.710571000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e539000000170303002a2e2d987b1af99ab02862dca94492e22f33687faccd4ea31eafdd66a5c41c5de2b40f2c6617bd5f4cb1a3" } }, { "event_id": "evt-7c03bda9a461886fb58b6e1b", "kind": "unclassified_tcp", "frame_number": 74631, "timestamp_epoch": "1634917467.080420000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e54d000000170303003e0000000000000003c22f002e8c0386f5ec3648d6e83ca33b710ed3a063d262a2cf940e4e640f4a336bf3152581b07218f72614cfddff5bc20403881dd44f" } }, { "event_id": "evt-7c85f4245cdbd0943458087c", "kind": "unclassified_tcp", "frame_number": 74636, "timestamp_epoch": "1634917467.156276000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e539000000170303002a2e2d987b1af99ab1cbd0a26d6024c92cf7b26e759276326f7e2d273d3f0c400cab046558f2d3b8d5c055" } }, { "event_id": "evt-c8e65f0505ce4451c51f1961", "kind": "unclassified_tcp", "frame_number": 74643, "timestamp_epoch": "1634917467.598482000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e53500000017030300260000000000000004758f3573b35f68f83cc392d8b656447f26bad1c8be4a82a1602e04dc00b0" } }, { "event_id": "evt-8bee81a748088e81f2afeb01", "kind": "unclassified_tcp", "frame_number": 74648, "timestamp_epoch": "1634917469.337300000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e54a000000170303003b2e2d987b1af99ab286ea0921e911f7e0e32484fb17ce0855ae8e522d0916e035d7e7faf75d51a7f02ce5a67bc1033eeba811fe3d9937caf55a2b59" } }, { "event_id": "evt-b6e5c552913a08cf39d09591", "kind": "unclassified_tcp", "frame_number": 74651, "timestamp_epoch": "1634917469.848272000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e52a000000170303001b00000000000000053fdace060299c6700d9bb4ff6f470c8b398641" } }, { "event_id": "evt-10ec41df1c339dded1db2196", "kind": "unclassified_tcp", "frame_number": 74656, "timestamp_epoch": "1634917469.938184000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e54100000017030300322e2d987b1af99ab32e095e0f765e6915b9a82939c2c288a590580d36940b6f589273fda326ca46dc654c679e599425e38d25" } }, { "event_id": "evt-6c54875369f6bb070afdcd30", "kind": "unclassified_tcp", "frame_number": 74660, "timestamp_epoch": "1634917470.052006000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc7a000000017030300910000000000000004bd19c76a09bce277ba53324405a4256a4b070b345fd352ef1552c54f56af5180625a28ed395b91edef55ad62200c105a836e0aae8fca12524eb91886f2d01badc97bbcd2ab07dbc6e3aee2f58f018f53e3d252c80864d5e70010803b33a9218fff200b3c6be8d0d7a195164e9714744e022f6abe748362e0a1a77f2a863de98c64a71773785c662d2e" } }, { "event_id": "evt-676513bc751743d9600fd30e", "kind": "unclassified_tcp", "frame_number": 74663, "timestamp_epoch": "1634917470.279534000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e52d000000170303001e000000000000000697c4f3c0079b4aa1598e69850c0846a5092ba496737f" } }, { "event_id": "evt-e4e7413e179db4c5d8cdcc38", "kind": "unclassified_tcp", "frame_number": 74670, "timestamp_epoch": "1634917470.369451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020021e58300000017030300552e2d987b1af99ab41e6417a8f59a4dbae114ee45c5749ba39bcdcd23463e8fd49719b7946172a5cf266ffc15dbab259f1ea9ad696f0e72d07b76883f468c85ff724020ac849186e2626b6005e24876587bbbddff0a150303001a2e2d987b1af99ab575bd71436eab586f95f0b2848489a061f4b0" } }, { "event_id": "evt-07bb006333fa63e17f01b72d", "kind": "unclassified_tcp", "frame_number": 74674, "timestamp_epoch": "1634917470.370014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020021e50a000000" } }, { "event_id": "evt-ca8b6872fa12932e8ce71d36", "kind": "unclassified_tcp", "frame_number": 74676, "timestamp_epoch": "1634917470.468996000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc72a000000170303001b000000000000000547999b9a5c09adba9bd214328cd2a572da46e1" } }, { "event_id": "evt-63f9ab3f6e2bf15fe83ead56", "kind": "unclassified_tcp", "frame_number": 74682, "timestamp_epoch": "1634917471.387879000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4605ee3a525df7034e07c316", "kind": "unclassified_tcp", "frame_number": 74717, "timestamp_epoch": "1634917475.583527000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc77500000017030300660000000000000005e723c86c5553296a334c7af7b8637bc69f8f47c0cd259c1aadf12f44306094086747fbf3d95c453f6ac1d9caf3a3129e87e88d8485470128ebf0d82e5cfe52bc6c9e269ee72caed3c1b7474f5b538b4e475f7149a71ea185080e7746571f" } }, { "event_id": "evt-2e35ba0daf3789908a08605d", "kind": "unclassified_tcp", "frame_number": 74721, "timestamp_epoch": "1634917475.839360000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc72d000000170303001e0000000000000006447728169cdadbde0705224956c9f1054374a8b8f97d" } }, { "event_id": "evt-172e5aed31fb4ca404247c54", "kind": "unclassified_tcp", "frame_number": 74727, "timestamp_epoch": "1634917475.893455000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc75700000017030300480000000000000006f76428b1a8bd2c8dc707a399c5e0ea9dc32aea64abb5154f33667c9c34b7283f348d30eb10c5dc21059bc9a18690003fc3e3171705772c6594678d7b673786ab" } }, { "event_id": "evt-dfa500fc7faf55b6539206d8", "kind": "unclassified_tcp", "frame_number": 74731, "timestamp_epoch": "1634917475.893748000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009bc70a000000" } }, { "event_id": "evt-4b06427ed5c2806d9af0d141", "kind": "unclassified_tcp", "frame_number": 74735, "timestamp_epoch": "1634917476.235645000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701009bc729000000150303001a000000000000000746991be353cc7658430fc2cdaddf00ee94a3" } }, { "event_id": "evt-b675d97b280f9a20100c24ff", "kind": "unclassified_tcp", "frame_number": 74737, "timestamp_epoch": "1634917476.413531000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701009bc70a000000" } }, { "event_id": "evt-84cc1b1fda1fbbdbf4436fb3", "kind": "unclassified_tcp", "frame_number": 74739, "timestamp_epoch": "1634917477.388104000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50304, "dst_port": 1187, "tcp_stream": 1450, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-81d36fed03761275f474c998", "kind": "unclassified_tcp", "frame_number": 74758, "timestamp_epoch": "1634917480.088097000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010006b90c000000197b" } }, { "event_id": "evt-add1a42c19902cf7ed68713e", "kind": "unclassified_tcp", "frame_number": 74760, "timestamp_epoch": "1634917480.275418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b90e00000005020002" } }, { "event_id": "evt-e2c176b80c01dcb1be957627", "kind": "unclassified_tcp", "frame_number": 74761, "timestamp_epoch": "1634917480.276069000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010006b90c0000000502" } }, { "event_id": "evt-898ec3934256e931ef619948", "kind": "unclassified_tcp", "frame_number": 74763, "timestamp_epoch": "1634917480.533497000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-735e72b64f854f705c5bb216", "kind": "unclassified_tcp", "frame_number": 74764, "timestamp_epoch": "1634917480.534041000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010006b90c0000000100" } }, { "event_id": "evt-a1a652c22d7e60ae6b8e1eec", "kind": "unclassified_tcp", "frame_number": 74766, "timestamp_epoch": "1634917480.877717000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b92a0000000501000319687a6d7830312e6d786d61696c2e6e6574656173652e636f6d0019" } }, { "event_id": "evt-69f1acd54378521483c979eb", "kind": "unclassified_tcp", "frame_number": 74774, "timestamp_epoch": "1634917481.317902000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b914000000050000010a0a169cc3f0" } }, { "event_id": "evt-c3526e157b4c4ddc89ac128d", "kind": "unclassified_tcp", "frame_number": 74777, "timestamp_epoch": "1634917481.585104000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b93a00000032323020656e746d61696c2d686b2d687a70726f7879322e687a2e3136332e6f72672045534d54502072656164790d0a" } }, { "event_id": "evt-46f3f849baadd48f35b156ed", "kind": "unclassified_tcp", "frame_number": 74780, "timestamp_epoch": "1634917481.847116000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b91a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c686a71ab45de532d5d9a61c", "kind": "unclassified_tcp", "frame_number": 74785, "timestamp_epoch": "1634917482.139468000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9860000003235302d656e746d61696c2d686b2d687a70726f7879322e687a2e3136332e6f72670d0a3235302d504950454c494e494e470d0a3235302d384249544d494d450d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d4155544820504c41494e204c4f47494e0d0a323530205354415254544c530d0a" } }, { "event_id": "evt-34d0fc26f45df983281852b5", "kind": "unclassified_tcp", "frame_number": 74789, "timestamp_epoch": "1634917482.493097000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9140000005354415254544c530d0a" } }, { "event_id": "evt-cdfa1359a8e333293f146b21", "kind": "unclassified_tcp", "frame_number": 74794, "timestamp_epoch": "1634917482.861065000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b91f00000032323020322e302e3020537461727420544c530d0a" } }, { "event_id": "evt-6baecbd9cc65ad4c36d3020b", "kind": "unclassified_tcp", "frame_number": 74797, "timestamp_epoch": "1634917483.180537000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7b02e1f2b16c55883984adf8", "kind": "unclassified_tcp", "frame_number": 74805, "timestamp_epoch": "1634917483.571014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-800e97295ebd080da07f9ee3", "kind": "unclassified_tcp", "frame_number": 74806, "timestamp_epoch": "1634917483.571037000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2a71335348bc4251a78e0e40", "kind": "unclassified_tcp", "frame_number": 74807, "timestamp_epoch": "1634917483.571051000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9a6ca92eda3294a5fd38f538", "kind": "unclassified_tcp", "frame_number": 74811, "timestamp_epoch": "1634917484.026796000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9880000001603030046100000424104badb13c227e91146115fd6c6421ffe3ba441a2b7109043dd0f973131ccb4658b70fa8063305413ba5e3f08ab7a82a359edc39f44423fdad6616626c47b6585e114030300010116030300280000000000000000dc3c460035368436eb6ea1586be2f13ef9f2ab1d88a0224b229c502bb4d6b7b5" } }, { "event_id": "evt-f524322f3937e1d79347cff7", "kind": "unclassified_tcp", "frame_number": 74816, "timestamp_epoch": "1634917484.389226000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b93d0000001403030001011603030028481126a295a7e1670dd50c204ff3edd7f6ae6b87b0ecd83cf534115ead3661377d892f9dcb654b24" } }, { "event_id": "evt-4bd4f97a63e641dc4f1733e8", "kind": "unclassified_tcp", "frame_number": 74819, "timestamp_epoch": "1634917484.757772000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b93700000017030300280000000000000001826be6bf38507365a768f57d33b3847828858ef59b4efe80779d7b96dde072bb" } }, { "event_id": "evt-3d42541a6ccfb76621546011", "kind": "unclassified_tcp", "frame_number": 74824, "timestamp_epoch": "1634917485.106663000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9950000001703030086481126a295a7e16801742ff9e954313103bd9e8724e9814bf71736220e1e6b7ddad407c825a8dbf17026fecf0eb4de60e29c2189a49742955f6a412c9f984f7bb631741cbd3793abe6b58f77b02d4ce1ec653768ada9fabc0c170d942ffee43359989853c0d4a5ec89ca00035dd58544282495b43425b3416d493d3dbf26f779435fb59e71d8" } }, { "event_id": "evt-5945cef5b9e5eafa356f65d9", "kind": "unclassified_tcp", "frame_number": 74827, "timestamp_epoch": "1634917485.720190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b933000000170303002400000000000000021e0115a46eae226532c6410ad64e3a76802e274553de5b25baa358d2" } }, { "event_id": "evt-464e4e352a057df8120aed60", "kind": "unclassified_tcp", "frame_number": 74831, "timestamp_epoch": "1634917485.904765000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200ad210c000000197b04070200ad210e00000005020002" } }, { "event_id": "evt-5ffad881d703e49ccb2b7b1a", "kind": "unclassified_tcp", "frame_number": 74832, "timestamp_epoch": "1634917485.905101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ad210c0000000502" } }, { "event_id": "evt-852cc6e3b3c51116221fc86b", "kind": "unclassified_tcp", "frame_number": 74835, "timestamp_epoch": "1634917485.998558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b939000000170303002a481126a295a7e1696e5fcb62032011e25a89c90123a99d7b48c2b2eafd8a1bafdb42d7cd88f35e877513" } }, { "event_id": "evt-26c4a69f18bb750c358ad665", "kind": "unclassified_tcp", "frame_number": 74838, "timestamp_epoch": "1634917486.203337000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad2120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-4055ed7af02e58b7e11a643f", "kind": "unclassified_tcp", "frame_number": 74839, "timestamp_epoch": "1634917486.203914000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ad210c0000000100" } }, { "event_id": "evt-eeb8af1d8cc747c396e4f7d0", "kind": "unclassified_tcp", "frame_number": 74841, "timestamp_epoch": "1634917486.381724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9450000001703030036000000000000000347f17166f1d4875c1ed0fd034294a638b0855747cff786af75c1a0650f6c4b48a3d71dd4441719e24a6676a8507b" } }, { "event_id": "evt-f2dfb5f8b84fd9070630d106", "kind": "unclassified_tcp", "frame_number": 74848, "timestamp_epoch": "1634917486.569728000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad212300000005010003126d61696c2e6c6f6f7365666f6f742e636f6d0019" } }, { "event_id": "evt-ccf0e3cb9e570136e4bc4c21", "kind": "unclassified_tcp", "frame_number": 74853, "timestamp_epoch": "1634917486.636661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad2114000000050000010a0a169cc3f1" } }, { "event_id": "evt-02efd356c930c92384dd24e4", "kind": "unclassified_tcp", "frame_number": 74858, "timestamp_epoch": "1634917486.638787000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b939000000170303002a481126a295a7e16a4b1aea96230375d46cdbff9b6bd0acb5684775bea0d9e97fca53c3ad30bc0b9c7960" } }, { "event_id": "evt-0510f0dcd70372858d7120c0", "kind": "unclassified_tcp", "frame_number": 74860, "timestamp_epoch": "1634917486.639264000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50305, "dst_port": 1187, "tcp_stream": 1490, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ff1e960be5d0ec1a526ff696", "kind": "unclassified_tcp", "frame_number": 74864, "timestamp_epoch": "1634917486.702929000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad213700000032323020636c69656e74736d7470312e6c6f6f7365666f6f742e636f6d2045534d545020506f73746669780d0a" } }, { "event_id": "evt-248b96c35f3c8b8ef87909f9", "kind": "unclassified_tcp", "frame_number": 74868, "timestamp_epoch": "1634917487.154142000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b93d000000170303002e0000000000000004450b36c741ad91eb22faf9d5e8093077e87e39318d0145f14daf6cfdec881a33f28f3d78c2b404070200ad211a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e1b143f66f3cc043e555fcf1", "kind": "unclassified_tcp", "frame_number": 74875, "timestamp_epoch": "1634917487.236872000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad21bc0000003235302d636c69656e74736d7470312e6c6f6f7365666f6f742e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452035323432383830300d0a3235302d565246590d0a3235302d4554524e0d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-3953937919a17d42b1ebfba5", "kind": "unclassified_tcp", "frame_number": 74879, "timestamp_epoch": "1634917487.479762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9350000001703030026481126a295a7e16b16ca7888e4b3fa3e48517e2d790f786f81e61da1a97f217bc9b37f044ffc" } }, { "event_id": "evt-e47613a94d2368f30cb25a26", "kind": "unclassified_tcp", "frame_number": 74882, "timestamp_epoch": "1634917487.755527000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b95700000017030300480000000000000005b96d1da389e2fa4bf09b79154a1a5b624d759be99c545c37b99eb1d1ef4cb24d71a38983b5d7a79ea5a413762bcc85852df92e7822838e5f94792528df26b0e2" } }, { "event_id": "evt-3926b08e829dfb4d955f044f", "kind": "unclassified_tcp", "frame_number": 74886, "timestamp_epoch": "1634917488.076462000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad211600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-c5a52f7ce2c23e76b9845e8b", "kind": "unclassified_tcp", "frame_number": 74889, "timestamp_epoch": "1634917488.077334000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b9500000001703030041481126a295a7e16c8bc5d5a08ec0b205643768256bbd12f8c13cda9334d6fb14272ff14ac09d30d876768d5ca0cfa75cdf411eea13e114ef8a74ae11d7e9e8304d" } }, { "event_id": "evt-f2464017f856b9ae654317b7", "kind": "unclassified_tcp", "frame_number": 74894, "timestamp_epoch": "1634917488.145482000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad211c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-fa02d6b120086efcfa7cd48e", "kind": "unclassified_tcp", "frame_number": 74897, "timestamp_epoch": "1634917488.433700000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010006b929000000150303001a0000000000000006abf1876a1e278ba9b9023e61b0ed6f973317" } }, { "event_id": "evt-19c493db193f46e794983323", "kind": "unclassified_tcp", "frame_number": 74901, "timestamp_epoch": "1634917488.649110000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010006b90a00000004070200ad212c000000616d64795957706c5a474641636d567a5a6d39765a43356a623230756258673d0d0a" } }, { "event_id": "evt-b630a900317e2573323b1988", "kind": "unclassified_tcp", "frame_number": 74910, "timestamp_epoch": "1634917488.738539000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad211c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-f172e9605c87cb579a2aa9cc", "kind": "unclassified_tcp", "frame_number": 74913, "timestamp_epoch": "1634917489.059780000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad211c000000556d567a5a6d39765a4449774d54633d0d0a" } }, { "event_id": "evt-9c976bfaac6273852a4e055e", "kind": "unclassified_tcp", "frame_number": 74918, "timestamp_epoch": "1634917489.148453000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad212f00000032333520322e372e302041757468656e7469636174696f6e207375636365737366756c0d0a" } }, { "event_id": "evt-9721aba3c13ab428f6f1f13f", "kind": "unclassified_tcp", "frame_number": 74921, "timestamp_epoch": "1634917489.470724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad213d0000004d41494c2046524f4d3a3c6a6772616a65646140726573666f6f642e636f6d2e6d783e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-031d2428ec33138b5bffb2ae", "kind": "unclassified_tcp", "frame_number": 74926, "timestamp_epoch": "1634917489.538415000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ad213701000035353420352e352e342053656e64696e6720652d6d61696c2066726f6d20276a6772616a65646140726573666f6f642e636f6d2e6d782720686173206265656e2064697361626c656420756e74696c20796f75206c6f6720696e20616e64206368616e676520796f75722070617373776f72642e205468697320697320757375616c6c7920646f6e6520696620796f7520617265207573696e672061207765616b2070617373776f7264206f722069662077652062656c6965766520796f757220652d6d61696c2070617373776f72642077617320636f6d70726f6d6973656420616e64207573656420746f2073656e64207370616d2e20496620796f75206e6565642068656c702c20706c6561736520636f6e7461637420746563686e6963616c20737570706f72742e0d0a" } }, { "event_id": "evt-dc08d9024a18aed9918d5ad2", "kind": "unclassified_tcp", "frame_number": 74929, "timestamp_epoch": "1634917489.901703000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200ad210a000000" } }, { "event_id": "evt-c29f5d7163f3adce29b0196f", "kind": "unclassified_tcp", "frame_number": 74944, "timestamp_epoch": "1634917491.051570000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50306, "dst_port": 1187, "tcp_stream": 1492, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0c425a5ab1932d1737157ba2", "kind": "unclassified_tcp", "frame_number": 75032, "timestamp_epoch": "1634917495.437238000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50307, "dst_port": 1187, "tcp_stream": 1495, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b856c40bab14b8a9c0d415d8", "kind": "unclassified_tcp", "frame_number": 75035, "timestamp_epoch": "1634917496.434188000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-227dba257f86853cb4a37ed6", "kind": "unclassified_tcp", "frame_number": 75040, "timestamp_epoch": "1634917499.901528000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50308, "dst_port": 1187, "tcp_stream": 1496, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-bbbcf8109e1f7d38fd6487f9", "kind": "unclassified_tcp", "frame_number": 75050, "timestamp_epoch": "1634917504.338457000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50309, "dst_port": 1187, "tcp_stream": 1497, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d2d1495ed2cfb75f92a42c0f", "kind": "unclassified_tcp", "frame_number": 75057, "timestamp_epoch": "1634917508.872355000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50310, "dst_port": 1187, "tcp_stream": 1498, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-518ab1cfdc8c8dd8a1eb1133", "kind": "unclassified_tcp", "frame_number": 75065, "timestamp_epoch": "1634917513.281393000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50311, "dst_port": 1187, "tcp_stream": 1499, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-17d2f1cdea8bfd13e6cdc2b1", "kind": "unclassified_tcp", "frame_number": 75073, "timestamp_epoch": "1634917517.656039000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50312, "dst_port": 1187, "tcp_stream": 1500, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8bf072c90c47575ba5cfe9e2", "kind": "unclassified_tcp", "frame_number": 75081, "timestamp_epoch": "1634917522.026379000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50313, "dst_port": 1187, "tcp_stream": 1501, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-834f74135805a0bff763deb6", "kind": "unclassified_tcp", "frame_number": 75091, "timestamp_epoch": "1634917526.385612000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50314, "dst_port": 1187, "tcp_stream": 1502, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3a17eda66e35a00a8929090a", "kind": "unclassified_tcp", "frame_number": 75094, "timestamp_epoch": "1634917530.473059000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701007dca0c000000197b" } }, { "event_id": "evt-231bdf1047c1e517895e29dd", "kind": "unclassified_tcp", "frame_number": 75097, "timestamp_epoch": "1634917530.654333000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca0e00000005020002" } }, { "event_id": "evt-6160ebf1b592c9b9942ad731", "kind": "unclassified_tcp", "frame_number": 75098, "timestamp_epoch": "1634917530.654723000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007dca0c0000000502" } }, { "event_id": "evt-73657df5b39469fbc032cc36", "kind": "unclassified_tcp", "frame_number": 75102, "timestamp_epoch": "1634917530.707876000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50315, "dst_port": 1187, "tcp_stream": 1503, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-979e5235bd385f13a2dbca2b", "kind": "unclassified_tcp", "frame_number": 75104, "timestamp_epoch": "1634917530.911778000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-11d07beb56865639048ab541", "kind": "unclassified_tcp", "frame_number": 75106, "timestamp_epoch": "1634917530.912356000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007dca0c0000000100" } }, { "event_id": "evt-f2e46b913f8d299fc4455ba2", "kind": "unclassified_tcp", "frame_number": 75108, "timestamp_epoch": "1634917531.266389000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca2100000005010003106d61696c2e6b62637261776c2e6e65740019" } }, { "event_id": "evt-a30b874a630f51ae5ed54769", "kind": "unclassified_tcp", "frame_number": 75116, "timestamp_epoch": "1634917531.601735000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca14000000050000010a0a169cc3f4" } }, { "event_id": "evt-6e3c6c97eddd9cb9c7329206", "kind": "unclassified_tcp", "frame_number": 75119, "timestamp_epoch": "1634917531.778074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca35000000323230204741524d2d31303147303034204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-d44c68f7bf0fafdf3ea81d50", "kind": "unclassified_tcp", "frame_number": 75122, "timestamp_epoch": "1634917532.195360000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1ebf42f5689830fd7369ce5a", "kind": "unclassified_tcp", "frame_number": 75127, "timestamp_epoch": "1634917532.341131000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-cba7fd230e164ac03e4ef440", "kind": "unclassified_tcp", "frame_number": 75130, "timestamp_epoch": "1634917532.698549000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca140000005354415254544c530d0a" } }, { "event_id": "evt-57fccfb67e464f8b5c794a21", "kind": "unclassified_tcp", "frame_number": 75135, "timestamp_epoch": "1634917532.845031000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-8d9502ff217702af399b38cd", "kind": "unclassified_tcp", "frame_number": 75147, "timestamp_epoch": "1634917533.136028000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-49ffb5670e6d3569653bbff3", "kind": "unclassified_tcp", "frame_number": 75156, "timestamp_epoch": "1634917533.315391000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f86ca430bbe9723d65680240", "kind": "unclassified_tcp", "frame_number": 75157, "timestamp_epoch": "1634917533.315402000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "85f4ada4b59384d0e17d8d746247269ddb984e78f00d140221009b2945fa859960a773eb5e810bb6864abd8bb1bb41f1a4bece8cdb2e8813fc880076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba6f03c96000004030047304502210081bb7f4d0c750346aeb26ab709b63261c36a0e406852b5caccfcdc387becce01022025a4e9f8aa70d10d27bec9be47084bf445275f83874910b9578a893f2b9e72c630370603551d110430302e820b6e73302e6f76682e6e65748211736d74702e6d61696c2e6f76682e6e6574820c73736c302e6f76682e6e6574300d06092a864886f70d01010b0500038201010084575682afdc780986f85239f54e93632022cd2127a32a6ce935ab341e3aa207737c8a3aaa923418f6dd1361935241b389e4b419bde780ef3595df455a8b0190cec096667a4e4a6a6e0ac7675530d75c1aac79ee28c4b333a284fd562fc50c96f4fc881f45c0ac174264a384b8ea6db3e78edca7e3a7eae174c7a2e2e6a3d7521808c8062602c9f32e7b70b17633c5c6bc9f7d46c30671b7ae47bf2a1594d26e9482fd9dfb7f1ce9db630ac33b357d0190586c38ce4a83bdbefd41745601752fa0b90c369e88a351192d87427b48b7c7954bc02d8adfb1b4936ce199a4d7c4dbbc42f9775b79e05625407a5ab508b38c38b23ea2fe26bc8ae35cbe4b971c2c0a00061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7" } }, { "event_id": "evt-7c48b8081f331c60dd9a2b70", "kind": "unclassified_tcp", "frame_number": 75163, "timestamp_epoch": "1634917533.319239000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0062c8863d2415314847e123", "kind": "unclassified_tcp", "frame_number": 75164, "timestamp_epoch": "1634917533.319257000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2a563c18b33d3d8dd0408f5b", "kind": "unclassified_tcp", "frame_number": 75167, "timestamp_epoch": "1634917534.317472000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dcae4000000160303008a10000086850400eace1be2bb7da98251e5962bec35c3ae30f5dcf059c598f8359ade615304f909033d2241d132a59e8c60cd486a49f70418fc1a9c4ac59d598875353ba106adab3e01f5b0b0e402acba162ee57f599f9657ff309704e08538ea98fca381b13bee2507a9b245c148b2cdca2a9ffa74787446b1c8bb73448210740a94224177d848989ce6140303000101160303004022488e70c0f722010271d02e453f7f4b5f773b31873b3e3d5def21c3278fdd066970c60d759a1b413fc090de53ac820a833e1538ffc7a016e262607576803964" } }, { "event_id": "evt-a44cf544a2fdaa513a0b6d43", "kind": "unclassified_tcp", "frame_number": 75172, "timestamp_epoch": "1634917534.468198000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca550000001403030001011603030040242f90efc32a56178b3504ea0d075947f2bd5f50e9b83307d65702c703b1d4cc57f166de80e24b5b13b52e9ff02af82b91677a281114d5c9e9ff829e27a9bee1" } }, { "event_id": "evt-0831689a144d4f2ed5bd77e0", "kind": "unclassified_tcp", "frame_number": 75175, "timestamp_epoch": "1634917534.837314000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca4f000000170303004074bea33ad4eab697a0c1ad9a18e84399509a5c2ca27f9944d8482d596e88ad8897ad7606a83cabb147c595dcde86afe48012aa52d22feed639741417078ba81a" } }, { "event_id": "evt-50aeecc4683e4f3355556af8", "kind": "unclassified_tcp", "frame_number": 75181, "timestamp_epoch": "1634917534.995898000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-441d34f14ff1a704ce5a76cc", "kind": "unclassified_tcp", "frame_number": 75186, "timestamp_epoch": "1634917535.068969000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50316, "dst_port": 1187, "tcp_stream": 1506, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-40aded25fbbd21b16c2c0175", "kind": "unclassified_tcp", "frame_number": 75189, "timestamp_epoch": "1634917536.001844000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca4f00000017030300402a9dd617bd7a0ebe5c5584798fdd57dd096f7796af1513437db8628056cd642c887a391fe82b89a6d5d3411827f97634bee3c4d48b39ba2c903da3f5faecd4e6" } }, { "event_id": "evt-15e699654366a7c49ebbd2f3", "kind": "unclassified_tcp", "frame_number": 75196, "timestamp_epoch": "1634917536.165861000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca4f00000017030300408cf3a43e5a9bd73edf2b574014b792a23299bf57be8a982180e7cd47df6989a235102794014d8e2cab9fe902650a6b6226c99fff9ae2a0eb74422ba71199d522" } }, { "event_id": "evt-4add081bb5346c9368f540aa", "kind": "unclassified_tcp", "frame_number": 75201, "timestamp_epoch": "1634917536.508698000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca5f00000017030300507b8d3eddc6e7de104b2e0051af5f3d01ef580a91c485c3fdd88885a4ae0d6226537b0613edd37a5404005b3e80b0fc8513d38fce258e83fba38f7102f2ec2c0a264cba42856fe6558cb76c5d9342bc76" } }, { "event_id": "evt-15b729d1144b39ccab327344", "kind": "unclassified_tcp", "frame_number": 75206, "timestamp_epoch": "1634917536.657456000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca4f00000017030300407144bcaf1ab63c66eabf8aa767c9ff208f99cd614354809d457ad8ad946c92d85c7ed32b6b9309bfb1e356a6aefc0a479c10095ab33f201e52810b3902b13f9e" } }, { "event_id": "evt-37cccef2bf85a6783421e7f8", "kind": "unclassified_tcp", "frame_number": 75209, "timestamp_epoch": "1634917536.939560000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca4f0000001703030040af4eb996ec3d85ef14f7915860bf077f12e06bc49b1cb63c30fade125bb5c01235e164ae283dc1de2a4c07ba90e4012c6485172c8d388cdc9e1c76772c7cdece" } }, { "event_id": "evt-07f08471425d51da40a77005", "kind": "unclassified_tcp", "frame_number": 75216, "timestamp_epoch": "1634917539.409373000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca5f0000001703030050b7588de919ce6cea1bdaefde25cd89d7cfe92f3a9b37cbfdeec1418072d773ef1584ddffd491d5a8e387630956e8efc48d0398b49a843de03c3cd4fa993869c08bb023856c065f443fa94cd147113dd1" } }, { "event_id": "evt-a4d9d58384683627cd5e8f42", "kind": "unclassified_tcp", "frame_number": 75222, "timestamp_epoch": "1634917539.557947000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50317, "dst_port": 1187, "tcp_stream": 1507, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-c42943b49187be20338958cf", "kind": "unclassified_tcp", "frame_number": 75224, "timestamp_epoch": "1634917539.685785000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50317, "dst_port": 1187, "tcp_stream": 1507, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-38fa425fd14da0e21154f136", "kind": "unclassified_tcp", "frame_number": 75227, "timestamp_epoch": "1634917539.867709000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca3f0000001703030030f3de2ab762ef92ed9d8769dc02a553db339fbc26554880672c777168bdfe9d210ba25e0e1c26a44328c65d62c5243af6" } }, { "event_id": "evt-0869d37b39a8b7633ba9e742", "kind": "unclassified_tcp", "frame_number": 75236, "timestamp_epoch": "1634917544.039785000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50318, "dst_port": 1187, "tcp_stream": 1508, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00360f4cf4225ee3b992a6d5", "kind": "unclassified_tcp", "frame_number": 75244, "timestamp_epoch": "1634917548.546965000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50319, "dst_port": 1187, "tcp_stream": 1509, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-1cfdb292cbe026017cf56e92", "kind": "unclassified_tcp", "frame_number": 75299, "timestamp_epoch": "1634917552.856882000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50320, "dst_port": 1187, "tcp_stream": 1512, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e8c07ea867b09fe4c087694f", "kind": "unclassified_tcp", "frame_number": 75547, "timestamp_epoch": "1634917554.919917000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702009f4b0c000000197b" } }, { "event_id": "evt-a42cec1cc5d677984c8b36f1", "kind": "unclassified_tcp", "frame_number": 75640, "timestamp_epoch": "1634917555.103528000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b0e00000005020002" } }, { "event_id": "evt-24f4b64a3a4867618944be2f", "kind": "unclassified_tcp", "frame_number": 75641, "timestamp_epoch": "1634917555.103833000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702009f4b0c0000000502" } }, { "event_id": "evt-3a72ac255b2cec1da125c559", "kind": "unclassified_tcp", "frame_number": 75712, "timestamp_epoch": "1634917555.372049000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a49b601e15fa7cdf01fe7a16", "kind": "unclassified_tcp", "frame_number": 75714, "timestamp_epoch": "1634917555.372264000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702009f4b0c0000000100" } }, { "event_id": "evt-9ea88c01f7d5239f4e19cb85", "kind": "unclassified_tcp", "frame_number": 75739, "timestamp_epoch": "1634917555.754756000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b2100000005010003106d61696c2e616e6265726d616e2e65730019" } }, { "event_id": "evt-8689153567b14486f7ed1867", "kind": "unclassified_tcp", "frame_number": 75743, "timestamp_epoch": "1634917556.030071000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-d8de3420e26583387ea42e73", "kind": "unclassified_tcp", "frame_number": 75749, "timestamp_epoch": "1634917556.255366000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b14000000050000010a0a169cc3f8" } }, { "event_id": "evt-08c5d65d22142d4cb8d65796", "kind": "unclassified_tcp", "frame_number": 75752, "timestamp_epoch": "1634917556.414186000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b35000000323230204741524d2d31303652303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-ff254892f496af5a5e17e5f5", "kind": "unclassified_tcp", "frame_number": 75777, "timestamp_epoch": "1634917556.736528000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-86b7e13f606ddd718939d3cc", "kind": "unclassified_tcp", "frame_number": 75798, "timestamp_epoch": "1634917556.885879000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-da4d9566232217ef2304c116", "kind": "unclassified_tcp", "frame_number": 75840, "timestamp_epoch": "1634917557.156392000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50322, "dst_port": 1187, "tcp_stream": 1515, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5b2ec9868b2bc50462758b1b", "kind": "unclassified_tcp", "frame_number": 75853, "timestamp_epoch": "1634917557.193169000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b140000005354415254544c530d0a" } }, { "event_id": "evt-43dc6d7827437803ee3bc30b", "kind": "unclassified_tcp", "frame_number": 75904, "timestamp_epoch": "1634917557.351232000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-340f061b2d3ec63b5f80cb76", "kind": "unclassified_tcp", "frame_number": 76045, "timestamp_epoch": "1634917557.663888000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ca2266ddc8529b4f674eb05c", "kind": "unclassified_tcp", "frame_number": 76136, "timestamp_epoch": "1634917557.834223000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-920da6e7004230802f255a99", "kind": "unclassified_tcp", "frame_number": 76137, "timestamp_epoch": "1634917557.834238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bdc0acdae1bb8a5e596dbc24", "kind": "unclassified_tcp", "frame_number": 76138, "timestamp_epoch": "1634917557.834245000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c0ae100ad677d7a537a2e65f", "kind": "unclassified_tcp", "frame_number": 76141, "timestamp_epoch": "1634917557.834499000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-58468ce1545e009587f8b801", "kind": "unclassified_tcp", "frame_number": 76149, "timestamp_epoch": "1634917558.200975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4be4000000160303008a10000086850401291d9dd1a3491e794238afa60b816982145fd4cfe4980ff70064cfa30cc0eb320f1bd34b24a2aeabab6fab53179822c84879c04d5a8622f13f891c4cac2d9378cf0114b7824f786d2f190b732563a21c939508e274537e8124a367b002962879629a16a5359989be16b34e1c26b40390462f101deddeeab570ce3cc224c060e60e2f2e140303000101160303004082b9d8da67432f6a0b0987cf7ec2d769808f3b382d62fe216ed519c74e0172c9973fe3fa2585ba1ba72774b879c11ed428967e7eb90c9f2b522b77ff922662d3" } }, { "event_id": "evt-c7e7326ea95556e0c4267ffc", "kind": "unclassified_tcp", "frame_number": 76155, "timestamp_epoch": "1634917558.354269000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b55000000140303000101160303004093f1291664270a2008aac9808c7b033a18d39d2ff60d7bf11df949a41452a4ecdea4a5e6dc122cec1491ede89c3dbef580da8a2699df2a255c132b7582e7871f" } }, { "event_id": "evt-83e26f6f814176c53f61fdba", "kind": "unclassified_tcp", "frame_number": 76162, "timestamp_epoch": "1634917558.626598000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f0000001703030040f9a69ee1c6b8d24a13266d792ce0fb2e84c466ec59b983abd98ab63dff225ed43360274aaaa6b6749ee00dea62f61352c40a70b23a02d412e03cdd8126d39907" } }, { "event_id": "evt-b338e00979706a56c4be8315", "kind": "unclassified_tcp", "frame_number": 76167, "timestamp_epoch": "1634917558.774499000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-986f86a4966722c84f9655fb", "kind": "unclassified_tcp", "frame_number": 76170, "timestamp_epoch": "1634917559.766633000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f0000001703030040d134404f25cfd595ffff8f8194defb8d674d1405fe13598396415ab138e7b16b13ebfb69e6331f2e1512bb7ac84e54e22836ed242ebed03a717deb9737b3944c" } }, { "event_id": "evt-eb0258ac9a2ffde9192cb5b4", "kind": "unclassified_tcp", "frame_number": 76175, "timestamp_epoch": "1634917559.918390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f000000170303004030da25ca2c159fab8cf088cc51bccb9f6f919cad888a995013f31908cf251021b657d510253a921f4b6affc4c7e463cb268bf9d69bdb26317c9a663951b568bf" } }, { "event_id": "evt-b1a0670d8facb7b0398973fb", "kind": "unclassified_tcp", "frame_number": 76178, "timestamp_epoch": "1634917560.473596000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f00000017030300402824bdc7772e0f28859e4f3f8ec8d076a341b5d3be302e6bcbaf894c7b8998c245bff74adcc9867b1c989832ca280bc42b951e7caf02f7f3e18b6e5398b8592d" } }, { "event_id": "evt-b8a5b0a7b707de9cbf85f92e", "kind": "unclassified_tcp", "frame_number": 76183, "timestamp_epoch": "1634917560.641806000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f0000001703030040f1a97a202601d741b727910ebbbdf8c0060f4339d6e5cf6011bf91b6737bc726fce61a8b674cb34a07e590dfc0663f3cdb102aa8bab5c546fe2a26cf3dcbc803" } }, { "event_id": "evt-a30d76a67b32e80f3fe971e1", "kind": "unclassified_tcp", "frame_number": 76186, "timestamp_epoch": "1634917560.930164000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b4f00000017030300403c5b910d03c9fa85d16deb2417aebf4e6459a22aa88b0da6c08ecae9e003b3de30d3b9a875274c0c3f03f3a4877524eabcbe25ea478cad7aa07bcf21bd37718f" } }, { "event_id": "evt-a567b80ff90e35f9969dd503", "kind": "unclassified_tcp", "frame_number": 76193, "timestamp_epoch": "1634917561.479216000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50324, "dst_port": 1187, "tcp_stream": 1517, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9794f0ee8b97429bce0ad2c6", "kind": "unclassified_tcp", "frame_number": 76202, "timestamp_epoch": "1634917563.575861000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b5f00000017030300504a6fa1eb25c0f1af725c57b9c26142f82823168787ec39f4e5afbc0e033eed9e65884d955b2315d06b88a57dfd26f9a7b95fa3fc0ef27c594f8a748b130ff6c963575ab8128f4ad5be708e9a35c0c87b" } }, { "event_id": "evt-cc273b188d98e6135e67e4ad", "kind": "unclassified_tcp", "frame_number": 76213, "timestamp_epoch": "1634917563.991265000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b3f0000001703030030370539670d0f0cff650e4c32f68343ba9652131571a61220fe77e8235b04f6062f440b9cc1ee0b7bf3d60d38a7b61a4d" } }, { "event_id": "evt-ccbcb49a2abbe1583b62d7f9", "kind": "unclassified_tcp", "frame_number": 76227, "timestamp_epoch": "1634917565.842886000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50325, "dst_port": 1187, "tcp_stream": 1519, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e7ab4c33551ea433637cf952", "kind": "unclassified_tcp", "frame_number": 76229, "timestamp_epoch": "1634917565.858216000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50325, "dst_port": 1187, "tcp_stream": 1519, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-09b6a3d0ebc37dfa5a5bb9cf", "kind": "unclassified_tcp", "frame_number": 76237, "timestamp_epoch": "1634917570.207281000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50326, "dst_port": 1187, "tcp_stream": 1520, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-63bdfd383437f286b0c63a3b", "kind": "unclassified_tcp", "frame_number": 76241, "timestamp_epoch": "1634917572.967254000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca5f0000001703030050474fe1b05e46621ecb463fa282ba03c3773071a4a86fff05cbf521ac85ea6981e41c01244fa9d6ade65d21b65c980e377c9f99ea095e7e7ce82236091b98d16553b33950f32865bb7e21bfa18a62c93e" } }, { "event_id": "evt-5305ccd2293283b9aa0c635b", "kind": "unclassified_tcp", "frame_number": 76244, "timestamp_epoch": "1634917573.226750000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca3f00000017030300302531013159d70740a57ffec89ffc5ae96ecc0737e4a160216781c6a1c948c16484f1be198f64e3ae16222b57486921bc" } }, { "event_id": "evt-0712c72bd4a10a5feb6ef3ee", "kind": "unclassified_tcp", "frame_number": 76250, "timestamp_epoch": "1634917573.397202000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca6f00000017030300601bd9899c4843202b17a4e490398291b3aa9b5365db9e6cbea0f80e3ef7a696d28d7cc5a21d28c9e6ae1b4d907e388e9974417a5cc8ab5b0e86c219b859156a5bd94be05fda3e60aaa3758a1447311d5898e410be07dc0d29b4074d1d5906d346" } }, { "event_id": "evt-bc8a8901d58b7fa225433884", "kind": "unclassified_tcp", "frame_number": 76254, "timestamp_epoch": "1634917573.397688000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007dca0a000000" } }, { "event_id": "evt-33f8526082034247d218eb1c", "kind": "unclassified_tcp", "frame_number": 76256, "timestamp_epoch": "1634917573.720414000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dca3f0000001503030030f6baa8df8b510c43fc9f7f4f2ab5e7b6b6718c305d9a7e103ef0de37bea6dffcf3f898278a4ab487b1cb8b7a941f0a63" } }, { "event_id": "evt-d4292a85c09de17dcc30c6ec", "kind": "unclassified_tcp", "frame_number": 76258, "timestamp_epoch": "1634917573.893190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007dca0a000000" } }, { "event_id": "evt-cea71e31f85779732828a90c", "kind": "unclassified_tcp", "frame_number": 76265, "timestamp_epoch": "1634917574.576871000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50327, "dst_port": 1187, "tcp_stream": 1521, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fc26402aba3899fe7c44892c", "kind": "unclassified_tcp", "frame_number": 76274, "timestamp_epoch": "1634917578.888460000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50328, "dst_port": 1187, "tcp_stream": 1522, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-919f3641cc4d037267cecd10", "kind": "unclassified_tcp", "frame_number": 76276, "timestamp_epoch": "1634917578.919869000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50328, "dst_port": 1187, "tcp_stream": 1522, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b47ced6fbc9ed80f65140775", "kind": "unclassified_tcp", "frame_number": 76282, "timestamp_epoch": "1634917583.208797000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50329, "dst_port": 1187, "tcp_stream": 1523, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-b328eb034f2c7d6b1a0d86d7", "kind": "unclassified_tcp", "frame_number": 76287, "timestamp_epoch": "1634917586.500237000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1a5c1de0ba1a677ebbca6165", "kind": "unclassified_tcp", "frame_number": 76293, "timestamp_epoch": "1634917587.520730000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50330, "dst_port": 1187, "tcp_stream": 1524, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-905dc7c158fa7876b2bc7bed", "kind": "unclassified_tcp", "frame_number": 76303, "timestamp_epoch": "1634917591.876933000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50331, "dst_port": 1187, "tcp_stream": 1525, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e3f972a3f91eda248431d549", "kind": "unclassified_tcp", "frame_number": 76311, "timestamp_epoch": "1634917596.279181000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50332, "dst_port": 1187, "tcp_stream": 1526, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a6c43318d7d9efe39cd1e1d3", "kind": "unclassified_tcp", "frame_number": 76315, "timestamp_epoch": "1634917597.134013000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b5f00000017030300509b004f67e585f860353a43a4389c5e316db4a8d7e02f4b54608eaf256240a6596655506ac6f355f79256fa24c4ad030a2dff98abe8fa9c7456e37b9c60642dbd01443f78a85a07315a3e3f5db6bf70a6" } }, { "event_id": "evt-24979a9067c5720019b27c57", "kind": "unclassified_tcp", "frame_number": 76318, "timestamp_epoch": "1634917597.374334000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b3f000000170303003013e5506a82ee9fe98b8e93ff914fc58ed78d6e4ac3422097c3b0bd21e24845c51095655f0af297c0379c4d76b3197ba4" } }, { "event_id": "evt-fc77271d13eda900fca2e526", "kind": "unclassified_tcp", "frame_number": 76324, "timestamp_epoch": "1634917597.527558000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b6f0000001703030060cc70161dafc35497fec2f0ace522e27302637849c95da3f4d4639581d4696a9bdc3340133f348d240d0076e8d3d581238b76044eb655876c7230f39afe80f6d0783d06ecccb26d9c011a6caf494f12f7c83081c9881fb5d1c292d696e05070c0" } }, { "event_id": "evt-774e81c3deda5666010a8600", "kind": "unclassified_tcp", "frame_number": 76328, "timestamp_epoch": "1634917597.528035000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702009f4b0a000000" } }, { "event_id": "evt-2bd2e24ba2465a8adb1fd529", "kind": "unclassified_tcp", "frame_number": 76330, "timestamp_epoch": "1634917597.767854000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702009f4b3f000000150303003016b4e1f5d89b39203129b3b738ff44afb37a5dc0bdc69d3a0deadd9ef52b904beb983c7d9e352ef596ebbcec08545bac" } }, { "event_id": "evt-b397c472f6336fd5171f8159", "kind": "unclassified_tcp", "frame_number": 76332, "timestamp_epoch": "1634917597.942189000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702009f4b0a000000" } }, { "event_id": "evt-cb38a6f08ccc378fef1d952e", "kind": "unclassified_tcp", "frame_number": 76339, "timestamp_epoch": "1634917600.666991000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50333, "dst_port": 1187, "tcp_stream": 1527, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-57857dd66f841a9e5efec374", "kind": "unclassified_tcp", "frame_number": 76345, "timestamp_epoch": "1634917604.983218000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50334, "dst_port": 1187, "tcp_stream": 1528, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4461a4ffcbc2e5f97edaee3d", "kind": "unclassified_tcp", "frame_number": 76351, "timestamp_epoch": "1634917609.300799000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50335, "dst_port": 1187, "tcp_stream": 1529, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-15c26d8fd8f60ffb68d2dc58", "kind": "unclassified_tcp", "frame_number": 76376, "timestamp_epoch": "1634917613.641361000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50336, "dst_port": 1187, "tcp_stream": 1530, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-7842b55ce1a5d608e6bce121", "kind": "unclassified_tcp", "frame_number": 76400, "timestamp_epoch": "1634917616.453600000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3be1d4bc0b7207f7eb50818d", "kind": "unclassified_tcp", "frame_number": 76408, "timestamp_epoch": "1634917618.056430000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50337, "dst_port": 1187, "tcp_stream": 1532, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-28db947e075ca053ef8855b2", "kind": "unclassified_tcp", "frame_number": 76413, "timestamp_epoch": "1634917618.204141000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50337, "dst_port": 1187, "tcp_stream": 1532, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-606e8cfcdc398ac39a3b0ee2", "kind": "unclassified_tcp", "frame_number": 76453, "timestamp_epoch": "1634917622.413228000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50338, "dst_port": 1187, "tcp_stream": 1534, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a7f001395ba071c9713ba958", "kind": "unclassified_tcp", "frame_number": 76467, "timestamp_epoch": "1634917626.797871000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50339, "dst_port": 1187, "tcp_stream": 1535, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-05b602e522cf9c897fab5726", "kind": "unclassified_tcp", "frame_number": 76474, "timestamp_epoch": "1634917631.134601000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50340, "dst_port": 1187, "tcp_stream": 1536, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-9b1a37cb75c18bafb29e5db9", "kind": "unclassified_tcp", "frame_number": 76476, "timestamp_epoch": "1634917631.281278000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50340, "dst_port": 1187, "tcp_stream": 1536, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-fb5b8e5d88f8e82928e44617", "kind": "unclassified_tcp", "frame_number": 76479, "timestamp_epoch": "1634917634.202773000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100ec730c000000197b" } }, { "event_id": "evt-b9745ce94684bc1adf864099", "kind": "unclassified_tcp", "frame_number": 76481, "timestamp_epoch": "1634917634.382476000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec730e00000005020002" } }, { "event_id": "evt-6eea16f17800e7bdaf7b46c2", "kind": "unclassified_tcp", "frame_number": 76482, "timestamp_epoch": "1634917634.383005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ec730c0000000502" } }, { "event_id": "evt-d7b1a3d9dcc61764c364e501", "kind": "unclassified_tcp", "frame_number": 76484, "timestamp_epoch": "1634917634.631377000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e497d3694a703bf8d1d2ef4b", "kind": "unclassified_tcp", "frame_number": 76485, "timestamp_epoch": "1634917634.631930000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ec730c0000000100" } }, { "event_id": "evt-c1f9e35d277b1a3419f24166", "kind": "unclassified_tcp", "frame_number": 76487, "timestamp_epoch": "1634917635.124317000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec732c000000050100031b756c74696d61746563756973696e656361746572696e672e636f6d0019" } }, { "event_id": "evt-03c14ec2e9bee05b49621345", "kind": "unclassified_tcp", "frame_number": 76494, "timestamp_epoch": "1634917635.460658000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50341, "dst_port": 1187, "tcp_stream": 1537, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-198d3b9b9ed4a21ec0e2b7cf", "kind": "unclassified_tcp", "frame_number": 76502, "timestamp_epoch": "1634917636.440014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7314000000050000010a0a169cc3fb" } }, { "event_id": "evt-92bfc71c811d3bc657b1881c", "kind": "unclassified_tcp", "frame_number": 76505, "timestamp_epoch": "1634917636.515759000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec73c60000003232302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2045534d5450204578696d20342e39342e32202332204672692c203232204f637420323032312031313a34373a3136202d30343030200d0a3232302d576520646f206e6f7420617574686f72697a652074686520757365206f6620746869732073797374656d20746f207472616e73706f727420756e736f6c6963697465642c200d0a32323020616e642f6f722062756c6b20652d6d61696c2e0d0a" } }, { "event_id": "evt-d2b7671fbfca51f40a0cfa91", "kind": "unclassified_tcp", "frame_number": 76508, "timestamp_epoch": "1634917636.895689000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec731a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-3f41bd037d2653522fdbc662", "kind": "unclassified_tcp", "frame_number": 76513, "timestamp_epoch": "1634917636.958088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec73df0000003235302d65636e67783236342e696e6d6f74696f6e686f7374696e672e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d504950455f434f4e4e4543540d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-8d9e12e05386016dbc503d8f", "kind": "unclassified_tcp", "frame_number": 76516, "timestamp_epoch": "1634917637.249198000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec73140000005354415254544c530d0a" } }, { "event_id": "evt-7f3dd6e9c66562c9d1f5cc2f", "kind": "unclassified_tcp", "frame_number": 76521, "timestamp_epoch": "1634917637.311229000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec731c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-c6073199f7166c4bdc262650", "kind": "unclassified_tcp", "frame_number": 76524, "timestamp_epoch": "1634917637.564975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-51145551b373701266890d67", "kind": "unclassified_tcp", "frame_number": 76531, "timestamp_epoch": "1634917637.653515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6ab92c9449a55944885a8456", "kind": "unclassified_tcp", "frame_number": 76532, "timestamp_epoch": "1634917637.653538000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-17c4a2de2b3bfad8ad1e445a", "kind": "unclassified_tcp", "frame_number": 76538, "timestamp_epoch": "1634917637.656593000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec73b70900004530433041a03fa03d863b687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f434f4d4f444f52534143657274696669636174696f6e417574686f726974792e63726c307106082b0601050507010104653063303b06082b06010505073002862f687474703a2f2f6372742e636f6d6f646f63612e636f6d2f434f4d4f444f525341416464547275737443412e637274302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382020100109fa060088174a1a08478604c3939da6477ef190a723923943b917d7f348b97584e590a2d68c31042b0a07a818c7bab31322039e42273e0dec9175d83c5752de1114759019e5dc0f4dd126ad06d3020e8b3ca4fdf9ae0a7179f1a2f877eeb50e153f3f847d98c60f2c965659cf0da01e6b2f2d8079887df378998551242c9e42dde2dbeaa64944ed92ee6c2d5f2c0e6e9ea193e370b895fc93af84f47403eaf1a7fa2f68501881736b523eab9feba6b480b022039aec361eb95a5a173c71c5f543373574b368b9b5b28e33eb10b785c6b14a710cce5da3fbae9d6b22d1d7054ba5eab7d4f298910e03a9004c5eeb98e43a2e363587f498b713e57622340d15d96642261569f96674787bce50020a468e2c1a0817b687308c46d4e7079e8dd55d7095cb99d0a95a60cd9dbe28a55ebb9e1e79a95144c580641c110aaaab13ae2a54a4ae0d9c91fc2a097bb06ef1900db02be96f1fb548f939afa302236a977261f942893e9133d45d13a35481e980d8270c00b5a2887a178513fb5a75ca6912200424cb98015802ab12d894ff7ba1e18c48c591e7349a3a87bbc1ff7564d509f6716a7c71748e76d5457766e97585b7864a4ed62b4003b067e79b8585f6e84d643bc4fdb39aa28f0c18909c5fbe31844b7e5b28b5d95f9235a0b72f7693ad6578be1e9f460bec4512b11acfe48b37273ca1350730d0476ca01e142c2d721cff90005823082057e30820466a003020102021067def43ef17bdae24ff5940606d2c084300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a308185310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f7264311a3018060355040a1311434f4d4f444f204341204c696d69746564312b302906035504031322434f4d4f444f205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010091e85492d20a56b1ac0d24ddc5cf446774992b37a37d23700071bc53dfc4fa2a128f4b7f1056bd9f7072b7617fc94b0f17a73de3b00461eeff1197c7f4863e0afa3e5cf993e6347ad9146be79cb385a0827a76af7190d7ecfd0dfa9c6cfadfb082f4147ef9bec4a62f4f7f997fb5fc674372bd0c00d689eb6b2cd3ed8f981c14ab7ee5e36efcd8a8e49224da436b62b855fdeac1bc6cb68bf30e8d9ae49b6c6999f878483045d5ade10d3c4560fc32965127bc67c3ca2eb66bea46c7c720a0b11f65de4808baa44ea9f283463784ebe8cc814843674e722a9b5cbd4c1b288a5c227bb4ab98d9eee05183c309464e6d3e99fa9517da7c3357413c8d51ed0bb65caf2c631adf57c83fbce95dc49baf4599e2a35a24b4baa9563dcf6faaff4958bef0a8fff4b8ade937fbbab8f40b3af9e843421e89d884cb13f1d9bbe18960b88c2856ac141d9c0ae771ebcf0edd3da996a148bd3cf7afb50d224cc01181ec563bf6d3a2e25bb7" } }, { "event_id": "evt-ad94c8822f75f48982359b16", "kind": "unclassified_tcp", "frame_number": 76539, "timestamp_epoch": "1634917637.656609000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "b204225295809369e88e4c65f191032d707402ea8b671529695202bbd7df506a5546bfa0a328617f70d0c3a2aa2c21aa47ce289c064576bf821827b4d5aeb4cb50e66bf44c867130e9a6df1686e0d8ff40ddfbd042887fa3333a2e5c1e41118163ce18716b2beca68ab7315c3a6a47e0c37959d6201aaff26a98aa72bc574ad24b9dbb10fcb04c41e5ed1d3d5e289d9cccbfb351daa747e584530203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e04160414bbaf7e023dfaa6f13c848eadee3898ecd93232d4300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c050003820101007ff25635b06d954a4e74af3ae26f018b87d33297edf840d2775311d7c7162ec69de64856be80a9f8bc78d2c86317ae8ced1631fa1f18c90ec7ee48799fc7c9b9bccc8815e36861d19f1d4b6181d7560463c2086926f0f0e52fdfc00a2ba905f4025a6a89d7b4844295e3ebf776205e35d9c0cd2508134c71388e87b0338491991e91f1ac9e3fa71d60812c364154a0e246060bac1bc799368c5ea10ba49ed9424624c5c55b81aeada0a0dc9f36b88dc21d15fa88ad8110391f44f02b9fdd10540c0734b136d114fd07023dff7255ab27d62c814171298d41f450571a7e6560afcbc5287698aeb3a853768be621526bea21d0840e494e8853da922ee71d0866d7160303014d0c0001490300174104d733e62de4f7368c75c9c14ea0efd85bff6f4e2a0f629dbb3740655a42fd4e0eb4a887422ebfebc3aafa30dfc40048193457f718f70ad4ba47ba4740f811b00e040101006897d80778bbfd666253f24811abf2fcd71aeee66c3c38ee75ea3764ab40d2a1032d7d6705ba890c13ea71e7875cea6266ef58815804c09c5c187077f7c6e35c80389de5cfcd4c9226a11151a3fa0dc993fe116e45e85425d4ee818b38a0fc0cc82ceeee6f4438442427299955b376c507384171e1550694100df96bcac96a960c97b625b4f0e8a90a8e2defbb364d19f129c491171b817ac22eb15ed375a04e87d77620c37fd5be0596f7e60bdd0aa533a9a30183783824ee796e28e24632a3197adb5d25e7397eb07f959eda8535842cf7120c498212712856ee68a30543c1552d75fd3ba63506dc6c6fefb637a05f9b021cd638216d9a7b35ee704881d2ae16030300040e000000" } }, { "event_id": "evt-05e309f65ad4d25eb348f467", "kind": "unclassified_tcp", "frame_number": 76542, "timestamp_epoch": "1634917638.189361000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec738800000016030300461000004241049e9cf0b198149c11db6912d2812f2ccd0baaf7236320c18f593e9ce51f8632b769499337a8867e9c0b4e9f0018395a654cb5bfad1d0a546600a77ed06743ac161403030001011603030028000000000000000034582b182d7875900d45b58d62ec962bdd5656dd0aff5acdc0218cd97c3dc472" } }, { "event_id": "evt-09267da6e068d9fe72884f37", "kind": "unclassified_tcp", "frame_number": 76547, "timestamp_epoch": "1634917638.248010000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec733d00000014030300010116030300288802a06fcc0da5e6c2dd0d1101e02cfd47b551ed87498efe1b126b96758de588d8cd8c3bf57ad4d4" } }, { "event_id": "evt-96fe379fb49089e0ba3bd395", "kind": "unclassified_tcp", "frame_number": 76550, "timestamp_epoch": "1634917638.592224000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7337000000170303002800000000000000010b6a9aee47a978e06c2e69bd60a90c18e7d46bccbd8e71c89dececc8d78d3f81" } }, { "event_id": "evt-5cca04a9a2d6f6222cd06f86", "kind": "unclassified_tcp", "frame_number": 76555, "timestamp_epoch": "1634917638.664530000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec73ee00000017030300df8802a06fcc0da5e7972d422132ffd8da35d6972f93fe64a2854baf91f71803549cf9644f1e4b529ef854d103132f93b4fea9b8e96e6079f25bdd22dc2ad7dc7bd7169f74fc603fb5cacd3c33f2b51188bf3fa2b3ffd9193aead3805769863f4b59fedb3793551023642c9ca582a18ba99eecaa73b76c2600ca1d841c755938d07c48c8ab3b2275b71d6a9c467ff5f39603f9c0573ec86518f0277a35117ce5e6e327640bcbde3ac4d1209e33d2fd9877b35c99cdc6c39c6645eb4404d082dfa038ba95e8ce8bcc90695a1758504a41daa6bddb9fe27f013305ac3ec1807ced" } }, { "event_id": "evt-e8b9342e0d8a2adfdb3b8a94", "kind": "unclassified_tcp", "frame_number": 76559, "timestamp_epoch": "1634917639.713511000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec733300000017030300240000000000000002525ffca5a04dafac7a7889387516c141dbb02fb37d5d0c2a03d5ee34" } }, { "event_id": "evt-3b6197c1a56bfb6bfdea983e", "kind": "unclassified_tcp", "frame_number": 76565, "timestamp_epoch": "1634917639.773748000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50342, "dst_port": 1187, "tcp_stream": 1539, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-783424871f18a747f8c41e32", "kind": "unclassified_tcp", "frame_number": 76568, "timestamp_epoch": "1634917639.799403000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7339000000170303002a8802a06fcc0da5e85570195aa027dac0681913bf0a765547b240fa5a5b2ca7916fcaab8010c8c2a6eeee" } }, { "event_id": "evt-308a0e7ec175fd3c04312441", "kind": "unclassified_tcp", "frame_number": 76572, "timestamp_epoch": "1634917640.087661000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7355000000170303004600000000000000037088334ff174c5c7cc6ddc066556082159d0b2a07fbb9821f3b5e1d43b65085e2eec8c1c8e0dd99e02244450a90de367e8b85de4ba13fe709ed81c732002" } }, { "event_id": "evt-3877d88ae168bfb7f7b7ba8e", "kind": "unclassified_tcp", "frame_number": 76580, "timestamp_epoch": "1634917640.151823000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7339000000170303002a8802a06fcc0da5e957edcedf4ad015765cc7c1bb0226edc6b282576effd164bcafdc3938b7a1544cb392" } }, { "event_id": "evt-df9db5607499226a1502f371", "kind": "unclassified_tcp", "frame_number": 76583, "timestamp_epoch": "1634917640.657001000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7339000000170303002a00000000000000047db62f8aaa5bba5be02717b98decd53dba45268916f798d7b5e02aeea3af92aee05f" } }, { "event_id": "evt-1c46ac6e9600669a556ddf55", "kind": "unclassified_tcp", "frame_number": 76588, "timestamp_epoch": "1634917642.194244000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec734a000000170303003b8802a06fcc0da5ea657d12482dfe3bdc2adf7989d3773597cde981add992b9a0435be5345d4bb81f920b4675d6038d508f46f31dcc380ffb65cda4" } }, { "event_id": "evt-dc2a13773abf3cbcf74b4680", "kind": "unclassified_tcp", "frame_number": 76591, "timestamp_epoch": "1634917642.463655000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec732a000000170303001b0000000000000005d62eec3f677bcda19b5332f1bac23e6e038345" } }, { "event_id": "evt-0e856348c97d9adf9c01b12e", "kind": "unclassified_tcp", "frame_number": 76596, "timestamp_epoch": "1634917642.524421000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec734100000017030300328802a06fcc0da5eb1cb76e5b48fcb719a31df91f3ac5294c546e753066f260a2993d4a1455caae76ce095e94ef9f8115297c" } }, { "event_id": "evt-458c5f98b7c748a936db9dd2", "kind": "unclassified_tcp", "frame_number": 76599, "timestamp_epoch": "1634917642.756590000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec732d000000170303001e0000000000000006a43b5c0c6688aad378f19003ac88952ce3624434dea7" } }, { "event_id": "evt-3df08d14907a70920a3ed6c7", "kind": "unclassified_tcp", "frame_number": 76605, "timestamp_epoch": "1634917642.844112000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec737b000000170303004d8802a06fcc0da5ec5bcfdbd552da0d6da06098cf2a7cda38c726108be3fe4ff4a9e6a64d16e6fbeb4ee01cd329a68e47c5f48cdf03df607b192cf2723ac2900ae2e2bdf00c8f616c808a0e9d63150303001a8802a06fcc0da5ed66ed230b22480761815061a4295c5a307b56" } }, { "event_id": "evt-cac469580ef3fbb1bbdd1947", "kind": "unclassified_tcp", "frame_number": 76609, "timestamp_epoch": "1634917642.844579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ec730a000000" } }, { "event_id": "evt-be2c6ca8e06ad246bb1f52db", "kind": "unclassified_tcp", "frame_number": 76611, "timestamp_epoch": "1634917643.153358000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ec7329000000150303001a000000000000000720e3d01cd3aa78cebf8df843ab7673ee7114" } }, { "event_id": "evt-35d376eb8fd36e3e485e74bd", "kind": "unclassified_tcp", "frame_number": 76613, "timestamp_epoch": "1634917643.336107000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ec730a000000" } }, { "event_id": "evt-0ead60c731a9c14217c38501", "kind": "unclassified_tcp", "frame_number": 76634, "timestamp_epoch": "1634917644.127503000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50343, "dst_port": 1187, "tcp_stream": 1540, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-176852d3bcd5912c2b8e6391", "kind": "unclassified_tcp", "frame_number": 76666, "timestamp_epoch": "1634917648.500474000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50344, "dst_port": 1187, "tcp_stream": 1542, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ae1c11298e75846af8e91f42", "kind": "unclassified_tcp", "frame_number": 76701, "timestamp_epoch": "1634917652.838856000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50345, "dst_port": 1187, "tcp_stream": 1544, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-383157a9e2daf3dd871ebff1", "kind": "unclassified_tcp", "frame_number": 76713, "timestamp_epoch": "1634917657.161083000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50346, "dst_port": 1187, "tcp_stream": 1545, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4ddff770d2ebc7b8ca92db0a", "kind": "unclassified_tcp", "frame_number": 76715, "timestamp_epoch": "1634917657.282757000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50346, "dst_port": 1187, "tcp_stream": 1545, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bd638ff11f7b8174535cc683", "kind": "unclassified_tcp", "frame_number": 76722, "timestamp_epoch": "1634917661.470634000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50347, "dst_port": 1187, "tcp_stream": 1546, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8b060417f8d20e432d25c689", "kind": "unclassified_tcp", "frame_number": 76728, "timestamp_epoch": "1634917665.805956000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50348, "dst_port": 1187, "tcp_stream": 1547, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5a4ce7c4269ef66c1e519f3d", "kind": "unclassified_tcp", "frame_number": 76736, "timestamp_epoch": "1634917670.210760000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50349, "dst_port": 1187, "tcp_stream": 1548, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-835067616d97f24f1eadbc61", "kind": "unclassified_tcp", "frame_number": 76738, "timestamp_epoch": "1634917670.283993000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50349, "dst_port": 1187, "tcp_stream": 1548, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-57fd073119dad047df1e126b", "kind": "unclassified_tcp", "frame_number": 76749, "timestamp_epoch": "1634917674.603099000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50350, "dst_port": 1187, "tcp_stream": 1549, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0827d7a9b867754bf4703919", "kind": "unclassified_tcp", "frame_number": 76752, "timestamp_epoch": "1634917676.048857000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1f9554c9b7d06f4e83cf14a9", "kind": "unclassified_tcp", "frame_number": 76759, "timestamp_epoch": "1634917679.155270000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50351, "dst_port": 1187, "tcp_stream": 1550, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4e338fb07140a66d052ea472", "kind": "unclassified_tcp", "frame_number": 76767, "timestamp_epoch": "1634917683.530521000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50352, "dst_port": 1187, "tcp_stream": 1551, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d5c4489e7c2428ab44ac1f49", "kind": "unclassified_tcp", "frame_number": 76773, "timestamp_epoch": "1634917687.852393000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50353, "dst_port": 1187, "tcp_stream": 1552, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8d51a5cd7c0e51e7ce1ac46e", "kind": "unclassified_tcp", "frame_number": 76779, "timestamp_epoch": "1634917692.188152000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50354, "dst_port": 1187, "tcp_stream": 1553, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-4790818411b6a54735ba80a4", "kind": "unclassified_tcp", "frame_number": 76787, "timestamp_epoch": "1634917696.550359000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50355, "dst_port": 1187, "tcp_stream": 1554, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-970003a9db2dd652403fbe96", "kind": "unclassified_tcp", "frame_number": 76795, "timestamp_epoch": "1634917700.938215000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50356, "dst_port": 1187, "tcp_stream": 1555, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-74bbf6197cb60c641548fdb2", "kind": "unclassified_tcp", "frame_number": 76803, "timestamp_epoch": "1634917705.331917000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50357, "dst_port": 1187, "tcp_stream": 1556, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-8830455c5b92ab8083a9865f", "kind": "unclassified_tcp", "frame_number": 76806, "timestamp_epoch": "1634917706.516706000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-005aa78087f3a75c85a369c2", "kind": "unclassified_tcp", "frame_number": 76815, "timestamp_epoch": "1634917712.745859000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50358, "dst_port": 1187, "tcp_stream": 1557, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-19dacd50b07b882bcc5a4cd4", "kind": "unclassified_tcp", "frame_number": 76819, "timestamp_epoch": "1634917714.486272000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701001c2f0c000000197b" } }, { "event_id": "evt-73e85748d3f82c8b7d9826ad", "kind": "unclassified_tcp", "frame_number": 76821, "timestamp_epoch": "1634917714.672863000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f0e00000005020002" } }, { "event_id": "evt-6681d811b56edadff779d319", "kind": "unclassified_tcp", "frame_number": 76822, "timestamp_epoch": "1634917714.673178000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701001c2f0c0000000502" } }, { "event_id": "evt-605bac7b98e8e23a3282f043", "kind": "unclassified_tcp", "frame_number": 76824, "timestamp_epoch": "1634917715.003635000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-945431916d27ce6aceb0b83d", "kind": "unclassified_tcp", "frame_number": 76825, "timestamp_epoch": "1634917715.004190000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701001c2f0c0000000100" } }, { "event_id": "evt-915f6641f44620fe6336a28f", "kind": "unclassified_tcp", "frame_number": 76827, "timestamp_epoch": "1634917715.509642000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f1e000000050100030d6d61696c2e6c65636d672e66720019" } }, { "event_id": "evt-3ffa0ece8fb845865bdb7430", "kind": "unclassified_tcp", "frame_number": 76834, "timestamp_epoch": "1634917715.665776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f14000000050000010a0a169cc3fc" } }, { "event_id": "evt-2ee381b51342fc5c10344d70", "kind": "unclassified_tcp", "frame_number": 76837, "timestamp_epoch": "1634917715.809531000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f35000000323230204741524d2d31303547303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-5295cb84a72ade87a3f39efb", "kind": "unclassified_tcp", "frame_number": 76840, "timestamp_epoch": "1634917716.431214000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-96c984893c8ca0a404318e33", "kind": "unclassified_tcp", "frame_number": 76845, "timestamp_epoch": "1634917716.587205000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-c2bd421c66f56246966d8ec0", "kind": "unclassified_tcp", "frame_number": 76848, "timestamp_epoch": "1634917716.860991000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f140000005354415254544c530d0a" } }, { "event_id": "evt-0c621f4d9388f8510b565b5e", "kind": "unclassified_tcp", "frame_number": 76854, "timestamp_epoch": "1634917717.034336000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-e6fc9773523dcaead84509cf", "kind": "unclassified_tcp", "frame_number": 76859, "timestamp_epoch": "1634917717.113881000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f04e66da2168f150352b8fa5", "kind": "unclassified_tcp", "frame_number": 76861, "timestamp_epoch": "1634917717.372108000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-065eebe283dd929cc0a83c72", "kind": "unclassified_tcp", "frame_number": 76869, "timestamp_epoch": "1634917717.542082000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3ac06bd07babc468e6b79b60", "kind": "unclassified_tcp", "frame_number": 76870, "timestamp_epoch": "1634917717.542101000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7f057f6cf4cc31d3b197874e", "kind": "unclassified_tcp", "frame_number": 76871, "timestamp_epoch": "1634917717.542113000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3b3a8cfd3ef89094804d695c", "kind": "unclassified_tcp", "frame_number": 76875, "timestamp_epoch": "1634917717.542624000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f62000000922d58c7982b9ef1a9379c5933fe47d0ecec6762336291afedd60fda2761f8165ae89d051b04da623351cd76f71133c5040102004ae02bc348a61cadc64d70b4a599019f6b02f2de23eb617e936333a82415326d73919b15" } }, { "event_id": "evt-67c5555795396485b8ca8fa6", "kind": "unclassified_tcp", "frame_number": 76879, "timestamp_epoch": "1634917717.543294000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1ee087520e0f76beb8a8ab4d", "kind": "unclassified_tcp", "frame_number": 76881, "timestamp_epoch": "1634917717.643782000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0711ad16eb19952f199c653d", "kind": "unclassified_tcp", "frame_number": 76883, "timestamp_epoch": "1634917717.884234000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2fe4000000160303008a100000868504008b8a9d8d7249a5cce736d458243bde0df982e509ee25759e1640c3bd1db4894f966394024be781e42e50033b353d7be170e0751454e4c4a89b71a9f54844cd4c5d0159bd0f095841570a4e6f370021f65898ee58eca1e8705ac082221b3553f60ceec311bea4b1c1ab16425ce707c6776e99953af1e025da9790918b0421f8666aff8c14030300010116030300406740fc165b61a53493aa9661945f99860a4c13e73c3c7ad45a2508dfa62b7690e4d38345752c85553f403f8a22af59d71679f627ae2a8d2ba2e9846b169ee8f2" } }, { "event_id": "evt-e8aa4a5811cc8a8f458a047f", "kind": "unclassified_tcp", "frame_number": 76888, "timestamp_epoch": "1634917718.132661000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f550000001403030001011603030040f6fa976befb656da3686fe26d198dbb7829bf9ec416abff9a665e51093bab6f9c1118ecb27457e5b267779da86fd30e091fa76ca1783f01c0c37bf83695c7e4a" } }, { "event_id": "evt-080158d94cf892bd2a0eec0c", "kind": "unclassified_tcp", "frame_number": 76891, "timestamp_epoch": "1634917718.505114000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f0000001703030040e304c6f65119717ddaa8e3303fc815ec8d928a7b0aacfcc25f1c7f2e5fd9bbbc98d1abb15253a9b4565872b4cc4fd72dc479ce60b638ef058cfcd53de7bd3eba" } }, { "event_id": "evt-2f65679e520f358c18d2b2d1", "kind": "unclassified_tcp", "frame_number": 76896, "timestamp_epoch": "1634917718.659535000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c79e6c6f1da0dbe146861b0b", "kind": "unclassified_tcp", "frame_number": 76899, "timestamp_epoch": "1634917720.015389000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f000000170303004008de2e50e346f1d77a1988fbe8886b9fc0a80800dc5864a8ff8f0a7bd1df009093946c6dffa06f45b411ba4582626fc0743b5025e36f81dc360a3bbca8fc8ec5" } }, { "event_id": "evt-dd15638eaa9ba1a4aad8a76a", "kind": "unclassified_tcp", "frame_number": 76906, "timestamp_epoch": "1634917720.170203000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f00000017030300401de6c042baaae7cb7709dcc09ea5de8caad95e5a8abd88eff08fb008ef69fb4ec3214723e06d2019a5d9b7c2002741d01a5a261219bcea665054294d8cea89f7" } }, { "event_id": "evt-430edee58eabaa1f24d5ae44", "kind": "unclassified_tcp", "frame_number": 76911, "timestamp_epoch": "1634917720.401627000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f0000001703030040d78a67a4e31acb009090ea6fb115d69892071179995037031b9cf46bf512fd58f8e72cbb7ae921e87bc444d41d73c7d9d067002215a774b98e89f71fab1dcd39" } }, { "event_id": "evt-096691930d2f78ceba8793e1", "kind": "unclassified_tcp", "frame_number": 76916, "timestamp_epoch": "1634917720.556791000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f000000170303004078e40f1aba932b98d1ff8b24a44951356936e513c1bca4ca094515b3feda7062fec362fa513ba04a45efb449c1cd93501fb61f41648fd9d1145e38177d131a87" } }, { "event_id": "evt-2aeec5b98ba66fe9b4faacbf", "kind": "unclassified_tcp", "frame_number": 76919, "timestamp_epoch": "1634917720.853906000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f4f0000001703030040aca483c23120a6e6a0cf78692c11f49bfc28f02be8492e9927ae5ab7fe54f02f8bc1c35d069511a6d16c4f820de10812e490e1580501faeb360b2d41cf390b3a" } }, { "event_id": "evt-6ddb80baa61f909aaf3a4718", "kind": "unclassified_tcp", "frame_number": 76923, "timestamp_epoch": "1634917722.706270000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-196a5f3495b6da0eeac3edb9", "kind": "unclassified_tcp", "frame_number": 76926, "timestamp_epoch": "1634917723.600057000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f5f00000017030300506d406d15b4665ab545c2a04d36e19fd9e0be0ec1cf0db8a253375fd3ff20c0a2b83c19a8d2067a3d6c2620b11b54c724a11e73c2408913f8a3e907c27dc9214bac00b429b54dee864784e9c2d97d153b" } }, { "event_id": "evt-1f163e278fd4c9c24af1f83b", "kind": "unclassified_tcp", "frame_number": 76929, "timestamp_epoch": "1634917723.973788000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f3f00000017030300301acd154f4c40533526ea4e0ba38cae5cbeaa5135c73028e95821009babdada6602170ee3c687c788457c5454b390dfc7" } }, { "event_id": "evt-db3ec3e76ad0195ac1894944", "kind": "unclassified_tcp", "frame_number": 76933, "timestamp_epoch": "1634917725.647281000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020052e00c000000197b" } }, { "event_id": "evt-926c7723dafd447080b57184", "kind": "unclassified_tcp", "frame_number": 76935, "timestamp_epoch": "1634917725.840931000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e00e00000005020002" } }, { "event_id": "evt-d864841b4816a5ee497a1fc5", "kind": "unclassified_tcp", "frame_number": 76936, "timestamp_epoch": "1634917725.841422000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020052e00c0000000502" } }, { "event_id": "evt-e0652b0cbb51e6d34867211f", "kind": "unclassified_tcp", "frame_number": 76938, "timestamp_epoch": "1634917726.149890000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-12370a3d7722eb089951d8ee", "kind": "unclassified_tcp", "frame_number": 76939, "timestamp_epoch": "1634917726.150469000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020052e00c0000000100" } }, { "event_id": "evt-dbbf9ddcd5abd45bd43283a2", "kind": "unclassified_tcp", "frame_number": 76941, "timestamp_epoch": "1634917726.536111000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e01e000000050100030d6d61696c2e6c65636d672e66720019" } }, { "event_id": "evt-619efe6ecd93ca05a9dda8b3", "kind": "unclassified_tcp", "frame_number": 76946, "timestamp_epoch": "1634917726.711456000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e014000000050000010a0a169cc3fd" } }, { "event_id": "evt-e6468cfcadbc9878a2871344", "kind": "unclassified_tcp", "frame_number": 76949, "timestamp_epoch": "1634917726.896253000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e035000000323230204741524d2d31303347303035204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-95aa89f6585b3c7076ab56f9", "kind": "unclassified_tcp", "frame_number": 76952, "timestamp_epoch": "1634917727.233191000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e01a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1732a6d0169c988f6802047c", "kind": "unclassified_tcp", "frame_number": 76959, "timestamp_epoch": "1634917727.396047000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e07d0000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a" } }, { "event_id": "evt-fa1ebfec5b4a592dbb3a58f0", "kind": "unclassified_tcp", "frame_number": 76962, "timestamp_epoch": "1634917727.408221000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0260000003235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-61a9e7857c49a67aa26c3d62", "kind": "unclassified_tcp", "frame_number": 76965, "timestamp_epoch": "1634917727.901717000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0140000005354415254544c530d0a" } }, { "event_id": "evt-61395815288618b515fc6c5f", "kind": "unclassified_tcp", "frame_number": 76970, "timestamp_epoch": "1634917728.044645000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e02800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-725897c8dfb4d3ba845441a7", "kind": "unclassified_tcp", "frame_number": 76973, "timestamp_epoch": "1634917728.350256000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d45582f8a9f4c254f8a868e1", "kind": "unclassified_tcp", "frame_number": 76983, "timestamp_epoch": "1634917728.535941000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bbd69ea64c71153a5738ff15", "kind": "unclassified_tcp", "frame_number": 76984, "timestamp_epoch": "1634917728.535954000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a067f6e88a5569031cf4ac14", "kind": "unclassified_tcp", "frame_number": 76985, "timestamp_epoch": "1634917728.535962000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bf45c270420989b51ca50729", "kind": "unclassified_tcp", "frame_number": 76989, "timestamp_epoch": "1634917728.536295000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-97445a9866d450be8a5940d9", "kind": "unclassified_tcp", "frame_number": 76991, "timestamp_epoch": "1634917728.706409000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7146cb4beef669a578767c8e", "kind": "unclassified_tcp", "frame_number": 76993, "timestamp_epoch": "1634917728.863097000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0e4000000160303008a100000868504013af226d2aab2349ebc0fe82a6c83978ded94cbcd4c8781c2395ba415ad6ef3f9d40c816b86c2473ee6a938d84c24d58ddf5e38bcc1a872357b241170ff3c0351cb005f15b2d6fbe97e65d452a332fe3e8c4e04daf96532413c3ea4c93813e05ec27783149578f1aae5a5dc42a9eecad3a44a8d4592fabea21e3e87b55a0f47ba450b3a1403030001011603030040201d036a4dbfdb90f01cac6bffd4de102f27b7c60419b42ee0efaf10a69b433bd610392e2a879e73f6d6fbf16169d0ea9fc9336ad785b34052ee6370bcacf789" } }, { "event_id": "evt-4e452050928183c792c6ca5c", "kind": "unclassified_tcp", "frame_number": 76998, "timestamp_epoch": "1634917729.011281000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0550000001403030001011603030040d9abe41e761b8191685c584fe5759d414b883e4218f8240e2f30f1ff221624adc9ba31901136c979506d3d99bfd9bddd873463a4b835270764355d4ff0f46b31" } }, { "event_id": "evt-793fdc952e4f432f134003ff", "kind": "unclassified_tcp", "frame_number": 77001, "timestamp_epoch": "1634917729.275007000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f0000001703030040a092b8a5f13a756382309b31562fee6fb0557d0fc8d975ec5637d491b6fce9948c0e9a4764db6c13542c0dca59ef9ed919b393be0982b774ca4e62995d0620b8" } }, { "event_id": "evt-5c8e29a0086b52d6eeb5c0b6", "kind": "unclassified_tcp", "frame_number": 77006, "timestamp_epoch": "1634917729.433567000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0d90000001703030040768743df6c148a865421795c09b18383063d33af79bd7dc8439ba9add601320ff51e574bde3a1d5452d4b25c6f6b2bc6561db75262e9cb60e339e3408a1914871703030040e05009e542b70268dab7d899eea9d1d87dc8c6a7340fb09fb2f0467798a668b3918a935e966fd626a7ede432b33b009c45e8273df914dadf7c048b7716e5d6d6170303004096bfaa03aa9c235928e4076e3d3b80a63f3e4cbfc68eb87f263aec9db2d563cc5e2a98b54adda807ba76c9366f63d72ea9cac0d2621c9684e250243e1bcbb01a" } }, { "event_id": "evt-3772905ba763bc1ee815781d", "kind": "unclassified_tcp", "frame_number": 77010, "timestamp_epoch": "1634917729.438958000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e0d90000001703030040695ba99190101174053074da97354c6266dac4d4bffc54558841f97dd3b81c40a64c90b43247ef2b88adcd9a9d5464368b3a335d399b25a554c5d46f183c9b591703030040d94d5bbda103755884fd68a4c0df5cb4dfd6e21a30a5850aacfab25f306dda7c5b5776477019bd4aba16522bb4cf5e6ffce7a9222f3cc44fb4e9c31ac346a7a117030300403f78f3868ab3aa975d250bb9c4df4a6079894d23bd431af9453a5167d239ca3d7f2a5c61c85cfbee3d078ad48fe9a8310aa6211c4e9addd670c0b58dc072f1c6" } }, { "event_id": "evt-23d7f2f36744079c0d5d76de", "kind": "unclassified_tcp", "frame_number": 77012, "timestamp_epoch": "1634917730.162539000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f000000170303004076c3d7d5ec1dcc9c1ed8bed1f2f20830e393b70e1c120f0899bdc3f5a51679de89a89a83f5fa120b57b2e132a68d5afd95cbac4052e4f397953b5d9632dedec9" } }, { "event_id": "evt-4ab9e494703d7a96b8cbf752", "kind": "unclassified_tcp", "frame_number": 77017, "timestamp_epoch": "1634917730.328926000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f0000001703030040325804366cd971810f413c4f49600d8f376d9d39a5e676d4b1dea2b34863087cacfc3754236a1410ac7b32682a08afb0d3e3eb997ac072d7cdecaee2ad988be5" } }, { "event_id": "evt-29677c004e19b433b10e5a83", "kind": "unclassified_tcp", "frame_number": 77020, "timestamp_epoch": "1634917730.622260000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f0000001703030040d18e520cd208ca4afa0cb7d5b8e2884b5db592ef8b2496ef869b1e10c6c11e9e0d1ab66df14991f701f3c57fa554200ed2f52850c1bfdbc1586646841ab49b19" } }, { "event_id": "evt-0a4baa7bebf64a4167d91bc8", "kind": "unclassified_tcp", "frame_number": 77025, "timestamp_epoch": "1634917730.777736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f0000001703030040805dc4141e71cbd0a556c0ab7ca6555df5e088928bac465ec151eeedf9ddbcb5ca59498203025c1024ceab8e73052a13539a82dad36091b426f3b489caec4b3b" } }, { "event_id": "evt-903b92a3b4824fe678bacc6a", "kind": "unclassified_tcp", "frame_number": 77028, "timestamp_epoch": "1634917731.041767000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e04f00000017030300405d75a764282ff9423d3a77e545ba1461ef400bb753b9a86e09a51f3a4f9544436137eff854d622c06fc4cc537c54b42965bc56c0d95eaf20ded9d54a8f102fdd" } }, { "event_id": "evt-a9d327d120db0c7b5febd229", "kind": "unclassified_tcp", "frame_number": 77034, "timestamp_epoch": "1634917733.430887000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e05f00000017030300500d20817fe53a08f520679727c8bc88baa274165a11a544c280bd80067ffaa28d4add8a34af1e38866c50c5693a2263f88a5b8bd6495f1df313d31450ccd40d0f211746c994550fa3df059611053f0fd4" } }, { "event_id": "evt-0c3a291a4515de3c2b09ac9f", "kind": "unclassified_tcp", "frame_number": 77038, "timestamp_epoch": "1634917733.706704000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-71551e96e826a43b08ef2539", "kind": "unclassified_tcp", "frame_number": 77040, "timestamp_epoch": "1634917733.783277000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e03f0000001703030030de524870385b42ed0396f0f3217e01bc6053b2c42f7d88d70cc784b6cbf692e92692b2af29c57cd00db68a05c91d7c1f" } }, { "event_id": "evt-11c420064dd02be45d4ee4f5", "kind": "unclassified_tcp", "frame_number": 77045, "timestamp_epoch": "1634917736.471566000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-450142a18d46b7ecc13f743b", "kind": "unclassified_tcp", "frame_number": 77047, "timestamp_epoch": "1634917739.721838000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b1bd1459a7f4d2ebb7f4c0bf", "kind": "unclassified_tcp", "frame_number": 77061, "timestamp_epoch": "1634917744.784987000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b4983effe41df1dd66f9d242", "kind": "unclassified_tcp", "frame_number": 77065, "timestamp_epoch": "1634917749.815539000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4bc2aa74f32ce1233761e45b", "kind": "unclassified_tcp", "frame_number": 77067, "timestamp_epoch": "1634917754.862885000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-661742e07aba210ff8690044", "kind": "unclassified_tcp", "frame_number": 77070, "timestamp_epoch": "1634917757.088696000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f5f0000001703030050eeb145725adeaed995cc144a9be713c0591fd197917acccba5958d8b3a0bc7bdbfe9cd50248e13e33709b641bc80f969af897e8bf4b1d7be0e4b481185da7ea5badadd363e56fae774863146d0111ccc" } }, { "event_id": "evt-190a243f710c255a655bc864", "kind": "unclassified_tcp", "frame_number": 77073, "timestamp_epoch": "1634917757.340220000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f3f0000001703030030e265b5aa5c1e720bfe448031abff64f2f8ccaf5322fc1e9b7f321052d16ac9f9b093ffa8d964a7c51646c6556c188f54" } }, { "event_id": "evt-711ed12f6f3ffbbccdc3bab5", "kind": "unclassified_tcp", "frame_number": 77079, "timestamp_epoch": "1634917757.496112000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f6f0000001703030060f30ac64769d537173d31c3500540bca07d85ed3e8c0f69bb990d37b9d1c5029ebab056f8ddd5ddf3b09e920fc55fc8715ab4b2f2c341bf65c1bbe0fe10e1d5558aa1d26567b0bdd89f00db3a4c6fc57e9c5731bff81746e6803a3f6b19c0836c" } }, { "event_id": "evt-938cd2e2d579ced9fe6f67ba", "kind": "unclassified_tcp", "frame_number": 77083, "timestamp_epoch": "1634917757.496750000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701001c2f0a000000" } }, { "event_id": "evt-b71927b282452e63cc78c97a", "kind": "unclassified_tcp", "frame_number": 77085, "timestamp_epoch": "1634917757.772533000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701001c2f3f0000001503030030ced235c8dcfd1820e7a2881aef3a1ed6720d32f39c690248d4a91f9fe91df4fadea1c4b48a1ecb022fdbe3a47b1e4da6" } }, { "event_id": "evt-d71bfff8fc71f0624534655a", "kind": "unclassified_tcp", "frame_number": 77087, "timestamp_epoch": "1634917757.946484000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701001c2f0a000000" } }, { "event_id": "evt-d701376ccc60e4d55f1c6e87", "kind": "unclassified_tcp", "frame_number": 77089, "timestamp_epoch": "1634917759.894881000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ac0824c7253bc6170a305a40", "kind": "unclassified_tcp", "frame_number": 77092, "timestamp_epoch": "1634917764.926222000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0c586ca0ee300954d9a6cac3", "kind": "unclassified_tcp", "frame_number": 77097, "timestamp_epoch": "1634917766.916008000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e05f00000017030300506cadf9e408f0a506a8bfb57d84adc9e8387bdfdfea547dd736c25ffadd3191d3374a442e6465c8208f2e121b1be313afe645edc74285d0308dbae2cfd290ac7778f8de73b0ed74c9bcbad40500a19847" } }, { "event_id": "evt-61aee11081e4953a313788b9", "kind": "unclassified_tcp", "frame_number": 77100, "timestamp_epoch": "1634917767.295881000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e03f000000170303003059a5c3df8e64048c65ba5633ad9b6313ea746590aea7a4a1af25c0825c4bbc2b5c6c52da2a6ceb8ec89398cc5a6f7d4b" } }, { "event_id": "evt-140eb159090d459c9eb3c370", "kind": "unclassified_tcp", "frame_number": 77106, "timestamp_epoch": "1634917767.450554000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e06f0000001703030060a102e0e93e9319b21b5b60b749d5060d205cbd2590bef620a7ce97b055fd059133ad2022d18d692c040715fed8ad467d742669fbbb5fde13772e6fc3706693a30cd431d590b9ee26eb676b1d13c1d01cfa8c1eaac3a07d4bad6c7217b7e219cd" } }, { "event_id": "evt-40b0df1c596c892de39b5b61", "kind": "unclassified_tcp", "frame_number": 77110, "timestamp_epoch": "1634917767.451180000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020052e00a000000" } }, { "event_id": "evt-9c44ebdfd7ee99f9b324ae96", "kind": "unclassified_tcp", "frame_number": 77112, "timestamp_epoch": "1634917767.716872000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020052e03f000000150303003026ffc7e25d9045a6289bd0db8e10d820a3d30a7f94406f0132f74a818b1b99f57f39acf093b59d6d8e0389418fbf04f8" } }, { "event_id": "evt-237fd3022cc2e2816a87a00a", "kind": "unclassified_tcp", "frame_number": 77114, "timestamp_epoch": "1634917767.896953000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020052e00a000000" } }, { "event_id": "evt-174439e564ecf514ed14a94f", "kind": "unclassified_tcp", "frame_number": 77116, "timestamp_epoch": "1634917768.860901000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701007dab0c000000197b" } }, { "event_id": "evt-b590f7ada38fbb1a64bd1535", "kind": "unclassified_tcp", "frame_number": 77118, "timestamp_epoch": "1634917769.049727000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab0e00000005020002" } }, { "event_id": "evt-6fe384a3be6251266ff0b99c", "kind": "unclassified_tcp", "frame_number": 77119, "timestamp_epoch": "1634917769.050293000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007dab0c0000000502" } }, { "event_id": "evt-aa4d5e066db6105448f1a395", "kind": "unclassified_tcp", "frame_number": 77121, "timestamp_epoch": "1634917769.307106000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-56d3f4ff3f891aabc378107b", "kind": "unclassified_tcp", "frame_number": 77122, "timestamp_epoch": "1634917769.307479000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701007dab0c0000000100" } }, { "event_id": "evt-e88f655252838598cd487b70", "kind": "unclassified_tcp", "frame_number": 77124, "timestamp_epoch": "1634917769.636756000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab2100000005010003106d61696c2e6b616c697665742e636f6d0019" } }, { "event_id": "evt-5a9d776ebb3bd5060be7fda7", "kind": "unclassified_tcp", "frame_number": 77130, "timestamp_epoch": "1634917769.987850000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e70f4a9040b9faf83f168f4a", "kind": "unclassified_tcp", "frame_number": 77134, "timestamp_epoch": "1634917769.996831000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab14000000050000010a0a169cc3fe" } }, { "event_id": "evt-3ef116be196e92c64ead5e10", "kind": "unclassified_tcp", "frame_number": 77137, "timestamp_epoch": "1634917770.168233000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab35000000323230204741524d2d31303547303036204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-59b3f7235486275e90579e17", "kind": "unclassified_tcp", "frame_number": 77140, "timestamp_epoch": "1634917770.701397000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-4764b31880ef1d7cbaae5c56", "kind": "unclassified_tcp", "frame_number": 77145, "timestamp_epoch": "1634917770.875658000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-44861f01533dc647520cfb1a", "kind": "unclassified_tcp", "frame_number": 77148, "timestamp_epoch": "1634917771.134202000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab140000005354415254544c530d0a" } }, { "event_id": "evt-e1890a8e76653f678f70f3e6", "kind": "unclassified_tcp", "frame_number": 77153, "timestamp_epoch": "1634917771.421065000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-cc31d191ccbfce0edf5d00cd", "kind": "unclassified_tcp", "frame_number": 77156, "timestamp_epoch": "1634917771.784076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2a80d507122890586654a389", "kind": "unclassified_tcp", "frame_number": 77161, "timestamp_epoch": "1634917771.957416000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab6a05000016030312330200005103036172dd8b9d8fad19e73e133910c466f222e393b52122cedd9b946f6cc5e2aac820033a00000a003df2f539748ccbb0420cf20128ae8e5e524fce9da19f5016ddddc01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6" } }, { "event_id": "evt-c4d3ce3c9f89d2fbad643275", "kind": "unclassified_tcp", "frame_number": 77165, "timestamp_epoch": "1634917771.971844000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-95c5a90dbffa91189544cab3", "kind": "unclassified_tcp", "frame_number": 77168, "timestamp_epoch": "1634917771.982302000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9c04eb58a064ade6d42d013d", "kind": "unclassified_tcp", "frame_number": 77172, "timestamp_epoch": "1634917771.984663000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b1d63b7cd1ac7c5e8499777f", "kind": "unclassified_tcp", "frame_number": 77174, "timestamp_epoch": "1634917772.474607000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dabe4000000160303008a1000008685040148cf608fe0ef2f3cb74cafbf41de8cdfe8f1dd40ed5b325b86654c7cb789736a019055f7f021d8edbc89ae9e48f5f5a0f01972357e6ac7a02ca8d7a972975bc44f003ce20e1c13b7c91b5a771415193f898e916349c2c09da8e1c266caf762baf7e88ba588bce2e0c3d18ab7015ca25938e3b40b6fa714e9de4dcb9ddf90c3d7d7894814030300010116030300403bdcdd9ae8756578f19920178d837b6870a77f9f20050b8421ea3d6339cfcb45920c0e2ebf2acf900b90d2c2553b7ec0705ab77c0d4b7a293bfa8de1a454ae37" } }, { "event_id": "evt-f4cd4b6e9b8e5ecbe195a5c1", "kind": "unclassified_tcp", "frame_number": 77179, "timestamp_epoch": "1634917772.662651000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab550000001403030001011603030040aa9842230094150a0318fab9bfbcb0ab157aebce2a3b089c8831e5135b346d18881b58ec7dff44fda314d2b02077c29d60750821b894e2132c5561e6c3cff2d7" } }, { "event_id": "evt-10ca76776022781a619c18ae", "kind": "unclassified_tcp", "frame_number": 77182, "timestamp_epoch": "1634917772.920834000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f00000017030300404e74ec08867183cdc6a51c8981621cb2ac69a6d67ee49ac84a6c2e0a9ed92adbf2ca5d8cedf345e224f0d6aee078ee179842cd94746970b2ee55f130a7c37664" } }, { "event_id": "evt-136e2431ae6e5fd966ffddaa", "kind": "unclassified_tcp", "frame_number": 77189, "timestamp_epoch": "1634917773.077878000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab630100001703030040c9f3fad68a51414580ad0a2c5d42ebc1d831c07ffc92a6ab5572f7c84931ea5643fb1937ba5021dbb9c88cf7d1fdad6603546381ff398c0654166c2daf44fd9a1703030040445e45ef812ccc51d81874682bc73927503e5d2a9a25919c2e948b9fc78eac1c04833fcfbf687fa196147d132f0b652d8d65fe75523bf9413f99d645af60a6551703030040df844c8db20e782614ff0d5c9f944759a50bc2ea3a0f373d4063b056a19771b98ee58eb43095c8cc08aa5e61fa8866cafabe6aec43a6e931d51a868a238dbed7170303004001ef73ea7559926e801c095a6b981b993d08a798c82097c0ed8817105008628444d393fdc36dd013672d51bbffacfe6f5f1f9117d634b97080b03de1f32f1f911703030040665d5c81936264e10cb4efb5bdb26acdbed70b8f3aa344da8627041a3996401a26f74e8415f78ade7ea78453a66d573608497f84b7e95a4c852443efe44c948f" } }, { "event_id": "evt-607b8ebedf3d5cc7b38ce6fc", "kind": "unclassified_tcp", "frame_number": 77192, "timestamp_epoch": "1634917773.080301000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f00000017030300409c81eb2ac4d95573c73a1501f5582ee4a3739f4a2b453c1200559ccc8564c167af06e7ebae4713a6005a3797fc73234db18527860fc9e7c0bf7a0f274254d8ad" } }, { "event_id": "evt-7c75988113f3ec6d2d1fde5f", "kind": "unclassified_tcp", "frame_number": 77197, "timestamp_epoch": "1634917774.305676000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f0000001703030040b8fbe42925b30e4320156846903fed585b199d633b61501176d3396e7deb8b7e2392d1a164d20e2041279fd536041f0f52e2b46378c982c0266b43118165e089" } }, { "event_id": "evt-4d5d2470b7611770d222c630", "kind": "unclassified_tcp", "frame_number": 77202, "timestamp_epoch": "1634917774.489219000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f0000001703030040316766fb1ea4e4ef336a8dbfce35b0c292aec088379de4ecc7c394f3cee9adf937f7023a310d44d60e746af6d9c7b714830a4d08abf3e2fa189614b438374709" } }, { "event_id": "evt-2eb5d0c82a9ee1b4529d4db6", "kind": "unclassified_tcp", "frame_number": 77209, "timestamp_epoch": "1634917774.812295000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab6f000000170303006057b5358011d630bf24c0df57542fa3bec4be32390fa3ac73141488d8445b9102e920693e27a4c992360e0c8f5a64e8cd7f1743b8b7cd91ece864c282977b2a0d08f2aca8e9628d44d8423f67da11926e4381677377381cf8e6d242ee8a6d2fdc" } }, { "event_id": "evt-01bb5a9e7ed5e4047559c5bd", "kind": "unclassified_tcp", "frame_number": 77214, "timestamp_epoch": "1634917774.970639000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f00000017030300403dba9de954e42ba8cdd8e320c25d1fbc099bd00e83ee8a643e82f24047e347c8f79cd68279c4081fe8722f6b867fc8fb44ebd74e0ca9fb728319696e62855679" } }, { "event_id": "evt-50651bd80753fdcca2933ff6", "kind": "unclassified_tcp", "frame_number": 77216, "timestamp_epoch": "1634917775.019043000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-40cf187721ecf7746c204fa2", "kind": "unclassified_tcp", "frame_number": 77219, "timestamp_epoch": "1634917775.288241000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab4f000000170303004097ee551973ab863d69c008a59fef3cf50b75d28e8946132824942aac8a9621f9fe56aab8f3821fb22f3fbfe9d3e3497eb16d22bd3c809703ef4b24a3e98fd072" } }, { "event_id": "evt-80522b3315dcd00d8971178e", "kind": "unclassified_tcp", "frame_number": 77224, "timestamp_epoch": "1634917777.671823000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab5f0000001703030050ef11d1b2880e7844ab676d81ca0e55a1af34f4e1a83b8f95da6954ebf8e555765cac764f6945d6b22b5d0cac657384bad7d7b8dcd82477b6b47da876017901a4b2a5bb01c13433d68bf43cda817205fc" } }, { "event_id": "evt-8142c1c0c82829c509326373", "kind": "unclassified_tcp", "frame_number": 77227, "timestamp_epoch": "1634917777.961055000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab3f000000170303003088d91da50b81860da6e10ffde0a2cff2999cc8c0e2c5b2c75234189b3f50d216902845efda256ba8e331d95cff84e481" } }, { "event_id": "evt-0c33ecd8618ba292948fcb00", "kind": "unclassified_tcp", "frame_number": 77231, "timestamp_epoch": "1634917780.035431000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ed6623ad9ee03f41d982c77f", "kind": "unclassified_tcp", "frame_number": 77237, "timestamp_epoch": "1634917783.606713000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702006d3b0c000000197b" } }, { "event_id": "evt-5efc1e69b822a0534bc04273", "kind": "unclassified_tcp", "frame_number": 77239, "timestamp_epoch": "1634917783.798044000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b0e00000005020002" } }, { "event_id": "evt-4e4d13e1e24e904ed1983b2f", "kind": "unclassified_tcp", "frame_number": 77240, "timestamp_epoch": "1634917783.798705000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702006d3b0c0000000502" } }, { "event_id": "evt-c6adddda98212785e962aabb", "kind": "unclassified_tcp", "frame_number": 77242, "timestamp_epoch": "1634917784.077734000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6801998a481a2edb37290737", "kind": "unclassified_tcp", "frame_number": 77243, "timestamp_epoch": "1634917784.078117000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702006d3b0c0000000100" } }, { "event_id": "evt-1b7a58caa4cbdc26ce8b08ea", "kind": "unclassified_tcp", "frame_number": 77245, "timestamp_epoch": "1634917784.347724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b2300000005010003126d61696c2e626574686e65742e636f2e7a610019" } }, { "event_id": "evt-cd3b1b03c16480ca0a2f42fd", "kind": "unclassified_tcp", "frame_number": 77250, "timestamp_epoch": "1634917784.733504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b14000000050000010a0a169cc3ff" } }, { "event_id": "evt-a7e3b30d2f1c7135ec4a6431", "kind": "unclassified_tcp", "frame_number": 77252, "timestamp_epoch": "1634917785.036657000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bbad8e765b6e35a3c044942d", "kind": "unclassified_tcp", "frame_number": 77254, "timestamp_epoch": "1634917787.293059000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207030069600c000000197b" } }, { "event_id": "evt-072d22dff3e610de92d75eff", "kind": "unclassified_tcp", "frame_number": 77256, "timestamp_epoch": "1634917787.479977000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069600e00000005020002" } }, { "event_id": "evt-430c90506ed4eb395f21f8cb", "kind": "unclassified_tcp", "frame_number": 77257, "timestamp_epoch": "1634917787.480515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030069600c0000000502" } }, { "event_id": "evt-25000a0bbec25393632fbca9", "kind": "unclassified_tcp", "frame_number": 77259, "timestamp_epoch": "1634917787.780177000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300696020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-53bb3b4ce4c61aa157413ebc", "kind": "unclassified_tcp", "frame_number": 77260, "timestamp_epoch": "1634917787.780778000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307030069600c0000000100" } }, { "event_id": "evt-bb9c31b987fd39c40b965a51", "kind": "unclassified_tcp", "frame_number": 77262, "timestamp_epoch": "1634917788.057115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069602600000005010003156d61696c2e6174656c6965727363616c696e2e66720019" } }, { "event_id": "evt-36e9fc1bcf4128038c95835d", "kind": "unclassified_tcp", "frame_number": 77270, "timestamp_epoch": "1634917788.421322000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b5d00000032323020646564693832372e6a6e62332e686f73742d682e6e65742045534d545020584e45454c4f5f4d544120312e3030204672692c203232204f637420323032312031373a34393a3437202b303230300d0a" } }, { "event_id": "evt-babbbdb55b719379f7246c8c", "kind": "unclassified_tcp", "frame_number": 77274, "timestamp_epoch": "1634917788.579837000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300696014000000050000010a0a169cc400" } }, { "event_id": "evt-96e642aaa67d3c9383862905", "kind": "unclassified_tcp", "frame_number": 77276, "timestamp_epoch": "1634917788.746690000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8cc7df84025119dbac27dcb8", "kind": "unclassified_tcp", "frame_number": 77281, "timestamp_epoch": "1634917788.923500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300696035000000323230204741524d2d31303452303035204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-c5a01601771c70b46846b33a", "kind": "unclassified_tcp", "frame_number": 77285, "timestamp_epoch": "1634917789.069840000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3bc40000003235302d646564693832372e6a6e62332e686f73742d682e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452033313435373238300d0a3235302d384249544d494d450d0a3235302d4554524e0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-eb9e291f1c898b248de356e4", "kind": "unclassified_tcp", "frame_number": 77288, "timestamp_epoch": "1634917789.209293000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069601a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e05aa78b1e6ef198351f3e09", "kind": "unclassified_tcp", "frame_number": 77295, "timestamp_epoch": "1634917789.352931000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006960990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-97ab2994aed5f64b8b542aa7", "kind": "unclassified_tcp", "frame_number": 77297, "timestamp_epoch": "1634917789.428233000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b140000005354415254544c530d0a" } }, { "event_id": "evt-34992d133b585939fb720162", "kind": "unclassified_tcp", "frame_number": 77301, "timestamp_epoch": "1634917789.634340000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006960140000005354415254544c530d0a" } }, { "event_id": "evt-8707cf73ef6e8663d22d5e45", "kind": "unclassified_tcp", "frame_number": 77306, "timestamp_epoch": "1634917789.774239000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069602800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-f01fc5638f0809bb72d89577", "kind": "unclassified_tcp", "frame_number": 77309, "timestamp_epoch": "1634917789.788749000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b1c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-b5fa805233cdea23465ada61", "kind": "unclassified_tcp", "frame_number": 77313, "timestamp_epoch": "1634917790.037079000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f3e08b9f7f01c8f7fd1220a5", "kind": "unclassified_tcp", "frame_number": 77315, "timestamp_epoch": "1634917790.076231000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069601b010000160301010c01000108030385d3a91866fa0f2afd49c28a46b484ad5376977c7324298a83498b4cb5c313bf20f95cb674e6c8288ea9968ea2aa2420de4e4470a60a3005c4adc1395d2651df580026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000990000001a00180000156d61696c2e6174656c6965727363616c696e2e6672000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00207c5296c50aad4f4164d2eca79cdeab132b52ee5019e949ece926745ede618d4c" } }, { "event_id": "evt-078cd9fdda2f8e054476c43f", "kind": "unclassified_tcp", "frame_number": 77322, "timestamp_epoch": "1634917790.252563000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ed56490024e2e93b747e9c9c", "kind": "unclassified_tcp", "frame_number": 77323, "timestamp_epoch": "1634917790.252585000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-78baaaeceef64bf5499e6c82", "kind": "unclassified_tcp", "frame_number": 77327, "timestamp_epoch": "1634917790.262298000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1d24e784a468b51fcd43e674", "kind": "unclassified_tcp", "frame_number": 77330, "timestamp_epoch": "1634917790.274817000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b18010000160301010901000105030309e9131bb7c26b8f3a3a08c0e13ce9c1b58a6e1ea06bf1914b5e93855fb09f3b201d5daa4be06743ca1bfe4433c0b9b261af3e2cfb099925195f7aa3e26aa8b32d0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000960000001700150000126d61696c2e626574686e65742e636f2e7a61000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020f1ed08bb6816424ccc3f718c0dd1f11c0a98a73deda75f148b1a4fdc6f8fc147" } }, { "event_id": "evt-d0f02c31efbcb84250dfe08b", "kind": "unclassified_tcp", "frame_number": 77332, "timestamp_epoch": "1634917790.275336000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac8619e03a891df10f904352", "kind": "unclassified_tcp", "frame_number": 77339, "timestamp_epoch": "1634917790.642519000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6a23310ed773bb2d7bdbd852", "kind": "unclassified_tcp", "frame_number": 77340, "timestamp_epoch": "1634917790.642541000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ecb4c549f2bef96fdc9e9895", "kind": "unclassified_tcp", "frame_number": 77346, "timestamp_epoch": "1634917790.654218000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-020d8f6574ffcd966bb8841e", "kind": "unclassified_tcp", "frame_number": 77347, "timestamp_epoch": "1634917790.654234000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "86f04939b820c6d5a28a737471081f19c73e794d8c4a42e187213aab8bec0dd4e1ad1aff43660efbd40fec1e7b274ea7deba040101002dd89ad16399a8b5710457d97005caca4759109e1d7b54b551bcc381708f94d0567b96651427257f38a8ba8e0e1b7d30502c89505d91d5619fe8632486e3754162def5c8996b51056196f84d4d633e9ad5f46377ffb61d19e878c43958c143c3c48a71710e2779eabcf75b9b158119cf8b34af95b42ea3cd3dd15ac8f79d817d4aea12b023d27fa860d2d07d4de5b93b9ad951b654400751624d232e5548c8eb0ef61cfa15dddc3f21f87f2c9738e984c4770b99dfc1987991c9d138338946f13b9ded82d6267d0812f177b5e9dd79da4b4cfc6eb74e948d543722076c17b42f2436e1f2b131ce2fe03e2aec6bd91f4eae8782abfd4d56e5cfa9cec976db7f5416030300040e000000" } }, { "event_id": "evt-16b5cc77454c31d0b9426d06", "kind": "unclassified_tcp", "frame_number": 77350, "timestamp_epoch": "1634917790.829884000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703006960e4000000160303008a10000086850400d3717a643e4e61d87a698548e0d9d051b44e816419f35c70b6872bdf48745e7d2ea11e54055b81514670b687e30fda8b646d537dfc82d66209337250ae057f1bef013263365f8930d3284d67776eba554a2fc27d6c5be46953ca0b8d39f3441fd0b340dd48da7e76c977718765debfd0edfa8a16b06c5cd7669967aaae3bb4e98adde7140303000101160303004084209c4db07329c527de6cfb4740eedd89e646c07f8d450fc69b2fe3f02e5d71fdc9a980e1267606d0156abcf8d5c77877fed772dae6becab0a02eb32f6a8704" } }, { "event_id": "evt-f55965f00dfd490ff95f9a55", "kind": "unclassified_tcp", "frame_number": 77362, "timestamp_epoch": "1634917791.000883000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300696055000000140303000101160303004037ef79afd69049826d6292a44b7d59b9b30e688758052a4df02145dd9fa39c1179feb52e675f5e103f9cb9e883967ed9e4545003b10c5b7f58c6fa7e30f7b644" } }, { "event_id": "evt-0054339a71cfc9f7150a36dd", "kind": "unclassified_tcp", "frame_number": 77377, "timestamp_epoch": "1634917791.154184000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b8800000016030300461000004241046813f9347ca60170c244665e8087c5aee946b6db775cd2da59f99167c0408ab7e6adc2ec1eed093717af0e09c280205a7734a33a6296d2b3ca7d74093254031114030300010116030300280000000000000000159a6672fd083b5eb39a50b2192dae8c0e74c372316bb1ba15f28bc004d16788" } }, { "event_id": "evt-f65ccb5c3f8238d3dc82a29f", "kind": "unclassified_tcp", "frame_number": 77403, "timestamp_epoch": "1634917791.377222000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069604f00000017030300406091b307775238e6d30bba865cc4f104f560f17dc754dd1da95dd8a85dfaa0d20be365aa4a4e7b403b9d5744360f93ba96904eab8e6472641ff43b0cc7e02fde" } }, { "event_id": "evt-1882f3035bb2f6cab3e9f535", "kind": "unclassified_tcp", "frame_number": 77408, "timestamp_epoch": "1634917791.506796000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b3d0000001403030001011603030028000000000000000016687c790587a0344fdf8dd855644231efabd3f18fcfd9dcd050a07f20dda0da" } }, { "event_id": "evt-4124c4f48a7429bff649a0c0", "kind": "unclassified_tcp", "frame_number": 77411, "timestamp_epoch": "1634917791.532129000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-566bdf86d6d06c00c9753723", "kind": "unclassified_tcp", "frame_number": 77415, "timestamp_epoch": "1634917791.822016000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b37000000170303002800000000000000018de9cb4ffeebad0dc553cca959195e030074a4ee6e5ab3f38c939ff18f01e156" } }, { "event_id": "evt-deb38fa0f110b2de9bd252b2", "kind": "unclassified_tcp", "frame_number": 77695, "timestamp_epoch": "1634917792.150591000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3bd300000017030300c40000000000000001b24e34d8cc8089bd49869cd35ccfe96fd18766e21911b8adac72cad74a76557965bfa87134bea4ddbc69d68c001c68b101bef6ef0885a2823b738bf70da1d17b41cae8a67283649bf34a6059c4440d4ab7ea546f761671d6a6f8833e25c35e643ecc794884460c0d03d0ca1190740166ba26e72ec123fa68b84154b2c88d91b3e05452c6471fa5035a83960c2f98e86ff0f28569529f3bda8c53848b72d7ca59aa1e6d0b0ebb9c11d70b2afec44059de0b0067dcad581762eba23f56" } }, { "event_id": "evt-1fddd8dc2696915778e4e71f", "kind": "unclassified_tcp", "frame_number": 77923, "timestamp_epoch": "1634917792.925822000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069604f00000017030300400c3d963634c37f141bf51e25abd9b408b71467cbc8a766e6db8d2e5115165edfe15e7b66e079cf092cd9fdea6f46ce89adc872fe474d0647e5abe22ffc5c62d8" } }, { "event_id": "evt-af441205f53d5fe96869698d", "kind": "unclassified_tcp", "frame_number": 77928, "timestamp_epoch": "1634917793.085931000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069604f00000017030300408505054a8ad9844a8fa8cac5f3190a7eae4650e3a74e366c901af4ac9bdf09705ecfbc67bdd636d92e25580e00e5a7a63f7c52c6f6865c7a44ea5f770dde5874" } }, { "event_id": "evt-614cf4752cf9f9cdad62ffab", "kind": "unclassified_tcp", "frame_number": 77931, "timestamp_epoch": "1634917793.133275000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b33000000170303002400000000000000028ff803e7dd1055893d3f63824bb510048eaee0f83fbd42617eadb2ed" } }, { "event_id": "evt-328a9c1f8d343a2acd6221a2", "kind": "unclassified_tcp", "frame_number": 77935, "timestamp_epoch": "1634917793.347724000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069605f00000017030300507abf5d1f11fa9c858c9a39691d86bc69baeee2124d64030b3ae8c785c4f5260eaf5cc117d8ce805c84200bc42de072df7409f4c1f07704067cb1841bb1906d1099696e1acb5dc57ed5e94024b5d535e2" } }, { "event_id": "evt-d040d4cafb33838b227e3141", "kind": "unclassified_tcp", "frame_number": 77940, "timestamp_epoch": "1634917793.507158000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069604f000000170303004050e907b0ad9039ec01635c2682563f7e5d859884f781e34c26c04954cfc666912f7b2afd09e983064f434b301c4a044a0457a08b1b58e0ad7d758f5d571bd243" } }, { "event_id": "evt-54279b236e3adc6e2a75a9f5", "kind": "unclassified_tcp", "frame_number": 77943, "timestamp_epoch": "1634917793.876492000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069604f000000170303004072431ec561e9e0d6ffde1d86c327652fb499e911de0cc793da1d36c58a50a5225ea040d3790bcfb46c657df0acdac034910e915d862728872ea660c71454bb54" } }, { "event_id": "evt-a508567fad3752830cab1bd6", "kind": "unclassified_tcp", "frame_number": 77948, "timestamp_epoch": "1634917794.270882000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b39000000170303002a0000000000000002f8d4863793df82afe325976aaece792f49ec3cc9eb97dbcc1b9c39525cb1aa4801b8" } }, { "event_id": "evt-346902695949d6d96ded25a8", "kind": "unclassified_tcp", "frame_number": 77952, "timestamp_epoch": "1634917794.517173000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b4d000000170303003e0000000000000003c1511acc4e7e2ed8bb6174f2a26d591f21809d790e453bedd0592b8df271bd323550232c047685a9980a5ea2918e869218e8e73e7e35" } }, { "event_id": "evt-7f30618170bf82dc7edf96a9", "kind": "unclassified_tcp", "frame_number": 77957, "timestamp_epoch": "1634917794.871745000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b39000000170303002a00000000000000038a1433d806f9c7dbc5861efc73c17f1bff718d53eb30ef896cd5863572dbeb20344f" } }, { "event_id": "evt-fffca0f76dfdc52ac591f675", "kind": "unclassified_tcp", "frame_number": 77965, "timestamp_epoch": "1634917795.081744000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-71cd910757ae41b1cc3ad11d", "kind": "unclassified_tcp", "frame_number": 77971, "timestamp_epoch": "1634917795.155593000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b39000000170303002a00000000000000041eb257d0c8e382f0dcea8ee500e3366da779418eace427d6abb350bf6f1bb6bfe7d6" } }, { "event_id": "evt-51a5c415d7c20d0439178c55", "kind": "unclassified_tcp", "frame_number": 77980, "timestamp_epoch": "1634917795.531426000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b4a000000170303003b0000000000000004f1d494e7746ca9a8ef0785edb192bd78a2b850a52cccfdc4bdfc6d1dfffecf7990f53335a16fe4361921528fb8632a9983f63f" } }, { "event_id": "evt-c6a52e174238efb756135f11", "kind": "unclassified_tcp", "frame_number": 77983, "timestamp_epoch": "1634917795.851826000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b2a000000170303001b0000000000000005abfeab40d59c72a1cf92c59d90588435db6dc1" } }, { "event_id": "evt-e24e00179d96d233566dae49", "kind": "unclassified_tcp", "frame_number": 77987, "timestamp_epoch": "1634917796.067455000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3dd10822770bbc760f6454e6", "kind": "unclassified_tcp", "frame_number": 77994, "timestamp_epoch": "1634917796.207654000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b41000000170303003200000000000000052e1ba09b42e9c8f27230180f2fbd49e2a070f9c123b282780770e50b8147d6f7c1830a26c8257502456c" } }, { "event_id": "evt-46225a4996b652955552a3fb", "kind": "unclassified_tcp", "frame_number": 77998, "timestamp_epoch": "1634917796.506613000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069605f0000001703030050fb55e012c9f9da09b56a286c43242b89fe84dd5225de84d1d4c88454b8a49488958b48808780dcf51e9fb3a8079c035c5bee3c6588916bcf3a62052b41ea45be7a0cbd23feb1e4a332c8bb7c2a4469d6" } }, { "event_id": "evt-1e95055e63246e5f5024fccb", "kind": "unclassified_tcp", "frame_number": 78001, "timestamp_epoch": "1634917796.563026000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b2d000000170303001e0000000000000006bffe50c9c71344d404be54e111d52836200965dcd7a2" } }, { "event_id": "evt-1d99589ea2001b0474379ae1", "kind": "unclassified_tcp", "frame_number": 78005, "timestamp_epoch": "1634917796.763184000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069603f000000170303003092d9aa7e2bb1fa254ef5ba5945193066d7ab29f8c38ab579e7282321992a4b05dc43411bbe372a80efb8c9cce507235f" } }, { "event_id": "evt-deb79166754b1973812afc14", "kind": "unclassified_tcp", "frame_number": 78010, "timestamp_epoch": "1634917796.900602000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b7600000017030300480000000000000006c2a0459606131225eb9b3e655b5654d46eb854b6bb0f4ef3324a3f5a37b43c246fbc6c83d7c84641c8cbb0dac9fe774b3ff1a15f3288104185d674a5c8a2560c150303001a00000000000000078267dbca1f92695262fd27d53e5a0d59f530" } }, { "event_id": "evt-21203cc6f1349b8875d19d30", "kind": "unclassified_tcp", "frame_number": 78016, "timestamp_epoch": "1634917796.909446000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702006d3b0a000000" } }, { "event_id": "evt-5fee1537fb89487cad88245f", "kind": "unclassified_tcp", "frame_number": 78018, "timestamp_epoch": "1634917797.202214000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702006d3b29000000150303001a0000000000000007442d9ccba94eaeec4249f4a46ebfdb7dc1c4" } }, { "event_id": "evt-decf3f7895d6f5030db83452", "kind": "unclassified_tcp", "frame_number": 78020, "timestamp_epoch": "1634917797.405287000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702006d3b0a000000" } }, { "event_id": "evt-92cc336d50fc22d72ac07da5", "kind": "unclassified_tcp", "frame_number": 78022, "timestamp_epoch": "1634917800.146292000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e59bf007465b66d99b0aa89b", "kind": "unclassified_tcp", "frame_number": 78026, "timestamp_epoch": "1634917805.177319000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-518a2a75a3e0453b6cc4b48f", "kind": "unclassified_tcp", "frame_number": 78028, "timestamp_epoch": "1634917810.191278000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c1dcb9bc097faddd321b219b", "kind": "unclassified_tcp", "frame_number": 78035, "timestamp_epoch": "1634917811.155164000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab5f0000001703030050310b46ffcb60cef85df145eba11e7bd5bd230e8b8b406f0dce9b868c46a3520ffa5c3fae4534cdfa4534da064b53a29a093be6d7f6a3c21101da7c1a71d66722f8bff12b482ade4f2a2048624985aec2" } }, { "event_id": "evt-00aebbdcd2a5f0d5576f6ce5", "kind": "unclassified_tcp", "frame_number": 78038, "timestamp_epoch": "1634917811.464621000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab3f0000001703030030d72c32417a5ac55bc075f8e0a6dbe8c79cbb30660ed4f5ff994885de778eb986cbda0a8eeadc9c2facbf074a4b4ed6c0" } }, { "event_id": "evt-62f65599c9009a3c94718d9c", "kind": "unclassified_tcp", "frame_number": 78044, "timestamp_epoch": "1634917811.631526000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab6f00000017030300605c4be2c044f21bdace0d6c0741346c2df51cb4b3f338b4f5f8c37a0e3e4be8621b346a5dc489e2904d83ad7a2130cd5fae84e29e806fb0322e986976e1c57a05bc1ed3a43124ab77a2ddcdd41897ec39d72346c0062899d6c5c33162b3ece92a" } }, { "event_id": "evt-9716ca226cee2d6fc2d0838c", "kind": "unclassified_tcp", "frame_number": 78048, "timestamp_epoch": "1634917811.632084000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007dab0a000000" } }, { "event_id": "evt-201fdda2391dce9542be9b2c", "kind": "unclassified_tcp", "frame_number": 78050, "timestamp_epoch": "1634917811.957127000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007dab3f00000015030300306bb4dde63c56f35a96f8eb5371e613296cedd38d7a0a455869301b31139ce8d7192287966f1c7478ed7dbad85192c06b" } }, { "event_id": "evt-2ade1351557523925166eecf", "kind": "unclassified_tcp", "frame_number": 78052, "timestamp_epoch": "1634917812.138173000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701007dab0a000000" } }, { "event_id": "evt-c8b64bf995a1ec89201e2589", "kind": "unclassified_tcp", "frame_number": 78054, "timestamp_epoch": "1634917815.269732000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-83468de10432c26f4ee8a8a2", "kind": "unclassified_tcp", "frame_number": 78056, "timestamp_epoch": "1634917820.333585000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-be4c67b3c9017fce573de204", "kind": "unclassified_tcp", "frame_number": 78058, "timestamp_epoch": "1634917825.396513000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-254e785a94139139feb39ee0", "kind": "unclassified_tcp", "frame_number": 78060, "timestamp_epoch": "1634917826.537377000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-3ee1deb3817f5516bb1558bf", "kind": "unclassified_tcp", "frame_number": 78062, "timestamp_epoch": "1634917827.141211000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100e1c10c000000197b" } }, { "event_id": "evt-8ef3465e44e5a8dc7e7940db", "kind": "unclassified_tcp", "frame_number": 78064, "timestamp_epoch": "1634917827.435522000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c10e00000005020002" } }, { "event_id": "evt-42f9be1a8873cc7950d4c4f5", "kind": "unclassified_tcp", "frame_number": 78065, "timestamp_epoch": "1634917827.436070000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e1c10c0000000502" } }, { "event_id": "evt-338b483a642bb98e8324f33b", "kind": "unclassified_tcp", "frame_number": 78067, "timestamp_epoch": "1634917827.741781000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-a41ba898d8535f1a80cabf8e", "kind": "unclassified_tcp", "frame_number": 78068, "timestamp_epoch": "1634917827.742254000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e1c10c0000000100" } }, { "event_id": "evt-f1363d0ae369185e1b88dd60", "kind": "unclassified_tcp", "frame_number": 78070, "timestamp_epoch": "1634917828.561159000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c1210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-e21edca3c9cb3ba530dce302", "kind": "unclassified_tcp", "frame_number": 78080, "timestamp_epoch": "1634917828.738089000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c114000000050000010a0a169cc402" } }, { "event_id": "evt-130e41f662499470efc10663", "kind": "unclassified_tcp", "frame_number": 78083, "timestamp_epoch": "1634917828.799897000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c17b00000032323020534e345052303830314341303030392e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35303a3238202b303030300d0a" } }, { "event_id": "evt-2b90a9c3d30ad1936deb85d7", "kind": "unclassified_tcp", "frame_number": 78086, "timestamp_epoch": "1634917829.380145000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c11a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-22a2cbc1c3f880e38e407e1d", "kind": "unclassified_tcp", "frame_number": 78091, "timestamp_epoch": "1634917829.467801000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c1da0000003235302d534e345052303830314341303030392e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-ba096368c9ad371078a77fed", "kind": "unclassified_tcp", "frame_number": 78094, "timestamp_epoch": "1634917829.892165000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c1140000005354415254544c530d0a" } }, { "event_id": "evt-5477a9f9e55ded2d08b227a0", "kind": "unclassified_tcp", "frame_number": 78099, "timestamp_epoch": "1634917829.958911000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c12700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-b5ea0c3106cdf385491f0914", "kind": "unclassified_tcp", "frame_number": 78103, "timestamp_epoch": "1634917830.047073000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069605f00000017030300505de4b9e29d0df146d1c738bb36d758dcdc07c8bf112da92ee53f2122f74697b227fc0ce875014912c5c8beecc4fb48a61cde165a313282ac44d87b2ae5bfe203ba81e1d832450721a8d46a3fb57bc5c1" } }, { "event_id": "evt-770a8f2fe1e5123307039b26", "kind": "unclassified_tcp", "frame_number": 78106, "timestamp_epoch": "1634917830.222064000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a8a7061512589d79cdce159c", "kind": "unclassified_tcp", "frame_number": 78111, "timestamp_epoch": "1634917830.310118000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-db1b33a7b7e56e52820fe547", "kind": "unclassified_tcp", "frame_number": 78114, "timestamp_epoch": "1634917830.442142000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-955e3664fade6c644125d17d", "kind": "unclassified_tcp", "frame_number": 78117, "timestamp_epoch": "1634917830.583028000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0a941a933d2a714f85a94c52", "kind": "unclassified_tcp", "frame_number": 78119, "timestamp_epoch": "1634917830.609189000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069603f0000001703030030445576cd39fdd70bcf0f84061e52af45c25a2bb5ebc2795191f1eb1c4bdc33e6e2535b5f8f0956bb82387758e967c4a3" } }, { "event_id": "evt-b45aa5066371e6c875e7b65c", "kind": "unclassified_tcp", "frame_number": 78125, "timestamp_epoch": "1634917830.745028000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-caa11bcb9effde7866b636af", "kind": "unclassified_tcp", "frame_number": 78129, "timestamp_epoch": "1634917830.769147000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-65803bd4de4f89cf0843d4a7", "kind": "unclassified_tcp", "frame_number": 78134, "timestamp_epoch": "1634917830.819260000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407030069606f000000170303006074651a3e47ac96731d7ca36bd10f51c899a2e58d55b4798be510ef1620303e2076501c14291a19d825bf2783da27ae50cbcc8d7e2aee0282be3962c3f6ba20363c3684e7cd860e6340bde58b579086803f54c2f081f2c3f48e6b501ec134933b" } }, { "event_id": "evt-91fc55522ab9b365ea8bbacd", "kind": "unclassified_tcp", "frame_number": 78138, "timestamp_epoch": "1634917830.819764000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507030069600a000000" } }, { "event_id": "evt-3fb2c60ddcb842093cc0e64f", "kind": "unclassified_tcp", "frame_number": 78141, "timestamp_epoch": "1634917830.852131000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9f39007d05d0bbd0dc09c2c0", "kind": "unclassified_tcp", "frame_number": 78145, "timestamp_epoch": "1634917830.879358000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c14f010000d39f37b96d9919211dd47edcaedbb71a1bf0933cf321daa232dde2b05322d4040101001564cb4130724b091183ff4d9691d987a3cdedd97e939052bdace748e5e79b8b6cadfe8b8333613731790e3d17c7a215e9de7eed3324736f73c15205d354fd28b10b88610e805a4e1f4c7c29863c757fa43e7c8f23b48f9be73690ceb9ae15046ae0985258a1a07ea7fcc15c2f12b252e9f8ebbad8f222eb483e8ca1eba4de0088c222560a8f18e10c6ab4e166eb322e7b7d41728ae19853575dea0d61d41b6fb3cb8841b46af51e1ea189b140c837f170b4d0f82d038187d1bc6eba7728601dae9e5d263ce2bed05683c956d72e7ee3ba8ea3342bbbc6fac00f59fcb6557a58df5b5baa3dcd9c608e65a197e72bd5b480b0bda17ac678cf9c44e1e0240f0f670d00001a03010240001204010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-56a4ba506adb045bb9163aa9", "kind": "unclassified_tcp", "frame_number": 78147, "timestamp_epoch": "1634917831.386594000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c1b400000016030300070b0000030000001603030066100000626104f2641889f5a0e7eb9cafa3dbaf5ff0396d51f6ed31594e442574bfe872838874fe2930efcb94c82c66ab417f8c09742d5be9a86f672d68496d19fe304f9fd9f0bd1d5a6e137e4a94da30d7ccb4268ea67b0ae9c475437993a1f7fca01e21868414030300010116030300280000000000000000dcbd0d69d96ae78d54ed250b2130633e149457a9a473062bc6b5fd95ec1b5f11" } }, { "event_id": "evt-93edf23f4c8c6d260168c974", "kind": "unclassified_tcp", "frame_number": 78152, "timestamp_epoch": "1634917831.471085000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c13d000000140303000101160303002800000000000000004bb0236dd1c15b3c2b7a7c480ff5b0ac59bd6bcb52a893baa1ef5a6bd54d3d06" } }, { "event_id": "evt-8fc9e9b61c75a4aa86c67005", "kind": "unclassified_tcp", "frame_number": 78157, "timestamp_epoch": "1634917831.847313000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c13700000017030300280000000000000001b3c2f867ff7e6fef17b748adeae561c0b256ef02afb4a8545d3a19ecabf5438b" } }, { "event_id": "evt-a7bcd2fdbf5a04c218e3c097", "kind": "unclassified_tcp", "frame_number": 78162, "timestamp_epoch": "1634917831.897304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6dd228acc3954311f5612121", "kind": "unclassified_tcp", "frame_number": 78165, "timestamp_epoch": "1634917833.169261000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c13300000017030300240000000000000002885ed84be99f971117c4cca4511d0d949d3e69d88d35553879c6ea68" } }, { "event_id": "evt-c495c48533d6e757b2bc36c8", "kind": "unclassified_tcp", "frame_number": 78170, "timestamp_epoch": "1634917833.242074000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c139000000170303002a0000000000000002fc36ded8558b40a4bf1a6ede75ee3ea85c6780d6320cf816f18171ee1c066cb06d8f" } }, { "event_id": "evt-ba7c619be4065bff755b6183", "kind": "unclassified_tcp", "frame_number": 78177, "timestamp_epoch": "1634917833.681143000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c14100000017030300320000000000000003cc0c0fb5372446d32fb82c2f79d363df4eff458d7047217b6823b37d0fd8b92695ae3f6829f9825b82cd" } }, { "event_id": "evt-cb93b645b0df8dec9a215833", "kind": "unclassified_tcp", "frame_number": 78182, "timestamp_epoch": "1634917833.740648000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c139000000170303002a0000000000000003b259e06b50f7fb10ddbfa5894a4bda2b6a2844de3ee865598d8064b0330a1848d709" } }, { "event_id": "evt-fdeecb51f2f8ee5b3ed8fa4e", "kind": "unclassified_tcp", "frame_number": 78185, "timestamp_epoch": "1634917834.193105000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c135000000170303002600000000000000040eae4678d6f0b50c50c49b69d348e52cb77dd1399f4b42428ee91e5ab7cc" } }, { "event_id": "evt-2607c86d8b8f1e8baef99b18", "kind": "unclassified_tcp", "frame_number": 78191, "timestamp_epoch": "1634917835.505803000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7bd781b092b7adaca0f617ae", "kind": "unclassified_tcp", "frame_number": 78194, "timestamp_epoch": "1634917839.621203000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c17a000000170303006b0000000000000004881d97b9c4dfbb94aae306ba40ec65baaa7cb1318d6c93b84eb0a216493165f7916f32a101b28ddc5059a42205075b4411acd0f66a97e7b745ff20704014c0a4087d16d71b2baef09746beeee4dde98d9a75f0e1fe6b02d22b60adc6ea9dcefdad97db" } }, { "event_id": "evt-7948c380f39932a621d5b01f", "kind": "unclassified_tcp", "frame_number": 78197, "timestamp_epoch": "1634917839.882526000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c12a000000170303001b0000000000000005a06f8f9e8daa157730158ecc9e7aabbf285839" } }, { "event_id": "evt-70a4001982f71b725f458a71", "kind": "unclassified_tcp", "frame_number": 78201, "timestamp_epoch": "1634917840.537932000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6275baa02a5536b35209dc1e", "kind": "unclassified_tcp", "frame_number": 78204, "timestamp_epoch": "1634917845.048271000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c17700000017030300680000000000000005b9becb409cb6aca553393099f60e08b207549430c772626fa89efdc20138ea7065a43dd05e8422ca40b5c442a69f67a88b86297b4b08815b2a6615b84c8b0e23ce5017ff06ccaa4d36c64cb05e6510c8edf16ea789c276342c8bcf601bba37b1" } }, { "event_id": "evt-2f9acb010035c0bc44808e63", "kind": "unclassified_tcp", "frame_number": 78207, "timestamp_epoch": "1634917845.312726000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c12d000000170303001e000000000000000644c492fb122c9df0f70235b059c8fa87c6e3a2fe2b6a" } }, { "event_id": "evt-7b1e992cdd5974f5acc47de1", "kind": "unclassified_tcp", "frame_number": 78211, "timestamp_epoch": "1634917845.356135000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e1c1570000001703030048000000000000000664abba5aede756933bf52a692f7f1f933152405240375c30de2ec8c8265984bfcd97c92d7e2194a5f7574545c5cb1c8501f8a5684d2e1f5f4aceedd468e6db61" } }, { "event_id": "evt-16dbeb42b167a1d01211ca2c", "kind": "unclassified_tcp", "frame_number": 78217, "timestamp_epoch": "1634917845.363520000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100e1c10a000000" } }, { "event_id": "evt-56dfb682664ebd03d0e7e0ce", "kind": "unclassified_tcp", "frame_number": 78219, "timestamp_epoch": "1634917846.537210000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6d994382cdd678692d754d31", "kind": "unclassified_tcp", "frame_number": 78221, "timestamp_epoch": "1634917851.538482000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f79e9cd1345dce5542b5cc9a", "kind": "unclassified_tcp", "frame_number": 78228, "timestamp_epoch": "1634917856.506534000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ed68aad5f19f8ae222198888", "kind": "unclassified_tcp", "frame_number": 78234, "timestamp_epoch": "1634917857.538264000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-766e569eff47fff064d2d834", "kind": "unclassified_tcp", "frame_number": 78266, "timestamp_epoch": "1634917862.538518000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d676e10056857864bba87f57", "kind": "unclassified_tcp", "frame_number": 78270, "timestamp_epoch": "1634917867.538895000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ebc99988441a2d9d4bc056b6", "kind": "unclassified_tcp", "frame_number": 78272, "timestamp_epoch": "1634917873.538722000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2150b9cfc1b505a45bde4e9e", "kind": "unclassified_tcp", "frame_number": 78287, "timestamp_epoch": "1634917878.539297000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e9832c1f38a7824b45968348", "kind": "unclassified_tcp", "frame_number": 78292, "timestamp_epoch": "1634917884.539045000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9c06676d8044d4503c373217", "kind": "unclassified_tcp", "frame_number": 78296, "timestamp_epoch": "1634917886.788914000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7f4d1dce54383b4f10d66a33", "kind": "unclassified_tcp", "frame_number": 78301, "timestamp_epoch": "1634917889.553237000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-edda54ac27864de6d2ab7c37", "kind": "unclassified_tcp", "frame_number": 78305, "timestamp_epoch": "1634917894.615259000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a9939b4959fab0706373af1e", "kind": "unclassified_tcp", "frame_number": 78307, "timestamp_epoch": "1634917899.678070000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-222011017ab7876f993e0114", "kind": "unclassified_tcp", "frame_number": 78309, "timestamp_epoch": "1634917904.757649000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b4fd9575f9bbcc5d6e41952a", "kind": "unclassified_tcp", "frame_number": 78311, "timestamp_epoch": "1634917909.772329000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-480112e70acabb86f98e3aa2", "kind": "unclassified_tcp", "frame_number": 78316, "timestamp_epoch": "1634917914.789856000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ef4b7549469ed903dbccd4ca", "kind": "unclassified_tcp", "frame_number": 78318, "timestamp_epoch": "1634917916.084363000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-aea2e5e948372378626c5374", "kind": "unclassified_tcp", "frame_number": 78325, "timestamp_epoch": "1634917916.820174000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0e9ae2f769f180a6e44b6c39", "kind": "unclassified_tcp", "frame_number": 78327, "timestamp_epoch": "1634917920.789213000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-64a7192eed058df73411ea2f", "kind": "unclassified_tcp", "frame_number": 78329, "timestamp_epoch": "1634917925.789541000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7e1d3f42ba35a17fc24a8b76", "kind": "unclassified_tcp", "frame_number": 78331, "timestamp_epoch": "1634917927.506396000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100dbdd0c000000197b04070100dbdd0e00000005020002" } }, { "event_id": "evt-e12d8f358e3f59da02be0bfb", "kind": "unclassified_tcp", "frame_number": 78332, "timestamp_epoch": "1634917927.507279000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100dbdd0c0000000502" } }, { "event_id": "evt-7b30e11055049fe08cb29d1c", "kind": "unclassified_tcp", "frame_number": 78334, "timestamp_epoch": "1634917927.779073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5ae3d3fcf7aaeac4928d5638", "kind": "unclassified_tcp", "frame_number": 78335, "timestamp_epoch": "1634917927.779811000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100dbdd0c0000000100" } }, { "event_id": "evt-2743b291087060132801d634", "kind": "unclassified_tcp", "frame_number": 78337, "timestamp_epoch": "1634917928.061964000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-5c26cd33386ca89da8aa73e8", "kind": "unclassified_tcp", "frame_number": 78344, "timestamp_epoch": "1634917928.142967000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd14000000050000010a0a169cc403" } }, { "event_id": "evt-84ef56aaccc185fbf245853b", "kind": "unclassified_tcp", "frame_number": 78347, "timestamp_epoch": "1634917928.194283000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd7900000032323020534e37505231384341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35323a3037202b303030300d0a" } }, { "event_id": "evt-e9bbd88d8150f578b156502a", "kind": "unclassified_tcp", "frame_number": 78350, "timestamp_epoch": "1634917928.600784000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-7dc9221012d321a640797e44", "kind": "unclassified_tcp", "frame_number": 78355, "timestamp_epoch": "1634917928.660348000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbddd80000003235302d534e37505231384341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-54382f7aaeec3994c0e1d30c", "kind": "unclassified_tcp", "frame_number": 78358, "timestamp_epoch": "1634917928.976125000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd140000005354415254544c530d0a" } }, { "event_id": "evt-d433cf85be16674f201c4008", "kind": "unclassified_tcp", "frame_number": 78362, "timestamp_epoch": "1634917929.020012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-b97f6e396e26818677dd7a37", "kind": "unclassified_tcp", "frame_number": 78365, "timestamp_epoch": "1634917929.359044000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd16010000160301010701000103030362b56f8183a0866bcb9d4e426e90bae0bb11ab3d1256d8671ead0f94e7d060aa2006af4ba4d88aa261e25d4364506c1bb50e1b76751d0be0d0c8b3c36b9424ae420026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e6f75746c6f6f6b2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d002078c3e2128fe260d95ff0c8577b6736e19a5c54141464dd291ae333f0e2cadf6e" } }, { "event_id": "evt-3f2c7e07f446e6cbcb20308d", "kind": "unclassified_tcp", "frame_number": 78369, "timestamp_epoch": "1634917929.408998000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ba2431d8628f7071e73a2885", "kind": "unclassified_tcp", "frame_number": 78373, "timestamp_epoch": "1634917929.499853000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd3a040000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c" } }, { "event_id": "evt-b1cbb11d103a6f67ef1ecc4b", "kind": "unclassified_tcp", "frame_number": 78378, "timestamp_epoch": "1634917929.507947000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e074fd369e306a4206d31980", "kind": "unclassified_tcp", "frame_number": 78383, "timestamp_epoch": "1634917929.551685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5bdcdc445f87570de4cb33d9", "kind": "unclassified_tcp", "frame_number": 78385, "timestamp_epoch": "1634917929.888194000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbddb400000016030300070b0000030000001603030066100000626104fb1bfc369b34e808fa3716ab8f8da7fdfa9538b6b1d795754583729bf33395a086b13e31324a39f26d8c7b5dde733d1db5d4f5e038dbc19f6c376f9e4910eb6bdd1288588384abe246fe0e19bb238704ba6b1a58a8c2921322b5e2fc74ee5a1514030300010116030300280000000000000000d83cb3e15454c83419df2bf5f8d7fde1f5e6708ed958ba864e9357fe2ea7ac20" } }, { "event_id": "evt-17f02b9b74de61abcc0f8ddf", "kind": "unclassified_tcp", "frame_number": 78390, "timestamp_epoch": "1634917929.953608000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd3d00000014030300010116030300280000000000000000edcc5cb12096193958a36bd94404ddfedee55399baacfa4b2940b64b3e3687c5" } }, { "event_id": "evt-f26b915ddad33412c2af9ee6", "kind": "unclassified_tcp", "frame_number": 78393, "timestamp_epoch": "1634917930.202751000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd37000000170303002800000000000000012a1275ca3750790b9b1a26881fe02748d8ba755df712d431c936b9b6bea2babf" } }, { "event_id": "evt-f9e55458a258a17bae2adb2c", "kind": "unclassified_tcp", "frame_number": 78398, "timestamp_epoch": "1634917930.259575000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c3c48aced77ee06331c28fb0", "kind": "unclassified_tcp", "frame_number": 78401, "timestamp_epoch": "1634917930.821172000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dd5455901b545b12f286afd8", "kind": "unclassified_tcp", "frame_number": 78407, "timestamp_epoch": "1634917931.474553000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd33000000170303002400000000000000024dd9937ca892fc93a8a4b919fc58f635d64215ca2d9fc8296eb89d06" } }, { "event_id": "evt-ce581349cca359a410750ef7", "kind": "unclassified_tcp", "frame_number": 78412, "timestamp_epoch": "1634917931.535992000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd39000000170303002a000000000000000245fe5e5ea1c3fee241cbc7c2bd1c9aaf96cf515472f99680caf5e2551b42cf6b94aa" } }, { "event_id": "evt-24a58baaff4d2295cf8562fd", "kind": "unclassified_tcp", "frame_number": 78415, "timestamp_epoch": "1634917931.785018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd4d000000170303003e00000000000000039d3dd50c1e08b1f1e7de4d9c49cd9fd4500b515f6996e22409885a6a9a195091b6f60f0361b98f97590fde0646b868ca0fc0a96258df" } }, { "event_id": "evt-da9a3edf855f3d2d9720669c", "kind": "unclassified_tcp", "frame_number": 78420, "timestamp_epoch": "1634917931.835399000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd39000000170303002a0000000000000003a3ca92646f3809fda9f7d1d537557d3f8172fcc2b68a999544350a343364a316b3b3" } }, { "event_id": "evt-ea9df4fe030a89d714f5eda2", "kind": "unclassified_tcp", "frame_number": 78423, "timestamp_epoch": "1634917932.181608000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd3d000000170303002e00000000000000047cf37c150c508394ce2375c9abb303f0a4fd7a1428e35c0b14d0fb75c8bb6a9bf683803a8af7" } }, { "event_id": "evt-50981015d35d0c0690dafe40", "kind": "unclassified_tcp", "frame_number": 78427, "timestamp_epoch": "1634917935.882179000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0a3ba5d083d47a9bc1dcfdd7", "kind": "unclassified_tcp", "frame_number": 78432, "timestamp_epoch": "1634917938.131680000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdda0000000170303009100000000000000049d33410df240cf1278554a86562ec08d0cf34114e16161e1ef0da7c9821fbb28df813cba8a4277b0a82bc2ad923392752bdcbf09ca570c9940c0ea6f35cfa4dd507ef7c7154740d4f4b3223d5e19774e683139900340c2cc176e438831d82b01c403e3852f637b1f3d236d59f1af36de6b0c2306647842fc7fb3a728f2b9c5f90397d9e111a2972bfe" } }, { "event_id": "evt-be8721a1d65fa3842cc3e004", "kind": "unclassified_tcp", "frame_number": 78435, "timestamp_epoch": "1634917938.421243000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd2a000000170303001b000000000000000545e028ede5e2aa1731307f88a0c7d1afd9b094" } }, { "event_id": "evt-42747e7ce39100c7734bcfa1", "kind": "unclassified_tcp", "frame_number": 78439, "timestamp_epoch": "1634917940.900013000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-879ac673638b595208efbd47", "kind": "unclassified_tcp", "frame_number": 78442, "timestamp_epoch": "1634917943.659761000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd7500000017030300660000000000000005cc26bafd69df32ef71894a227ca3848225c77a470efd3fbd6f662dbfecf72e6f97497bacdadb2da935f7c69cab145bc46ec9bf60d552ae942439537a6b0eb620b378f4a430d7a111525f9c5ea61baeb1fd5b0b8668ca91710e7365036fd4" } }, { "event_id": "evt-1488751bb92fae3cd9a2df0f", "kind": "unclassified_tcp", "frame_number": 78445, "timestamp_epoch": "1634917943.964748000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd2d000000170303001e0000000000000006ac4d2c6ca868899ab012276140e5f74fcbd5dd5b70f3" } }, { "event_id": "evt-5918d34af777df378b2de153", "kind": "unclassified_tcp", "frame_number": 78452, "timestamp_epoch": "1634917944.012050000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd5700000017030300480000000000000006e98c1d0b91e3d779d50ea25924f20e1d149f812a23e72e55343c543a1675c7b23fc5ac7e77fe56cb8af3058b6327c9e984e4ec7169dd3741abb4b92ac1d72f9d" } }, { "event_id": "evt-0a1a4456bcd1d63b09852fb3", "kind": "unclassified_tcp", "frame_number": 78456, "timestamp_epoch": "1634917944.012669000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100dbdd0a000000" } }, { "event_id": "evt-9c25037df791561361eae776", "kind": "unclassified_tcp", "frame_number": 78458, "timestamp_epoch": "1634917944.272947000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100dbdd29000000150303001a000000000000000709c4a1e9d52ac860b81f0c34847f7e0cc3d8" } }, { "event_id": "evt-94f8ec0d588623ec66b7aeab", "kind": "unclassified_tcp", "frame_number": 78460, "timestamp_epoch": "1634917944.578884000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100dbdd0a000000" } }, { "event_id": "evt-7117fbb562f2d2692c2d6281", "kind": "unclassified_tcp", "frame_number": 78467, "timestamp_epoch": "1634917946.398814000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-ba19fd95e30ede15235f15ae", "kind": "unclassified_tcp", "frame_number": 78469, "timestamp_epoch": "1634917946.571573000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-df07d65e661a904419b67b5f", "kind": "unclassified_tcp", "frame_number": 78475, "timestamp_epoch": "1634917946.900199000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a61c4dd0abddb50eadd54450", "kind": "unclassified_tcp", "frame_number": 78489, "timestamp_epoch": "1634917951.914374000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9099a7f853ec915fde00656b", "kind": "unclassified_tcp", "frame_number": 78491, "timestamp_epoch": "1634917954.207625000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010063290c000000197b" } }, { "event_id": "evt-017263c146d947a4dbc13704", "kind": "unclassified_tcp", "frame_number": 78493, "timestamp_epoch": "1634917954.391359000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063290e00000005020002" } }, { "event_id": "evt-85d7e1820e97640851f84170", "kind": "unclassified_tcp", "frame_number": 78494, "timestamp_epoch": "1634917954.391887000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010063290c0000000502" } }, { "event_id": "evt-a55d2bf394c6b363281d31f1", "kind": "unclassified_tcp", "frame_number": 78496, "timestamp_epoch": "1634917954.685172000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ae8f7313ab02159c0d0166ec", "kind": "unclassified_tcp", "frame_number": 78497, "timestamp_epoch": "1634917954.685755000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010063290c0000000100" } }, { "event_id": "evt-d0b1094aca8bf203876b2f09", "kind": "unclassified_tcp", "frame_number": 78499, "timestamp_epoch": "1634917954.937263000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-9aa11c998d8039fa2537c204", "kind": "unclassified_tcp", "frame_number": 78506, "timestamp_epoch": "1634917955.024125000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632914000000050000010a0a169cc404" } }, { "event_id": "evt-475d1c7e0706667d0571e2d1", "kind": "unclassified_tcp", "frame_number": 78509, "timestamp_epoch": "1634917955.076193000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063297900000032323020534e36505231364341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35323a3334202b303030300d0a" } }, { "event_id": "evt-a457c6643fd311740e95bf2e", "kind": "unclassified_tcp", "frame_number": 78512, "timestamp_epoch": "1634917955.512073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063291a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-65ed88ed03272102b23c7d4f", "kind": "unclassified_tcp", "frame_number": 78517, "timestamp_epoch": "1634917955.598873000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329d80000003235302d534e36505231364341303035352e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-829213cf48b24c135c257a54", "kind": "unclassified_tcp", "frame_number": 78520, "timestamp_epoch": "1634917955.861386000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329140000005354415254544c530d0a" } }, { "event_id": "evt-836d9b55f14d286bc92a6658", "kind": "unclassified_tcp", "frame_number": 78524, "timestamp_epoch": "1634917955.910038000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063292700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-6cefb2cdbdbe07adf5f111fc", "kind": "unclassified_tcp", "frame_number": 78527, "timestamp_epoch": "1634917956.184476000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7bfbc11fd63a2cbc1b1f959c", "kind": "unclassified_tcp", "frame_number": 78537, "timestamp_epoch": "1634917956.242577000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1a5d1c7adfbf6086a8a6f054", "kind": "unclassified_tcp", "frame_number": 78538, "timestamp_epoch": "1634917956.242615000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-55ed3ed911776d54924f3bd2", "kind": "unclassified_tcp", "frame_number": 78539, "timestamp_epoch": "1634917956.242623000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9bd0b53fd105ec1fb664ad82", "kind": "unclassified_tcp", "frame_number": 78543, "timestamp_epoch": "1634917956.242839000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac652d5e51c61983abfa6730", "kind": "unclassified_tcp", "frame_number": 78545, "timestamp_epoch": "1634917956.540233000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329b400000016030300070b0000030000001603030066100000626104f18415e2fa83a53696043581fc51d1f2fe2139a26f3927af14fd09ebd8b0280de8a9cc50be53848bfe45d68271aa782947c9e6c27d4be65d502c9f5dd1fc49c1c310e745b4cbea7b022faecdb33fdf25181f0a4993e28a4cf31c16aed259e23d14030300010116030300280000000000000000c012316a395cc9c11d48dfa0fab17e5faf6dc024c8115785e90e2778d941d580" } }, { "event_id": "evt-4b36f2e2c802f8ddded654c6", "kind": "unclassified_tcp", "frame_number": 78549, "timestamp_epoch": "1634917956.593180000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063293d000000140303000101160303002800000000000000005d2ee2a647e8c264ff16954f5879433228c71f188000bbc0e9b9527614cfafc3" } }, { "event_id": "evt-5b477f294535d1a5de6e632f", "kind": "unclassified_tcp", "frame_number": 78552, "timestamp_epoch": "1634917956.931395000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329370000001703030028000000000000000109fc52d3bd5851354c8c63982008938de59185ad68460b38b9a5704e56f6000d" } }, { "event_id": "evt-ae17d8952c666cbe749dc731", "kind": "unclassified_tcp", "frame_number": 78556, "timestamp_epoch": "1634917956.977821000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-debab6272c90890a9dbb18ae", "kind": "unclassified_tcp", "frame_number": 78559, "timestamp_epoch": "1634917956.978590000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-af83ab60fa32d53c009fa2d2", "kind": "unclassified_tcp", "frame_number": 78562, "timestamp_epoch": "1634917957.382247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063293300000017030300240000000000000002e0d2c3fcac768ebf37eb4f8d967c45db447e70ef891aba29019fbfa9" } }, { "event_id": "evt-1358f05e5c9b0252d7b16e38", "kind": "unclassified_tcp", "frame_number": 78567, "timestamp_epoch": "1634917957.439912000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632939000000170303002a000000000000000205c2e2b3452044601a8e2ed586ef548d51b4168cb79dc3ec29e15b3e33410bbcc6b8" } }, { "event_id": "evt-138c957abb586e596e8e4cce", "kind": "unclassified_tcp", "frame_number": 78570, "timestamp_epoch": "1634917957.894242000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063295500000017030300460000000000000003669dfbf9c804409b70cb87907f336c258e48cc2f77d2781215e9a6cdb0887dbe7f3eff45939d5595d43b38c98fc2632500073c132ba535b3a9f42fdb7a05" } }, { "event_id": "evt-2b58fad3c3d1e69617ac9fe7", "kind": "unclassified_tcp", "frame_number": 78574, "timestamp_epoch": "1634917957.942751000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632939000000170303002a00000000000000033de417f0d2da7ee241db986c0ba3b6443cee85f082fb3957139dbceaa20cab2b8b6d" } }, { "event_id": "evt-487075caec790dd3f8978701", "kind": "unclassified_tcp", "frame_number": 78577, "timestamp_epoch": "1634917958.278568000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063293100000017030300220000000000000004fddd1d5bb741be801f1a080f102919fd0a26a35a4dbccd35d8a3" } }, { "event_id": "evt-fcbfb4d2f98a1fc8406defd7", "kind": "unclassified_tcp", "frame_number": 78581, "timestamp_epoch": "1634917959.839898000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200ae420c000000197b" } }, { "event_id": "evt-2b4d7566974de103bec8d9ce", "kind": "unclassified_tcp", "frame_number": 78583, "timestamp_epoch": "1634917960.027292000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae420e00000005020002" } }, { "event_id": "evt-57366e8cb85362ae6532d768", "kind": "unclassified_tcp", "frame_number": 78584, "timestamp_epoch": "1634917960.027822000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ae420c0000000502" } }, { "event_id": "evt-fc9be206e200c5df769a75a1", "kind": "unclassified_tcp", "frame_number": 78586, "timestamp_epoch": "1634917960.348193000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae4220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-8d87606f6c6757c64fd97045", "kind": "unclassified_tcp", "frame_number": 78587, "timestamp_epoch": "1634917960.348735000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ae420c0000000100" } }, { "event_id": "evt-f58815ff377bd3b0c6559736", "kind": "unclassified_tcp", "frame_number": 78589, "timestamp_epoch": "1634917960.624391000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae421e000000050100030d6d61696c2e656f6c61732e66720019" } }, { "event_id": "evt-3ea9c85dd746a45bb4e55768", "kind": "unclassified_tcp", "frame_number": 78594, "timestamp_epoch": "1634917960.778123000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae4214000000050000010a0a169cc405" } }, { "event_id": "evt-78d088dcd46938512ae079cd", "kind": "unclassified_tcp", "frame_number": 78596, "timestamp_epoch": "1634917961.375939000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300ec000c000000197b" } }, { "event_id": "evt-2dda5a234cdfcb02ac8c2c1e", "kind": "unclassified_tcp", "frame_number": 78598, "timestamp_epoch": "1634917961.554504000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec000e00000005020002" } }, { "event_id": "evt-104a627037c9ddce5d5149af", "kind": "unclassified_tcp", "frame_number": 78599, "timestamp_epoch": "1634917961.554979000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300ec000c0000000502" } }, { "event_id": "evt-e7a8351b12b6dc2a9cb4b8cc", "kind": "unclassified_tcp", "frame_number": 78601, "timestamp_epoch": "1634917961.823189000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec0020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ce9ec4f9bc0741ed635e64bd", "kind": "unclassified_tcp", "frame_number": 78602, "timestamp_epoch": "1634917961.823783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300ec000c0000000100" } }, { "event_id": "evt-9dfaae75f9064d2a65bef45d", "kind": "unclassified_tcp", "frame_number": 78604, "timestamp_epoch": "1634917962.041304000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a5d9f09ddffcf6da13128553", "kind": "unclassified_tcp", "frame_number": 78606, "timestamp_epoch": "1634917962.120375000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec001e000000050100030d6d61696c2e656f6c61732e66720019" } }, { "event_id": "evt-051bfd60dfccbbeaf0454c50", "kind": "unclassified_tcp", "frame_number": 78611, "timestamp_epoch": "1634917962.261713000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec0014000000050000010a0a169cc406" } }, { "event_id": "evt-954e42a3c09de36216d8a43b", "kind": "unclassified_tcp", "frame_number": 78614, "timestamp_epoch": "1634917966.931500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42f000000032323020656d64762d6d6573672d66726f6e742d30322e656f6c61732d73657276696365732e636f6d2045534d54502053656e646d61696c20382e31342e332f382e31342e332f44656269616e2d392e343b204672692c203232204f637420323032312031373a35323a3435202b303230303b20284e6f205543452f55424529206c6f6767696e67206163636573732066726f6d3a203131322e7375622d3137332d36362d3134362e6265346d652e6e6574284f4b292d3131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a" } }, { "event_id": "evt-4416a35d7ac6ed8c8352b9e5", "kind": "unclassified_tcp", "frame_number": 78617, "timestamp_epoch": "1634917967.195353000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae421a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-14012ca48d39bc8c450629fd", "kind": "unclassified_tcp", "frame_number": 78622, "timestamp_epoch": "1634917967.357273000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ab8bc7cd4df3a5b529ce91bf", "kind": "unclassified_tcp", "frame_number": 78625, "timestamp_epoch": "1634917967.689553000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42140000005354415254544c530d0a" } }, { "event_id": "evt-045956348c943c493ed46851", "kind": "unclassified_tcp", "frame_number": 78630, "timestamp_epoch": "1634917967.851964000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae422800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-dbf04d37d82730ef18828250", "kind": "unclassified_tcp", "frame_number": 78634, "timestamp_epoch": "1634917967.958038000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006329a0000000170303009100000000000000044e254da3de57bc8d5d093127e586aec722525e45e3719cd2a3633ecd097d853ecc2b751baa1af54f9b3ce93347361e64ea428e8691e0cbf0e196bc4d58ee51a1f185f04652ff19a66649b79f0a7380c8f2799aa90596c4ea9a73502d0f3047bac4ec7b6ebe5d3860d82a95d5bf14ea52da6ef3194dc455844fa6db25dc32736be7255e9b4004017894" } }, { "event_id": "evt-adbd81d9eee7696fa23804dd", "kind": "unclassified_tcp", "frame_number": 78637, "timestamp_epoch": "1634917968.040642000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dcfb7f9138690a11e7ba2dad", "kind": "unclassified_tcp", "frame_number": 78639, "timestamp_epoch": "1634917968.126561000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1c57843d8a521afe8423005e", "kind": "unclassified_tcp", "frame_number": 78647, "timestamp_epoch": "1634917968.279751000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-02ad125ab89a539127e25767", "kind": "unclassified_tcp", "frame_number": 78648, "timestamp_epoch": "1634917968.279771000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fd71bde04b6ef2108f699c84", "kind": "unclassified_tcp", "frame_number": 78649, "timestamp_epoch": "1634917968.279783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c1b0286c29ded0fb9de9053d", "kind": "unclassified_tcp", "frame_number": 78653, "timestamp_epoch": "1634917968.340071000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063292a000000170303001b00000000000000051b737133f0ce81c7f8b50fa2152b519aa1ba58" } }, { "event_id": "evt-3ed3655a875bcdf401c9ebbf", "kind": "unclassified_tcp", "frame_number": 78658, "timestamp_epoch": "1634917968.409591000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec00f000000032323020656d64762d6d6573672d66726f6e742d30322e656f6c61732d73657276696365732e636f6d2045534d54502053656e646d61696c20382e31342e332f382e31342e332f44656269616e2d392e343b204672692c203232204f637420323032312031373a35323a3437202b303230303b20284e6f205543452f55424529206c6f6767696e67206163636573732066726f6d3a203131322e7375622d3137332d36362d3134362e6265346d652e6e6574284f4b292d3131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a" } }, { "event_id": "evt-6667aff00332cd55aee14c32", "kind": "unclassified_tcp", "frame_number": 78661, "timestamp_epoch": "1634917968.635574000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eedcbd20fa48df4c5d7358ab", "kind": "unclassified_tcp", "frame_number": 78666, "timestamp_epoch": "1634917968.801088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae424500000014030100010116030100305e64d9a1659a831752c5c8645685ddfd3d64fb766e4297e744418b83681e4c3c2924c37ef00ed97957b0c709339677c2" } }, { "event_id": "evt-bdba9a9e14aa753a5b26b522", "kind": "unclassified_tcp", "frame_number": 78668, "timestamp_epoch": "1634917968.813939000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec001a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-18a683f566852fb80ffa494c", "kind": "unclassified_tcp", "frame_number": 78674, "timestamp_epoch": "1634917968.966628000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-313259d0fe115b3f13ed0af7", "kind": "unclassified_tcp", "frame_number": 78677, "timestamp_epoch": "1634917969.082518000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42640000001703010020351218d4cffba178a4d2743adc7574683acce5b1504dad00a90a259e758617151703010030c25dd5b95c38aba784142befdaa04f53efccb542412a20ee85d8f451171d3ea3ee599d33d4facf6449d323fe5e5fd6f8" } }, { "event_id": "evt-32da04ef9f9459188209c50e", "kind": "unclassified_tcp", "frame_number": 78682, "timestamp_epoch": "1634917969.243782000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-aa78709b1ef5b1b5e494373f", "kind": "unclassified_tcp", "frame_number": 78685, "timestamp_epoch": "1634917969.307479000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec00140000005354415254544c530d0a" } }, { "event_id": "evt-ff979ab9dcc0951415a2d033", "kind": "unclassified_tcp", "frame_number": 78690, "timestamp_epoch": "1634917969.448687000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec002800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-619a6f7160b8e65108348d8a", "kind": "unclassified_tcp", "frame_number": 78693, "timestamp_epoch": "1634917969.700566000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a74c882a764195967c9aa25a", "kind": "unclassified_tcp", "frame_number": 78698, "timestamp_epoch": "1634917969.863405000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dae678450462b71e4face4f7", "kind": "unclassified_tcp", "frame_number": 78703, "timestamp_epoch": "1634917969.873216000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d898a522cf97cbf75d7bb7e9", "kind": "unclassified_tcp", "frame_number": 78704, "timestamp_epoch": "1634917969.873238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dbcab2f541cdd60f9e57c942", "kind": "unclassified_tcp", "frame_number": 78707, "timestamp_epoch": "1634917970.101770000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42540000001703010020cdf8375f298fc9ef5267bc3b656b6dc0ceb7aec1313f0d77646cf7f66b1417651703010020008634f99971e2efbb535ab77960df8439c389dce3afe034df7e6f48265f1ca0" } }, { "event_id": "evt-e1a2e721737441c1a31324ee", "kind": "unclassified_tcp", "frame_number": 78712, "timestamp_epoch": "1634917970.268270000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae423f0000001703010030807662b4db77197f1046664c8c0e963c2fad3f3c05d592c275dab598c7f0b0b4f4edd41c931e4cf47c0d3fc5f5b6e062" } }, { "event_id": "evt-3965d224a527e8a7c9f5dd04", "kind": "unclassified_tcp", "frame_number": 78715, "timestamp_epoch": "1634917970.369923000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-41913d5014ce3216d143e2c1", "kind": "unclassified_tcp", "frame_number": 78720, "timestamp_epoch": "1634917970.532402000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec00450000001403010001011603010030693832033386be06c81c5adf17f892ff1a9af609b78454c5d2d34e1eab75acf6f9e00dd873f772111f4a184b56d71533" } }, { "event_id": "evt-37463826cc0c45ba8a3ca54e", "kind": "unclassified_tcp", "frame_number": 78723, "timestamp_epoch": "1634917970.637157000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae4264000000170301002003865f6f381b36f6e2a54a5bf06f5164fc601d5cce27c57043254c5c352906521703010030b5bce310fb2e37465a6067fa0b756f77195f5093579d11df8e9a558c3d055e5f2148579e299337d3830cfb9e38e898c0" } }, { "event_id": "evt-1769c5152d6aec10fa2866d9", "kind": "unclassified_tcp", "frame_number": 78728, "timestamp_epoch": "1634917970.787304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae423f0000001703010030c25c47e99e0d0bb7b3cd1a592e7191c6fbaebadc8eeda74bdf91f55b247452f713086e1a2260cdf80faec1818979732f" } }, { "event_id": "evt-5ec0fb93108ed585b168298a", "kind": "unclassified_tcp", "frame_number": 78730, "timestamp_epoch": "1634917970.816891000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec006400000017030100204f5597c6d2ecbe03d3ea1fa15632841a194a9f58a46c9110abdf9d2c2c4ecdf31703010030c2451b99c1fca9dc622cb32fe451976d6197fc44b60f03c68ce1f108ce84af254b70acfad2728f7a66739d368cdf393a" } }, { "event_id": "evt-2b6cb8a658e6194ed267a1a8", "kind": "unclassified_tcp", "frame_number": 78736, "timestamp_epoch": "1634917970.990346000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e13fc03577ed86195bbf6220", "kind": "unclassified_tcp", "frame_number": 78739, "timestamp_epoch": "1634917971.146653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae426400000017030100207018a33f79e5abc205f1df3c7f134308ee275fb1339dd2fadde7f3d3933a5e331703010030ed39f15e1b844e05c4f0ec52d116fc14e2dea15d1d7e2b962be1cb59552858e74fa7a838d8b7d55ee7f2a0a8a9c3e7e4" } }, { "event_id": "evt-401281d6291d07468cd8561c", "kind": "unclassified_tcp", "frame_number": 78744, "timestamp_epoch": "1634917971.324738000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae424f00000017030100409bd4f9ca304263a6072cdfd2883c0641f60f994d713ce70d41df5ea62e8ac618eca82bac2ff0035760ad43293818d8ff1bcd1b10345900b082b2b2183fe43262" } }, { "event_id": "evt-5a82758a473b6ccbee68ae90", "kind": "unclassified_tcp", "frame_number": 78747, "timestamp_epoch": "1634917971.679696000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42540000001703010020de0fbc35c98da705349f4c7683b14567b98365a80005f6a7357e9dd1f84678661703010020f86bbe4510d472cd9faa035c0c243b3db7a49f222516a97edbe69a8a36cc3c8804070300ec00540000001703010020c4a88a4282fe20a6a2579819917717aa1ed06770f7584996afaff1666ab0c9c7170301002030385c5c3557a7f27c7ff2a710cb69e954ecf27b5a640b3634acb54da4bb10ce" } }, { "event_id": "evt-51ee01397fdce63f88ba0f1e", "kind": "unclassified_tcp", "frame_number": 78754, "timestamp_epoch": "1634917971.829991000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae424f0000001703010040c4ef2f2469388bcffffd63774c2f4459c224f0c2da765ec214dfe2c5341960ca12f588e3d1d65a484ed716ecf284c217c8ec69c921865cb05ebf019595386699" } }, { "event_id": "evt-63c61e7d270a877b5bfc878b", "kind": "unclassified_tcp", "frame_number": 78757, "timestamp_epoch": "1634917971.833014000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec003f0000001703010030bd4c830cdf4ef001b8cf28296e2e04645ca187ff543c7c8308a2ca3c39470e0c32e6db92a7771924af81a6f92598dd3a" } }, { "event_id": "evt-ac1a09cf2737949feb593ac7", "kind": "unclassified_tcp", "frame_number": 78762, "timestamp_epoch": "1634917972.166632000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae425400000017030100207e152c2bdae021118954be60879ca9ee7b52394d2e1f762ab647f61b74ef73d217030100206b70db862b330d91427402342258b8826958c12b35fafd2130cdfef04a828a05" } }, { "event_id": "evt-e8f5d967b4d8bd2f718e3724", "kind": "unclassified_tcp", "frame_number": 78768, "timestamp_epoch": "1634917972.309436000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ae42940000001703010060e161e6fb6526602d69ccc581f569fe221745c35e8b715b9a735191f2bf82a157813f8b993c1fd7d38f6e5080c9992c97a3d2325b762c28fca6d76c5ba475a14de7defd3e63523878ceb5524572181f910c38274c7803a1b32031f21f093971e11503010020f799b809e49ce4ad36f32a68120f9174ff6ac4cc5536dad42e1c13a9df96ab1d" } }, { "event_id": "evt-11809ce138bcaa3681624752", "kind": "unclassified_tcp", "frame_number": 78772, "timestamp_epoch": "1634917972.310121000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200ae420a000000" } }, { "event_id": "evt-b99c2d14ae2884e41ad8461a", "kind": "unclassified_tcp", "frame_number": 78774, "timestamp_epoch": "1634917972.344218000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec006400000017030100201ea648ca7425abce095dff96ff1c56eb0a65d66fd5c9bdb0a8aa1aed9989ebcf1703010030889ee6d0c174b369b351b1d8309d4663e6391c65c242c0c2fdd028d6f1121891ee32ba0257b0a4559205ce39f5edbf2e" } }, { "event_id": "evt-b513d933894f8a3d08491fc7", "kind": "unclassified_tcp", "frame_number": 78779, "timestamp_epoch": "1634917972.494633000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec003f0000001703010030d4d8c0e8103eebdd04407443993cef6b4a797ee4ad42d1fa1f24d3b57125516488dcfff1f61bf424d8307d4fa38a9038" } }, { "event_id": "evt-87e78e8729f95fbeff67189c", "kind": "unclassified_tcp", "frame_number": 78784, "timestamp_epoch": "1634917972.868425000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec006400000017030100209292a82b4fcdb0fc9bc1db961fb71a03a7fc7e816ebf14a559e505d355375ba317030100303fb9b62926b412aaa1df2e46e0769c3ac295a2526fb907e4d7b91b9d66c1699d4f0ad657001852f23bf28bd14a8ba688" } }, { "event_id": "evt-a3819bcdfb1ff24efcf7b807", "kind": "unclassified_tcp", "frame_number": 78789, "timestamp_epoch": "1634917973.027183000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec004f000000170301004053f9e48cfee24f100212618dd28a359a4bbf2f98ef3f877632d0623f94721fbef34ea92f310704d666c14d6e96c43b99b8a84f6fb7a327d25e1bcc342b8bd003" } }, { "event_id": "evt-4c60b71ee198034478545a41", "kind": "unclassified_tcp", "frame_number": 78791, "timestamp_epoch": "1634917973.041153000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6024c951a81581afe8ad082c", "kind": "unclassified_tcp", "frame_number": 78794, "timestamp_epoch": "1634917973.373058000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec00540000001703010020056878bad966349e1322e5caa1a2328d4e79405476cb60d06cf00d9b87c14edc17030100200e3e2ef059621fdf3b0b00c0cd9d9ac038540930e1776783662eeb0392a5723b" } }, { "event_id": "evt-bf42be644549d3ead1edc2d3", "kind": "unclassified_tcp", "frame_number": 78798, "timestamp_epoch": "1634917973.392429000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632975000000170303006600000000000000056d32db63008dbe47a1504919eb854f530e3ba388529decc4103becfabd37180db0e6230cb8ff4d2c40f097b747c91c83a538ee27a05e44fcf8efe4130359872b109d22c750afccb75840bebdf4ca8da7c68da3169f5b8f44c4b07eff5506" } }, { "event_id": "evt-f39b9d2f4832004ea1300326", "kind": "unclassified_tcp", "frame_number": 78803, "timestamp_epoch": "1634917973.523870000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec004f0000001703010040b04347155a5cdf04e8ed05870a5eec1349123e46760dd881ef10b49a8dc57e1107a9b72d5ae50baa5bc1bd8ec08831a3c6ebe29ac5d188aaa34a476b34c3620d" } }, { "event_id": "evt-2e0ffbbb6e535c8d2c25bf1c", "kind": "unclassified_tcp", "frame_number": 78806, "timestamp_epoch": "1634917973.752204000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063292d000000170303001e00000000000000063756637e0e9217b26adc3daec4b01726da6005314581" } }, { "event_id": "evt-1fbee1344155ec4dae665031", "kind": "unclassified_tcp", "frame_number": 78811, "timestamp_epoch": "1634917973.803128000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010063295700000017030300480000000000000006dcd55aebcab316fbea23123146e3fc7f72b3ca9b28afe87f5cf7931df26a37af335ac71a4ab14508df7215722fc9df1340f959771cb3ea1bef7048f9b04346f2" } }, { "event_id": "evt-11232248ef0ef7eb404494c1", "kind": "unclassified_tcp", "frame_number": 78815, "timestamp_epoch": "1634917973.803618000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010063290a000000" } }, { "event_id": "evt-cd40e2b705684a45c711e9ab", "kind": "unclassified_tcp", "frame_number": 78817, "timestamp_epoch": "1634917973.939621000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec00540000001703010020b879e013a9c458caf131bf3f82a6c395568a61c1ca7d37c95022f1805cf61a8e1703010020dc349f0da3d96a46016158789710dfd422f3ac89fd4bddbf01c6fdfe441a6eed" } }, { "event_id": "evt-918ad0b5d8a3495efdaad000", "kind": "unclassified_tcp", "frame_number": 78823, "timestamp_epoch": "1634917974.088486000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300ec0094000000170301006097734958339e762dfdd02dff38c551177f8ab863f884238021b4df9fdf470d05532bfc4394089853c6d681ccf56ff52fff68ff35a832e518bacc67f1a94c53885b27cd5a2597f44ae7e2aada0abd3fe1c49df8a6e0d6f4396ff18be9d6cff5e51503010020270434576fa7e42eaa55ef6c1d920d75f3dc093c557841b27a2369848cf2a537" } }, { "event_id": "evt-a9ea6817dbd0edd7077d7664", "kind": "unclassified_tcp", "frame_number": 78827, "timestamp_epoch": "1634917974.089012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300ec000a000000" } }, { "event_id": "evt-2fe83d40e76900bc30e08975", "kind": "unclassified_tcp", "frame_number": 78829, "timestamp_epoch": "1634917974.122696000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100632929000000150303001a0000000000000007c4035b372137087ce642f63f732aacc31bb6" } }, { "event_id": "evt-389786f3ae985d525fa2c236", "kind": "unclassified_tcp", "frame_number": 78831, "timestamp_epoch": "1634917974.303324000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010063290a000000" } }, { "event_id": "evt-5323badb2b4e8e02a314ec50", "kind": "unclassified_tcp", "frame_number": 78833, "timestamp_epoch": "1634917974.894297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100f4860c000000197b" } }, { "event_id": "evt-289be1639ab6e9f6d22a7446", "kind": "unclassified_tcp", "frame_number": 78836, "timestamp_epoch": "1634917975.083614000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4860e00000005020002" } }, { "event_id": "evt-aea4426a4d37a3917b0c5454", "kind": "unclassified_tcp", "frame_number": 78837, "timestamp_epoch": "1634917975.084132000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f4860c0000000502" } }, { "event_id": "evt-a4f8c8583e23837012a15799", "kind": "unclassified_tcp", "frame_number": 78839, "timestamp_epoch": "1634917975.498237000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f48620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9a182b82f188f4db6fbb865a", "kind": "unclassified_tcp", "frame_number": 78840, "timestamp_epoch": "1634917975.498815000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100f4860c0000000100" } }, { "event_id": "evt-326c2b96582eecbafa224386", "kind": "unclassified_tcp", "frame_number": 78842, "timestamp_epoch": "1634917975.792858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4861e000000050100030d6d61696c2e656f6c61732e66720019" } }, { "event_id": "evt-659ccd39ae9c274b535cccbd", "kind": "unclassified_tcp", "frame_number": 78847, "timestamp_epoch": "1634917975.968175000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f48614000000050000010a0a169cc407" } }, { "event_id": "evt-4a8ed1a48bd088133adced46", "kind": "unclassified_tcp", "frame_number": 78849, "timestamp_epoch": "1634917976.414167000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-35d3268fcbe2d2f4d2e02221", "kind": "unclassified_tcp", "frame_number": 78851, "timestamp_epoch": "1634917976.814924000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-1c4edb009a4b858d3e270f94", "kind": "unclassified_tcp", "frame_number": 78853, "timestamp_epoch": "1634917976.820896000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-a7449a4c7265057f2b40709a", "kind": "unclassified_tcp", "frame_number": 78855, "timestamp_epoch": "1634917979.041265000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1775ff5db7901a1e2fe06aaa", "kind": "unclassified_tcp", "frame_number": 78862, "timestamp_epoch": "1634917982.164134000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486f000000032323020656d64762d6d6573672d66726f6e742d30322e656f6c61732d73657276696365732e636f6d2045534d54502053656e646d61696c20382e31342e332f382e31342e332f44656269616e2d392e343b204672692c203232204f637420323032312031373a35333a3031202b303230303b20284e6f205543452f55424529206c6f6767696e67206163636573732066726f6d3a203131322e7375622d3137332d36362d3134362e6265346d652e6e6574284f4b292d3131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a" } }, { "event_id": "evt-c51640a916ebf775ad06b387", "kind": "unclassified_tcp", "frame_number": 78865, "timestamp_epoch": "1634917982.551628000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4861a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e4621c2aa85c1e44684443f5", "kind": "unclassified_tcp", "frame_number": 78870, "timestamp_epoch": "1634917982.705643000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0da03c6a31997c8d76145bc1", "kind": "unclassified_tcp", "frame_number": 78873, "timestamp_epoch": "1634917983.074735000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486140000005354415254544c530d0a" } }, { "event_id": "evt-470d7c590d8939fb3e480aee", "kind": "unclassified_tcp", "frame_number": 78878, "timestamp_epoch": "1634917983.225852000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4862800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-34ef9fa6ed57271252bf8e7f", "kind": "unclassified_tcp", "frame_number": 78881, "timestamp_epoch": "1634917983.533647000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-02436822fa20ec281fa58886", "kind": "unclassified_tcp", "frame_number": 78888, "timestamp_epoch": "1634917983.690107000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-36ade5528da87cdc77ddef73", "kind": "unclassified_tcp", "frame_number": 78889, "timestamp_epoch": "1634917983.690128000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9788a882f872abb9443f7d06", "kind": "unclassified_tcp", "frame_number": 78893, "timestamp_epoch": "1634917983.690832000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f48643020000018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c050003820201004e134096c9c3e66e5bc0e3baf417e1ae091fc9bfcb0c2516f27353b3761ab7ab4806d6cd007c204543456c165a1b1361d749baa402a4ace8cece2dc92a74a3dcdeaeabd06836f891af3c01f777d50bcf97abeb87e715a8fa305a617120b1c043c4b98f6d8a31eb153624fb62d50b9c8fe966bde661519793b61d87bdb0b56cfea6112906613431303d20277351d0de8583d37739204696daa7c65a162785b2cf4e0f4e8c5cbebe3800f84bf9727bd4f27ad7a22985d004bad3422c5188522ed13d246747ec55cc1bf4ca34ea26c1deddc42189f6ba7b321e8e965e844538cf80aa37698b6017741548919c6df04ea377ca1b1c48faf9cf49e85f4f850ae28f901bab704c9aebb7a63fb4ac5da45fcfe6d88a9690f74f268160765d0f247791b32a319f165ab25d8c1c29aa489c8e6fd3784070db77ecdde3d15705702de64998880584620570567686394ed3226f1dfe6df10eb362c43ccbc085b9611ebae1158059940cae05bb8c7f56be1cd25abf97f26a4cb0c67076b0908dc10b36b911d8d6285cea4ffe24b7180a9b0cd0c17c5cfb69bdcca24dc690bca64df2b1bad69a675b960252d082f9c40a5c0d28e03fc8fa959589d5a4be496c40b23ea86bb8d525b2c4fef1d3d7e7d6dc43017630fb3b8b5df74a897c9a35befccaf05701f08d3fa087327b475a974b82d266c2c42dea3f24f4a7f9a8b9e36ad91861a03b8c1516030100040e000000" } }, { "event_id": "evt-6a5fa1cb9319dbc06e3d885d", "kind": "unclassified_tcp", "frame_number": 78896, "timestamp_epoch": "1634917983.935501000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f48650010000160301010610000102010025a152949f6689ac35715216a5855006215752bf6156beac58560df1224c631f3b5a69cdab77062570b163203c35184e80a572ace69883ce4b0bcbcbef129747e12943c15ed1725606f35f6a4f54a19ea9cd205b6671e21d81c096cb229562907b3993f77fab74d7491996da5577799e3b941e1b90831633a79f44efd2ce0180e368ee169a33d4ad9d690c01f8ab4e6d55ed0e7d7d91bb7af5e6be746af64cad71222f7671f7aae88a58d37ac483e91fa169719622eb7a1a9ccc7e6dfeb27ad9a434b82243b6bcc698d209a8e619b827525ab868911fc056e211438a15f24cd179cc7c2209d650b5efe3314ac773e532b9c474c61b4f062485cef01c7a768ff4140301000101160301003050c31173383832b8062792933ebb3c542679490f532570e026b67356c1b79b0ba0319dfdc761f9b27a326beb2f744872" } }, { "event_id": "evt-0af573859999a1f0c71d398e", "kind": "unclassified_tcp", "frame_number": 78900, "timestamp_epoch": "1634917984.041144000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-eb51bf69824d67c61a0a9b19", "kind": "unclassified_tcp", "frame_number": 78903, "timestamp_epoch": "1634917984.106374000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4864500000014030100010116030100303f24c9597e69b57858ef4b64565418c626d32d9cd255119cf956208a6aacb071016c00ef95e65c7bd96d7d1ba4a2b2ed" } }, { "event_id": "evt-36154bd0801201f65ca8edf6", "kind": "unclassified_tcp", "frame_number": 78906, "timestamp_epoch": "1634917984.361784000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4866400000017030100204c45e29d08a712a5cc6a4793fedbaf9f479ea4cac3a873a73046b1138358867917030100305a3eb4eb5c1380de98d53dc5100dbe67645cfe27d00a6f9ef638b3ea1b21879d6614c230e31ca06aff5ab19b99bac646" } }, { "event_id": "evt-42a01c64655331e98e90e87d", "kind": "unclassified_tcp", "frame_number": 78911, "timestamp_epoch": "1634917984.512408000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d944a7fc2c01fe465f2db9ce", "kind": "unclassified_tcp", "frame_number": 78914, "timestamp_epoch": "1634917985.338743000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486540000001703010020405af0d70fc6e97871fc08209872d9808a9fbeebd149b70dca17038d514346701703010020fa36c8580d049ca4fec95ccf4345ef7706727a606c3df0921cf0b52d87d72eb7" } }, { "event_id": "evt-dc94d9059cad0b9c077b3dc5", "kind": "unclassified_tcp", "frame_number": 78919, "timestamp_epoch": "1634917985.488111000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4863f0000001703010030213c41bbbefa28433fd7cdd475717e1e2eb77c14b7ba8164e2eec6ff6863de0164e5dfe8fb1d03ca7b701aa7272131e9" } }, { "event_id": "evt-3e7fcc82792ad3a6b5ea6133", "kind": "unclassified_tcp", "frame_number": 78922, "timestamp_epoch": "1634917985.731907000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486640000001703010020e14f18881201dd823d4f1025a6a5b8f0e0157e52d32bedf80b965552e7345e0617030100304ea7065c9f458982a86adf1375a3d98657399c26a869ad0c8d03dae5c2541aa1b0879a93a143f182b328ad746864639b" } }, { "event_id": "evt-2aba8b5ee4cfabb7a4a4f2dc", "kind": "unclassified_tcp", "frame_number": 78927, "timestamp_epoch": "1634917985.882267000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4863f00000017030100307ddb7749a573e1fc29b9a3a029b08f12f9655de37f25b5f877f01e724239c77cafcbd13204e60d8c94765558ea692670" } }, { "event_id": "evt-c078937a040a6b4607e7686e", "kind": "unclassified_tcp", "frame_number": 78930, "timestamp_epoch": "1634917986.259754000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486640000001703010020ddc7d78264c4f1916fad29155a257938694e8b107ed5edfc1d89fcea4225c1b617030100306e9d21fabb8a4278f3f507c5a5b987210799d6c5e4329ae31b104e14eb551104c9a5407f1046edcf27ddeedc127e23ed" } }, { "event_id": "evt-bcaf47fa2bf73b653c9e73f0", "kind": "unclassified_tcp", "frame_number": 78935, "timestamp_epoch": "1634917986.438450000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4864f0000001703010040cd6a5f260c3ce388e2f44c7059843a827410b79d7c4031b23389ea3cfbd56aab0660ce8cac1d4db99a33947e75d49a1a215b0f79cec36b65661ee38c5840fa1b" } }, { "event_id": "evt-1372f20a5bc3f698445964f6", "kind": "unclassified_tcp", "frame_number": 78938, "timestamp_epoch": "1634917987.004593000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486540000001703010020d82b026ecb25530808547a030d319394c2470ee9004c2f7cae5b4682722fe5781703010020c07ab9be731a520e89096b576cec78b7c404dc74e557eaefaab91f9fa03b194f" } }, { "event_id": "evt-50203048ea146ac5be912aed", "kind": "unclassified_tcp", "frame_number": 78943, "timestamp_epoch": "1634917987.170201000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4864f0000001703010040e29a38085e1b0d9e736330dd065fe06ff2be1b183827142cde8a6495e17bc24e1b8447d16266debf886e67ae409d044be851f24653e4578e959b1a76e270a2d6" } }, { "event_id": "evt-64858d6e893cbb51ac8b4762", "kind": "unclassified_tcp", "frame_number": 78946, "timestamp_epoch": "1634917987.401381000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f48654000000170301002072b233239b05b4799aebefed0f1843b8890c92a041a376397373847ccd0300a617030100204edeb6446dc3ddd9521418dae304100b0a464f3623e32b6c2188009d53e917c8" } }, { "event_id": "evt-efc4d903b87b5d87f22840ab", "kind": "unclassified_tcp", "frame_number": 78952, "timestamp_epoch": "1634917987.541583000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f486940000001703010060bf64193608c0aa5f9825c6c250c74b7e1d76cb9185d17cde9f601a5e4cb0b28b655e389a6be990cd1a1a62afa96a459a857a1ebd41218131cc36dff4efaa083c23b665383428fa1cea0baeaccbb4ce1893f35720f4153e5780a0eaeee28dd28215030100201e5ef382830a268172ef0f5904ac85f530d0c380305ba90efb37d46cb2d5b502" } }, { "event_id": "evt-7726cb63e981dcb425ca2450", "kind": "unclassified_tcp", "frame_number": 78956, "timestamp_epoch": "1634917987.542111000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100f4860a000000" } }, { "event_id": "evt-9630e99e08554a576e2b2ef7", "kind": "unclassified_tcp", "frame_number": 78958, "timestamp_epoch": "1634917987.787909000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100f4862f0000001503010020b1cccdf5e3034b34e5bf9fb8c2ccbcef054d3f5241d71d87ff55dd8d0425a546" } }, { "event_id": "evt-35dd7d7168dda6e4ad49d259", "kind": "unclassified_tcp", "frame_number": 78960, "timestamp_epoch": "1634917987.966975000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100f4860a000000" } }, { "event_id": "evt-fa542e717783552325af4001", "kind": "unclassified_tcp", "frame_number": 78962, "timestamp_epoch": "1634917990.041313000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a50ca7861813c012a7a56e74", "kind": "unclassified_tcp", "frame_number": 78964, "timestamp_epoch": "1634917996.041560000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f73c0b23e83cc7913a1bfa31", "kind": "unclassified_tcp", "frame_number": 78968, "timestamp_epoch": "1634918001.041830000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5cc0a619701709933e796766", "kind": "unclassified_tcp", "frame_number": 78973, "timestamp_epoch": "1634918006.815947000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9469ccd692ad5eee5fe36514", "kind": "unclassified_tcp", "frame_number": 78975, "timestamp_epoch": "1634918007.041486000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-45524334853455a255ea3a1c", "kind": "unclassified_tcp", "frame_number": 78983, "timestamp_epoch": "1634918013.041150000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c5caff65ca5d3b31e6151fe7", "kind": "unclassified_tcp", "frame_number": 78985, "timestamp_epoch": "1634918018.042767000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b4ecea17ecbcf335aea239ce", "kind": "unclassified_tcp", "frame_number": 78988, "timestamp_epoch": "1634918019.587522000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100b59d0c000000197b" } }, { "event_id": "evt-7f17dd11f429abf275d11db2", "kind": "unclassified_tcp", "frame_number": 78989, "timestamp_epoch": "1634918019.626987000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d0e00000005020002" } }, { "event_id": "evt-3825129f982fe77cef099795", "kind": "unclassified_tcp", "frame_number": 78991, "timestamp_epoch": "1634918019.627353000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b59d0c0000000502" } }, { "event_id": "evt-6c8949f0f8527b9ab2f2d0dd", "kind": "unclassified_tcp", "frame_number": 78993, "timestamp_epoch": "1634918019.964834000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-72effc5743d7235064419422", "kind": "unclassified_tcp", "frame_number": 78994, "timestamp_epoch": "1634918019.965222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b59d0c0000000100" } }, { "event_id": "evt-cbb9a5f0741f6c688f1acecd", "kind": "unclassified_tcp", "frame_number": 78996, "timestamp_epoch": "1634918020.327794000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-363f22927f99bac84fe55c47", "kind": "unclassified_tcp", "frame_number": 79003, "timestamp_epoch": "1634918020.418222000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d14000000050000010a0a169cc408" } }, { "event_id": "evt-fc20f76fffd4e9de0f6b4173", "kind": "unclassified_tcp", "frame_number": 79006, "timestamp_epoch": "1634918020.468492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d7900000032323020534e37505230344341303131352e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35333a3339202b303030300d0a" } }, { "event_id": "evt-fb2a0b1fe246744c9a8eb755", "kind": "unclassified_tcp", "frame_number": 79009, "timestamp_epoch": "1634918020.859146000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-86090781039f541b295c508c", "kind": "unclassified_tcp", "frame_number": 79014, "timestamp_epoch": "1634918020.919567000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59dd80000003235302d534e37505230344341303131352e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-9d86c2d1af9aff3ddba7eb13", "kind": "unclassified_tcp", "frame_number": 79017, "timestamp_epoch": "1634918021.301138000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d140000005354415254544c530d0a" } }, { "event_id": "evt-9ecb4faf4216e24715830799", "kind": "unclassified_tcp", "frame_number": 79022, "timestamp_epoch": "1634918021.362864000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-7f67d198b02058fe26f58717", "kind": "unclassified_tcp", "frame_number": 79025, "timestamp_epoch": "1634918021.896021000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a5a7f0e00d6cdc67d8c11cb2", "kind": "unclassified_tcp", "frame_number": 79030, "timestamp_epoch": "1634918021.974820000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-928be5132122841a28b5c99e", "kind": "unclassified_tcp", "frame_number": 79036, "timestamp_epoch": "1634918022.052153000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9e16b990c71406bcab622b81", "kind": "unclassified_tcp", "frame_number": 79039, "timestamp_epoch": "1634918022.057910000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-dc3fce42d2b25d2c2ee27a70", "kind": "unclassified_tcp", "frame_number": 79043, "timestamp_epoch": "1634918022.102395000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-640f1feda404c957983113fb", "kind": "unclassified_tcp", "frame_number": 79046, "timestamp_epoch": "1634918022.104837000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d6301000009b881f665f946a222eee6fb6bd953ea0a4673369c57ddef7fb0cc24bf2c42c3792a5ba14141969712ad1ea538fbd2bd56e6ca040101008e2eeda007db95fcb1a790321d03532bff9b98fb85c300f818c84b86a0b236d96cc5cde2cb659a535867bc75015535853ba304918e20e75a5d4001341799cefccd1301513054e40e7c44c7d56962ebafafa1b86fb15a52f64be87bcd200866cd676b1d84b228f79df3be85e3f757e9fba05c06a9b744a4c77adad443491656610e80bc7ba2e63593e0ed8e26e6fabfdfc23a8feb9958f5fb4379206b4cb69d0298098542e0cdee6969fbcc540f37dde81a39017cee8a73648a3195427f77014e38940f18ff83f01f2b2a125afbc9d68377d91c874528e3482d8b64c5e37c339ebfa0a43dd76f424d5b82f51443966c23b0672b4ba338d154fd71952c00267ef00d00001a03010240001204010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-8791be9a87077f0f29e79989", "kind": "unclassified_tcp", "frame_number": 79049, "timestamp_epoch": "1634918022.547956000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59db400000016030300070b00000300000016030300661000006261046b63a2c50c890f64530a08589e4d911e2ede0580f6651bcb750f4a68eb36dd1f16da2cf9c71471a18946f0f37c111be32f3808513f3d093911f768b97a966f505c4b2e7d35616c90ed8c34d79fb90786eb814c62915145ea55e811b29010ced0140303000101160303002800000000000000004063a5b91fa837f5ee11c0c1cdbf58546b26a6ee4a17c466b40fdf6bf0cbdc2e" } }, { "event_id": "evt-d8601047ef95b53d3421913f", "kind": "unclassified_tcp", "frame_number": 79054, "timestamp_epoch": "1634918022.603077000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d3d00000014030300010116030300280000000000000000ee2df38c50ef7fd3398dc9113e684f5795d4dc0c0dabfda933052cd3d22b080e" } }, { "event_id": "evt-ce05589a551872f8bedc9cc0", "kind": "unclassified_tcp", "frame_number": 79057, "timestamp_epoch": "1634918022.941252000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d3700000017030300280000000000000001cafb533d61ff4423f610ac75113a6bad1e4c42960dc924c369df5754e2907457" } }, { "event_id": "evt-4aa40dc01b58e093e1c5cdf0", "kind": "unclassified_tcp", "frame_number": 79062, "timestamp_epoch": "1634918022.998581000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f188ef315b0a48246549d1ee", "kind": "unclassified_tcp", "frame_number": 79065, "timestamp_epoch": "1634918023.943309000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d3300000017030300240000000000000002ab727eab885c2d48064702bc6340340be6b223114fd208832982a12d" } }, { "event_id": "evt-446679c9772ba539ec3220e7", "kind": "unclassified_tcp", "frame_number": 79070, "timestamp_epoch": "1634918024.022828000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d39000000170303002a0000000000000002a2b43c48101f9a5cbe5b28811ddce7dd41c329177733aa7e530c91400f3120b28d2d" } }, { "event_id": "evt-1f59563c69284a1c0f20b5d4", "kind": "unclassified_tcp", "frame_number": 79072, "timestamp_epoch": "1634918024.041565000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f1bf64451dee623b91afab5d", "kind": "unclassified_tcp", "frame_number": 79075, "timestamp_epoch": "1634918024.381455000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d5500000017030300460000000000000003ec8d8870db50d440bc354a92b5f807c92b67c1b371ee5852de228f402af857ce66e9dd2606aaccf9642e030a455dd36a73b2c1aaaf3542fa7f22d2d5772f" } }, { "event_id": "evt-152fef0338b71c2e184cedc9", "kind": "unclassified_tcp", "frame_number": 79080, "timestamp_epoch": "1634918024.449716000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d39000000170303002a00000000000000036274acdd0668d9ed1bb1f109b8d1450929022f79326eed239c50800c5f5b72c79943" } }, { "event_id": "evt-e74ff9de26edeabd70f7d238", "kind": "unclassified_tcp", "frame_number": 79083, "timestamp_epoch": "1634918024.705882000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d3500000017030300260000000000000004d4e1d8c5f056e6f0737bf9400a2ef5c9862b4465cb32358b7f83ccf25a15" } }, { "event_id": "evt-e213b519d3536c291b251b96", "kind": "unclassified_tcp", "frame_number": 79093, "timestamp_epoch": "1634918030.041433000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e370e5d92aac3ed202b1ad2f", "kind": "unclassified_tcp", "frame_number": 79099, "timestamp_epoch": "1634918034.800018000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59da000000017030300910000000000000004301180a717c015fbdf6b03108e9d3c798a515282e8bae64f8315cbad8bd87e00adc770bbe8f53e15ad32db4429aa1611bc07997f2f4ea3c006d257e1e9af8de34bddbabebe3d11f46042bab78ba5861335cc2c7b19e13cc40bd1c0bb76f13ec749ce30b43fb62c4fafb76f57a12b6800e5f30c530150efaa6ea7be10d564f01dee9bac9d1f9c141e9f" } }, { "event_id": "evt-ca87f9dc3972838d2b519ee5", "kind": "unclassified_tcp", "frame_number": 79102, "timestamp_epoch": "1634918035.041795000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1d9b19e72065b25d45f8c999", "kind": "unclassified_tcp", "frame_number": 79104, "timestamp_epoch": "1634918035.127605000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d2a000000170303001b00000000000000052bdf282034fa116f1c244c2753c8a16bb34423" } }, { "event_id": "evt-58af6b86a7d839b70463c4bc", "kind": "unclassified_tcp", "frame_number": 79108, "timestamp_epoch": "1634918036.448361000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5767dc5a98592697d46770d5", "kind": "unclassified_tcp", "frame_number": 79110, "timestamp_epoch": "1634918040.073993000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-34a0b41f51dbe50723b39fb3", "kind": "unclassified_tcp", "frame_number": 79113, "timestamp_epoch": "1634918040.208888000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d75000000170303006600000000000000056c2da4cd8751e020aae16747931b4cc452f31a8e5fa51756b58245061496e1ef5bc7b77096a289659f39627d74e88a742f62775e2d841a234e7df7eaef26a8c3166e34195b72cc0cfc90384739cbf5529b9210f0f59ecbe0058507b82ac5" } }, { "event_id": "evt-8e233c6ebf9b798c88d7cbe3", "kind": "unclassified_tcp", "frame_number": 79116, "timestamp_epoch": "1634918040.532511000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d2d000000170303001e000000000000000659ab503361405c16e87957e011bae9d9766d5b15cc6e" } }, { "event_id": "evt-1bbd8c24815c399971c94dd5", "kind": "unclassified_tcp", "frame_number": 79121, "timestamp_epoch": "1634918040.582451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d57000000170303004800000000000000068062a5eb5597c848f3611b16cb744616258e061729d7ca076f74d38233d6fdb21d3fb41d4d74751f72be2dced9fda6f8a46e19f6d53c989943d135d878e512e5" } }, { "event_id": "evt-2db7a3745987c5d931121078", "kind": "unclassified_tcp", "frame_number": 79125, "timestamp_epoch": "1634918040.583122000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100b59d0a000000" } }, { "event_id": "evt-4757a2267141fecbcdebe406", "kind": "unclassified_tcp", "frame_number": 79127, "timestamp_epoch": "1634918041.750952000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b59d29000000150303001a00000000000000077ef5e99c868f4bdc7fdc1eefd50fce7af79305070100b59d0a000000" } }, { "event_id": "evt-c9f28abfa54238de9a24c195", "kind": "unclassified_tcp", "frame_number": 79129, "timestamp_epoch": "1634918045.135350000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50359, "dst_port": 1187, "tcp_stream": 1559, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c5198bc3045ec0aab67833ef", "kind": "unclassified_tcp", "frame_number": 79131, "timestamp_epoch": "1634918049.745328000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100ba7c0c000000197b" } }, { "event_id": "evt-ed608c38bead973f317dc38f", "kind": "unclassified_tcp", "frame_number": 79133, "timestamp_epoch": "1634918050.075057000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c0e00000005020002" } }, { "event_id": "evt-696120f580500a9addf79ad0", "kind": "unclassified_tcp", "frame_number": 79134, "timestamp_epoch": "1634918050.075432000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ba7c0c0000000502" } }, { "event_id": "evt-b34f271d0d3344e6548bfa15", "kind": "unclassified_tcp", "frame_number": 79137, "timestamp_epoch": "1634918050.567701000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-4c90720925cb116a12040d30", "kind": "unclassified_tcp", "frame_number": 79138, "timestamp_epoch": "1634918050.568271000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100ba7c0c0000000100" } }, { "event_id": "evt-8d813f2c7bb6fd7cbb9a2b57", "kind": "unclassified_tcp", "frame_number": 79140, "timestamp_epoch": "1634918051.079682000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c2900000005010003186d61696c2e796f7572776562736974656d61696c2e636f6d0019" } }, { "event_id": "evt-76875fc374af684460bbee96", "kind": "unclassified_tcp", "frame_number": 79147, "timestamp_epoch": "1634918051.255724000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c14000000050000010a0a169cc409" } }, { "event_id": "evt-18958f5d81de235910083b7c", "kind": "unclassified_tcp", "frame_number": 79150, "timestamp_epoch": "1634918051.395958000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c2c00000032323020736d74702e622e686f73746564656d61696c2e636f6d2045534d54500d0a" } }, { "event_id": "evt-7d6a3662b488ecfd6e06b074", "kind": "unclassified_tcp", "frame_number": 79153, "timestamp_epoch": "1634918051.844596000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-d2f624518e4dee5fc10e2fac", "kind": "unclassified_tcp", "frame_number": 79158, "timestamp_epoch": "1634918051.965846000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7ccc0000003235302d6f6d6630342e622e686f73746564656d61696c2e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452033363730303136300d0a3235302d4554524e0d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302d44534e0d0a3235302d5354415254544c530d0a323530204348554e4b494e470d0a" } }, { "event_id": "evt-e49a47aa7bd82e558737ff69", "kind": "unclassified_tcp", "frame_number": 79161, "timestamp_epoch": "1634918052.336754000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c140000005354415254544c530d0a" } }, { "event_id": "evt-11f38f901175700aa43d8f21", "kind": "unclassified_tcp", "frame_number": 79166, "timestamp_epoch": "1634918052.408914000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c2200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-6b188085f0f2a00372a280dc", "kind": "unclassified_tcp", "frame_number": 79169, "timestamp_epoch": "1634918052.844480000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c1e010000160301010f0100010b030358729bd11ec7161a146589267c9b01a19608019854c881509141b59f5b3857592083e5be674ad0bdacedf59c54866326d257831caea539cb93a4aa2707790e98e80026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009c0000001d001b0000186d61696c2e796f7572776562736974656d61696c2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00205215361653230c8456b0d48777ebda8adc060ac98292eca451e7335f1e128e2f" } }, { "event_id": "evt-70c64f3ad5d1b5fc63972198", "kind": "unclassified_tcp", "frame_number": 79174, "timestamp_epoch": "1634918052.920570000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-eab7da917a807f1fb8c6c07c", "kind": "unclassified_tcp", "frame_number": 79178, "timestamp_epoch": "1634918052.924012000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c6a0500005f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001788a8f4d560000040300473045022100d9a4f18f0f6b051f541ebdf090706c4787015816142f7f09fc39da2a4eb5f91902202d478ca4ac2714a159fb6d1bdfd46d14cf4d8f1e7cca0e5f42ab08aa2009ddb830400603551d1104393037821b7765626d61696c2e796f7572776562736974656d61696c2e636f6d82186d61696c2e796f7572776562736974656d61696c2e636f6d300d06092a864886f70d01010b050003820101003671fbdbe4527e4d45ad33b73f155dc4cc9c1132072f584f1a4d0d07cf1c225c0caa9233430cc95a532e1b4d95082c88c467c7412ff5d82394f36c14b9457e4c46348b2c6aada40818f68b1b964a395cf0563ffe07b368eec6b84fbed798928063bb6fe78a2d3116f40dc8be1ff5aae9d3122751b782afe4c48d2b8ae06122ac48fa70d67fcaf8058059a574357c6554fc3a82eead76eb9656aa8c59ae29e63a0b0668da51f1c91f91854045cf8248c09d6419a9e95b4255fcb7247c6f4207e2bade51b8ea3cf767a59362c956b6ee4b416e7226b4516e447747e373f7d65444eecc6f7fcfb74d4a98420e87ceeab2b3298aced4ab55ce271bd3555811481ee400061d3082061930820401a0030201020210137d539caa7c31a9a433701968847a8d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a308195310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313d303b060355040313345365637469676f20525341204f7267616e697a6174696f6e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a02820101009c930246454a524892fc578df92dea53beb32cd5d8a8a5ec5b6903c01d10f65933defe0748a8e88c7a674af1f58dc33766d03291f7c49d0460c4b54ae2838ba7ae26d45d3a5ef8d11671bb8abd71a27dc8cea26024b052a03a4551de78936c6260f1e4569cb73bf73c55d8dfd57a317c357f125170e12cbe04accbfa4fe17c656ac040a7d97ca5638419e1f7caefaab4e8585ad999e326df8e12b2b8dc33b236da141d965842406e0b22851c5122aec4c806456d92e667b71923e4d8366b85d07fc752e3cfb07501e089b4a8bf8a364ea3e06ceb8441cea52f482213975062451e09a5cc9f6c57704006db20e81bd6f3938ba7329eb7441509d7affd7c011cdb0203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e0416041417d9d6252767f931c24943d93036448c6ca94feb300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020230500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b0601050507010104" } }, { "event_id": "evt-1d73fa6a3b91de5513537d47", "kind": "unclassified_tcp", "frame_number": 79181, "timestamp_epoch": "1634918052.928137000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b33a46e1b045efccd7458b5d", "kind": "unclassified_tcp", "frame_number": 79184, "timestamp_epoch": "1634918053.362749000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c8800000016030300461000004241043e145e5bbe9d6e297983a9628f88a60c475baddcd55609d4688aeb34b14d63aac22943ef446e1e5656a3ace9fde8fe5c2576de4809a41f4732849c56e0c3571d140303000101160303002800000000000000000ad238e67721941658014fcebf3fd1d488aebdd589de1343d3d73f55f1c88940" } }, { "event_id": "evt-c0902ff6ceb4a1abef8493b3", "kind": "unclassified_tcp", "frame_number": 79189, "timestamp_epoch": "1634918053.427728000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c3d0000001403030001011603030028106aa41303a58697f5a85214e824c2b83f019a801438aa7414450998e4678150c7d12b69334126d1" } }, { "event_id": "evt-bf4b970a1ee4796738a64360", "kind": "unclassified_tcp", "frame_number": 79192, "timestamp_epoch": "1634918053.734533000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c370000001703030028000000000000000187acb1416be6cf93e73a1d5cf08ae7cdb14efef06f9949f690820b9b8bcb4a67" } }, { "event_id": "evt-c508c9c5a68d575d690413e5", "kind": "unclassified_tcp", "frame_number": 79197, "timestamp_epoch": "1634918053.839145000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7cdb00000017030300cc106aa41303a58696d42a5337d0d3d02d171921a7b52572729fcc980d2d0c19c0c263d94f9b1ee47ab8bde18022c90f4bdb81d17cdd59cfd2bdbadd6c9b295d876f1a44cb528c654b691d7b438f4592d89e6f3a124c12e0eb93ebbe7091cb5791f5f9139dc48827590640bcfe4131e92216c9ec39b8c7b75bf247f1bed04d9c19b45a0484cd260d78aec7a3262171970125853ab2bb787d2f2da2646f470ce6ba157e06fe36358569fce0aafb13485ab862748631248c321447f8b2d10190b5d9957566db3938dd4287a8885b" } }, { "event_id": "evt-76037915238f79e52c89b382", "kind": "unclassified_tcp", "frame_number": 79203, "timestamp_epoch": "1634918054.388017000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50360, "dst_port": 1187, "tcp_stream": 1577, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-5ef3a4e408ade66089ba480b", "kind": "unclassified_tcp", "frame_number": 79206, "timestamp_epoch": "1634918054.604423000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c330000001703030024000000000000000225ea3eb87746b09daca9603eaae85371151e589cb559b3b0618f54ab" } }, { "event_id": "evt-c730ba260b0faba0ba7a57c4", "kind": "unclassified_tcp", "frame_number": 79211, "timestamp_epoch": "1634918054.688635000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c39000000170303002a106aa41303a58695575d4696f32436f3262725fc032745fadb1ffe66e83dabc35b9154550abc9b08a9eb" } }, { "event_id": "evt-edbeefa79d02760101dda623", "kind": "unclassified_tcp", "frame_number": 79214, "timestamp_epoch": "1634918055.077574000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c550000001703030046000000000000000362880b0540ed1834c014f5b820c42897bcaa0b356fba4a04606f633b7ba9135c3762be673ea4823f521873ef8e9811c8518c30f683f80ede4ecc14ad737d" } }, { "event_id": "evt-30483e735f90520bdba7b82c", "kind": "unclassified_tcp", "frame_number": 79219, "timestamp_epoch": "1634918055.139241000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c39000000170303002a106aa41303a58694d2660993aec4fff1d1ea51aab8621be7537c88f811b86a33a2e41f8335e01b4b27bf" } }, { "event_id": "evt-1d8542651bc24790183973d2", "kind": "unclassified_tcp", "frame_number": 79222, "timestamp_epoch": "1634918055.585468000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c39000000170303002a0000000000000004d83da72299d08accef34ce35f7b1073442a0c4ca00c9433bb00a64b1fdc8dd711c1c" } }, { "event_id": "evt-0e9c0c5895732875fe1b160b", "kind": "unclassified_tcp", "frame_number": 79227, "timestamp_epoch": "1634918056.097665000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c5d000000170303004e106aa41303a586936643ef52c518d91db61c1f5997af0c4822055dcb43d6a23da17a7ba47eacd2593bdd0070182fe9b9182e04cd9d86e8529c3e43501cba9eb2da672352c0364619c63e4823faf4" } }, { "event_id": "evt-7bcc3c7f0a336413862f52d4", "kind": "unclassified_tcp", "frame_number": 79230, "timestamp_epoch": "1634918056.609456000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c2a000000170303001b00000000000000054e4726d472532ec8de34504f7664fbd9a7da02" } }, { "event_id": "evt-e597763da6f1d7b2a23421dc", "kind": "unclassified_tcp", "frame_number": 79235, "timestamp_epoch": "1634918056.685390000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c500000001703030041106aa41303a58692e73a32bdb00d72da2b02b9fc5c9b564d5f4ad48e5bbfcd4430249e6ba1fc95787553638cb6cfc4d98949de6b8b253d7392e22d67f4663f00e8" } }, { "event_id": "evt-7b0ef5de115046296c41a325", "kind": "unclassified_tcp", "frame_number": 79238, "timestamp_epoch": "1634918057.008418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c2d000000170303001e000000000000000672b189623c9a6a91eac622ae19a527a948b7870ef1d7" } }, { "event_id": "evt-8e96cf20d1747b0ce17a0e01", "kind": "unclassified_tcp", "frame_number": 79244, "timestamp_epoch": "1634918058.146563000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c360000001703030027106aa41303a58691896a10c48aa680b6875de089495815d6bdd20dcdee3e717c1d10349b759002" } }, { "event_id": "evt-2fabc22a71de64fb3736f49d", "kind": "unclassified_tcp", "frame_number": 79248, "timestamp_epoch": "1634918058.147131000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ba7c0a000000" } }, { "event_id": "evt-2211f452dfbbb47c210171b3", "kind": "unclassified_tcp", "frame_number": 79250, "timestamp_epoch": "1634918058.393590000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100ba7c29000000150303001a0000000000000007eb78aa267b17ff65b37736330433f2a645e5" } }, { "event_id": "evt-5ef26edbb2422905b1466a84", "kind": "unclassified_tcp", "frame_number": 79253, "timestamp_epoch": "1634918058.576532000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100ba7c0a000000" } }, { "event_id": "evt-e9f13bb95329132a38ca98a3", "kind": "unclassified_tcp", "frame_number": 79259, "timestamp_epoch": "1634918058.744395000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50361, "dst_port": 1187, "tcp_stream": 1578, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ec9175a3cb6642c7358ddf2d", "kind": "unclassified_tcp", "frame_number": 79848, "timestamp_epoch": "1634918063.126838000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50362, "dst_port": 1187, "tcp_stream": 1581, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-809baaf0a31c66893bcce8f3", "kind": "unclassified_tcp", "frame_number": 80478, "timestamp_epoch": "1634918066.854640000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-223151f90bfdee34c912826b", "kind": "unclassified_tcp", "frame_number": 80531, "timestamp_epoch": "1634918067.487905000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50363, "dst_port": 1187, "tcp_stream": 1587, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fb4e813ba38a48235931a975", "kind": "unclassified_tcp", "frame_number": 80668, "timestamp_epoch": "1634918071.859241000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50364, "dst_port": 1187, "tcp_stream": 1588, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fff7905e05b04101a24e43a9", "kind": "unclassified_tcp", "frame_number": 80671, "timestamp_epoch": "1634918075.963243000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010070600c000000197b" } }, { "event_id": "evt-165c35a998341b44fd226a0d", "kind": "unclassified_tcp", "frame_number": 80674, "timestamp_epoch": "1634918076.145630000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070600e00000005020002" } }, { "event_id": "evt-5db1be9e98ebe967b31c5fd6", "kind": "unclassified_tcp", "frame_number": 80675, "timestamp_epoch": "1634918076.146251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010070600c0000000502" } }, { "event_id": "evt-cec01f0c5c3d41d6bf0134fa", "kind": "unclassified_tcp", "frame_number": 80679, "timestamp_epoch": "1634918076.194135000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50365, "dst_port": 1187, "tcp_stream": 1589, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-71cb001cb4edf4dff1e159ff", "kind": "unclassified_tcp", "frame_number": 80682, "timestamp_epoch": "1634918076.539415000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706020000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-0c6d23171e4e1ceccd6da2ed", "kind": "unclassified_tcp", "frame_number": 80683, "timestamp_epoch": "1634918076.539936000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010070600c0000000100" } }, { "event_id": "evt-8c21e689c51281451e34dc71", "kind": "unclassified_tcp", "frame_number": 80685, "timestamp_epoch": "1634918076.912076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060240000000501000313736d74702e73756464656e6c696e6b2e6e65740019" } }, { "event_id": "evt-c4daf89058c726a820d33178", "kind": "unclassified_tcp", "frame_number": 80692, "timestamp_epoch": "1634918077.038309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706014000000050000010a0a169cc40a" } }, { "event_id": "evt-a4bb51f86bdaeaa55e06198d", "kind": "unclassified_tcp", "frame_number": 80695, "timestamp_epoch": "1634918077.095803000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070608f000000323230206f6d746130342e73756464656e6c696e6b2e6e65742045534d5450207365727665722028496e7465724d61696c20764d2e382e30342e30332e32322e3032203230312d323338392d3130302d3136392d323031393032313329207265616479204672692c203232204f637420323032312031303a35343a3337202d303530300d0a" } }, { "event_id": "evt-00f62ab79f67808fdd63478c", "kind": "unclassified_tcp", "frame_number": 80698, "timestamp_epoch": "1634918077.462565000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070601a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c047486da7fe3a9fdc52113c", "kind": "unclassified_tcp", "frame_number": 80702, "timestamp_epoch": "1634918077.507500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060bf0000003235302d6f6d746130342e73756464656e6c696e6b2e6e65740d0a3235302d48454c500d0a3235302d5852454d4f544551554555450d0a3235302d4554524e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d384249544d494d450d0a3235302d53495a452035323432383830300d0a323530205354415254544c530d0a" } }, { "event_id": "evt-40e5a41d19944a5810311c6e", "kind": "unclassified_tcp", "frame_number": 80705, "timestamp_epoch": "1634918077.759037000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060140000005354415254544c530d0a" } }, { "event_id": "evt-b9a9eb40372220928ef5bba8", "kind": "unclassified_tcp", "frame_number": 80709, "timestamp_epoch": "1634918077.792888000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070602200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-0a363d37a3421c9ac7dafd6e", "kind": "unclassified_tcp", "frame_number": 80712, "timestamp_epoch": "1634918078.195611000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706019010000160301010a0100010603030f39092278e181b63548760784023149839d5fdfb4fb24afb73f9fced8068a6020ddf4cdf732cb5f52903c601c7f3aa18e16c335e6471d1e454ee6e7bb8d20bf7a0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000097000000180016000013736d74702e73756464656e6c696e6b2e6e6574000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020a731bcf9817f63c74254fe0c49481fff9408089cbf2bf3c7a7ba2492581e877a" } }, { "event_id": "evt-b9ff5e4f23be0a7d5c710088", "kind": "unclassified_tcp", "frame_number": 80720, "timestamp_epoch": "1634918078.249129000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-048ea3b0b8fd3e9c8c411098", "kind": "unclassified_tcp", "frame_number": 80721, "timestamp_epoch": "1634918078.249151000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c14bee9d7efce46fbcd9b435", "kind": "unclassified_tcp", "frame_number": 80722, "timestamp_epoch": "1634918078.249162000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "4002f5a1deb0eddec0f8f6759d76b987fe41807acf5de300c65b02e69b7862c9dcb8629a77ed8908d74bc5fd43d5622327c404596d713f235bead9f2e724276ff49580db962ce4548bcfea19d97f5599517a0e2d183d785852bc6368570bdd44b3574a60e6c870705b87286ad73b4e524519af24069248111a8baeac181257ac03cbb8f4bdca260ea7c1dde333efc055300d95594e9c033606f8c08f14999c4d2a9ec1e17d3baf72a745ba1396294e19d01a9806f4379417ada318ba3eb0010c95d6293520357df51060e4f768621eec19e124f28711ace90880160303014d0c0001490300174104f27bf7e634ce020d94877f3bb79f7fa70aa31e2911c4186bc4e8215706587a13bc6cd630882d454fbd4c4df4f05c2185b6dcd65cee96925237b0f4e87d621c61040101001d9cd6c3ceb0904ee2fad2b23174e82b71a377160c61425f59d1374abdd114f487573296437cd49c9115162810e68c292b3cf2788dce8faa1dfc9fe976e6e1e3fd549ebc6f89d198de305eedddedd7cb2053567d288e67993af6b2ec6465009152beecb8680d44d34a955c450a5a4869c2f34617e0cf3724773a3648e8e23e344a8de4d2c21a0ead0769b8183dbd470d1cf2ee9af5c98d93b2e7eeef5535b69afba8c10d741edb044c006511e8ba3f9f7c8f7ae98ad75cc588555d0c9dba06bad80eeaafa8a6cb5f98f5d942ec3bff67e7b92e03e40dff11d806052ae55eb9843e700f50d095e7e4b0664b42af1b4bf74c089b28a3fa1b6f4841b3fa46f220ae16030300040e000000" } }, { "event_id": "evt-05b3a2454bc03071f83ec9bc", "kind": "unclassified_tcp", "frame_number": 80726, "timestamp_epoch": "1634918078.732327000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070608800000016030300461000004241042060a11cca84e886485e0d817feecb161dc0e47ff89723ed64bff2af2d7776ee59cb6dd1aba92c10f6004d69a4f3ba4d1927f88293a59ec6c3f8aab2e488cd4414030300010116030300280000000000000000320f7d524dca94cc30693033621f04b32708ccb1d49e268b10c00e34b44489d1" } }, { "event_id": "evt-ffd7a04b1d596ca0832c3fb0", "kind": "unclassified_tcp", "frame_number": 80731, "timestamp_epoch": "1634918078.780375000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706010000000140303000101" } }, { "event_id": "evt-eaf407eab727389591a4278e", "kind": "unclassified_tcp", "frame_number": 80735, "timestamp_epoch": "1634918078.814868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706037000000160303002801000000000000009744b669cd5fce3be739d1687f8b877551c68bf196cc4c24c765a586e9252901" } }, { "event_id": "evt-834caf87d683ccabc42645f0", "kind": "unclassified_tcp", "frame_number": 80737, "timestamp_epoch": "1634918079.199291000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706037000000170303002800000000000000019789b6536ffdb0c759c6244c5cb137c3dadf465dc0f5912feefb5ad0b91c966e" } }, { "event_id": "evt-90abf0577b09e2f1ad18b002", "kind": "unclassified_tcp", "frame_number": 80741, "timestamp_epoch": "1634918079.233802000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060ce00000017030300bf01000000000000019a18b0e3e69222a7744af43d86e952b1e4f2d0a9e4d22aa4b93dd715dc572bf0a683822ad214487b22771cb02055f4b46a8880c1a8948d32b392f0834efe9963324783eacede4cca141bd49b00b4566cfa3bc1934bcd3058f8fe9d61a587d7ab5b282d4c018531ccd24b788d7bd3ac3fc5d2d3c4506875f8c9911531077e25871daf78fbcc7356121a0bb2bc1eaa5e14cf9a3c9d8d1e250d371763dab58deb9b4662c0a0825edbcab7461a2dad667fc0e48b89a3081512" } }, { "event_id": "evt-fbab33b8d03aab91735ccae9", "kind": "unclassified_tcp", "frame_number": 80745, "timestamp_epoch": "1634918080.388016000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070603300000017030300240000000000000002804fb463d113ed01b88615ddbb235dd6531d081d8ab839f51f8cd0ce" } }, { "event_id": "evt-758f86cb894945a49e1f9fbb", "kind": "unclassified_tcp", "frame_number": 80750, "timestamp_epoch": "1634918080.439171000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706039000000170303002a010000000000000236948de50cbdfd99a0a3d3b7919dca0de475992db0f96e247181b5e4343c5703743c" } }, { "event_id": "evt-c05f08805ee720dcf3be9a49", "kind": "unclassified_tcp", "frame_number": 80755, "timestamp_epoch": "1634918080.558251000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50366, "dst_port": 1187, "tcp_stream": 1591, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e3c304af0fee0feec1326632", "kind": "unclassified_tcp", "frame_number": 80758, "timestamp_epoch": "1634918080.759315000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070604500000017030300360000000000000003da9259fd237a61a1317251af29ed9d61ac2339e0fc236c1fb3c8b25f3211734b8beff2a2d920a39078b916631e0c" } }, { "event_id": "evt-920db94236966f8448b9a7c7", "kind": "unclassified_tcp", "frame_number": 80762, "timestamp_epoch": "1634918080.799868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706039000000170303002a01000000000000035f3301cd2bf7216b8d5fc418960598ceb033934288feb4fc479e6e95434e4c035e9a" } }, { "event_id": "evt-e97a81a59e05c95f0474e6c4", "kind": "unclassified_tcp", "frame_number": 80765, "timestamp_epoch": "1634918081.174841000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060350000001703030026000000000000000404d31b6b9a4b3218c2ea0ea98a2bcf91183e4513372e12909a85ec60c1dc" } }, { "event_id": "evt-417c6ddc18918de57a94ca4e", "kind": "unclassified_tcp", "frame_number": 80778, "timestamp_epoch": "1634918084.924712000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50367, "dst_port": 1187, "tcp_stream": 1592, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-e19d9d7dbdb24ac5f7d829d6", "kind": "unclassified_tcp", "frame_number": 80786, "timestamp_epoch": "1634918089.287256000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50368, "dst_port": 1187, "tcp_stream": 1593, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-45b5fbdbb1d4c5f0ba36c7fe", "kind": "unclassified_tcp", "frame_number": 80788, "timestamp_epoch": "1634918089.403490000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50368, "dst_port": 1187, "tcp_stream": 1593, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2063c0f107b940fc248989f8", "kind": "unclassified_tcp", "frame_number": 80792, "timestamp_epoch": "1634918091.323970000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706042000000170303003301000000000000045d7b8731b7610102901604b81fe6c001d8b4026e0c08812ec50f256039ef3872f572a3f1b403fe45b254c4" } }, { "event_id": "evt-b8344c6dbfc02644bc04a05b", "kind": "unclassified_tcp", "frame_number": 80795, "timestamp_epoch": "1634918091.582854000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070602a000000170303001b00000000000000050bfd359afc64f939656d986fd07c541fd5693e" } }, { "event_id": "evt-fd210904ded4204b5a31b366", "kind": "unclassified_tcp", "frame_number": 80799, "timestamp_epoch": "1634918091.647814000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706041000000170303003201000000000000053d84371fc7cf868bda9a2282dd55a3405759d47334494a11e1fbde3ae73ff707a0ca8359c54f815f042e" } }, { "event_id": "evt-8ad655cac0240c894982b471", "kind": "unclassified_tcp", "frame_number": 80802, "timestamp_epoch": "1634918091.920301000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070602d000000170303001e0000000000000006d4e63ea3b013bb5e767566b7469baa58fa9cd92154f7" } }, { "event_id": "evt-8647f8d9e0210c3966dbbc4f", "kind": "unclassified_tcp", "frame_number": 80806, "timestamp_epoch": "1634918091.955085000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701007060620000001703030053010000000000000652b47ba2f83eb6827aff690987dede90db4d0a43216eeaa274795df8e3732108fdb3ba80a01cdc76fe8b8355b2b52b3ec73a550bb511d44bde069a4d955c399d11340ec15f972ffd616d10" } }, { "event_id": "evt-e982ca197fb7718c18506292", "kind": "unclassified_tcp", "frame_number": 80812, "timestamp_epoch": "1634918091.959171000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010070600a000000" } }, { "event_id": "evt-83f1353a1a9e661d2b33cd78", "kind": "unclassified_tcp", "frame_number": 80815, "timestamp_epoch": "1634918092.332621000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100706029000000150303001a0000000000000007777012771ef1967efc0f5f67faef13446952" } }, { "event_id": "evt-414c93b39568b8174497ef45", "kind": "unclassified_tcp", "frame_number": 80823, "timestamp_epoch": "1634918093.676116000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50369, "dst_port": 1187, "tcp_stream": 1594, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-db9a5a74ef6207aa353af250", "kind": "unclassified_tcp", "frame_number": 80828, "timestamp_epoch": "1634918096.839666000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-78cbe1a6df32e4a93bd5596a", "kind": "unclassified_tcp", "frame_number": 80833, "timestamp_epoch": "1634918098.047197000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50370, "dst_port": 1187, "tcp_stream": 1595, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6385fb3e0256d07a9062dcc0", "kind": "unclassified_tcp", "frame_number": 80841, "timestamp_epoch": "1634918102.416795000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50371, "dst_port": 1187, "tcp_stream": 1596, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d9f102505e1db618a4d062a3", "kind": "unclassified_tcp", "frame_number": 80843, "timestamp_epoch": "1634918102.466598000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50371, "dst_port": 1187, "tcp_stream": 1596, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9c707d3b62fccff2afce5e69", "kind": "unclassified_tcp", "frame_number": 80849, "timestamp_epoch": "1634918106.736835000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50372, "dst_port": 1187, "tcp_stream": 1597, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-0fdf2137b9d3d141e0c14b20", "kind": "unclassified_tcp", "frame_number": 80857, "timestamp_epoch": "1634918111.135168000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50373, "dst_port": 1187, "tcp_stream": 1598, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-66d118ceb6dac04251bc0e33", "kind": "unclassified_tcp", "frame_number": 80860, "timestamp_epoch": "1634918111.393728000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701002aee0c000000197b" } }, { "event_id": "evt-18f7ebe44496f3446c924d04", "kind": "unclassified_tcp", "frame_number": 80862, "timestamp_epoch": "1634918111.577267000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee0e00000005020002" } }, { "event_id": "evt-69cb6d776aaedcc283e47663", "kind": "unclassified_tcp", "frame_number": 80863, "timestamp_epoch": "1634918111.577816000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701002aee0c0000000502" } }, { "event_id": "evt-979926894765dac0a0d8a2ed", "kind": "unclassified_tcp", "frame_number": 80865, "timestamp_epoch": "1634918111.906715000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-717de21859ed9f8bf3431750", "kind": "unclassified_tcp", "frame_number": 80866, "timestamp_epoch": "1634918111.907271000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701002aee0c0000000100" } }, { "event_id": "evt-b71a20118cbdd3e62630f284", "kind": "unclassified_tcp", "frame_number": 80873, "timestamp_epoch": "1634918112.274960000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee1f000000050100030e6d61696c2e616263686b2e6e65740019" } }, { "event_id": "evt-e571fd1a813fe89cf0121e22", "kind": "unclassified_tcp", "frame_number": 80889, "timestamp_epoch": "1634918112.834298000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee14000000050000010a0a169cc40c" } }, { "event_id": "evt-e8adc00f998508229e7e5c7d", "kind": "unclassified_tcp", "frame_number": 80892, "timestamp_epoch": "1634918113.119592000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee2600000032323020736d74702d312e616263686b2e6e65742045534d54500d0a" } }, { "event_id": "evt-12a29aeb639431ac77b47172", "kind": "unclassified_tcp", "frame_number": 80899, "timestamp_epoch": "1634918113.459610000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-fad8ca6825157a4f50abc7f9", "kind": "unclassified_tcp", "frame_number": 80904, "timestamp_epoch": "1634918113.852849000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee7e0000003235302d736d74702d312e616263686b2e6e65740d0a3235302d5354415254544c530d0a3235302d504950454c494e494e470d0a3235302d384249544d494d450d0a3235302d41555448204c4f47494e20504c41494e204352414d2d4d44350d0a3235302053495a452033313435373238300d0a" } }, { "event_id": "evt-a9785d912d6468d22ebbc420", "kind": "unclassified_tcp", "frame_number": 80907, "timestamp_epoch": "1634918114.109580000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee140000005354415254544c530d0a" } }, { "event_id": "evt-8ccfcf4deb994f712716bd09", "kind": "unclassified_tcp", "frame_number": 80912, "timestamp_epoch": "1634918114.468125000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee1d00000032323020726561647920666f7220746c730d0a" } }, { "event_id": "evt-b28efc8350e63b31d57893f2", "kind": "unclassified_tcp", "frame_number": 80915, "timestamp_epoch": "1634918114.978590000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee140100001603010105010001010303a7d2a96376a1a393d5d6e9ceb4575e65aeef160f2d6e57571461280bf5e76a972003d98dc7af590d560f84258354cf2ac16d33805bcd64e7178e2553706a8d1f7f0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a1301130313020100009200000013001100000e6d61696c2e616263686b2e6e6574000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d002036ae07df66d9cfae2ee8c539ba177ea746fe73fd838403a82aaebfb6de56f30b" } }, { "event_id": "evt-16ff951cc93dfd9cc808b713", "kind": "unclassified_tcp", "frame_number": 80923, "timestamp_epoch": "1634918115.286730000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1603ba003aa2060315476f6d", "kind": "unclassified_tcp", "frame_number": 80924, "timestamp_epoch": "1634918115.286757000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0afa18e67d64d4a4a954697d", "kind": "unclassified_tcp", "frame_number": 80925, "timestamp_epoch": "1634918115.286791000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "38085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe" } }, { "event_id": "evt-ea4cc38126af77575d82d86c", "kind": "unclassified_tcp", "frame_number": 80934, "timestamp_epoch": "1634918115.509392000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50374, "dst_port": 1187, "tcp_stream": 1601, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2c8c4ae70d825ad66c93f93d", "kind": "unclassified_tcp", "frame_number": 80937, "timestamp_epoch": "1634918115.540547000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3e4556dea843c085f7d2c782", "kind": "unclassified_tcp", "frame_number": 80939, "timestamp_epoch": "1634918115.575346000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50374, "dst_port": 1187, "tcp_stream": 1601, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-5bb0d53a42e5376c9b7cb249", "kind": "unclassified_tcp", "frame_number": 80943, "timestamp_epoch": "1634918115.966458000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee8800000016030300461000004241048f4d3ab3bcd48a5ea9e17f9a901aed7cbfad7134c1df94783e4f5714a08126ec0e24931582c235f8dbf0f87ed7eee09134b286a7d10332e45034f939e2394ca014030300010116030300280000000000000000ceb3ad0359777efaa1f3494537dff7e087af8f3e5792d43677aa61a12bdec999" } }, { "event_id": "evt-efe33706b49077b0b14b8c49", "kind": "unclassified_tcp", "frame_number": 80948, "timestamp_epoch": "1634918116.314818000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee3d000000140303000101160303002841c3e2c23b68de5b43a1b137f749ba1a1f913a3bd3544af9d92410ffaf83960f2938b39a474b17d1" } }, { "event_id": "evt-afc05c3b51f0abb4fd82f913", "kind": "unclassified_tcp", "frame_number": 80951, "timestamp_epoch": "1634918116.639133000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee370000001703030028000000000000000131096921d65a7c8d9fa5b5523bd771fd2b5d65cb5614eb9f040b759b475e4154" } }, { "event_id": "evt-b01c5b5d37cbe3ac601c0d81", "kind": "unclassified_tcp", "frame_number": 80956, "timestamp_epoch": "1634918116.925037000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee8d000000170303007e41c3e2c23b68de5cb0312bafa61ed5957447094257b545127c99e058c4f3b060760f7fc8649fa0f95b4a655cb537f635d9a0085c8b3b17fc8f39ad1349b5888191b1145a28d57d2bbc4d03169c99fb65df4f630a1b8bb7ef91c84eb21246f315175e41cbd3c2d132ecfb5470d9e1c5125c40e9170346f82ec9817e59d2dc" } }, { "event_id": "evt-828b31c310e5da5ba588b1e5", "kind": "unclassified_tcp", "frame_number": 80961, "timestamp_epoch": "1634918118.154683000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee33000000170303002400000000000000027ec7880ac5634a5b3464fc32f45928f6274cfd7f0278aabc8463e75b" } }, { "event_id": "evt-519e3009d7ac7992d3dac5cf", "kind": "unclassified_tcp", "frame_number": 80966, "timestamp_epoch": "1634918118.460893000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee39000000170303002a41c3e2c23b68de5d95a4a2833fe9f30eb18c94758b179ebbd0de2d0d98950c19360e28854f55c117a2a8" } }, { "event_id": "evt-4ee4e16a558f237594aeada1", "kind": "unclassified_tcp", "frame_number": 80969, "timestamp_epoch": "1634918118.799792000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee5100000017030300420000000000000003ee46b24541b08dbcc98deb2ad52b9fc6d333e61548ad047fea636f07273e3abc21e0e1bd03370b5b594c03b4cf56f6712568aad070c61f51a7cf" } }, { "event_id": "evt-9df6d73ae980c1c448136c44", "kind": "unclassified_tcp", "frame_number": 80974, "timestamp_epoch": "1634918119.075415000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee39000000170303002a41c3e2c23b68de5eebfd0007128dd0303bb0fb47e50d204783ce248253dcc67aba7a62531318f50f69b5" } }, { "event_id": "evt-781ecea946558971bfb43f07", "kind": "unclassified_tcp", "frame_number": 80977, "timestamp_epoch": "1634918119.363948000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee3500000017030300260000000000000004470b2133f126fe8472157d53c66c8ee50afcab9b2ecadf6da902f4b33420" } }, { "event_id": "evt-907abbf5556ec281a549133e", "kind": "unclassified_tcp", "frame_number": 80986, "timestamp_epoch": "1634918119.853169000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50375, "dst_port": 1187, "tcp_stream": 1602, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-322e64f29e7ef3637a9ca979", "kind": "unclassified_tcp", "frame_number": 80993, "timestamp_epoch": "1634918124.178903000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50376, "dst_port": 1187, "tcp_stream": 1603, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-d2f8a9d7ccdaa8380f9d1f11", "kind": "unclassified_tcp", "frame_number": 80997, "timestamp_epoch": "1634918124.708068000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee4b000000170303003c41c3e2c23b68de5ffbaa7aa640611a15bb3dd8844c5b5bd24757019f07fd1f0698ea2533c061512ebe91bedb213f7b8d0c8a9f6025bde287ac7c309e" } }, { "event_id": "evt-66d0abdea277125e9483b2e8", "kind": "unclassified_tcp", "frame_number": 81000, "timestamp_epoch": "1634918125.079925000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee2a000000170303001b00000000000000050ddc31963c9bd00c042f5b808af14c8bf6a49a" } }, { "event_id": "evt-1a2f4b0dec786edaa7206197", "kind": "unclassified_tcp", "frame_number": 81006, "timestamp_epoch": "1634918125.424830000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee42000000170303003341c3e2c23b68de604800b58612c5f51389d0d1cfea8a24294429b9fc80e53814fc1ea77bfdb1a4af60d0067e9548ef55313eff" } }, { "event_id": "evt-9a94f6392e2a82973c797390", "kind": "unclassified_tcp", "frame_number": 81009, "timestamp_epoch": "1634918125.685744000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee2d000000170303001e0000000000000006a4f15f49a1abd37e78e4f6833ec5d81f6e931eed9e4e" } }, { "event_id": "evt-e2c1b4fa81c05df2f583b9ac", "kind": "unclassified_tcp", "frame_number": 81015, "timestamp_epoch": "1634918126.039214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701002aee5c000000170303002e41c3e2c23b68de61168db7efebdf17424bdac318d87381b36a52a3dbc065288e10fa79e63c7e4a310921021b67c9150303001a41c3e2c23b68de62edafc3f0fa30276ed1495cdc34a0022aa880" } }, { "event_id": "evt-46046fcf170d57e6a3de5108", "kind": "unclassified_tcp", "frame_number": 81019, "timestamp_epoch": "1634918126.039686000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701002aee0a000000" } }, { "event_id": "evt-9c1a4881537fb19e1c8d7725", "kind": "unclassified_tcp", "frame_number": 81025, "timestamp_epoch": "1634918128.492650000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50377, "dst_port": 1187, "tcp_stream": 1604, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-fe962c92f490f264b44cf8e0", "kind": "unclassified_tcp", "frame_number": 81030, "timestamp_epoch": "1634918128.654246000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50377, "dst_port": 1187, "tcp_stream": 1604, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-346be4a336a9aaaa623ee6d2", "kind": "unclassified_tcp", "frame_number": 81037, "timestamp_epoch": "1634918132.857240000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50378, "dst_port": 1187, "tcp_stream": 1605, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-3b3f9614bfc2394e91ee65be", "kind": "unclassified_tcp", "frame_number": 81045, "timestamp_epoch": "1634918137.226257000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50379, "dst_port": 1187, "tcp_stream": 1606, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6b91417447c5141deb3edd49", "kind": "unclassified_tcp", "frame_number": 81053, "timestamp_epoch": "1634918141.595747000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-854628f44bd822e4e0fb76e8", "kind": "unclassified_tcp", "frame_number": 81055, "timestamp_epoch": "1634918141.654913000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0f011305065cccda149a3770", "kind": "unclassified_tcp", "frame_number": 81057, "timestamp_epoch": "1634918142.933909000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010070e40c000000197b" } }, { "event_id": "evt-e093f4a029f6a0fde7cf4642", "kind": "unclassified_tcp", "frame_number": 81059, "timestamp_epoch": "1634918143.116192000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e40e00000005020002" } }, { "event_id": "evt-1e9d1d2d793a70b4d4e87133", "kind": "unclassified_tcp", "frame_number": 81060, "timestamp_epoch": "1634918143.116875000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010070e40c0000000502" } }, { "event_id": "evt-8bda193287396a14e4f2a62d", "kind": "unclassified_tcp", "frame_number": 81062, "timestamp_epoch": "1634918143.356037000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2cbfb20e5f5295a4f84e315c", "kind": "unclassified_tcp", "frame_number": 81063, "timestamp_epoch": "1634918143.356522000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010070e40c0000000100" } }, { "event_id": "evt-8da9efdc354b1fbf21aaabc8", "kind": "unclassified_tcp", "frame_number": 81065, "timestamp_epoch": "1634918143.856496000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-d34a2d5e79dea769da0ce032", "kind": "unclassified_tcp", "frame_number": 81072, "timestamp_epoch": "1634918143.945478000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e414000000050000010a0a169cc40d" } }, { "event_id": "evt-4df03417c2c84bcc9d34542d", "kind": "unclassified_tcp", "frame_number": 81075, "timestamp_epoch": "1634918143.993861000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e47900000032323020534139503232334341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35353a3433202b303030300d0a" } }, { "event_id": "evt-85dfca4f01c291cb5be98832", "kind": "unclassified_tcp", "frame_number": 81078, "timestamp_epoch": "1634918144.456406000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e41a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-df36b051bcca25b6e1bb1885", "kind": "unclassified_tcp", "frame_number": 81082, "timestamp_epoch": "1634918144.502760000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4d80000003235302d534139503232334341303030332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-3cee4f02aadc7c791c8a99ed", "kind": "unclassified_tcp", "frame_number": 81085, "timestamp_epoch": "1634918144.789976000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4140000005354415254544c530d0a" } }, { "event_id": "evt-8a048e969fd6a2c1012c5ead", "kind": "unclassified_tcp", "frame_number": 81089, "timestamp_epoch": "1634918144.835897000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e42700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-df29f586ca1c351a52754687", "kind": "unclassified_tcp", "frame_number": 81092, "timestamp_epoch": "1634918145.124983000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f22b9655f35cbd75b67343ea", "kind": "unclassified_tcp", "frame_number": 81097, "timestamp_epoch": "1634918145.197046000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-0110df836dce5f4c5dfcbbfb", "kind": "unclassified_tcp", "frame_number": 81103, "timestamp_epoch": "1634918145.266439000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7119edae885086f9b55564cb", "kind": "unclassified_tcp", "frame_number": 81106, "timestamp_epoch": "1634918145.266794000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-72e5b8f4831a71bcb5a1326c", "kind": "unclassified_tcp", "frame_number": 81107, "timestamp_epoch": "1634918145.266804000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a082" } }, { "event_id": "evt-e884a54d19778d787bfb2475", "kind": "unclassified_tcp", "frame_number": 81112, "timestamp_epoch": "1634918145.312104000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cd6c1e33926e270983a3821b", "kind": "unclassified_tcp", "frame_number": 81114, "timestamp_epoch": "1634918145.768245000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4b400000016030300070b0000030000001603030066100000626104104ab59645571e5c9f44b04a449019dbb8950f3a25fc2a9772de5c9b27caf1b8d24617a231b37cd0add126e08a13dcd4d06c4afdd75b2c7c954c5656617fb7873ff62b7aa68828cf7fa9207545dc186428e464ff8b57f32cf2f30c21adcce527140303000101160303002800000000000000008195ba2644c06179d5876b7a00e74c11d49dafae20a9a256937d1fcdb8b986c3" } }, { "event_id": "evt-680233dd5a3c66c5f771b00e", "kind": "unclassified_tcp", "frame_number": 81119, "timestamp_epoch": "1634918145.833767000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e43d00000014030300010116030300280000000000000000fd74bb157f8f2e2e992d47aa795aa4660983c6aee1ca5b93661444a249b090c8" } }, { "event_id": "evt-eb9a87fe2ccb145fc8daccdb", "kind": "unclassified_tcp", "frame_number": 81122, "timestamp_epoch": "1634918146.116719000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4370000001703030028000000000000000139e6771f7d108614a2aa40be033c94be26719fcafcfe1afdb38359250008c5a3" } }, { "event_id": "evt-97c12980ad19abb690d7a328", "kind": "unclassified_tcp", "frame_number": 81126, "timestamp_epoch": "1634918146.163088000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c73410cacf4523f82c9fdb0d", "kind": "unclassified_tcp", "frame_number": 81129, "timestamp_epoch": "1634918147.235640000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e433000000170303002400000000000000029652cb82dd1e83f3f4971f47872d99f416f82df47f8eb1c65014b74d" } }, { "event_id": "evt-d819ae0da0984e7a19e1beb0", "kind": "unclassified_tcp", "frame_number": 81133, "timestamp_epoch": "1634918147.283497000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e439000000170303002a000000000000000237adbbc647d8b269c8561e0e110fa72cf2d58151cb86f916bcb80a7964ca00878e0e" } }, { "event_id": "evt-eed5ae4d965d512e71fc3f2d", "kind": "unclassified_tcp", "frame_number": 81136, "timestamp_epoch": "1634918147.581185000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e4510000001703030042000000000000000397b93565c4ce135b156458497d7b1a8347e00bd5e3aaa35e1a7756008c0e1d6ec1ff33ac35a11d6697981018abdd3221d356b0816edd7f1fc711" } }, { "event_id": "evt-3a2ef407e9bfd55c491c75e6", "kind": "unclassified_tcp", "frame_number": 81141, "timestamp_epoch": "1634918147.628825000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e439000000170303002a00000000000000039c984053dbd4b0a107bb1b67db0ec1f389ceef4a47c97e2abf146860d143c40168a6" } }, { "event_id": "evt-72b20edcefd734413f5b10ff", "kind": "unclassified_tcp", "frame_number": 81143, "timestamp_epoch": "1634918147.669172000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b82bf48e51fd51ebb9278de2", "kind": "unclassified_tcp", "frame_number": 81146, "timestamp_epoch": "1634918147.973163000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e43d000000170303002e00000000000000042a58dd39a94abae01e2d89640be3b4b12c1b792c30dc3e0375d618fac80d40ddd3f6fdd5d845" } }, { "event_id": "evt-ee61e435498fac9f2b66015e", "kind": "unclassified_tcp", "frame_number": 81153, "timestamp_epoch": "1634918152.717920000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-92cc431f2e2d9833e638f86e", "kind": "unclassified_tcp", "frame_number": 81157, "timestamp_epoch": "1634918154.302463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e49f000000170303009000000000000000040e8e3cd272c2c383342a446f85a5b839a6213bb50335cd5d9e13b0b5154f0ee8b4dfe0a3649745ab5d3b3be6c07b2ff2ea868702f9f9aebd8b9cc6f759707265518ef808a53ca06bf6a2b8ee1a441125cfd478fd399c65cb9f2f6fcfd00dde9dcd920b9dea5ef6c663f8ec8ea8b24ff93062370a6dbfcaf09d86505186ab1717c18cd721950c8c22" } }, { "event_id": "evt-cd09d90a5d0bdf5020150fca", "kind": "unclassified_tcp", "frame_number": 81161, "timestamp_epoch": "1634918154.813530000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e42a000000170303001b00000000000000056c64a08228d0f5ed5e2a2ca23b6a1030cbe198" } }, { "event_id": "evt-554ce13b5fa712d6000ea65f", "kind": "unclassified_tcp", "frame_number": 81165, "timestamp_epoch": "1634918156.482862000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-5a300e98072fcf24906e2d29", "kind": "unclassified_tcp", "frame_number": 81167, "timestamp_epoch": "1634918157.731996000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-abf6f4a9dd9fe225a8dc5c72", "kind": "unclassified_tcp", "frame_number": 81170, "timestamp_epoch": "1634918159.949118000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e47400000017030300650000000000000005b951e357692f559572bdf0af7769c46bd3f6bf7f4956c3f7d83bf4fc55b5cba52fc029c00e24741541543dc552c739af51dea296fe040ca1cdf260689567dfed9c176de4f68510b8b7073dddb46febd743f00eb05d54a79e6fc737fcc2" } }, { "event_id": "evt-33ba57c6509369eecc203a1c", "kind": "unclassified_tcp", "frame_number": 81173, "timestamp_epoch": "1634918160.198425000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e42d000000170303001e0000000000000006cdc7721ce2f4707b1bca7f4b3a01a8faf3843ad41be8" } }, { "event_id": "evt-a7aca8cfccd964b00a284342", "kind": "unclassified_tcp", "frame_number": 81180, "timestamp_epoch": "1634918160.247466000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e45700000017030300480000000000000006a06c8f398af362a17f04800b3cc22d454e23e43a827430b6dfd043a6518a8b5d6bb95e36c17f0f7eb1e1ce16e496679a289821687a22e4e197da4b11941a421a" } }, { "event_id": "evt-18e8886012f758cdd9bf672d", "kind": "unclassified_tcp", "frame_number": 81184, "timestamp_epoch": "1634918160.248246000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010070e40a000000" } }, { "event_id": "evt-583944974ac962d50b64ebbb", "kind": "unclassified_tcp", "frame_number": 81186, "timestamp_epoch": "1634918160.508396000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010070e429000000150303001a0000000000000007b67709f9e97129eac2d76294c58046229c38" } }, { "event_id": "evt-2d6afb3cd1bea974138d34c6", "kind": "unclassified_tcp", "frame_number": 81188, "timestamp_epoch": "1634918160.686317000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010070e40a000000" } }, { "event_id": "evt-97e58e68a48596c7578ce430", "kind": "unclassified_tcp", "frame_number": 81191, "timestamp_epoch": "1634918162.778640000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4fc81c833475da536f455d4b", "kind": "unclassified_tcp", "frame_number": 81195, "timestamp_epoch": "1634918167.796463000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0697d52e2788f7ec48eb0131", "kind": "unclassified_tcp", "frame_number": 81205, "timestamp_epoch": "1634918172.810704000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-256bacb4aaa114103235f3f2", "kind": "unclassified_tcp", "frame_number": 81207, "timestamp_epoch": "1634918177.842312000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-bb5563f821ddc4a355c820dd", "kind": "unclassified_tcp", "frame_number": 81222, "timestamp_epoch": "1634918182.905434000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a892a7964fd1acc16ac7c249", "kind": "unclassified_tcp", "frame_number": 81226, "timestamp_epoch": "1634918186.873369000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-c6268d0873c287ac3dad327d", "kind": "unclassified_tcp", "frame_number": 81228, "timestamp_epoch": "1634918187.920194000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-27b9f4eeddb2beaa40e45155", "kind": "unclassified_tcp", "frame_number": 81239, "timestamp_epoch": "1634918193.013656000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ccddc5890714f908840ef5c3", "kind": "unclassified_tcp", "frame_number": 81242, "timestamp_epoch": "1634918196.901089000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701006bdb0c000000197b" } }, { "event_id": "evt-81b4be8ce0340329786ede1d", "kind": "unclassified_tcp", "frame_number": 81244, "timestamp_epoch": "1634918197.089718000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb0e00000005020002" } }, { "event_id": "evt-83151bb0f111359b54e8f8ab", "kind": "unclassified_tcp", "frame_number": 81245, "timestamp_epoch": "1634918197.090365000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006bdb0c0000000502" } }, { "event_id": "evt-157a81dcb55309cfdda64362", "kind": "unclassified_tcp", "frame_number": 81247, "timestamp_epoch": "1634918197.618664000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-1e9a96c0015eebaccf5a2efa", "kind": "unclassified_tcp", "frame_number": 81248, "timestamp_epoch": "1634918197.619233000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701006bdb0c0000000100" } }, { "event_id": "evt-a475bea0606f77c9ce27d0a9", "kind": "unclassified_tcp", "frame_number": 81252, "timestamp_epoch": "1634918198.046791000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-542570b2ea658c4f2dbbc5b9", "kind": "unclassified_tcp", "frame_number": 81254, "timestamp_epoch": "1634918198.437109000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb240000000501000313736d74702e73756464656e6c696e6b2e6e65740019" } }, { "event_id": "evt-bf467de64d430c9e946611e4", "kind": "unclassified_tcp", "frame_number": 81258, "timestamp_epoch": "1634918198.492114000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb14000000050000010a0a169cc40e" } }, { "event_id": "evt-f6621636f15d5648298bb2b4", "kind": "unclassified_tcp", "frame_number": 81261, "timestamp_epoch": "1634918198.595730000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb8f000000323230206f6d746130322e73756464656e6c696e6b2e6e65742045534d5450207365727665722028496e7465724d61696c20764d2e382e30342e30332e32322e3032203230312d323338392d3130302d3136392d323031393032313329207265616479204672692c203232204f637420323032312031303a35363a3338202d303530300d0a" } }, { "event_id": "evt-5ab49b002fac26ba433d556e", "kind": "unclassified_tcp", "frame_number": 81264, "timestamp_epoch": "1634918199.026999000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-4cc3e9b1f13cdc77701ec3f3", "kind": "unclassified_tcp", "frame_number": 81268, "timestamp_epoch": "1634918199.067822000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdbbf0000003235302d6f6d746130322e73756464656e6c696e6b2e6e65740d0a3235302d48454c500d0a3235302d5852454d4f544551554555450d0a3235302d4554524e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d384249544d494d450d0a3235302d53495a452035323432383830300d0a323530205354415254544c530d0a" } }, { "event_id": "evt-0ca4393c430997d1dacfbdd6", "kind": "unclassified_tcp", "frame_number": 81271, "timestamp_epoch": "1634918199.354095000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb140000005354415254544c530d0a" } }, { "event_id": "evt-04d5f1a6e2db72f2f197a5e0", "kind": "unclassified_tcp", "frame_number": 81275, "timestamp_epoch": "1634918199.394994000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb2200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-77cfbd1dbbcb6d74684bde7e", "kind": "unclassified_tcp", "frame_number": 81278, "timestamp_epoch": "1634918199.637356000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a0d469767e94015960800442", "kind": "unclassified_tcp", "frame_number": 81283, "timestamp_epoch": "1634918199.685529000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-38694e79fadd133d1c491bc7", "kind": "unclassified_tcp", "frame_number": 81288, "timestamp_epoch": "1634918199.689421000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb3d08000000b0a3eb7d67baeda283d0181dfc1dc4b94c720ab687f73f670ad19fc9d748fa8502206cc1f716eb5b5c0051a241f77cb622ba7a43a3f6330fd6f70194ec3d6e68278d0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001797ffe8d08000004030047304502205f86f10d80983aa5a8b3ad22a0d230c40f5579cc4d06a332280f75f248c28e8a022100c628c55a030d3fbc80410132161b9a19178d461808f1d91272ad05347166c9ea00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001797ffe8ca0000004030046304402200a40c193178b42e3ea39da8f7b6e1750171b4d6f7ccd771b0855f754fa120041022037b433e10c57276ddc5e701692d9cc2bd27fb05c644952bb42ba9c4306e1cbe1300d06092a864886f70d01010b05000382010100c97e9e883dd502ccb749e54811a1a0053ab240feb984674241e0e95ce7499a122bb2513ea6661dc40f5ea7077011dc2333a96b301d25478cbead01f6f9caefab89a74b169084d6c08aa039b15191622cf12ebfe7d8292f9cd0fe927ceafd174b333a7599ceed47ae978ce03c207613cfd2e4da4e4115a8331545474af97d6708ae3e3e29acbd7007d10075174cad59282d8da261aa6acd0ecab044cf77ef586b496695b56ecfb77f8a98def4ab877c613e8ac229a286bf8ff4f57cc5686733bdf4ac11c1f0135362dc261b9f220d74e94dcfc6c58afae1a73ccb5f35dee989ab3dbeba9c6691ca54f7f0215544e7ca6dadd8e8196c1093faf0c6841a4278909100048f3082048b30820373a00302010202100c8ee0c90d6a89158804061ee241f9af300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204732301e170d3133303830313132303030305a170d3238303830313132303030305a3044310b300906035504061302555331153013060355040a130c446967694365727420496e63311e301c06035504031315446967694365727420476c6f62616c20434120473230820122300d06092a864886f70d01010105000382010f003082010a0282010100d3487cbef305865d5bd52f854e4be086ad15ac61cf5baf3e6a0a47fb9a7691600b8a6bcdcfdc577e60980be454d956ed21cc02b65a815f976aee022f2327b86dd4b0e70602780b1f5ca99936febbac1b05fa57cd81104067d6308b5835d49661bed08c7a979f1af922e6142fa9c6e8011fabf8260fac8e4d2c32391d819b8d1c65b21cdb61a8892f60e7ebc24a18c46f2ae9109209ed17d1002be67def0489144e33a1b20f97879fb3a0cd2fbc2cecb88368313d1fd54a9010190b8195d6297651f93676d0b7097a384ad76f8cbf137c39edbaae90fc95f77b7809365e74931e25f0ffd4adae686bc6ff0fd535f1556e4849f8f8b8ef88f8f15e1177aadf02b30203010001a382015a3082015630120603551d130101ff040830060101ff020100300e0603551d0f0101ff040403020186303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d307b0603551d1f047430723037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c3037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7447322e63726c303d0603551d200436303430320604551d2000302a302806082b06010505070201161c68747470733a2f2f7777772e64696769636572742e636f6d2f435053301d0603551d0e04160414246e2b2dd06a925151256901aa9a47a689e74020301f0603551d23" } }, { "event_id": "evt-03726c581a3a2beabfc8bed7", "kind": "unclassified_tcp", "frame_number": 81289, "timestamp_epoch": "1634918199.689436000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9de2dbba2c4fb85a37f54c28", "kind": "unclassified_tcp", "frame_number": 81292, "timestamp_epoch": "1634918200.485134000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb8800000016030300461000004241047d6172765f55a720298cf5968d1df2b50dac706f2a61fa024d4d49ec12b16fb0863068a25835bf25f713bddb243e69d2ad2db1f23e200696d5b00b775eacc461140303000101160303002800000000000000003da25963ef116f3e807adf3e012dca7e3c59f4d54bad1ffe00e0ee9fd864a8c5" } }, { "event_id": "evt-26eea4f4c2a721f089b28250", "kind": "unclassified_tcp", "frame_number": 81297, "timestamp_epoch": "1634918200.531157000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb10000000140303000101" } }, { "event_id": "evt-fbfe632424db7cca4086a088", "kind": "unclassified_tcp", "frame_number": 81301, "timestamp_epoch": "1634918200.563221000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb370000001603030028010000000000000028e87a4030c8fcfd22803e5999fe708b098df28aba111becea25c2e03f3e24a1" } }, { "event_id": "evt-d046b40cbb46d9cd2aa2ed50", "kind": "unclassified_tcp", "frame_number": 81303, "timestamp_epoch": "1634918200.967743000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb3700000017030300280000000000000001216140c072e13e8d5470f93ba1bb8ab50bdc952bd64ae638d7e872330c552ebc" } }, { "event_id": "evt-59d978c2e9734022a1b66185", "kind": "unclassified_tcp", "frame_number": 81308, "timestamp_epoch": "1634918201.037884000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdbce00000017030300bf01000000000000015913ba9b51b2aef1da0f15920eb01a38443ec5913536209c10eaed6c05249449007814276c5c56dde4aa52a5b7e9d440db6144b2ade7d623a2386344f59901bf2b784337688b62bfd66ae32d62368a9a7b127f87cf5ad5e238a1acdfbaeffcee35419f59121516bd302b57652bebc6a078371aaf490d89471a924cb373d3ce4e9128ac4728a1ec671b03c5858d6a1c589a2fe1bc3f2730d5d0c22169e5eac7d778a6b996045f25b82680c6e24861a25e196e7fb1cebf47" } }, { "event_id": "evt-7f910314062fb9aa9b3baac5", "kind": "unclassified_tcp", "frame_number": 81311, "timestamp_epoch": "1634918201.923451000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb3300000017030300240000000000000002ababb72f2dd0d2287392f209f6ba968439695d005f2ca04f11b48bc4" } }, { "event_id": "evt-34fd9ad1d5ffe4971e247a71", "kind": "unclassified_tcp", "frame_number": 81316, "timestamp_epoch": "1634918202.016522000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb39000000170303002a0100000000000002c104908d68c9c0ece712b8b0d627b7fd53f832e0c14e08d7c49af2e75e5034897557" } }, { "event_id": "evt-6a1e49b49ff44eacc3604112", "kind": "unclassified_tcp", "frame_number": 81319, "timestamp_epoch": "1634918202.738451000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb49000000170303003a00000000000000031b5378dd5ea12238103de70a00e02de412a498a8178b239cb8708c68cb00c9e37be6b8c6dca0233158ae20e6a3c9055d0bab" } }, { "event_id": "evt-7596c4e9955adbce4e4caa5a", "kind": "unclassified_tcp", "frame_number": 81324, "timestamp_epoch": "1634918202.803755000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb39000000170303002a010000000000000390df3225ad9881fc7e8e68e0fb8f18329dfd74b2d5252876254bdc8ba56581c465df" } }, { "event_id": "evt-deb2a4d8a5c78711965d5e75", "kind": "unclassified_tcp", "frame_number": 81327, "timestamp_epoch": "1634918203.142322000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb39000000170303002a000000000000000428f3a5e0e2add40de60bf9548cc49cd9a3b26d9d38398e3f219c7c013f64e705b01c" } }, { "event_id": "evt-cfbfaea551dda64ea1ae9f64", "kind": "unclassified_tcp", "frame_number": 81332, "timestamp_epoch": "1634918203.192997000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb57000000170303004801000000000000040fe9ea069c01b4b43a207efb78b3d7c99c5691689b77a9347a6af6452ebdfeb51cd7bb0ec1e828935323d6708da85624917ea86567a2ab2c48969b7fdf03a5a8" } }, { "event_id": "evt-803151843b0368910ab41f6a", "kind": "unclassified_tcp", "frame_number": 81335, "timestamp_epoch": "1634918203.670887000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb2a000000170303001b000000000000000554e522884a29bc2b64943df538d41b6f95be26" } }, { "event_id": "evt-93cce487ddf21163b5aea755", "kind": "unclassified_tcp", "frame_number": 81339, "timestamp_epoch": "1634918203.716835000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb4100000017030300320100000000000005e24cc8e4e38c39b45d1323cdce6f489931dde17b267ca6b609286a80c916336a5314113640ddf70c48ec" } }, { "event_id": "evt-87ea7cb80edd0c52ce1c6a3e", "kind": "unclassified_tcp", "frame_number": 81342, "timestamp_epoch": "1634918204.031183000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb2d000000170303001e000000000000000671889181f64b2256cabcaed11d54f96909fb2b466822" } }, { "event_id": "evt-2ac95f06be8c63fa318d4aac", "kind": "unclassified_tcp", "frame_number": 81345, "timestamp_epoch": "1634918204.046901000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d591d7987ca1c12e31d8ccf0", "kind": "unclassified_tcp", "frame_number": 81350, "timestamp_epoch": "1634918204.182907000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb62000000170303005301000000000000065c7a794a0603fbb6073187e2182b76901c9b62b29c63dc82086fa393f95200e2f10c51897d91b1c0ed1e4de7fbfc918cfa075c7bed7fcc24bb82a793424725c4bef156cf3c9ab5192d03a2" } }, { "event_id": "evt-a8079890cdb4c434f8453bdc", "kind": "unclassified_tcp", "frame_number": 81354, "timestamp_epoch": "1634918204.183394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701006bdb0a000000" } }, { "event_id": "evt-f21b954eaad302b4ac527a47", "kind": "unclassified_tcp", "frame_number": 81356, "timestamp_epoch": "1634918204.518278000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006bdb29000000150303001a0000000000000007834f269095297ff975f83244ccd883bc8b90" } }, { "event_id": "evt-4f44e2a6a428d81e0efb3cf4", "kind": "unclassified_tcp", "frame_number": 81358, "timestamp_epoch": "1634918204.710503000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701006bdb0a000000" } }, { "event_id": "evt-80fb92859c48e36b8fb20127", "kind": "unclassified_tcp", "frame_number": 81360, "timestamp_epoch": "1634918206.013718000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100519f0c000000197b" } }, { "event_id": "evt-c041710daa38c648f4ed4e5c", "kind": "unclassified_tcp", "frame_number": 81362, "timestamp_epoch": "1634918206.196180000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100519f0e00000005020002" } }, { "event_id": "evt-450f4fa6484fbea1cad990b2", "kind": "unclassified_tcp", "frame_number": 81363, "timestamp_epoch": "1634918206.196708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100519f0c0000000502" } }, { "event_id": "evt-622fc52c1dd08e33790267c3", "kind": "unclassified_tcp", "frame_number": 81365, "timestamp_epoch": "1634918206.438083000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100519f20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-3560335c80a89f0249635b40", "kind": "unclassified_tcp", "frame_number": 81366, "timestamp_epoch": "1634918206.438637000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100519f0c0000000100" } }, { "event_id": "evt-5ba8dc1c0722104a25f0b0ef", "kind": "unclassified_tcp", "frame_number": 81368, "timestamp_epoch": "1634918206.809122000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100519f2700000005010003166d61696c2e74697265747261636b737573612e636f6d0019" } }, { "event_id": "evt-ab10a7bc2516dfc8e5928130", "kind": "unclassified_tcp", "frame_number": 81382, "timestamp_epoch": "1634918209.415039000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100519f1400000005050001000000000000" } }, { "event_id": "evt-d5950503e101da02aed50062", "kind": "unclassified_tcp", "frame_number": 81384, "timestamp_epoch": "1634918209.768769000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100519f0a000000" } }, { "event_id": "evt-a00d1b89e4ba088e57a6afce", "kind": "unclassified_tcp", "frame_number": 81386, "timestamp_epoch": "1634918210.047155000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a3b5e2bc50f0234c20dd395f", "kind": "unclassified_tcp", "frame_number": 81396, "timestamp_epoch": "1634918215.061624000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-40806c7bacb2b10406350eb0", "kind": "unclassified_tcp", "frame_number": 81399, "timestamp_epoch": "1634918216.858004000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-90854ef2286e35ae4a9a11ab", "kind": "unclassified_tcp", "frame_number": 81401, "timestamp_epoch": "1634918220.092812000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-824e98219f1c642ca3a17a32", "kind": "unclassified_tcp", "frame_number": 81407, "timestamp_epoch": "1634918225.157052000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-57258c3159e3b6e3b1f0698a", "kind": "unclassified_tcp", "frame_number": 81409, "timestamp_epoch": "1634918230.185920000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d440f8126fab14fdaff46a20", "kind": "unclassified_tcp", "frame_number": 81414, "timestamp_epoch": "1634918235.249421000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c2970e352f161511496bad9f", "kind": "unclassified_tcp", "frame_number": 81416, "timestamp_epoch": "1634918240.297501000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-34825491f4e1375e45ba332c", "kind": "unclassified_tcp", "frame_number": 81420, "timestamp_epoch": "1634918245.298042000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0bcb3b61ec063e8ba371e171", "kind": "unclassified_tcp", "frame_number": 81431, "timestamp_epoch": "1634918251.297358000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-62158e6373724e668c51b2ce", "kind": "unclassified_tcp", "frame_number": 81433, "timestamp_epoch": "1634918254.349496000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010067940c000000197b" } }, { "event_id": "evt-4efabd9c4aaa269fab446899", "kind": "unclassified_tcp", "frame_number": 81438, "timestamp_epoch": "1634918254.532984000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067940e00000005020002" } }, { "event_id": "evt-00167b0d489083dc6b7b8f4a", "kind": "unclassified_tcp", "frame_number": 81439, "timestamp_epoch": "1634918254.534389000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010067940c0000000502" } }, { "event_id": "evt-bc81ff4a51e174182af92a79", "kind": "unclassified_tcp", "frame_number": 81441, "timestamp_epoch": "1634918254.769958000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-916119b0ed43031737b8036f", "kind": "unclassified_tcp", "frame_number": 81442, "timestamp_epoch": "1634918254.770497000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010067940c0000000100" } }, { "event_id": "evt-6d864bd0a85263f5745b0ed9", "kind": "unclassified_tcp", "frame_number": 81444, "timestamp_epoch": "1634918255.117918000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-0a34dbe25686e57c9a786d9b", "kind": "unclassified_tcp", "frame_number": 81451, "timestamp_epoch": "1634918255.202601000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679414000000050000010a0a169cc410" } }, { "event_id": "evt-eadb7d909baa3ffa1f525e64", "kind": "unclassified_tcp", "frame_number": 81454, "timestamp_epoch": "1634918255.243729000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067947900000032323020534e36505230384341303032342e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35373a3334202b303030300d0a" } }, { "event_id": "evt-bdac1484a7b3a10a04e6b809", "kind": "unclassified_tcp", "frame_number": 81457, "timestamp_epoch": "1634918255.658967000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067941a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1d52bc9a40d7217c6b950232", "kind": "unclassified_tcp", "frame_number": 81461, "timestamp_epoch": "1634918255.706749000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794d80000003235302d534e36505230384341303032342e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-d2a17397e66129005c3fc0a0", "kind": "unclassified_tcp", "frame_number": 81464, "timestamp_epoch": "1634918255.994672000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794140000005354415254544c530d0a" } }, { "event_id": "evt-a74e7fc50e4fe3514b1d5a38", "kind": "unclassified_tcp", "frame_number": 81469, "timestamp_epoch": "1634918256.063470000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067942700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-2eb2bbf1237007540bc315f8", "kind": "unclassified_tcp", "frame_number": 81474, "timestamp_epoch": "1634918256.298325000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-20213b15716c88ded251d3d3", "kind": "unclassified_tcp", "frame_number": 81476, "timestamp_epoch": "1634918256.407989000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794160100001603010107010001030303cf81e1702cd06c76478115917877231aac0b4cc8b551f124da4a666339469c9220d7d2c795ad9521e4f3cf6cb821a867b1506c8627157157c3bc151cb29927ca150026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e6f75746c6f6f6b2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d002064cc11a8987583bdcc1de1bcc9984d87799f01b82cc9c3589c7ac2f2e00a312c" } }, { "event_id": "evt-fe8e7df3691855a5610a2a37", "kind": "unclassified_tcp", "frame_number": 81484, "timestamp_epoch": "1634918256.462328000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4fb566188930315185234499", "kind": "unclassified_tcp", "frame_number": 81486, "timestamp_epoch": "1634918256.462488000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794cd0b0000687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303fa03da03b8639687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312d67312e63726c303e0603551d20043730353033060667810c0102023029302706082b06010505070201161b687474703a2f2f7777772e64696769636572742e636f6d2f435053307c06082b060105050701010470306e302506082b060105050730018619687474703a2f2f6f637370782e64696769636572742e636f6d304506082b060105050730028639687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274436c6f7564536572766963657343412d312e637274300c0603551d130101ff0402300030820104060a2b06010401d6790204020481f50481f200f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017727dbc5fd0000040300473045022100b20a8e2f6a32ec9db949a1f3fc0a4accacbab16e01cb957dcc24237385dd4de9022035fe9956b1ffcd9e91a08b8090954d3baf712a2ff7404deb8d1afa2544a0f5ba0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017727dbc6370000040300473045022100e570d5542a2876b9873aa1867e6b28081d5ce48c5e40ee4dff34014546f0dc00022015ac290f67bbcf21f557219718e525cd9d3c20ccaff097d5516bfdcbcddebe69300d06092a864886f70d01010b0500038201010070a0121f388a06a06496ec9dd483e084b97df1f1af07100bc55219e05522fc81142fb9ff94526406254cb4b2e4eb6f5ea6588fcb172a56a9a9c42b6f67fdbd44a103a86e9f973593d2ec5664b6704ff2589e63140dbeb219b43222e92c046f1f7ab712a2f5f37b24e39f770bbba18592689fd9ef260f6193658dfb74eb977a5f706f55fbe3a50a0b484e5a8d5ee69e52033514b094feeae925d894518640d8a329c9aaf0b5c88fce224a826425f6853b1c1bfc1939b61883d094afbc2f1406d53851eb5d648727a4e2b1aad5881ec373e669ab9cb1e0c5102c3cadb13084e8bdba63c34089347b90343a7684ec7b9d340b1ab7d57dfc9c0339cdbd322a984d750004ea308204e6308203cea00302010202100f171a48c6f223809218cd2ed6ddc0e8300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3230303932353030303030305a170d3330303932343233353935395a304b310b300906035504061302555331153013060355040a130c446967694365727420496e63312530230603550403131c446967694365727420436c6f75642053657276696365732043412d3130820122300d06092a864886f70d01010105000382010f003082010a0282010100d1adf6871479542757c72f05683c9b3ccd67ec45102c84f2a447c4d953424509bbe4fe33c1d7bc462fd18be6b7b567787c6a70befdb8e5b654cf4c5eacb822747355290873c864f7d095090e798350bf5ff5d4cc9b42618e8004b941aace4e12999bacd6c5be5b0273b516a4ab7162d498ea403985a6f6bb2fe8e787c28bf69c32cdecf83ebf89e77423824bdaeabf73a6253cfdbfa9e568fff830a260c73b2ea3f3c57f3b3bfd0f31a17c740fd0bf14c4bd68f1a5e76ba7df9b007e46254ee6e813f3f606c7d46f0b2720425d61bc3f60d27c9672c97cb08bfff948055304fa22afb7cd515d6ddd907403f0334ff4c7c03e564647af73208bdc7a3ea3f25dff0203010001a38201ae308201aa301d0603551d0e04160414dd51d0a23173a973ae8fb4017e5d" } }, { "event_id": "evt-bcc7c6e21ebd3e87fd32b04f", "kind": "unclassified_tcp", "frame_number": 81487, "timestamp_epoch": "1634918256.462500000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032313030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032313030333330365aa011180f32303231313032373233343830365a300d06092a864886f70d01010b0500038201010038d81d53fb061c4e82a09dde79fc0078f46ac616442bf6bfbf953e6311ad5c454a94775b60189ccef4275ae984954abadf1975242cfc19de3c18f7b8250e24226ce54d4809d4c454ad082c35732f1bc3190c9773efa7c3a5425e34abda2e95c20241753916d8fdb398351a4f7f47a7b119adfb2c49f64754c51e92729f276616eb4edcc11af740aed3b07066a9ece1f3fac5fa38bd2f33e1872c6688fcce5a99a773564c9b554115a4d9f59b840e20542d489895a9a9f46423bc98219222aaf9094c41bca42ab388a21700c4dd6e4630543f30056f8327588e2170d8d545e5aba6f9e23fc5ff8a573b2a12be85693508fc7576695f8235bcb17ef66048060ae40c00016903001861045af9fa2551c98a340b03834e0510373a1c1dc36bc39fc81b15fc6ab6cd748b3985d623dfdc31abf7b2175749ff5ccda28fd45e2b3c6afde66446aeec9f74768505ea9d47d48fefd7eab6037c3cacd3e6feb394a18d23c213c426de895de73346080401006cd02b91f4af06eb1583c75aeb7b3afadde8167839b4b872be04ba5bb08d4c2669d24eb6310ddfc7e48e9f23687e25456fae487f7afc9fa605e96fc97ef9a466334c1752e9a8d8727a42091b989c4c12a5c207fcf8fcd5e58e454463fcbfa05b7154a56618a222700541cf581a6451ce6ad2a1feec404ff2be6d820ff88faa3669b3e8ce199c2e179a344ca99990d5ceb16a7bd401344ae491d9b18628b2f1b682f0017da73ab0a478911f8b2662ea62cf3af064c85241d5ea5150da381ac4c89c0922" } }, { "event_id": "evt-3aeb16753bc603c0b51b5f18", "kind": "unclassified_tcp", "frame_number": 81488, "timestamp_epoch": "1634918256.462507000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "f23f70033439d8ee80d8779780cfd6be4cf766bc5c417173e7f9c23140ac2f4707af5a8c58f75ceafe001074e4891839fb109f71294318e715d1c240de0d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-3f7b8be105d13cd8a616a2df", "kind": "unclassified_tcp", "frame_number": 81492, "timestamp_epoch": "1634918256.940289000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794b400000016030300070b000003000000160303006610000062610485d8c415f2dcd42b1944cf065767a9f3972a81d38637c17a9e407ef6af6ad9965d5d2938656ab318123d971aea6b6ab3f29e44dbe5c57dc6fd40a267030d4e5254289d518ee31ed84cab0031b0c1e1413398ce65d1f6a3d12f4b4f2437fd967a14030300010116030300280000000000000000505af593ceb14e9836e9738f705aabeaa8d57e85763ed68469b1abed023bcfb9" } }, { "event_id": "evt-8ac26e3d845e606be02e7806", "kind": "unclassified_tcp", "frame_number": 81497, "timestamp_epoch": "1634918257.006740000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067943d000000140303000101160303002800000000000000004b0dd0e9f73ee20bf9ed3cada0d393a5e8fe726288b74bc9025743c607b0d3e9" } }, { "event_id": "evt-5aebf79da626ab02fb800c63", "kind": "unclassified_tcp", "frame_number": 81500, "timestamp_epoch": "1634918257.829978000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794370000001703030028000000000000000122fa0497a0005822a74fdda5bad9874af472c02de41ede1a0a70106c5e54bee8" } }, { "event_id": "evt-aa2e2b2e78909b54947f825b", "kind": "unclassified_tcp", "frame_number": 81505, "timestamp_epoch": "1634918257.886030000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f5913aa5c9934cfca6af90cd", "kind": "unclassified_tcp", "frame_number": 81508, "timestamp_epoch": "1634918258.750074000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067943300000017030300240000000000000002d0e3acf9f69b2bdbd4a337f6a41726a01798658dc153400360eb514f" } }, { "event_id": "evt-175c872d7c9ed29ffc1899d7", "kind": "unclassified_tcp", "frame_number": 81513, "timestamp_epoch": "1634918258.804866000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679439000000170303002a00000000000000024dd33b771d0dcf97a763a4dd2f569743b7db6a9b465bb917f52105e1ebd95f61db52" } }, { "event_id": "evt-59b6f76685ae7e32bc2b53bf", "kind": "unclassified_tcp", "frame_number": 81516, "timestamp_epoch": "1634918259.183004000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067944d000000170303003e0000000000000003571f5934305a8154b14693890111c9debc9d080f9563be01eeb2eb25577ecaef643c0543f5326d6938aff8f888b177b787e335cd69c2" } }, { "event_id": "evt-5e3d2495f32476b9a7a35389", "kind": "unclassified_tcp", "frame_number": 81520, "timestamp_epoch": "1634918259.228927000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679439000000170303002a00000000000000032aeb68e822844a475b5b9b9634345929ff996e3852f43b08ef266f2105410376ae43" } }, { "event_id": "evt-8664995023b71f1cf9b8406f", "kind": "unclassified_tcp", "frame_number": 81523, "timestamp_epoch": "1634918259.705590000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679439000000170303002a0000000000000004a7535adddca587478441f16e14cb62da1499780f8398bb466eece336748b7c03d0fe" } }, { "event_id": "evt-d9fc10349616dedf088fbcd9", "kind": "unclassified_tcp", "frame_number": 81527, "timestamp_epoch": "1634918261.293348000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c66f09c9f08971f1918dd8fa", "kind": "unclassified_tcp", "frame_number": 81530, "timestamp_epoch": "1634918265.909835000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794a000000017030300910000000000000004977e859f24ae971469296c2acdac77fdaa660b1132a03880d77e5e8fc45e4865de60804160497236110fd09f76c05b43f9b33867bdc21cb07040ef93e5b732f6f1c4bc92fa2bfb4b8920a8207f5de948d21512b8bc47f55df28c5b85a47f94bb96d23ac50b10eaeba14f18e9d6efe6fbc1dbca6b68825be6055ad541c272e835345373525112532cf3" } }, { "event_id": "evt-90bb3fbcab32b438a23ad34d", "kind": "unclassified_tcp", "frame_number": 81533, "timestamp_epoch": "1634918266.159873000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067942a000000170303001b0000000000000005e39ef7212c7f0b78f11225a2b525126693ca9f" } }, { "event_id": "evt-20a620b4202f1c35635328ab", "kind": "unclassified_tcp", "frame_number": 81537, "timestamp_epoch": "1634918267.287233000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c02bc510d7927ff3c25a09bd", "kind": "unclassified_tcp", "frame_number": 81539, "timestamp_epoch": "1634918267.649018000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020048df0c000000197b" } }, { "event_id": "evt-46e5231b685132996d594e0f", "kind": "unclassified_tcp", "frame_number": 81541, "timestamp_epoch": "1634918267.830604000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df0e00000005020002" } }, { "event_id": "evt-2bfbe09286bbc0453cbb0c1f", "kind": "unclassified_tcp", "frame_number": 81542, "timestamp_epoch": "1634918267.831129000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020048df0c0000000502" } }, { "event_id": "evt-6660302712f1211e6a1af6c4", "kind": "unclassified_tcp", "frame_number": 81544, "timestamp_epoch": "1634918268.058291000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-26dd48d38ca339c6cbd71221", "kind": "unclassified_tcp", "frame_number": 81545, "timestamp_epoch": "1634918268.058864000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020048df0c0000000100" } }, { "event_id": "evt-0f65270f7786ec433aa569b5", "kind": "unclassified_tcp", "frame_number": 81547, "timestamp_epoch": "1634918268.678956000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df2600000005010003156d61696c2e6272696e732d642d657665696c2e66720019" } }, { "event_id": "evt-d7d7a96d2a8ec18587657d39", "kind": "unclassified_tcp", "frame_number": 81555, "timestamp_epoch": "1634918268.995209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df14000000050000010a0a169cc411" } }, { "event_id": "evt-ee3874685e5b6a93e23b95f6", "kind": "unclassified_tcp", "frame_number": 81558, "timestamp_epoch": "1634918269.152776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df34000000323230204741524d2d393947303033204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-7d4c5c97cf045ddaa52070f6", "kind": "unclassified_tcp", "frame_number": 81561, "timestamp_epoch": "1634918269.408323000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300814b0c000000197b" } }, { "event_id": "evt-44215515dce85adb31839159", "kind": "unclassified_tcp", "frame_number": 81563, "timestamp_epoch": "1634918269.581540000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b0e000000050200020407020048df1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8250030303a038d5390431b3", "kind": "unclassified_tcp", "frame_number": 81564, "timestamp_epoch": "1634918269.581917000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300814b0c0000000502" } }, { "event_id": "evt-8f1ad0385a317ce67d835fea", "kind": "unclassified_tcp", "frame_number": 81569, "timestamp_epoch": "1634918269.764987000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-a1f823b0732ea0fe8250e42c", "kind": "unclassified_tcp", "frame_number": 81572, "timestamp_epoch": "1634918269.836816000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-08fa2f2154b3d8c0ee09b8bc", "kind": "unclassified_tcp", "frame_number": 81573, "timestamp_epoch": "1634918269.837359000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300814b0c0000000100" } }, { "event_id": "evt-97ff986e6ebff41cbad74097", "kind": "unclassified_tcp", "frame_number": 81575, "timestamp_epoch": "1634918270.160630000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df140000005354415254544c530d0a" } }, { "event_id": "evt-696f74c678d358f8757e7d3d", "kind": "unclassified_tcp", "frame_number": 81580, "timestamp_epoch": "1634918270.334935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-5ece964188ea71acfed3235e", "kind": "unclassified_tcp", "frame_number": 81582, "timestamp_epoch": "1634918270.339885000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b2600000005010003156d61696c2e6272696e732d642d657665696c2e66720019" } }, { "event_id": "evt-9608698a9234354eb2f7059b", "kind": "unclassified_tcp", "frame_number": 81588, "timestamp_epoch": "1634918270.488622000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b14000000050000010a0a169cc412" } }, { "event_id": "evt-0d63acc7321f43b18d46b327", "kind": "unclassified_tcp", "frame_number": 81591, "timestamp_epoch": "1634918270.628863000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b34000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-7fe652fd058eae7f52ab1089", "kind": "unclassified_tcp", "frame_number": 81594, "timestamp_epoch": "1634918270.690297000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f85bfb4e5e6e68005e7df586", "kind": "unclassified_tcp", "frame_number": 81599, "timestamp_epoch": "1634918270.872051000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df1205000016030312330200005103036172df7e0182d38a8c8d30b9528b2e0b9d271aea6e02f478ffba17e273a8744920620c0000a739a14fd471007d09d5f1fc48d934d7b4901473b62ead25eaef4762c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d11" } }, { "event_id": "evt-c472d261353a4ee8ff7e12bb", "kind": "unclassified_tcp", "frame_number": 81605, "timestamp_epoch": "1634918270.875254000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5fa36c7123c418fb6f00f5d7", "kind": "unclassified_tcp", "frame_number": 81608, "timestamp_epoch": "1634918270.875575000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-df46ee2b0cd5c947d22c5a5f", "kind": "unclassified_tcp", "frame_number": 81609, "timestamp_epoch": "1634918270.875584000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-433373fae1bfa2f1049a69ac", "kind": "unclassified_tcp", "frame_number": 81612, "timestamp_epoch": "1634918271.069622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8d46a91206327124e6c7b120", "kind": "unclassified_tcp", "frame_number": 81617, "timestamp_epoch": "1634918271.202235000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100679475000000170303006600000000000000058beb0ad30de2cbdcd2e42f07c7c99c55a4e1cc115c13d76967b3bcf4caf35bae19242ad15977c0fe8aa91aa0b6e24bb871201780254eff51cfe78394d1ab5db92344d3d7af26c4e884ab1d6e1df384a417a14f2a765893459abc32c75f66" } }, { "event_id": "evt-5fba0589e2e8ce6f695a0adb", "kind": "unclassified_tcp", "frame_number": 81622, "timestamp_epoch": "1634918271.222315000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-598e3b0e62860a9f63da008b", "kind": "unclassified_tcp", "frame_number": 81626, "timestamp_epoch": "1634918271.547690000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048dfe4000000160303008a1000008685040148b356e7dcc3e5caf66bbd59411c83aad6ffc112f2b6e479621331964d5334395316e2f120b723c4af272c92afac38bad91d030d3a82da52484120405426a9dc720038466d728ec8fa5eb7fe6881c5b989d9b5ccd52ba90d565183e81954cd9aeea65a63f33c0554fb9c87695e0aaca6176919d0c76961d23faec30d928abca0de2cac14030300010116030300403575ec8294f0767b0306deb195b434ba2702f5074451a59ce26e56506ee5dd43ca897d7a9fb580aa2d204940f7270b86f231718241e355a6f03d737acb934822" } }, { "event_id": "evt-1caa2c60027db3a2e5c5b2fa", "kind": "unclassified_tcp", "frame_number": 81631, "timestamp_epoch": "1634918271.718624000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df550000001403030001011603030040fa003e5c13dc8732e3353ff30e9fec9b5fb377276d73443846435e0e8b6aa48d589bef66a4a14223193a8c505a7f481444162aafbd3db48865551d3b9dba3379" } }, { "event_id": "evt-74099356e5db51f0af111a8f", "kind": "unclassified_tcp", "frame_number": 81633, "timestamp_epoch": "1634918271.740858000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010067942d000000170303001e0000000000000006a6aa9b2f24b2ca1834afd9ed0e092cff81d7fa4d33f504070300814b140000005354415254544c530d0a" } }, { "event_id": "evt-fc80ea377651c7677f6a23b0", "kind": "unclassified_tcp", "frame_number": 81642, "timestamp_epoch": "1634918271.797338000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701006794570000001703030048000000000000000696fc3ea67d4f25cdb3ec6672ee3a14de0a239a214aab84a5e2f40ea978ac93d3a707a59a01011ca177bedee0c6d187a9377e6560cbf4f5df5b33f21863cf1c8d" } }, { "event_id": "evt-83c8968aa09138ceef007dc4", "kind": "unclassified_tcp", "frame_number": 81646, "timestamp_epoch": "1634918271.797659000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010067940a000000" } }, { "event_id": "evt-583c8522c320dafb863d3199", "kind": "unclassified_tcp", "frame_number": 81649, "timestamp_epoch": "1634918271.893027000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-e82c94e371e2f61e9cb038a3", "kind": "unclassified_tcp", "frame_number": 81652, "timestamp_epoch": "1634918272.000332000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df4f00000017030300400817966364fedcef30796cfe277359693d96512f3ee3459ab95eabf704b6b36b7deb7976ec2022d96cca3506fb043f85bddda9b29d391318bc9d9d3f8c61cd78" } }, { "event_id": "evt-fc89e9cf79b4b3c311e99a39", "kind": "unclassified_tcp", "frame_number": 81657, "timestamp_epoch": "1634918272.167685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ee9d34d68dd2a5aca24c5316", "kind": "unclassified_tcp", "frame_number": 81660, "timestamp_epoch": "1634918272.283839000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4d972362b16614bb3a725296", "kind": "unclassified_tcp", "frame_number": 81662, "timestamp_epoch": "1634918272.315491000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b1b010000160301010c01000108030377fca273a4dd0b30472563c2b026fd9566cd1999d3db90a812b00d038eefbe9120b73fed575c562889ebd0a94b146a73f459952c5c3adf308fa53a16faa484527a0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000990000001a00180000156d61696c2e6272696e732d642d657665696c2e6672000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00208f598a23d12af0e24e55f55c286115c3db6c101ce465ede6a7ac8b08a24be716" } }, { "event_id": "evt-7c3d41ffba7ce8b3c88aea55", "kind": "unclassified_tcp", "frame_number": 81672, "timestamp_epoch": "1634918272.491093000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d1b7f95c4f8cb66b1409e22a", "kind": "unclassified_tcp", "frame_number": 81673, "timestamp_epoch": "1634918272.491105000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-9df7073bb270927b1e666f11", "kind": "unclassified_tcp", "frame_number": 81674, "timestamp_epoch": "1634918272.491113000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d030019850401329f051f5373dc833167f3af43f87f270e746f9c4c5e56b808e6cfb78bfa3d3149bc49da435e26584a5ae1f0b54beef6ed0ab566c7453e5964d2c96680b207eccc01000f4e6a01fbdb69642a6f836fbe104b54" } }, { "event_id": "evt-630e73c0da9425660e19f7e0", "kind": "unclassified_tcp", "frame_number": 81678, "timestamp_epoch": "1634918272.491451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-630bbdc76737fa3c3d2a0afd", "kind": "unclassified_tcp", "frame_number": 81681, "timestamp_epoch": "1634918272.865517000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814be4000000160303008a1000008685040188679db56872e02b984b83f0b7c8eab20ed78fa28d272a55ecc3e31e9250953bb5d3ff560686077d126f64d0bfacba3408e084377ca54fa11ed1b829e0346764fb00af0f9ae4fd3a06afe050091abe306216f7e15c17114e68a61d2c9f62fa378431629712f4e4b4bd7cd9608498440a2a191424d17f457c63d8cef81f97c16e0c87cb14030300010116030300402e02c0c0b0f8be5141a7c0531e33c33553eb6eb94ac440b8b233bde3a09742a0c3ba3c55cdac6a7ceeaa6947efe502a5ffcd65b1fbad994f2c70aee5c414790c" } }, { "event_id": "evt-9cf5121058004688b45dd049", "kind": "unclassified_tcp", "frame_number": 81686, "timestamp_epoch": "1634918273.030437000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b550000001403030001011603030040d9c26eb058d14e4093985f0aff2da72ff3c6777d61d5f3ab9775a4455a62429dcf8753200da8c11769009d0b1ceb48db4e405836e5078832b9a2448729eaaf83" } }, { "event_id": "evt-88fd075cdcd0d6c6b9555406", "kind": "unclassified_tcp", "frame_number": 81689, "timestamp_epoch": "1634918273.275764000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b4f00000017030300402476d27acc43338c84dbfcdda6ae50f94fcf2adb40eef5da96d68b1588f0076d676b9566735b847ec2f501713c2a25bf8a5bc1b0c33bcc8b0253b00b2009e374" } }, { "event_id": "evt-491d25bfe14fa1cbd789b5ac", "kind": "unclassified_tcp", "frame_number": 81696, "timestamp_epoch": "1634918273.418230000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bde6f15d60348a955f291522", "kind": "unclassified_tcp", "frame_number": 81698, "timestamp_epoch": "1634918273.447565000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df4f0000001703030040367964d7c34ddca8ec68332878bf9afee2bfbd08bb6f64a42a524e2ab1c6695166d3e5e60db857a94968c9d8a691fd489144bcdb9e3259366353beebb452df70" } }, { "event_id": "evt-df125110572db18e11dadf2d", "kind": "unclassified_tcp", "frame_number": 81703, "timestamp_epoch": "1634918273.600299000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df4f0000001703030040ff8423b92a6d13a3ab9e4f83dd0d85d5e8d28bb04416a4d37a4d2c21f2b7be6c1500b3b4bb90c04f06b80bea0d25efa35298b0b367b6096ab938974de22c68cd" } }, { "event_id": "evt-6df70a830068a7a0985be430", "kind": "unclassified_tcp", "frame_number": 81706, "timestamp_epoch": "1634918273.836548000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b4f0000001703030040a7ce03c7f16b2411b8e06cba608c8bf7d93417a38816a401f65bc4282a950a8c2452e1b1de491d5060546bae60b168fd982e889b473630ea5c604cc27a8a0dc8" } }, { "event_id": "evt-cba4cddd6e8a03ffe068c656", "kind": "unclassified_tcp", "frame_number": 81711, "timestamp_epoch": "1634918273.984498000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b4f00000017030300403a2fb6a41bf02a90b2ad134b545b4cbd0a5457ba0b20bb2e2211db7d63de8154ec3ca0f334e57b643c4896510ef1b6e68161674816690073cf89c00bf3a657b1" } }, { "event_id": "evt-d0e75bf6cf9dbe7394abb67a", "kind": "unclassified_tcp", "frame_number": 81713, "timestamp_epoch": "1634918274.016463000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df5f00000017030300507ed6092d3b2fefed5b040db997a658f4e7e4b3c9d8a0b29cd1bc816459392089fbb68c4a798a2938973e3116c47d9919bd38b91bb4cfc4a0ecabbcfcc4753643f38b32ac9cf388da50ccfac397edcb97" } }, { "event_id": "evt-e10a96c5678e5c40918a266b", "kind": "unclassified_tcp", "frame_number": 81719, "timestamp_epoch": "1634918274.163093000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df4f0000001703030040cdc9823f5bf60a0cb0938ec18cb0e3790f734d0fe77f5acb6e8e6e01de7caaeb8c87f94e1d7b6d8745b35d99b3194757a4045fa122fba3cddaa078b14ad582de" } }, { "event_id": "evt-730e725e65e2da98c72957c1", "kind": "unclassified_tcp", "frame_number": 81723, "timestamp_epoch": "1634918275.017181000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b5f0000001703030050d2b4095675f650ea33e24e48cb5b8dbf4862e786c819d521e1553abd7ae93d1ef9f510a158e25b7579db056fe23d47dcb8b71148f7420405f8386df8c025652ae01475ab3432875ec1b1745d260999c40407020048df4f0000001703030040a47140ebdb0fac0bd4d88b3d875bdce9384aa9f35f62f4d5631d2c1ded6cd7644a0b9a12ba71acad716511c04629f8928ec387241d28bd1d460c166de434d7d2" } }, { "event_id": "evt-dd8deac39fafad39b9c40f8a", "kind": "unclassified_tcp", "frame_number": 81730, "timestamp_epoch": "1634918275.189003000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b4f0000001703030040ce6d122791754621a551e110ef71469525a156599efcb4fca3e572c07306919fff1161bb99bd863f9c3b9da2e34685eb8730d6023c9998b66c096fc685cc91b4" } }, { "event_id": "evt-b3509d3b2742f418c6393761", "kind": "unclassified_tcp", "frame_number": 81733, "timestamp_epoch": "1634918275.493459000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b4f0000001703030040a5d2df7b154f6e81c5932af2d2de4a33f639544a60aaccd7b0b0b6982ecc370032ea6f24ebf280348bb51ad4892425feb8b9a2a60eff305307af4df94c691145" } }, { "event_id": "evt-0b2c3e043d8e4613fb42b5a3", "kind": "unclassified_tcp", "frame_number": 81737, "timestamp_epoch": "1634918276.483279000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-eadca34daf3d0ab0060eaa22", "kind": "unclassified_tcp", "frame_number": 81742, "timestamp_epoch": "1634918277.371491000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df5f00000017030300508ae39ee80faa3bb7af346f8339f11d7af8f0330855555b3b752e3b31dc5419c08372c8a3c4e087a053acb0550bd7020b72776f61f26309717b4736115d10f07a884eddb93733ad938376392af9c5143d" } }, { "event_id": "evt-9a775311c99d0c8756982966", "kind": "unclassified_tcp", "frame_number": 81746, "timestamp_epoch": "1634918277.532967000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b5f0000001703030050a5ec5a13a6701e4319d6384356f73f1c3fe486da33e740944bf90fc8d33d09ee56484a0fbd847fdaab496016cd994e3ba9c56b30490bdfa32be81099975407a77bae85f52d739d6a58b02b862b957c36" } }, { "event_id": "evt-156de6f50b0d3e6af2c71a90", "kind": "unclassified_tcp", "frame_number": 81749, "timestamp_epoch": "1634918277.669229000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df3f0000001703030030bd67c8098a61ef8a050e9a56924b43d0d4d807e9bb744a93e7aa39c40807da4a057aceec740158adf0b8a7f459dd50f6" } }, { "event_id": "evt-cfc089c2b7e9724504c2da9f", "kind": "unclassified_tcp", "frame_number": 81753, "timestamp_epoch": "1634918277.853914000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b3f00000017030300303becca78f984fca71be1d803272a3740cfcef8982b8a9d71d33b40bf844506923cc754e5e499d270f69afe479bdc4f93" } }, { "event_id": "evt-37b578e373f09796ebd26804", "kind": "unclassified_tcp", "frame_number": 81757, "timestamp_epoch": "1634918278.280306000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-400d28db5fb5d607819f6c63", "kind": "unclassified_tcp", "frame_number": 81769, "timestamp_epoch": "1634918283.279026000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7c978fc8d671e4df7d3ba982", "kind": "unclassified_tcp", "frame_number": 81771, "timestamp_epoch": "1634918289.277867000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-658700b7d58f3895e1758730", "kind": "unclassified_tcp", "frame_number": 81773, "timestamp_epoch": "1634918294.277228000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-e53ff6a54998d5518b0e711b", "kind": "unclassified_tcp", "frame_number": 81775, "timestamp_epoch": "1634918297.233825000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100e8d10c000000197b" } }, { "event_id": "evt-8ffce5dcd6cadb6fb7356201", "kind": "unclassified_tcp", "frame_number": 81777, "timestamp_epoch": "1634918297.541033000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d10e000000050200020207040033140c000000197b0407040033140e00000005020002" } }, { "event_id": "evt-60e2b215ae5031924951ae27", "kind": "unclassified_tcp", "frame_number": 81778, "timestamp_epoch": "1634918297.541759000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e8d10c00000005020307040033140c0000000502" } }, { "event_id": "evt-69ed2709ee8758c001a1c769", "kind": "unclassified_tcp", "frame_number": 81780, "timestamp_epoch": "1634918298.052213000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d120000000010432356d630f356f504d44384828685558534a2a5704070400331420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-5906b800df5cb5d21578acd4", "kind": "unclassified_tcp", "frame_number": 81781, "timestamp_epoch": "1634918298.052772000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e8d10c00000001000307040033140c0000000100" } }, { "event_id": "evt-d24b8270bcde7231dcfbd50b", "kind": "unclassified_tcp", "frame_number": 81783, "timestamp_epoch": "1634918299.074533000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019040704003314210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-5fe1fb283468c5785c2631aa", "kind": "unclassified_tcp", "frame_number": 81791, "timestamp_epoch": "1634918299.224650000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d114000000050000010a0a169cc413" } }, { "event_id": "evt-aa88ba9f6621fde97ead0f10", "kind": "unclassified_tcp", "frame_number": 81795, "timestamp_epoch": "1634918299.233583000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400331414000000050000010a0a169cc414" } }, { "event_id": "evt-cd98e257a0ad8a5a706a3b1d", "kind": "unclassified_tcp", "frame_number": 81798, "timestamp_epoch": "1634918299.307694000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d17900000032323020534139505231334341303031392e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35383a3138202b303030300d0a" } }, { "event_id": "evt-3ace85aea76f9b7dcbf2ca27", "kind": "unclassified_tcp", "frame_number": 81801, "timestamp_epoch": "1634918299.309627000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033147900000032323020534139505231334341303032332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35383a3138202b303030300d0a" } }, { "event_id": "evt-6201e31bad30b87f72a8b9e5", "kind": "unclassified_tcp", "frame_number": 81805, "timestamp_epoch": "1634918299.998495000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d11a00000045484c4f206c6f63616c686f73740d0a0407040033141a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-510fab14b7f2773f0c36d57f", "kind": "unclassified_tcp", "frame_number": 81813, "timestamp_epoch": "1634918300.053202000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314d80000003235302d534139505231334341303032332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-a53aa6ed924fd11283d947bb", "kind": "unclassified_tcp", "frame_number": 81815, "timestamp_epoch": "1634918300.053708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1d80000003235302d534139505231334341303031392e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-39cd5e9de3bb47fdc194dd33", "kind": "unclassified_tcp", "frame_number": 81819, "timestamp_epoch": "1634918300.276159000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7d0afb1d2cba6ba2770dc964", "kind": "unclassified_tcp", "frame_number": 81821, "timestamp_epoch": "1634918300.372152000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314140000005354415254544c530d0a" } }, { "event_id": "evt-ec55fc57f3576b8031bdd398", "kind": "unclassified_tcp", "frame_number": 81826, "timestamp_epoch": "1634918300.423492000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033142700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-235e9526f47dc74c94463a64", "kind": "unclassified_tcp", "frame_number": 81829, "timestamp_epoch": "1634918300.558059000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1140000005354415254544c530d0a" } }, { "event_id": "evt-b0b96232a2d2c8afcc008e36", "kind": "unclassified_tcp", "frame_number": 81834, "timestamp_epoch": "1634918300.607069000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d12700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-d1edd33bee4319e03cbdf6f6", "kind": "unclassified_tcp", "frame_number": 81837, "timestamp_epoch": "1634918300.775201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314160100001603010107010001030303e7041a2087e9deb516c3472769aaec2decdfdecf1ee0dc886716af6467b5db8120918cbbbb6e36dd02f029de7413f68a890bb99ea9ab539e753742a3245b7801a50026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a13011303130201000094000000150013000010736d74702e6f75746c6f6f6b2e636f6d000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00200a246c2a606d31adab2a07594b29939bb59eda9f4285f186026ac4c75572aa24" } }, { "event_id": "evt-f632c3f003fa23b6141aa4d6", "kind": "unclassified_tcp", "frame_number": 81842, "timestamp_epoch": "1634918300.839817000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-44cd3e8b93081cf92b182f35", "kind": "unclassified_tcp", "frame_number": 81848, "timestamp_epoch": "1634918300.843860000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-39df20e7c747d590f3514a90", "kind": "unclassified_tcp", "frame_number": 81849, "timestamp_epoch": "1634918300.843880000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313031363030343834395a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313031363030333330355aa011180f32303231313032323233343830355a300d06092a864886f70d01010b0500038201010021323f32c790aec311562a15aed61b9efc4772125d46493ee1088a4ec8b2a7f0d6176d9054298bd2ed03be9025e36e82e05ec519ebedcd178c1fe78f78db6f5846c6ffa2074bba60706b7c6b622d2cd69297dc7a906dfc5f1531257e374eb87f31fa27985b3efb89a2439593578e0ae3291314d0b4764514f25c9ed13755a3f1a23156cd432f8b4266c9658ca385b4b19ecd5fd064c85b805bac095e39f7791da1a55a8548e45827c10e66179ef63a2b6b5b7782e541753f23b44c55ab005edcfbe487937c490871ef19fa2bf9ee5b877f2babbfc0d88b385411358cd2432fa2f1ce66fff7c9d478c3eb6a8c2b2842dbde7ba13e0dc9399615e81832597a96ee0c000169030018610421d1aefe95887975890f53be97cd5de67f6ff11ee984ca126a4e6a09dc7e2c362e3317ba7d10dc75d0e4ec82d42398598d18a57cfd2ce40e787ddc7b17e63e455f5f9ccd5be8168b9f5143bdb520a6fde143d6dd724aff2b8c8e927063afd47c080401005cfdda53ad20bdd1c244db6eafadfc35fa69523639d5eea09145f793d8625500256c12609f6e838e3bdb32fc9298fa6dc94aa34755f4518c136d1ab5f9d364b31faf801f06eb3219613126788b145c89e13c6359dd679d8eb9da2fa58f71f24bf164c25a0dd19cc1b0b5dc592000f1419213c1994075b1e93cf7e4a384f7ce40c2e9b78a9ba9070b8d859f93c282b85245effc048a19038804cb1792ea6a1222c462c3812fdaba2b7f4c288b91b7a3c564f3a29508cf652599daae3140fa30cba61608" } }, { "event_id": "evt-1f53bc7a17b2b111cd229729", "kind": "unclassified_tcp", "frame_number": 81850, "timestamp_epoch": "1634918300.843892000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "9bac0eefc305a0326a0489783f93efaa702c6824b7466fe0220ba120598c96e4247ecd651b95b85d5eadacc674934b458f9ee10f99750bdbe1ac90a7df0d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-f333b7b95f7021ee2e00b17e", "kind": "unclassified_tcp", "frame_number": 81854, "timestamp_epoch": "1634918300.977565000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4f2611daf32773f96a4508df", "kind": "unclassified_tcp", "frame_number": 81863, "timestamp_epoch": "1634918301.031461000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f687610579544c5689955bf2", "kind": "unclassified_tcp", "frame_number": 81864, "timestamp_epoch": "1634918301.031484000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ff11482c599e5042d5c7b37d", "kind": "unclassified_tcp", "frame_number": 81865, "timestamp_epoch": "1634918301.031498000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032303030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032303030333330365aa011180f32303231313032363233343830365a300d06092a864886f70d01010b050003820101006bf3f7594585ecffdd9eb68654cae703784da91c4b574c2bbd04c454ba93e848d499002ffa60a7f368e18d33184835d8104a2b35417072de995f8f0b15d994647c5ea4b411088fdecffd8198857b25b05e694e2997ed62dbba8c49378e9ca61fec82afbf88244cc3b713073e35144ff7f26279a1ae42fd8ce0a11bee33165ace8db13e370148fe744aec9529c96f340cbc20037fe806735119aa027da0c1d0cb800dee3ce7cbff4d46c6cf39b38cd2c0b1ffdeaa8c0659a09886c2c443823d07f02c081176bdb4fd7f1f5f1a08d4ef1a90d4fdf30633363a8c6745f5ad942aef68860cc1c65e7aa6acecdd93dcc0b7e88d36dad74d6389f578994ada6cb2bdd70c000169030018610493e5c44ccc03ecbba46a6aec050bc4e982909fd75d011aff895a6079edaf541045fc9e4d0bb3ede9ab8790336d5606432a12a1404c8ab401f3f13f7b811a1d3ca4d5668f4c427c0b7d71cf0d6fadf7043a6bd7895b3ae0f3551c40b5e5968e62080401002850e4c25eb8615d44f77d37086d909513974fb08fb15dbcc5d49b70c8603f5d4ccf9f4212ce60867a4a67a2112a8249ff5afe" } }, { "event_id": "evt-be8ca879011e9a47393aa34b", "kind": "unclassified_tcp", "frame_number": 81869, "timestamp_epoch": "1634918301.031791000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b922827d5551db39c7b97618", "kind": "unclassified_tcp", "frame_number": 81871, "timestamp_epoch": "1634918301.339829000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314b400000016030300070b0000030000001603030066100000626104cfa760d2e8edeaa3a0a5e04bcb9e7d80a15d9c653a5c7519943f32b2683cdfec4e1a527b3693a9d133224505a3169fa8a6b1bf0420b2c1759be8f0587bd75492a4660fe41da5db3dd5da1e1cbe0fcc405d1319c9b166c356355c06eee1c812f614030300010116030300280000000000000000870d53897cf164708212f6e0fd8e5b6cb71bf8d4f84724a31eb21a388cb4f1c5" } }, { "event_id": "evt-22363f735c1830f79688cc3e", "kind": "unclassified_tcp", "frame_number": 81876, "timestamp_epoch": "1634918301.404855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033143d000000140303000101160303002800000000000000002885989184bd424cabbab6211032ca092597d77f7c688901d001e90bd0c66d90" } }, { "event_id": "evt-3385d0008c11109e40dd081c", "kind": "unclassified_tcp", "frame_number": 81879, "timestamp_epoch": "1634918301.521429000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1b400000016030300070b000003000000160303006610000062610443051696a467b16f7f9dc8226d3b5dd3bcf99643b320da16a92d578e1fd9ad8bb7114ddec8eef678a90359362c93c57a656c472b74751c71e6b2c662854a29fe937614924bb44f6dfd91b5bdddd266e797813e18f5e9eeab6633b2609708b4f81403030001011603030028000000000000000024d8d66d6b8a6d5642c59a1f4ac96417c7cbb8ecc476ca66703f72b0046f6138" } }, { "event_id": "evt-17de38571db3237c40255186", "kind": "unclassified_tcp", "frame_number": 81883, "timestamp_epoch": "1634918301.572310000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d13d00000014030300010116030300280000000000000000c648bf5a629c3879c3c120b42d136ca243cac248d4c82d39f917839624cc0d71" } }, { "event_id": "evt-66cb42ddb081013166cc7047", "kind": "unclassified_tcp", "frame_number": 81886, "timestamp_epoch": "1634918301.721574000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033143700000017030300280000000000000001606a455229fb4624a807ad8bee787aeb654c3b77b4727926917d50a66c96c37a" } }, { "event_id": "evt-cfb531f241dd7cb6448c9763", "kind": "unclassified_tcp", "frame_number": 81891, "timestamp_epoch": "1634918301.774359000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-beb94c0e669312721bcee5b5", "kind": "unclassified_tcp", "frame_number": 81894, "timestamp_epoch": "1634918302.148879000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d13700000017030300280000000000000001aa058fd2756b6da754ab380483fd5f630f19091a142c6497675b2412c0bdd41a" } }, { "event_id": "evt-eb8a5c30cb55044ddd868f10", "kind": "unclassified_tcp", "frame_number": 81899, "timestamp_epoch": "1634918302.216076000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b20956c11932276c17fc955d", "kind": "unclassified_tcp", "frame_number": 81902, "timestamp_epoch": "1634918302.744737000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314330000001703030024000000000000000243147b9f406e8c3db5ce4a984518f16c265d86414a7956b2cf9602f4" } }, { "event_id": "evt-13523258be3b8c34419a58b3", "kind": "unclassified_tcp", "frame_number": 81907, "timestamp_epoch": "1634918302.816819000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400331439000000170303002a00000000000000025565e3dbad2aa477fdf73ceb5a88c51141f3221501cc7369822c82fb9b6a1ea89586" } }, { "event_id": "evt-90854f4042e89e59e6744a13", "kind": "unclassified_tcp", "frame_number": 81910, "timestamp_epoch": "1634918303.091653000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400331449000000170303003a0000000000000003ff6c14867c091ba3bdd8847b2a32bebdec72b71b64e7678ec7c21ce713769f7276737d3c6f9f193340567d2a59cadce26c08" } }, { "event_id": "evt-099df16aea41c5fcc67bfd9c", "kind": "unclassified_tcp", "frame_number": 81915, "timestamp_epoch": "1634918303.157476000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400331439000000170303002a000000000000000357de4064afc782f2155886c174f497938a37da512c0b790bc6d054b14b9e9dea5d2e" } }, { "event_id": "evt-0f4238fab4b69e0b5ec9b700", "kind": "unclassified_tcp", "frame_number": 81918, "timestamp_epoch": "1634918303.497419000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d13300000017030300240000000000000002dfb2afa9fc12fd7c49cdc40b72dfc294e8273f9cee72b44eea79e9fd0407040033143500000017030300260000000000000004e92fd7e2e4ab3ca13612a5c8d908cf8979d03429cbbdcfb277802d76321d" } }, { "event_id": "evt-826845ca4522e9c0d090a863", "kind": "unclassified_tcp", "frame_number": 81925, "timestamp_epoch": "1634918303.551524000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d139000000170303002a0000000000000002c55279d60143c6306b28c4f27cd8be7fb102ea5b8803903b8d05701d199077b8b711" } }, { "event_id": "evt-c563ba4b4e45c2e5e1d93f0f", "kind": "unclassified_tcp", "frame_number": 81930, "timestamp_epoch": "1634918303.929916000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1450000001703030036000000000000000351fe37f91d904d89c984d27832125a03ec265b3c320877e1923e71611b1fd68157548a667eaa45a180773c989432" } }, { "event_id": "evt-e3fd8790065baac196cc6b7e", "kind": "unclassified_tcp", "frame_number": 81935, "timestamp_epoch": "1634918303.978238000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d139000000170303002a00000000000000031c1458af66ecc9607bc4c0a1f37c453e0feb6ce2614dca254ee598a9de2a1913d1ec" } }, { "event_id": "evt-c005a30735d8463e6eba1310", "kind": "unclassified_tcp", "frame_number": 81938, "timestamp_epoch": "1634918304.374633000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d139000000170303002a0000000000000004ede2669bf9c9800f8511829645b61a21a7f488877940224901ebabe46b67a86bab61" } }, { "event_id": "evt-8d2854b020d58117787ced47", "kind": "unclassified_tcp", "frame_number": 81942, "timestamp_epoch": "1634918305.276041000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3698c373d9492efbae426996", "kind": "unclassified_tcp", "frame_number": 81944, "timestamp_epoch": "1634918306.867981000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0ce46ba20bb84e4e094a827e", "kind": "unclassified_tcp", "frame_number": 81947, "timestamp_epoch": "1634918309.009720000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040704003314780000001703030069000000000000000435a8343e07c9a598babb827e688273a2b66b2b0463b415d3d91e2395eb1d95fb11f96d759957c4275a82294b01f6ebd72aa3f9ac29fa5f93de1b81140a1dcb34eae685e123e57a7260994d97c2c2948060f82371079e74c36b9049904515348b72" } }, { "event_id": "evt-1d33f01909354ca168f20483", "kind": "unclassified_tcp", "frame_number": 81950, "timestamp_epoch": "1634918309.272443000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033142a000000170303001b0000000000000005b2e3dd60553ea364827c591de657bd268eedef" } }, { "event_id": "evt-bd8ffd2d7fd7f3f2dbe1cc26", "kind": "unclassified_tcp", "frame_number": 81955, "timestamp_epoch": "1634918310.031868000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d1780000001703030069000000000000000450be3236de3f949a3fdb47cf202934d14fb32a2c21b0436b6bbd95468d0f7b03cec1b80d07b294b77c0a7e679c28fab9394983c72b98f55c1813e1e938be868158e33e7998b05d9a959cdca4e3ecb12938e346c20104b9f7bbed8a65349e483796" } }, { "event_id": "evt-1bfcbbbb03b98f52a7673150", "kind": "unclassified_tcp", "frame_number": 81960, "timestamp_epoch": "1634918310.306983000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4aab8e42d01055196460a929", "kind": "unclassified_tcp", "frame_number": 81962, "timestamp_epoch": "1634918310.406205000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d12a000000170303001b00000000000000050e9a3842aff0e29f4be39425ae0aebff9c394b" } }, { "event_id": "evt-3a7b9781992f76833927e129", "kind": "unclassified_tcp", "frame_number": 81968, "timestamp_epoch": "1634918311.057855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df5f0000001703030050495aaa22beb79ca1bdb730d904be09bd0100d5b296e39c14e824a44cb6c87b35cc0d96102331f97a2a4b9a8829d062ef8403c120c23db315438897b6d1ff1335591b1ae5da1fb732c63b2d3881f9df70" } }, { "event_id": "evt-a7dcc5269f509a5d7d7beffb", "kind": "unclassified_tcp", "frame_number": 81970, "timestamp_epoch": "1634918311.058302000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b5f000000170303005075a2d82784bf794be540bb2b95cc76078d758aa1a4160eeab8da0e8c7f885d2f98fe7049c550b85c960ed05ffd9f927d8a9a4a4903a96aec48bc384d3adf4fcd95c818226e3353366b588b12cb638d92" } }, { "event_id": "evt-b005747c4227a1b0f9ee84aa", "kind": "unclassified_tcp", "frame_number": 81974, "timestamp_epoch": "1634918311.364247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df3f00000017030300303a6b71cfd5414a82db6a67e7d09e97669e1a32d6340c08463865c9c7123fe732bbf190d785f6ce396c9161290da827eb" } }, { "event_id": "evt-555ead4dcb20bee5745e4d49", "kind": "unclassified_tcp", "frame_number": 81978, "timestamp_epoch": "1634918311.544170000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b3f00000017030300307a0324adf7c417a572e9b4539bd874f02558c4c733074cafd1f8c385f86dc9d35b30208a3fe4637a86d7dafa66b20552" } }, { "event_id": "evt-2458856afeb1ea57c8c367c6", "kind": "unclassified_tcp", "frame_number": 81985, "timestamp_epoch": "1634918311.602331000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df6f00000017030300603b8c6c8004add3196a37a70cfec2e5712a5f6e1f8b1efb5d8d73395699384db622c117df2cbc46b484176ecd92ad86d7249e74265d4f4c741e462f808602beb92ad25985c8ad82e3c2b49d7e694255179b4741439618b2cabc39946c6a85ee72" } }, { "event_id": "evt-f5aeb67f55861def76082861", "kind": "unclassified_tcp", "frame_number": 81989, "timestamp_epoch": "1634918311.602963000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020048df0a000000" } }, { "event_id": "evt-b10dbc157a7820c8ad37a701", "kind": "unclassified_tcp", "frame_number": 81993, "timestamp_epoch": "1634918311.688764000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300814b6f0000001703030060c5c55c997308393a7d124d51e790d0ebaf7529671cf2d9c860d0dc33c9732156c66976c90a1705f6ef176e335556aeba540447c0a0b60ca0be5cec6bd7688b865d35909f26379f0973e61f435df2b3650acf1a1de1103b3dc64117fd11c9e828" } }, { "event_id": "evt-9231c1e26ba8538e1fc361a9", "kind": "unclassified_tcp", "frame_number": 81997, "timestamp_epoch": "1634918311.689456000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300814b0a000000" } }, { "event_id": "evt-c1cf2f203cef700bcf0dea77", "kind": "unclassified_tcp", "frame_number": 81999, "timestamp_epoch": "1634918311.850109000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020048df3f0000001503030030db72a1f14f456bf00ff66b852acb5dcc7e945f46e54aecd73023af2998857d8ff3acb166c26870954b4fa580afbde95c" } }, { "event_id": "evt-5ba5c699bf74a2e2bac25628", "kind": "unclassified_tcp", "frame_number": 82001, "timestamp_epoch": "1634918312.029455000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020048df0a000000" } }, { "event_id": "evt-1e1b5c00a1f8e0c92e3974c3", "kind": "unclassified_tcp", "frame_number": 82004, "timestamp_epoch": "1634918314.436352000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070400331475000000170303006600000000000000058c0dadfec3b49a5bbf8caf79c068d4f34a8ea935b1dc813474f9b3f78637437b0f8ebe3aab48398c00c2c05676987db999e654196a0822fc3c388bc0eab73893c602ee1fbcd4c415327151f835b24802f9193fc8b1f9ad830aef6cfe597b" } }, { "event_id": "evt-18db64234caaad0258193155", "kind": "unclassified_tcp", "frame_number": 82007, "timestamp_epoch": "1634918314.804954000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033142d000000170303001e00000000000000063fe06f02cc522e09c9b51366df248aaa663e5e749ca9" } }, { "event_id": "evt-ca720d5108828be564f93852", "kind": "unclassified_tcp", "frame_number": 82014, "timestamp_epoch": "1634918314.857255000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407040033145700000017030300480000000000000006fef982fe54a36dc1d9c11f935d36f245b9c6e116d66697d0f9f4486bb71d2d85421f87fed495c4fe087f602ba32871867fe297368c7d8de18ed101a515e4ff67" } }, { "event_id": "evt-86ae86353f8105885e202d4a", "kind": "unclassified_tcp", "frame_number": 82018, "timestamp_epoch": "1634918314.857905000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507040033140a000000" } }, { "event_id": "evt-bab386602a4dd6eeec3f9455", "kind": "unclassified_tcp", "frame_number": 82020, "timestamp_epoch": "1634918315.353345000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0d4bbafc266dbe68a4b522b3", "kind": "unclassified_tcp", "frame_number": 82023, "timestamp_epoch": "1634918315.563069000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d175000000170303006600000000000000059b6a952ffb66161fc7d5a43cac0a0d7a9881cb5bb67e99228e4ed849e7fa5973bb6610cf3b5adc7d7b52713c775383dbefe8e01635e08b53e9ec7a96241cee11ddb8045644e8f29e517fbb1970d6ddbd4d7a9ea00d15c92762123c3744fd" } }, { "event_id": "evt-d8a742cc44889120d15deb30", "kind": "unclassified_tcp", "frame_number": 82026, "timestamp_epoch": "1634918315.862879000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d12d000000170303001e000000000000000665a744abd8a5c0d6c0ca45653543a854dd8414d9c61c" } }, { "event_id": "evt-0b0bd4ae5235911137cd3129", "kind": "unclassified_tcp", "frame_number": 82031, "timestamp_epoch": "1634918315.915436000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e8d15700000017030300480000000000000006b59f771218090413e644322df3d16efe81579e99e9cd4a5970189872d14bf66bb91a828813b15123a3f63e97382d697591b70233d20d77f5cfef42fb505d5c36" } }, { "event_id": "evt-1c35917d5ce4df8aed303981", "kind": "unclassified_tcp", "frame_number": 82037, "timestamp_epoch": "1634918315.919444000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100e8d10a000000" } }, { "event_id": "evt-ccab8c289e2c2a9baed5eed7", "kind": "unclassified_tcp", "frame_number": 82039, "timestamp_epoch": "1634918320.385145000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ed3fe84a3bc2ea47a4c52e51", "kind": "unclassified_tcp", "frame_number": 82041, "timestamp_epoch": "1634918325.416428000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ffd98c1af5280ed6452fb6fc", "kind": "unclassified_tcp", "frame_number": 82044, "timestamp_epoch": "1634918326.826803000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701000ed90c000000197b" } }, { "event_id": "evt-3d1042ce39970974090420c3", "kind": "unclassified_tcp", "frame_number": 82046, "timestamp_epoch": "1634918327.015899000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed90e00000005020002" } }, { "event_id": "evt-ae3dd032c0b7a6f9078971b2", "kind": "unclassified_tcp", "frame_number": 82047, "timestamp_epoch": "1634918327.016457000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701000ed90c0000000502" } }, { "event_id": "evt-ea00d3b1face415f81fd7929", "kind": "unclassified_tcp", "frame_number": 82049, "timestamp_epoch": "1634918327.262082000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2c466e621c0ddc5b5b6826ca", "kind": "unclassified_tcp", "frame_number": 82050, "timestamp_epoch": "1634918327.262414000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701000ed90c0000000100" } }, { "event_id": "evt-6d79101c8f08155a3731b313", "kind": "unclassified_tcp", "frame_number": 82052, "timestamp_epoch": "1634918327.621215000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-2c3efdc30ecb1674e6f5b70c", "kind": "unclassified_tcp", "frame_number": 82059, "timestamp_epoch": "1634918327.752819000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed914000000050000010a0a169cc415" } }, { "event_id": "evt-c025943d8d31913fafe56fa2", "kind": "unclassified_tcp", "frame_number": 82062, "timestamp_epoch": "1634918327.838335000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed97900000032323020534e37503232324341303031312e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35383a3437202b303030300d0a" } }, { "event_id": "evt-1514a7d487f3f9e851196a13", "kind": "unclassified_tcp", "frame_number": 82065, "timestamp_epoch": "1634918328.182177000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed91a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c09bebd36ed03512bc05a7ea", "kind": "unclassified_tcp", "frame_number": 82069, "timestamp_epoch": "1634918328.234625000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9d80000003235302d534e37503232324341303031312e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-5ef646ab7eb665147178d2ba", "kind": "unclassified_tcp", "frame_number": 82072, "timestamp_epoch": "1634918328.528066000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9140000005354415254544c530d0a" } }, { "event_id": "evt-8b5c582c9f099b76e0890c6a", "kind": "unclassified_tcp", "frame_number": 82076, "timestamp_epoch": "1634918328.574733000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed92700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-df2bbf2b89b9f84a958f36e5", "kind": "unclassified_tcp", "frame_number": 82079, "timestamp_epoch": "1634918328.944048000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fa07b3ee399c8779414faac8", "kind": "unclassified_tcp", "frame_number": 82086, "timestamp_epoch": "1634918329.015362000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2393bbda21995dd046ce9fab", "kind": "unclassified_tcp", "frame_number": 82087, "timestamp_epoch": "1634918329.015384000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1fa67610798fdf9b6a684238", "kind": "unclassified_tcp", "frame_number": 82093, "timestamp_epoch": "1634918329.017934000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-22a4be4942ba522367abe039", "kind": "unclassified_tcp", "frame_number": 82094, "timestamp_epoch": "1634918329.017947000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "ef0a774522a697a7058c5431415a509729104eb326a0cb82d8a8fb42151737beeb5ab6a4d26c2153e7b4a09cdd5ea9d7f9740761bc8ec207d255412fae2bc3fee7b7d7dedf3857947d3fe448378252314bbdc21bd73bffdf573936018c564d012c63cdf9423f1a91af7a45475d3f72aab87273229e22880f62353b8f44e8f758bf2d71df938ba5cda20204d108f8c1735e515eebb0d4db29f5a50b3712b8e21f419cbb4a43b8150d8422d6e84e42c44176b5ad8b6fedfc18ce32c1bc9d3be10d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-a25c9a18a98312c9e223ee0a", "kind": "unclassified_tcp", "frame_number": 82097, "timestamp_epoch": "1634918329.507073000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9b400000016030300070b00000300000016030300661000006261046526fc03965086f0604b10fcdc137192ffa89ca05e1723149d7c80274d0a58a42820c7a8e7f0effd560246618aac5dd1b013e5520f746895965f574fdc6245f3de3dd81fdaf5aee32cc5c54a80fff058ba24cdfd44243506aa4839be6fd551201403030001011603030028000000000000000032823a2178616d3a9ddeb55c4bccdbbc548856592942d25b96877b726f6e14dc" } }, { "event_id": "evt-4581b50c797e53a90193733e", "kind": "unclassified_tcp", "frame_number": 82102, "timestamp_epoch": "1634918329.563006000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed93d00000014030300010116030300280000000000000000077feda5701b467d3bd5a6af9d4eda0c40506310ce301ecad74d1aef9cd6a0d4" } }, { "event_id": "evt-9eb39bf20e4f6519fe26573e", "kind": "unclassified_tcp", "frame_number": 82105, "timestamp_epoch": "1634918330.001237000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed93700000017030300280000000000000001d385ed98ef7b5218d2513067b64d3831f30a76cbbab0a8dc7c8b663df9a64c39" } }, { "event_id": "evt-1a0d17858265e5737b7b6bb6", "kind": "unclassified_tcp", "frame_number": 82110, "timestamp_epoch": "1634918330.064134000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-afde015d6cd1806d91b668a9", "kind": "unclassified_tcp", "frame_number": 82113, "timestamp_epoch": "1634918330.461185000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-241689aee56a920e499ac1f9", "kind": "unclassified_tcp", "frame_number": 82115, "timestamp_epoch": "1634918331.178924000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9330000001703030024000000000000000206835f7244849e3494427abe4ebaa304ba4543bbee741d898ecef06c" } }, { "event_id": "evt-41918b291658f84bebd3478a", "kind": "unclassified_tcp", "frame_number": 82120, "timestamp_epoch": "1634918331.227526000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed939000000170303002a00000000000000029af07573619ece21d9856b18ca2f323231586eeb96028269dffa46c4e590b99176eb" } }, { "event_id": "evt-427b40ccfee0883013700eb5", "kind": "unclassified_tcp", "frame_number": 82123, "timestamp_epoch": "1634918331.742361000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed94500000017030300360000000000000003a6105a3df6208219cebaf32b7b5e5b47a522c46357a7d18ae756883a07bdb6ea1cf6674ffe65a60ea95f8d024edc" } }, { "event_id": "evt-2b250f7d539c0a21b8710d9a", "kind": "unclassified_tcp", "frame_number": 82128, "timestamp_epoch": "1634918331.815854000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed939000000170303002a000000000000000338845b6b01f92e44068d951b63062c792b437d45d5d32ecff740e7f36f50a0729ba4" } }, { "event_id": "evt-a5a8cd8dbb355494adcd62ac", "kind": "unclassified_tcp", "frame_number": 82132, "timestamp_epoch": "1634918332.107044000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9350000001703030026000000000000000452ba6829949cfb6639d419258bd57a22a447190494f520d5f18586412b2e" } }, { "event_id": "evt-c85b6bbd4fe6ddb4bc052d8e", "kind": "unclassified_tcp", "frame_number": 82140, "timestamp_epoch": "1634918335.492970000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-dccb2d5c0da6350bdbe22a00", "kind": "unclassified_tcp", "frame_number": 82142, "timestamp_epoch": "1634918336.852498000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-7179274003cc247e4b2ee8c9", "kind": "unclassified_tcp", "frame_number": 82144, "timestamp_epoch": "1634918336.858292000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020009f20c000000197b" } }, { "event_id": "evt-898c1409a0814320447cc362", "kind": "unclassified_tcp", "frame_number": 82146, "timestamp_epoch": "1634918337.043221000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f20e00000005020002" } }, { "event_id": "evt-fd12e1dbbb269b3b86cd6299", "kind": "unclassified_tcp", "frame_number": 82147, "timestamp_epoch": "1634918337.043782000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020009f20c0000000502" } }, { "event_id": "evt-78ec5b2d982e9a15be9c01f4", "kind": "unclassified_tcp", "frame_number": 82149, "timestamp_epoch": "1634918337.472663000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-18164ce32c49e6b5034afe19", "kind": "unclassified_tcp", "frame_number": 82150, "timestamp_epoch": "1634918337.473214000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020009f20c0000000100" } }, { "event_id": "evt-4802c02c8260fed6916ebbd6", "kind": "unclassified_tcp", "frame_number": 82152, "timestamp_epoch": "1634918337.987707000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f2210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-ec736d7ffbaabd7cbba0e122", "kind": "unclassified_tcp", "frame_number": 82159, "timestamp_epoch": "1634918338.072776000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f214000000050000010a0a169cc416" } }, { "event_id": "evt-df854671b36767220fc17e2a", "kind": "unclassified_tcp", "frame_number": 82162, "timestamp_epoch": "1634918338.128367000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f27900000032323020534130505231314341303135362e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35383a3537202b303030300d0a" } }, { "event_id": "evt-ae081c1ff1a19b6812dc8e5b", "kind": "unclassified_tcp", "frame_number": 82165, "timestamp_epoch": "1634918338.553459000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f21a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-f78ccd0e1651a976ca1aedc8", "kind": "unclassified_tcp", "frame_number": 82170, "timestamp_epoch": "1634918338.611715000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f2d80000003235302d534130505231314341303135362e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-1182fdb8d91d7e3cd5ef524f", "kind": "unclassified_tcp", "frame_number": 82173, "timestamp_epoch": "1634918338.956982000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f2140000005354415254544c530d0a" } }, { "event_id": "evt-c0146c485ec24b70432327a7", "kind": "unclassified_tcp", "frame_number": 82177, "timestamp_epoch": "1634918339.001176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f22700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-24de1cf90f250bc61e53c818", "kind": "unclassified_tcp", "frame_number": 82180, "timestamp_epoch": "1634918339.333053000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c923d68160c0dc8c89b6d3b0", "kind": "unclassified_tcp", "frame_number": 82190, "timestamp_epoch": "1634918339.397871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2c66dba5215e50884a60b446", "kind": "unclassified_tcp", "frame_number": 82191, "timestamp_epoch": "1634918339.397884000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-cbbeada8820f5baabe02326b", "kind": "unclassified_tcp", "frame_number": 82192, "timestamp_epoch": "1634918339.397891000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032323030343835305a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032323030333330375aa011180f32303231313032383233343830375a300d06092a864886f70d01010b050003820101006a9bf12f88d107579195a8174156a2eac36cbe15799f4afe2a5d0e4f6d0143f731b2e3b270a650e6559de5194ddc59310d8246aea522982212d9bedbf9b51c8dcd8790dbb88df880b2592f6f75f4326372dd688d002019658928472ef78f09acba5e17ed8b22859a425256e364a730cb16d467bfd765d7375875fb99765f7eb14abf9295780e7f49615248e55d0d5658fc8200179eebad716e56e2b0dac035de31d01a5c849d3a508283e1148e19b1761a6796fbb6fc664f43a7a905fdc745808709c0109902192ea7f6b156837ac6abf12f9541e0c7d44e07f99aa8efa76dc7da59a4459a3fe103394d9ac6d7c883efa567e6a4d41b31e92bc9160bc25af33c0c000169030018610408a6bd8c3f65f7f94fa18dc983ef798ca64a5f502cf01f8925c30ccdeef5059384e3216e92aa3274204e5ba43646039d1674a8b4c0909f7eaae60cc0581aed7adcac48ac0c85d30f91e070edfc6ad1c1bce97f550d667caceb9866b3e52a9dba08040100322a28beebc37071ef60f4e50d5bd0e844dcb904b01171dae3924604d3615d0ba55515550fa6221ae20bbfdc469a0695db4e12" } }, { "event_id": "evt-8beed4817efc8f519bc575b1", "kind": "unclassified_tcp", "frame_number": 82196, "timestamp_epoch": "1634918339.398196000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c837a9f80b0cf22fcf899b9c", "kind": "unclassified_tcp", "frame_number": 82198, "timestamp_epoch": "1634918339.791279000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f2b400000016030300070b000003000000160303006610000062610418268cec36dc6e238f298ebb8712d704fc9e062362659c50528e1d2306abfa080d7b39b354831c853299fead94003def2c3582fc41ebe5db439a79ac23be59a4b2084572c9d09ef0d2bb12537bec398ce5669c0e8c2dfff92855d351b552e34714030300010116030300280000000000000000b623e8e7ca805232060c56ea22e9c0a2f466d32ca854b9dcd5630f019ddea6e0" } }, { "event_id": "evt-93a2537bf40ab168420ad354", "kind": "unclassified_tcp", "frame_number": 82202, "timestamp_epoch": "1634918339.846223000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f23d00000014030300010116030300280000000000000000286cc839aa441cc00e50299ee2ab3181bb4b0cdd2febf9441c5dea89412b0df5" } }, { "event_id": "evt-0785856f166d65c184502e3e", "kind": "unclassified_tcp", "frame_number": 82207, "timestamp_epoch": "1634918340.209210000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f237000000170303002800000000000000016c75794303c5fc806762d44d8fb10b8b1bcd6f1df7995e50ad97697a7dbef08c" } }, { "event_id": "evt-6c897e57b56a22dddd8ed2d9", "kind": "unclassified_tcp", "frame_number": 82211, "timestamp_epoch": "1634918340.254965000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b5b15ccff80b2f42548577c5", "kind": "unclassified_tcp", "frame_number": 82214, "timestamp_epoch": "1634918340.524834000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9d638c7d34d10665d12d2a6d", "kind": "unclassified_tcp", "frame_number": 82216, "timestamp_epoch": "1634918341.501627000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f2330000001703030024000000000000000235b386fa44f322594f107827e64a0ba8a782376b104d6411d83dd682" } }, { "event_id": "evt-9569f18bd05633a77b674f50", "kind": "unclassified_tcp", "frame_number": 82221, "timestamp_epoch": "1634918341.595955000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f239000000170303002a000000000000000292649666483e70ef5f5c215ffb6323dc7b62e211f2a8fffc6ac2f87d9f11958656f0" } }, { "event_id": "evt-e6f47b65dac62b759ccff1dc", "kind": "unclassified_tcp", "frame_number": 82226, "timestamp_epoch": "1634918341.771188000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703000ee30c000000197b040703000ee30e00000005020002" } }, { "event_id": "evt-553d7932290bfe45d2c6b707", "kind": "unclassified_tcp", "frame_number": 82227, "timestamp_epoch": "1634918341.772002000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703000ee30c0000000502" } }, { "event_id": "evt-23c7f4b50c7731254c9f9f6f", "kind": "unclassified_tcp", "frame_number": 82229, "timestamp_epoch": "1634918341.971534000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f245000000170303003600000000000000032272d85645a478fe8ec76f1131dea0de3aeb4f13364da31cfe463bf41861cd6cb6d245b14b6ecc15d7aac34dfbe8" } }, { "event_id": "evt-3ac96b3b9f769f597288e984", "kind": "unclassified_tcp", "frame_number": 82234, "timestamp_epoch": "1634918342.144641000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f239000000170303002a0000000000000003703fee09c058d34845aeb08ae88e534ce5d96a125f2d89c63c1e36fc7f5f8ffd02e4" } }, { "event_id": "evt-f12b72a4341216dbc6565f4b", "kind": "unclassified_tcp", "frame_number": 82236, "timestamp_epoch": "1634918342.169058000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-741bd27cb8d1d181a792c1ad", "kind": "unclassified_tcp", "frame_number": 82237, "timestamp_epoch": "1634918342.169578000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703000ee30c0000000100" } }, { "event_id": "evt-a4803d1080f5fd9cea1e30a8", "kind": "unclassified_tcp", "frame_number": 82240, "timestamp_epoch": "1634918342.511959000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f239000000170303002a00000000000000042b62d7f06d6a8eca458c88278d0f2ddde3f322cdc54be8907d1839c3174fa5289137" } }, { "event_id": "evt-79473af3cc18c53fd2f878b2", "kind": "unclassified_tcp", "frame_number": 82246, "timestamp_epoch": "1634918343.028883000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee3210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-914e5e7d65e63201bc9309bb", "kind": "unclassified_tcp", "frame_number": 82254, "timestamp_epoch": "1634918343.398266000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee314000000050000010a0a169cc417" } }, { "event_id": "evt-07d08bcb8c396940d438a48d", "kind": "unclassified_tcp", "frame_number": 82257, "timestamp_epoch": "1634918343.578682000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee37900000032323020534130505231334341303032332e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35393a3033202b303030300d0a" } }, { "event_id": "evt-c167c402562a6367d973408d", "kind": "unclassified_tcp", "frame_number": 82260, "timestamp_epoch": "1634918343.608465000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed99f00000017030300900000000000000004ad482ddbc633a9cf5e4c6039225cb0b9588f29a0eaca76ff0ab7102450a0f8d47d098876cb70d611382ec0310f772476fbabb75000508cef920399856fcceeaaa3e09e411986ee84fc5ba5a08c77008a0eefa4e727502bb2ce152d5d67e74730bb9b06adeaf5704bb98325619656299ae08287234986a9480179890cc887f6d79cd73252fec34f0a" } }, { "event_id": "evt-1fa8bbbb4648b7c7f8eae4ad", "kind": "unclassified_tcp", "frame_number": 82264, "timestamp_epoch": "1634918343.904483000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee31a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e5610ce39b7d42b8c10afe10", "kind": "unclassified_tcp", "frame_number": 82269, "timestamp_epoch": "1634918344.087304000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee3d80000003235302d534130505231334341303032332e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-01c03f0153316ca3e81f9e13", "kind": "unclassified_tcp", "frame_number": 82272, "timestamp_epoch": "1634918344.273101000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed92a000000170303001b0000000000000005beb322738af139a658a351b9526b1e81594cd9" } }, { "event_id": "evt-1e490324fdbcff89039affc7", "kind": "unclassified_tcp", "frame_number": 82276, "timestamp_epoch": "1634918344.637247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee3140000005354415254544c530d0a" } }, { "event_id": "evt-6a4d0b98328ee6aed3e09119", "kind": "unclassified_tcp", "frame_number": 82281, "timestamp_epoch": "1634918344.819057000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee32700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-cf5a3784b4a678b7ea2e82b5", "kind": "unclassified_tcp", "frame_number": 82284, "timestamp_epoch": "1634918345.152467000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e7c67cff24b3a250bcb6ee6b", "kind": "unclassified_tcp", "frame_number": 82289, "timestamp_epoch": "1634918345.221147000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-95f0a9affd27158e1b82d6e2", "kind": "unclassified_tcp", "frame_number": 82295, "timestamp_epoch": "1634918345.334281000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fe07fe5cb84ec7f0829a61cd", "kind": "unclassified_tcp", "frame_number": 82296, "timestamp_epoch": "1634918345.334303000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e637274307b0603551d1f047430723037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c3037a035a0338631687474703a2f2f63726c342e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c30300603551d20042930273007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b05000382010100349139d930ffcc5be66101a9d0fde7b55cdc972aac37b0206bfb364a6846a28c37da170159ce8e5604082d88d79dd07045d4e7ebff7b9dbfb96b4b047cca1cee6b68d802e62e29be5e067a6e0da7417d40da5598528168bb46031f31ac29435c2d03a3a09538b7d50cc6febe25eed107befe8f79959ac371045d7743e2c41d6898f882526b356abfbc3bde2cdb005a3a705f6c2b4869a9d99229d07f30d7e74fd605e3f5989720b0161a5a2b798fb94d9788ecc6b303e130c47081ac279385d335e9ad1cf4aa7cffc9cd01ec79f2fbe53c7973cb47240729dc2fd00fe25c5141e87143ee5badb1efdc0ef69365e4de54e2321515ae24c7aa4d432b58bf030f7a160001db010001d7308201d30a0100a08201cc308201c806092b0601050507300101048201b9308201b530819ea2160414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7180f32303231313032303030343835315a307330713049300906052b0e03021a0500041448b6a9e21293b3c020b12ace4e73649a3c67dc9b0414dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f702100ccac32b0ef281026392b8852ab156428000180f32303231313032303030333330365aa011180f32303231313032363233343830365a300d06092a864886f70d01010b050003820101006bf3f7594585ecffdd9eb68654cae703784da91c4b574c2bbd04c454ba93e848d499002ffa60a7f368e18d33184835d8104a2b35417072de995f8f0b15d994647c5ea4b411088fdecffd8198857b25b05e694e2997ed62dbba8c49378e9ca61fec82afbf88244cc3b713073e35144ff7f26279a1ae42fd8ce0a11bee33165ace8db13e370148fe744aec9529c96f340cbc20037fe806735119aa027da0c1d0cb800dee3ce7cbff4d46c6cf39b38cd2c0b1ffdeaa8c0659a09886c2c443823d07f02c081176bdb4fd7f1f5f1a08d4ef1a90d4fdf30633363a8c6745f5ad942aef68860cc1c65e7aa6acecdd93dcc0b7e88d36dad74d6389f578994ada6cb2bdd70c00016903001861041289fdf21d405d6f3bee533cfa440d93ac1ead93d9038578277bc15bded691566b538ed7fe3a8768345319ca0f" } }, { "event_id": "evt-af6cbb3ead382bab5b5c79b8", "kind": "unclassified_tcp", "frame_number": 82300, "timestamp_epoch": "1634918345.337762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1862c7d32120c6b8bd55f6e7", "kind": "unclassified_tcp", "frame_number": 82303, "timestamp_epoch": "1634918345.525231000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-87c0733bba1a3362f9b2d2f1", "kind": "unclassified_tcp", "frame_number": 82305, "timestamp_epoch": "1634918345.613361000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee3b400000016030300070b0000030000001603030066100000626104daf2e2ca7303ffe9f8f2d34a632000bbe34de82e2602343325edd5aeae6f76024757f24e38ffccf8f00234aef0a699b81013f184d49e3324eb085dedf3c92b698a8014f7411bb1b018cbabe52946e510f699c2eb0a64104513edaee7544083a314030300010116030300280000000000000000283435d45da8636d39af168d701646613d7a524d85ed506f5716a4899d0c8e84" } }, { "event_id": "evt-5b5cdac0eb3b116233072fb7", "kind": "unclassified_tcp", "frame_number": 82310, "timestamp_epoch": "1634918345.680771000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee33d000000140303000101160303002800000000000000009555d4d4c295e980d99be8c47eecf0c97e6c0a1efacc580c58b206dd4367dc07" } }, { "event_id": "evt-134902ba726bf1a305ed93c2", "kind": "unclassified_tcp", "frame_number": 82313, "timestamp_epoch": "1634918345.986189000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee337000000170303002800000000000000012d2ce13758fca1484ed05b12af61a71a3819ed32b9ff09f5f4566291d22791eb" } }, { "event_id": "evt-547a5d478972dd3eb788f2cb", "kind": "unclassified_tcp", "frame_number": 82317, "timestamp_epoch": "1634918346.034364000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-98f27999542dc0d91747d05e", "kind": "unclassified_tcp", "frame_number": 82320, "timestamp_epoch": "1634918346.898706000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee33300000017030300240000000000000002c6f12cbad22a52045179c4c81d7366c5cef36bfb42e477ba2fc474c6" } }, { "event_id": "evt-434068670500dbf74fa7f294", "kind": "unclassified_tcp", "frame_number": 82325, "timestamp_epoch": "1634918346.951602000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee339000000170303002a0000000000000002028ce92e3a06953d599e866ee295495c663279bc04b35f5a4037fd59bfa12dd61d56" } }, { "event_id": "evt-df0d52af853668d531db272b", "kind": "unclassified_tcp", "frame_number": 82328, "timestamp_epoch": "1634918347.322254000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee34100000017030300320000000000000003e3be434095e317a2748e5999d3407e2b10be1387eae26f548c66c6c69a0ad768be1b9a27a9b56f2b75c5" } }, { "event_id": "evt-be2f88dd8af1db34bea222b6", "kind": "unclassified_tcp", "frame_number": 82333, "timestamp_epoch": "1634918347.374020000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee339000000170303002a0000000000000003b5aaf3eefef5c0bdc99b6fe247a26d0eda2bced91f62a3dfec625ff28af3e0a1631b" } }, { "event_id": "evt-498d5b8a5d54c7c32409505e", "kind": "unclassified_tcp", "frame_number": 82336, "timestamp_epoch": "1634918347.761236000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee335000000170303002600000000000000043a64ed94c7b28f5c52f1860f5a20f0831d52780adfe89498a4bf8488aa01" } }, { "event_id": "evt-b71dbe281766d82bbcc8a8c5", "kind": "unclassified_tcp", "frame_number": 82341, "timestamp_epoch": "1634918347.917426000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f27800000017030300690000000000000004ea0967e1cbbd9d603388066fa0b33281dc47f2585117cfcb428d99d68ba419badf498896544d5b628e787ca9cb16575de85eec2b64903f016cbbf2de8a32a617ef4fe7f601d8087bbff744d27dbc409bfae8f908c83fca4867ac7b84dad58a63b8" } }, { "event_id": "evt-506f727622f5c205f4755134", "kind": "unclassified_tcp", "frame_number": 82344, "timestamp_epoch": "1634918348.181288000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f22a000000170303001b0000000000000005c0490c666aee3c1fdd00c1896c8e1a4ce20dbd" } }, { "event_id": "evt-48b32fbbc3abf3bb1e0b5a14", "kind": "unclassified_tcp", "frame_number": 82349, "timestamp_epoch": "1634918349.480689000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed9740000001703030065000000000000000596b07a86093185811e3b969764bb98c91ed7ab525d05afa017f1a7b8b3c6d96be1b27d99e0adc825f8dae464e7b0061907cd0f865b91101aa1150f8da148c38bdd13b2b8ff3fe9ce44d26534c3e4b9d529598d8b9382ce686411c83c87" } }, { "event_id": "evt-978e9b2bd26d3c26d67f95bf", "kind": "unclassified_tcp", "frame_number": 82352, "timestamp_epoch": "1634918349.848103000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed92d000000170303001e000000000000000688b21653282580f4f7f3bed73995a9e6cdd1c4428684" } }, { "event_id": "evt-2d16df18ca06fbc9d345a2dc", "kind": "unclassified_tcp", "frame_number": 82358, "timestamp_epoch": "1634918349.914320000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701000ed957000000170303004800000000000000060d2bb9bd2439646389cb0256384afd5103b4911ca928e2b7fa35fb89daa83b14914d5374f4e9efa22295e914633eb619456242632a824ea876122dcd3951d9f4" } }, { "event_id": "evt-4354b7680f4f17b1d7f8d5e2", "kind": "unclassified_tcp", "frame_number": 82362, "timestamp_epoch": "1634918349.914781000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050701000ed90a000000" } }, { "event_id": "evt-3a3d21f9aeb4980949a0d883", "kind": "unclassified_tcp", "frame_number": 82364, "timestamp_epoch": "1634918350.526215000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b8a8aaa982821b4fcd31a0b2", "kind": "unclassified_tcp", "frame_number": 82367, "timestamp_epoch": "1634918353.367701000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f275000000170303006600000000000000053ba793d762014f5fdc1ce78d19d19ebbd133ccb3ae11c81e53bab160ac530640b8ded15075cff362a3e8891ec8cdcf779e03813996188574b27ef66a8ccc8596df4e1a15419e95197a12927ee665ee0e923e4b4717abed7793077c373f11" } }, { "event_id": "evt-923ee1aea7c3abd235407e9e", "kind": "unclassified_tcp", "frame_number": 82370, "timestamp_epoch": "1634918353.645446000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f22d000000170303001e00000000000000067e5cf22521371079c868fef736c55945b3dbb5527d66" } }, { "event_id": "evt-f4ba44d440fe43bd4cf230c3", "kind": "unclassified_tcp", "frame_number": 82376, "timestamp_epoch": "1634918353.697893000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f25700000017030300480000000000000006f87853b5c2d21bcc8692526b297f4cf1151d351a2de6ebc96d376239743a73c2eeb8f21648db34ea6a0d4b05cad9120e40172f58cdb4ce30ddc782d0395d544b" } }, { "event_id": "evt-2a3e6ab2b05d7b79a04e0fd9", "kind": "unclassified_tcp", "frame_number": 82380, "timestamp_epoch": "1634918353.698524000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020009f20a000000" } }, { "event_id": "evt-7f3f83dd583c131751e04a13", "kind": "unclassified_tcp", "frame_number": 82382, "timestamp_epoch": "1634918353.957398000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020009f229000000150303001a0000000000000007cb4f678729efcb1e9ad73de9b86e167212fc" } }, { "event_id": "evt-53ca1806f538ff5e01662a14", "kind": "unclassified_tcp", "frame_number": 82384, "timestamp_epoch": "1634918354.134283000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020009f20a000000" } }, { "event_id": "evt-8c42c1d0996ec9619cd8dbba", "kind": "unclassified_tcp", "frame_number": 82386, "timestamp_epoch": "1634918356.421180000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100e29c0c000000197b" } }, { "event_id": "evt-3e5a4a4e1fd49bb50ab3e0b0", "kind": "unclassified_tcp", "frame_number": 82388, "timestamp_epoch": "1634918356.525789000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f1a71c9098c3034135bc4cf4", "kind": "unclassified_tcp", "frame_number": 82390, "timestamp_epoch": "1634918356.624455000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c0e00000005020002" } }, { "event_id": "evt-e53e4f886cc059c4a7dda857", "kind": "unclassified_tcp", "frame_number": 82391, "timestamp_epoch": "1634918356.624999000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e29c0c0000000502" } }, { "event_id": "evt-f9e53403ebb685cd9cbccd07", "kind": "unclassified_tcp", "frame_number": 82393, "timestamp_epoch": "1634918357.018802000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-de8e65b1b0e7960abeb5422d", "kind": "unclassified_tcp", "frame_number": 82394, "timestamp_epoch": "1634918357.019337000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100e29c0c0000000100" } }, { "event_id": "evt-2814b7aae64a2826046934e6", "kind": "unclassified_tcp", "frame_number": 82396, "timestamp_epoch": "1634918357.565890000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-ed898f3d79940f6c20e931ef", "kind": "unclassified_tcp", "frame_number": 82401, "timestamp_epoch": "1634918357.614510000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee3a00000001703030091000000000000000470d82ac55c3f3585c85b61b6c070f3fdf506f4feda4216f5eb042e71834c1c8e2f83dcc06b64a67862b2852ea572137b7ed02c73b30e76056a21847e5efd52a1238665ff878b523e479793bd9d457f436282c3ec1869b435f664c83675acb5db3efec09bd2fd82ce8e2bebcadf70ec6c3980cd05eea49f0866fbff6632b29099be793b5c858ca7902f" } }, { "event_id": "evt-f9c9639f9ea2e5a3bbea4ab2", "kind": "unclassified_tcp", "frame_number": 82406, "timestamp_epoch": "1634918357.671934000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c14000000050000010a0a169cc418" } }, { "event_id": "evt-7bc1e9d185e933e9a79a319e", "kind": "unclassified_tcp", "frame_number": 82409, "timestamp_epoch": "1634918357.721954000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c7900000032323020534130505231314341303131302e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35393a3136202b303030300d0a" } }, { "event_id": "evt-194442b3e71f20c166dec228", "kind": "unclassified_tcp", "frame_number": 82412, "timestamp_epoch": "1634918358.055176000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee32a000000170303001b0000000000000005c8d8470d732cbc657dc8259cb426cbb97f44aa" } }, { "event_id": "evt-f6f109489e13b93bc4b51366", "kind": "unclassified_tcp", "frame_number": 82416, "timestamp_epoch": "1634918358.240542000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-79f8936913c931fab128ab46", "kind": "unclassified_tcp", "frame_number": 82420, "timestamp_epoch": "1634918358.280825000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29cd80000003235302d534130505231314341303131302e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-bc11a65937342127a76364f9", "kind": "unclassified_tcp", "frame_number": 82423, "timestamp_epoch": "1634918358.571657000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c140000005354415254544c530d0a" } }, { "event_id": "evt-3542cb579564687002906ef6", "kind": "unclassified_tcp", "frame_number": 82428, "timestamp_epoch": "1634918358.625721000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-daf0f662aec6314b5851d38c", "kind": "unclassified_tcp", "frame_number": 82431, "timestamp_epoch": "1634918358.891173000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5fb14ee056a3bbc592ede041", "kind": "unclassified_tcp", "frame_number": 82438, "timestamp_epoch": "1634918358.951540000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-38244738560cf839d081beee", "kind": "unclassified_tcp", "frame_number": 82439, "timestamp_epoch": "1634918358.951562000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-2c18429dc5adc4137786fbeb", "kind": "unclassified_tcp", "frame_number": 82445, "timestamp_epoch": "1634918358.958395000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-57b66b7e3f054c0ada5684d3", "kind": "unclassified_tcp", "frame_number": 82446, "timestamp_epoch": "1634918358.958416000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "9fc3194d0dfc90b9d77426493223d718789e1d175c37809f3dca47289283ee842871716a481f4ea768321c0b7b054d11b1eff9daf78097c7e3e62f1412cfbfd04b815afbc2fc891bc74c72943c40f57fdf58ca444f7f9cdd558b9f4196141603dfa554fc824c061eb000ed0ea734333a62485409026c043ec95ba41537d568d31337f4d37d1e606b9b15071dfb2b6460f9fa39573db7f102297b3bdc12e7e76738ad50255f6fa6405ac1f208befcd8997cd0501dd753cf522dc3ec511e450c0d00002003010240001808040805080604010501020104030503020302020601060300000e000000" } }, { "event_id": "evt-751ca938dd4068a0928093bd", "kind": "unclassified_tcp", "frame_number": 82449, "timestamp_epoch": "1634918359.696270000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29cb400000016030300070b0000030000001603030066100000626104d8c3cb032d7c6e8c59b07609db4932ad63d5bcfb5c7514924f7614ab795ec7675b27088762a34b45260d29b707e0e00c8b92f132f5e042dec26c7417a5431bcb75bdb2336951a1be6229cf2cc65786ee255c2fd6f52b1e753755ec19a0fc77b5140303000101160303002800000000000000006e7d7bff2465a818e6ff518496582855bd82200ab79dae851816dd1d6f1d52c1" } }, { "event_id": "evt-acb2fd4fbee9f49507f436e8", "kind": "unclassified_tcp", "frame_number": 82454, "timestamp_epoch": "1634918359.760965000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c3d0000001403030001011603030028000000000000000041d3e20696a2fc12f750958d9261f0488ee0201249b734c2598b6ef6d21e6599" } }, { "event_id": "evt-b5e5b3e5d095192a970701a0", "kind": "unclassified_tcp", "frame_number": 82457, "timestamp_epoch": "1634918360.210008000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c370000001703030028000000000000000162fbd38f6f842f48e6537439d52776bc992cc9ce83d217319456b48db42c6a45" } }, { "event_id": "evt-38a7083375bd836cbf0c8117", "kind": "unclassified_tcp", "frame_number": 82462, "timestamp_epoch": "1634918360.265913000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d2037404e7871e95b86f6c8a", "kind": "unclassified_tcp", "frame_number": 82465, "timestamp_epoch": "1634918361.131783000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c33000000170303002400000000000000028282760097af165e248b1755de81e95d196a9e59413baa45733560e1" } }, { "event_id": "evt-8bcc4dfe82ffb248b2cfbaf8", "kind": "unclassified_tcp", "frame_number": 82469, "timestamp_epoch": "1634918361.191838000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c39000000170303002a0000000000000002ae874b84089f0b4a34f2f3cc4c8aec35ef75f1ea33bd36987e0433727bdf58e4fff5" } }, { "event_id": "evt-c6d2be44b954ce759a436390", "kind": "unclassified_tcp", "frame_number": 82472, "timestamp_epoch": "1634918361.540823000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ecba171138c2d05b4d91c04b", "kind": "unclassified_tcp", "frame_number": 82474, "timestamp_epoch": "1634918361.642457000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c4d000000170303003e000000000000000344e26533f590206dae361984cbd6bb4ef3d98e5d1420c94d0f8621c877357351b2fbce9dec483fc24ae6055c20cf850fbde5fdfbe810" } }, { "event_id": "evt-3e78634cb615d8b90119a85e", "kind": "unclassified_tcp", "frame_number": 82479, "timestamp_epoch": "1634918361.695387000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c39000000170303002a0000000000000003901769ff8b87ef03736716b6eb7dffd017e00c2b7dc4d021c2193079bf9481e50d83" } }, { "event_id": "evt-f27086cb9a92084ed4301061", "kind": "unclassified_tcp", "frame_number": 82482, "timestamp_epoch": "1634918362.039160000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c35000000170303002600000000000000042962eebbcb07878eca3be3056600bf2164136c9d4d5c96b9f2f37f6a5502" } }, { "event_id": "evt-7d050ef54736783f8f288d45", "kind": "unclassified_tcp", "frame_number": 82487, "timestamp_epoch": "1634918363.180066000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee375000000170303006600000000000000053fd55e84f5ec040d722d424bc52f9c3e68865e595a9fd1b865c1fef8d5cffd42ca28f58487197db5e4b7f85325544b3aa9365c4d36efc47ac2abb64b4062c8804987130eb6f966f955cc0c20f21abd04265f1a8a9eaa376210294a245b81" } }, { "event_id": "evt-fdc46ee47a52147030727641", "kind": "unclassified_tcp", "frame_number": 82490, "timestamp_epoch": "1634918363.441384000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee32d000000170303001e0000000000000006ce66fa6883c63b4ff59e41a095cc9ce925c858edabcb" } }, { "event_id": "evt-e8b147be2901f3a3756498d0", "kind": "unclassified_tcp", "frame_number": 82494, "timestamp_epoch": "1634918363.483922000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee35700000017030300480000000000000006a021c56d08af5f98ba09f2a66d95ceb92d5580c2b9c563e7743f138231d605662a7096942128cecaed78228c79afecb51add05d8bc67cc778f055982a3550789" } }, { "event_id": "evt-e3eeb7aed93e470c759e9187", "kind": "unclassified_tcp", "frame_number": 82500, "timestamp_epoch": "1634918363.488363000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703000ee30a000000" } }, { "event_id": "evt-0c51d257d00d8a4844d473fa", "kind": "unclassified_tcp", "frame_number": 82503, "timestamp_epoch": "1634918363.856776000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703000ee329000000150303001a00000000000000072e7f67fdc9250729e1db215f88a85f7e84f1" } }, { "event_id": "evt-8c8581e07f85d96ddfdb6080", "kind": "unclassified_tcp", "frame_number": 82505, "timestamp_epoch": "1634918364.046452000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703000ee30a000000" } }, { "event_id": "evt-1101b1878eaaa7f0c38df7a6", "kind": "unclassified_tcp", "frame_number": 82510, "timestamp_epoch": "1634918366.557469000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4908caa480736719356cdf13", "kind": "unclassified_tcp", "frame_number": 82515, "timestamp_epoch": "1634918371.619061000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c781d18047d2c8fcfff73cec", "kind": "unclassified_tcp", "frame_number": 82518, "timestamp_epoch": "1634918372.187599000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29ca0000000170303009100000000000000046df23e411e682526aae1b0141646b84220d9ec2ed68aff665ec1c545c4c9753504e146ba369a0bdae676d2e1c30b5a2f51d718cb02f1cf5ee1f4c6184898738682f60739e21ecef26c418457c9059679ec050ea85020ff89a9ef81ab0058657e75e4c9e098236df6e06fde8705e363ba4fa0e14388d4f7702291abccddaa50913bedb6e156a88ab939" } }, { "event_id": "evt-f97ceae0fbcdae0bd5e5ebbb", "kind": "unclassified_tcp", "frame_number": 82521, "timestamp_epoch": "1634918372.487786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c2a000000170303001b000000000000000580ea69112356c6d25de5a154521cd02ea92645" } }, { "event_id": "evt-83f118a591ae538c267f03ec", "kind": "unclassified_tcp", "frame_number": 82525, "timestamp_epoch": "1634918374.350029000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702001de60c000000197b" } }, { "event_id": "evt-2ffde76c9da5049c733c7ea6", "kind": "unclassified_tcp", "frame_number": 82527, "timestamp_epoch": "1634918374.540737000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de60e00000005020002" } }, { "event_id": "evt-918cd09620ffed42302576dc", "kind": "unclassified_tcp", "frame_number": 82528, "timestamp_epoch": "1634918374.541208000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702001de60c0000000502" } }, { "event_id": "evt-c3c34367e65f4b0dbb6aa447", "kind": "unclassified_tcp", "frame_number": 82530, "timestamp_epoch": "1634918374.777787000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9df2b3fc6878d6f75e12c80e", "kind": "unclassified_tcp", "frame_number": 82531, "timestamp_epoch": "1634918374.778423000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702001de60c0000000100" } }, { "event_id": "evt-0a08ef7f954ac46ad5c2d960", "kind": "unclassified_tcp", "frame_number": 82533, "timestamp_epoch": "1634918375.161567000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-fea755b10e50bec826190883", "kind": "unclassified_tcp", "frame_number": 82540, "timestamp_epoch": "1634918375.263667000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de614000000050000010a0a169cc419" } }, { "event_id": "evt-1555a40960a20f33557538ab", "kind": "unclassified_tcp", "frame_number": 82543, "timestamp_epoch": "1634918375.325378000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de67900000032323020534139505231314341303030362e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35393a3335202b303030300d0a" } }, { "event_id": "evt-c21fee70b8e24e8bf15fc034", "kind": "unclassified_tcp", "frame_number": 82546, "timestamp_epoch": "1634918375.734159000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de61a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-461852471402d03ee59cc8b8", "kind": "unclassified_tcp", "frame_number": 82551, "timestamp_epoch": "1634918375.786586000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6d80000003235302d534139505231314341303030362e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-1a117dbbf6fcd90699860a6f", "kind": "unclassified_tcp", "frame_number": 82554, "timestamp_epoch": "1634918376.042838000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6140000005354415254544c530d0a" } }, { "event_id": "evt-44206a52df38cdcc81b1b349", "kind": "unclassified_tcp", "frame_number": 82559, "timestamp_epoch": "1634918376.097001000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de62700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-6a568b1158121a8791f525d4", "kind": "unclassified_tcp", "frame_number": 82562, "timestamp_epoch": "1634918376.415901000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ccf73b9ae3b80116bc37fb3d", "kind": "unclassified_tcp", "frame_number": 82567, "timestamp_epoch": "1634918376.479209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8e536182ee8b00def01fe6bb", "kind": "unclassified_tcp", "frame_number": 82573, "timestamp_epoch": "1634918376.550248000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4a80dccde8ac1c7b0af5bcbc", "kind": "unclassified_tcp", "frame_number": 82574, "timestamp_epoch": "1634918376.550271000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8126db0bce7d5c41525b5f79", "kind": "unclassified_tcp", "frame_number": 82578, "timestamp_epoch": "1634918376.595520000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-c0e41f660509f775eaefc8a6", "kind": "unclassified_tcp", "frame_number": 82580, "timestamp_epoch": "1634918376.636124000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-05f8704c061fed84b8629bb3", "kind": "unclassified_tcp", "frame_number": 82583, "timestamp_epoch": "1634918376.948974000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6b400000016030300070b0000030000001603030066100000626104dfd43507f9f724319bcf5602f98bcd466b4fef5a42deb26322dc23d36914129bb72c092844b897065093155c617cfe5d1f7874a32f670e8050a46c37b76456f00faa7795220bc0bfa7681dc8f20689ac059c79add8d8d466e2582b9a286294ab14030300010116030300280000000000000000f85a8a07ac2caedd3d23d7b1f514e0abed11fc99dd66ad85904e7d25e245a7b3" } }, { "event_id": "evt-c7eaa0e730e62f4db67338af", "kind": "unclassified_tcp", "frame_number": 82588, "timestamp_epoch": "1634918377.030099000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de63d0000001403030001011603030028000000000000000063ac37ec09730c0bd70f722682e3dd4f82e72e95fd75daa7774a5b9245b2e678" } }, { "event_id": "evt-ec091af7a95f4513fca44f84", "kind": "unclassified_tcp", "frame_number": 82591, "timestamp_epoch": "1634918377.407070000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de637000000170303002800000000000000011c853ef97e5bd53e0adae7b627b3d42187c0caadbc537c06d30b003b54995ffe" } }, { "event_id": "evt-be70a657b59521d38edca33e", "kind": "unclassified_tcp", "frame_number": 82596, "timestamp_epoch": "1634918377.488616000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ffaea5a5561631c02a1f8187", "kind": "unclassified_tcp", "frame_number": 82600, "timestamp_epoch": "1634918377.574259000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c7500000017030300660000000000000005cd63e64e27f8315a6161e3467c11a346b4a79a4e8daeaff4501f15a1f4bc6343b802f98406fc349b17d652051817d2915e2d4c8cc466fa1be39b616cf785d14d650cc8d7c34bdb9ec772ef2dc031e7500f540871ebb86f67e64da1504c1b" } }, { "event_id": "evt-e32ec7dd8c85cf5f32492270", "kind": "unclassified_tcp", "frame_number": 82603, "timestamp_epoch": "1634918378.744422000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6330000001703030024000000000000000211121eafa3bc5320a9a52a8759848247cd5f153e17287883efc74b33" } }, { "event_id": "evt-17b52d0c33a0dd74e9099a70", "kind": "unclassified_tcp", "frame_number": 82608, "timestamp_epoch": "1634918378.820175000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de639000000170303002a0000000000000002835bfa2027bae3315bf6b8f3543ffff3c0f32ddecd6f651fb2f4e701baee317bedab" } }, { "event_id": "evt-e86f71c5a347e2bca216e747", "kind": "unclassified_tcp", "frame_number": 82611, "timestamp_epoch": "1634918379.190872000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c2d000000170303001e00000000000000068430a2896864857b9c7f6928e418186a559a0d7be17b" } }, { "event_id": "evt-7d97a4be6044e97b69b05cbc", "kind": "unclassified_tcp", "frame_number": 82617, "timestamp_epoch": "1634918379.270783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100e29c570000001703030048000000000000000687371a307dff8cbd81e36d8a6bea6a424548a3afff67a88e9ca5051016fed748cfac999305df992199f74907933a3124d2632db61ae31fe30924e0daf1bbaed3" } }, { "event_id": "evt-5e6033dbce55479631736382", "kind": "unclassified_tcp", "frame_number": 82621, "timestamp_epoch": "1634918379.271189000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100e29c0a000000" } }, { "event_id": "evt-ee294d6b536e6df9dc031e27", "kind": "unclassified_tcp", "frame_number": 82623, "timestamp_epoch": "1634918379.373763000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6450000001703030036000000000000000333a6867ca5d572810bb7836ab9fb091004650844f06b1089daf791f0f7728b06fff6dc5e5632b5539d22782c3b47" } }, { "event_id": "evt-e1fd37059f310b0c24328de1", "kind": "unclassified_tcp", "frame_number": 82627, "timestamp_epoch": "1634918379.417309000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de639000000170303002a00000000000000033931afa51be08982983ca61b1516af9d27651f8e157adb33e9df1793f757b4ad9e47" } }, { "event_id": "evt-e5b5c30eaeba0b9355955ef5", "kind": "unclassified_tcp", "frame_number": 82630, "timestamp_epoch": "1634918379.927682000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de63500000017030300260000000000000004dbb86a76e05b95427306726de372bb39606ac953cd1b21209ac731855a98" } }, { "event_id": "evt-a37b6c6726bf5a84cdc0b5d7", "kind": "unclassified_tcp", "frame_number": 82636, "timestamp_epoch": "1634918381.636223000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4d0c3c1eeee0b71d890829dc", "kind": "unclassified_tcp", "frame_number": 82638, "timestamp_epoch": "1634918381.710438000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100b9e60c000000197b" } }, { "event_id": "evt-4b2843113ec4ebd1dd8fc55a", "kind": "unclassified_tcp", "frame_number": 82640, "timestamp_epoch": "1634918382.017472000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e60e00000005020002" } }, { "event_id": "evt-b043209892a7d5bba2728bd1", "kind": "unclassified_tcp", "frame_number": 82641, "timestamp_epoch": "1634918382.018000000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b9e60c0000000502" } }, { "event_id": "evt-963a51b09bc3f18784f18fc7", "kind": "unclassified_tcp", "frame_number": 82643, "timestamp_epoch": "1634918382.333522000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e620000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-811585bbe5b85e707f1cb96a", "kind": "unclassified_tcp", "frame_number": 82644, "timestamp_epoch": "1634918382.334236000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100b9e60c0000000100" } }, { "event_id": "evt-863ee1f541c9da4a68f092cd", "kind": "unclassified_tcp", "frame_number": 82646, "timestamp_epoch": "1634918382.744495000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-855c5ca39723d297a9eaede3", "kind": "unclassified_tcp", "frame_number": 82653, "timestamp_epoch": "1634918382.890828000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e614000000050000010a0a169cc41a" } }, { "event_id": "evt-6c22b0cd70ce163645effcd3", "kind": "unclassified_tcp", "frame_number": 82656, "timestamp_epoch": "1634918382.964451000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e67900000032323020534139505231304341303032382e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031353a35393a3432202b303030300d0a" } }, { "event_id": "evt-d43d2f0020e6579942a7c7c4", "kind": "unclassified_tcp", "frame_number": 82659, "timestamp_epoch": "1634918384.683591000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e61a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-204935c88997da56fbec6dce", "kind": "unclassified_tcp", "frame_number": 82664, "timestamp_epoch": "1634918384.764675000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6d80000003235302d534139505231304341303032382e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-10d0309c6d581d6f6ebf0a4c", "kind": "unclassified_tcp", "frame_number": 82667, "timestamp_epoch": "1634918385.033535000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6140000005354415254544c530d0a" } }, { "event_id": "evt-641206c3dcefaffc65b13d89", "kind": "unclassified_tcp", "frame_number": 82672, "timestamp_epoch": "1634918385.107411000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e62700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-1a7111be92c0c192e9c809f0", "kind": "unclassified_tcp", "frame_number": 82675, "timestamp_epoch": "1634918385.455051000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b47e8333cd385bea1c359714", "kind": "unclassified_tcp", "frame_number": 82680, "timestamp_epoch": "1634918385.535341000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-da58b485325dd714518c97f8", "kind": "unclassified_tcp", "frame_number": 82686, "timestamp_epoch": "1634918385.635665000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f547d6c80169b09d7841b4f0", "kind": "unclassified_tcp", "frame_number": 82687, "timestamp_epoch": "1634918385.635682000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e683dcfe537f9c89a53300ea", "kind": "unclassified_tcp", "frame_number": 82691, "timestamp_epoch": "1634918385.708687000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-3ebf5e7ca85769e1d4ba9d98", "kind": "unclassified_tcp", "frame_number": 82694, "timestamp_epoch": "1634918386.218124000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6b400000016030300070b000003000000160303006610000062610436223c50a8047c73bdf70354acef5d3f74b28cf669bd6b75476b31160bfdc0265d01a657b5dcea9ff7d13b27932ecff119797bfdd320a396e92f8ffc5748e8a5664cb99b0651f731680f93861862e1c25355fcac8654dd83d0d3431b7071471b140303000101160303002800000000000000004cdda9fd4986990843d8de4af2860c8bdcb655304bf5adc668449d5c96616b57" } }, { "event_id": "evt-960b487351693c547a4f806d", "kind": "unclassified_tcp", "frame_number": 82699, "timestamp_epoch": "1634918386.304770000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e63d00000014030300010116030300280000000000000000468e331b49ef0d229db2c2b938ca60a585137e05b3b7f813a54821eaf1ccea73" } }, { "event_id": "evt-a67c602ce23251efe9a70b6c", "kind": "unclassified_tcp", "frame_number": 82702, "timestamp_epoch": "1634918386.651128000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d0e258f9b4515f580cf015b4", "kind": "unclassified_tcp", "frame_number": 82704, "timestamp_epoch": "1634918386.830132000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6370000001703030028000000000000000129f8ddd6fe9de986b50cfadcbc7ef6eb4c4ae22a83832e1ce9bf50bb5cc40549" } }, { "event_id": "evt-40294ccf01ec6010d7ee75c6", "kind": "unclassified_tcp", "frame_number": 82709, "timestamp_epoch": "1634918386.929035000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1f2927717fb554d792174aa4", "kind": "unclassified_tcp", "frame_number": 82714, "timestamp_epoch": "1634918388.263730000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6330000001703030024000000000000000225e8868b78b74db011ca10dcabbc8c130c9cc9cecc7a6f3c675856a8" } }, { "event_id": "evt-ee5c300605dc2e36168a5449", "kind": "unclassified_tcp", "frame_number": 82719, "timestamp_epoch": "1634918388.358644000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e639000000170303002a00000000000000025ad08e6868e87805d864e52185f618de0c62faa5f0d591f888653e3d05f8baeeb0e7" } }, { "event_id": "evt-e26bf6f8b2926a070b8973fb", "kind": "unclassified_tcp", "frame_number": 82722, "timestamp_epoch": "1634918388.625922000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e645000000170303003600000000000000036832a094d53fa1186d1385b1cfc2b0fff6e7280ca1ea824ad4a951147f2e76a2285bbbf5c5f2f658d4924bd1c8ba" } }, { "event_id": "evt-5c6e9f493308e8e6a0e5e099", "kind": "unclassified_tcp", "frame_number": 82727, "timestamp_epoch": "1634918388.670697000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6a00000001703030091000000000000000414af8819701d5c43ba83cfa81223f87511178f3727eada49c5e04b5d4166494e671d1e68764f751c77e9be3973fd6e503e8f649083100d09654b8b85c4b2c23b9485f68e20fad9cbcc1f87e246d1e9ccac30e257ee7b413439b4c813d97258f79bc8707412529c097c96cbf9db16f1e4581dc3913b391e85c4599c1852fbf8e0827af972e32e0cc159" } }, { "event_id": "evt-7ce89f994d274a27416b5a12", "kind": "unclassified_tcp", "frame_number": 82730, "timestamp_epoch": "1634918388.700705000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e639000000170303002a0000000000000003896e8ed3b18ad54459580b54fea475293901472347679236d8fd1570fd59d531fb62" } }, { "event_id": "evt-d3608abb27c371b9ef655e82", "kind": "unclassified_tcp", "frame_number": 82734, "timestamp_epoch": "1634918389.003893000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de62a000000170303001b0000000000000005eb85e1b7556e87c0626cf1fb021cc1f3fb01d8" } }, { "event_id": "evt-b71de60061c90a3aac56b8a6", "kind": "unclassified_tcp", "frame_number": 82738, "timestamp_epoch": "1634918389.205414000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e635000000170303002600000000000000046dd4086f79cad0b23a62a6ad69d97ced7dd4f5f91dd729a38eb7f4420439" } }, { "event_id": "evt-03a4264c31cc49eecf21b1aa", "kind": "unclassified_tcp", "frame_number": 82743, "timestamp_epoch": "1634918391.697986000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-92bbbe4cc336e2deafb18d55", "kind": "unclassified_tcp", "frame_number": 82747, "timestamp_epoch": "1634918394.107549000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de67500000017030300660000000000000005466a22c0abd6f75bee725f6d4d5cadeda2febe219ace7dfd00a9f2a3df1ab028daadf7bbbc774e33b96868e3aa0180cd20ffc6d7439f0be0f72c4152390400be58ffc857cefc6fa5626c221fe116f724d3137dd8300c89192cba446b6ab3" } }, { "event_id": "evt-044fa82b9c20eabff0624cad", "kind": "unclassified_tcp", "frame_number": 82751, "timestamp_epoch": "1634918394.459082000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de62d000000170303001e0000000000000006f6c5e8ddbb0edcfed6a768e57bab160a414ba06c8a9f" } }, { "event_id": "evt-b40c97aa6c8f6516fa380522", "kind": "unclassified_tcp", "frame_number": 82755, "timestamp_epoch": "1634918394.504724000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de6570000001703030048000000000000000693f1dc1bf81c6abbd5b040b03903f712128fd27d238f16f7f2530a98d7a55dd81fd3606bd8e4744bba307433e07582f2d6a85b527f371e9052808c6a19a8d3ff" } }, { "event_id": "evt-a30519003fdadf646d60ae9f", "kind": "unclassified_tcp", "frame_number": 82761, "timestamp_epoch": "1634918394.507607000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702001de60a000000" } }, { "event_id": "evt-21292d0ae39791e8effe9021", "kind": "unclassified_tcp", "frame_number": 82763, "timestamp_epoch": "1634918394.881247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001de629000000150303001a000000000000000744a4d2a7c10aa71077430a4eafaee0efa853" } }, { "event_id": "evt-037d9598bab71d12269a450c", "kind": "unclassified_tcp", "frame_number": 82765, "timestamp_epoch": "1634918395.068948000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702001de60a0000000207020099f40c000000197b0407020099f40e00000005020002" } }, { "event_id": "evt-ac660bda526ba92080ab7b56", "kind": "unclassified_tcp", "frame_number": 82766, "timestamp_epoch": "1634918395.069512000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020099f40c0000000502" } }, { "event_id": "evt-6b36d0c923b817c7220f5984", "kind": "unclassified_tcp", "frame_number": 82768, "timestamp_epoch": "1634918395.357156000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-14881ae1b8e108af6bb1f2d7", "kind": "unclassified_tcp", "frame_number": 82769, "timestamp_epoch": "1634918395.357788000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020099f40c0000000100" } }, { "event_id": "evt-db53a30628accce24352cdac", "kind": "unclassified_tcp", "frame_number": 82772, "timestamp_epoch": "1634918395.480613000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e6a000000017030300910000000000000004161be38696cc11dd996b293931837324da3e6b6cae7c3abf6547a931e9d6e188a5df536fa1720e307fcd1950a2bcb55f2e83534dffa3eef1b60116caa13a19e3f133cb42dd034c9e799f29d8ff6762f5b5115b3ca22a6e7e00a20b8d91ce34b1ff92d05356c3eae30531f8b68f58a790e9ff51885c942be2d3f655bcd360a1b7465a1e8ec32d156d83" } }, { "event_id": "evt-288e59c44e40d0b440eeb200", "kind": "unclassified_tcp", "frame_number": 82775, "timestamp_epoch": "1634918395.714225000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f420000000050100030f736d74702e666f727073692e636f6d0019" } }, { "event_id": "evt-0d70497050fc8ec5c0935894", "kind": "unclassified_tcp", "frame_number": 82779, "timestamp_epoch": "1634918395.910149000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e62a000000170303001b0000000000000005fbc7063a9948eefa6007e7d371a86211814cc6" } }, { "event_id": "evt-35d8695a7f79f5c6981a70db", "kind": "unclassified_tcp", "frame_number": 82789, "timestamp_epoch": "1634918396.191382000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f414000000050000010a0a169cc41b" } }, { "event_id": "evt-fc720666570aef37a2d6e7fd", "kind": "unclassified_tcp", "frame_number": 82792, "timestamp_epoch": "1634918396.357896000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f43f00000032323020636d67312e736d74702e666f727073692e636f6d20636d67736d74702045534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-b5cbad41286e767c0230ea83", "kind": "unclassified_tcp", "frame_number": 82795, "timestamp_epoch": "1634918396.495242000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-81a57c1c4718638f30570d05", "kind": "unclassified_tcp", "frame_number": 82797, "timestamp_epoch": "1634918396.613001000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f41a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-a6ad45b9b5ca8a5ac68cc683", "kind": "unclassified_tcp", "frame_number": 82801, "timestamp_epoch": "1634918396.714088000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c73ce157380190e1eb22c55a", "kind": "unclassified_tcp", "frame_number": 82804, "timestamp_epoch": "1634918396.774504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f4c10000003235302d636d67312e736d74702e666f727073692e636f6d2068656c6c6f205b3137332e36362e3134362e3131325d2c20706c656173656420746f206d65657420796f750d0a3235302d48454c500d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d53495a45203130373337343539320d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302d5354415254544c530d0a323530204f4b0d0a" } }, { "event_id": "evt-9c3f9afca64f4ac0c4dfc5ba", "kind": "unclassified_tcp", "frame_number": 82807, "timestamp_epoch": "1634918397.032791000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f4140000005354415254544c530d0a" } }, { "event_id": "evt-a7f33b7b6d22ddb7d51f24a7", "kind": "unclassified_tcp", "frame_number": 82812, "timestamp_epoch": "1634918397.195932000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f42800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-a534dfcd5d3ed572fb8a64be", "kind": "unclassified_tcp", "frame_number": 82815, "timestamp_epoch": "1634918397.457580000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1faa227f6bd3c8a6bd1df7dc", "kind": "unclassified_tcp", "frame_number": 82820, "timestamp_epoch": "1634918397.625719000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-50cc8c06e6c16a395a96a174", "kind": "unclassified_tcp", "frame_number": 82826, "timestamp_epoch": "1634918397.629814000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-03181f826ed5b8c6057db2c4", "kind": "unclassified_tcp", "frame_number": 82827, "timestamp_epoch": "1634918397.629834000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "91a4977a65bf7cfe2274188d91df1a09501db21190627eb287e9dad0bbb9206f3c6769122057170edc32ce3731916f3aa7090ee867a412899504d29cbf409ecb64a67fcba1a59935e534827b2143ad90561fd3ac0ecb7f4e7873a4dd79e87bb0dccdd145d11e82ddf77dcc8fca482dd074e1c6b12ff43c0ece1b3a94243944d4093bb66f645d598aa81314e27abecd7132a10203010001a38201f4308201f0300f0603551d130101ff040530030101ff301f0603551d2304183016801452d8883ac89f7866ed89f37b387094c9020236d0304106082b0601050507010104353033303106082b060105050730018625687474703a2f2f6f63737030352e616374616c69732e69742f56412f415554482d524f4f5430450603551d20043e303c303a0604551d20003032303006082b06010505070201162468747470733a2f2f7777772e616374616c69732e69742f617265612d646f776e6c6f6164301d0603551d250416301406082b0601050507030206082b060105050703013081e30603551d1f0481db3081d8308196a08193a0819086818d6c6461703a2f2f6c64617030352e616374616c69732e69742f636e253364416374616c697325323041757468656e7469636174696f6e253230526f6f7425323043412c6f253364416374616c6973253230532e702e412e25326630333335383532303936372c6325336449543f63657274696669636174655265766f636174696f6e4c6973743b62696e617279303da03ba0398637687474703a2f2f63726c30352e616374616c69732e69742f5265706f7369746f72792f415554482d524f4f542f6765744c61737443524c301d0603551d0e041604149f8ab1b5f1b1de82f4277cbe88cddea94381a34b300e0603551d0f0101ff040403020106300d06092a864886f70d01010b0500038202010025bca0327289e4ce9bcabe4472dab4e4e0eac0d32d932f13105dcee7983a4478716e57fa39e819e2e8b8f8494734e2178f271b7ae506b850382d27020bd7e72354679fc4c8d90ece3f961689f11f9eb769f7db7fb49cd085f762ed94dd451659195f71fa0adf47f46d8d3d82dcbb7d5f895c6ee4b14de6b73c7030c22d00ddb6114752f97223e67809d8b46f64a5ab7cfd1b82db6a3189967915d8d4eb0ad15a401244b888c0d7052187efa546cc58495a09486a681db262f585f28d36a676986f86ef4c283871569b567a2352eb971fcd4b790861b125cbc1c77049d7b0d0d2f8cc288d0a7d90883669cf66e20960e08226e65b1b14505e806ea3079f0b1d4bcbec2978854091de01d340840fa4c29a9801d85488276345351db51354b9c2ef644375380bd5632a20f716027e1b64aa05d044e30034ff99ffec9a65a85a3ff5606a4fd5d34b1e1dd87b17e07a8791d5770761fb5ec4da397e68c4dfcaf045720d87ffd423ca5e1363c356ffabf40cf2b9dac56df1adf923eef12c62cfa21025e33ea911fd8ec608cc35f5d70974b7dec991833d5d2d0168f14a406f7adff38ce45daa8423a422d8ffb9a626d51508a045b9f845c13e2b66bf9e6d8cfe8f966534a2a3e13e61769c9cd93bd5570ef366e23a87fe8c1293882dd78bbac0972a6699ef90141c3d17527cf62837b2657f1da37cb4ed257d3a6f9bb66fcdde5390cb160303014d0c000149030017410438436c3f9f60707247a0fc7c1f2eebdbe39b96d89a715856dc1e57a7dfc646fffd8d196f27a349d4d94c799eeab48b948a179e1d46271e6d8ca996863f96180206010100814c9428dbcbcd93782acabac970463b27cd4fb60953ab3f3b8de93e7b0758967b1ed5eac462f4fcb3774a8e1f0be0b90390f9c8bd5faa03020fb0f247d6c80a5e5614c8970409840a44b3373f1a2e422b842a00cfcf0a75ee110e6916c76678c55684b26502472d57f45b42d9a6574dfd50ec14a5899dfe623c8345f77015f8dc95c6476f5dc80b9321e6f6c9403d05cf40a58e27974bf0c15f5d943dece35c7fbb54e5f65ea34b692f36f79d68801e3e16f35dbe4deb8a8e89e1887b62ae" } }, { "event_id": "evt-e37d50f4d00a6202e74e5e76", "kind": "unclassified_tcp", "frame_number": 82828, "timestamp_epoch": "1634918397.629845000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "120600203d474287206dca7ea5076665446c3fb1e74bd6fc20acd4120be0166f449fbd5d8ce9f514012d64c8f21fc13b95cb2b5a36c41933906bfca7715294281516030300040e000000" } }, { "event_id": "evt-258a90e0460c07bf64966702", "kind": "unclassified_tcp", "frame_number": 82832, "timestamp_epoch": "1634918398.181693000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f4880000001603030046100000424104736be8396548c5c5dc9cbb66abef79e6f702bd331ccb29ed5c1accdbbcef525db316a303a5e4024f67f46eea3063e860656b29c04b19f7a4c681ac85ddc413ec140303000101160303002800000000000000004576004c525afbc7e3e210cdf59d3b640c2ab3b914f05bdaf244d65ecd70362f" } }, { "event_id": "evt-20936555d34b2ec4effebeac", "kind": "unclassified_tcp", "frame_number": 82837, "timestamp_epoch": "1634918398.334250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f43d000000140303000101160303002881306418618f8326951ffeb90ba90cd5c879edaa9603fa66e9674ae083cdf7b0197666c275fa0a23" } }, { "event_id": "evt-b942dc8ea403159ef722a546", "kind": "unclassified_tcp", "frame_number": 82840, "timestamp_epoch": "1634918398.573992000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f437000000170303002800000000000000014b5797cf21938236eaf1264d647a64af7e3429ca3427fcfe7dff546ba77f74f3" } }, { "event_id": "evt-e1f36f34aa22cd318bb591f7", "kind": "unclassified_tcp", "frame_number": 82845, "timestamp_epoch": "1634918398.759714000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f4d000000017030300c181306418618f83274aa5c1b6269b9d9bb065ee823c34551e04cf9f2d03dec8d466a115f1c46cae734968268da45eb7057948efd0cd45031be87b4e6058ce7f081b4a36af0bee600f03038fed382e5d858687d8d9af20343515d8dc803b2173f55c7bf07585f2378cb057da26e32b5bdfb1908efee31a70c7822b1c732ff00dd9a251682fc25df55a5ed013167c1559e9a8ce2a259f59d38591b3a36ef4fdcded1c9597de9be28969f90cf22e1ecce042e3e98e31a2003a6be38b315cb387c850ec" } }, { "event_id": "evt-6b24d091255139835fc8ecce", "kind": "unclassified_tcp", "frame_number": 82848, "timestamp_epoch": "1634918399.630201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f43300000017030300240000000000000002b6fda1d97aa6a510dff7ab315e541a5f8d20e39853250f3c4ce0bb42" } }, { "event_id": "evt-096794a7b21fc1e9df8202bc", "kind": "unclassified_tcp", "frame_number": 82853, "timestamp_epoch": "1634918399.808745000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f439000000170303002a81306418618f832876d3b02f93c3358177a12084205826cd100166bba352f0c1e47f9e9587decb431f46" } }, { "event_id": "evt-5354ca157aa6d5d85d960098", "kind": "unclassified_tcp", "frame_number": 82856, "timestamp_epoch": "1634918400.686386000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f44500000017030300360000000000000003741937c99d5a90a3dc7998d5b07c1c95db8e96ef6d29a9d6cdc40e0ebfb30359d16fbe45028f7b2d103ffe20d347" } }, { "event_id": "evt-82b574b43e550abdc8325792", "kind": "unclassified_tcp", "frame_number": 82861, "timestamp_epoch": "1634918400.883797000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f439000000170303002a81306418618f8329ecc04303f10cd751d54bbee08c7fa479445bba1b384ab08329ee3ec6dc1925aa343c" } }, { "event_id": "evt-16f4cbda76b78b9f075d18c6", "kind": "unclassified_tcp", "frame_number": 82865, "timestamp_epoch": "1634918401.098608000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e67500000017030300660000000000000005e72a2034c3a6d6d5674049a1e64e9ab4e39d702f4baa029d1cbe7895aa027ea586c4e7a49025c8c8bbbb49dd4227cda21a6cb5c9b78e4534d06d34db86bf42ae38c323a546cd7d498b4ef68e05a07f0a9a41d5b92ec01f74442c19bcc903" } }, { "event_id": "evt-3a33af56c5a5543041449fa2", "kind": "unclassified_tcp", "frame_number": 82867, "timestamp_epoch": "1634918401.121301000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f43d000000170303002e0000000000000004f48d1cf0567e43f77e3baa5dc85f4f9f2900e2c481a7f519f704af185efa7d0d69562cd31807" } }, { "event_id": "evt-0dfcaf51330ba82c6f81385c", "kind": "unclassified_tcp", "frame_number": 82872, "timestamp_epoch": "1634918401.450083000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e62d000000170303001e0000000000000006d14ed4ef2b194c8d569a2f1fb4d177562426dd19a4c5" } }, { "event_id": "evt-739b28bf44fd2b0e94167f59", "kind": "unclassified_tcp", "frame_number": 82878, "timestamp_epoch": "1634918401.521041000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e65700000017030300480000000000000006f67e67324d7a5f9ed4143d13f6ed97dc64f766bcd171c0ef79d42ccf113586ecc198b1e94689763d2e7f77ad722419db2f84d2254e156ed9990c6de17b4dc41f" } }, { "event_id": "evt-15076ceb7f5a47cc76c5b725", "kind": "unclassified_tcp", "frame_number": 82882, "timestamp_epoch": "1634918401.521478000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100b9e60a000000" } }, { "event_id": "evt-583e66f8798639ab17c86cff", "kind": "unclassified_tcp", "frame_number": 82884, "timestamp_epoch": "1634918401.745704000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d6847423b346366b04302709", "kind": "unclassified_tcp", "frame_number": 82886, "timestamp_epoch": "1634918401.931092000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100b9e629000000150303001a0000000000000007e1bff3f71ccf350c006cad1cf68173edb297" } }, { "event_id": "evt-1c25f68827832e28bde5ffc4", "kind": "unclassified_tcp", "frame_number": 82888, "timestamp_epoch": "1634918402.143043000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100b9e60a000000" } }, { "event_id": "evt-7cc264655159162d1c937b7b", "kind": "unclassified_tcp", "frame_number": 82891, "timestamp_epoch": "1634918402.315847000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f44d000000170303003e81306418618f832a03924a2c393f28c6c43134852e2d86012d8fd71b25b13c8e26295bf085a67ee18390ed4c4e4b9e496de30dd93c7c4409c6315d55bbd8" } }, { "event_id": "evt-1bb7f2a88228b84886bcef12", "kind": "unclassified_tcp", "frame_number": 82894, "timestamp_epoch": "1634918402.606511000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f42a000000170303001b00000000000000056e1024cc83036bacc267d445576be1ac6b780a" } }, { "event_id": "evt-1b80b7e1431c2b9d8e03318a", "kind": "unclassified_tcp", "frame_number": 82899, "timestamp_epoch": "1634918402.763024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f441000000170303003281306418618f832b9b2a4d01ebd05cf3ab88cdd63cd2f2fca40e5204e6a50b4869d9b5acfe8e18f394c212dcea5626befb97" } }, { "event_id": "evt-c0d69eb5d1e152bb9caf379a", "kind": "unclassified_tcp", "frame_number": 82902, "timestamp_epoch": "1634918403.214445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f42d000000170303001e0000000000000006508c43dacfbc37a25631946392fe2df47a7ee8aefa9d" } }, { "event_id": "evt-022dbb8efefca49fa36a9305", "kind": "unclassified_tcp", "frame_number": 82907, "timestamp_epoch": "1634918403.385974000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f462000000170303005381306418618f832ce82bca1b8e2ea67ee5d9d6f9aa0ff2e42ec7be6ca4e1d5d095b9c95239cf0267731369f76b75207edf9dfd06abd69e65dc4c35574ee4f5f764d37278048df8d37bea789d972007d8d9d0ee" } }, { "event_id": "evt-a5137ffafda5e87c96c2e052", "kind": "unclassified_tcp", "frame_number": 82911, "timestamp_epoch": "1634918403.389196000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f429000000150303001a81306418618f832dd3665dbd577d4293d2207b250a5ee7ac4deb" } }, { "event_id": "evt-d5091d40fbfba937f3c5d783", "kind": "unclassified_tcp", "frame_number": 82915, "timestamp_epoch": "1634918403.389740000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020099f40a000000" } }, { "event_id": "evt-728fb88b5a48c16c70ac9a37", "kind": "unclassified_tcp", "frame_number": 82917, "timestamp_epoch": "1634918403.662122000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020099f429000000150303001a0000000000000007d3edf7af6366ff65d391391b83e80de934cc" } }, { "event_id": "evt-ed977d7371117f5ab9b49230", "kind": "unclassified_tcp", "frame_number": 82919, "timestamp_epoch": "1634918403.839367000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020099f40a000000" } }, { "event_id": "evt-af09b813518545ba7779e806", "kind": "unclassified_tcp", "frame_number": 82921, "timestamp_epoch": "1634918406.777672000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-26bdc2ebadf8378e43c252a3", "kind": "unclassified_tcp", "frame_number": 82923, "timestamp_epoch": "1634918411.869486000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6fb5f180be019c0a0b291062", "kind": "unclassified_tcp", "frame_number": 82925, "timestamp_epoch": "1634918416.835833000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100acf90c000000197b" } }, { "event_id": "evt-07dd91402af15131e27b60a6", "kind": "unclassified_tcp", "frame_number": 82926, "timestamp_epoch": "1634918416.837825000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf90e00000005020002" } }, { "event_id": "evt-905687d71fccf7015459fc5f", "kind": "unclassified_tcp", "frame_number": 82928, "timestamp_epoch": "1634918416.838517000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100acf90c0000000502" } }, { "event_id": "evt-acb79de477f65958222b01ca", "kind": "unclassified_tcp", "frame_number": 82930, "timestamp_epoch": "1634918416.887444000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-3c4a08ebefb01a46bf8a42d4", "kind": "unclassified_tcp", "frame_number": 82932, "timestamp_epoch": "1634918417.212509000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf920000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-0fbee745319162ce2839716d", "kind": "unclassified_tcp", "frame_number": 82933, "timestamp_epoch": "1634918417.212795000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100acf90c0000000100" } }, { "event_id": "evt-6f92e1794b62f806c44fc29c", "kind": "unclassified_tcp", "frame_number": 82935, "timestamp_epoch": "1634918417.752401000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf92500000005010003146d61696c2e62652d646176656e747572652e66720019" } }, { "event_id": "evt-91b14cdb432eabf5fd432735", "kind": "unclassified_tcp", "frame_number": 82943, "timestamp_epoch": "1634918418.367800000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf914000000050000010a0a169cc41c" } }, { "event_id": "evt-60371a8310656741fd912d4f", "kind": "unclassified_tcp", "frame_number": 82946, "timestamp_epoch": "1634918418.981957000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf935000000323230204741524d2d31303147303034204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-90d1cb3f04e6f49df2f9e715", "kind": "unclassified_tcp", "frame_number": 82949, "timestamp_epoch": "1634918419.391082000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf91a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c61733897d795fef98cdf0ea", "kind": "unclassified_tcp", "frame_number": 82954, "timestamp_epoch": "1634918419.699939000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf9990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-0b3d5528fa294fe14340cab5", "kind": "unclassified_tcp", "frame_number": 82957, "timestamp_epoch": "1634918420.934781000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf9140000005354415254544c530d0a" } }, { "event_id": "evt-414092fc677a21e2ea1c4b46", "kind": "unclassified_tcp", "frame_number": 82962, "timestamp_epoch": "1634918421.132404000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf92800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-cdc8e02529b23f5ac29d536f", "kind": "unclassified_tcp", "frame_number": 82965, "timestamp_epoch": "1634918421.464410000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200661d0c000000197b" } }, { "event_id": "evt-d333872c549b2814d30158da", "kind": "unclassified_tcp", "frame_number": 82967, "timestamp_epoch": "1634918421.746180000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d0e0000000502000204070100acf91a010000160301010b0100010703030ddfb1ab29b8ebfb228bcc0cdd71d57b2c5cf7f5bca6c8f034b11580d2f574a520ef285cb59f6f5eb5ecc05ea46149b46a39d76c21946694dd5f6a8df6e895eb6a0026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000980000001900170000146d61696c2e62652d646176656e747572652e6672000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d00203bb1526c4b231e394f5d00c8ed9d1880219c479e3b0f7e91b5b25f93f2fd0e0e" } }, { "event_id": "evt-6646178706b80a870f721462", "kind": "unclassified_tcp", "frame_number": 82968, "timestamp_epoch": "1634918421.746715000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200661d0c0000000502" } }, { "event_id": "evt-e68864baa650543bb074fec6", "kind": "unclassified_tcp", "frame_number": 82973, "timestamp_epoch": "1634918421.926525000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-bc59062dec7fcc811ea81372", "kind": "unclassified_tcp", "frame_number": 82979, "timestamp_epoch": "1634918421.930244000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-69d8bcb85356188f50a85c41", "kind": "unclassified_tcp", "frame_number": 82982, "timestamp_epoch": "1634918421.930765000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1c21db16bd99c36be221d77e", "kind": "unclassified_tcp", "frame_number": 82983, "timestamp_epoch": "1634918421.930777000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-73dc4340470163ac6996cd71", "kind": "unclassified_tcp", "frame_number": 82986, "timestamp_epoch": "1634918422.056123000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-9c5f1297ee93738fb6798665", "kind": "unclassified_tcp", "frame_number": 82987, "timestamp_epoch": "1634918422.056472000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200661d0c0000000100" } }, { "event_id": "evt-6b07d60ac808b74fc6ee1f1e", "kind": "unclassified_tcp", "frame_number": 82989, "timestamp_epoch": "1634918422.265551000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300abad0c000000197b04070300abad0e00000005020002" } }, { "event_id": "evt-884f19d76a9798620c305ec4", "kind": "unclassified_tcp", "frame_number": 82990, "timestamp_epoch": "1634918422.265938000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300abad0c0000000502" } }, { "event_id": "evt-febae67de6a99adf95678eaf", "kind": "unclassified_tcp", "frame_number": 82992, "timestamp_epoch": "1634918422.573254000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d2b000000050100031a6d61696c2e646f63746f722d6865616c7468636172652e636f6d0019" } }, { "event_id": "evt-e658c3323e0a7a400157ef96", "kind": "unclassified_tcp", "frame_number": 82996, "timestamp_epoch": "1634918422.761456000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf9e4000000160303008a10000086850401984bc0304266d8702d7cef969100ceb3e9d58292c10f502eb1bc6e54825349e354dd9288e57c4b6b5c1976a624ff67e546723a07c7aebcbcb95706a331cfedeefa00715fde75fc0fbddd329263e81d7c64be454b447e466291eade621acd32b4ff83e9b553710b1724edcad775ce550d658e66c5f18eade6c68d6c34411b9e2ea8f2341403030001011603030040380b3122c19ffd602ee6260640b621558818fa17c8fcd8e047ff52ced55a7a51b22bf3b07627656e5e689c61e3d8f86a06ca22454aa793282c2dacad563f4aa4" } }, { "event_id": "evt-a36aad853d4d0aaf84dd17a6", "kind": "unclassified_tcp", "frame_number": 83002, "timestamp_epoch": "1634918422.901846000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-8df2ebfef77eefc03d687b2e", "kind": "unclassified_tcp", "frame_number": 83004, "timestamp_epoch": "1634918422.965597000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-905535ed7a259a1898de165e", "kind": "unclassified_tcp", "frame_number": 83005, "timestamp_epoch": "1634918422.966151000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300abad0c0000000100" } }, { "event_id": "evt-23f42fcd9c8c40245c589c51", "kind": "unclassified_tcp", "frame_number": 83008, "timestamp_epoch": "1634918423.056289000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf9550000001403030001011603030040cfbaa42decb16dd60493b33b015a34a1b67c6202c15677381a5270888e93042e17a00be760117de035faf08b372c4272152561bb37a5d2e7260833ef18abd167" } }, { "event_id": "evt-a4cde00de717482bec3264b7", "kind": "unclassified_tcp", "frame_number": 83013, "timestamp_epoch": "1634918423.180166000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d14000000050000010a0a169cc41d" } }, { "event_id": "evt-d95c4cd058e656f5af45aa4e", "kind": "unclassified_tcp", "frame_number": 83015, "timestamp_epoch": "1634918423.327528000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad2600000005010003156d61696c2e76657269666963616c697461732e65730019" } }, { "event_id": "evt-7512ee18a5bb32611d30d18a", "kind": "unclassified_tcp", "frame_number": 83019, "timestamp_epoch": "1634918423.505602000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf94f0000001703030040aaf4b1188fec0e9fb10efbe1c51a409248c4667bb7a5f9c7db8cc437fd2805df3bfe1785720c19daf35309f432566b800a366e6904979dfee4f647a4c3b595b6" } }, { "event_id": "evt-2f51f2fa8f84a53810709134", "kind": "unclassified_tcp", "frame_number": 83026, "timestamp_epoch": "1634918423.795127000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d15a610a6f2a72195171b3a2", "kind": "unclassified_tcp", "frame_number": 83030, "timestamp_epoch": "1634918423.803534000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad14000000050000010a0a169cc41e" } }, { "event_id": "evt-2655155ff77ce045fd1d4f7d", "kind": "unclassified_tcp", "frame_number": 83034, "timestamp_epoch": "1634918424.132396000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d630000003232302070726f35322d32382e7374617469632e6c6e77686f73746e616d652e636f6d2045534d5450204578696d20342e39332e302e34204672692c203232204f637420323032312032333a30303a3234202b303730300d0a" } }, { "event_id": "evt-e91af1941b715625d6da80c7", "kind": "unclassified_tcp", "frame_number": 83038, "timestamp_epoch": "1634918424.196394000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad3100000032323020766c32343131382e64696e617365727665722e636f6d20534d54502052656164790d0a" } }, { "event_id": "evt-65cb54ac7d55791fcc6bc670", "kind": "unclassified_tcp", "frame_number": 83041, "timestamp_epoch": "1634918424.637447000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf94f0000001703030040f8ad0d0bae9d80d3262d1c38cf55e822f91538d806bd7a167d2fae149b9bd0f51efac7755ff0d3cfcef83694cd33abcffdf2b1d11eadfbf6ea3809c323bf719b" } }, { "event_id": "evt-fe8946d47178613dd81b51fe", "kind": "unclassified_tcp", "frame_number": 83046, "timestamp_epoch": "1634918424.782990000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf94f00000017030300401f7b36c9c89019fd2d95541461a55fdf0bd5a38a435a65d53a4e1075d7cc9ebee5c5fe131bd73b87e3bf452910db16fe073f79021aaeb03260566617f388aa26" } }, { "event_id": "evt-3818a1061364ae548defdf35", "kind": "unclassified_tcp", "frame_number": 83049, "timestamp_epoch": "1634918424.823305000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d1a00000045484c4f206c6f63616c686f73740d0a04070300abad1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-adf638fb993600398bba70c9", "kind": "unclassified_tcp", "frame_number": 83056, "timestamp_epoch": "1634918424.990052000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abadbd0000003235302d766c32343131382e64696e617365727665722e636f6d0d0a3235302d504950454c494e494e470d0a3235302d53495a452033313435373238300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-c04050f59660887ba4b65a25", "kind": "unclassified_tcp", "frame_number": 83059, "timestamp_epoch": "1634918425.082712000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf96f0000001703030060de6ff139a14233ecba96484c7e5a79a456489d3634ffd422aeb9bedba0cbf35e7ea197eb146328fb5eecd470c25422301b559695a356184541ba7ee09e11b773a45b1281f3ed4ff7822ec45cccb1b46102d3afa058f71ffb7d7cfb7fae4f874e" } }, { "event_id": "evt-eb9a666518b169c564fcb678", "kind": "unclassified_tcp", "frame_number": 83063, "timestamp_epoch": "1634918425.102419000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661dd00000003235302d70726f35322d32382e7374617469632e6c6e77686f73746e616d652e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452032363231343430300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-1e47d4c6d2fe1baa2d7443aa", "kind": "unclassified_tcp", "frame_number": 83067, "timestamp_epoch": "1634918425.223673000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf94f00000017030300403e9e8ca3747d1c2ac8db2d02d76123912189f54c63c69c18f2f0db2fb18ece8eef8feb770bd0ad64fd3bfa7011fc2e2b21b1f02126b04cd058388b439df15115" } }, { "event_id": "evt-1f52c863c5bed01b94bc8576", "kind": "unclassified_tcp", "frame_number": 83069, "timestamp_epoch": "1634918425.255977000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad140000005354415254544c530d0a" } }, { "event_id": "evt-18a583037d32c99c6cbe1e49", "kind": "unclassified_tcp", "frame_number": 83075, "timestamp_epoch": "1634918425.432985000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-9523ea086b1ffb5f50c54f7d", "kind": "unclassified_tcp", "frame_number": 83078, "timestamp_epoch": "1634918425.575622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf94f0000001703030040487f4615dfba3cf239e701660b05cd36c1ef5da2eff534defadb3698a84b0b268bcf12d1cb87c750c54f6f7de6695cf989347a3bad3baeea6722f494b0a10ce304070200661d140000005354415254544c530d0a" } }, { "event_id": "evt-46ece607a99b9b993f04e418", "kind": "unclassified_tcp", "frame_number": 83085, "timestamp_epoch": "1634918425.865799000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d1c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-6a287f195e0055ac4a0a36c3", "kind": "unclassified_tcp", "frame_number": 83088, "timestamp_epoch": "1634918426.000792000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad1b010000160301010c0100010803037e938bf4459c73925e6b46b73ea2ae31ad8352b2c775447121b77aeaee0760bf2097b3ca4ba53ac3ecd01846f698157af73d9c7bfe5aa77e09c56ff532eea3c8c40026c02fc030c02bc02ccca8cca9c013c009c014c00a009c009d002f0035c012000a130113031302010000990000001a00180000156d61696c2e76657269666963616c697461732e6573000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020d7c4c6de29f398bff3d8a96419da16d2d6bfe4aeb0d9b0a516de0b93e830ba7a" } }, { "event_id": "evt-bdca0f6489f3e1cd1859fff6", "kind": "unclassified_tcp", "frame_number": 83093, "timestamp_epoch": "1634918426.180571000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-83c9448acaadcc5296b61a49", "kind": "unclassified_tcp", "frame_number": 83097, "timestamp_epoch": "1634918426.184166000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-a4e177a19b014f4e7f7f4ed5", "kind": "unclassified_tcp", "frame_number": 83099, "timestamp_epoch": "1634918426.194276000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4460b6d3da43a240a9b8cb28", "kind": "unclassified_tcp", "frame_number": 83103, "timestamp_epoch": "1634918426.195279000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad4a0500004465f2d94cd2581c8c4ec095a1d4ef672f3820e82eff9651f0bad83d927047651c9e7372b4600c5ce2d17376e0af4ee2e537a5452f8a233e87c730e631387cf4dd52caf353042557566694e80beee603144eeefd6d94649e5ece79d4b2a6cf40b144a83e87195ee9f821165953000379308203753082025da003020102020b040000000001154b5ac394300d06092a864886f70d01010505003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3938303930313132303030305a170d3238303132383132303030305a3057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100da0ee6998dcea3e34f8a7efbf18b83256bea481ff12ab0b9951104bdf063d1e26766cf1cddcf1b482bee8d898e9aaf298065abe9c72d12cbab1c4c7007a13d0a30cd158d4ff8ddd48c50151cef50eec42ef7fce952f2917de06dd535308e5e4373f241e9d56ae3b2893a5639386f063c88695b2a4dc5a754b86c89cc9bf93ccae5fd89f5123c927896d6dc746e934461d18dc746b2750e86e8198ad56d6cd5781695a2e9c80a38ebf224134f73549313853a1bbc1e34b58b058cb9778bb1db1f2091ab09536e90ce7b3774b97047912251631679aeb1ae412608c8192bd146aa48d6642ad78334ff2c2ac16c19434a0785e7d37cf62168efeaf2529f7f9390cf0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414607b661a450d97ca89502f7d04cd34a8fffcfd4b300d06092a864886f70d01010505000382010100d673e77c4f76d08dbfecbaa2be34c52832b57cfc6c9c2c2bbd099e53bf6b5eaa1148b6e508a3b3ca3d614dd34609b33ec3a0e363551bf2baefad39e143b938a3e62f8a263befa05056f9c60afd38cdc40b705194979804dfc35f94d515c914419cc45d7564150dff5530ec868fff0def2cb96346f6aafcdfbc69fd2e1248649ae095f0a6ef298f01b115b50c1da5fe692c6924781eb3a71c7162eecac897ac175d8ac2f847866e2ac4563195d06789852bf96ca65d469d0caa82e49951dd70b7db563d61e46ae15cd6f6fe3dde41cc07ae6352bf5353f42be9c7fdb6f7825f85d24118db81b3041cc51fa4806f1520c9de0c880a1dd66655e2fc48c9292669e0160303014d0c00014903001741047d39187ac95e1ce326c521cef6de5538c4605cca41d1fb904e55c9f1e566b780629c31ebf391306119e2b7a663c530f84565b33fe32be114e8ea4084805627fe04010100c08241e8c44ac1f100266bc2a9b9b089d470cabda770c8d3de45cd44eb0c42d6b31a97bdeca3437ce89de8b142b3b3f08776a859289aa18acd15a9b71eaa937166b602796cc49e527b9e4a90f2f298d6750b97fbaa7649181fe64f7ef571a9cdee3de9c25c4d6392e358805498cf0f04d3d54a8f238fdcbacfebb13ff3291d3c951302777b98a63166446ed57739e4565d416ef1bfd548e1eb2335d74e7cf8a2f9a755c14adc64eac0ed84659e7edba1bfffc709509f47a3d376a382a3ff8cd770f69cd0cbc578afe740f8f4b1b831e6e610c6f666bc378a06867dc4271645fe3542f10437322021f3b42db22b2eab6013a4080e286b613b587eb36aa67eff1d1603030004" } }, { "event_id": "evt-eafcd22d2c890cb9147be923", "kind": "unclassified_tcp", "frame_number": 83107, "timestamp_epoch": "1634918426.369896000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad0e0000000e000000" } }, { "event_id": "evt-fc4430e0ce85e173dbb2bb1c", "kind": "unclassified_tcp", "frame_number": 83114, "timestamp_epoch": "1634918426.484849000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-959afab9de674c801b6f0b3c", "kind": "unclassified_tcp", "frame_number": 83115, "timestamp_epoch": "1634918426.484864000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017b7d2ed3370000040300483046022100b598a3f7ad9aa46050e64933d851c35b4905ffdac2f9e8834a8e12c8b4a6d92c022100e7c7e61c6d7e929de1312f46e9ca483bbcbfc98db1168a646504662aeb453c9a0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017b7d2ed311000004030046304402203028123e4d62e2af59e4f2affe595baebbef8b787f32faec3f0d9d90d8afa21f02205b5699c5d8a17b30859b83314ab77bc31b2d2046dbd88a32e6673457f6902665300d06092a864886f70d01010b050003820101008ff1725327f5a22edc818642b7dd9cd02640db67da67f454628a6127a495598b307a22307bf00ac770e84ab10bf02ebb948c0adcb6c7c2fe6696c2506f1a681cdd9eb7e471385854d04b762f786382bb14c5c77cd97fdef471424dff0eef50225585fb35bf5b3bf165dd98d57c0b72852228b23ed3131312db22f187cbce946409ccb3fcd1e7fb25eb6c22d85b49fbe02a2c90af085928a9ad5243c954ba8bbb26d672ed219f63ec169c99fe6733992eb9c70af3ab3a130a71defa4507ed20ed245e3bd29aa8a76a2342864e75a4931a48bc1f72a384da4d96a29f510b180395ecce57010e35d72633a48606e810a05ba4ff31569e15aae4446ba084c8963df800061730820613308203fba00302010202107d5b5126b476ba11db74160bbc530da7300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3138313130323030303030305a170d3330313233313233353935395a30818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e205365637572652053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100d67333d6d73c20d000d21745b8d63e07a23fc741ee3230c9b06cfdf49fcb12980f2d3f8d4d010c820f177f622ee9b84879fb16834eadd7322593b707bfb9503fa94cc3402ae939ffd981ca1f163241da8026b9237a87201ee3ff209a3c95446f8775069040b4329316091008233ed2dd870f6f5d51146a0a69c54f017269cfd3934c6d04a0a31b827eb19ab9edc59ec537789f9a0834fb562e58c4090e06645bbc37dcf19f2868a856b092a35c9fbb8898081b241dab3085aeafb02e9e7a9dc1c0421ce202f0eae04ad2ef900eb4c14016f06f85424a64f7a430a0febf2ea3275a8e8b58b8adc319178463ed6f56fd83cb6034c474bee69ddbe1e4e5ca0c5f150203010001a382016e3082016a301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d200414301230060604551d20003008060667810c01020130500603551d1f044930473045a043a041863f687474703a2f2f63726c2e7573657274727573742e636f6d2f55534552547275737452534143657274696669636174696f6e417574686f726974792e63726c307606082b06010505070101046a3068303f06082b060105050730028633687474703a" } }, { "event_id": "evt-07644a121226cdc7f36133b6", "kind": "unclassified_tcp", "frame_number": 83116, "timestamp_epoch": "1634918426.484871000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d447180a61b42c80f14931c7", "kind": "unclassified_tcp", "frame_number": 83122, "timestamp_epoch": "1634918426.489383000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d6a050000123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95000436308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb1778" } }, { "event_id": "evt-905f68baeb8293f7bb6fc470", "kind": "unclassified_tcp", "frame_number": 83125, "timestamp_epoch": "1634918426.493406000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d8d0400003651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e160303024d0c0002490300174104243d45fa23219c1aa71bc076b4eec8884f1fa8e75a4a20540dfef0ac963863a0f62bbae7ae8d094985bb750df71a987b2543ff65705e22cc7658ed014118dc7c040102007345cbb053ebe22dc69dc7782651e27e4863e25e4483d375ffe68495d4a9cc8f7a49c93cc2b58355fd366dd0b7b5ff8a28c8f1c426910147bb3267ccbadadba430c33873d432772911be71a655eb42c7e8e1346988ab77c7f7de66ff7c852b6fb99db010934d26c1738c1266d3ccb204b40287142c7986ef941254818e81c2551ec0463efe8beff9d3040960c263de978f65c4771922d8e8a544de283599341ba1b9e3007b802532b9d714bac695e6c43425856705c52b498717bb5b8b40917a9f2b645a152f73d0388c3fee4236251691890cf1b57ebd3bafc20e6ab662c7ed70b6f2f5e388d4b85668a46ed6ff6f16060dd5e0931098567ad11d30e585450f4b31ae4cb55165c59eb006f78d96d5d6cf646e312d0bae88bb75d8a076a36a1d4dfbbe8d582dfba541ad9e6cec6b0dac86a1f0f305769ae4ff46dd85f763c83964ac7b4e41bb2d6087719b8756c8bd23b781f38f99d82d9069569f5024f4b13ba5d29af6cba4085c52f4ab37ff12c62e5044f640617410334638ad426a6838679e3be10e87b2047a564d85589a25d632c887a4d076346449f3e3c35110327d630a45ec22cddc3aae46841b3f78618692cf32211f3c4ca43eed6d021452420704d49818d930e2fd6d8391ab43949ca7a0004edd215c40360c1c2f1a88268fbdf1a63aedd149f17cf19ca5913e242c017717c0851f3b352d11ee3457763f9a2dba16030300040e000000" } }, { "event_id": "evt-508841fb12a1ea68a2e6cd19", "kind": "unclassified_tcp", "frame_number": 83128, "timestamp_epoch": "1634918426.873045000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad8800000016030300461000004241041aff7f6993843fe6ad575b224304f7b90aa1de1227a9f25e33882248ae72714fc199c9608fb4bd123c3384b79743de94dae892d487a0c2355bd1358e393e26b114030300010116030300280000000000000000fe7a22bf85b7653ef187b2a1ab7b67582d9f05298bf787ae33f694acd683391c" } }, { "event_id": "evt-f2bb5a293c366f45d0215c47", "kind": "unclassified_tcp", "frame_number": 83131, "timestamp_epoch": "1634918426.887126000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-189f292bf93fc9fe4b6ccae9", "kind": "unclassified_tcp", "frame_number": 83135, "timestamp_epoch": "1634918427.030373000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad3d0000001403030001011603030028e74f418caa4ca7fac116e4668ff084f7518ea3795b8661f03fb2ee96920adc71d5f4078b3f95de00" } }, { "event_id": "evt-ca1b02a69d4c5aa76365dfad", "kind": "unclassified_tcp", "frame_number": 83137, "timestamp_epoch": "1634918427.047736000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d880000001603030046100000424104b62691e8bf6f81de4d2ee34975b7542cf8e189f64f1132d85e6670d6d07421e14e4bce06eced45f317d13e902710d339a013f2da2a6951eca20638b38af34822140303000101160303002800000000000000003abd5a728f1036261c8c7b69dad13686e628a40cf117a4adcc824616801469fc" } }, { "event_id": "evt-45b55137d547388e2b5b43ff", "kind": "unclassified_tcp", "frame_number": 83145, "timestamp_epoch": "1634918427.382067000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d3d0000001403030001011603030028c06317e034feb7ea13aa9ac58d1c8d490db437a403863a3783d44e5649d8a1a26ed2dd8b0e3c6567" } }, { "event_id": "evt-1b28a7f697eeed4e1fb0938a", "kind": "unclassified_tcp", "frame_number": 83147, "timestamp_epoch": "1634918427.423752000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad37000000170303002800000000000000016566c4d3351b730e08c2c7d7b17cb3633129790dd5d1612b939226a729396184" } }, { "event_id": "evt-ee5423ddc9f51c8f755dcce6", "kind": "unclassified_tcp", "frame_number": 83153, "timestamp_epoch": "1634918427.580196000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abadcc00000017030300bde74f418caa4ca7fbc03d2384f5848602cf29296bb2a2f098f0428f02722db9d64dee90eb2d7b180d878131f095cc78c2edc46cc8221d5aac73acc9b24caaab92acf1b78bf0a851c7cfc4e12c3d9c26ee3b30f5004521577a84ee0234bee129a9627d2cc0f816354c87d7bc7bedb68f3a98706386e50610cfff3e44fe671456604080ddfbe7639652532032db4111f925dddc6c8057b10cd6539b393bdc16ac208240b15854a8c990ce71db8e49ec5004317af760600598eebb8ea1d1d5" } }, { "event_id": "evt-a682c9707c1e570385dd2f07", "kind": "unclassified_tcp", "frame_number": 83159, "timestamp_epoch": "1634918427.710369000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf95f00000017030300505aea8d83ad7264ec85394718d4620e8404a0fceafcec6a26f53ad1166d7014cee912d4e8df050d661b9a62fc9cb802943abfcb2c2979306e1d0b378e2a1011c7545b8808d99d39939959b2413104e786" } }, { "event_id": "evt-a0b04078e8ce7dffc9a6f08d", "kind": "unclassified_tcp", "frame_number": 83162, "timestamp_epoch": "1634918427.770639000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d37000000170303002800000000000000015139cbeff2f1d32f156622eaff51fcb56676a7ddd5d0315f511d578930256bbc" } }, { "event_id": "evt-81d7e146e7a8f6b7ae3ce440", "kind": "unclassified_tcp", "frame_number": 83166, "timestamp_epoch": "1634918427.949300000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-45bd5507b117e5ad26603c0a", "kind": "unclassified_tcp", "frame_number": 83169, "timestamp_epoch": "1634918428.052448000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661ddf00000017030300d0c06317e034feb7ebf9b7b1c4e243863ab41a0d7e211315af99746cfbcbc1cf06df5d56d4ae664bf67fb20e7f485ae60bd7e0cc543a6a0f8d1189e2d4ad70f605b191f9559df60c82321c9fbd31071ad0a5670f09ccb12d6fc44e8acceae4ad0e607bc7e25b6af3f94ab299ede18ea47cfecb2c8cdd7ee2c4483f7731462db2dcc57dbe245f8f347d0cfb6078ff5c347df2d4dd13866e27295c7d5ebe17162eaba7436e4595424113f015bc82360b51701cf1706b2478a0b3b743ece6d712c0abe580d5d356256072e6a25c80971078dd" } }, { "event_id": "evt-9b89483e001331aae4415228", "kind": "unclassified_tcp", "frame_number": 83172, "timestamp_epoch": "1634918428.148766000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf93f00000017030300300e6f4f2ab6102dc44c0d043815b74a8f666e67dcf2dcbe83c73ab15cb74d63e6b7964bc83013f59cad06bdb8b1a5fc63" } }, { "event_id": "evt-146eb4f1543ea9c00e510186", "kind": "unclassified_tcp", "frame_number": 83176, "timestamp_epoch": "1634918428.506442000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad3300000017030300240000000000000002a547123669517851b8607ff9c505b676be771165c471fbabe80334c5" } }, { "event_id": "evt-cb0d9fb8b572ad745a7aedc2", "kind": "unclassified_tcp", "frame_number": 83181, "timestamp_epoch": "1634918428.672268000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad39000000170303002ae74f418caa4ca7fcc10b8d96dcbb3dd8439adc805c80c4e71ce6d6e853a8bf3845038acae30f8faef930" } }, { "event_id": "evt-0009406ac07e2f7b939723ef", "kind": "unclassified_tcp", "frame_number": 83183, "timestamp_epoch": "1634918428.685168000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d330000001703030024000000000000000249e29547847d1914d35d7911415e6df037f791c69870ec1e791d7bd6" } }, { "event_id": "evt-e64d5f8e0cd8f69f6d2d82d7", "kind": "unclassified_tcp", "frame_number": 83189, "timestamp_epoch": "1634918428.959291000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d39000000170303002ac06317e034feb7ec9163fe72bb771d4435be725984f578e1898ee109e74a411b3d129a36e96106ec0358" } }, { "event_id": "evt-36c770145411963390eabde3", "kind": "unclassified_tcp", "frame_number": 83192, "timestamp_epoch": "1634918429.031475000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad550000001703030046000000000000000334a5c72d901c8037830a3184a7a1f5a2afa4e94ed628c3212f5f4887fdd0e1ba9a39623fd000a62b8318777af14baae522ce99eedce79e4ee69700ce95ee" } }, { "event_id": "evt-1db07b1b9439948b5563fca3", "kind": "unclassified_tcp", "frame_number": 83202, "timestamp_epoch": "1634918429.190801000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad39000000170303002ae74f418caa4ca7fda8222664ae7a0b70b89350b42e69c1524f513b1935c351e7f0a45a7d9d2f9926f804" } }, { "event_id": "evt-03a502e37d13b5c0c8ed636f", "kind": "unclassified_tcp", "frame_number": 83204, "timestamp_epoch": "1634918429.216714000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d4d000000170303003e00000000000000032ccc43c7bc4759c34155f2f1a8af9404074f48fa334a8ab9aefbb6f5d301b24c5edbf144f1f217574168998ab5a69f2e34a5aafbb30e" } }, { "event_id": "evt-307806aeb6f16655b08b4f35", "kind": "unclassified_tcp", "frame_number": 83217, "timestamp_epoch": "1634918429.469757000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad39000000170303002a0000000000000004922947ef3d213b2af57ca8dad7afb7e302c3d3ffebbcfea453e1c2dd0a1d2622f252" } }, { "event_id": "evt-a737f6f70dea45d8d6e6993d", "kind": "unclassified_tcp", "frame_number": 83222, "timestamp_epoch": "1634918429.518395000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d39000000170303002ac06317e034feb7ed1dc4bd2476067337b5bc15c9b123ad5b372f26d8ed1a3213c9d7bf2fbe7c1abce9e6" } }, { "event_id": "evt-5ac03f8dbe88377212668c27", "kind": "unclassified_tcp", "frame_number": 83225, "timestamp_epoch": "1634918429.766752000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d3d000000170303002e000000000000000410b2f1f9329e2c62bd4d3088707f964965b507c1ac0c6bd5274a400838dcdf2ddea59aa93116" } }, { "event_id": "evt-b07f939f17ca796943d4c529", "kind": "unclassified_tcp", "frame_number": 83230, "timestamp_epoch": "1634918430.146683000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d4a000000170303003bc06317e034feb7ee0f381ff19e0d8a93d9aa16865819e4fd0c247fb8ae31376482279e24af0053b88a0d063ec6ce50d50057bdabe05cf9fcc29302" } }, { "event_id": "evt-b63fc6e1c82e0da72543c2b0", "kind": "unclassified_tcp", "frame_number": 83237, "timestamp_epoch": "1634918430.479402000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d2a000000170303001b00000000000000050b0a2fa930de696f8372478df88c12f315e6bb" } }, { "event_id": "evt-d84381239f2c4dca5281f789", "kind": "unclassified_tcp", "frame_number": 83242, "timestamp_epoch": "1634918430.904997000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d410000001703030032c06317e034feb7efe4d9af534dbc501ee55ddb669764cfca4af3e53ee5ef070b168dad3da2b1e0f14bac2ae676d1c44964e3" } }, { "event_id": "evt-d7d1cfd5d07a858447e4a655", "kind": "unclassified_tcp", "frame_number": 83246, "timestamp_epoch": "1634918431.163953000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad5d000000170303004ee74f418caa4ca7fe95f07d79b8ed2a1cee9beffeab46f4e64909ef8855b8e3182e9fbf213c819e06b3c599e76cedec5945f650726a01c4481e9072cc6d29addb2558ae54015fd39c22b6052c7037" } }, { "event_id": "evt-32cc18a97e7a799e6335a000", "kind": "unclassified_tcp", "frame_number": 83249, "timestamp_epoch": "1634918431.229675000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d2d000000170303001e0000000000000006d0820468f19e9fd1ab8cedfb3f0a7f247a210026d427" } }, { "event_id": "evt-2d5917a3b0783a1181106552", "kind": "unclassified_tcp", "frame_number": 83253, "timestamp_epoch": "1634918431.462622000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad2a000000170303001b000000000000000558cb258b0ea604639135a8223dfba542100a2f" } }, { "event_id": "evt-611f417ed0c18819ccbd468f", "kind": "unclassified_tcp", "frame_number": 83261, "timestamp_epoch": "1634918431.536400000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d7e0000001703030050c06317e034feb7f0a834f7b5610f6e1d4f738981901990d0377654df096266a47c1e05f5245bacebc2de61460bff30cd021fe09d5b649ab0563a174555566bb966aec38d0c4ed278a205b406a91f2597150303001ac06317e034feb7f1c6e897760c8589dae815da3a1961faefa340" } }, { "event_id": "evt-27e80f37bad66aeae03eafa5", "kind": "unclassified_tcp", "frame_number": 83265, "timestamp_epoch": "1634918431.537004000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200661d0a000000" } }, { "event_id": "evt-7524cabbbf9224f7295b2f11", "kind": "unclassified_tcp", "frame_number": 83268, "timestamp_epoch": "1634918431.640373000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad500000001703030041e74f418caa4ca7ff897190df54a274acc43d4e212f09ac4ce6d68e11e963c55adafa47a7ca435839ea1d9ca0603daedce1b1d93b760585bd0498ea9634eec5cac3" } }, { "event_id": "evt-d20beba454763ff8c36a673c", "kind": "unclassified_tcp", "frame_number": 83271, "timestamp_epoch": "1634918431.864927000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200661d29000000150303001a0000000000000007c12322731e63ab0957e144115d0cb873e2ad" } }, { "event_id": "evt-ab652de5e9c47774e2579287", "kind": "unclassified_tcp", "frame_number": 83273, "timestamp_epoch": "1634918432.073788000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200661d0a000000" } }, { "event_id": "evt-8e096019fcdf0b375cdf2681", "kind": "unclassified_tcp", "frame_number": 83275, "timestamp_epoch": "1634918432.281966000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad2d000000170303001e000000000000000658cc17c3674dcdfe02958dbeb58eb6bdbb96e649e675" } }, { "event_id": "evt-a87a6eb6919de272e5f04d84", "kind": "unclassified_tcp", "frame_number": 83282, "timestamp_epoch": "1634918432.471579000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad550000001703030027e74f418caa4ca800fee0be9ba4b0d09f68ddf96092838039f00b6456adeab4cbd1d1facfa2037f150303001ae74f418caa4ca801094ee85af14c67bf33a768e67257b0e112fa" } }, { "event_id": "evt-37ab3540f1b7c778a037adf9", "kind": "unclassified_tcp", "frame_number": 83286, "timestamp_epoch": "1634918432.472146000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300abad0a000000" } }, { "event_id": "evt-eb3031cb89649f8a82d742f6", "kind": "unclassified_tcp", "frame_number": 83288, "timestamp_epoch": "1634918432.759841000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300abad29000000150303001a000000000000000782921e88816ce7c95052e4413fa19e88a02b" } }, { "event_id": "evt-c1e275d7191b2fd252db55f7", "kind": "unclassified_tcp", "frame_number": 83290, "timestamp_epoch": "1634918432.936683000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070300abad0a000000" } }, { "event_id": "evt-f4366691fb9a1cd19036723c", "kind": "unclassified_tcp", "frame_number": 83292, "timestamp_epoch": "1634918433.011388000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-94999100ef2ff9e59129e693", "kind": "unclassified_tcp", "frame_number": 83294, "timestamp_epoch": "1634918438.027875000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-0b00d09540381617a1b54d49", "kind": "unclassified_tcp", "frame_number": 83296, "timestamp_epoch": "1634918443.028900000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-d74d73b6590065b044d34d8e", "kind": "unclassified_tcp", "frame_number": 83298, "timestamp_epoch": "1634918448.059575000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2d502848ddb54d72c5dfbb98", "kind": "unclassified_tcp", "frame_number": 83315, "timestamp_epoch": "1634918453.089264000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ac39694430200df8730263bb", "kind": "unclassified_tcp", "frame_number": 83341, "timestamp_epoch": "1634918456.856575000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-9a6404189a5153ae6a104706", "kind": "unclassified_tcp", "frame_number": 83351, "timestamp_epoch": "1634918458.138276000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7f2fa24ac35d1cc9be4a1c26", "kind": "unclassified_tcp", "frame_number": 83353, "timestamp_epoch": "1634918458.716186000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702003cab0c000000197b040702003cab0e00000005020002" } }, { "event_id": "evt-b8cf3d32653306241dfaefa1", "kind": "unclassified_tcp", "frame_number": 83354, "timestamp_epoch": "1634918458.717250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702003cab0c0000000502" } }, { "event_id": "evt-d6fed6e647712b52f079e1a5", "kind": "unclassified_tcp", "frame_number": 83356, "timestamp_epoch": "1634918458.988760000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-43e9f379d01e46268c7d7e35", "kind": "unclassified_tcp", "frame_number": 83357, "timestamp_epoch": "1634918458.989316000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702003cab0c0000000100" } }, { "event_id": "evt-7ea10f95035e54926a75a185", "kind": "unclassified_tcp", "frame_number": 83359, "timestamp_epoch": "1634918459.345241000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab1f000000050100030e61762e6469616c2d75702e6e65740019" } }, { "event_id": "evt-ad3e67fea8ced1bbc0d1da5c", "kind": "unclassified_tcp", "frame_number": 83367, "timestamp_epoch": "1634918459.945815000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab14000000050000010a0a169cc420" } }, { "event_id": "evt-c5427bbb788c320040c4c18f", "kind": "unclassified_tcp", "frame_number": 83370, "timestamp_epoch": "1634918461.280249000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf95f000000170303005020417d19131e013e9d9991c890ad60fa00c9eb87f3b03abc22ea25eefcce131ee3b0da362eeae24942f781365264df9fdf97650d892150f273505414952e11389c60fc9560bf26f58482f33b929e44c8" } }, { "event_id": "evt-8d527749dcf2f5e9e88184da", "kind": "unclassified_tcp", "frame_number": 83373, "timestamp_epoch": "1634918461.552786000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf93f000000170303003067c1093e4360fdc3cfca6a6929e1d011980fb8efbd62ddd91ce9dd0cfbe15d74ce45417f451f757d1ed915c7af96e613" } }, { "event_id": "evt-e111d51347fdf8c00569e4b9", "kind": "unclassified_tcp", "frame_number": 83379, "timestamp_epoch": "1634918461.699191000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf96f00000017030300608e5ac61ac71711b62d3639924f6b2ab2e317eb9e6b8259ffcafbb0fd8c890d0e3afc8db2c0f93384871fc0225d81cbf3c586f2f5d08caebfb0aef6eccf3f65e86feaa59b830f655d2357e4587221cfa66354e0616e13bd8aa5ddf9d6484ccccf" } }, { "event_id": "evt-9efb45025f135a60b46e5ea4", "kind": "unclassified_tcp", "frame_number": 83383, "timestamp_epoch": "1634918461.699657000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100acf90a000000" } }, { "event_id": "evt-da5bfabfb594842c5e19acb2", "kind": "unclassified_tcp", "frame_number": 83385, "timestamp_epoch": "1634918461.958335000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100acf93f0000001503030030cd5cce0207bf592154796ffe7b9f57ac66645131617bdab2dae6223c2bf6726571d4c280fdeceaf9957d08be168ef268" } }, { "event_id": "evt-03230eb16a4455cb2409c961", "kind": "unclassified_tcp", "frame_number": 83387, "timestamp_epoch": "1634918462.176573000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100acf90a000000" } }, { "event_id": "evt-f89894e05c42b0f23f45e407", "kind": "unclassified_tcp", "frame_number": 83389, "timestamp_epoch": "1634918463.152015000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-7ffbc63774718ac3528e1cdb", "kind": "unclassified_tcp", "frame_number": 83399, "timestamp_epoch": "1634918466.709654000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab4f00000032323020766973702d6d61696c342e697364736c2e6e65742045534d5450204578696d204672692c203232204f637420323032312031383a30313a3036202b303230300d0a" } }, { "event_id": "evt-cea7fb9b23ee1fbe083a027f", "kind": "unclassified_tcp", "frame_number": 83402, "timestamp_epoch": "1634918466.861359000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207010039410c000000197b" } }, { "event_id": "evt-93d6692e40d8fd45d4e91a9c", "kind": "unclassified_tcp", "frame_number": 83404, "timestamp_epoch": "1634918467.073120000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039410e00000005020002040702003cab1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-83130b4e60cae8a9ac9c16d9", "kind": "unclassified_tcp", "frame_number": 83405, "timestamp_epoch": "1634918467.073704000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010039410c0000000502" } }, { "event_id": "evt-a80237c5c093a293de13ccbd", "kind": "unclassified_tcp", "frame_number": 83410, "timestamp_epoch": "1634918467.385188000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cabb70000003235302d766973702d6d61696c342e697364736c2e6e65742048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452035323432383830300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302048454c500d0a" } }, { "event_id": "evt-cc7cf4f15c791065324d11e2", "kind": "unclassified_tcp", "frame_number": 83412, "timestamp_epoch": "1634918467.418371000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100394120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-ed0345c973b028574d1b32ff", "kind": "unclassified_tcp", "frame_number": 83413, "timestamp_epoch": "1634918467.418728000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307010039410c0000000100" } }, { "event_id": "evt-22623cb5480a70493752c484", "kind": "unclassified_tcp", "frame_number": 83416, "timestamp_epoch": "1634918468.024670000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039412a00000005010003196d61696c2e6d612d636f6d6d756e69636174696f6e2e636f6d0019" } }, { "event_id": "evt-848c7f9832c10b3f0acb0d21", "kind": "unclassified_tcp", "frame_number": 83420, "timestamp_epoch": "1634918468.169406000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50380, "dst_port": 1187, "tcp_stream": 1607, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-1bf66ce966ea80a3e0cfd0eb", "kind": "unclassified_tcp", "frame_number": 83424, "timestamp_epoch": "1634918468.258804000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab1600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-aeb4b5415c53bc976217146a", "kind": "unclassified_tcp", "frame_number": 83430, "timestamp_epoch": "1634918468.353317000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100394114000000050000010a0a169cc421" } }, { "event_id": "evt-42a4344ca8778ea520241f91", "kind": "unclassified_tcp", "frame_number": 83433, "timestamp_epoch": "1634918468.521600000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100394134000000323230204741524d2d393652303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-d1c79130f25b96846f8c3802", "kind": "unclassified_tcp", "frame_number": 83437, "timestamp_epoch": "1634918468.584539000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab1c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-6f50928da6e71db02240858c", "kind": "unclassified_tcp", "frame_number": 83440, "timestamp_epoch": "1634918468.956411000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039411a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-1697ba19728b29ae2612c369", "kind": "unclassified_tcp", "frame_number": 83447, "timestamp_epoch": "1634918469.148203000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003941990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-5974d3f4ffbc8eb8f355e0af", "kind": "unclassified_tcp", "frame_number": 83449, "timestamp_epoch": "1634918469.232823000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab280000006332397564473941615735726232786c6132387559323875656d453d0d0a" } }, { "event_id": "evt-0478b54b64f8747ec75ca923", "kind": "unclassified_tcp", "frame_number": 83453, "timestamp_epoch": "1634918469.673331000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003941140000005354415254544c530d0a" } }, { "event_id": "evt-b3bf374da609a5a04345da07", "kind": "unclassified_tcp", "frame_number": 83457, "timestamp_epoch": "1634918469.674176000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab1c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-ebffa43cc0494bcc951a3637", "kind": "unclassified_tcp", "frame_number": 83461, "timestamp_epoch": "1634918469.845861000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039412800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-d1324aa283231e6e6cd5792a", "kind": "unclassified_tcp", "frame_number": 83464, "timestamp_epoch": "1634918470.024103000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab1c000000615735726232786c613238784d413d3d0d0a" } }, { "event_id": "evt-c4884a73753c2303aeb23976", "kind": "unclassified_tcp", "frame_number": 83468, "timestamp_epoch": "1634918470.204652000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e084320fb552aae0a48f9b25", "kind": "unclassified_tcp", "frame_number": 83473, "timestamp_epoch": "1634918470.336310000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab280000003233352041757468656e7469636174696f6e207375636365656465640d0a" } }, { "event_id": "evt-25c4cae4b1d66c2f183f69d7", "kind": "unclassified_tcp", "frame_number": 83476, "timestamp_epoch": "1634918470.367762000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039411205000016030312330200005103036172e046caefc857eeb476fa972121747bcf8528760fa0e73454d43c6f446d9020810400006e0536eb657a4fda651320f5846872de99fcdbd91bb785d04ab49dd1c01400000900050000ff010001000b000d65000d620007453082074130820629a003020102021100dc507488ffb7a7b38c56687fef70eb2e300d06092a864886f70d01010b050030818f310b3009060355040613024742311b30190603550408131247726561746572204d616e636865737465723110300e0603550407130753616c666f726431183016060355040a130f5365637469676f204c696d69746564313730350603550403132e5365637469676f2052534120446f6d61696e2056616c69646174696f6e2053656375726520536572766572204341301e170d3231303930323030303030305a170d3232303930323233353935395a3016311430120603550403130b6e73302e6f76682e6e657430820222300d06092a864886f70d01010105000382020f003082020a0282020100d8cb5e420bac9e3539150b70d89862f071dfafef2f9d33df350253b84eb72eff8a0e4d7fb7b15e157c7d84856f6470c2f56208bfa58b7fa15cd98960eddb87fbaf35b9c2b63b38f237fc783dd473a99b672e1f47a712373d4f4770b0d78dc1d860893b168f04615351c3e7b69392fef461d2e691e59ae433653faf0f8a1d3e1c7a5f1e93bc87583411047cc22e8a57f2455a8a05bd710c58de4ddc0796672ebf8faa3ce64c96cabf2ce63e808e0a64ff5c961cb9b0012b612fb6887ff554f6e9924eaf5eb432dfa5d2193170588c6dbe32481de7c47c0b2b3475a3ad0e1e64a95eaa52680898e9e6a54cc1a8204df4aa18508382d914ae6a0f04f22848d0c24bcc2b0f09c646ed9ddd4babff75e2c621b587f370214ef2aacc27fe59570078e209d336c536db77876f47121c40de79a0a314474d35d81e399fe942373c8149c7ea549e21d6557abc50733eec49662787cb9b47815e4e497effafe528a53699a5556597698399146dfc83358d47bdd213f6d542e842f7829915bbb73b44987d323986dacab6d8bbbdecacf2afb0ba8a5017835f9fe99f63c8faf1cd8898b404f7c946c87a280cdaad61fae316438fa35cc4c725ffd0e931d0489143d0ae20224c80e7f24d45bbd30d610a2011e179ef235237deb6e114caf76f466e1e41d7cdd6885f5c820ab973d7d8f84257b0fd3a370b9a4a448ce51c855a48e62b2af988ed0203010001a382030e3082030a301f0603551d230418301680148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1301d0603551d0e041604141bbf1f29f7b09139e5b931a8d384d5006d6b9d1c300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230490603551d20044230403034060b2b06010401b231010202073025302306082b06010505070201161768747470733a2f2f7365637469676f2e636f6d2f4350533008060667810c01020130818406082b0601050507010104783076304f06082b060105050730028643687474703a2f2f6372742e7365637469676f2e636f6d2f5365637469676f525341446f6d61696e56616c69646174696f6e53656375726553657276657243412e637274302306082b060105050730018617687474703a2f2f6f6373702e7365637469676f2e636f6d3082017e060a2b06010401d6790204020482016e0482016a016800760046a555eb75fa912030b5a28969f4f37d11" } }, { "event_id": "evt-3b0cc1d58f542c526eb1a80a", "kind": "unclassified_tcp", "frame_number": 83482, "timestamp_epoch": "1634918470.369966000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003941aa0000002c4174befd49b885abf2fc70fe6d470000017ba6f03cf30000040300473045022100ea6ac5e5bc6f3156aa3719969481543945e626102f2d66e3fa5188a09cd122e502201b485bde18124ac084ad5bc74fde7c132342f0b6ca042a078da91b0c8abbe5fb00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba6f03cb2000004030047304502206637de7f46a03e" } }, { "event_id": "evt-ad19aff17d1390bd5f8bceb9", "kind": "unclassified_tcp", "frame_number": 83486, "timestamp_epoch": "1634918470.370541000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ecedcecb0ca6574e665febd7", "kind": "unclassified_tcp", "frame_number": 83487, "timestamp_epoch": "1634918470.370555000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ffde552eaff7e5a8767d48f1", "kind": "unclassified_tcp", "frame_number": 83488, "timestamp_epoch": "1634918470.370564000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-8a3a27944e1f1b03599918a0", "kind": "unclassified_tcp", "frame_number": 83494, "timestamp_epoch": "1634918470.562037000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab3a0000004d41494c2046524f4d3a3c736f6e746f40696e6b6f6c656b6f2e636f2e7a613e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-a8704937e27ea90873815ebc", "kind": "unclassified_tcp", "frame_number": 83499, "timestamp_epoch": "1634918470.908423000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab12000000323530204f4b0d0a" } }, { "event_id": "evt-9d5913c87d01cc682ba9a773", "kind": "unclassified_tcp", "frame_number": 83502, "timestamp_epoch": "1634918470.970076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003941e4000000160303008a10000086850400756c02f4f5cd06b87f117b325874c3d21e6569a5b049579b4a81afda7653ecb12152ceb872eb495aac913786c81a36f2097b1179f5e502b800ad8bd99d7b48dedc01f593c59fce358cbd78e1327d649429333cfd56b6db8e29aaba83f9f8e92038f87ca391f3d84dd90424758ada488255b707a39add5cb5e3a6969dcd609bb06da7fc140303000101160303004025ae3552153041cd8fa31c2737477f0b80afa0fdc06bcb624345cbfa98e114c518504310f7aaea5c6259ee79711d72a0c9bc89dc410185c9e6f473220a6d4998" } }, { "event_id": "evt-439ed3a4b52c22f3193c364f", "kind": "unclassified_tcp", "frame_number": 83507, "timestamp_epoch": "1634918471.139515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701003941550000001403030001011603030040c8dda8e8f9f803a0088b44e6710da547ee050fc0c234186e82d6f1f184570688d4248447693b38fe8418c8c67aa4ce0093f56bab678cfe39d1c302c4986b0afb" } }, { "event_id": "evt-38b39054591e5d15df823870", "kind": "unclassified_tcp", "frame_number": 83510, "timestamp_epoch": "1634918471.399085000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab2b0000005243505420544f3a3c616e6472655f73616e74616e61406d61696c2e72753e0d0a" } }, { "event_id": "evt-ac06d43af1cfa789cf3308b1", "kind": "unclassified_tcp", "frame_number": 83514, "timestamp_epoch": "1634918471.574481000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039414f00000017030300404384592a87e012ed3e7e9b36ce2898c6e8a8f150da0b652eb5ddaeece66dc4559bb61789678527c565cd62fca08018af30cd9a5cb11d17022139ea3acaf9762c" } }, { "event_id": "evt-c87e73ab85eb72a85cd38278", "kind": "unclassified_tcp", "frame_number": 83519, "timestamp_epoch": "1634918471.703672000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702003cab6a0000003535302d736f6e746f40696e6b6f6c656b6f2e636f2e7a612069732073656e64696e6720746f6f206d75636820656d61696c20746f6f20717569636b6c792e20285370616d0d0a3535302070726f74656374696f6e20656e61626c6564290d0a" } }, { "event_id": "evt-a8391f31e08b550cb619b4b2", "kind": "unclassified_tcp", "frame_number": 83524, "timestamp_epoch": "1634918471.721448000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5de54435f5b7237102dafe11", "kind": "unclassified_tcp", "frame_number": 83527, "timestamp_epoch": "1634918472.050518000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702003cab0a000000" } }, { "event_id": "evt-01a11493608a8248d85928c7", "kind": "unclassified_tcp", "frame_number": 83533, "timestamp_epoch": "1634918472.754252000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039414f000000170303004061a8c58777af60047cef13c41556a3cd83b5e097ce11e9fa87eb1b9be6b1a6f8d3c25d58b8489d3444eeb50818f2d0f6a8ef6ac28a2a98fc0fafd1d55ec2c4dc" } }, { "event_id": "evt-7b1f612f9af3786b0a2e819f", "kind": "unclassified_tcp", "frame_number": 83540, "timestamp_epoch": "1634918472.908250000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039414f000000170303004072a3eb0367398b1f23be9ca556c3f1187c888595a0668e9b1b3c197cabe08897b4be9e6e36fe47fc8103b45409e2e10e549ec5cc0a4b2dc2d122ce1ff5073244" } }, { "event_id": "evt-1f2199c5e23f58158b6e17a4", "kind": "unclassified_tcp", "frame_number": 83543, "timestamp_epoch": "1634918473.160844000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039415f0000001703030050ed03a3ba4d8160bcc226982439b0356d1b9b1c10c011d597cb235bfdce77b87947817fa7fa0e6bd6df169afb9f82a3e88d51437f862880d92fa7083103b9c1696097cd90c5844d665833e281c00c8952" } }, { "event_id": "evt-dbffe01f48b6ce3200c41236", "kind": "unclassified_tcp", "frame_number": 83549, "timestamp_epoch": "1634918473.315970000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039414f00000017030300408b22d4f1620b4b5ba2ba65b091a490d131ee0331c72f27573fa02042d97a24c93ed507ac9d5a1b43651e3f312e0331ee6acb08c0eb66e610b75d73c208bcb23c" } }, { "event_id": "evt-422950a0231a43be9c4cd7bf", "kind": "unclassified_tcp", "frame_number": 83552, "timestamp_epoch": "1634918473.628387000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039414f00000017030300407b3bdda4cec34a9b21bcb957692863347469d65f1881ba29861f3d55e98ff17b017907381c2d6bc80667917582c996ae71d73ed84f2c06dbdef76a3aac69217c" } }, { "event_id": "evt-43d631b5cb54e2111df88937", "kind": "unclassified_tcp", "frame_number": 83557, "timestamp_epoch": "1634918475.408469000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039415f0000001703030050aed67c5cf14bf11840fd0141d99011caa6a2e5a9878974d44481d64ed817e2023aed6df052f96b5a2e9d7dd7bc5d88560d1a935b737e50b730ee9f200984acf6372a11f1d39e9c4183d5bf2f36f566ca" } }, { "event_id": "evt-1312e4bfffef7076b8c24fbb", "kind": "unclassified_tcp", "frame_number": 83560, "timestamp_epoch": "1634918475.786485000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039413f00000017030300302d861f951ca0f88706653101898cff4398cf5f3369de083b984251df1be56155212a72a1151d3367e3685a9f3c477914" } }, { "event_id": "evt-116cb34fe7db2b103c2ebc2d", "kind": "unclassified_tcp", "frame_number": 83564, "timestamp_epoch": "1634918475.966190000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702005a9b0c000000197b040702005a9b0e00000005020002" } }, { "event_id": "evt-1dc53d528c8725186365bfa0", "kind": "unclassified_tcp", "frame_number": 83565, "timestamp_epoch": "1634918475.966714000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005a9b0c0000000502" } }, { "event_id": "evt-8f6c78ae8e9c5ec9f39b4edb", "kind": "unclassified_tcp", "frame_number": 83567, "timestamp_epoch": "1634918476.206842000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-3680e64d00310719864e969b", "kind": "unclassified_tcp", "frame_number": 83568, "timestamp_epoch": "1634918476.207409000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702005a9b0c0000000100" } }, { "event_id": "evt-684214b3189af8bdf7fde7cb", "kind": "unclassified_tcp", "frame_number": 83570, "timestamp_epoch": "1634918476.663893000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b2b000000050100031a6d61696c2e646f63746f722d6865616c7468636172652e636f6d0019" } }, { "event_id": "evt-38cb389fac65e70122485f4d", "kind": "unclassified_tcp", "frame_number": 83575, "timestamp_epoch": "1634918477.047861000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b14000000050000010a0a169cc422" } }, { "event_id": "evt-4f2e35e0bfd78f25929d0218", "kind": "unclassified_tcp", "frame_number": 83581, "timestamp_epoch": "1634918477.357344000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b630000003232302070726f35322d32382e7374617469632e6c6e77686f73746e616d652e636f6d2045534d5450204578696d20342e39332e302e34204672692c203232204f637420323032312032333a30313a3137202b303730300d0a" } }, { "event_id": "evt-3e3981e38a6eae4f37885f8d", "kind": "unclassified_tcp", "frame_number": 83586, "timestamp_epoch": "1634918477.421960000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50382, "dst_port": 1187, "tcp_stream": 1636, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-6a3ad34f74e8b134e2d192b4", "kind": "unclassified_tcp", "frame_number": 83589, "timestamp_epoch": "1634918477.612413000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-efac9b80bb96dd14e6ee7c91", "kind": "unclassified_tcp", "frame_number": 83594, "timestamp_epoch": "1634918477.965918000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9bd00000003235302d70726f35322d32382e7374617469632e6c6e77686f73746e616d652e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e6574205b3137332e36362e3134362e3131325d0d0a3235302d53495a452032363231343430300d0a3235302d384249544d494d450d0a3235302d504950454c494e494e470d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d4348554e4b494e470d0a3235302d5354415254544c530d0a3235302048454c500d0a" } }, { "event_id": "evt-ad9ed99d68361ba3835476a6", "kind": "unclassified_tcp", "frame_number": 83597, "timestamp_epoch": "1634918478.274971000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b140000005354415254544c530d0a" } }, { "event_id": "evt-ccaa659f12b4b6d25f3b18dc", "kind": "unclassified_tcp", "frame_number": 83602, "timestamp_epoch": "1634918478.685228000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b1c00000032323020544c5320676f2061686561640d0a" } }, { "event_id": "evt-e923e983397917d8a134d1e9", "kind": "unclassified_tcp", "frame_number": 83605, "timestamp_epoch": "1634918479.021557000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-fd65ecb1b1202339267547d9", "kind": "unclassified_tcp", "frame_number": 83613, "timestamp_epoch": "1634918479.314078000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ba031f2027bf5c1403d09a72", "kind": "unclassified_tcp", "frame_number": 83614, "timestamp_epoch": "1634918479.314089000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-b396b9d451648f7552e1083c", "kind": "unclassified_tcp", "frame_number": 83615, "timestamp_epoch": "1634918479.314095000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "2f2f6372742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f0005853082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7" } }, { "event_id": "evt-d39619c99c73fd2172ef213b", "kind": "unclassified_tcp", "frame_number": 83621, "timestamp_epoch": "1634918479.316985000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e46a159bdf28598027828251", "kind": "unclassified_tcp", "frame_number": 83624, "timestamp_epoch": "1634918479.320588000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-414bbcb24125db6ffaa49bf0", "kind": "unclassified_tcp", "frame_number": 83627, "timestamp_epoch": "1634918480.015852000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b8800000016030300461000004241040a740833b20c07dae72351f35c314c16ab1d477a2d36eba44493d5b97cfeceb8f5d04330d0ec74f39ba385384abee028e55b9719872155e4af49bdcae5c3207114030300010116030300280000000000000000b830058598e47eb883fd9e43c6c79cd3ad370f66532a109a42257114ad604aa4" } }, { "event_id": "evt-b46281f0db5976c2be588976", "kind": "unclassified_tcp", "frame_number": 83632, "timestamp_epoch": "1634918480.427209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b3d0000001403030001011603030028173df69cb54b6f7b9559f6b754fe947c2a162d1087037205f72f3e6e799cb9c906d72bc2b4469e62" } }, { "event_id": "evt-18205d16402e4e71489f9764", "kind": "unclassified_tcp", "frame_number": 83635, "timestamp_epoch": "1634918480.755549000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b3700000017030300280000000000000001139615f6a4e676d1e22b78d27b449bc1796dac749afca66183ff3f85d9d63449" } }, { "event_id": "evt-81c7d2fb972f188ee15eb8fa", "kind": "unclassified_tcp", "frame_number": 83640, "timestamp_epoch": "1634918481.153455000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9bdf00000017030300d0173df69cb54b6f7c22fb7bb081b3930157aa2a6f3a14b51a7b23a32b1f058456de3496b0012781100475f1aa4eb44427e4074a50bf615ac2ad2776f77e9d79c403dbd780435fb246bd69207a323d83163adf51cc6e73cee439ba445e50e9997a03ac266e7d814f3b1805a802e755d94bafd07f860331cdc1e431720f12d685d0c6b0d18f37818067da937cde187191f26bf6731cffe26876c38da0ed1dc8f3c2ef866bdc8f46fe2b05e5d1a23f2e9e8ee111c6ad9349d863584b5c9d7488598b65c28a920c6630109ad1051a1fbe3230" } }, { "event_id": "evt-5f9e60492322d997710f0b49", "kind": "unclassified_tcp", "frame_number": 83646, "timestamp_epoch": "1634918481.767813000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50383, "dst_port": 1187, "tcp_stream": 1637, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a7088e1c2f1d0a196109c442", "kind": "unclassified_tcp", "frame_number": 83649, "timestamp_epoch": "1634918482.371112000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b330000001703030024000000000000000258d475eab01e0e5fe4e0fcfb9918bb1d5fe42386b81ffde9205dfecc" } }, { "event_id": "evt-be57aaeacb3cc5476324bb2d", "kind": "unclassified_tcp", "frame_number": 83654, "timestamp_epoch": "1634918482.785984000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b39000000170303002a173df69cb54b6f7d4a42b4259900374edd7669c9f56d912ec22fc8c154251a97aa165a214ef880e054a8" } }, { "event_id": "evt-fd8ad591db4b1d8a3f695fd1", "kind": "unclassified_tcp", "frame_number": 83657, "timestamp_epoch": "1634918483.053359000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b4d000000170303003e0000000000000003142e14fea77fa549fbefc46f57d7331b7d3ca6efb27930e6f125ca52a3eabd5feaaf1ae51e6c871ce2a2dce3893d44ed49336afa64f5" } }, { "event_id": "evt-37b43554afbcc4cd07e15a79", "kind": "unclassified_tcp", "frame_number": 83662, "timestamp_epoch": "1634918483.395764000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b39000000170303002a173df69cb54b6f7e1f87080eb93d3324db6e226bba3493da3e64947f432227db1644c66c69fce797054f" } }, { "event_id": "evt-ebcadd37850a158d351fc807", "kind": "unclassified_tcp", "frame_number": 83665, "timestamp_epoch": "1634918483.652703000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b3d000000170303002e0000000000000004d62b131d331cbafeeb2b671f5994d83701b19e741ef09b11215c600f4ae51239814e8424b5b0" } }, { "event_id": "evt-5765f763bdf4b21c76a0b319", "kind": "unclassified_tcp", "frame_number": 83671, "timestamp_epoch": "1634918484.010386000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b4a000000170303003b173df69cb54b6f7f509b252032e1a62e5fd3b8aa1e93d864bfb322395519436953b34fd60e9ab3925958ed3cd6f85dbb4cd93751b909feee181b42" } }, { "event_id": "evt-044e5a2677857e7f2770bedd", "kind": "unclassified_tcp", "frame_number": 83674, "timestamp_epoch": "1634918484.388346000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b2a000000170303001b00000000000000051722372475104181174881c0dbb4063b8dda18" } }, { "event_id": "evt-97c470bda487264b0df8d67d", "kind": "unclassified_tcp", "frame_number": 83679, "timestamp_epoch": "1634918484.730048000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b410000001703030032173df69cb54b6f80d9434649dc4aa2704ea3b303d32c811a3ed145496a1ab4de0bf659d775d61a6652583c799d8d11eecf11" } }, { "event_id": "evt-7c0ee1295c72646eb138cf8c", "kind": "unclassified_tcp", "frame_number": 83682, "timestamp_epoch": "1634918484.992903000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b2d000000170303001e0000000000000006ef6b4e73749c5e6ea99de11e85f7f855becabd78e7e9" } }, { "event_id": "evt-cbc792642de5fd30bd61ad01", "kind": "unclassified_tcp", "frame_number": 83689, "timestamp_epoch": "1634918485.339205000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b7e0000001703030050173df69cb54b6f8154caf5e2b2d7239debda3ddb2cb0d9176bda78d10879b1749d9203c0562ae48a31499c5f2920b6c8593680754e725e2be66ab9c2d76d873e243c658b08a2be11493e91cd54e13d51150303001a173df69cb54b6f82f1801058ba9738fb23a66a75a74e4c99ea74" } }, { "event_id": "evt-ceed1d5022da9f1b09a4582f", "kind": "unclassified_tcp", "frame_number": 83693, "timestamp_epoch": "1634918485.339610000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702005a9b0a000000" } }, { "event_id": "evt-bcb2029ca736861fad3286a6", "kind": "unclassified_tcp", "frame_number": 83695, "timestamp_epoch": "1634918485.676670000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702005a9b29000000150303001a0000000000000007517e50861c6d2da94d3320bbd54d139cd647" } }, { "event_id": "evt-74c9860dadc358bdedfbfb31", "kind": "unclassified_tcp", "frame_number": 83697, "timestamp_epoch": "1634918485.867978000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702005a9b0a000000" } }, { "event_id": "evt-163e78abef945f4bc53e5b40", "kind": "unclassified_tcp", "frame_number": 83702, "timestamp_epoch": "1634918486.072531000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50384, "dst_port": 1187, "tcp_stream": 1638, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-a79a3a69d6d52b7927acd48b", "kind": "unclassified_tcp", "frame_number": 83706, "timestamp_epoch": "1634918487.152937000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e353066d8f9c07ab28340c3a", "kind": "unclassified_tcp", "frame_number": 83723, "timestamp_epoch": "1634918490.398720000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50385, "dst_port": 1187, "tcp_stream": 1640, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-f474ca4d6ce1d4f4fb378964", "kind": "unclassified_tcp", "frame_number": 83730, "timestamp_epoch": "1634918494.147669000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020702001be40c000000197b" } }, { "event_id": "evt-71c09a1950fe81a1e73b6933", "kind": "unclassified_tcp", "frame_number": 83732, "timestamp_epoch": "1634918494.333851000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001be40e00000005020002" } }, { "event_id": "evt-b2571e625a5ab1f87dc2d419", "kind": "unclassified_tcp", "frame_number": 83733, "timestamp_epoch": "1634918494.334685000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702001be40c0000000502" } }, { "event_id": "evt-21adf8e10e0121eff54f200e", "kind": "unclassified_tcp", "frame_number": 83736, "timestamp_epoch": "1634918494.563602000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001be420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-e0a54c2b2333c691023b159d", "kind": "unclassified_tcp", "frame_number": 83737, "timestamp_epoch": "1634918494.563884000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030702001be40c0000000100" } }, { "event_id": "evt-6bc6bfaf160f52838f513d15", "kind": "unclassified_tcp", "frame_number": 83743, "timestamp_epoch": "1634918494.748355000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50386, "dst_port": 1187, "tcp_stream": 1641, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-22539e3a6f54c022e3a80f7a", "kind": "unclassified_tcp", "frame_number": 83746, "timestamp_epoch": "1634918494.921787000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040702001be42800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-e8cfc8acc271f783fcbff2ea", "kind": "unclassified_tcp", "frame_number": 83756, "timestamp_epoch": "1634918499.128204000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50387, "dst_port": 1187, "tcp_stream": 1643, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-ab09b2edb2906ab0f1d8909e", "kind": "unclassified_tcp", "frame_number": 83769, "timestamp_epoch": "1634918503.529993000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50388, "dst_port": 1187, "tcp_stream": 1644, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-2f00f0cdb8ad048128e02d68", "kind": "unclassified_tcp", "frame_number": 83772, "timestamp_epoch": "1634918504.080203000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050702001be40a000000" } }, { "event_id": "evt-031c6458035ef911741c8e10", "kind": "unclassified_tcp", "frame_number": 83777, "timestamp_epoch": "1634918507.969596000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "480000008fd0f60eb3d3657807594e4823c9e6ca8e70a21e8c4c332d648dbb74bde00501ad16b608c3a6536a588fb288a3cf93f5cbce3e8c24f8011bc90c29c55882a2954a83f5e156e5712b" } }, { "event_id": "evt-00572f1d272ce4a6c8fe66b8", "kind": "unclassified_tcp", "frame_number": 83779, "timestamp_epoch": "1634918508.280237000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-af230ea0a1a21d30aae4b4e3", "kind": "unclassified_tcp", "frame_number": 83782, "timestamp_epoch": "1634918508.848570000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039415f0000001703030050181fcdf8a4ba6a31834eb72120ab1775e6e1c8a22724793fa923a8a00f399cb44e8836bcd3a7539ffc58dcea45091c709e8fc9e86c3eebe81e0f154ed1565bbbcccdc176c781485477b79e359304dcf2" } }, { "event_id": "evt-7a6035ed5b9880bda486fba5", "kind": "unclassified_tcp", "frame_number": 83785, "timestamp_epoch": "1634918509.197302000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039413f0000001703030030bfbd5c10bdb7e721f7861fcd5f4519d7eb5b0aacc8054bc571e0360bb5059590f55aa850e49523fed3868f1e349e18d1" } }, { "event_id": "evt-bdd06ab1cc0841b0026d7047", "kind": "unclassified_tcp", "frame_number": 83791, "timestamp_epoch": "1634918509.505964000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407010039417f00000017030300703494fc752b46aa8a7863652453cfd7f0ee55292052c784adcbe48e4c6a4ca6e20cc65cd2b25731420bc872c6efb431206f1255cdbdbb9581f46ec8bad86ace748caba96f9e0f80203b99b63325bbcaaf21457fa941dda050181d914086343e860f1c44c7cd21bcb86a5e7672b79a8a64" } }, { "event_id": "evt-34d01c6a1ebedd3a0135661f", "kind": "unclassified_tcp", "frame_number": 83795, "timestamp_epoch": "1634918509.506504000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507010039410a000000" } }, { "event_id": "evt-b691df42d1eb18cf9b581dc8", "kind": "unclassified_tcp", "frame_number": 83797, "timestamp_epoch": "1634918509.603090000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200593c0c000000197b" } }, { "event_id": "evt-909710fef8d673c78b8429c1", "kind": "unclassified_tcp", "frame_number": 83799, "timestamp_epoch": "1634918509.813201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c0e00000005020002" } }, { "event_id": "evt-25a25dcd1dea41017f89b7bb", "kind": "unclassified_tcp", "frame_number": 83800, "timestamp_epoch": "1634918509.813742000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200593c0c0000000502" } }, { "event_id": "evt-429610cbe03b4776e5560c56", "kind": "unclassified_tcp", "frame_number": 83802, "timestamp_epoch": "1634918510.371566000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-49c85344d802f4b9933f076e", "kind": "unclassified_tcp", "frame_number": 83803, "timestamp_epoch": "1634918510.372209000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200593c0c0000000100" } }, { "event_id": "evt-173b6bb8ebe48dbbb8e44ba6", "kind": "unclassified_tcp", "frame_number": 83805, "timestamp_epoch": "1634918510.743726000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c2a00000005010003196d61696c2e6d612d636f6d6d756e69636174696f6e2e636f6d0019" } }, { "event_id": "evt-4a324ab4677449211a7ddbd7", "kind": "unclassified_tcp", "frame_number": 83810, "timestamp_epoch": "1634918510.918797000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c14000000050000010a0a169cc424" } }, { "event_id": "evt-41f917894b9aadcc86c425db", "kind": "unclassified_tcp", "frame_number": 83813, "timestamp_epoch": "1634918511.089521000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c34000000323230204741524d2d393547303031204672696461792c204f63746f6265722032322c20323032310d0a" } }, { "event_id": "evt-798bcb12d0ecf590f4fc4dc8", "kind": "unclassified_tcp", "frame_number": 83816, "timestamp_epoch": "1634918511.475397000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-8803531b1bf46717576e2a66", "kind": "unclassified_tcp", "frame_number": 83821, "timestamp_epoch": "1634918511.645005000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c990000003235302d4f564820534d54502050524f58592048656c6c6f0d0a3235302d53495a45203130343835373630300d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d5354415254544c530d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-af10505f42189ee998f2847b", "kind": "unclassified_tcp", "frame_number": 83837, "timestamp_epoch": "1634918512.009445000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c140000005354415254544c530d0a" } }, { "event_id": "evt-a2d97dff181d65a15a072bfa", "kind": "unclassified_tcp", "frame_number": 83842, "timestamp_epoch": "1634918512.168133000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-9417c1d88f680c48ee7c171d", "kind": "unclassified_tcp", "frame_number": 83846, "timestamp_epoch": "1634918512.474994000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1a1e484a88871e5382a6292a", "kind": "unclassified_tcp", "frame_number": 83856, "timestamp_epoch": "1634918512.656599000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-21e7f32eac586136147acc8c", "kind": "unclassified_tcp", "frame_number": 83857, "timestamp_epoch": "1634918512.656612000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-1713b8668313ae4ca5fc13b3", "kind": "unclassified_tcp", "frame_number": 83858, "timestamp_epoch": "1634918512.656620000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "742e7573657274727573742e636f6d2f555345525472757374525341416464547275737443412e637274302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c0500038202010032bf61bd0e48c34fc7ba474df89c781901dc131d806ffcc370b4529a31339a5752fb319e6ba4ef54aa898d401768f811107cd2cab1f15586c7eeb3369186f63951bf46bf0fa0bab4f77e49c42a36179ee468397aaf944e566fb27b3bbf0a86bdcdc5771c03b838b1a21f5f7edb8adc4648b6680acfb2b5b4e234e467a93866095ed2b8fc9d283a174027c2724e29fd213c7ccf13fb962cc53144fd13edd59ba96968777ceee1ffa4f93638085339a284349c19f3be0eacd52437eb23a878d0d3e7ef924764623922efc6f711be2285c6664424268e10328dc893ae079e833e2fd9f9f5468e63bec1e6b4dca6cd21a8860a95d92e85261afdfcb1b657426d95d133f6391406824138f58f58dc805ba4d57d9578fda79bfffdc5a869ab26e7a7a405875ba9b7b8a3200b97a94585ddb38be589378e290dfc0617f638400e42e41206fb7bf3c6116862dfe398f413d8154f8bb169d91060bc642aea31b7e4b5a33a149b26e30b7bfd028eb699c138975936f6a874a286b65eebc664eacfa0a3f96e9eba2d11b6869808582dc9ac2564f25e75b438c1ae7f5a4683ea51cab6f19911356ba56a7bc600b0e7f8be64b2adc8c2f1ace351eaa493e079c8e18140c90a5be1123cc1602ae397c08942ca94cf46981269bb98d0c2d30d724b476ee593c43228638743e4b0323e0ad34bbf239b1429412b9a041f932df1c739483cad5a127f160001dc010001d8308201d40a0100a08201cd308201c906092b0601050507300101048201ba308201b630819fa21604148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1180f32303231313031393033303133335a30743072304a300906052b0e03021a05000414430bd20e4f137a1a6c918f24e5da7e324d4733c804148d8c5ec454ad8ae177e99bf99b05e1b8018d61e1021100dc507488ffb7a7b38c56687fef70eb2e8000180f32303231313031393033303133335aa011180f32303231313032363033303133335a300d06092a864886f70d01010b05000382010100aa14c45f05af38f0e9e11a5baedf58d9795fdaea9a0452f719e6eb2fdb8f3c64e438affa56120791b8c887ed6f1190ae12b541d32f5761a00c42d809dc49b1ba3da1292f66316533972c4e7a7b4bac3949740dda8a2e999509637872c65b7828e8cb16333c12d9a937388832b24cc6f770c4f66da7f1a9155ecb29e78e7350e73d13e06e89122714330b26a3b9e4c595c07d8d62f2c5f8e20c26c19541e787091e5d8dad1d6c97ad210585bdf8dae982b61d93ba7f06a8bf03e0d7529fcf42f317ac2a397dfb8e8deb3f3671957a261380c8a96a02f2407d2ff21f51944fc7ac4a042757e9fd0b80eba8c779545800800c841f8ad48888dd99cb89ee9916ad320c00028d030019850401333afaad994ea140b656079d7f1cdb19fc45e32ae9fb1f478e30ab12dbbda6f550894180ca9577a767865f1b12c2428cea4c45d85d0ad1da912a2c0758a20e91ab004e43185a6f24f9a04480a9d3a6c1f86d0b" } }, { "event_id": "evt-1f63aa6deafdb6ad6adab8e3", "kind": "unclassified_tcp", "frame_number": 83862, "timestamp_epoch": "1634918512.656980000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-86fdd0a84c2773734565311e", "kind": "unclassified_tcp", "frame_number": 83864, "timestamp_epoch": "1634918512.946728000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593ce4000000160303008a100000868504003acb312493494c1ae2b6d802b56f265829821fe218d637b05a2b47150d386891f54e70e3928e19a6923038a6e3c1444c9ac035ff050a90d593507957f6e21691e40097908bb939dbc8cc7bed9e33c7a6aefe441777c53d2171167512cdf914ee76aecbc93d0dadaaa0f0ae22234f62b251a22031aaaf944354d170bda7c9eb1fc6b9411403030001011603030040e5a9a22918eab4aa167414f9058830fb12cd9a94eae5ea1029f963d971ea17c0c65619c0855d11cb432ee8c22e69c0fc7d65ca6a6202c77404ba40eecb7e919e" } }, { "event_id": "evt-705a308a09dfbe255fdc25da", "kind": "unclassified_tcp", "frame_number": 83869, "timestamp_epoch": "1634918513.109702000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c550000001403030001011603030040d4bf9d601ccf399a23f15af9a22426ad6fda79fa9587de380296f238ba3cd8ee4cb592ee613438f0d6e6b94d5f00d5b52669ccfa09e03861d8fe8178c77482e0" } }, { "event_id": "evt-437c545957df5cc96b26cd74", "kind": "unclassified_tcp", "frame_number": 83872, "timestamp_epoch": "1634918513.348179000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c4f0000001703030040e77d85dd61795220a66cc857214157904425ac163738c69de3d0bc722586807d3dc49f07f3bb2737e1253a42b1637796e24b7b98ee3a6b096049654c8d395c54" } }, { "event_id": "evt-844e376b97da22d7362aaa3f", "kind": "unclassified_tcp", "frame_number": 83878, "timestamp_epoch": "1634918513.501941000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-d8bdea10366488ce8c391109", "kind": "unclassified_tcp", "frame_number": 83881, "timestamp_epoch": "1634918514.280051000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2c7f7907091b28580bd4b84c", "kind": "unclassified_tcp", "frame_number": 83883, "timestamp_epoch": "1634918514.323392000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c4f0000001703030040706090b37bfc28d0969602a88ae0786d1d14500da8e147807b7ca5694424ce04691eee826b16fa5492b179c3372eca830be0767ca02df274a228b4e1bda267e6" } }, { "event_id": "evt-19352c93a91be3d65ccbbee8", "kind": "unclassified_tcp", "frame_number": 83888, "timestamp_epoch": "1634918514.497855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c4f00000017030300400598c75b8ad79f0a829da2b4399302a3fe5322e7b7c97610c8a622e23f6164892dd4f53a69f084b859aa9c72d6c3fbc55e99269a43e500a6d302cada7246af07" } }, { "event_id": "evt-f91db6a6d097659d0b577c13", "kind": "unclassified_tcp", "frame_number": 83891, "timestamp_epoch": "1634918514.943275000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c5f0000001703030050f5ad3f304c6080a8994e3a39220d67f0089f3eca41f79f8aa3b49397f1dc331b1282709cef4d5b84b75e7a82b744d8cdd92215806923af70d452f65c204e49090277664c06c2b6d29b6ad1a7c40a9ebd" } }, { "event_id": "evt-fea94e89fef48c0151156a09", "kind": "unclassified_tcp", "frame_number": 83898, "timestamp_epoch": "1634918515.097691000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c4f000000170303004061ea9b0f09deae657f13d15c11827b8797b21d46f02cfede21a76cf901fa8eb8f3744bfc7b3a7196895b87e1402d7ba9f818b6f6453fe3289430964413ad1f8f" } }, { "event_id": "evt-eeb2d4d262087b080dfc93f3", "kind": "unclassified_tcp", "frame_number": 83920, "timestamp_epoch": "1634918515.325418000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c4f00000017030300402e45866cba779b15485aae526449fd3599db7b3a1a8341bd6f15905dbde88c625135c4ced7f25a6dde846a65275fd2139c656d31fe696ad12334e70544e22a96" } }, { "event_id": "evt-7ca473a38d09c9f2ae208f61", "kind": "unclassified_tcp", "frame_number": 83924, "timestamp_epoch": "1634918516.499689000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.156", "src_port": 445, "dst_port": 49725, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-54ea3708abd112e0a0a84a2a", "kind": "unclassified_tcp", "frame_number": 83932, "timestamp_epoch": "1634918517.171061000", "src_ip": "10.10.22.157", "dst_ip": "10.10.22.22", "src_port": 49716, "dst_port": 445, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-54f30da41f5485ce60099c6c", "kind": "unclassified_tcp", "frame_number": 83935, "timestamp_epoch": "1634918517.290678000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c5f000000170303005058836681924153430ae1d50346f56efa64075372486d765b1608701250f54b1ab6aef6aaa307ef8107dd6b0f52489565ad376871135ebccf39a237177be95db42c1363fdf936385ac4051fc405f9f011" } }, { "event_id": "evt-28c689df05f84776817abafa", "kind": "unclassified_tcp", "frame_number": 83938, "timestamp_epoch": "1634918517.537625000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c3f000000170303003083d92f27e7b8b91b504482db37df5c7a0fc7aa9b96009391d27929490d4dbdfc6e945187267c05f8eb6df00de026f231" } }, { "event_id": "evt-97ec923ecc8e647a3bb66c0f", "kind": "unclassified_tcp", "frame_number": 83943, "timestamp_epoch": "1634918520.280568000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-cf9ecf9c6da3bb461bea30e3", "kind": "unclassified_tcp", "frame_number": 83946, "timestamp_epoch": "1634918521.813766000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100a2e30c000000197b" } }, { "event_id": "evt-e3d1873244f03be2b688b460", "kind": "unclassified_tcp", "frame_number": 83948, "timestamp_epoch": "1634918522.011233000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e30e00000005020002" } }, { "event_id": "evt-ba96a290a4113c8e3ff314cb", "kind": "unclassified_tcp", "frame_number": 83949, "timestamp_epoch": "1634918522.011899000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a2e30c0000000502" } }, { "event_id": "evt-389038813c6ce5062aa2c26a", "kind": "unclassified_tcp", "frame_number": 83953, "timestamp_epoch": "1634918522.241401000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-2c7eb6dd7cb7dde96ae2c039", "kind": "unclassified_tcp", "frame_number": 83954, "timestamp_epoch": "1634918522.241752000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a2e30c0000000100" } }, { "event_id": "evt-95fcaf9d2efce6cd729f1897", "kind": "unclassified_tcp", "frame_number": 83956, "timestamp_epoch": "1634918522.600749000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31e000000050100030d736d74702e6a756e6f2e636f6d0019" } }, { "event_id": "evt-b8b0c0e928c41d3a19ebbd61", "kind": "unclassified_tcp", "frame_number": 83963, "timestamp_epoch": "1634918522.721840000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e314000000050000010a0a169cc426" } }, { "event_id": "evt-a19a1d4ae84b069fb3a55529", "kind": "unclassified_tcp", "frame_number": 83966, "timestamp_epoch": "1634918522.787725000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e32c00000032323020736d74706f757430322e7667732e756e74642e636f6d2045534d54500d0a" } }, { "event_id": "evt-5cab3ab0fae3320fa1ea79ba", "kind": "unclassified_tcp", "frame_number": 83969, "timestamp_epoch": "1634918523.434097000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-b8d67a45dd6dbde8fd6f436e", "kind": "unclassified_tcp", "frame_number": 83974, "timestamp_epoch": "1634918523.514089000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e39e0000003235302d736d74706f757430322e7667732e756e74642e636f6d2048656c6c6f203131322e7375622d3137332d36362d3134362e6265346d652e6e657420706c656173656420746f206d65657420796f750d0a3235302d53495a450d0a3235302d384249544d494d450d0a3235302d41555448204c4f47494e20504c41494e204352414d2d4d44350d0a3235302048454c500d0a" } }, { "event_id": "evt-fbc91856a282cd5ba8c35b74", "kind": "unclassified_tcp", "frame_number": 83978, "timestamp_epoch": "1634918524.006558000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31600000041555448204c4f47494e0d0a" } }, { "event_id": "evt-d25e1036569d4510d700d789", "kind": "unclassified_tcp", "frame_number": 83983, "timestamp_epoch": "1634918524.088923000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31c0000003333342056584e6c636d3568625755360d0a" } }, { "event_id": "evt-32b2bd4151b611f435dff8ba", "kind": "unclassified_tcp", "frame_number": 83986, "timestamp_epoch": "1634918524.357219000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e330000000626d56736332397562476c6e6148526f6233567a5a554271645735764c6d4e7662513d3d0d0a" } }, { "event_id": "evt-3427041fa203f2924a122e8f", "kind": "unclassified_tcp", "frame_number": 83991, "timestamp_epoch": "1634918524.446024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31c000000333334205547467a63336476636d51360d0a" } }, { "event_id": "evt-cfd7b7e5cb8a10b34e6b0118", "kind": "unclassified_tcp", "frame_number": 83994, "timestamp_epoch": "1634918524.726887000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e31c00000054476c6e6148526f6233567a5a513d3d0d0a" } }, { "event_id": "evt-3155e78f72ada5230326de05", "kind": "unclassified_tcp", "frame_number": 83999, "timestamp_epoch": "1634918524.806269000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e33800000032333520736d74706f757430322e7667732e756e74642e636f6d2061757468206f6b2c20676f2061686561640d0a" } }, { "event_id": "evt-18f793eb7e1ac10fedd1cd08", "kind": "unclassified_tcp", "frame_number": 84002, "timestamp_epoch": "1634918525.162485000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e33f0000004d41494c2046524f4d3a3c6e656c736f6e6c69676874686f757365406a756e6f2e636f6d3e20424f44593d384249544d494d450d0a" } }, { "event_id": "evt-d03b72ce8801bfe6200fc553", "kind": "unclassified_tcp", "frame_number": 84007, "timestamp_epoch": "1634918525.229112000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e336000000323530206e656c736f6e6c69676874686f757365406a756e6f2e636f6d2e2e2e2053656e646572204f4b0d0a" } }, { "event_id": "evt-612e52258378717b852a7c8b", "kind": "unclassified_tcp", "frame_number": 84010, "timestamp_epoch": "1634918525.326740000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-2d8a71daaff53be20b61f3e3", "kind": "unclassified_tcp", "frame_number": 84012, "timestamp_epoch": "1634918525.686789000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e32a0000005243505420544f3a3c67696c6c69616e2e64656f6e406d61696c2e72753e0d0a" } }, { "event_id": "evt-215178cd433d76580ffe7200", "kind": "unclassified_tcp", "frame_number": 84017, "timestamp_epoch": "1634918525.772226000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e3340000003235302067696c6c69616e2e64656f6e406d61696c2e72752e2e2e20526563697069656e74204f4b0d0a" } }, { "event_id": "evt-7064e9063cb005ba61d9c530", "kind": "unclassified_tcp", "frame_number": 84025, "timestamp_epoch": "1634918526.092805000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e310000000444154410d0a" } }, { "event_id": "evt-482c2095842526e3b5cd1c1d", "kind": "unclassified_tcp", "frame_number": 84030, "timestamp_epoch": "1634918526.165739000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e33c00000033353420456e746572206d61696c2c20656e64207769746820222e22206f6e2061206c696e6520627920697473656c660d0a" } }, { "event_id": "evt-f1157ae869f88b8f0f9c397f", "kind": "unclassified_tcp", "frame_number": 84033, "timestamp_epoch": "1634918526.512173000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-67fa555b6a5f74ba239b163e", "kind": "unclassified_tcp", "frame_number": 84038, "timestamp_epoch": "1634918526.592059000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a2e389000000353530204d45535341474520424c4f434b45442e204348414e474520594f55522050415353574f524420544f2052452d53454e4420594f5552204d45535341474520414e4420544f204d41494e5441494e204f4e474f494e4720534543555249545920415420485454503a2f2f5745424d41494c2e4a554e4f2e434f4d2f0a" } }, { "event_id": "evt-020e4d71d7b9b5c2551b41d1", "kind": "unclassified_tcp", "frame_number": 84044, "timestamp_epoch": "1634918526.595607000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100a2e30a000000" } }, { "event_id": "evt-18a5c9eaf5b42b68146979b5", "kind": "unclassified_tcp", "frame_number": 84046, "timestamp_epoch": "1634918526.972236000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070100a2e30a000000" } }, { "event_id": "evt-42a9f75d787b8a0c8bf946a7", "kind": "unclassified_tcp", "frame_number": 84049, "timestamp_epoch": "1634918530.389880000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-89c7d2a263b423306b4565ba", "kind": "unclassified_tcp", "frame_number": 84057, "timestamp_epoch": "1634918535.452119000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-9b401070e1888a57f1bae4b7", "kind": "unclassified_tcp", "frame_number": 84059, "timestamp_epoch": "1634918541.466241000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-b1bc74f8d90821aa445bcc07", "kind": "unclassified_tcp", "frame_number": 84074, "timestamp_epoch": "1634918543.722102000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070100a3f30c000000197b" } }, { "event_id": "evt-0720ada05fa7880fbb7a5856", "kind": "unclassified_tcp", "frame_number": 84076, "timestamp_epoch": "1634918543.901466000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a3f30e00000005020002" } }, { "event_id": "evt-4307f95fde9da8acdfa5643a", "kind": "unclassified_tcp", "frame_number": 84077, "timestamp_epoch": "1634918543.901855000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a3f30c0000000502" } }, { "event_id": "evt-a2724af6b5ac93b1c669029f", "kind": "unclassified_tcp", "frame_number": 84080, "timestamp_epoch": "1634918544.221748000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a3f320000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-d0cbbeacd00a17c6c7641561", "kind": "unclassified_tcp", "frame_number": 84081, "timestamp_epoch": "1634918544.222146000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070100a3f30c0000000100" } }, { "event_id": "evt-79b32e7686a5131da8a7a720", "kind": "unclassified_tcp", "frame_number": 84083, "timestamp_epoch": "1634918544.533697000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070100a3f32800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-c4f276d2746daa0925ff6320", "kind": "unclassified_tcp", "frame_number": 84107, "timestamp_epoch": "1634918546.498350000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-a6156aa34e12d2e7e6bc2794", "kind": "unclassified_tcp", "frame_number": 84110, "timestamp_epoch": "1634918546.780382000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-b7ff3f09f2ddb149d3eaad9b", "kind": "unclassified_tcp", "frame_number": 84113, "timestamp_epoch": "1634918546.903919000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.158", "src_port": 445, "dst_port": 49722, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-efb31addcf6a03c20f5dbc91", "kind": "unclassified_tcp", "frame_number": 84124, "timestamp_epoch": "1634918547.589897000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020703001c0e0c000000197b" } }, { "event_id": "evt-c28bcbf48cbe237fd017802e", "kind": "unclassified_tcp", "frame_number": 84130, "timestamp_epoch": "1634918547.786381000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e0e00000005020002" } }, { "event_id": "evt-7fb12093433a98d05fccf0b8", "kind": "unclassified_tcp", "frame_number": 84131, "timestamp_epoch": "1634918547.786916000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703001c0e0c0000000502" } }, { "event_id": "evt-80d440d9098fc6b399f21c98", "kind": "unclassified_tcp", "frame_number": 84133, "timestamp_epoch": "1634918548.116274000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-f43f23947da88f590b867443", "kind": "unclassified_tcp", "frame_number": 84134, "timestamp_epoch": "1634918548.116737000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030703001c0e0c0000000100" } }, { "event_id": "evt-4bdc3ed763a62c9cd40a7000", "kind": "unclassified_tcp", "frame_number": 84136, "timestamp_epoch": "1634918548.490135000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e1f000000050100030e6d61696c2e6f74656e65742e67720019" } }, { "event_id": "evt-4b560bb0b432eec9ecd9db51", "kind": "unclassified_tcp", "frame_number": 84145, "timestamp_epoch": "1634918548.704321000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e14000000050000010a0a169cc428" } }, { "event_id": "evt-879a55c9b74ca3af2e6d4fa4", "kind": "unclassified_tcp", "frame_number": 84153, "timestamp_epoch": "1634918550.265708000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e150000003232302045534d54500d0a" } }, { "event_id": "evt-752f99197f61dcc204c93d87", "kind": "unclassified_tcp", "frame_number": 84156, "timestamp_epoch": "1634918550.580723000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-c5b5b49c11908f9c4f3293e8", "kind": "unclassified_tcp", "frame_number": 84161, "timestamp_epoch": "1634918550.742597000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c5f00000017030300509e4aec00a680a3a6ebfc2657ad8b12b029c908463b2515a900f99d3e2928f6218ae216a6302063d7ed0898a92cd9c434d2158fcdf73acbe024b76138eaf2fc75feb759f2c36bfbaa0c6fd0bad3e1f91a" } }, { "event_id": "evt-21d541b0adb9d46fe301dcff", "kind": "unclassified_tcp", "frame_number": 84164, "timestamp_epoch": "1634918550.755117000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0eb80000003235302d65636869646e612e6f74656e65742e67720d0a3235302d504950454c494e494e470d0a3235302d53495a452034313130303030300d0a3235302d4554524e0d0a3235302d5354415254544c530d0a3235302d4155544820504c41494e204c4f47494e0d0a3235302d415554483d504c41494e204c4f47494e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d384249544d494d450d0a3235302044534e0d0a" } }, { "event_id": "evt-4feec47dea640a2ac9350dd9", "kind": "unclassified_tcp", "frame_number": 84168, "timestamp_epoch": "1634918551.000820000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c3f0000001703030030a4a1bd0225183bc36743587174407ed0192728e099bb8002432843ff36ad9c3415fd82415656ab32094458c3e8266f12" } }, { "event_id": "evt-31050e823d57ce535bda21a7", "kind": "unclassified_tcp", "frame_number": 84174, "timestamp_epoch": "1634918551.151121000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200593c7f0000001703030070c21793e27ef6710dfbb34ff84a69204d06e587f317bf9e6d9671bb9509ee27d49a90c27012928162072d58ff07691d819c477bf5aeac1b1169c08259b43b813ab308a3132a786ac47eaf45fd21bca2e29ab249829db741a4b49123c25992720d09559a3ca5b1e12753712e07466880bb" } }, { "event_id": "evt-8457d3bfd4eefcfbeb94fae6", "kind": "unclassified_tcp", "frame_number": 84178, "timestamp_epoch": "1634918551.151662000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "05070200593c0a000000" } }, { "event_id": "evt-dcb4e7e0c80c92f97b291167", "kind": "unclassified_tcp", "frame_number": 84180, "timestamp_epoch": "1634918551.212715000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e140000005354415254544c530d0a" } }, { "event_id": "evt-b324fe406976fb10d3860c8d", "kind": "unclassified_tcp", "frame_number": 84185, "timestamp_epoch": "1634918551.387515000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e2800000032323020322e302e3020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-8d36a46a706d06f98366075c", "kind": "unclassified_tcp", "frame_number": 84188, "timestamp_epoch": "1634918551.498633000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-418654f5659bb4bf45b4f48c", "kind": "unclassified_tcp", "frame_number": 84191, "timestamp_epoch": "1634918551.905224000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-99970b61a73738a1b7730f6f", "kind": "unclassified_tcp", "frame_number": 84196, "timestamp_epoch": "1634918552.106935000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ad54ed34db482bc73619fe1e", "kind": "unclassified_tcp", "frame_number": 84201, "timestamp_epoch": "1634918552.111155000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-63bcc401a1397f6c02b41ca9", "kind": "unclassified_tcp", "frame_number": 84202, "timestamp_epoch": "1634918552.111178000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-91a7a0fead09b5dfb58bd69b", "kind": "unclassified_tcp", "frame_number": 84205, "timestamp_epoch": "1634918552.677076000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e9400000016030300070b000003000000160303004610000042410408807144003505bc6f3d197eeaf95b800e545811b330ff4e81b823f4c4fe028204cf7e52ab87abf01ef7f8a56648eeaae0a206da2fbeab2d998d7dbd78a0b9ef1403030001011603030028000000000000000084334d3e08ae2e1b768dc0f78727d26d6f61246b23acd6ae9566d7f1875172df" } }, { "event_id": "evt-0c59f46945f4e36395d09c03", "kind": "unclassified_tcp", "frame_number": 84211, "timestamp_epoch": "1634918552.863941000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e3d000000140303000101160303002844d2ddeebe164911e893019bc67c8d331367f6dcf32a72de769135008681e79a84504556474c6798" } }, { "event_id": "evt-50f8da2c7d1a80e4fa3c40e1", "kind": "unclassified_tcp", "frame_number": 84214, "timestamp_epoch": "1634918553.158895000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e3700000017030300280000000000000001cd792bc47d777e7ee50f501a7f6bc569b380d195fe4fa6a0357b7350e2df1b1f" } }, { "event_id": "evt-957a82d7d1e014ab67b36845", "kind": "unclassified_tcp", "frame_number": 84219, "timestamp_epoch": "1634918553.335478000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0ec700000017030300b844d2ddeebe164912397db3ce1902a9715b99a53de286f4b3e94edaa189d610cd2598246d5892e371a8fcfe42b0607ae5af77a3b33839d890e1478adeb771c8620c026b72dbe009601a3b0d717ab68fd529fb78ff185576d0e7a5ca4deae4ac9c94f055dbdee0b9f980758ff6172d13666fc2b89c2bd490a6bcb3053ed2b56c0142c003c493c1476cf5cc116728660fa17b4c7e4d748e8711a52a7ec11ce194163280a0b772c47eeef3e49d68dc7b813577afd537a7c4fcba" } }, { "event_id": "evt-ee7ea3fb91e51fc7ebc58f5b", "kind": "unclassified_tcp", "frame_number": 84222, "timestamp_epoch": "1634918553.664702000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200ce510c000000197b" } }, { "event_id": "evt-2724f2ed31e99f591016195d", "kind": "unclassified_tcp", "frame_number": 84224, "timestamp_epoch": "1634918553.846655000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce510e0000000502000205070100a3f30a000000" } }, { "event_id": "evt-34d7539b3ef85e476842ef88", "kind": "unclassified_tcp", "frame_number": 84225, "timestamp_epoch": "1634918553.848155000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ce510c0000000502" } }, { "event_id": "evt-2c48de4c8fca4a06c005eefc", "kind": "unclassified_tcp", "frame_number": 84227, "timestamp_epoch": "1634918554.029520000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e3300000017030300240000000000000002e62733379750e54f46519e43d61d5d17fb399b1460a1da0ae5987bed" } }, { "event_id": "evt-b6a17fc0012ef8cd7cc4abb3", "kind": "unclassified_tcp", "frame_number": 84231, "timestamp_epoch": "1634918554.212933000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce5120000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-20dfc179497bd2cc40f870d9", "kind": "unclassified_tcp", "frame_number": 84233, "timestamp_epoch": "1634918554.213582000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200ce510c0000000100" } }, { "event_id": "evt-b94bd9c885103e6972a2c65e", "kind": "unclassified_tcp", "frame_number": 84235, "timestamp_epoch": "1634918554.214070000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e39000000170303002a44d2ddeebe164913788565052c3697d3c733e2bc13cd01d7fdfe1b80b4529982b41456441751a7c723fb" } }, { "event_id": "evt-f0ccfc11c2aa1ac6e57be7de", "kind": "unclassified_tcp", "frame_number": 84238, "timestamp_epoch": "1634918554.990071000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce512c000000050100031b796561686d7830312e6d786d61696c2e6e6574656173652e636f6d0019" } }, { "event_id": "evt-48cc1aecf7174532829fc602", "kind": "unclassified_tcp", "frame_number": 84242, "timestamp_epoch": "1634918555.296828000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e3d000000170303002e0000000000000003286931ec08f05aacae006743876a20d49aef8d68778b6b46d7b43d8777e33c6d4b42ad4ebd75" } }, { "event_id": "evt-41fcbcb4f31ec430dc2cdabd", "kind": "unclassified_tcp", "frame_number": 84251, "timestamp_epoch": "1634918556.401660000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e39000000170303002a44d2ddeebe164914d44c18813fb540a264600cfdd4a715e4f49edf0988958fd09acdf2d0122654b166cb" } }, { "event_id": "evt-b01f467db05f652e3676b975", "kind": "unclassified_tcp", "frame_number": 84254, "timestamp_epoch": "1634918556.531072000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-f68f9d0241f0c33140641cdc", "kind": "unclassified_tcp", "frame_number": 84256, "timestamp_epoch": "1634918556.662632000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e35000000170303002600000000000000042fc24bf74748ae02c6f86f8be5301ee757cb70b7f281ba70a444e1f5df41" } }, { "event_id": "evt-05262d2712cef7e1c3c0ddf1", "kind": "unclassified_tcp", "frame_number": 84266, "timestamp_epoch": "1634918556.853024000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e67000000170303005844d2ddeebe164915e798e36ee1d31b31f546d6a2409e0061e681832c59a1bce6cbdffd753d323dd4fa64af7e6bec916658e1020d29ff98cced618a152c79d6520dcdb2438ef8e46d3baa25d64101bfdc44bfceed39e1464d" } }, { "event_id": "evt-16e8d34770c247293637c155", "kind": "unclassified_tcp", "frame_number": 84269, "timestamp_epoch": "1634918557.093407000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e2a000000170303001b00000000000000052cc5b8c230581fb274b98dd2d90317c4294348" } }, { "event_id": "evt-dfd37b416a79caea2a02a015", "kind": "unclassified_tcp", "frame_number": 84275, "timestamp_epoch": "1634918557.276841000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e50000000170303004144d2ddeebe164916eba8cf095106a43d0935ed8fb4b590cc95c6d9514e3f2ed680a3fb70c1980841fafe089801ed1fff9428eba0965953aa1180755a945f1df05e" } }, { "event_id": "evt-3b8724f557d622a9344c97d0", "kind": "unclassified_tcp", "frame_number": 84278, "timestamp_epoch": "1634918557.522472000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e2d000000170303001e0000000000000006f0af8aa8d127e97e50c778b93889584c174b2b296dbe" } }, { "event_id": "evt-a124e73b73f3a4c9e4538456", "kind": "unclassified_tcp", "frame_number": 84284, "timestamp_epoch": "1634918557.616758000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce5114000000050000010a0a169cc429" } }, { "event_id": "evt-36fa48eae12376dedbb95683", "kind": "unclassified_tcp", "frame_number": 84287, "timestamp_epoch": "1634918557.696751000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e55000000170303002744d2ddeebe16491708bb6981b21ded762a6a2aa52e2dadb2abc1454f7f893e1548402786219d7f150303001a44d2ddeebe16491869ba91dbf92ce13f985cf92bf0e725408a7f" } }, { "event_id": "evt-a8019867b20d635367a0d7bc", "kind": "unclassified_tcp", "frame_number": 84290, "timestamp_epoch": "1634918558.050116000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040703001c0e29000000150303001a0000000000000007e1f5aec0698da302fcb5bc2332e954073dca" } }, { "event_id": "evt-1af9c078803324249375b30b", "kind": "unclassified_tcp", "frame_number": 84294, "timestamp_epoch": "1634918558.225115000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "050703001c0e0a000000" } }, { "event_id": "evt-3c270a4b317ea8002c755dd3", "kind": "unclassified_tcp", "frame_number": 84302, "timestamp_epoch": "1634918559.172783000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce514a00000032323020796561682e6e657420416e74692d7370616d20475420666f7220436f72656d61696c2053797374656d2028796561685b32303134313031365d290d0a" } }, { "event_id": "evt-afb5d785ff2ee79099344182", "kind": "unclassified_tcp", "frame_number": 84305, "timestamp_epoch": "1634918559.519985000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce511a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-cb07c070cdc25af83819106a", "kind": "unclassified_tcp", "frame_number": 84314, "timestamp_epoch": "1634918561.425736000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51e40000003235302d6d61696c0d0a3235302d504950454c494e494e470d0a3235302d41555448204c4f47494e20504c41494e0d0a3235302d415554483d4c4f47494e20504c41494e0d0a3235302d636f72656d61696c203155787232784b6a376b4730786b4931377847725537493073384659325533556a38437a323878315555555555374963324930593255724568464f3955436130784472555555556a0d0a3235302d5354415254544c530d0a3235302d53495a452037333430303332300d0a3235302d534d5450555446380d0a32353020384249544d494d450d0a" } }, { "event_id": "evt-76eea92e451ff099af579e8d", "kind": "unclassified_tcp", "frame_number": 84317, "timestamp_epoch": "1634918561.777247000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51140000005354415254544c530d0a" } }, { "event_id": "evt-b6e238056cb25ca738b6bb20", "kind": "unclassified_tcp", "frame_number": 84322, "timestamp_epoch": "1634918562.198887000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce512200000032323020526561647920746f20737461727420544c530d0a" } }, { "event_id": "evt-c6c14602273c1359eda61cf2", "kind": "unclassified_tcp", "frame_number": 84325, "timestamp_epoch": "1634918562.531391000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-6bcd5a20e0c484f609ff4e28", "kind": "unclassified_tcp", "frame_number": 84327, "timestamp_epoch": "1634918562.622965000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-aac4e50a572627baeb45e86f", "kind": "unclassified_tcp", "frame_number": 84335, "timestamp_epoch": "1634918563.035249000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-e6e5996cfde98ce000db1486", "kind": "unclassified_tcp", "frame_number": 84336, "timestamp_epoch": "1634918563.035269000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ac9339ad86a1d369964369f1", "kind": "unclassified_tcp", "frame_number": 84337, "timestamp_epoch": "1634918563.035281000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-4b61fd8bb02303496306176a", "kind": "unclassified_tcp", "frame_number": 84341, "timestamp_epoch": "1634918563.519585000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce5170000000140303000101170303003538288d80a96a3377840a85be788dffcaff5fe145ecaecd75576c89c3cf10bd53686b64cfb82f5bf99f23770f698e0728acf4cf42fd17030300212583a86cb2d974bcf7914141f7a67bd114581d6d9731d0d3eadb34898e61954473" } }, { "event_id": "evt-9a1fa361e8545cf0d30a11b4", "kind": "unclassified_tcp", "frame_number": 84349, "timestamp_epoch": "1634918565.520837000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-6b6e77745617f2939379ac68", "kind": "unclassified_tcp", "frame_number": 84352, "timestamp_epoch": "1634918566.033301000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce512c000000170303001dc07de614a9ea06c678a501d5baf2506c4fe2b59978eabb47c3e9097202" } }, { "event_id": "evt-3c4c7dbcb2d20c957937a739", "kind": "unclassified_tcp", "frame_number": 84357, "timestamp_epoch": "1634918566.545936000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51320000001703030023d3c00012add74a4d0099b2a76be24fa176e8c9e4ac39dd93740d0c9fb480526af83bb0" } }, { "event_id": "evt-ea5a40a360bd10e1b48ed678", "kind": "unclassified_tcp", "frame_number": 84360, "timestamp_epoch": "1634918566.904319000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51420000001703030033869b3bce29a115e6b5d9195f93d0f464f00e1e40113ab81eb075a530d7ec99730405029e7aa9ad849e5752b57adde75c42f5a9" } }, { "event_id": "evt-a6d50abe860a3fe0d3d7ed4c", "kind": "unclassified_tcp", "frame_number": 84365, "timestamp_epoch": "1634918567.365454000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce5132000000170303002347d9d640460a5c054b7c9dbb9b2c435a7767ef1d1a8eed05ac678978d692f99e2266e4" } }, { "event_id": "evt-e5588df01bf408a31124c0c0", "kind": "unclassified_tcp", "frame_number": 84368, "timestamp_epoch": "1634918567.562541000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-4ca827c24542f03d782db399", "kind": "unclassified_tcp", "frame_number": 84370, "timestamp_epoch": "1634918567.721122000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce512a000000170303001b05aba622617f44c1fd46b64b9e388022e6b8f9f4676f18840dbac7" } }, { "event_id": "evt-fc12636bef0aa959b7cbb83c", "kind": "unclassified_tcp", "frame_number": 84375, "timestamp_epoch": "1634918568.286597000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce513f0000001703030030dbabfd4580d998fce86f3c5d7fa4d44c37a118dc4bf18a1f62b52ac734e06138e869de5c756f734b91b509c57f0b1d16" } }, { "event_id": "evt-0e229ea176662f5d78d28702", "kind": "unclassified_tcp", "frame_number": 84378, "timestamp_epoch": "1634918568.630969000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce515300000017030300441a7a396b510c724ad2b04336eb8a9d56b364f5d38d60e2ee1cfacedf2642695fef01b144e0a5d7d6b770b02277aebfa083a080876d63adc2f30d2133c89ddb6af2e26d8c" } }, { "event_id": "evt-52cd83c636299bf6acea3e89", "kind": "unclassified_tcp", "frame_number": 84383, "timestamp_epoch": "1634918569.132251000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51730000001703030064dc92904d4dd9225e59bc7cfe0e904f14d6ea28e03f3d323e80573dfcd6a664b7b8ae891cdf7fbfee8aad4045ede29e3b49b329acd1440d636dae43f39f9f8f3016694b4fdf95fa899e861c5f562fb970f6c6cef6464313ac8dfabb2095fbbb268c7489ca" } }, { "event_id": "evt-75add41144183aa6e338e13b", "kind": "unclassified_tcp", "frame_number": 84387, "timestamp_epoch": "1634918570.436627000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200ce51220000001703030013df7ff70592746ddcb06884794594a4a5de39e105070200ce510a000000" } }, { "event_id": "evt-c3de1782903f362bc9cee9ad", "kind": "unclassified_tcp", "frame_number": 84396, "timestamp_epoch": "1634918572.592590000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-c59cf9d228f5c2c67954e8c5", "kind": "unclassified_tcp", "frame_number": 84400, "timestamp_epoch": "1634918576.795719000", "src_ip": "10.10.22.156", "dst_ip": "10.10.22.22", "src_port": 49725, "dst_port": 445, "tcp_stream": 190, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-0c1eb9338508fccde40529d1", "kind": "unclassified_tcp", "frame_number": 84402, "timestamp_epoch": "1634918577.187295000", "src_ip": "10.10.22.22", "dst_ip": "10.10.22.157", "src_port": 445, "dst_port": 49716, "tcp_stream": 160, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-e64ee557af85a16dbef103a4", "kind": "unclassified_tcp", "frame_number": 84404, "timestamp_epoch": "1634918577.212865000", "src_ip": "10.10.22.158", "dst_ip": "10.10.22.22", "src_port": 49722, "dst_port": 445, "tcp_stream": 130, "udp_stream": null, "fields": { "tcp.payload": "00" } }, { "event_id": "evt-453e7fb2f383fa129fcf48b5", "kind": "unclassified_tcp", "frame_number": 84406, "timestamp_epoch": "1634918577.641736000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-ef90f4be22efc26136c115b7", "kind": "unclassified_tcp", "frame_number": 84410, "timestamp_epoch": "1634918583.641165000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-51aa4549b86f59613b39f37e", "kind": "unclassified_tcp", "frame_number": 84412, "timestamp_epoch": "1634918585.489498000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "020701008fcb0c000000197b040701008fcb0e00000005020002" } }, { "event_id": "evt-3932f5aa11db03ba7e34ef11", "kind": "unclassified_tcp", "frame_number": 84413, "timestamp_epoch": "1634918585.490380000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701008fcb0c0000000502" } }, { "event_id": "evt-88c8751d54a67dad32be101a", "kind": "unclassified_tcp", "frame_number": 84415, "timestamp_epoch": "1634918585.686201000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0207020086f40c000000197b0407020086f40e00000005020002" } }, { "event_id": "evt-dbbe3cd875e857f564bfc89d", "kind": "unclassified_tcp", "frame_number": 84416, "timestamp_epoch": "1634918585.686725000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020086f40c0000000502" } }, { "event_id": "evt-2464918920ad0e2e5a9628f7", "kind": "unclassified_tcp", "frame_number": 84418, "timestamp_epoch": "1634918585.886830000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb20000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-fc072aa188df821ebcd007ef", "kind": "unclassified_tcp", "frame_number": 84419, "timestamp_epoch": "1634918585.887400000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "030701008fcb0c0000000100" } }, { "event_id": "evt-d1372f82f610dd028c4a6d27", "kind": "unclassified_tcp", "frame_number": 84421, "timestamp_epoch": "1634918586.084733000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020086f420000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-6475bfe8eed4d0546c9bb74b", "kind": "unclassified_tcp", "frame_number": 84422, "timestamp_epoch": "1634918586.085247000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0307020086f40c0000000100" } }, { "event_id": "evt-7ff2136e9c33474491c68966", "kind": "unclassified_tcp", "frame_number": 84424, "timestamp_epoch": "1634918586.378486000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb210000000501000310736d74702e6f75746c6f6f6b2e636f6d0019" } }, { "event_id": "evt-7c648da69c905035389b9105", "kind": "unclassified_tcp", "frame_number": 84431, "timestamp_epoch": "1634918586.531986000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb14000000050000010a0a169cc42a" } }, { "event_id": "evt-d2c541d8a5a7d2cc2a7f199c", "kind": "unclassified_tcp", "frame_number": 84433, "timestamp_epoch": "1634918586.576316000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0407020086f42800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-6a2bca00e3db401b3450d218", "kind": "unclassified_tcp", "frame_number": 84436, "timestamp_epoch": "1634918586.598901000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb7900000032323020534e31505231324341303035392e6f75746c6f6f6b2e6f66666963653336352e636f6d204d6963726f736f66742045534d5450204d41494c2053657276696365207265616479206174204672692c203232204f637420323032312031363a30333a3035202b303030300d0a" } }, { "event_id": "evt-35f469904191b2140349d56e", "kind": "unclassified_tcp", "frame_number": 84439, "timestamp_epoch": "1634918587.216544000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb1a00000045484c4f206c6f63616c686f73740d0a" } }, { "event_id": "evt-e1e5d556c3c2e8e7923b3c57", "kind": "unclassified_tcp", "frame_number": 84444, "timestamp_epoch": "1634918587.282405000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcbd80000003235302d534e31505231324341303035392e6f75746c6f6f6b2e6f66666963653336352e636f6d2048656c6c6f205b3137332e36362e3134362e3131325d0d0a3235302d53495a45203135373238363430300d0a3235302d504950454c494e494e470d0a3235302d44534e0d0a3235302d454e48414e434544535441545553434f4445530d0a3235302d5354415254544c530d0a3235302d384249544d494d450d0a3235302d42494e4152594d494d450d0a3235302d4348554e4b494e470d0a32353020534d5450555446380d0a" } }, { "event_id": "evt-4e0f6b11f0edf7023eb7a860", "kind": "unclassified_tcp", "frame_number": 84448, "timestamp_epoch": "1634918587.676744000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb140000005354415254544c530d0a" } }, { "event_id": "evt-89240919f914ecf841f1a08a", "kind": "unclassified_tcp", "frame_number": 84453, "timestamp_epoch": "1634918587.749509000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb2700000032323020322e302e3020534d5450207365727665722072656164790d0a" } }, { "event_id": "evt-05aefe820c377bcb8c83168d", "kind": "unclassified_tcp", "frame_number": 84456, "timestamp_epoch": "1634918588.124586000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-965dde5e283093741004174c", "kind": "unclassified_tcp", "frame_number": 84461, "timestamp_epoch": "1634918588.184180000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-f2c8604d385ed12a02c3166d", "kind": "unclassified_tcp", "frame_number": 84467, "timestamp_epoch": "1634918588.288722000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-7a6041fbe5c37e2ef1539bdf", "kind": "unclassified_tcp", "frame_number": 84468, "timestamp_epoch": "1634918588.288742000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "8c57cb9ff0f7301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b0601050507030230120603551d130101ff040830060101ff020100307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e63" } }, { "event_id": "evt-08f1d1b02a848263d61080b6", "kind": "unclassified_tcp", "frame_number": 84472, "timestamp_epoch": "1634918588.291448000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5a7d8689ac0f8d8fd2165f94", "kind": "unclassified_tcp", "frame_number": 84477, "timestamp_epoch": "1634918588.337905000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-5ea2d44ac632bc3e456ec1c3", "kind": "unclassified_tcp", "frame_number": 84481, "timestamp_epoch": "1634918588.636730000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcbb400000016030300070b00000300000016030300661000006261048ec9c225da81a6855cdb7ab962ee772590f401196c9b77f9efe6b76e97e166e934d47e6560f2725944d0a45be6f8cd670123f26c6cd524cb7eaed87babc7da2680c62bd9b70c41e0a8d270be79a25334efb26f244582ecb3e4245a6e6fb53cb314030300010116030300280000000000000000d0c8ad5035d4663f0698e30960f30a110c7c3626c1fb97fa202c823a8715bd0e" } }, { "event_id": "evt-235950174e04b465278c839c", "kind": "unclassified_tcp", "frame_number": 84484, "timestamp_epoch": "1634918588.641581000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-756f31768d98dea1ec4fa0f6", "kind": "unclassified_tcp", "frame_number": 84488, "timestamp_epoch": "1634918588.700298000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb3d00000014030300010116030300280000000000000000a140057fe8982c53cb14dd11227a77bdf6a2839d0fcf9b4c0cc967a03d8e63d3" } }, { "event_id": "evt-d709af637cda8594ac29ebe9", "kind": "unclassified_tcp", "frame_number": 84491, "timestamp_epoch": "1634918588.979707000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb370000001703030028000000000000000187c7d2738a1e9810b6e601c502e29f3e0bcb6377b0b9adbe6496d7d90cd2d0fe" } }, { "event_id": "evt-677caf6b7d4348c60035e90a", "kind": "unclassified_tcp", "frame_number": 84495, "timestamp_epoch": "1634918589.024463000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "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" } }, { "event_id": "evt-ed339a21831e5ec1b8ea6a11", "kind": "unclassified_tcp", "frame_number": 84499, "timestamp_epoch": "1634918589.892848000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb330000001703030024000000000000000261d433649084fe4d03b9bdbe3a8911b491e7b53c4e3b022a98d04d5f" } }, { "event_id": "evt-ca3b1f70f407f1e9d340a9f1", "kind": "unclassified_tcp", "frame_number": 84504, "timestamp_epoch": "1634918589.971790000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb39000000170303002a000000000000000263c508687871757fbb1ed93ad30a00e7173fa7504da602b5807419b7ea153b4daa8b" } }, { "event_id": "evt-494b71f0ba2718fd1c5b77e2", "kind": "unclassified_tcp", "frame_number": 84507, "timestamp_epoch": "1634918590.351837000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb49000000170303003a0000000000000003375535bea9908b15baf50069769bab8a8fdc4e7304de20e2a86a97673d6cecf9cfabfc288dfa669d417f9e1b60b07637c351" } }, { "event_id": "evt-e5ba400e723fc2e126dc0dd3", "kind": "unclassified_tcp", "frame_number": 84511, "timestamp_epoch": "1634918590.394802000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb39000000170303002a0000000000000003cf7426d846ae50e1f77be6f22aa5c45afed0da582966b640b57cf7c4b4acc2349bea" } }, { "event_id": "evt-ee9b6ab5509ae9f03be09076", "kind": "unclassified_tcp", "frame_number": 84514, "timestamp_epoch": "1634918590.731562000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "040701008fcb39000000170303002a0000000000000004017fc1552b0f44c83255513225b9ebfa128b2a14e12be1e0d880b39690bba2a90069" } }, { "event_id": "evt-21623ecd96c766c665f2c9b7", "kind": "unclassified_tcp", "frame_number": 84521, "timestamp_epoch": "1634918594.640319000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } }, { "event_id": "evt-88e2e1b2297c03facf956073", "kind": "unclassified_tcp", "frame_number": 84523, "timestamp_epoch": "1634918595.628217000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "0507020086f40a000000" } }, { "event_id": "evt-24d1e3967d33bed0d464e0c5", "kind": "unclassified_tcp", "frame_number": 84525, "timestamp_epoch": "1634918595.934549000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070200a8520c000000197b04070200a8520e00000005020002" } }, { "event_id": "evt-2263ce5620e30a8301e49586", "kind": "unclassified_tcp", "frame_number": 84526, "timestamp_epoch": "1634918595.935323000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a8520c0000000502" } }, { "event_id": "evt-275e2cf33cc8cd53026343b9", "kind": "unclassified_tcp", "frame_number": 84528, "timestamp_epoch": "1634918596.362287000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a85220000000010432356d630f356f504d44384828685558534a2a57" } }, { "event_id": "evt-95ab2bceb8dc99fcf7455ff2", "kind": "unclassified_tcp", "frame_number": 84529, "timestamp_epoch": "1634918596.362864000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070200a8520c0000000100" } }, { "event_id": "evt-a80e7f609d2117a1230e6841", "kind": "unclassified_tcp", "frame_number": 84531, "timestamp_epoch": "1634918596.602588000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070200a8522800000005010003176d61696c2e6d6f6e71756172746965722e636f6d2e62720019" } }, { "event_id": "evt-904e90d54e3582b7300339d6", "kind": "unclassified_tcp", "frame_number": 84535, "timestamp_epoch": "1634918599.413276000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "02070300bc0d0c000000197b" } }, { "event_id": "evt-c97913054ba1f492c5d12f46", "kind": "unclassified_tcp", "frame_number": 84538, "timestamp_epoch": "1634918599.610734000", "src_ip": "23.111.114.52", "dst_ip": "10.10.22.156", "src_port": 65400, "dst_port": 49884, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "04070300bc0d0e00000005020002" } }, { "event_id": "evt-a4c0d14df3da94e7a3a9348e", "kind": "unclassified_tcp", "frame_number": 84539, "timestamp_epoch": "1634918599.611301000", "src_ip": "10.10.22.156", "dst_ip": "23.111.114.52", "src_port": 49884, "dst_port": 65400, "tcp_stream": 810, "udp_stream": null, "fields": { "tcp.payload": "03070300bc0d0c0000000502" } }, { "event_id": "evt-66aa4509c6466c04bca9bebd", "kind": "unclassified_tcp", "frame_number": 84541, "timestamp_epoch": "1634918599.671251000", "src_ip": "10.10.22.157", "dst_ip": "37.0.10.22", "src_port": 50389, "dst_port": 1187, "tcp_stream": 1645, "udp_stream": null, "fields": { "tcp.payload": "08000000c1c3d0324359a178" } } ] }, "artifacts": [ { "artifact_id": "artifact-f271fe123d45e866bd896fd9", "type": "http-exported-object", "filename": "44491.6090605324(1).dat", "filenames": [ "44491.6090605324(1).dat", "44491.6090605324(2).dat", "44491.6090605324.dat" ], "occurrences": 3, "static_features": { "content_kind": "pe", "inspected_bytes": 262144, "inspection_truncated": true, "features": [], "interpretation": "Static content only; not proof of execution, intent, or malware family" }, "size_bytes": 911360, "sha256": "95928b331e9942e4709b41ec8b59eb6f9e068f53ef2eeb15009feafd4ff5138d", "media_type": "application/octet-stream", "extraction_method": "tshark-http-export-objects", "content_retained_by_analyzer": false }, { "artifact_id": "artifact-b62edb1cab1c1f4cc4be2532", "type": "http-exported-object", "filename": "main.php", "filenames": [ "main.php" ], "occurrences": 1, "static_features": { "content_kind": "pe", "inspected_bytes": 262144, "inspection_truncated": true, "features": [], "interpretation": "Static content only; not proof of execution, intent, or malware family" }, "size_bytes": 337420, "sha256": "11f3d84aad7131fe124155c9edfceb594649e87de1ee03383f470442d6ed69a1", "media_type": "application/octet-stream", "extraction_method": "tshark-http-export-objects", "content_retained_by_analyzer": false }, { "artifact_id": "artifact-57c6ebaaf9c9c40183d28fb8", "type": "http-exported-object", "filename": "index.php", "filenames": [ "index.php" ], "occurrences": 1, "static_features": { "content_kind": "script-like-text", "inspected_bytes": 183, "inspection_truncated": false, "features": [ { "feature": "powershell-download", "excerpt": "downloadfile", "offset": 83 } ], "interpretation": "Static content only; not proof of execution, intent, or malware family" }, "size_bytes": 183, "sha256": "c8da41ae6e70a1997020d6c903d2627a3ee35383159cd04de53e73ff3f5acd82", "media_type": "application/octet-stream", "extraction_method": "tshark-http-export-objects", "content_retained_by_analyzer": false }, { "artifact_id": "artifact-bbb3e0bc2bf2028f2a6854ba", "type": "http-exported-object", "filename": "click-1225267-10537174-1463076242000%3fsid=552795f4335011ec81850e774cf9d6690INT", "filenames": [ "click-1225267-10537174-1463076242000%3fsid=552795f4335011ec81850e774cf9d6690INT" ], "occurrences": 1, "static_features": { "content_kind": "unclassified", "inspected_bytes": 577, "inspection_truncated": false, "features": [], "interpretation": "Static content only; not proof of execution, intent, or malware family" }, "size_bytes": 577, "sha256": "17c18c10640debcfd5b5f61f07b12d7327809410c3a90f7cd69f21fb869554ea", "media_type": "application/octet-stream", "extraction_method": "tshark-http-export-objects", "content_retained_by_analyzer": false } ], "observables": [ { "observable_id": "observable-275c6f7d1f63f3a0a90f8b2e", "type": "domain", "value": "112.146.66.173.in-addr.arpa", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915266.373501000", "last_seen_epoch": "1634915266.455724000", "evidence": [ { "frame_number": 31724, "timestamp_epoch": "1634915266.373501000", "display_filter": "frame.number == 31724", "udp_stream": 545 }, { "frame_number": 31727, "timestamp_epoch": "1634915266.394697000", "display_filter": "frame.number == 31727", "udp_stream": 545 }, { "frame_number": 31728, "timestamp_epoch": "1634915266.455724000", "display_filter": "frame.number == 31728", "udp_stream": 545 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-eebdcf9fcda99e111adc58e8", "type": "domain", "value": "22.22.10.10.in-addr.arpa", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634914995.224941000", "last_seen_epoch": "1634914995.225313000", "evidence": [ { "frame_number": 26197, "timestamp_epoch": "1634914995.224941000", "display_filter": "frame.number == 26197", "udp_stream": 508 }, { "frame_number": 26198, "timestamp_epoch": "1634914995.225313000", "display_filter": "frame.number == 26198", "udp_stream": 508 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-40e2c3eb9f62bd929ff13b85", "type": "domain", "value": "a-9999.dc-msedge.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913189.957387000", "last_seen_epoch": "1634913189.957387000", "evidence": [ { "frame_number": 2971, "timestamp_epoch": "1634913189.957387000", "display_filter": "frame.number == 2971", "udp_stream": 125 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ce9b45102a9d880059e5d1d2", "type": "domain", "value": "a-ring-fallback.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913189.913522000", "last_seen_epoch": "1634913190.164263000", "evidence": [ { "frame_number": 2959, "timestamp_epoch": "1634913189.913522000", "display_filter": "frame.number == 2959", "udp_stream": 125 }, { "frame_number": 2971, "timestamp_epoch": "1634913189.957387000", "display_filter": "frame.number == 2971", "udp_stream": 125 }, { "frame_number": 3002, "timestamp_epoch": "1634913190.164263000", "display_filter": "frame.number == 3002", "tcp_stream": 142 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-52ebd752e22b9d4416a7228d", "type": "domain", "value": "a-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913244.050900000", "last_seen_epoch": "1634913244.236286000", "evidence": [ { "frame_number": 4559, "timestamp_epoch": "1634913244.050900000", "display_filter": "frame.number == 4559", "udp_stream": 161 }, { "frame_number": 4631, "timestamp_epoch": "1634913244.108653000", "display_filter": "frame.number == 4631", "udp_stream": 161 }, { "frame_number": 4707, "timestamp_epoch": "1634913244.236286000", "display_filter": "frame.number == 4707", "tcp_stream": 207 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0bd0c5be91ce32780c4f0d0a", "type": "domain", "value": "a.nel.cloudflare.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913347.646137000", "last_seen_epoch": "1634913347.696545000", "evidence": [ { "frame_number": 6394, "timestamp_epoch": "1634913347.646137000", "display_filter": "frame.number == 6394", "udp_stream": 193 }, { "frame_number": 6395, "timestamp_epoch": "1634913347.646483000", "display_filter": "frame.number == 6395", "udp_stream": 193 }, { "frame_number": 6400, "timestamp_epoch": "1634913347.696545000", "display_filter": "frame.number == 6400", "tcp_stream": 243 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5e1903075c790624e53f089d", "type": "domain", "value": "a1449.dscg2.akamai.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913274.533129000", "last_seen_epoch": "1634913274.533129000", "evidence": [ { "frame_number": 5439, "timestamp_epoch": "1634913274.533129000", "display_filter": "frame.number == 5439", "udp_stream": 177 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d30a94c79e9a4945a2308791", "type": "domain", "value": "activity-geo.trafficmanager.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913191.727556000", "last_seen_epoch": "1634913245.635178000", "evidence": [ { "frame_number": 3185, "timestamp_epoch": "1634913191.727556000", "display_filter": "frame.number == 3185", "udp_stream": 130 }, { "frame_number": 3805, "timestamp_epoch": "1634913219.965690000", "display_filter": "frame.number == 3805", "udp_stream": 141 }, { "frame_number": 5112, "timestamp_epoch": "1634913245.635178000", "display_filter": "frame.number == 5112", "udp_stream": 170 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6622e907bf41b852f43f9fc8", "type": "domain", "value": "activity.windows.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913191.654248000", "last_seen_epoch": "1634913246.350437000", "evidence": [ { "frame_number": 3164, "timestamp_epoch": "1634913191.654248000", "display_filter": "frame.number == 3164", "udp_stream": 130 }, { "frame_number": 3185, "timestamp_epoch": "1634913191.727556000", "display_filter": "frame.number == 3185", "udp_stream": 130 }, { "frame_number": 3804, "timestamp_epoch": "1634913219.965376000", "display_filter": "frame.number == 3804", "udp_stream": 141 }, { "frame_number": 3805, "timestamp_epoch": "1634913219.965690000", "display_filter": "frame.number == 3805", "udp_stream": 141 }, { "frame_number": 5111, "timestamp_epoch": "1634913245.634910000", "display_filter": "frame.number == 5111", "udp_stream": 170 }, { "frame_number": 5112, "timestamp_epoch": "1634913245.635178000", "display_filter": "frame.number == 5112", "udp_stream": 170 }, { "frame_number": 3189, "timestamp_epoch": "1634913191.842161000", "display_filter": "frame.number == 3189", "tcp_stream": 146 }, { "frame_number": 3848, "timestamp_epoch": "1634913223.123881000", "display_filter": "frame.number == 3848", "tcp_stream": 173 }, { "frame_number": 5119, "timestamp_epoch": "1634913245.729864000", "display_filter": "frame.number == 5119", "tcp_stream": 218 }, { "frame_number": 5153, "timestamp_epoch": "1634913246.350437000", "display_filter": "frame.number == 5153", "tcp_stream": 219 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-40c29a995bae262aa2aadaf0", "type": "domain", "value": "api.ipify.org", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915298.359593000", "last_seen_epoch": "1634915544.058177000", "evidence": [ { "frame_number": 42927, "timestamp_epoch": "1634915298.359593000", "display_filter": "frame.number == 42927", "udp_stream": 550 }, { "frame_number": 42928, "timestamp_epoch": "1634915298.380806000", "display_filter": "frame.number == 42928", "udp_stream": 550 }, { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 44310, "timestamp_epoch": "1634915332.088412000", "display_filter": "frame.number == 44310", "udp_stream": 562 }, { "frame_number": 44311, "timestamp_epoch": "1634915332.117423000", "display_filter": "frame.number == 44311", "udp_stream": 562 }, { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45361, "timestamp_epoch": "1634915374.974570000", "display_filter": "frame.number == 45361", "udp_stream": 575 }, { "frame_number": 45362, "timestamp_epoch": "1634915375.008581000", "display_filter": "frame.number == 45362", "udp_stream": 575 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 }, { "frame_number": 49034, "timestamp_epoch": "1634915486.773687000", "display_filter": "frame.number == 49034", "udp_stream": 637 }, { "frame_number": 49035, "timestamp_epoch": "1634915486.793236000", "display_filter": "frame.number == 49035", "udp_stream": 637 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51083, "timestamp_epoch": "1634915543.490135000", "display_filter": "frame.number == 51083", "udp_stream": 657 }, { "frame_number": 51084, "timestamp_epoch": "1634915543.514172000", "display_filter": "frame.number == 51084", "udp_stream": 657 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 }, { "frame_number": 42947, "timestamp_epoch": "1634915298.770161000", "display_filter": "frame.number == 42947", "tcp_stream": 816 }, { "frame_number": 42968, "timestamp_epoch": "1634915298.943065000", "display_filter": "frame.number == 42968", "tcp_stream": 815 }, { "frame_number": 42970, "timestamp_epoch": "1634915298.943203000", "display_filter": "frame.number == 42970", "tcp_stream": 817 }, { "frame_number": 44329, "timestamp_epoch": "1634915332.518484000", "display_filter": "frame.number == 44329", "tcp_stream": 834 }, { "frame_number": 44351, "timestamp_epoch": "1634915332.695793000", "display_filter": "frame.number == 44351", "tcp_stream": 832 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fb675292097764a7b79d0028", "type": "domain", "value": "api.msn.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913187.407198000", "last_seen_epoch": "1634913245.001034000", "evidence": [ { "frame_number": 2901, "timestamp_epoch": "1634913187.407198000", "display_filter": "frame.number == 2901", "udp_stream": 118 }, { "frame_number": 2902, "timestamp_epoch": "1634913187.444782000", "display_filter": "frame.number == 2902", "udp_stream": 118 }, { "frame_number": 3631, "timestamp_epoch": "1634913213.982362000", "display_filter": "frame.number == 3631", "udp_stream": 137 }, { "frame_number": 3632, "timestamp_epoch": "1634913214.046853000", "display_filter": "frame.number == 3632", "udp_stream": 137 }, { "frame_number": 4399, "timestamp_epoch": "1634913241.439752000", "display_filter": "frame.number == 4399", "udp_stream": 152 }, { "frame_number": 4400, "timestamp_epoch": "1634913241.440038000", "display_filter": "frame.number == 4400", "udp_stream": 152 }, { "frame_number": 2908, "timestamp_epoch": "1634913187.490745000", "display_filter": "frame.number == 2908", "tcp_stream": 137 }, { "frame_number": 3068, "timestamp_epoch": "1634913190.947146000", "display_filter": "frame.number == 3068", "tcp_stream": 144 }, { "frame_number": 3636, "timestamp_epoch": "1634913214.102834000", "display_filter": "frame.number == 3636", "tcp_stream": 167 }, { "frame_number": 3676, "timestamp_epoch": "1634913218.775235000", "display_filter": "frame.number == 3676", "tcp_stream": 170 }, { "frame_number": 4404, "timestamp_epoch": "1634913241.534477000", "display_filter": "frame.number == 4404", "tcp_stream": 197 }, { "frame_number": 4824, "timestamp_epoch": "1634913245.001034000", "display_filter": "frame.number == 4824", "tcp_stream": 212 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f1b3bfffb09129471739f16f", "type": "domain", "value": "aqsouhyw.bazar", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913708.233781000", "last_seen_epoch": "1634914471.872828000", "evidence": [ { "frame_number": 11572, "timestamp_epoch": "1634913708.233781000", "display_filter": "frame.number == 11572", "udp_stream": 256 }, { "frame_number": 11573, "timestamp_epoch": "1634913708.406113000", "display_filter": "frame.number == 11573", "udp_stream": 256 }, { "frame_number": 23266, "timestamp_epoch": "1634914471.703428000", "display_filter": "frame.number == 23266", "udp_stream": 407 }, { "frame_number": 23269, "timestamp_epoch": "1634914471.872828000", "display_filter": "frame.number == 23269", "udp_stream": 407 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3a88bd8dc0d6d93ed3c2b836", "type": "domain", "value": "av.dial-up.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634916530.578947000", "last_seen_epoch": "1634918459.527553000", "evidence": [ { "frame_number": 65025, "timestamp_epoch": "1634916530.578947000", "display_filter": "frame.number == 65025", "udp_stream": 827 }, { "frame_number": 65027, "timestamp_epoch": "1634916530.647434000", "display_filter": "frame.number == 65027", "udp_stream": 827 }, { "frame_number": 65028, "timestamp_epoch": "1634916530.966581000", "display_filter": "frame.number == 65028", "udp_stream": 827 }, { "frame_number": 83360, "timestamp_epoch": "1634918459.346607000", "display_filter": "frame.number == 83360", "udp_stream": 1066 }, { "frame_number": 83362, "timestamp_epoch": "1634918459.449870000", "display_filter": "frame.number == 83362", "udp_stream": 1066 }, { "frame_number": 83363, "timestamp_epoch": "1634918459.527553000", "display_filter": "frame.number == 83363", "udp_stream": 1066 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0e8d3c1f710c11691830a4b3", "type": "domain", "value": "b-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.853823000", "last_seen_epoch": "1634913243.981064000", "evidence": [ { "frame_number": 4453, "timestamp_epoch": "1634913243.853823000", "display_filter": "frame.number == 4453", "udp_stream": 155 }, { "frame_number": 4462, "timestamp_epoch": "1634913243.907353000", "display_filter": "frame.number == 4462", "udp_stream": 155 }, { "frame_number": 4487, "timestamp_epoch": "1634913243.981064000", "display_filter": "frame.number == 4487", "tcp_stream": 200 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-95834a079d9d02a1f1e317ed", "type": "domain", "value": "bing.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913884.427646000", "last_seen_epoch": "1634918060.499302000", "evidence": [ { "frame_number": 16326, "timestamp_epoch": "1634913884.427646000", "display_filter": "frame.number == 16326", "udp_stream": 294 }, { "frame_number": 16327, "timestamp_epoch": "1634913884.510546000", "display_filter": "frame.number == 16327", "udp_stream": 294 }, { "frame_number": 16328, "timestamp_epoch": "1634913884.626038000", "display_filter": "frame.number == 16328", "udp_stream": 294 }, { "frame_number": 72054, "timestamp_epoch": "1634917374.648741000", "display_filter": "frame.number == 72054", "udp_stream": 955 }, { "frame_number": 72060, "timestamp_epoch": "1634917374.706361000", "display_filter": "frame.number == 72060", "udp_stream": 955 }, { "frame_number": 72061, "timestamp_epoch": "1634917374.725026000", "display_filter": "frame.number == 72061", "udp_stream": 955 }, { "frame_number": 16333, "timestamp_epoch": "1634913884.673915000", "display_filter": "frame.number == 16333", "tcp_stream": 345 }, { "frame_number": 17993, "timestamp_epoch": "1634914048.248941000", "display_filter": "frame.number == 17993", "tcp_stream": 399 }, { "frame_number": 20782, "timestamp_epoch": "1634914168.667953000", "display_filter": "frame.number == 20782", "tcp_stream": 436 }, { "frame_number": 24875, "timestamp_epoch": "1634914942.293169000", "display_filter": "frame.number == 24875", "tcp_stream": 737 }, { "frame_number": 30789, "timestamp_epoch": "1634915254.426540000", "display_filter": "frame.number == 30789", "tcp_stream": 800 }, { "frame_number": 48454, "timestamp_epoch": "1634915480.377120000", "display_filter": "frame.number == 48454", "tcp_stream": 915 }, { "frame_number": 72065, "timestamp_epoch": "1634917374.790278000", "display_filter": "frame.number == 72065", "tcp_stream": 1477 }, { "frame_number": 73745, "timestamp_epoch": "1634917437.245202000", "display_filter": "frame.number == 73745", "tcp_stream": 1483 }, { "frame_number": 75266, "timestamp_epoch": "1634917552.548147000", "display_filter": "frame.number == 75266", "tcp_stream": 1510 }, { "frame_number": 77357, "timestamp_epoch": "1634917790.950387000", "display_filter": "frame.number == 77357", "tcp_stream": 1564 }, { "frame_number": 79265, "timestamp_epoch": "1634918060.499302000", "display_filter": "frame.number == 79265", "tcp_stream": 1579 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4821c972b0517e1fcd2f88ee", "type": "domain", "value": "bluehail.bazar", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913706.932848000", "last_seen_epoch": "1634914468.243632000", "evidence": [ { "frame_number": 11568, "timestamp_epoch": "1634913706.932848000", "display_filter": "frame.number == 11568", "udp_stream": 254 }, { "frame_number": 11569, "timestamp_epoch": "1634913707.082349000", "display_filter": "frame.number == 11569", "udp_stream": 254 }, { "frame_number": 19687, "timestamp_epoch": "1634914070.388946000", "display_filter": "frame.number == 19687", "udp_stream": 335 }, { "frame_number": 19688, "timestamp_epoch": "1634914070.638520000", "display_filter": "frame.number == 19688", "udp_stream": 335 }, { "frame_number": 22460, "timestamp_epoch": "1634914228.615943000", "display_filter": "frame.number == 22460", "udp_stream": 355 }, { "frame_number": 22461, "timestamp_epoch": "1634914228.793138000", "display_filter": "frame.number == 22461", "udp_stream": 355 }, { "frame_number": 23257, "timestamp_epoch": "1634914468.097708000", "display_filter": "frame.number == 23257", "udp_stream": 405 }, { "frame_number": 23258, "timestamp_epoch": "1634914468.243632000", "display_filter": "frame.number == 23258", "udp_stream": 405 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5701600025b06e818deba95f", "type": "domain", "value": "c-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913189.859187000", "last_seen_epoch": "1634913189.939818000", "evidence": [ { "frame_number": 2945, "timestamp_epoch": "1634913189.859187000", "display_filter": "frame.number == 2945", "udp_stream": 121 }, { "frame_number": 2957, "timestamp_epoch": "1634913189.898578000", "display_filter": "frame.number == 2957", "udp_stream": 121 }, { "frame_number": 2968, "timestamp_epoch": "1634913189.939818000", "display_filter": "frame.number == 2968", "tcp_stream": 139 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-17e2283463a16f1774ab6ea2", "type": "domain", "value": "calacatta.com", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913641.321964000", "last_seen_epoch": "1634913641.321964000", "evidence": [ { "frame_number": 11093, "timestamp_epoch": "1634913641.321964000", "display_filter": "frame.number == 11093", "udp_stream": 234 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-705066cdc15f21a1cb59c68a", "type": "domain", "value": "cj.dotomi.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918066.427700000", "last_seen_epoch": "1634918066.569200000", "evidence": [ { "frame_number": 80449, "timestamp_epoch": "1634918066.427700000", "display_filter": "frame.number == 80449", "udp_stream": 1034 }, { "frame_number": 80450, "timestamp_epoch": "1634918066.487552000", "display_filter": "frame.number == 80450", "udp_stream": 1034 }, { "frame_number": 80451, "timestamp_epoch": "1634918066.495120000", "display_filter": "frame.number == 80451", "udp_stream": 1034 }, { "frame_number": 80457, "timestamp_epoch": "1634918066.569200000", "display_filter": "frame.number == 80457", "tcp_stream": 1584 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4d93ee24c4ebd3b8ea164111", "type": "domain", "value": "client.wns.windows.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913185.960794000", "last_seen_epoch": "1634913240.600539000", "evidence": [ { "frame_number": 2847, "timestamp_epoch": "1634913185.960794000", "display_filter": "frame.number == 2847", "udp_stream": 116 }, { "frame_number": 2851, "timestamp_epoch": "1634913186.072160000", "display_filter": "frame.number == 2851", "udp_stream": 116 }, { "frame_number": 3575, "timestamp_epoch": "1634913212.560767000", "display_filter": "frame.number == 3575", "udp_stream": 135 }, { "frame_number": 3576, "timestamp_epoch": "1634913212.561085000", "display_filter": "frame.number == 3576", "udp_stream": 135 }, { "frame_number": 4356, "timestamp_epoch": "1634913240.483165000", "display_filter": "frame.number == 4356", "udp_stream": 151 }, { "frame_number": 4357, "timestamp_epoch": "1634913240.483552000", "display_filter": "frame.number == 4357", "udp_stream": 151 }, { "frame_number": 2859, "timestamp_epoch": "1634913186.208956000", "display_filter": "frame.number == 2859", "tcp_stream": 136 }, { "frame_number": 3580, "timestamp_epoch": "1634913212.651868000", "display_filter": "frame.number == 3580", "tcp_stream": 165 }, { "frame_number": 4364, "timestamp_epoch": "1634913240.600539000", "display_filter": "frame.number == 4364", "tcp_stream": 195 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3c0c8cbcbb4e3ac5d94c9256", "type": "domain", "value": "config.edge.skype.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913345.833536000", "last_seen_epoch": "1634913346.147147000", "evidence": [ { "frame_number": 6220, "timestamp_epoch": "1634913345.833536000", "display_filter": "frame.number == 6220", "udp_stream": 187 }, { "frame_number": 6221, "timestamp_epoch": "1634913345.875498000", "display_filter": "frame.number == 6221", "udp_stream": 187 }, { "frame_number": 6231, "timestamp_epoch": "1634913346.147147000", "display_filter": "frame.number == 6231", "tcp_stream": 239 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cc67fb786d49fb2942835f79", "type": "domain", "value": "continuum.dds.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913190.761599000", "last_seen_epoch": "1634913245.011484000", "evidence": [ { "frame_number": 3051, "timestamp_epoch": "1634913190.761599000", "display_filter": "frame.number == 3051", "udp_stream": 128 }, { "frame_number": 3052, "timestamp_epoch": "1634913190.761920000", "display_filter": "frame.number == 3052", "udp_stream": 128 }, { "frame_number": 3667, "timestamp_epoch": "1634913218.473259000", "display_filter": "frame.number == 3667", "udp_stream": 139 }, { "frame_number": 3668, "timestamp_epoch": "1634913218.473549000", "display_filter": "frame.number == 3668", "udp_stream": 139 }, { "frame_number": 4813, "timestamp_epoch": "1634913244.827055000", "display_filter": "frame.number == 4813", "udp_stream": 165 }, { "frame_number": 4817, "timestamp_epoch": "1634913244.901806000", "display_filter": "frame.number == 4817", "udp_stream": 165 }, { "frame_number": 3064, "timestamp_epoch": "1634913190.909874000", "display_filter": "frame.number == 3064", "tcp_stream": 143 }, { "frame_number": 3821, "timestamp_epoch": "1634913221.611780000", "display_filter": "frame.number == 3821", "tcp_stream": 168 }, { "frame_number": 4828, "timestamp_epoch": "1634913245.011484000", "display_filter": "frame.number == 4828", "tcp_stream": 210 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5984e5d7ea6c70c530e21838", "type": "domain", "value": "cs-geo-dds.trafficmanager.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913190.761920000", "last_seen_epoch": "1634913244.901806000", "evidence": [ { "frame_number": 3052, "timestamp_epoch": "1634913190.761920000", "display_filter": "frame.number == 3052", "udp_stream": 128 }, { "frame_number": 3668, "timestamp_epoch": "1634913218.473549000", "display_filter": "frame.number == 3668", "udp_stream": 139 }, { "frame_number": 4817, "timestamp_epoch": "1634913244.901806000", "display_filter": "frame.number == 4817", "udp_stream": 165 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-02053866a5fbe3be8910024d", "type": "domain", "value": "ctldl.windowsupdate.com", "roles": [ "dns-query", "http-host" ], "is_private": null, "first_seen_epoch": "1634913245.185121000", "last_seen_epoch": "1634917551.564701000", "evidence": [ { "frame_number": 4878, "timestamp_epoch": "1634913245.185121000", "display_filter": "frame.number == 4878", "udp_stream": 167 }, { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5388, "timestamp_epoch": "1634913273.879123000", "display_filter": "frame.number == 5388", "udp_stream": 176 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 }, { "frame_number": 15933, "timestamp_epoch": "1634913814.719076000", "display_filter": "frame.number == 15933", "udp_stream": 283 }, { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 }, { "frame_number": 68302, "timestamp_epoch": "1634916950.343151000", "display_filter": "frame.number == 68302", "udp_stream": 899 }, { "frame_number": 68304, "timestamp_epoch": "1634916950.374240000", "display_filter": "frame.number == 68304", "udp_stream": 899 }, { "frame_number": 68305, "timestamp_epoch": "1634916950.388940000", "display_filter": "frame.number == 68305", "udp_stream": 899 }, { "frame_number": 68651, "timestamp_epoch": "1634917020.637946000", "display_filter": "frame.number == 68651", "udp_stream": 910 }, { "frame_number": 68658, "timestamp_epoch": "1634917020.693186000", "display_filter": "frame.number == 68658", "udp_stream": 910 }, { "frame_number": 75146, "timestamp_epoch": "1634917533.096883000", "display_filter": "frame.number == 75146", "udp_stream": 980 }, { "frame_number": 75150, "timestamp_epoch": "1634917533.142513000", "display_filter": "frame.number == 75150", "udp_stream": 980 }, { "frame_number": 75258, "timestamp_epoch": "1634917551.320799000", "display_filter": "frame.number == 75258", "udp_stream": 986 }, { "frame_number": 75259, "timestamp_epoch": "1634917551.419368000", "display_filter": "frame.number == 75259", "udp_stream": 986 }, { "frame_number": 75260, "timestamp_epoch": "1634917551.564701000", "display_filter": "frame.number == 75260", "udp_stream": 986 }, { "frame_number": 5034, "timestamp_epoch": "1634913245.508732000", "display_filter": "frame.number == 5034", "tcp_stream": 213 }, { "frame_number": 5109, "timestamp_epoch": "1634913245.625982000", "display_filter": "frame.number == 5109", "tcp_stream": 213 }, { "frame_number": 5115, "timestamp_epoch": "1634913245.711787000", "display_filter": "frame.number == 5115", "tcp_stream": 213 }, { "frame_number": 5393, "timestamp_epoch": "1634913273.971119000", "display_filter": "frame.number == 5393", "tcp_stream": 227 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2dc9de823f3907b01187a426", "type": "domain", "value": "desktop-87wce26.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913148.520983000", "last_seen_epoch": "1634918543.664706000", "evidence": [ { "frame_number": 2311, "timestamp_epoch": "1634913148.520983000", "display_filter": "frame.number == 2311", "udp_stream": 100 }, { "frame_number": 2312, "timestamp_epoch": "1634913148.521332000", "display_filter": "frame.number == 2312", "udp_stream": 100 }, { "frame_number": 17944, "timestamp_epoch": "1634914043.532544000", "display_filter": "frame.number == 17944", "udp_stream": 331 }, { "frame_number": 17945, "timestamp_epoch": "1634914043.532829000", "display_filter": "frame.number == 17945", "udp_stream": 331 }, { "frame_number": 25085, "timestamp_epoch": "1634914943.549678000", "display_filter": "frame.number == 25085", "udp_stream": 496 }, { "frame_number": 25086, "timestamp_epoch": "1634914943.549966000", "display_filter": "frame.number == 25086", "udp_stream": 496 }, { "frame_number": 56343, "timestamp_epoch": "1634915843.577936000", "display_filter": "frame.number == 56343", "udp_stream": 698 }, { "frame_number": 56345, "timestamp_epoch": "1634915843.578231000", "display_filter": "frame.number == 56345", "udp_stream": 698 }, { "frame_number": 66381, "timestamp_epoch": "1634916743.597755000", "display_filter": "frame.number == 66381", "udp_stream": 855 }, { "frame_number": 66383, "timestamp_epoch": "1634916743.598056000", "display_filter": "frame.number == 66383", "udp_stream": 855 }, { "frame_number": 76623, "timestamp_epoch": "1634917643.637827000", "display_filter": "frame.number == 76623", "udp_stream": 1003 }, { "frame_number": 76624, "timestamp_epoch": "1634917643.638037000", "display_filter": "frame.number == 76624", "udp_stream": 1003 }, { "frame_number": 84064, "timestamp_epoch": "1634918543.664285000", "display_filter": "frame.number == 84064", "udp_stream": 1078 }, { "frame_number": 84066, "timestamp_epoch": "1634918543.664706000", "display_filter": "frame.number == 84066", "udp_stream": 1078 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7299e04f7d15e74c7c6c735e", "type": "domain", "value": "desktop-cfa3367.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634914016.820511000", "last_seen_epoch": "1634918511.967816000", "evidence": [ { "frame_number": 17862, "timestamp_epoch": "1634914016.820511000", "display_filter": "frame.number == 17862", "udp_stream": 324 }, { "frame_number": 17863, "timestamp_epoch": "1634914016.820832000", "display_filter": "frame.number == 17863", "udp_stream": 324 }, { "frame_number": 24787, "timestamp_epoch": "1634914911.840865000", "display_filter": "frame.number == 24787", "udp_stream": 491 }, { "frame_number": 24790, "timestamp_epoch": "1634914911.841181000", "display_filter": "frame.number == 24790", "udp_stream": 491 }, { "frame_number": 56013, "timestamp_epoch": "1634915811.896350000", "display_filter": "frame.number == 56013", "udp_stream": 352 }, { "frame_number": 56014, "timestamp_epoch": "1634915811.896726000", "display_filter": "frame.number == 56014", "udp_stream": 352 }, { "frame_number": 66223, "timestamp_epoch": "1634916711.897566000", "display_filter": "frame.number == 66223", "udp_stream": 845 }, { "frame_number": 66226, "timestamp_epoch": "1634916711.898055000", "display_filter": "frame.number == 66226", "udp_stream": 845 }, { "frame_number": 76363, "timestamp_epoch": "1634917611.951027000", "display_filter": "frame.number == 76363", "udp_stream": 995 }, { "frame_number": 76366, "timestamp_epoch": "1634917611.951492000", "display_filter": "frame.number == 76366", "udp_stream": 995 }, { "frame_number": 83827, "timestamp_epoch": "1634918511.967510000", "display_filter": "frame.number == 83827", "udp_stream": 1072 }, { "frame_number": 83828, "timestamp_epoch": "1634918511.967816000", "display_filter": "frame.number == 83828", "udp_stream": 1072 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cb75ff326d434247452aecf0", "type": "domain", "value": "desktop-nz875r4.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913956.149084000", "last_seen_epoch": "1634918451.277724000", "evidence": [ { "frame_number": 17592, "timestamp_epoch": "1634913956.149084000", "display_filter": "frame.number == 17592", "udp_stream": 313 }, { "frame_number": 17593, "timestamp_epoch": "1634913956.149484000", "display_filter": "frame.number == 17593", "udp_stream": 313 }, { "frame_number": 24585, "timestamp_epoch": "1634914851.166472000", "display_filter": "frame.number == 24585", "udp_stream": 481 }, { "frame_number": 24587, "timestamp_epoch": "1634914851.166836000", "display_filter": "frame.number == 24587", "udp_stream": 481 }, { "frame_number": 55651, "timestamp_epoch": "1634915751.209680000", "display_filter": "frame.number == 55651", "udp_stream": 686 }, { "frame_number": 55652, "timestamp_epoch": "1634915751.209906000", "display_filter": "frame.number == 55652", "udp_stream": 686 }, { "frame_number": 65615, "timestamp_epoch": "1634916651.224305000", "display_filter": "frame.number == 65615", "udp_stream": 831 }, { "frame_number": 65617, "timestamp_epoch": "1634916651.224658000", "display_filter": "frame.number == 65617", "udp_stream": 831 }, { "frame_number": 75252, "timestamp_epoch": "1634917551.265096000", "display_filter": "frame.number == 75252", "udp_stream": 984 }, { "frame_number": 75254, "timestamp_epoch": "1634917551.265471000", "display_filter": "frame.number == 75254", "udp_stream": 984 }, { "frame_number": 83305, "timestamp_epoch": "1634918451.277359000", "display_filter": "frame.number == 83305", "udp_stream": 1063 }, { "frame_number": 83306, "timestamp_epoch": "1634918451.277724000", "display_filter": "frame.number == 83306", "udp_stream": 1063 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-793a6976d47d655083833a5e", "type": "domain", "value": "dns.msftncsi.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913053.483974000", "last_seen_epoch": "1634918235.239591000", "evidence": [ { "frame_number": 36, "timestamp_epoch": "1634913053.483974000", "display_filter": "frame.number == 36", "udp_stream": 9 }, { "frame_number": 37, "timestamp_epoch": "1634913053.539379000", "display_filter": "frame.number == 37", "udp_stream": 9 }, { "frame_number": 828, "timestamp_epoch": "1634913114.321568000", "display_filter": "frame.number == 828", "udp_stream": 45 }, { "frame_number": 829, "timestamp_epoch": "1634913114.390652000", "display_filter": "frame.number == 829", "udp_stream": 45 }, { "frame_number": 1722, "timestamp_epoch": "1634913145.245893000", "display_filter": "frame.number == 1722", "udp_stream": 85 }, { "frame_number": 1723, "timestamp_epoch": "1634913145.318048000", "display_filter": "frame.number == 1723", "udp_stream": 85 }, { "frame_number": 16243, "timestamp_epoch": "1634913855.034084000", "display_filter": "frame.number == 16243", "udp_stream": 289 }, { "frame_number": 16244, "timestamp_epoch": "1634913855.075475000", "display_filter": "frame.number == 16244", "udp_stream": 289 }, { "frame_number": 17468, "timestamp_epoch": "1634913930.037393000", "display_filter": "frame.number == 17468", "udp_stream": 306 }, { "frame_number": 17469, "timestamp_epoch": "1634913930.122659000", "display_filter": "frame.number == 17469", "udp_stream": 306 }, { "frame_number": 17790, "timestamp_epoch": "1634914005.040970000", "display_filter": "frame.number == 17790", "udp_stream": 321 }, { "frame_number": 17791, "timestamp_epoch": "1634914005.091181000", "display_filter": "frame.number == 17791", "udp_stream": 321 }, { "frame_number": 19726, "timestamp_epoch": "1634914080.040183000", "display_filter": "frame.number == 19726", "udp_stream": 337 }, { "frame_number": 19727, "timestamp_epoch": "1634914080.080250000", "display_filter": "frame.number == 19727", "udp_stream": 337 }, { "frame_number": 20659, "timestamp_epoch": "1634914125.043411000", "display_filter": "frame.number == 20659", "udp_stream": 342 }, { "frame_number": 20660, "timestamp_epoch": "1634914125.091553000", "display_filter": "frame.number == 20660", "udp_stream": 342 }, { "frame_number": 22289, "timestamp_epoch": "1634914185.046057000", "display_filter": "frame.number == 22289", "udp_stream": 346 }, { "frame_number": 22290, "timestamp_epoch": "1634914185.098419000", "display_filter": "frame.number == 22290", "udp_stream": 346 }, { "frame_number": 22623, "timestamp_epoch": "1634914275.047966000", "display_filter": "frame.number == 22623", "udp_stream": 365 }, { "frame_number": 22624, "timestamp_epoch": "1634914275.140675000", "display_filter": "frame.number == 22624", "udp_stream": 365 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6515316b6d2a1a1398128967", "type": "domain", "value": "eafddirect.msedge.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913189.590171000", "last_seen_epoch": "1634913189.665089000", "evidence": [ { "frame_number": 2927, "timestamp_epoch": "1634913189.590171000", "display_filter": "frame.number == 2927", "udp_stream": 120 }, { "frame_number": 2929, "timestamp_epoch": "1634913189.665089000", "display_filter": "frame.number == 2929", "udp_stream": 120 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-986017a1c4ebdf634bbea400", "type": "domain", "value": "edge.activity.windows.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913346.286105000", "last_seen_epoch": "1634913346.481890000", "evidence": [ { "frame_number": 6264, "timestamp_epoch": "1634913346.286105000", "display_filter": "frame.number == 6264", "udp_stream": 190 }, { "frame_number": 6282, "timestamp_epoch": "1634913346.409737000", "display_filter": "frame.number == 6282", "udp_stream": 190 }, { "frame_number": 6294, "timestamp_epoch": "1634913346.481890000", "display_filter": "frame.number == 6294", "tcp_stream": 242 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7d0990f7ac50a7b49a7f7835", "type": "domain", "value": "edge.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913345.933401000", "last_seen_epoch": "1634913349.127511000", "evidence": [ { "frame_number": 6223, "timestamp_epoch": "1634913345.933401000", "display_filter": "frame.number == 6223", "udp_stream": 189 }, { "frame_number": 6224, "timestamp_epoch": "1634913345.985706000", "display_filter": "frame.number == 6224", "udp_stream": 189 }, { "frame_number": 6233, "timestamp_epoch": "1634913346.150945000", "display_filter": "frame.number == 6233", "tcp_stream": 240 }, { "frame_number": 6448, "timestamp_epoch": "1634913349.127511000", "display_filter": "frame.number == 6448", "tcp_stream": 244 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-11e4f14eca60915e11254a65", "type": "domain", "value": "enemywatch-dc.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913052.531003000", "last_seen_epoch": "1634916746.007694000", "evidence": [ { "frame_number": 17, "timestamp_epoch": "1634913052.531003000", "display_filter": "frame.number == 17", "udp_stream": 5 }, { "frame_number": 18, "timestamp_epoch": "1634913052.531190000", "display_filter": "frame.number == 18", "udp_stream": 5 }, { "frame_number": 340, "timestamp_epoch": "1634913055.074816000", "display_filter": "frame.number == 340", "udp_stream": 23 }, { "frame_number": 341, "timestamp_epoch": "1634913055.075067000", "display_filter": "frame.number == 341", "udp_stream": 23 }, { "frame_number": 793, "timestamp_epoch": "1634913113.344659000", "display_filter": "frame.number == 793", "udp_stream": 37 }, { "frame_number": 794, "timestamp_epoch": "1634913113.344886000", "display_filter": "frame.number == 794", "udp_stream": 37 }, { "frame_number": 1154, "timestamp_epoch": "1634913115.458399000", "display_filter": "frame.number == 1154", "udp_stream": 57 }, { "frame_number": 1155, "timestamp_epoch": "1634913115.458770000", "display_filter": "frame.number == 1155", "udp_stream": 57 }, { "frame_number": 1687, "timestamp_epoch": "1634913143.965608000", "display_filter": "frame.number == 1687", "udp_stream": 77 }, { "frame_number": 1688, "timestamp_epoch": "1634913143.965839000", "display_filter": "frame.number == 1688", "udp_stream": 77 }, { "frame_number": 2103, "timestamp_epoch": "1634913146.406926000", "display_filter": "frame.number == 2103", "udp_stream": 99 }, { "frame_number": 2104, "timestamp_epoch": "1634913146.407180000", "display_filter": "frame.number == 2104", "udp_stream": 99 }, { "frame_number": 65658, "timestamp_epoch": "1634916655.027139000", "display_filter": "frame.number == 65658", "udp_stream": 835 }, { "frame_number": 65659, "timestamp_epoch": "1634916655.027546000", "display_filter": "frame.number == 65659", "udp_stream": 835 }, { "frame_number": 66248, "timestamp_epoch": "1634916715.105701000", "display_filter": "frame.number == 66248", "udp_stream": 849 }, { "frame_number": 66249, "timestamp_epoch": "1634916715.106019000", "display_filter": "frame.number == 66249", "udp_stream": 849 }, { "frame_number": 66406, "timestamp_epoch": "1634916746.007359000", "display_filter": "frame.number == 66406", "udp_stream": 859 }, { "frame_number": 66407, "timestamp_epoch": "1634916746.007694000", "display_filter": "frame.number == 66407", "udp_stream": 859 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-53d4a1f833d32a3f0ee2f87e", "type": "domain", "value": "enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913148.528960000", "last_seen_epoch": "1634918543.667247000", "evidence": [ { "frame_number": 2313, "timestamp_epoch": "1634913148.528960000", "display_filter": "frame.number == 2313", "udp_stream": 101 }, { "frame_number": 2314, "timestamp_epoch": "1634913148.530213000", "display_filter": "frame.number == 2314", "udp_stream": 101 }, { "frame_number": 2630, "timestamp_epoch": "1634913184.572748000", "display_filter": "frame.number == 2630", "udp_stream": 114 }, { "frame_number": 2631, "timestamp_epoch": "1634913184.573027000", "display_filter": "frame.number == 2631", "udp_stream": 114 }, { "frame_number": 3398, "timestamp_epoch": "1634913211.537384000", "display_filter": "frame.number == 3398", "udp_stream": 134 }, { "frame_number": 3400, "timestamp_epoch": "1634913211.537593000", "display_filter": "frame.number == 3400", "udp_stream": 134 }, { "frame_number": 4180, "timestamp_epoch": "1634913239.033435000", "display_filter": "frame.number == 4180", "udp_stream": 149 }, { "frame_number": 4181, "timestamp_epoch": "1634913239.033711000", "display_filter": "frame.number == 4181", "udp_stream": 149 }, { "frame_number": 17594, "timestamp_epoch": "1634913956.151353000", "display_filter": "frame.number == 17594", "udp_stream": 314 }, { "frame_number": 17595, "timestamp_epoch": "1634913956.152393000", "display_filter": "frame.number == 17595", "udp_stream": 314 }, { "frame_number": 17864, "timestamp_epoch": "1634914016.822158000", "display_filter": "frame.number == 17864", "udp_stream": 325 }, { "frame_number": 17865, "timestamp_epoch": "1634914016.823164000", "display_filter": "frame.number == 17865", "udp_stream": 325 }, { "frame_number": 17946, "timestamp_epoch": "1634914043.534134000", "display_filter": "frame.number == 17946", "udp_stream": 332 }, { "frame_number": 17947, "timestamp_epoch": "1634914043.535101000", "display_filter": "frame.number == 17947", "udp_stream": 332 }, { "frame_number": 24590, "timestamp_epoch": "1634914851.167979000", "display_filter": "frame.number == 24590", "udp_stream": 483 }, { "frame_number": 24591, "timestamp_epoch": "1634914851.168976000", "display_filter": "frame.number == 24591", "udp_stream": 483 }, { "frame_number": 24795, "timestamp_epoch": "1634914911.844792000", "display_filter": "frame.number == 24795", "udp_stream": 493 }, { "frame_number": 24796, "timestamp_epoch": "1634914911.845809000", "display_filter": "frame.number == 24796", "udp_stream": 493 }, { "frame_number": 25092, "timestamp_epoch": "1634914943.551261000", "display_filter": "frame.number == 25092", "udp_stream": 498 }, { "frame_number": 25093, "timestamp_epoch": "1634914943.552065000", "display_filter": "frame.number == 25093", "udp_stream": 498 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-233743f20f61c20d384d058c", "type": "domain", "value": "fe2cr.update.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913661.634897000", "last_seen_epoch": "1634913753.697005000", "evidence": [ { "frame_number": 11163, "timestamp_epoch": "1634913661.634897000", "display_filter": "frame.number == 11163", "udp_stream": 237 }, { "frame_number": 11164, "timestamp_epoch": "1634913661.723929000", "display_filter": "frame.number == 11164", "udp_stream": 237 }, { "frame_number": 11619, "timestamp_epoch": "1634913722.482391000", "display_filter": "frame.number == 11619", "udp_stream": 259 }, { "frame_number": 11620, "timestamp_epoch": "1634913722.575867000", "display_filter": "frame.number == 11620", "udp_stream": 259 }, { "frame_number": 11621, "timestamp_epoch": "1634913722.624343000", "display_filter": "frame.number == 11621", "udp_stream": 259 }, { "frame_number": 13321, "timestamp_epoch": "1634913753.568408000", "display_filter": "frame.number == 13321", "udp_stream": 271 }, { "frame_number": 13322, "timestamp_epoch": "1634913753.568654000", "display_filter": "frame.number == 13322", "udp_stream": 271 }, { "frame_number": 11168, "timestamp_epoch": "1634913661.857264000", "display_filter": "frame.number == 11168", "tcp_stream": 272 }, { "frame_number": 11625, "timestamp_epoch": "1634913722.773922000", "display_filter": "frame.number == 11625", "tcp_stream": 293 }, { "frame_number": 13326, "timestamp_epoch": "1634913753.697005000", "display_filter": "frame.number == 13326", "tcp_stream": 305 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d2c110b07a07a1efd45219ce", "type": "domain", "value": "fe2cr.update.microsoft.com.akadns.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913661.723929000", "last_seen_epoch": "1634913753.568654000", "evidence": [ { "frame_number": 11164, "timestamp_epoch": "1634913661.723929000", "display_filter": "frame.number == 11164", "udp_stream": 237 }, { "frame_number": 11621, "timestamp_epoch": "1634913722.624343000", "display_filter": "frame.number == 11621", "udp_stream": 259 }, { "frame_number": 13322, "timestamp_epoch": "1634913753.568654000", "display_filter": "frame.number == 13322", "udp_stream": 271 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a7fbb63605ff51d126312286", "type": "domain", "value": "fe3cr.delivery.mp.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913664.651895000", "last_seen_epoch": "1634913756.800112000", "evidence": [ { "frame_number": 11311, "timestamp_epoch": "1634913664.651895000", "display_filter": "frame.number == 11311", "udp_stream": 240 }, { "frame_number": 11315, "timestamp_epoch": "1634913665.668684000", "display_filter": "frame.number == 11315", "udp_stream": 240 }, { "frame_number": 11332, "timestamp_epoch": "1634913666.684042000", "display_filter": "frame.number == 11332", "udp_stream": 240 }, { "frame_number": 11350, "timestamp_epoch": "1634913667.882261000", "display_filter": "frame.number == 11350", "udp_stream": 240 }, { "frame_number": 11776, "timestamp_epoch": "1634913725.147746000", "display_filter": "frame.number == 11776", "udp_stream": 262 }, { "frame_number": 11777, "timestamp_epoch": "1634913725.148011000", "display_filter": "frame.number == 11777", "udp_stream": 262 }, { "frame_number": 13632, "timestamp_epoch": "1634913756.715872000", "display_filter": "frame.number == 13632", "udp_stream": 273 }, { "frame_number": 13633, "timestamp_epoch": "1634913756.716158000", "display_filter": "frame.number == 13633", "udp_stream": 273 }, { "frame_number": 11354, "timestamp_epoch": "1634913667.961386000", "display_filter": "frame.number == 11354", "tcp_stream": 277 }, { "frame_number": 11781, "timestamp_epoch": "1634913725.209566000", "display_filter": "frame.number == 11781", "tcp_stream": 296 }, { "frame_number": 13637, "timestamp_epoch": "1634913756.800112000", "display_filter": "frame.number == 13637", "tcp_stream": 308 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8014b3ec3661613f996521f3", "type": "domain", "value": "fp-afd.azurefd.us", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913244.069281000", "last_seen_epoch": "1634913244.251332000", "evidence": [ { "frame_number": 4585, "timestamp_epoch": "1634913244.069281000", "display_filter": "frame.number == 4585", "udp_stream": 164 }, { "frame_number": 4651, "timestamp_epoch": "1634913244.151253000", "display_filter": "frame.number == 4651", "udp_stream": 164 }, { "frame_number": 4718, "timestamp_epoch": "1634913244.251332000", "display_filter": "frame.number == 4718", "tcp_stream": 209 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b133a3f5e3e62e5ea8884d1c", "type": "domain", "value": "fp-as.azureedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.816240000", "last_seen_epoch": "1634913243.924546000", "evidence": [ { "frame_number": 4445, "timestamp_epoch": "1634913243.816240000", "display_filter": "frame.number == 4445", "udp_stream": 154 }, { "frame_number": 4460, "timestamp_epoch": "1634913243.877808000", "display_filter": "frame.number == 4460", "udp_stream": 154 }, { "frame_number": 4470, "timestamp_epoch": "1634913243.924546000", "display_filter": "frame.number == 4470", "tcp_stream": 199 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e990657f7aac8312bc58b8ac", "type": "domain", "value": "fp-vs-nocache.azureedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.956564000", "last_seen_epoch": "1634913244.027393000", "evidence": [ { "frame_number": 4477, "timestamp_epoch": "1634913243.956564000", "display_filter": "frame.number == 4477", "udp_stream": 159 }, { "frame_number": 4478, "timestamp_epoch": "1634913243.956860000", "display_filter": "frame.number == 4478", "udp_stream": 159 }, { "frame_number": 4545, "timestamp_epoch": "1634913244.027393000", "display_filter": "frame.number == 4545", "tcp_stream": 201 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0a6235bce4cd31bce6fbe9a3", "type": "domain", "value": "grtovxn.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.280694000", "last_seen_epoch": "1634913358.297833000", "evidence": [ { "frame_number": 6484, "timestamp_epoch": "1634913352.280694000", "display_filter": "frame.number == 6484", "udp_stream": 196 }, { "frame_number": 6486, "timestamp_epoch": "1634913352.280907000", "display_filter": "frame.number == 6486", "udp_stream": 196 }, { "frame_number": 6545, "timestamp_epoch": "1634913358.297520000", "display_filter": "frame.number == 6545", "udp_stream": 208 }, { "frame_number": 6546, "timestamp_epoch": "1634913358.297833000", "display_filter": "frame.number == 6546", "udp_stream": 208 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3f3dc1acd0dc1e035bd8b1a4", "type": "domain", "value": "grtovxn.localdomain", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.281218000", "last_seen_epoch": "1634913358.298836000", "evidence": [ { "frame_number": 6488, "timestamp_epoch": "1634913352.281218000", "display_filter": "frame.number == 6488", "udp_stream": 198 }, { "frame_number": 6497, "timestamp_epoch": "1634913353.295438000", "display_filter": "frame.number == 6497", "udp_stream": 198 }, { "frame_number": 6513, "timestamp_epoch": "1634913355.310620000", "display_filter": "frame.number == 6513", "udp_stream": 198 }, { "frame_number": 6522, "timestamp_epoch": "1634913356.501436000", "display_filter": "frame.number == 6522", "udp_stream": 198 }, { "frame_number": 6550, "timestamp_epoch": "1634913358.298674000", "display_filter": "frame.number == 6550", "udp_stream": 209 }, { "frame_number": 6551, "timestamp_epoch": "1634913358.298836000", "display_filter": "frame.number == 6551", "udp_stream": 209 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dfccbd7ff0a22f6b1f26ab4a", "type": "domain", "value": "hzmx01.mxmail.netease.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917480.878971000", "last_seen_epoch": "1634917483.181105000", "evidence": [ { "frame_number": 74767, "timestamp_epoch": "1634917480.878971000", "display_filter": "frame.number == 74767", "udp_stream": 969 }, { "frame_number": 74769, "timestamp_epoch": "1634917480.965230000", "display_filter": "frame.number == 74769", "udp_stream": 969 }, { "frame_number": 74770, "timestamp_epoch": "1634917480.997903000", "display_filter": "frame.number == 74770", "udp_stream": 969 }, { "frame_number": 74798, "timestamp_epoch": "1634917483.181105000", "display_filter": "frame.number == 74798", "tcp_stream": 1489 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d7017835bc8a266c3bedb82a", "type": "domain", "value": "imap.gmail.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915335.284248000", "last_seen_epoch": "1634915547.102831000", "evidence": [ { "frame_number": 44498, "timestamp_epoch": "1634915335.284248000", "display_filter": "frame.number == 44498", "udp_stream": 564 }, { "frame_number": 44499, "timestamp_epoch": "1634915335.320222000", "display_filter": "frame.number == 44499", "udp_stream": 564 }, { "frame_number": 44500, "timestamp_epoch": "1634915335.347911000", "display_filter": "frame.number == 44500", "udp_stream": 564 }, { "frame_number": 51449, "timestamp_epoch": "1634915547.030252000", "display_filter": "frame.number == 51449", "udp_stream": 661 }, { "frame_number": 51450, "timestamp_epoch": "1634915547.059466000", "display_filter": "frame.number == 51450", "udp_stream": 661 }, { "frame_number": 51452, "timestamp_epoch": "1634915547.102831000", "display_filter": "frame.number == 51452", "udp_stream": 661 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-929d928d12ec19b39c99bd65", "type": "domain", "value": "img-prod-cms-rt-microsoft-com.akamaized.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913274.450842000", "last_seen_epoch": "1634913274.633074000", "evidence": [ { "frame_number": 5438, "timestamp_epoch": "1634913274.450842000", "display_filter": "frame.number == 5438", "udp_stream": 177 }, { "frame_number": 5439, "timestamp_epoch": "1634913274.533129000", "display_filter": "frame.number == 5439", "udp_stream": 177 }, { "frame_number": 5443, "timestamp_epoch": "1634913274.633074000", "display_filter": "frame.number == 5443", "tcp_stream": 228 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-bdbc3ff74d691de6b4c08e9b", "type": "domain", "value": "inbound.att.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915490.867160000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49366, "timestamp_epoch": "1634915490.867160000", "display_filter": "frame.number == 49366", "udp_stream": 639 }, { "frame_number": 49367, "timestamp_epoch": "1634915490.885831000", "display_filter": "frame.number == 49367", "udp_stream": 639 }, { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8a18f48c113bfee6ad483cd1", "type": "domain", "value": "k-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913189.942723000", "last_seen_epoch": "1634913244.058059000", "evidence": [ { "frame_number": 2970, "timestamp_epoch": "1634913189.942723000", "display_filter": "frame.number == 2970", "udp_stream": 126 }, { "frame_number": 2973, "timestamp_epoch": "1634913189.984101000", "display_filter": "frame.number == 2973", "udp_stream": 126 }, { "frame_number": 4474, "timestamp_epoch": "1634913243.925895000", "display_filter": "frame.number == 4474", "udp_stream": 156 }, { "frame_number": 4483, "timestamp_epoch": "1634913243.976966000", "display_filter": "frame.number == 4483", "udp_stream": 156 }, { "frame_number": 2996, "timestamp_epoch": "1634913190.112726000", "display_filter": "frame.number == 2996", "tcp_stream": 141 }, { "frame_number": 4569, "timestamp_epoch": "1634913244.058059000", "display_filter": "frame.number == 4569", "tcp_stream": 203 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-939ff7206bca32c29b78ddb3", "type": "domain", "value": "kamuchehddhgfgf.ddns.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913296.194174000", "last_seen_epoch": "1634918503.387693000", "evidence": [ { "frame_number": 5642, "timestamp_epoch": "1634913296.194174000", "display_filter": "frame.number == 5642", "udp_stream": 181 }, { "frame_number": 5643, "timestamp_epoch": "1634913296.292206000", "display_filter": "frame.number == 5643", "udp_stream": 181 }, { "frame_number": 11082, "timestamp_epoch": "1634913636.934027000", "display_filter": "frame.number == 11082", "udp_stream": 233 }, { "frame_number": 11083, "timestamp_epoch": "1634913637.017648000", "display_filter": "frame.number == 11083", "udp_stream": 233 }, { "frame_number": 11095, "timestamp_epoch": "1634913641.388777000", "display_filter": "frame.number == 11095", "udp_stream": 235 }, { "frame_number": 11100, "timestamp_epoch": "1634913641.488218000", "display_filter": "frame.number == 11100", "udp_stream": 235 }, { "frame_number": 11154, "timestamp_epoch": "1634913658.887387000", "display_filter": "frame.number == 11154", "udp_stream": 236 }, { "frame_number": 11156, "timestamp_epoch": "1634913658.948540000", "display_filter": "frame.number == 11156", "udp_stream": 236 }, { "frame_number": 11239, "timestamp_epoch": "1634913663.245893000", "display_filter": "frame.number == 11239", "udp_stream": 239 }, { "frame_number": 11240, "timestamp_epoch": "1634913663.282614000", "display_filter": "frame.number == 11240", "udp_stream": 239 }, { "frame_number": 11341, "timestamp_epoch": "1634913667.590924000", "display_filter": "frame.number == 11341", "udp_stream": 242 }, { "frame_number": 11342, "timestamp_epoch": "1634913667.660268000", "display_filter": "frame.number == 11342", "udp_stream": 242 }, { "frame_number": 11519, "timestamp_epoch": "1634913684.950783000", "display_filter": "frame.number == 11519", "udp_stream": 248 }, { "frame_number": 11520, "timestamp_epoch": "1634913685.005902000", "display_filter": "frame.number == 11520", "udp_stream": 248 }, { "frame_number": 11535, "timestamp_epoch": "1634913689.358333000", "display_filter": "frame.number == 11535", "udp_stream": 251 }, { "frame_number": 11536, "timestamp_epoch": "1634913689.413549000", "display_filter": "frame.number == 11536", "udp_stream": 251 }, { "frame_number": 11543, "timestamp_epoch": "1634913693.749383000", "display_filter": "frame.number == 11543", "udp_stream": 252 }, { "frame_number": 11544, "timestamp_epoch": "1634913693.798224000", "display_filter": "frame.number == 11544", "udp_stream": 252 }, { "frame_number": 11600, "timestamp_epoch": "1634913714.249814000", "display_filter": "frame.number == 11600", "udp_stream": 257 }, { "frame_number": 11601, "timestamp_epoch": "1634913714.329369000", "display_filter": "frame.number == 11601", "udp_stream": 257 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2e436c6de8bc0af952d3115b", "type": "domain", "value": "l-0005.dc-msedge.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913244.024012000", "last_seen_epoch": "1634913244.024012000", "evidence": [ { "frame_number": 4540, "timestamp_epoch": "1634913244.024012000", "display_filter": "frame.number == 4540", "udp_stream": 158 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d517a0c72d9394a7b957f771", "type": "domain", "value": "l-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.932548000", "last_seen_epoch": "1634913244.025703000", "evidence": [ { "frame_number": 4475, "timestamp_epoch": "1634913243.932548000", "display_filter": "frame.number == 4475", "udp_stream": 157 }, { "frame_number": 4482, "timestamp_epoch": "1634913243.976900000", "display_filter": "frame.number == 4482", "udp_stream": 157 }, { "frame_number": 4543, "timestamp_epoch": "1634913244.025703000", "display_filter": "frame.number == 4543", "tcp_stream": 202 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8170113285e6cea0d91d6116", "type": "domain", "value": "login.live.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913190.875812000", "last_seen_epoch": "1634917491.155651000", "evidence": [ { "frame_number": 3060, "timestamp_epoch": "1634913190.875812000", "display_filter": "frame.number == 3060", "udp_stream": 129 }, { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3670, "timestamp_epoch": "1634913218.672739000", "display_filter": "frame.number == 3670", "udp_stream": 140 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4816, "timestamp_epoch": "1634913244.864837000", "display_filter": "frame.number == 4816", "udp_stream": 166 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 30180, "timestamp_epoch": "1634915205.196753000", "display_filter": "frame.number == 30180", "udp_stream": 532 }, { "frame_number": 30181, "timestamp_epoch": "1634915205.221475000", "display_filter": "frame.number == 30181", "udp_stream": 532 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74941, "timestamp_epoch": "1634917491.023270000", "display_filter": "frame.number == 74941", "udp_stream": 972 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 }, { "frame_number": 3093, "timestamp_epoch": "1634913191.072852000", "display_filter": "frame.number == 3093", "tcp_stream": 145 }, { "frame_number": 3681, "timestamp_epoch": "1634913218.797333000", "display_filter": "frame.number == 3681", "tcp_stream": 169 }, { "frame_number": 4832, "timestamp_epoch": "1634913245.029627000", "display_filter": "frame.number == 4832", "tcp_stream": 211 }, { "frame_number": 6278, "timestamp_epoch": "1634913346.385875000", "display_filter": "frame.number == 6278", "tcp_stream": 241 }, { "frame_number": 30186, "timestamp_epoch": "1634915205.550487000", "display_filter": "frame.number == 30186", "tcp_stream": 786 }, { "frame_number": 74950, "timestamp_epoch": "1634917491.155651000", "display_filter": "frame.number == 74950", "tcp_stream": 1493 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-90e8069ea1d17f0d657e911b", "type": "domain", "value": "login.microsoftonline.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913412.948359000", "last_seen_epoch": "1634915472.428457000", "evidence": [ { "frame_number": 7216, "timestamp_epoch": "1634913412.948359000", "display_filter": "frame.number == 7216", "udp_stream": 216 }, { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26150, "timestamp_epoch": "1634914986.188846000", "display_filter": "frame.number == 26150", "udp_stream": 505 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29179, "timestamp_epoch": "1634915013.197718000", "display_filter": "frame.number == 29179", "udp_stream": 516 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29342, "timestamp_epoch": "1634915040.620279000", "display_filter": "frame.number == 29342", "udp_stream": 518 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 45018, "timestamp_epoch": "1634915357.704362000", "display_filter": "frame.number == 45018", "udp_stream": 570 }, { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45132, "timestamp_epoch": "1634915359.720788000", "display_filter": "frame.number == 45132", "udp_stream": 572 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48392, "timestamp_epoch": "1634915472.242241000", "display_filter": "frame.number == 48392", "udp_stream": 628 }, { "frame_number": 48394, "timestamp_epoch": "1634915472.259547000", "display_filter": "frame.number == 48394", "udp_stream": 628 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 }, { "frame_number": 7221, "timestamp_epoch": "1634913413.058572000", "display_filter": "frame.number == 7221", "tcp_stream": 253 }, { "frame_number": 26155, "timestamp_epoch": "1634914986.312129000", "display_filter": "frame.number == 26155", "tcp_stream": 751 }, { "frame_number": 29184, "timestamp_epoch": "1634915013.249336000", "display_filter": "frame.number == 29184", "tcp_stream": 761 }, { "frame_number": 29347, "timestamp_epoch": "1634915040.790506000", "display_filter": "frame.number == 29347", "tcp_stream": 768 }, { "frame_number": 45023, "timestamp_epoch": "1634915357.827716000", "display_filter": "frame.number == 45023", "tcp_stream": 860 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a917a5a77195a854be62d97d", "type": "domain", "value": "mail.abchk.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918112.276282000", "last_seen_epoch": "1634918114.979374000", "evidence": [ { "frame_number": 80874, "timestamp_epoch": "1634918112.276282000", "display_filter": "frame.number == 80874", "udp_stream": 1043 }, { "frame_number": 80882, "timestamp_epoch": "1634918112.371714000", "display_filter": "frame.number == 80882", "udp_stream": 1043 }, { "frame_number": 80885, "timestamp_epoch": "1634918112.495866000", "display_filter": "frame.number == 80885", "udp_stream": 1043 }, { "frame_number": 80916, "timestamp_epoch": "1634918114.979374000", "display_filter": "frame.number == 80916", "tcp_stream": 1600 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-de2a898182af9c88f77fe72b", "type": "domain", "value": "mail.ajeel.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917326.100452000", "last_seen_epoch": "1634917332.274555000", "evidence": [ { "frame_number": 71444, "timestamp_epoch": "1634917326.100452000", "display_filter": "frame.number == 71444", "udp_stream": 944 }, { "frame_number": 71446, "timestamp_epoch": "1634917326.211393000", "display_filter": "frame.number == 71446", "udp_stream": 944 }, { "frame_number": 71451, "timestamp_epoch": "1634917327.227173000", "display_filter": "frame.number == 71451", "udp_stream": 944 }, { "frame_number": 71457, "timestamp_epoch": "1634917329.241501000", "display_filter": "frame.number == 71457", "udp_stream": 944 }, { "frame_number": 71458, "timestamp_epoch": "1634917329.864858000", "display_filter": "frame.number == 71458", "udp_stream": 944 }, { "frame_number": 71532, "timestamp_epoch": "1634917332.274555000", "display_filter": "frame.number == 71532", "tcp_stream": 1471 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-087faee07c7830ba2e47a72c", "type": "domain", "value": "mail.akinao-lab.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915647.142244000", "last_seen_epoch": "1634915649.179773000", "evidence": [ { "frame_number": 54427, "timestamp_epoch": "1634915647.142244000", "display_filter": "frame.number == 54427", "udp_stream": 677 }, { "frame_number": 54428, "timestamp_epoch": "1634915647.171963000", "display_filter": "frame.number == 54428", "udp_stream": 677 }, { "frame_number": 54431, "timestamp_epoch": "1634915647.306081000", "display_filter": "frame.number == 54431", "udp_stream": 677 }, { "frame_number": 54485, "timestamp_epoch": "1634915649.179773000", "display_filter": "frame.number == 54485", "tcp_stream": 979 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7099fefa250e60f40e1c9f41", "type": "domain", "value": "mail.anberman.es", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915529.167235000", "last_seen_epoch": "1634917557.664141000", "evidence": [ { "frame_number": 50906, "timestamp_epoch": "1634915529.167235000", "display_filter": "frame.number == 50906", "udp_stream": 648 }, { "frame_number": 50909, "timestamp_epoch": "1634915529.199564000", "display_filter": "frame.number == 50909", "udp_stream": 648 }, { "frame_number": 50913, "timestamp_epoch": "1634915529.455777000", "display_filter": "frame.number == 50913", "udp_stream": 648 }, { "frame_number": 75740, "timestamp_epoch": "1634917555.755522000", "display_filter": "frame.number == 75740", "udp_stream": 987 }, { "frame_number": 75742, "timestamp_epoch": "1634917555.841452000", "display_filter": "frame.number == 75742", "udp_stream": 987 }, { "frame_number": 75745, "timestamp_epoch": "1634917556.072346000", "display_filter": "frame.number == 75745", "udp_stream": 987 }, { "frame_number": 50946, "timestamp_epoch": "1634915531.672705000", "display_filter": "frame.number == 50946", "tcp_stream": 938 }, { "frame_number": 76046, "timestamp_epoch": "1634917557.664141000", "display_filter": "frame.number == 76046", "tcp_stream": 1514 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4b68eff1fc7b85fd902fcc67", "type": "domain", "value": "mail.atelierscalin.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917788.058447000", "last_seen_epoch": "1634917790.076972000", "evidence": [ { "frame_number": 77263, "timestamp_epoch": "1634917788.058447000", "display_filter": "frame.number == 77263", "udp_stream": 1017 }, { "frame_number": 77267, "timestamp_epoch": "1634917788.144291000", "display_filter": "frame.number == 77267", "udp_stream": 1017 }, { "frame_number": 77268, "timestamp_epoch": "1634917788.420012000", "display_filter": "frame.number == 77268", "udp_stream": 1017 }, { "frame_number": 77316, "timestamp_epoch": "1634917790.076972000", "display_filter": "frame.number == 77316", "tcp_stream": 1563 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b4a26e205304cb53ac389d20", "type": "domain", "value": "mail.austinjournls.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915720.446277000", "last_seen_epoch": "1634917388.083004000", "evidence": [ { "frame_number": 55418, "timestamp_epoch": "1634915720.446277000", "display_filter": "frame.number == 55418", "udp_stream": 683 }, { "frame_number": 55419, "timestamp_epoch": "1634915720.485158000", "display_filter": "frame.number == 55419", "udp_stream": 683 }, { "frame_number": 55422, "timestamp_epoch": "1634915721.487199000", "display_filter": "frame.number == 55422", "udp_stream": 683 }, { "frame_number": 55427, "timestamp_epoch": "1634915723.501882000", "display_filter": "frame.number == 55427", "udp_stream": 683 }, { "frame_number": 55440, "timestamp_epoch": "1634915727.518777000", "display_filter": "frame.number == 55440", "udp_stream": 683 }, { "frame_number": 55443, "timestamp_epoch": "1634915728.597238000", "display_filter": "frame.number == 55443", "udp_stream": 683 }, { "frame_number": 55513, "timestamp_epoch": "1634915734.730177000", "display_filter": "frame.number == 55513", "udp_stream": 684 }, { "frame_number": 55514, "timestamp_epoch": "1634915734.752397000", "display_filter": "frame.number == 55514", "udp_stream": 684 }, { "frame_number": 55517, "timestamp_epoch": "1634915735.752567000", "display_filter": "frame.number == 55517", "udp_stream": 684 }, { "frame_number": 55522, "timestamp_epoch": "1634915737.769096000", "display_filter": "frame.number == 55522", "udp_stream": 684 }, { "frame_number": 55536, "timestamp_epoch": "1634915741.769434000", "display_filter": "frame.number == 55536", "udp_stream": 684 }, { "frame_number": 55538, "timestamp_epoch": "1634915743.112516000", "display_filter": "frame.number == 55538", "udp_stream": 684 }, { "frame_number": 56068, "timestamp_epoch": "1634915817.067518000", "display_filter": "frame.number == 56068", "udp_stream": 694 }, { "frame_number": 56069, "timestamp_epoch": "1634915817.098940000", "display_filter": "frame.number == 56069", "udp_stream": 694 }, { "frame_number": 56076, "timestamp_epoch": "1634915818.113621000", "display_filter": "frame.number == 56076", "udp_stream": 694 }, { "frame_number": 56111, "timestamp_epoch": "1634915820.128854000", "display_filter": "frame.number == 56111", "udp_stream": 694 }, { "frame_number": 56131, "timestamp_epoch": "1634915824.129672000", "display_filter": "frame.number == 56131", "udp_stream": 694 }, { "frame_number": 56135, "timestamp_epoch": "1634915824.915652000", "display_filter": "frame.number == 56135", "udp_stream": 694 }, { "frame_number": 56592, "timestamp_epoch": "1634915863.166672000", "display_filter": "frame.number == 56592", "udp_stream": 704 }, { "frame_number": 56594, "timestamp_epoch": "1634915863.209259000", "display_filter": "frame.number == 56594", "udp_stream": 704 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-db68667d4273114192ff5496", "type": "domain", "value": "mail.be-daventure.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918417.753855000", "last_seen_epoch": "1634918421.746952000", "evidence": [ { "frame_number": 82936, "timestamp_epoch": "1634918417.753855000", "display_filter": "frame.number == 82936", "udp_stream": 1060 }, { "frame_number": 82938, "timestamp_epoch": "1634918417.839174000", "display_filter": "frame.number == 82938", "udp_stream": 1060 }, { "frame_number": 82939, "timestamp_epoch": "1634918418.059868000", "display_filter": "frame.number == 82939", "udp_stream": 1060 }, { "frame_number": 82970, "timestamp_epoch": "1634918421.746952000", "display_filter": "frame.number == 82970", "tcp_stream": 1628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5a894c6608afa289d8751297", "type": "domain", "value": "mail.bethnet.co.za", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915872.127710000", "last_seen_epoch": "1634917790.275471000", "evidence": [ { "frame_number": 56651, "timestamp_epoch": "1634915872.127710000", "display_filter": "frame.number == 56651", "udp_stream": 705 }, { "frame_number": 56652, "timestamp_epoch": "1634915872.146369000", "display_filter": "frame.number == 56652", "udp_stream": 705 }, { "frame_number": 56655, "timestamp_epoch": "1634915872.519220000", "display_filter": "frame.number == 56655", "udp_stream": 705 }, { "frame_number": 56947, "timestamp_epoch": "1634915893.158558000", "display_filter": "frame.number == 56947", "tcp_stream": 1046 }, { "frame_number": 57138, "timestamp_epoch": "1634915910.065939000", "display_filter": "frame.number == 57138", "tcp_stream": 1050 }, { "frame_number": 57318, "timestamp_epoch": "1634915919.941397000", "display_filter": "frame.number == 57318", "tcp_stream": 1052 }, { "frame_number": 57370, "timestamp_epoch": "1634915921.567272000", "display_filter": "frame.number == 57370", "tcp_stream": 1053 }, { "frame_number": 57474, "timestamp_epoch": "1634915925.104288000", "display_filter": "frame.number == 57474", "tcp_stream": 1054 }, { "frame_number": 77334, "timestamp_epoch": "1634917790.275471000", "display_filter": "frame.number == 77334", "tcp_stream": 1562 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-71f4759cf71f6ddef3b39b95", "type": "domain", "value": "mail.brins-d-eveil.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916295.817023000", "last_seen_epoch": "1634918272.316146000", "evidence": [ { "frame_number": 61170, "timestamp_epoch": "1634916295.817023000", "display_filter": "frame.number == 61170", "udp_stream": 777 }, { "frame_number": 61172, "timestamp_epoch": "1634916295.892768000", "display_filter": "frame.number == 61172", "udp_stream": 777 }, { "frame_number": 61174, "timestamp_epoch": "1634916296.118791000", "display_filter": "frame.number == 61174", "udp_stream": 777 }, { "frame_number": 81548, "timestamp_epoch": "1634918268.680350000", "display_filter": "frame.number == 81548", "udp_stream": 1052 }, { "frame_number": 81550, "timestamp_epoch": "1634918268.785263000", "display_filter": "frame.number == 81550", "udp_stream": 1052 }, { "frame_number": 81551, "timestamp_epoch": "1634918268.842171000", "display_filter": "frame.number == 81551", "udp_stream": 1052 }, { "frame_number": 61229, "timestamp_epoch": "1634916297.604648000", "display_filter": "frame.number == 61229", "tcp_stream": 1249 }, { "frame_number": 61789, "timestamp_epoch": "1634916337.192237000", "display_filter": "frame.number == 61789", "tcp_stream": 1260 }, { "frame_number": 61910, "timestamp_epoch": "1634916342.635349000", "display_filter": "frame.number == 61910", "tcp_stream": 1262 }, { "frame_number": 81595, "timestamp_epoch": "1634918270.690807000", "display_filter": "frame.number == 81595", "tcp_stream": 1617 }, { "frame_number": 81663, "timestamp_epoch": "1634918272.316146000", "display_filter": "frame.number == 81663", "tcp_stream": 1618 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fe88bba3e53b06ec496ed446", "type": "domain", "value": "mail.burgers.cc", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917432.452958000", "last_seen_epoch": "1634917433.086568000", "evidence": [ { "frame_number": 73614, "timestamp_epoch": "1634917432.452958000", "display_filter": "frame.number == 73614", "udp_stream": 961 }, { "frame_number": 73619, "timestamp_epoch": "1634917432.558070000", "display_filter": "frame.number == 73619", "udp_stream": 961 }, { "frame_number": 73621, "timestamp_epoch": "1634917433.086568000", "display_filter": "frame.number == 73621", "udp_stream": 961 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-87f1358a26f938f6e0d13bee", "type": "domain", "value": "mail.chokshiandchokshi.in", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917217.429368000", "last_seen_epoch": "1634917217.516688000", "evidence": [ { "frame_number": 69986, "timestamp_epoch": "1634917217.429368000", "display_filter": "frame.number == 69986", "udp_stream": 936 }, { "frame_number": 69988, "timestamp_epoch": "1634917217.516688000", "display_filter": "frame.number == 69988", "udp_stream": 936 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5deb9a477592a70af388cb7c", "type": "domain", "value": "mail.come-paris.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915984.476336000", "last_seen_epoch": "1634916068.323129000", "evidence": [ { "frame_number": 57935, "timestamp_epoch": "1634915984.476336000", "display_filter": "frame.number == 57935", "udp_stream": 718 }, { "frame_number": 57938, "timestamp_epoch": "1634915984.555221000", "display_filter": "frame.number == 57938", "udp_stream": 718 }, { "frame_number": 57939, "timestamp_epoch": "1634915984.768572000", "display_filter": "frame.number == 57939", "udp_stream": 718 }, { "frame_number": 57975, "timestamp_epoch": "1634915987.005842000", "display_filter": "frame.number == 57975", "tcp_stream": 1075 }, { "frame_number": 58833, "timestamp_epoch": "1634916068.323129000", "display_filter": "frame.number == 58833", "tcp_stream": 1105 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-21e61cdc7da28875ed43483b", "type": "domain", "value": "mail.corteo.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916117.526733000", "last_seen_epoch": "1634916163.971055000", "evidence": [ { "frame_number": 59508, "timestamp_epoch": "1634916117.526733000", "display_filter": "frame.number == 59508", "udp_stream": 744 }, { "frame_number": 59510, "timestamp_epoch": "1634916117.591164000", "display_filter": "frame.number == 59510", "udp_stream": 744 }, { "frame_number": 59513, "timestamp_epoch": "1634916117.969330000", "display_filter": "frame.number == 59513", "udp_stream": 744 }, { "frame_number": 59553, "timestamp_epoch": "1634916120.116913000", "display_filter": "frame.number == 59553", "tcp_stream": 1133 }, { "frame_number": 60152, "timestamp_epoch": "1634916163.971055000", "display_filter": "frame.number == 60152", "tcp_stream": 1162 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5ab4455c512eb3b9339f8f9e", "type": "domain", "value": "mail.csnert.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917150.228182000", "last_seen_epoch": "1634917152.829721000", "evidence": [ { "frame_number": 69524, "timestamp_epoch": "1634917150.228182000", "display_filter": "frame.number == 69524", "udp_stream": 932 }, { "frame_number": 69526, "timestamp_epoch": "1634917150.330561000", "display_filter": "frame.number == 69526", "udp_stream": 932 }, { "frame_number": 69531, "timestamp_epoch": "1634917150.663411000", "display_filter": "frame.number == 69531", "udp_stream": 932 }, { "frame_number": 69588, "timestamp_epoch": "1634917152.829721000", "display_filter": "frame.number == 69588", "tcp_stream": 1448 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e4127ab2a439a25779311ac2", "type": "domain", "value": "mail.debtmend.co.za", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915612.140267000", "last_seen_epoch": "1634915622.535511000", "evidence": [ { "frame_number": 53946, "timestamp_epoch": "1634915612.140267000", "display_filter": "frame.number == 53946", "udp_stream": 674 }, { "frame_number": 53947, "timestamp_epoch": "1634915612.171172000", "display_filter": "frame.number == 53947", "udp_stream": 674 }, { "frame_number": 53950, "timestamp_epoch": "1634915613.187411000", "display_filter": "frame.number == 53950", "udp_stream": 674 }, { "frame_number": 53954, "timestamp_epoch": "1634915615.203091000", "display_filter": "frame.number == 53954", "udp_stream": 674 }, { "frame_number": 53956, "timestamp_epoch": "1634915616.071020000", "display_filter": "frame.number == 53956", "udp_stream": 674 }, { "frame_number": 54015, "timestamp_epoch": "1634915622.535511000", "display_filter": "frame.number == 54015", "tcp_stream": 973 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-92313945a90bac4fb5c469e0", "type": "domain", "value": "mail.doctor-healthcare.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918422.574642000", "last_seen_epoch": "1634918479.022103000", "evidence": [ { "frame_number": 82993, "timestamp_epoch": "1634918422.574642000", "display_filter": "frame.number == 82993", "udp_stream": 1061 }, { "frame_number": 82995, "timestamp_epoch": "1634918422.681019000", "display_filter": "frame.number == 82995", "udp_stream": 1061 }, { "frame_number": 82998, "timestamp_epoch": "1634918422.878020000", "display_filter": "frame.number == 82998", "udp_stream": 1061 }, { "frame_number": 83101, "timestamp_epoch": "1634918426.195056000", "display_filter": "frame.number == 83101", "tcp_stream": 1629 }, { "frame_number": 83606, "timestamp_epoch": "1634918479.022103000", "display_filter": "frame.number == 83606", "tcp_stream": 1635 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2798d5e087765409cbcb9603", "type": "domain", "value": "mail.eolas.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916001.036727000", "last_seen_epoch": "1634917983.534245000", "evidence": [ { "frame_number": 58161, "timestamp_epoch": "1634916001.036727000", "display_filter": "frame.number == 58161", "udp_stream": 721 }, { "frame_number": 58163, "timestamp_epoch": "1634916001.087612000", "display_filter": "frame.number == 58163", "udp_stream": 721 }, { "frame_number": 58164, "timestamp_epoch": "1634916001.176536000", "display_filter": "frame.number == 58164", "udp_stream": 721 }, { "frame_number": 58217, "timestamp_epoch": "1634916009.006971000", "display_filter": "frame.number == 58217", "tcp_stream": 1081 }, { "frame_number": 58561, "timestamp_epoch": "1634916037.695014000", "display_filter": "frame.number == 58561", "tcp_stream": 1092 }, { "frame_number": 78640, "timestamp_epoch": "1634917968.127131000", "display_filter": "frame.number == 78640", "tcp_stream": 1572 }, { "frame_number": 78694, "timestamp_epoch": "1634917969.701223000", "display_filter": "frame.number == 78694", "tcp_stream": 1573 }, { "frame_number": 78882, "timestamp_epoch": "1634917983.534245000", "display_filter": "frame.number == 78882", "tcp_stream": 1574 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-659ae9d18248a61bb94967ad", "type": "domain", "value": "mail.goldmarkconsultants.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915790.804635000", "last_seen_epoch": "1634915790.948301000", "evidence": [ { "frame_number": 55891, "timestamp_epoch": "1634915790.804635000", "display_filter": "frame.number == 55891", "udp_stream": 691 }, { "frame_number": 55893, "timestamp_epoch": "1634915790.848443000", "display_filter": "frame.number == 55893", "udp_stream": 691 }, { "frame_number": 55894, "timestamp_epoch": "1634915790.948301000", "display_filter": "frame.number == 55894", "udp_stream": 691 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0555810ed7288f675cf054cb", "type": "domain", "value": "mail.hrctunisia.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917109.395921000", "last_seen_epoch": "1634917111.751355000", "evidence": [ { "frame_number": 69206, "timestamp_epoch": "1634917109.395921000", "display_filter": "frame.number == 69206", "udp_stream": 925 }, { "frame_number": 69208, "timestamp_epoch": "1634917109.455953000", "display_filter": "frame.number == 69208", "udp_stream": 925 }, { "frame_number": 69209, "timestamp_epoch": "1634917109.702372000", "display_filter": "frame.number == 69209", "udp_stream": 925 }, { "frame_number": 69241, "timestamp_epoch": "1634917111.751355000", "display_filter": "frame.number == 69241", "tcp_stream": 1437 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-00809e64701841a752efe867", "type": "domain", "value": "mail.ipage.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916507.659138000", "last_seen_epoch": "1634916508.960032000", "evidence": [ { "frame_number": 64868, "timestamp_epoch": "1634916507.659138000", "display_filter": "frame.number == 64868", "udp_stream": 826 }, { "frame_number": 64869, "timestamp_epoch": "1634916507.707543000", "display_filter": "frame.number == 64869", "udp_stream": 826 }, { "frame_number": 64898, "timestamp_epoch": "1634916508.960032000", "display_filter": "frame.number == 64898", "tcp_stream": 1277 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8ad15aa541788188ec5f4f8f", "type": "domain", "value": "mail.isoldry.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915492.152219000", "last_seen_epoch": "1634917375.741911000", "evidence": [ { "frame_number": 49389, "timestamp_epoch": "1634915492.152219000", "display_filter": "frame.number == 49389", "udp_stream": 640 }, { "frame_number": 49390, "timestamp_epoch": "1634915492.182843000", "display_filter": "frame.number == 49390", "udp_stream": 640 }, { "frame_number": 49394, "timestamp_epoch": "1634915492.456666000", "display_filter": "frame.number == 49394", "udp_stream": 640 }, { "frame_number": 72037, "timestamp_epoch": "1634917373.591663000", "display_filter": "frame.number == 72037", "udp_stream": 954 }, { "frame_number": 72038, "timestamp_epoch": "1634917373.592036000", "display_filter": "frame.number == 72038", "udp_stream": 954 }, { "frame_number": 49429, "timestamp_epoch": "1634915494.474794000", "display_filter": "frame.number == 49429", "tcp_stream": 928 }, { "frame_number": 72111, "timestamp_epoch": "1634917375.741911000", "display_filter": "frame.number == 72111", "tcp_stream": 1476 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-871b37d02c4a95826977f742", "type": "domain", "value": "mail.kalivet.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917769.638059000", "last_seen_epoch": "1634917771.784659000", "evidence": [ { "frame_number": 77125, "timestamp_epoch": "1634917769.638059000", "display_filter": "frame.number == 77125", "udp_stream": 1016 }, { "frame_number": 77127, "timestamp_epoch": "1634917769.738385000", "display_filter": "frame.number == 77127", "udp_stream": 1016 }, { "frame_number": 77128, "timestamp_epoch": "1634917769.838468000", "display_filter": "frame.number == 77128", "udp_stream": 1016 }, { "frame_number": 77157, "timestamp_epoch": "1634917771.784659000", "display_filter": "frame.number == 77157", "tcp_stream": 1561 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-505c6690cd2e25a43c03e63d", "type": "domain", "value": "mail.kbcrawl.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915579.498326000", "last_seen_epoch": "1634917533.136799000", "evidence": [ { "frame_number": 51818, "timestamp_epoch": "1634915579.498326000", "display_filter": "frame.number == 51818", "udp_stream": 673 }, { "frame_number": 51819, "timestamp_epoch": "1634915579.528752000", "display_filter": "frame.number == 51819", "udp_stream": 673 }, { "frame_number": 51821, "timestamp_epoch": "1634915579.753138000", "display_filter": "frame.number == 51821", "udp_stream": 673 }, { "frame_number": 75109, "timestamp_epoch": "1634917531.267706000", "display_filter": "frame.number == 75109", "udp_stream": 978 }, { "frame_number": 75111, "timestamp_epoch": "1634917531.371701000", "display_filter": "frame.number == 75111", "udp_stream": 978 }, { "frame_number": 75112, "timestamp_epoch": "1634917531.441008000", "display_filter": "frame.number == 75112", "udp_stream": 978 }, { "frame_number": 52423, "timestamp_epoch": "1634915582.283873000", "display_filter": "frame.number == 52423", "tcp_stream": 967 }, { "frame_number": 54119, "timestamp_epoch": "1634915627.685297000", "display_filter": "frame.number == 54119", "tcp_stream": 974 }, { "frame_number": 75148, "timestamp_epoch": "1634917533.136799000", "display_filter": "frame.number == 75148", "tcp_stream": 1504 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c95601c86e704b08e873d7dd", "type": "domain", "value": "mail.lecmg.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915788.551718000", "last_seen_epoch": "1634917728.350832000", "evidence": [ { "frame_number": 55847, "timestamp_epoch": "1634915788.551718000", "display_filter": "frame.number == 55847", "udp_stream": 690 }, { "frame_number": 55849, "timestamp_epoch": "1634915788.598499000", "display_filter": "frame.number == 55849", "udp_stream": 690 }, { "frame_number": 55850, "timestamp_epoch": "1634915788.989651000", "display_filter": "frame.number == 55850", "udp_stream": 690 }, { "frame_number": 76828, "timestamp_epoch": "1634917715.511186000", "display_filter": "frame.number == 76828", "udp_stream": 1015 }, { "frame_number": 76829, "timestamp_epoch": "1634917715.511717000", "display_filter": "frame.number == 76829", "udp_stream": 1015 }, { "frame_number": 55899, "timestamp_epoch": "1634915791.018857000", "display_filter": "frame.number == 55899", "tcp_stream": 1012 }, { "frame_number": 76862, "timestamp_epoch": "1634917717.372777000", "display_filter": "frame.number == 76862", "tcp_stream": 1558 }, { "frame_number": 76974, "timestamp_epoch": "1634917728.350832000", "display_filter": "frame.number == 76974", "tcp_stream": 1560 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9bb13fd909f31895d3e176c2", "type": "domain", "value": "mail.loosefoot.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915558.169085000", "last_seen_epoch": "1634915558.288115000", "evidence": [ { "frame_number": 51635, "timestamp_epoch": "1634915558.169085000", "display_filter": "frame.number == 51635", "udp_stream": 667 }, { "frame_number": 51636, "timestamp_epoch": "1634915558.201608000", "display_filter": "frame.number == 51636", "udp_stream": 667 }, { "frame_number": 51639, "timestamp_epoch": "1634915558.288115000", "display_filter": "frame.number == 51639", "udp_stream": 667 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f2384e056fa3a3897a7b153d", "type": "domain", "value": "mail.ma-communication.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918468.026099000", "last_seen_epoch": "1634918512.475242000", "evidence": [ { "frame_number": 83417, "timestamp_epoch": "1634918468.026099000", "display_filter": "frame.number == 83417", "udp_stream": 1067 }, { "frame_number": 83419, "timestamp_epoch": "1634918468.121070000", "display_filter": "frame.number == 83419", "udp_stream": 1067 }, { "frame_number": 83422, "timestamp_epoch": "1634918468.197715000", "display_filter": "frame.number == 83422", "udp_stream": 1067 }, { "frame_number": 83469, "timestamp_epoch": "1634918470.205248000", "display_filter": "frame.number == 83469", "tcp_stream": 1634 }, { "frame_number": 83847, "timestamp_epoch": "1634918512.475242000", "display_filter": "frame.number == 83847", "tcp_stream": 1646 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-aacde661bce67f91a0c7cd36", "type": "domain", "value": "mail.maclen.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916296.120407000", "last_seen_epoch": "1634916313.269112000", "evidence": [ { "frame_number": 61176, "timestamp_epoch": "1634916296.120407000", "display_filter": "frame.number == 61176", "udp_stream": 778 }, { "frame_number": 61177, "timestamp_epoch": "1634916296.173965000", "display_filter": "frame.number == 61177", "udp_stream": 778 }, { "frame_number": 61182, "timestamp_epoch": "1634916296.419248000", "display_filter": "frame.number == 61182", "udp_stream": 778 }, { "frame_number": 61262, "timestamp_epoch": "1634916298.407720000", "display_filter": "frame.number == 61262", "tcp_stream": 1250 }, { "frame_number": 61447, "timestamp_epoch": "1634916311.437816000", "display_filter": "frame.number == 61447", "tcp_stream": 1256 }, { "frame_number": 61510, "timestamp_epoch": "1634916313.269112000", "display_filter": "frame.number == 61510", "tcp_stream": 1257 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2a829d13faa8f367028b30d6", "type": "domain", "value": "mail.microvistatech.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916461.486699000", "last_seen_epoch": "1634916463.458079000", "evidence": [ { "frame_number": 64418, "timestamp_epoch": "1634916461.486699000", "display_filter": "frame.number == 64418", "udp_stream": 823 }, { "frame_number": 64420, "timestamp_epoch": "1634916461.538651000", "display_filter": "frame.number == 64420", "udp_stream": 823 }, { "frame_number": 64421, "timestamp_epoch": "1634916461.695322000", "display_filter": "frame.number == 64421", "udp_stream": 823 }, { "frame_number": 64451, "timestamp_epoch": "1634916463.458079000", "display_filter": "frame.number == 64451", "tcp_stream": 1273 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ae670f644721c962d3319861", "type": "domain", "value": "mail.monquartier.com.br", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917014.646205000", "last_seen_epoch": "1634917014.998659000", "evidence": [ { "frame_number": 68533, "timestamp_epoch": "1634917014.646205000", "display_filter": "frame.number == 68533", "udp_stream": 909 }, { "frame_number": 68535, "timestamp_epoch": "1634917014.718364000", "display_filter": "frame.number == 68535", "udp_stream": 909 }, { "frame_number": 68538, "timestamp_epoch": "1634917014.998659000", "display_filter": "frame.number == 68538", "udp_stream": 909 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b098a991d6126096dee8e5d3", "type": "domain", "value": "mail.myfairpoint.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915301.537594000", "last_seen_epoch": "1634915546.430128000", "evidence": [ { "frame_number": 43091, "timestamp_epoch": "1634915301.537594000", "display_filter": "frame.number == 43091", "udp_stream": 553 }, { "frame_number": 43093, "timestamp_epoch": "1634915301.569141000", "display_filter": "frame.number == 43093", "udp_stream": 553 }, { "frame_number": 43096, "timestamp_epoch": "1634915301.574987000", "display_filter": "frame.number == 43096", "udp_stream": 553 }, { "frame_number": 51409, "timestamp_epoch": "1634915546.386041000", "display_filter": "frame.number == 51409", "udp_stream": 660 }, { "frame_number": 51410, "timestamp_epoch": "1634915546.419553000", "display_filter": "frame.number == 51410", "udp_stream": 660 }, { "frame_number": 51415, "timestamp_epoch": "1634915546.430128000", "display_filter": "frame.number == 51415", "udp_stream": 660 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a853f5a62f34859082fbfb60", "type": "domain", "value": "mail.nazarioconstruction.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915629.222240000", "last_seen_epoch": "1634915631.569230000", "evidence": [ { "frame_number": 54177, "timestamp_epoch": "1634915629.222240000", "display_filter": "frame.number == 54177", "udp_stream": 675 }, { "frame_number": 54179, "timestamp_epoch": "1634915629.249852000", "display_filter": "frame.number == 54179", "udp_stream": 675 }, { "frame_number": 54181, "timestamp_epoch": "1634915629.326249000", "display_filter": "frame.number == 54181", "udp_stream": 675 }, { "frame_number": 54231, "timestamp_epoch": "1634915631.569230000", "display_filter": "frame.number == 54231", "tcp_stream": 976 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2f9de404229106756f37d89e", "type": "domain", "value": "mail.otenet.gr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918548.491385000", "last_seen_epoch": "1634918551.905691000", "evidence": [ { "frame_number": 84137, "timestamp_epoch": "1634918548.491385000", "display_filter": "frame.number == 84137", "udp_stream": 1083 }, { "frame_number": 84140, "timestamp_epoch": "1634918548.529465000", "display_filter": "frame.number == 84140", "udp_stream": 1083 }, { "frame_number": 84192, "timestamp_epoch": "1634918551.905691000", "display_filter": "frame.number == 84192", "tcp_stream": 1651 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-01a84ef4502b0caa34e65c9c", "type": "domain", "value": "mail.pangia.biz", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917079.726839000", "last_seen_epoch": "1634917081.520915000", "evidence": [ { "frame_number": 68957, "timestamp_epoch": "1634917079.726839000", "display_filter": "frame.number == 68957", "udp_stream": 919 }, { "frame_number": 68959, "timestamp_epoch": "1634917079.779900000", "display_filter": "frame.number == 68959", "udp_stream": 919 }, { "frame_number": 69006, "timestamp_epoch": "1634917081.520915000", "display_filter": "frame.number == 69006", "tcp_stream": 1428 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c1c403d07354d665fad58933", "type": "domain", "value": "mail.perpetualplaques.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916905.476321000", "last_seen_epoch": "1634916906.735237000", "evidence": [ { "frame_number": 68095, "timestamp_epoch": "1634916905.476321000", "display_filter": "frame.number == 68095", "udp_stream": 892 }, { "frame_number": 68097, "timestamp_epoch": "1634916905.528705000", "display_filter": "frame.number == 68097", "udp_stream": 892 }, { "frame_number": 68098, "timestamp_epoch": "1634916905.566833000", "display_filter": "frame.number == 68098", "udp_stream": 892 }, { "frame_number": 68131, "timestamp_epoch": "1634916906.735237000", "display_filter": "frame.number == 68131", "tcp_stream": 1379 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-bdba945f51293fdfd5bbaed1", "type": "domain", "value": "mail.ptolemee.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916080.399713000", "last_seen_epoch": "1634916082.509346000", "evidence": [ { "frame_number": 58938, "timestamp_epoch": "1634916080.399713000", "display_filter": "frame.number == 58938", "udp_stream": 735 }, { "frame_number": 58944, "timestamp_epoch": "1634916080.447739000", "display_filter": "frame.number == 58944", "udp_stream": 735 }, { "frame_number": 58946, "timestamp_epoch": "1634916080.627397000", "display_filter": "frame.number == 58946", "udp_stream": 735 }, { "frame_number": 59241, "timestamp_epoch": "1634916082.509346000", "display_filter": "frame.number == 59241", "tcp_stream": 1111 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f4baf56982cac3b239fae424", "type": "domain", "value": "mail.qualityms.com.mx", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915543.670036000", "last_seen_epoch": "1634915545.445901000", "evidence": [ { "frame_number": 51117, "timestamp_epoch": "1634915543.670036000", "display_filter": "frame.number == 51117", "udp_stream": 658 }, { "frame_number": 51118, "timestamp_epoch": "1634915543.700839000", "display_filter": "frame.number == 51118", "udp_stream": 658 }, { "frame_number": 51120, "timestamp_epoch": "1634915543.738770000", "display_filter": "frame.number == 51120", "udp_stream": 658 }, { "frame_number": 51375, "timestamp_epoch": "1634915545.445901000", "display_filter": "frame.number == 51375", "tcp_stream": 948 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e46f63bbb7aaee00839a1290", "type": "domain", "value": "mail.smtp2go.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915335.222160000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44492, "timestamp_epoch": "1634915335.222160000", "display_filter": "frame.number == 44492", "udp_stream": 563 }, { "frame_number": 44494, "timestamp_epoch": "1634915335.241483000", "display_filter": "frame.number == 44494", "udp_stream": 563 }, { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51513, "timestamp_epoch": "1634915548.731525000", "display_filter": "frame.number == 51513", "udp_stream": 664 }, { "frame_number": 51514, "timestamp_epoch": "1634915548.764180000", "display_filter": "frame.number == 51514", "udp_stream": 664 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e437a90b04a3bac26d03d5e0", "type": "domain", "value": "mail.songazine.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916164.953616000", "last_seen_epoch": "1634916167.595501000", "evidence": [ { "frame_number": 60180, "timestamp_epoch": "1634916164.953616000", "display_filter": "frame.number == 60180", "udp_stream": 759 }, { "frame_number": 60182, "timestamp_epoch": "1634916165.030815000", "display_filter": "frame.number == 60182", "udp_stream": 759 }, { "frame_number": 60185, "timestamp_epoch": "1634916165.251220000", "display_filter": "frame.number == 60185", "udp_stream": 759 }, { "frame_number": 60266, "timestamp_epoch": "1634916167.595501000", "display_filter": "frame.number == 60266", "tcp_stream": 1166 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-104e78931bb152dc63d3b674", "type": "domain", "value": "mail.tcgasociados.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917462.904094000", "last_seen_epoch": "1634917464.270196000", "evidence": [ { "frame_number": 74552, "timestamp_epoch": "1634917462.904094000", "display_filter": "frame.number == 74552", "udp_stream": 963 }, { "frame_number": 74554, "timestamp_epoch": "1634917462.996211000", "display_filter": "frame.number == 74554", "udp_stream": 963 }, { "frame_number": 74555, "timestamp_epoch": "1634917463.044740000", "display_filter": "frame.number == 74555", "udp_stream": 963 }, { "frame_number": 74583, "timestamp_epoch": "1634917464.270196000", "display_filter": "frame.number == 74583", "tcp_stream": 1486 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1c6732eaf63aca8679cad92c", "type": "domain", "value": "mail.tecsindia.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634916592.696650000", "last_seen_epoch": "1634916593.108750000", "evidence": [ { "frame_number": 65453, "timestamp_epoch": "1634916592.696650000", "display_filter": "frame.number == 65453", "udp_stream": 830 }, { "frame_number": 65454, "timestamp_epoch": "1634916592.747574000", "display_filter": "frame.number == 65454", "udp_stream": 830 }, { "frame_number": 65457, "timestamp_epoch": "1634916593.108750000", "display_filter": "frame.number == 65457", "udp_stream": 830 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d695c491c641c7a15528dc0e", "type": "domain", "value": "mail.tetranergy.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915370.665053000", "last_seen_epoch": "1634915376.683405000", "evidence": [ { "frame_number": 45308, "timestamp_epoch": "1634915370.665053000", "display_filter": "frame.number == 45308", "udp_stream": 573 }, { "frame_number": 45309, "timestamp_epoch": "1634915370.695690000", "display_filter": "frame.number == 45309", "udp_stream": 573 }, { "frame_number": 45316, "timestamp_epoch": "1634915371.695705000", "display_filter": "frame.number == 45316", "udp_stream": 573 }, { "frame_number": 45323, "timestamp_epoch": "1634915373.695893000", "display_filter": "frame.number == 45323", "udp_stream": 573 }, { "frame_number": 45328, "timestamp_epoch": "1634915374.223619000", "display_filter": "frame.number == 45328", "udp_stream": 573 }, { "frame_number": 45554, "timestamp_epoch": "1634915376.683405000", "display_filter": "frame.number == 45554", "tcp_stream": 872 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d9069f5841a0a059e4333bc4", "type": "domain", "value": "mail.tiretracksusa.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634918206.810516000", "last_seen_epoch": "1634918206.876873000", "evidence": [ { "frame_number": 81369, "timestamp_epoch": "1634918206.810516000", "display_filter": "frame.number == 81369", "udp_stream": 1049 }, { "frame_number": 81371, "timestamp_epoch": "1634918206.876873000", "display_filter": "frame.number == 81371", "udp_stream": 1049 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4c95f6449f4f23fe2a19dff5", "type": "domain", "value": "mail.verificalitas.es", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918423.328802000", "last_seen_epoch": "1634918426.001472000", "evidence": [ { "frame_number": 83016, "timestamp_epoch": "1634918423.328802000", "display_filter": "frame.number == 83016", "udp_stream": 1062 }, { "frame_number": 83018, "timestamp_epoch": "1634918423.432816000", "display_filter": "frame.number == 83018", "udp_stream": 1062 }, { "frame_number": 83021, "timestamp_epoch": "1634918423.640951000", "display_filter": "frame.number == 83021", "udp_stream": 1062 }, { "frame_number": 83089, "timestamp_epoch": "1634918426.001472000", "display_filter": "frame.number == 83089", "tcp_stream": 1630 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c279388823ea584ec0954b9e", "type": "domain", "value": "mail.verificalitasoca.es", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916809.753004000", "last_seen_epoch": "1634916811.993680000", "evidence": [ { "frame_number": 67618, "timestamp_epoch": "1634916809.753004000", "display_filter": "frame.number == 67618", "udp_stream": 877 }, { "frame_number": 67624, "timestamp_epoch": "1634916809.822577000", "display_filter": "frame.number == 67624", "udp_stream": 877 }, { "frame_number": 67626, "timestamp_epoch": "1634916810.052780000", "display_filter": "frame.number == 67626", "udp_stream": 877 }, { "frame_number": 67655, "timestamp_epoch": "1634916811.993680000", "display_filter": "frame.number == 67655", "tcp_stream": 1354 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-735c6bbad98a6e386977445c", "type": "domain", "value": "mail.xenium-partners.fr", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915884.753429000", "last_seen_epoch": "1634915888.802467000", "evidence": [ { "frame_number": 56718, "timestamp_epoch": "1634915884.753429000", "display_filter": "frame.number == 56718", "udp_stream": 707 }, { "frame_number": 56720, "timestamp_epoch": "1634915884.803916000", "display_filter": "frame.number == 56720", "udp_stream": 707 }, { "frame_number": 56721, "timestamp_epoch": "1634915884.889335000", "display_filter": "frame.number == 56721", "udp_stream": 707 }, { "frame_number": 56777, "timestamp_epoch": "1634915887.166702000", "display_filter": "frame.number == 56777", "tcp_stream": 1045 }, { "frame_number": 56834, "timestamp_epoch": "1634915888.802467000", "display_filter": "frame.number == 56834", "tcp_stream": 1047 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6c50aaca33fa1dc2a497b731", "type": "domain", "value": "mail.yourwebsitemail.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918051.080942000", "last_seen_epoch": "1634918052.845155000", "evidence": [ { "frame_number": 79141, "timestamp_epoch": "1634918051.080942000", "display_filter": "frame.number == 79141", "udp_stream": 1028 }, { "frame_number": 79143, "timestamp_epoch": "1634918051.168288000", "display_filter": "frame.number == 79143", "udp_stream": 1028 }, { "frame_number": 79170, "timestamp_epoch": "1634918052.845155000", "display_filter": "frame.number == 79170", "tcp_stream": 1576 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-97d5996b8893b042439acb1e", "type": "domain", "value": "mail04.l4email.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915825.580857000", "last_seen_epoch": "1634915826.871337000", "evidence": [ { "frame_number": 56145, "timestamp_epoch": "1634915825.580857000", "display_filter": "frame.number == 56145", "udp_stream": 696 }, { "frame_number": 56146, "timestamp_epoch": "1634915825.598859000", "display_filter": "frame.number == 56146", "udp_stream": 696 }, { "frame_number": 56147, "timestamp_epoch": "1634915825.621000000", "display_filter": "frame.number == 56147", "udp_stream": 696 }, { "frame_number": 56181, "timestamp_epoch": "1634915826.871337000", "display_filter": "frame.number == 56181", "tcp_stream": 1021 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-862ce13fcb9f2efa7bb5f87f", "type": "domain", "value": "microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913888.971528000", "last_seen_epoch": "1634913889.341157000", "evidence": [ { "frame_number": 17273, "timestamp_epoch": "1634913888.971528000", "display_filter": "frame.number == 17273", "udp_stream": 297 }, { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 }, { "frame_number": 17278, "timestamp_epoch": "1634913889.341157000", "display_filter": "frame.number == 17278", "tcp_stream": 350 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-700cdd3591253c9eb6f9b2c1", "type": "domain", "value": "moiazureorigin.clo.footprintdns.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913189.980872000", "last_seen_epoch": "1634913194.082079000", "evidence": [ { "frame_number": 2972, "timestamp_epoch": "1634913189.980872000", "display_filter": "frame.number == 2972", "udp_stream": 127 }, { "frame_number": 3072, "timestamp_epoch": "1634913190.988595000", "display_filter": "frame.number == 3072", "udp_stream": 127 }, { "frame_number": 3200, "timestamp_epoch": "1634913191.999643000", "display_filter": "frame.number == 3200", "udp_stream": 127 }, { "frame_number": 3241, "timestamp_epoch": "1634913194.017456000", "display_filter": "frame.number == 3241", "udp_stream": 127 }, { "frame_number": 3242, "timestamp_epoch": "1634913194.082079000", "display_filter": "frame.number == 3242", "udp_stream": 127 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a5277a10219ab7bf32f98977", "type": "domain", "value": "mta-01.webnode.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915639.507085000", "last_seen_epoch": "1634915646.439950000", "evidence": [ { "frame_number": 54347, "timestamp_epoch": "1634915639.507085000", "display_filter": "frame.number == 54347", "udp_stream": 676 }, { "frame_number": 54348, "timestamp_epoch": "1634915639.530707000", "display_filter": "frame.number == 54348", "udp_stream": 676 }, { "frame_number": 54351, "timestamp_epoch": "1634915640.547806000", "display_filter": "frame.number == 54351", "udp_stream": 676 }, { "frame_number": 54359, "timestamp_epoch": "1634915642.562422000", "display_filter": "frame.number == 54359", "udp_stream": 676 }, { "frame_number": 54361, "timestamp_epoch": "1634915643.830713000", "display_filter": "frame.number == 54361", "udp_stream": 676 }, { "frame_number": 54396, "timestamp_epoch": "1634915646.439950000", "display_filter": "frame.number == 54396", "tcp_stream": 977 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b28de903ff91b052ba733ae0", "type": "domain", "value": "mta.21cn.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917054.463571000", "last_seen_epoch": "1634917333.008309000", "evidence": [ { "frame_number": 68860, "timestamp_epoch": "1634917054.463571000", "display_filter": "frame.number == 68860", "udp_stream": 915 }, { "frame_number": 68862, "timestamp_epoch": "1634917054.517241000", "display_filter": "frame.number == 68862", "udp_stream": 915 }, { "frame_number": 68863, "timestamp_epoch": "1634917054.536701000", "display_filter": "frame.number == 68863", "udp_stream": 915 }, { "frame_number": 70687, "timestamp_epoch": "1634917255.112536000", "display_filter": "frame.number == 70687", "tcp_stream": 1463 }, { "frame_number": 71050, "timestamp_epoch": "1634917283.681137000", "display_filter": "frame.number == 71050", "tcp_stream": 1466 }, { "frame_number": 71581, "timestamp_epoch": "1634917333.008309000", "display_filter": "frame.number == 71581", "tcp_stream": 1472 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f08130f073cdf2dadced561b", "type": "domain", "value": "mx.celleno.it", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917264.562033000", "last_seen_epoch": "1634917264.766583000", "evidence": [ { "frame_number": 70852, "timestamp_epoch": "1634917264.562033000", "display_filter": "frame.number == 70852", "udp_stream": 940 }, { "frame_number": 70854, "timestamp_epoch": "1634917264.663288000", "display_filter": "frame.number == 70854", "udp_stream": 940 }, { "frame_number": 70857, "timestamp_epoch": "1634917264.766583000", "display_filter": "frame.number == 70857", "udp_stream": 940 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c33650a07c7121146a0f2924", "type": "domain", "value": "mx02.colt-engine.it", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634916236.458815000", "last_seen_epoch": "1634916236.759885000", "evidence": [ { "frame_number": 60734, "timestamp_epoch": "1634916236.458815000", "display_filter": "frame.number == 60734", "udp_stream": 769 }, { "frame_number": 60736, "timestamp_epoch": "1634916236.532245000", "display_filter": "frame.number == 60736", "udp_stream": 769 }, { "frame_number": 60737, "timestamp_epoch": "1634916236.759885000", "display_filter": "frame.number == 60737", "udp_stream": 769 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c2d028033a5fee4fca469bfe", "type": "domain", "value": "mx1.mail.139.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916483.815052000", "last_seen_epoch": "1634916486.624776000", "evidence": [ { "frame_number": 64697, "timestamp_epoch": "1634916483.815052000", "display_filter": "frame.number == 64697", "udp_stream": 825 }, { "frame_number": 64698, "timestamp_epoch": "1634916483.852171000", "display_filter": "frame.number == 64698", "udp_stream": 825 }, { "frame_number": 64731, "timestamp_epoch": "1634916486.624776000", "display_filter": "frame.number == 64731", "tcp_stream": 1276 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0fa989838d1a7dba90bff11f", "type": "domain", "value": "myexternalip.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634914507.489178000", "last_seen_epoch": "1634914507.579332000", "evidence": [ { "frame_number": 23555, "timestamp_epoch": "1634914507.489178000", "display_filter": "frame.number == 23555", "udp_stream": 415 }, { "frame_number": 23556, "timestamp_epoch": "1634914507.544364000", "display_filter": "frame.number == 23556", "udp_stream": 415 }, { "frame_number": 23560, "timestamp_epoch": "1634914507.579332000", "display_filter": "frame.number == 23560", "tcp_stream": 554 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cab7a338053505a9533a99f8", "type": "domain", "value": "nexusrules.officeapps.live.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913116.772980000", "last_seen_epoch": "1634915197.755998000", "evidence": [ { "frame_number": 1275, "timestamp_epoch": "1634913116.772980000", "display_filter": "frame.number == 1275", "udp_stream": 60 }, { "frame_number": 1378, "timestamp_epoch": "1634913116.834876000", "display_filter": "frame.number == 1378", "udp_stream": 60 }, { "frame_number": 2561, "timestamp_epoch": "1634913176.519414000", "display_filter": "frame.number == 2561", "udp_stream": 112 }, { "frame_number": 2562, "timestamp_epoch": "1634913176.519727000", "display_filter": "frame.number == 2562", "udp_stream": 112 }, { "frame_number": 3336, "timestamp_epoch": "1634913207.157887000", "display_filter": "frame.number == 3336", "udp_stream": 133 }, { "frame_number": 3337, "timestamp_epoch": "1634913207.158388000", "display_filter": "frame.number == 3337", "udp_stream": 133 }, { "frame_number": 10816, "timestamp_epoch": "1634913478.931063000", "display_filter": "frame.number == 10816", "udp_stream": 226 }, { "frame_number": 10817, "timestamp_epoch": "1634913479.015566000", "display_filter": "frame.number == 10817", "udp_stream": 226 }, { "frame_number": 30055, "timestamp_epoch": "1634915197.440065000", "display_filter": "frame.number == 30055", "udp_stream": 529 }, { "frame_number": 30056, "timestamp_epoch": "1634915197.470830000", "display_filter": "frame.number == 30056", "udp_stream": 529 }, { "frame_number": 30057, "timestamp_epoch": "1634915197.555154000", "display_filter": "frame.number == 30057", "udp_stream": 529 }, { "frame_number": 1384, "timestamp_epoch": "1634913117.006088000", "display_filter": "frame.number == 1384", "tcp_stream": 68 }, { "frame_number": 2567, "timestamp_epoch": "1634913176.687495000", "display_filter": "frame.number == 2567", "tcp_stream": 121 }, { "frame_number": 3341, "timestamp_epoch": "1634913207.335788000", "display_filter": "frame.number == 3341", "tcp_stream": 151 }, { "frame_number": 10821, "timestamp_epoch": "1634913479.081253000", "display_filter": "frame.number == 10821", "tcp_stream": 260 }, { "frame_number": 30065, "timestamp_epoch": "1634915197.755998000", "display_filter": "frame.number == 30065", "tcp_stream": 779 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-92c43961ca08b7f6b4d90211", "type": "domain", "value": "ns0.ovh.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634915374.223619000", "last_seen_epoch": "1634918468.197715000", "evidence": [ { "frame_number": 45328, "timestamp_epoch": "1634915374.223619000", "display_filter": "frame.number == 45328", "udp_stream": 573 }, { "frame_number": 49394, "timestamp_epoch": "1634915492.456666000", "display_filter": "frame.number == 49394", "udp_stream": 640 }, { "frame_number": 50913, "timestamp_epoch": "1634915529.455777000", "display_filter": "frame.number == 50913", "udp_stream": 648 }, { "frame_number": 51821, "timestamp_epoch": "1634915579.753138000", "display_filter": "frame.number == 51821", "udp_stream": 673 }, { "frame_number": 54431, "timestamp_epoch": "1634915647.306081000", "display_filter": "frame.number == 54431", "udp_stream": 677 }, { "frame_number": 55850, "timestamp_epoch": "1634915788.989651000", "display_filter": "frame.number == 55850", "udp_stream": 690 }, { "frame_number": 56721, "timestamp_epoch": "1634915884.889335000", "display_filter": "frame.number == 56721", "udp_stream": 707 }, { "frame_number": 57939, "timestamp_epoch": "1634915984.768572000", "display_filter": "frame.number == 57939", "udp_stream": 718 }, { "frame_number": 58946, "timestamp_epoch": "1634916080.627397000", "display_filter": "frame.number == 58946", "udp_stream": 735 }, { "frame_number": 59513, "timestamp_epoch": "1634916117.969330000", "display_filter": "frame.number == 59513", "udp_stream": 744 }, { "frame_number": 60185, "timestamp_epoch": "1634916165.251220000", "display_filter": "frame.number == 60185", "udp_stream": 759 }, { "frame_number": 61174, "timestamp_epoch": "1634916296.118791000", "display_filter": "frame.number == 61174", "udp_stream": 777 }, { "frame_number": 61182, "timestamp_epoch": "1634916296.419248000", "display_filter": "frame.number == 61182", "udp_stream": 778 }, { "frame_number": 69531, "timestamp_epoch": "1634917150.663411000", "display_filter": "frame.number == 69531", "udp_stream": 932 }, { "frame_number": 71458, "timestamp_epoch": "1634917329.864858000", "display_filter": "frame.number == 71458", "udp_stream": 944 }, { "frame_number": 72038, "timestamp_epoch": "1634917373.592036000", "display_filter": "frame.number == 72038", "udp_stream": 954 }, { "frame_number": 75112, "timestamp_epoch": "1634917531.441008000", "display_filter": "frame.number == 75112", "udp_stream": 978 }, { "frame_number": 75745, "timestamp_epoch": "1634917556.072346000", "display_filter": "frame.number == 75745", "udp_stream": 987 }, { "frame_number": 76829, "timestamp_epoch": "1634917715.511717000", "display_filter": "frame.number == 76829", "udp_stream": 1015 }, { "frame_number": 77268, "timestamp_epoch": "1634917788.420012000", "display_filter": "frame.number == 77268", "udp_stream": 1017 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b716697877854c1d0d5886d5", "type": "domain", "value": "odc.officeapps.live.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915197.637794000", "last_seen_epoch": "1634915197.830866000", "evidence": [ { "frame_number": 30059, "timestamp_epoch": "1634915197.637794000", "display_filter": "frame.number == 30059", "udp_stream": 530 }, { "frame_number": 30060, "timestamp_epoch": "1634915197.659518000", "display_filter": "frame.number == 30060", "udp_stream": 530 }, { "frame_number": 30061, "timestamp_epoch": "1634915197.737111000", "display_filter": "frame.number == 30061", "udp_stream": 530 }, { "frame_number": 30069, "timestamp_epoch": "1634915197.830866000", "display_filter": "frame.number == 30069", "tcp_stream": 780 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4a3c8e89843c0e74517ae3d7", "type": "domain", "value": "oftheearth.ca", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913608.680143000", "last_seen_epoch": "1634913608.680143000", "evidence": [ { "frame_number": 11038, "timestamp_epoch": "1634913608.680143000", "display_filter": "frame.number == 11038", "udp_stream": 232 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d2b540d207ffb56afe52fc11", "type": "domain", "value": "outlook.office365.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915204.264412000", "last_seen_epoch": "1634915204.479552000", "evidence": [ { "frame_number": 30149, "timestamp_epoch": "1634915204.264412000", "display_filter": "frame.number == 30149", "udp_stream": 531 }, { "frame_number": 30150, "timestamp_epoch": "1634915204.283515000", "display_filter": "frame.number == 30150", "udp_stream": 531 }, { "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "display_filter": "frame.number == 30151", "udp_stream": 531 }, { "frame_number": 30161, "timestamp_epoch": "1634915204.479552000", "display_filter": "frame.number == 30161", "tcp_stream": 785 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-48db0d43c6bac0e23736fa4e", "type": "domain", "value": "pingosip.top", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913346.523396000", "last_seen_epoch": "1634913346.593116000", "evidence": [ { "frame_number": 6298, "timestamp_epoch": "1634913346.523396000", "display_filter": "frame.number == 6298", "udp_stream": 191 }, { "frame_number": 6325, "timestamp_epoch": "1634913346.586626000", "display_filter": "frame.number == 6325", "udp_stream": 191 }, { "frame_number": 6326, "timestamp_epoch": "1634913346.593116000", "display_filter": "frame.number == 6326" } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a8a696a46b82dbd3ee0dc7d9", "type": "domain", "value": "prod.nexusrules.live.com.akadns.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913116.834876000", "last_seen_epoch": "1634915197.555154000", "evidence": [ { "frame_number": 1378, "timestamp_epoch": "1634913116.834876000", "display_filter": "frame.number == 1378", "udp_stream": 60 }, { "frame_number": 2562, "timestamp_epoch": "1634913176.519727000", "display_filter": "frame.number == 2562", "udp_stream": 112 }, { "frame_number": 3337, "timestamp_epoch": "1634913207.158388000", "display_filter": "frame.number == 3337", "udp_stream": 133 }, { "frame_number": 10817, "timestamp_epoch": "1634913479.015566000", "display_filter": "frame.number == 10817", "udp_stream": 226 }, { "frame_number": 30057, "timestamp_epoch": "1634915197.555154000", "display_filter": "frame.number == 30057", "udp_stream": 529 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4b0234d0d997c7867e6d6cc7", "type": "domain", "value": "pti.store.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913232.617476000", "last_seen_epoch": "1634913684.263513000", "evidence": [ { "frame_number": 4022, "timestamp_epoch": "1634913232.617476000", "display_filter": "frame.number == 4022", "udp_stream": 147 }, { "frame_number": 4026, "timestamp_epoch": "1634913232.720993000", "display_filter": "frame.number == 4026", "udp_stream": 147 }, { "frame_number": 5604, "timestamp_epoch": "1634913293.255230000", "display_filter": "frame.number == 5604", "udp_stream": 180 }, { "frame_number": 5605, "timestamp_epoch": "1634913293.357296000", "display_filter": "frame.number == 5605", "udp_stream": 180 }, { "frame_number": 11486, "timestamp_epoch": "1634913684.126102000", "display_filter": "frame.number == 11486", "udp_stream": 247 }, { "frame_number": 11488, "timestamp_epoch": "1634913684.191184000", "display_filter": "frame.number == 11488", "udp_stream": 247 }, { "frame_number": 4036, "timestamp_epoch": "1634913232.813293000", "display_filter": "frame.number == 4036", "tcp_stream": 180 }, { "frame_number": 5609, "timestamp_epoch": "1634913293.441652000", "display_filter": "frame.number == 5609", "tcp_stream": 231 }, { "frame_number": 11492, "timestamp_epoch": "1634913684.263513000", "display_filter": "frame.number == 11492", "tcp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-81946a45f56219908e61b723", "type": "domain", "value": "reddew28c.bazar", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913706.749970000", "last_seen_epoch": "1634914468.093909000", "evidence": [ { "frame_number": 11566, "timestamp_epoch": "1634913706.749970000", "display_filter": "frame.number == 11566", "udp_stream": 253 }, { "frame_number": 11567, "timestamp_epoch": "1634913706.923733000", "display_filter": "frame.number == 11567", "udp_stream": 253 }, { "frame_number": 19681, "timestamp_epoch": "1634914069.469918000", "display_filter": "frame.number == 19681", "udp_stream": 333 }, { "frame_number": 19683, "timestamp_epoch": "1634914069.970793000", "display_filter": "frame.number == 19683", "udp_stream": 334 }, { "frame_number": 19684, "timestamp_epoch": "1634914070.054483000", "display_filter": "frame.number == 19684", "udp_stream": 333 }, { "frame_number": 19685, "timestamp_epoch": "1634914070.054621000", "display_filter": "frame.number == 19685", "udp_stream": 333 }, { "frame_number": 19686, "timestamp_epoch": "1634914070.383727000", "display_filter": "frame.number == 19686", "udp_stream": 334 }, { "frame_number": 22458, "timestamp_epoch": "1634914228.426721000", "display_filter": "frame.number == 22458", "udp_stream": 354 }, { "frame_number": 22459, "timestamp_epoch": "1634914228.610736000", "display_filter": "frame.number == 22459", "udp_stream": 354 }, { "frame_number": 23255, "timestamp_epoch": "1634914467.941439000", "display_filter": "frame.number == 23255", "udp_stream": 404 }, { "frame_number": 23256, "timestamp_epoch": "1634914468.093909000", "display_filter": "frame.number == 23256", "udp_stream": 404 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-defc9942cc51cc5c56acbc85", "type": "domain", "value": "redinnovations.co.uk", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913673.874468000", "last_seen_epoch": "1634914288.741971000", "evidence": [ { "frame_number": 11443, "timestamp_epoch": "1634913673.874468000", "display_filter": "frame.number == 11443", "udp_stream": 246 }, { "frame_number": 11444, "timestamp_epoch": "1634913673.959987000", "display_filter": "frame.number == 11444", "udp_stream": 246 }, { "frame_number": 11445, "timestamp_epoch": "1634913674.048051000", "display_filter": "frame.number == 11445", "udp_stream": 246 }, { "frame_number": 11449, "timestamp_epoch": "1634913674.196253000", "display_filter": "frame.number == 11449", "tcp_stream": 280 }, { "frame_number": 17598, "timestamp_epoch": "1634913956.159803000", "display_filter": "frame.number == 17598", "tcp_stream": 375 }, { "frame_number": 17661, "timestamp_epoch": "1634913977.505485000", "display_filter": "frame.number == 17661", "tcp_stream": 381 }, { "frame_number": 20624, "timestamp_epoch": "1634914117.697808000", "display_filter": "frame.number == 20624", "tcp_stream": 421 }, { "frame_number": 20707, "timestamp_epoch": "1634914140.904772000", "display_filter": "frame.number == 20707", "tcp_stream": 430 }, { "frame_number": 22630, "timestamp_epoch": "1634914275.675437000", "display_filter": "frame.number == 22630", "tcp_stream": 468 }, { "frame_number": 22684, "timestamp_epoch": "1634914288.741971000", "display_filter": "frame.number == 22684", "tcp_stream": 473 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f5bec60b8e5de612655c79ec", "type": "domain", "value": "rum18.perf.linkedin.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.935915000", "last_seen_epoch": "1634913244.142343000", "evidence": [ { "frame_number": 4476, "timestamp_epoch": "1634913243.935915000", "display_filter": "frame.number == 4476", "udp_stream": 158 }, { "frame_number": 4540, "timestamp_epoch": "1634913244.024012000", "display_filter": "frame.number == 4540", "udp_stream": 158 }, { "frame_number": 4641, "timestamp_epoch": "1634913244.142343000", "display_filter": "frame.number == 4641", "tcp_stream": 206 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-43fdb63ae05e4b7bc812fcb0", "type": "domain", "value": "self.events.data.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913064.746770000", "last_seen_epoch": "1634913583.229531000", "evidence": [ { "frame_number": 715, "timestamp_epoch": "1634913064.746770000", "display_filter": "frame.number == 715", "udp_stream": 31 }, { "frame_number": 716, "timestamp_epoch": "1634913064.812497000", "display_filter": "frame.number == 716", "udp_stream": 31 }, { "frame_number": 1607, "timestamp_epoch": "1634913125.864468000", "display_filter": "frame.number == 1607", "udp_stream": 69 }, { "frame_number": 1608, "timestamp_epoch": "1634913125.914432000", "display_filter": "frame.number == 1608", "udp_stream": 69 }, { "frame_number": 2473, "timestamp_epoch": "1634913156.429653000", "display_filter": "frame.number == 2473", "udp_stream": 109 }, { "frame_number": 2479, "timestamp_epoch": "1634913157.440770000", "display_filter": "frame.number == 2479", "udp_stream": 109 }, { "frame_number": 2480, "timestamp_epoch": "1634913158.456958000", "display_filter": "frame.number == 2480", "udp_stream": 109 }, { "frame_number": 2483, "timestamp_epoch": "1634913160.471749000", "display_filter": "frame.number == 2483", "udp_stream": 109 }, { "frame_number": 2484, "timestamp_epoch": "1634913160.525696000", "display_filter": "frame.number == 2484", "udp_stream": 109 }, { "frame_number": 7267, "timestamp_epoch": "1634913422.794467000", "display_filter": "frame.number == 7267", "udp_stream": 217 }, { "frame_number": 7306, "timestamp_epoch": "1634913422.859470000", "display_filter": "frame.number == 7306", "udp_stream": 217 }, { "frame_number": 720, "timestamp_epoch": "1634913064.905067000", "display_filter": "frame.number == 720", "tcp_stream": 34 }, { "frame_number": 1612, "timestamp_epoch": "1634913126.000863000", "display_filter": "frame.number == 1612", "tcp_stream": 78 }, { "frame_number": 2488, "timestamp_epoch": "1634913160.604351000", "display_filter": "frame.number == 2488", "tcp_stream": 120 }, { "frame_number": 6710, "timestamp_epoch": "1634913385.195104000", "display_filter": "frame.number == 6710", "tcp_stream": 247 }, { "frame_number": 7321, "timestamp_epoch": "1634913422.955558000", "display_filter": "frame.number == 7321", "tcp_stream": 255 }, { "frame_number": 10716, "timestamp_epoch": "1634913445.874969000", "display_filter": "frame.number == 10716", "tcp_stream": 258 }, { "frame_number": 10785, "timestamp_epoch": "1634913476.914835000", "display_filter": "frame.number == 10785", "tcp_stream": 259 }, { "frame_number": 10971, "timestamp_epoch": "1634913583.175376000", "display_filter": "frame.number == 10971", "tcp_stream": 262 }, { "frame_number": 10975, "timestamp_epoch": "1634913583.229531000", "display_filter": "frame.number == 10975", "tcp_stream": 263 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-69a9b780dcd11705e36e5335", "type": "domain", "value": "settings-win.data.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913193.243570000", "last_seen_epoch": "1634917860.929501000", "evidence": [ { "frame_number": 3212, "timestamp_epoch": "1634913193.243570000", "display_filter": "frame.number == 3212", "udp_stream": 131 }, { "frame_number": 3213, "timestamp_epoch": "1634913193.335410000", "display_filter": "frame.number == 3213", "udp_stream": 131 }, { "frame_number": 3264, "timestamp_epoch": "1634913202.399124000", "display_filter": "frame.number == 3264", "udp_stream": 132 }, { "frame_number": 3265, "timestamp_epoch": "1634913202.399444000", "display_filter": "frame.number == 3265", "udp_stream": 132 }, { "frame_number": 3935, "timestamp_epoch": "1634913230.480309000", "display_filter": "frame.number == 3935", "udp_stream": 145 }, { "frame_number": 3936, "timestamp_epoch": "1634913230.480668000", "display_filter": "frame.number == 3936", "udp_stream": 145 }, { "frame_number": 5543, "timestamp_epoch": "1634913288.195693000", "display_filter": "frame.number == 5543", "udp_stream": 178 }, { "frame_number": 5546, "timestamp_epoch": "1634913288.266102000", "display_filter": "frame.number == 5546", "udp_stream": 178 }, { "frame_number": 6568, "timestamp_epoch": "1634913359.408177000", "display_filter": "frame.number == 6568", "udp_stream": 213 }, { "frame_number": 6569, "timestamp_epoch": "1634913359.481300000", "display_filter": "frame.number == 6569", "udp_stream": 213 }, { "frame_number": 56964, "timestamp_epoch": "1634915893.752985000", "display_filter": "frame.number == 56964", "udp_stream": 708 }, { "frame_number": 56965, "timestamp_epoch": "1634915893.803459000", "display_filter": "frame.number == 56965", "udp_stream": 708 }, { "frame_number": 56966, "timestamp_epoch": "1634915893.822917000", "display_filter": "frame.number == 56966", "udp_stream": 708 }, { "frame_number": 58021, "timestamp_epoch": "1634915989.434794000", "display_filter": "frame.number == 58021", "udp_stream": 720 }, { "frame_number": 58025, "timestamp_epoch": "1634915989.494389000", "display_filter": "frame.number == 58025", "udp_stream": 720 }, { "frame_number": 58026, "timestamp_epoch": "1634915989.502323000", "display_filter": "frame.number == 58026", "udp_stream": 720 }, { "frame_number": 58734, "timestamp_epoch": "1634916059.942415000", "display_filter": "frame.number == 58734", "udp_stream": 731 }, { "frame_number": 58735, "timestamp_epoch": "1634916060.014151000", "display_filter": "frame.number == 58735", "udp_stream": 731 }, { "frame_number": 67558, "timestamp_epoch": "1634916794.254198000", "display_filter": "frame.number == 67558", "udp_stream": 876 }, { "frame_number": 67559, "timestamp_epoch": "1634916794.307488000", "display_filter": "frame.number == 67559", "udp_stream": 876 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-167a74ef9c06ff082c7a0f11", "type": "domain", "value": "settingsfd-geo.trafficmanager.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913193.335410000", "last_seen_epoch": "1634917860.884313000", "evidence": [ { "frame_number": 3213, "timestamp_epoch": "1634913193.335410000", "display_filter": "frame.number == 3213", "udp_stream": 131 }, { "frame_number": 3265, "timestamp_epoch": "1634913202.399444000", "display_filter": "frame.number == 3265", "udp_stream": 132 }, { "frame_number": 3936, "timestamp_epoch": "1634913230.480668000", "display_filter": "frame.number == 3936", "udp_stream": 145 }, { "frame_number": 5546, "timestamp_epoch": "1634913288.266102000", "display_filter": "frame.number == 5546", "udp_stream": 178 }, { "frame_number": 6569, "timestamp_epoch": "1634913359.481300000", "display_filter": "frame.number == 6569", "udp_stream": 213 }, { "frame_number": 56966, "timestamp_epoch": "1634915893.822917000", "display_filter": "frame.number == 56966", "udp_stream": 708 }, { "frame_number": 58026, "timestamp_epoch": "1634915989.502323000", "display_filter": "frame.number == 58026", "udp_stream": 720 }, { "frame_number": 58735, "timestamp_epoch": "1634916060.014151000", "display_filter": "frame.number == 58735", "udp_stream": 731 }, { "frame_number": 67560, "timestamp_epoch": "1634916794.330090000", "display_filter": "frame.number == 67560", "udp_stream": 876 }, { "frame_number": 68024, "timestamp_epoch": "1634916889.922590000", "display_filter": "frame.number == 68024", "udp_stream": 888 }, { "frame_number": 68335, "timestamp_epoch": "1634916960.449014000", "display_filter": "frame.number == 68335", "udp_stream": 901 }, { "frame_number": 78238, "timestamp_epoch": "1634917860.884313000", "display_filter": "frame.number == 78238", "udp_stream": 1019 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-051a73da0ac7ae4587423134", "type": "domain", "value": "slickdeals.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918065.765731000", "last_seen_epoch": "1634918065.894205000", "evidence": [ { "frame_number": 80412, "timestamp_epoch": "1634918065.765731000", "display_filter": "frame.number == 80412", "udp_stream": 1032 }, { "frame_number": 80413, "timestamp_epoch": "1634918065.817559000", "display_filter": "frame.number == 80413", "udp_stream": 1032 }, { "frame_number": 80414, "timestamp_epoch": "1634918065.853495000", "display_filter": "frame.number == 80414", "udp_stream": 1032 }, { "frame_number": 80418, "timestamp_epoch": "1634918065.894205000", "display_filter": "frame.number == 80418", "tcp_stream": 1582 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2f17a2b23405f714a9a9f0aa", "type": "domain", "value": "smtp-com.netzero.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634917335.545942000", "last_seen_epoch": "1634917335.545942000", "evidence": [ { "frame_number": 71705, "timestamp_epoch": "1634917335.545942000", "display_filter": "frame.number == 71705", "udp_stream": 948 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3a69fd820bd6a75cf85b4ec4", "type": "domain", "value": "smtp-relay.gmail.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634915301.498808000", "last_seen_epoch": "1634916241.962512000", "evidence": [ { "frame_number": 43087, "timestamp_epoch": "1634915301.498808000", "display_filter": "frame.number == 43087", "udp_stream": 552 }, { "frame_number": 43088, "timestamp_epoch": "1634915301.521808000", "display_filter": "frame.number == 43088", "udp_stream": 552 }, { "frame_number": 43089, "timestamp_epoch": "1634915301.536026000", "display_filter": "frame.number == 43089", "udp_stream": 552 }, { "frame_number": 60829, "timestamp_epoch": "1634916241.823013000", "display_filter": "frame.number == 60829", "udp_stream": 770 }, { "frame_number": 60831, "timestamp_epoch": "1634916241.891322000", "display_filter": "frame.number == 60831", "udp_stream": 770 }, { "frame_number": 60832, "timestamp_epoch": "1634916241.962512000", "display_filter": "frame.number == 60832", "udp_stream": 770 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-00733587838cfd9dca03dcfd", "type": "domain", "value": "smtp.forpsi.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918395.715644000", "last_seen_epoch": "1634918397.458205000", "evidence": [ { "frame_number": 82776, "timestamp_epoch": "1634918395.715644000", "display_filter": "frame.number == 82776", "udp_stream": 1059 }, { "frame_number": 82778, "timestamp_epoch": "1634918395.808157000", "display_filter": "frame.number == 82778", "udp_stream": 1059 }, { "frame_number": 82781, "timestamp_epoch": "1634918396.035657000", "display_filter": "frame.number == 82781", "udp_stream": 1059 }, { "frame_number": 82816, "timestamp_epoch": "1634918397.458205000", "display_filter": "frame.number == 82816", "tcp_stream": 1627 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f18a2cc65f3c51de27bb2277", "type": "domain", "value": "smtp.juno.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917209.631693000", "last_seen_epoch": "1634918522.646651000", "evidence": [ { "frame_number": 69885, "timestamp_epoch": "1634917209.631693000", "display_filter": "frame.number == 69885", "udp_stream": 935 }, { "frame_number": 69886, "timestamp_epoch": "1634917209.673251000", "display_filter": "frame.number == 69886", "udp_stream": 935 }, { "frame_number": 83957, "timestamp_epoch": "1634918522.601973000", "display_filter": "frame.number == 83957", "udp_stream": 1075 }, { "frame_number": 83958, "timestamp_epoch": "1634918522.646651000", "display_filter": "frame.number == 83958", "udp_stream": 1075 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b79f3ef90b485ab3ca993d06", "type": "domain", "value": "smtp.medicinafutura.it", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917034.798675000", "last_seen_epoch": "1634917036.631625000", "evidence": [ { "frame_number": 68711, "timestamp_epoch": "1634917034.798675000", "display_filter": "frame.number == 68711", "udp_stream": 913 }, { "frame_number": 68713, "timestamp_epoch": "1634917034.875900000", "display_filter": "frame.number == 68713", "udp_stream": 913 }, { "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "display_filter": "frame.number == 68714", "udp_stream": 913 }, { "frame_number": 68741, "timestamp_epoch": "1634917036.631625000", "display_filter": "frame.number == 68741", "tcp_stream": 1415 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-400c7e5a8e8cc3447ceab981", "type": "domain", "value": "smtp.netzero.com", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634917335.483162000", "last_seen_epoch": "1634917335.545942000", "evidence": [ { "frame_number": 71703, "timestamp_epoch": "1634917335.483162000", "display_filter": "frame.number == 71703", "udp_stream": 948 }, { "frame_number": 71705, "timestamp_epoch": "1634917335.545942000", "display_filter": "frame.number == 71705", "udp_stream": 948 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e65788ef00cebcdc9b470608", "type": "domain", "value": "smtp.outlook.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915427.246847000", "last_seen_epoch": "1634918588.125004000", "evidence": [ { "frame_number": 46988, "timestamp_epoch": "1634915427.246847000", "display_filter": "frame.number == 46988", "udp_stream": 617 }, { "frame_number": 46989, "timestamp_epoch": "1634915427.274688000", "display_filter": "frame.number == 46989", "udp_stream": 617 }, { "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "display_filter": "frame.number == 46993", "udp_stream": 617 }, { "frame_number": 54595, "timestamp_epoch": "1634915655.861428000", "display_filter": "frame.number == 54595", "udp_stream": 678 }, { "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "display_filter": "frame.number == 54596", "udp_stream": 678 }, { "frame_number": 54921, "timestamp_epoch": "1634915685.499305000", "display_filter": "frame.number == 54921", "udp_stream": 679 }, { "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "display_filter": "frame.number == 54922", "udp_stream": 679 }, { "frame_number": 55547, "timestamp_epoch": "1634915744.549818000", "display_filter": "frame.number == 55547", "udp_stream": 685 }, { "frame_number": 55549, "timestamp_epoch": "1634915744.596180000", "display_filter": "frame.number == 55549", "udp_stream": 685 }, { "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "display_filter": "frame.number == 55550", "udp_stream": 685 }, { "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "display_filter": "frame.number == 55551", "udp_stream": 685 }, { "frame_number": 57799, "timestamp_epoch": "1634915971.437623000", "display_filter": "frame.number == 57799", "udp_stream": 715 }, { "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "display_filter": "frame.number == 57800", "udp_stream": 715 }, { "frame_number": 58328, "timestamp_epoch": "1634916015.113510000", "display_filter": "frame.number == 58328", "udp_stream": 725 }, { "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "display_filter": "frame.number == 58329", "udp_stream": 725 }, { "frame_number": 59768, "timestamp_epoch": "1634916147.493073000", "display_filter": "frame.number == 59768", "udp_stream": 753 }, { "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "display_filter": "frame.number == 59769", "udp_stream": 753 }, { "frame_number": 61640, "timestamp_epoch": "1634916328.820489000", "display_filter": "frame.number == 61640", "udp_stream": 782 }, { "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "display_filter": "frame.number == 61641", "udp_stream": 782 }, { "frame_number": 64576, "timestamp_epoch": "1634916472.805230000", "display_filter": "frame.number == 64576", "udp_stream": 824 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1898083fbf65861e4ad8f0e4", "type": "domain", "value": "smtp.sina.com.cn", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915355.155639000", "last_seen_epoch": "1634917338.086046000", "evidence": [ { "frame_number": 44922, "timestamp_epoch": "1634915355.155639000", "display_filter": "frame.number == 44922", "udp_stream": 567 }, { "frame_number": 44923, "timestamp_epoch": "1634915355.180491000", "display_filter": "frame.number == 44923", "udp_stream": 567 }, { "frame_number": 44926, "timestamp_epoch": "1634915355.503845000", "display_filter": "frame.number == 44926", "udp_stream": 567 }, { "frame_number": 65854, "timestamp_epoch": "1634916671.267416000", "display_filter": "frame.number == 65854", "udp_stream": 839 }, { "frame_number": 65856, "timestamp_epoch": "1634916671.334009000", "display_filter": "frame.number == 65856", "udp_stream": 839 }, { "frame_number": 65857, "timestamp_epoch": "1634916671.628154000", "display_filter": "frame.number == 65857", "udp_stream": 839 }, { "frame_number": 68999, "timestamp_epoch": "1634917081.268640000", "display_filter": "frame.number == 68999", "udp_stream": 921 }, { "frame_number": 69001, "timestamp_epoch": "1634917081.345981000", "display_filter": "frame.number == 69001", "udp_stream": 921 }, { "frame_number": 69004, "timestamp_epoch": "1634917081.519715000", "display_filter": "frame.number == 69004", "udp_stream": 921 }, { "frame_number": 70267, "timestamp_epoch": "1634917226.948965000", "display_filter": "frame.number == 70267", "udp_stream": 939 }, { "frame_number": 70270, "timestamp_epoch": "1634917227.053063000", "display_filter": "frame.number == 70270", "udp_stream": 939 }, { "frame_number": 70275, "timestamp_epoch": "1634917228.053388000", "display_filter": "frame.number == 70275", "udp_stream": 939 }, { "frame_number": 70276, "timestamp_epoch": "1634917228.307217000", "display_filter": "frame.number == 70276", "udp_stream": 939 }, { "frame_number": 71101, "timestamp_epoch": "1634917286.960839000", "display_filter": "frame.number == 71101", "udp_stream": 941 }, { "frame_number": 71102, "timestamp_epoch": "1634917286.961286000", "display_filter": "frame.number == 71102", "udp_stream": 941 }, { "frame_number": 71386, "timestamp_epoch": "1634917311.024440000", "display_filter": "frame.number == 71386", "udp_stream": 943 }, { "frame_number": 71388, "timestamp_epoch": "1634917311.131492000", "display_filter": "frame.number == 71388", "udp_stream": 943 }, { "frame_number": 71389, "timestamp_epoch": "1634917311.330942000", "display_filter": "frame.number == 71389", "udp_stream": 943 }, { "frame_number": 45166, "timestamp_epoch": "1634915360.499781000", "display_filter": "frame.number == 45166", "tcp_stream": 854 }, { "frame_number": 45519, "timestamp_epoch": "1634915376.311344000", "display_filter": "frame.number == 45519", "tcp_stream": 868 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0281f8a03e062bfa10833fe1", "type": "domain", "value": "smtp.suddenlink.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918076.913428000", "last_seen_epoch": "1634918199.637923000", "evidence": [ { "frame_number": 80686, "timestamp_epoch": "1634918076.913428000", "display_filter": "frame.number == 80686", "udp_stream": 1038 }, { "frame_number": 80688, "timestamp_epoch": "1634918076.969050000", "display_filter": "frame.number == 80688", "udp_stream": 1038 }, { "frame_number": 80713, "timestamp_epoch": "1634918078.196260000", "display_filter": "frame.number == 80713", "tcp_stream": 1590 }, { "frame_number": 81279, "timestamp_epoch": "1634918199.637923000", "display_filter": "frame.number == 81279", "tcp_stream": 1610 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5bf5362c671cf285851a2510", "type": "domain", "value": "smtp.ulpianocarrasco.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917189.939416000", "last_seen_epoch": "1634917192.469545000", "evidence": [ { "frame_number": 69723, "timestamp_epoch": "1634917189.939416000", "display_filter": "frame.number == 69723", "udp_stream": 933 }, { "frame_number": 69725, "timestamp_epoch": "1634917190.021095000", "display_filter": "frame.number == 69725", "udp_stream": 933 }, { "frame_number": 69726, "timestamp_epoch": "1634917190.196662000", "display_filter": "frame.number == 69726", "udp_stream": 933 }, { "frame_number": 69771, "timestamp_epoch": "1634917192.469545000", "display_filter": "frame.number == 69771", "tcp_stream": 1453 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ef2c7d4cfd813e6c7b043a40", "type": "domain", "value": "smtp.unisanraffaele.gov.it", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917225.073589000", "last_seen_epoch": "1634917228.308356000", "evidence": [ { "frame_number": 70189, "timestamp_epoch": "1634917225.073589000", "display_filter": "frame.number == 70189", "udp_stream": 938 }, { "frame_number": 70192, "timestamp_epoch": "1634917225.162487000", "display_filter": "frame.number == 70192", "udp_stream": 938 }, { "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "display_filter": "frame.number == 70193", "udp_stream": 938 }, { "frame_number": 70278, "timestamp_epoch": "1634917228.308356000", "display_filter": "frame.number == 70278", "tcp_stream": 1458 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c01dfd976add303ce7b96917", "type": "domain", "value": "smtp.vox.co.za", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634916698.150802000", "last_seen_epoch": "1634916698.559572000", "evidence": [ { "frame_number": 66172, "timestamp_epoch": "1634916698.150802000", "display_filter": "frame.number == 66172", "udp_stream": 843 }, { "frame_number": 66174, "timestamp_epoch": "1634916698.226095000", "display_filter": "frame.number == 66174", "udp_stream": 843 }, { "frame_number": 66176, "timestamp_epoch": "1634916698.559572000", "display_filter": "frame.number == 66176", "udp_stream": 843 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-46f2679230c4473ea2270a1b", "type": "domain", "value": "smtpa.forpsi.com", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634918396.035657000", "last_seen_epoch": "1634918396.035657000", "evidence": [ { "frame_number": 82781, "timestamp_epoch": "1634918396.035657000", "display_filter": "frame.number == 82781", "udp_stream": 1059 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7fd2de74ede24bd63e9575df", "type": "domain", "value": "sobolpand.top", "roles": [ "dns-query", "http-host" ], "is_private": null, "first_seen_epoch": "1634913395.513700000", "last_seen_epoch": "1634913397.426689000", "evidence": [ { "frame_number": 6746, "timestamp_epoch": "1634913395.513700000", "display_filter": "frame.number == 6746", "udp_stream": 215 }, { "frame_number": 6747, "timestamp_epoch": "1634913395.641241000", "display_filter": "frame.number == 6747", "udp_stream": 215 }, { "frame_number": 6751, "timestamp_epoch": "1634913395.707500000", "display_filter": "frame.number == 6751", "tcp_stream": 248 }, { "frame_number": 6756, "timestamp_epoch": "1634913397.426689000", "display_filter": "frame.number == 6756", "tcp_stream": 248 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-bf339e84bde5d7756c8151e1", "type": "domain", "value": "spo-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913243.996774000", "last_seen_epoch": "1634913244.147981000", "evidence": [ { "frame_number": 4504, "timestamp_epoch": "1634913243.996774000", "display_filter": "frame.number == 4504", "udp_stream": 160 }, { "frame_number": 4588, "timestamp_epoch": "1634913244.070161000", "display_filter": "frame.number == 4588", "udp_stream": 160 }, { "frame_number": 4645, "timestamp_epoch": "1634913244.147981000", "display_filter": "frame.number == 4645", "tcp_stream": 205 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a7d1af8609f5a57fb4c8e0fd", "type": "domain", "value": "ssl0.ovh.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634917109.702372000", "last_seen_epoch": "1634917769.838468000", "evidence": [ { "frame_number": 69209, "timestamp_epoch": "1634917109.702372000", "display_filter": "frame.number == 69209", "udp_stream": 925 }, { "frame_number": 77128, "timestamp_epoch": "1634917769.838468000", "display_filter": "frame.number == 77128", "udp_stream": 1016 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8db0be7020b2446ec01db360", "type": "domain", "value": "storeedgefd.dsx.mp.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913224.579385000", "last_seen_epoch": "1634913273.718043000", "evidence": [ { "frame_number": 3877, "timestamp_epoch": "1634913224.579385000", "display_filter": "frame.number == 3877", "udp_stream": 144 }, { "frame_number": 3879, "timestamp_epoch": "1634913224.789705000", "display_filter": "frame.number == 3879", "udp_stream": 144 }, { "frame_number": 5246, "timestamp_epoch": "1634913264.245413000", "display_filter": "frame.number == 5246", "udp_stream": 172 }, { "frame_number": 5251, "timestamp_epoch": "1634913264.335970000", "display_filter": "frame.number == 5251", "udp_stream": 172 }, { "frame_number": 5375, "timestamp_epoch": "1634913273.648231000", "display_filter": "frame.number == 5375", "udp_stream": 175 }, { "frame_number": 5376, "timestamp_epoch": "1634913273.648646000", "display_filter": "frame.number == 5376", "udp_stream": 175 }, { "frame_number": 3884, "timestamp_epoch": "1634913224.865279000", "display_filter": "frame.number == 3884", "tcp_stream": 174 }, { "frame_number": 5255, "timestamp_epoch": "1634913264.433424000", "display_filter": "frame.number == 5255", "tcp_stream": 221 }, { "frame_number": 5380, "timestamp_epoch": "1634913273.718043000", "display_filter": "frame.number == 5380", "tcp_stream": 226 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-57d22bbf9522add3009f1667", "type": "domain", "value": "t-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913244.053159000", "last_seen_epoch": "1634913244.310009000", "evidence": [ { "frame_number": 4560, "timestamp_epoch": "1634913244.053159000", "display_filter": "frame.number == 4560", "udp_stream": 162 }, { "frame_number": 4632, "timestamp_epoch": "1634913244.111711000", "display_filter": "frame.number == 4632", "udp_stream": 162 }, { "frame_number": 4747, "timestamp_epoch": "1634913244.310009000", "display_filter": "frame.number == 4747", "tcp_stream": 208 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-155262ff7f935685c7567b8d", "type": "domain", "value": "tackleadvisors.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913575.883637000", "last_seen_epoch": "1634914370.838600000", "evidence": [ { "frame_number": 10931, "timestamp_epoch": "1634913575.883637000", "display_filter": "frame.number == 10931", "udp_stream": 231 }, { "frame_number": 10932, "timestamp_epoch": "1634913576.014453000", "display_filter": "frame.number == 10932", "udp_stream": 231 }, { "frame_number": 10937, "timestamp_epoch": "1634913576.100868000", "display_filter": "frame.number == 10937", "tcp_stream": 261 }, { "frame_number": 17726, "timestamp_epoch": "1634913991.945984000", "display_filter": "frame.number == 17726", "tcp_stream": 387 }, { "frame_number": 17847, "timestamp_epoch": "1634914016.025401000", "display_filter": "frame.number == 17847", "tcp_stream": 394 }, { "frame_number": 20751, "timestamp_epoch": "1634914158.803667000", "display_filter": "frame.number == 20751", "tcp_stream": 434 }, { "frame_number": 21678, "timestamp_epoch": "1634914174.741243000", "display_filter": "frame.number == 21678", "tcp_stream": 438 }, { "frame_number": 22784, "timestamp_epoch": "1634914321.479209000", "display_filter": "frame.number == 22784", "tcp_stream": 483 }, { "frame_number": 22968, "timestamp_epoch": "1634914370.838600000", "display_filter": "frame.number == 22968", "tcp_stream": 507 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-59c011ac7a42d4530372c5ed", "type": "domain", "value": "teams-ring.msedge.net", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913189.885516000", "last_seen_epoch": "1634913244.150529000", "evidence": [ { "frame_number": 2948, "timestamp_epoch": "1634913189.885516000", "display_filter": "frame.number == 2948", "udp_stream": 122 }, { "frame_number": 2964, "timestamp_epoch": "1634913189.936660000", "display_filter": "frame.number == 2964", "udp_stream": 122 }, { "frame_number": 4567, "timestamp_epoch": "1634913244.055601000", "display_filter": "frame.number == 4567", "udp_stream": 163 }, { "frame_number": 4568, "timestamp_epoch": "1634913244.055822000", "display_filter": "frame.number == 4568", "udp_stream": 163 }, { "frame_number": 2990, "timestamp_epoch": "1634913190.063908000", "display_filter": "frame.number == 2990", "tcp_stream": 140 }, { "frame_number": 4649, "timestamp_epoch": "1634913244.150529000", "display_filter": "frame.number == 4649", "tcp_stream": 204 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5400d58851c01cb529a9eecb", "type": "domain", "value": "track.cj.akadns.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634918066.250031000", "last_seen_epoch": "1634918066.882943000", "evidence": [ { "frame_number": 80439, "timestamp_epoch": "1634918066.250031000", "display_filter": "frame.number == 80439", "udp_stream": 1033 }, { "frame_number": 80451, "timestamp_epoch": "1634918066.495120000", "display_filter": "frame.number == 80451", "udp_stream": 1034 }, { "frame_number": 80481, "timestamp_epoch": "1634918066.882943000", "display_filter": "frame.number == 80481", "udp_stream": 1035 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c7d1b09465a009c3038c9930", "type": "domain", "value": "ultimatecuisinecatering.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915711.706754000", "last_seen_epoch": "1634917637.565627000", "evidence": [ { "frame_number": 55207, "timestamp_epoch": "1634915711.706754000", "display_filter": "frame.number == 55207", "udp_stream": 682 }, { "frame_number": 55211, "timestamp_epoch": "1634915711.752283000", "display_filter": "frame.number == 55211", "udp_stream": 682 }, { "frame_number": 55212, "timestamp_epoch": "1634915711.820815000", "display_filter": "frame.number == 55212", "udp_stream": 682 }, { "frame_number": 76488, "timestamp_epoch": "1634917635.125626000", "display_filter": "frame.number == 76488", "udp_stream": 1002 }, { "frame_number": 76490, "timestamp_epoch": "1634917635.219208000", "display_filter": "frame.number == 76490", "udp_stream": 1002 }, { "frame_number": 76497, "timestamp_epoch": "1634917636.219298000", "display_filter": "frame.number == 76497", "udp_stream": 1002 }, { "frame_number": 76498, "timestamp_epoch": "1634917636.367594000", "display_filter": "frame.number == 76498", "udp_stream": 1002 }, { "frame_number": 55243, "timestamp_epoch": "1634915713.508518000", "display_filter": "frame.number == 55243", "tcp_stream": 997 }, { "frame_number": 55344, "timestamp_epoch": "1634915718.294098000", "display_filter": "frame.number == 55344", "tcp_stream": 1000 }, { "frame_number": 76525, "timestamp_epoch": "1634917637.565627000", "display_filter": "frame.number == 76525", "tcp_stream": 1538 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1700e86414ca3ef5cb46f36a", "type": "domain", "value": "umwatson.events.data.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917472.377018000", "last_seen_epoch": "1634917491.711113000", "evidence": [ { "frame_number": 74686, "timestamp_epoch": "1634917472.377018000", "display_filter": "frame.number == 74686", "udp_stream": 966 }, { "frame_number": 74687, "timestamp_epoch": "1634917472.439528000", "display_filter": "frame.number == 74687", "udp_stream": 966 }, { "frame_number": 74991, "timestamp_epoch": "1634917491.530973000", "display_filter": "frame.number == 74991", "udp_stream": 973 }, { "frame_number": 74992, "timestamp_epoch": "1634917491.611280000", "display_filter": "frame.number == 74992", "udp_stream": 973 }, { "frame_number": 74691, "timestamp_epoch": "1634917472.533719000", "display_filter": "frame.number == 74691", "tcp_stream": 1487 }, { "frame_number": 74996, "timestamp_epoch": "1634917491.711113000", "display_filter": "frame.number == 74996", "tcp_stream": 1494 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7ea540197e1cda8b5edfea5b", "type": "domain", "value": "v10.events.data.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913184.576256000", "last_seen_epoch": "1634917649.173315000", "evidence": [ { "frame_number": 2635, "timestamp_epoch": "1634913184.576256000", "display_filter": "frame.number == 2635", "udp_stream": 115 }, { "frame_number": 2697, "timestamp_epoch": "1634913184.621165000", "display_filter": "frame.number == 2697", "udp_stream": 115 }, { "frame_number": 3942, "timestamp_epoch": "1634913230.588490000", "display_filter": "frame.number == 3942", "udp_stream": 146 }, { "frame_number": 3943, "timestamp_epoch": "1634913230.665301000", "display_filter": "frame.number == 3943", "udp_stream": 146 }, { "frame_number": 6667, "timestamp_epoch": "1634913382.644738000", "display_filter": "frame.number == 6667", "udp_stream": 214 }, { "frame_number": 6668, "timestamp_epoch": "1634913382.690456000", "display_filter": "frame.number == 6668", "udp_stream": 214 }, { "frame_number": 11175, "timestamp_epoch": "1634913661.990984000", "display_filter": "frame.number == 11175", "udp_stream": 238 }, { "frame_number": 11176, "timestamp_epoch": "1634913662.072508000", "display_filter": "frame.number == 11176", "udp_stream": 238 }, { "frame_number": 11316, "timestamp_epoch": "1634913665.708126000", "display_filter": "frame.number == 11316", "udp_stream": 241 }, { "frame_number": 11317, "timestamp_epoch": "1634913665.767347000", "display_filter": "frame.number == 11317", "udp_stream": 241 }, { "frame_number": 11408, "timestamp_epoch": "1634913670.960744000", "display_filter": "frame.number == 11408", "udp_stream": 243 }, { "frame_number": 11409, "timestamp_epoch": "1634913671.018396000", "display_filter": "frame.number == 11409", "udp_stream": 243 }, { "frame_number": 11627, "timestamp_epoch": "1634913722.814683000", "display_filter": "frame.number == 11627", "udp_stream": 260 }, { "frame_number": 11628, "timestamp_epoch": "1634913722.853539000", "display_filter": "frame.number == 11628", "udp_stream": 260 }, { "frame_number": 11884, "timestamp_epoch": "1634913727.898658000", "display_filter": "frame.number == 11884", "udp_stream": 263 }, { "frame_number": 11900, "timestamp_epoch": "1634913727.982022000", "display_filter": "frame.number == 11900", "udp_stream": 263 }, { "frame_number": 11911, "timestamp_epoch": "1634913728.998529000", "display_filter": "frame.number == 11911", "udp_stream": 263 }, { "frame_number": 11983, "timestamp_epoch": "1634913730.998121000", "display_filter": "frame.number == 11983", "udp_stream": 263 }, { "frame_number": 12075, "timestamp_epoch": "1634913732.334475000", "display_filter": "frame.number == 12075", "udp_stream": 263 }, { "frame_number": 13364, "timestamp_epoch": "1634913754.184769000", "display_filter": "frame.number == 13364", "udp_stream": 272 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-242486d740dba48168f89488", "type": "domain", "value": "v20.events.data.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913186.043325000", "last_seen_epoch": "1634913240.693665000", "evidence": [ { "frame_number": 2848, "timestamp_epoch": "1634913186.043325000", "display_filter": "frame.number == 2848", "udp_stream": 117 }, { "frame_number": 2849, "timestamp_epoch": "1634913186.043617000", "display_filter": "frame.number == 2849", "udp_stream": 117 }, { "frame_number": 3597, "timestamp_epoch": "1634913212.872362000", "display_filter": "frame.number == 3597", "udp_stream": 136 }, { "frame_number": 3598, "timestamp_epoch": "1634913212.913933000", "display_filter": "frame.number == 3598", "udp_stream": 136 }, { "frame_number": 4355, "timestamp_epoch": "1634913240.431527000", "display_filter": "frame.number == 4355", "udp_stream": 150 }, { "frame_number": 4359, "timestamp_epoch": "1634913240.500255000", "display_filter": "frame.number == 4359", "udp_stream": 150 }, { "frame_number": 2855, "timestamp_epoch": "1634913186.156521000", "display_filter": "frame.number == 2855", "tcp_stream": 135 }, { "frame_number": 3604, "timestamp_epoch": "1634913213.031340000", "display_filter": "frame.number == 3604", "tcp_stream": 166 }, { "frame_number": 4368, "timestamp_epoch": "1634913240.693665000", "display_filter": "frame.number == 4368", "tcp_stream": 196 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ae5f3555bf16f32c75d4537a", "type": "domain", "value": "vchbbq.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916150.714325000", "last_seen_epoch": "1634916157.194803000", "evidence": [ { "frame_number": 59873, "timestamp_epoch": "1634916150.714325000", "display_filter": "frame.number == 59873", "udp_stream": 756 }, { "frame_number": 59875, "timestamp_epoch": "1634916150.780878000", "display_filter": "frame.number == 59875", "udp_stream": 756 }, { "frame_number": 59876, "timestamp_epoch": "1634916150.782954000", "display_filter": "frame.number == 59876", "udp_stream": 756 }, { "frame_number": 60000, "timestamp_epoch": "1634916157.194803000", "display_filter": "frame.number == 60000", "tcp_stream": 1152 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f62807983a04720be1112655", "type": "domain", "value": "vmail.dial-up.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634916530.966581000", "last_seen_epoch": "1634918459.527553000", "evidence": [ { "frame_number": 65028, "timestamp_epoch": "1634916530.966581000", "display_filter": "frame.number == 65028", "udp_stream": 827 }, { "frame_number": 83363, "timestamp_epoch": "1634918459.527553000", "display_filter": "frame.number == 83363", "udp_stream": 1066 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2e4ed87ec141aa3f92192fc3", "type": "domain", "value": "w00d8b4e.kasserver.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916559.022681000", "last_seen_epoch": "1634916561.312986000", "evidence": [ { "frame_number": 65253, "timestamp_epoch": "1634916559.022681000", "display_filter": "frame.number == 65253", "udp_stream": 829 }, { "frame_number": 65255, "timestamp_epoch": "1634916559.101233000", "display_filter": "frame.number == 65255", "udp_stream": 829 }, { "frame_number": 65256, "timestamp_epoch": "1634916559.204440000", "display_filter": "frame.number == 65256", "udp_stream": 829 }, { "frame_number": 65302, "timestamp_epoch": "1634916561.312986000", "display_filter": "frame.number == 65302", "tcp_stream": 1280 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-644da4deb5e924f6fb38d8ee", "type": "domain", "value": "whitestorm9p.bazar", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913707.091618000", "last_seen_epoch": "1634914468.391909000", "evidence": [ { "frame_number": 11570, "timestamp_epoch": "1634913707.091618000", "display_filter": "frame.number == 11570", "udp_stream": 255 }, { "frame_number": 11571, "timestamp_epoch": "1634913707.255910000", "display_filter": "frame.number == 11571", "udp_stream": 255 }, { "frame_number": 19689, "timestamp_epoch": "1634914070.642877000", "display_filter": "frame.number == 19689", "udp_stream": 336 }, { "frame_number": 19690, "timestamp_epoch": "1634914070.897720000", "display_filter": "frame.number == 19690", "udp_stream": 336 }, { "frame_number": 22462, "timestamp_epoch": "1634914228.798254000", "display_filter": "frame.number == 22462", "udp_stream": 356 }, { "frame_number": 22463, "timestamp_epoch": "1634914228.968942000", "display_filter": "frame.number == 22463", "udp_stream": 356 }, { "frame_number": 23259, "timestamp_epoch": "1634914468.247672000", "display_filter": "frame.number == 23259", "udp_stream": 406 }, { "frame_number": 23260, "timestamp_epoch": "1634914468.391909000", "display_filter": "frame.number == 23260", "udp_stream": 406 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2233696bd6749acbce28278d", "type": "domain", "value": "wns.notify.trafficmanager.net", "roles": [ "dns-cname" ], "is_private": null, "first_seen_epoch": "1634913186.072160000", "last_seen_epoch": "1634913240.483552000", "evidence": [ { "frame_number": 2851, "timestamp_epoch": "1634913186.072160000", "display_filter": "frame.number == 2851", "udp_stream": 116 }, { "frame_number": 3576, "timestamp_epoch": "1634913212.561085000", "display_filter": "frame.number == 3576", "udp_stream": 135 }, { "frame_number": 4357, "timestamp_epoch": "1634913240.483552000", "display_filter": "frame.number == 4357", "udp_stream": 151 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e2287348b4cbaecfba825228", "type": "domain", "value": "wpad.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913053.598967000", "last_seen_epoch": "1634918549.277947000", "evidence": [ { "frame_number": 38, "timestamp_epoch": "1634913053.598967000", "display_filter": "frame.number == 38", "udp_stream": 10 }, { "frame_number": 39, "timestamp_epoch": "1634913053.599183000", "display_filter": "frame.number == 39", "udp_stream": 10 }, { "frame_number": 751, "timestamp_epoch": "1634913070.790528000", "display_filter": "frame.number == 751", "udp_stream": 32 }, { "frame_number": 752, "timestamp_epoch": "1634913070.790860000", "display_filter": "frame.number == 752", "udp_stream": 32 }, { "frame_number": 824, "timestamp_epoch": "1634913113.850284000", "display_filter": "frame.number == 824", "udp_stream": 43 }, { "frame_number": 825, "timestamp_epoch": "1634913113.850586000", "display_filter": "frame.number == 825", "udp_stream": 43 }, { "frame_number": 1638, "timestamp_epoch": "1634913129.895705000", "display_filter": "frame.number == 1638", "udp_stream": 70 }, { "frame_number": 1639, "timestamp_epoch": "1634913129.896164000", "display_filter": "frame.number == 1639", "udp_stream": 70 }, { "frame_number": 1642, "timestamp_epoch": "1634913130.805014000", "display_filter": "frame.number == 1642", "udp_stream": 72 }, { "frame_number": 1643, "timestamp_epoch": "1634913130.805321000", "display_filter": "frame.number == 1643", "udp_stream": 72 }, { "frame_number": 1718, "timestamp_epoch": "1634913144.722170000", "display_filter": "frame.number == 1718", "udp_stream": 83 }, { "frame_number": 1719, "timestamp_epoch": "1634913144.722420000", "display_filter": "frame.number == 1719", "udp_stream": 83 }, { "frame_number": 2521, "timestamp_epoch": "1634913161.020398000", "display_filter": "frame.number == 2521", "udp_stream": 110 }, { "frame_number": 2522, "timestamp_epoch": "1634913161.020747000", "display_filter": "frame.number == 2522", "udp_stream": 110 }, { "frame_number": 2953, "timestamp_epoch": "1634913189.897161000", "display_filter": "frame.number == 2953", "udp_stream": 123 }, { "frame_number": 2954, "timestamp_epoch": "1634913189.897467000", "display_filter": "frame.number == 2954", "udp_stream": 123 }, { "frame_number": 3812, "timestamp_epoch": "1634913221.034974000", "display_filter": "frame.number == 3812", "udp_stream": 142 }, { "frame_number": 3813, "timestamp_epoch": "1634913221.035309000", "display_filter": "frame.number == 3813", "udp_stream": 142 }, { "frame_number": 6216, "timestamp_epoch": "1634913345.771037000", "display_filter": "frame.number == 6216", "udp_stream": 185 }, { "frame_number": 6217, "timestamp_epoch": "1634913345.771390000", "display_filter": "frame.number == 6217", "udp_stream": 185 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-154db2293f44b183d6807ad4", "type": "domain", "value": "wpad.localdomain", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913053.600065000", "last_seen_epoch": "1634918549.278737000", "evidence": [ { "frame_number": 40, "timestamp_epoch": "1634913053.600065000", "display_filter": "frame.number == 40", "udp_stream": 11 }, { "frame_number": 41, "timestamp_epoch": "1634913053.600187000", "display_filter": "frame.number == 41", "udp_stream": 11 }, { "frame_number": 753, "timestamp_epoch": "1634913070.791341000", "display_filter": "frame.number == 753", "udp_stream": 33 }, { "frame_number": 754, "timestamp_epoch": "1634913070.791562000", "display_filter": "frame.number == 754", "udp_stream": 33 }, { "frame_number": 826, "timestamp_epoch": "1634913113.850879000", "display_filter": "frame.number == 826", "udp_stream": 44 }, { "frame_number": 827, "timestamp_epoch": "1634913113.851046000", "display_filter": "frame.number == 827", "udp_stream": 44 }, { "frame_number": 1640, "timestamp_epoch": "1634913129.896748000", "display_filter": "frame.number == 1640", "udp_stream": 71 }, { "frame_number": 1641, "timestamp_epoch": "1634913129.896996000", "display_filter": "frame.number == 1641", "udp_stream": 71 }, { "frame_number": 1644, "timestamp_epoch": "1634913130.805721000", "display_filter": "frame.number == 1644", "udp_stream": 73 }, { "frame_number": 1645, "timestamp_epoch": "1634913130.805902000", "display_filter": "frame.number == 1645", "udp_stream": 73 }, { "frame_number": 1720, "timestamp_epoch": "1634913144.722619000", "display_filter": "frame.number == 1720", "udp_stream": 84 }, { "frame_number": 1721, "timestamp_epoch": "1634913144.722778000", "display_filter": "frame.number == 1721", "udp_stream": 84 }, { "frame_number": 2523, "timestamp_epoch": "1634913161.021205000", "display_filter": "frame.number == 2523", "udp_stream": 111 }, { "frame_number": 2524, "timestamp_epoch": "1634913161.021420000", "display_filter": "frame.number == 2524", "udp_stream": 111 }, { "frame_number": 2955, "timestamp_epoch": "1634913189.898070000", "display_filter": "frame.number == 2955", "udp_stream": 124 }, { "frame_number": 2956, "timestamp_epoch": "1634913189.898363000", "display_filter": "frame.number == 2956", "udp_stream": 124 }, { "frame_number": 3814, "timestamp_epoch": "1634913221.035679000", "display_filter": "frame.number == 3814", "udp_stream": 143 }, { "frame_number": 3815, "timestamp_epoch": "1634913221.035924000", "display_filter": "frame.number == 3815", "udp_stream": 143 }, { "frame_number": 6218, "timestamp_epoch": "1634913345.806290000", "display_filter": "frame.number == 6218", "udp_stream": 186 }, { "frame_number": 6219, "timestamp_epoch": "1634913345.806553000", "display_filter": "frame.number == 6219", "udp_stream": 186 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-80df42313b0a433bdbd33f74", "type": "domain", "value": "www.backmarket.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634917379.407846000", "last_seen_epoch": "1634917379.523883000", "evidence": [ { "frame_number": 72773, "timestamp_epoch": "1634917379.407846000", "display_filter": "frame.number == 72773", "udp_stream": 956 }, { "frame_number": 72775, "timestamp_epoch": "1634917379.487372000", "display_filter": "frame.number == 72775", "udp_stream": 956 }, { "frame_number": 72776, "timestamp_epoch": "1634917379.487559000", "display_filter": "frame.number == 72776", "udp_stream": 956 }, { "frame_number": 72777, "timestamp_epoch": "1634917379.488011000", "display_filter": "frame.number == 72777", "udp_stream": 956 }, { "frame_number": 72781, "timestamp_epoch": "1634917379.523883000", "display_filter": "frame.number == 72781", "tcp_stream": 1479 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2374c1d7618fe1589af3351c", "type": "domain", "value": "www.bing.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913189.570179000", "last_seen_epoch": "1634918060.809754000", "evidence": [ { "frame_number": 2926, "timestamp_epoch": "1634913189.570179000", "display_filter": "frame.number == 2926", "udp_stream": 119 }, { "frame_number": 2928, "timestamp_epoch": "1634913189.645501000", "display_filter": "frame.number == 2928", "udp_stream": 119 }, { "frame_number": 3665, "timestamp_epoch": "1634913217.546954000", "display_filter": "frame.number == 3665", "udp_stream": 138 }, { "frame_number": 3666, "timestamp_epoch": "1634913217.547326000", "display_filter": "frame.number == 3666", "udp_stream": 138 }, { "frame_number": 4438, "timestamp_epoch": "1634913243.673192000", "display_filter": "frame.number == 4438", "udp_stream": 153 }, { "frame_number": 4439, "timestamp_epoch": "1634913243.673512000", "display_filter": "frame.number == 4439", "udp_stream": 153 }, { "frame_number": 5211, "timestamp_epoch": "1634913261.753949000", "display_filter": "frame.number == 5211", "udp_stream": 171 }, { "frame_number": 5212, "timestamp_epoch": "1634913261.839505000", "display_filter": "frame.number == 5212", "udp_stream": 171 }, { "frame_number": 5572, "timestamp_epoch": "1634913292.208363000", "display_filter": "frame.number == 5572", "udp_stream": 179 }, { "frame_number": 5573, "timestamp_epoch": "1634913292.333084000", "display_filter": "frame.number == 5573", "udp_stream": 179 }, { "frame_number": 16352, "timestamp_epoch": "1634913884.925424000", "display_filter": "frame.number == 16352", "udp_stream": 296 }, { "frame_number": 16354, "timestamp_epoch": "1634913885.011357000", "display_filter": "frame.number == 16354", "udp_stream": 296 }, { "frame_number": 16355, "timestamp_epoch": "1634913885.075636000", "display_filter": "frame.number == 16355", "udp_stream": 296 }, { "frame_number": 58953, "timestamp_epoch": "1634916080.780532000", "display_filter": "frame.number == 58953", "udp_stream": 736 }, { "frame_number": 58954, "timestamp_epoch": "1634916080.833762000", "display_filter": "frame.number == 58954", "udp_stream": 736 }, { "frame_number": 79282, "timestamp_epoch": "1634918060.709840000", "display_filter": "frame.number == 79282", "udp_stream": 1030 }, { "frame_number": 79283, "timestamp_epoch": "1634918060.763284000", "display_filter": "frame.number == 79283", "udp_stream": 1030 }, { "frame_number": 2933, "timestamp_epoch": "1634913189.732047000", "display_filter": "frame.number == 2933", "tcp_stream": 138 }, { "frame_number": 3686, "timestamp_epoch": "1634913218.874677000", "display_filter": "frame.number == 3686", "tcp_stream": 171 }, { "frame_number": 3705, "timestamp_epoch": "1634913218.910484000", "display_filter": "frame.number == 3705", "tcp_stream": 172 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-67c20478c38b01b394d6c293", "type": "domain", "value": "www.calacatta.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913641.199748000", "last_seen_epoch": "1634914252.564983000", "evidence": [ { "frame_number": 11091, "timestamp_epoch": "1634913641.199748000", "display_filter": "frame.number == 11091", "udp_stream": 234 }, { "frame_number": 11092, "timestamp_epoch": "1634913641.285938000", "display_filter": "frame.number == 11092", "udp_stream": 234 }, { "frame_number": 11093, "timestamp_epoch": "1634913641.321964000", "display_filter": "frame.number == 11093", "udp_stream": 234 }, { "frame_number": 11098, "timestamp_epoch": "1634913641.402723000", "display_filter": "frame.number == 11098", "tcp_stream": 266 }, { "frame_number": 17413, "timestamp_epoch": "1634913919.116053000", "display_filter": "frame.number == 17413", "tcp_stream": 360 }, { "frame_number": 17499, "timestamp_epoch": "1634913938.918134000", "display_filter": "frame.number == 17499", "tcp_stream": 368 }, { "frame_number": 19694, "timestamp_epoch": "1634914071.007343000", "display_filter": "frame.number == 19694", "tcp_stream": 406 }, { "frame_number": 20550, "timestamp_epoch": "1634914098.352224000", "display_filter": "frame.number == 20550", "tcp_stream": 416 }, { "frame_number": 22469, "timestamp_epoch": "1634914229.098963000", "display_filter": "frame.number == 22469", "tcp_stream": 454 }, { "frame_number": 22552, "timestamp_epoch": "1634914252.564983000", "display_filter": "frame.number == 22552", "tcp_stream": 461 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b4172e6c1c371125a4f93b78", "type": "domain", "value": "www.dellrefurbished.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918067.205406000", "last_seen_epoch": "1634918067.332687000", "evidence": [ { "frame_number": 80505, "timestamp_epoch": "1634918067.205406000", "display_filter": "frame.number == 80505", "udp_stream": 1036 }, { "frame_number": 80506, "timestamp_epoch": "1634918067.254176000", "display_filter": "frame.number == 80506", "udp_stream": 1036 }, { "frame_number": 80508, "timestamp_epoch": "1634918067.295588000", "display_filter": "frame.number == 80508", "udp_stream": 1036 }, { "frame_number": 80512, "timestamp_epoch": "1634918067.332687000", "display_filter": "frame.number == 80512", "tcp_stream": 1586 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e6e38a1102ff96cc6edf0ad6", "type": "domain", "value": "www.emjcd.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634918066.829689000", "last_seen_epoch": "1634918066.959915000", "evidence": [ { "frame_number": 80477, "timestamp_epoch": "1634918066.829689000", "display_filter": "frame.number == 80477", "udp_stream": 1035 }, { "frame_number": 80480, "timestamp_epoch": "1634918066.879752000", "display_filter": "frame.number == 80480", "udp_stream": 1035 }, { "frame_number": 80481, "timestamp_epoch": "1634918066.882943000", "display_filter": "frame.number == 80481", "udp_stream": 1035 }, { "frame_number": 80485, "timestamp_epoch": "1634918066.959915000", "display_filter": "frame.number == 80485", "tcp_stream": 1585 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-aadff48dab02933517300064", "type": "domain", "value": "www.kqzyfj.com", "roles": [ "dns-query", "http-host" ], "is_private": null, "first_seen_epoch": "1634918066.174480000", "last_seen_epoch": "1634918066.335618000", "evidence": [ { "frame_number": 80437, "timestamp_epoch": "1634918066.174480000", "display_filter": "frame.number == 80437", "udp_stream": 1033 }, { "frame_number": 80438, "timestamp_epoch": "1634918066.239575000", "display_filter": "frame.number == 80438", "udp_stream": 1033 }, { "frame_number": 80439, "timestamp_epoch": "1634918066.250031000", "display_filter": "frame.number == 80439", "udp_stream": 1033 }, { "frame_number": 80443, "timestamp_epoch": "1634918066.335618000", "display_filter": "frame.number == 80443", "tcp_stream": 1583 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8cda9789f9250a01f9ad9238", "type": "domain", "value": "www.microsoft.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913890.447037000", "last_seen_epoch": "1634913890.539503000", "evidence": [ { "frame_number": 17307, "timestamp_epoch": "1634913890.447037000", "display_filter": "frame.number == 17307", "udp_stream": 298 }, { "frame_number": 17308, "timestamp_epoch": "1634913890.481288000", "display_filter": "frame.number == 17308", "udp_stream": 298 }, { "frame_number": 17313, "timestamp_epoch": "1634913890.539503000", "display_filter": "frame.number == 17313", "tcp_stream": 352 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-062f38d2db084a78ad23ac8a", "type": "domain", "value": "www.oftheearth.ca", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634913608.448949000", "last_seen_epoch": "1634914435.503902000", "evidence": [ { "frame_number": 11036, "timestamp_epoch": "1634913608.448949000", "display_filter": "frame.number == 11036", "udp_stream": 232 }, { "frame_number": 11037, "timestamp_epoch": "1634913608.535240000", "display_filter": "frame.number == 11037", "udp_stream": 232 }, { "frame_number": 11038, "timestamp_epoch": "1634913608.680143000", "display_filter": "frame.number == 11038", "udp_stream": 232 }, { "frame_number": 11042, "timestamp_epoch": "1634913608.762943000", "display_filter": "frame.number == 11042", "tcp_stream": 264 }, { "frame_number": 17903, "timestamp_epoch": "1634914033.833405000", "display_filter": "frame.number == 17903", "tcp_stream": 396 }, { "frame_number": 19051, "timestamp_epoch": "1634914056.729387000", "display_filter": "frame.number == 19051", "tcp_stream": 401 }, { "frame_number": 22318, "timestamp_epoch": "1634914193.299379000", "display_filter": "frame.number == 22318", "tcp_stream": 442 }, { "frame_number": 22373, "timestamp_epoch": "1634914207.626227000", "display_filter": "frame.number == 22373", "tcp_stream": 447 }, { "frame_number": 23048, "timestamp_epoch": "1634914403.060523000", "display_filter": "frame.number == 23048", "tcp_stream": 516 }, { "frame_number": 23158, "timestamp_epoch": "1634914435.503902000", "display_filter": "frame.number == 23158", "tcp_stream": 526 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9bf46539f7c6040c30dd0c0d", "type": "domain", "value": "www.openssl.org", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634915266.480525000", "last_seen_epoch": "1634915266.920294000", "evidence": [ { "frame_number": 31729, "timestamp_epoch": "1634915266.480525000", "display_filter": "frame.number == 31729", "udp_stream": 546 }, { "frame_number": 31730, "timestamp_epoch": "1634915266.505327000", "display_filter": "frame.number == 31730", "udp_stream": 546 }, { "frame_number": 31731, "timestamp_epoch": "1634915266.693490000", "display_filter": "frame.number == 31731", "udp_stream": 546 }, { "frame_number": 31735, "timestamp_epoch": "1634915266.920294000", "display_filter": "frame.number == 31735", "tcp_stream": 807 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2b67851fc5b3497b0ed876cc", "type": "domain", "value": "x1.c.lencr.org", "roles": [ "dns-query", "http-host" ], "is_private": null, "first_seen_epoch": "1634913305.869014000", "last_seen_epoch": "1634917533.050761000", "evidence": [ { "frame_number": 6124, "timestamp_epoch": "1634913305.869014000", "display_filter": "frame.number == 6124", "udp_stream": 184 }, { "frame_number": 6127, "timestamp_epoch": "1634913305.970879000", "display_filter": "frame.number == 6127", "udp_stream": 184 }, { "frame_number": 68289, "timestamp_epoch": "1634916950.170866000", "display_filter": "frame.number == 68289", "udp_stream": 898 }, { "frame_number": 68290, "timestamp_epoch": "1634916950.201498000", "display_filter": "frame.number == 68290", "udp_stream": 898 }, { "frame_number": 68291, "timestamp_epoch": "1634916950.227634000", "display_filter": "frame.number == 68291", "udp_stream": 898 }, { "frame_number": 75138, "timestamp_epoch": "1634917532.951928000", "display_filter": "frame.number == 75138", "udp_stream": 979 }, { "frame_number": 75139, "timestamp_epoch": "1634917533.012812000", "display_filter": "frame.number == 75139", "udp_stream": 979 }, { "frame_number": 6131, "timestamp_epoch": "1634913306.067606000", "display_filter": "frame.number == 6131", "tcp_stream": 237 }, { "frame_number": 68295, "timestamp_epoch": "1634916950.282522000", "display_filter": "frame.number == 68295", "tcp_stream": 1391 }, { "frame_number": 75143, "timestamp_epoch": "1634917533.050761000", "display_filter": "frame.number == 75143", "tcp_stream": 1505 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8edbc3a2e98908d9d3a7ca1d", "type": "domain", "value": "yeahmx01.mxmail.netease.com", "roles": [ "dns-query", "tls-sni" ], "is_private": null, "first_seen_epoch": "1634916653.913882000", "last_seen_epoch": "1634918562.623510000", "evidence": [ { "frame_number": 65646, "timestamp_epoch": "1634916653.913882000", "display_filter": "frame.number == 65646", "udp_stream": 834 }, { "frame_number": 65648, "timestamp_epoch": "1634916653.976477000", "display_filter": "frame.number == 65648", "udp_stream": 834 }, { "frame_number": 65649, "timestamp_epoch": "1634916654.032955000", "display_filter": "frame.number == 65649", "udp_stream": 834 }, { "frame_number": 84239, "timestamp_epoch": "1634918554.991350000", "display_filter": "frame.number == 84239", "udp_stream": 1086 }, { "frame_number": 84241, "timestamp_epoch": "1634918555.091802000", "display_filter": "frame.number == 84241", "udp_stream": 1086 }, { "frame_number": 84245, "timestamp_epoch": "1634918556.108602000", "display_filter": "frame.number == 84245", "udp_stream": 1086 }, { "frame_number": 84246, "timestamp_epoch": "1634918556.203293000", "display_filter": "frame.number == 84246", "udp_stream": 1086 }, { "frame_number": 65722, "timestamp_epoch": "1634916657.698139000", "display_filter": "frame.number == 65722", "tcp_stream": 1288 }, { "frame_number": 84328, "timestamp_epoch": "1634918562.623510000", "display_filter": "frame.number == 84328", "tcp_stream": 1652 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-31f84d5fb13b1a5c691ab070", "type": "domain", "value": "znkbmknmqyvbxi.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.280027000", "last_seen_epoch": "1634913358.296464000", "evidence": [ { "frame_number": 6481, "timestamp_epoch": "1634913352.280027000", "display_filter": "frame.number == 6481", "udp_stream": 194 }, { "frame_number": 6482, "timestamp_epoch": "1634913352.280362000", "display_filter": "frame.number == 6482", "udp_stream": 194 }, { "frame_number": 6537, "timestamp_epoch": "1634913358.296018000", "display_filter": "frame.number == 6537", "udp_stream": 204 }, { "frame_number": 6539, "timestamp_epoch": "1634913358.296464000", "display_filter": "frame.number == 6539", "udp_stream": 204 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-162f7361973d76494955dd61", "type": "domain", "value": "znkbmknmqyvbxi.localdomain", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.280991000", "last_seen_epoch": "1634913358.297515000", "evidence": [ { "frame_number": 6487, "timestamp_epoch": "1634913352.280991000", "display_filter": "frame.number == 6487", "udp_stream": 197 }, { "frame_number": 6498, "timestamp_epoch": "1634913353.295573000", "display_filter": "frame.number == 6498", "udp_stream": 197 }, { "frame_number": 6512, "timestamp_epoch": "1634913355.310505000", "display_filter": "frame.number == 6512", "udp_stream": 197 }, { "frame_number": 6526, "timestamp_epoch": "1634913356.514066000", "display_filter": "frame.number == 6526", "udp_stream": 197 }, { "frame_number": 6542, "timestamp_epoch": "1634913358.297103000", "display_filter": "frame.number == 6542", "udp_stream": 207 }, { "frame_number": 6544, "timestamp_epoch": "1634913358.297515000", "display_filter": "frame.number == 6544", "udp_stream": 207 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8b20f89aaa1aacdd37203260", "type": "domain", "value": "zuczbdyvfzio.enemywatch.net", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.280647000", "last_seen_epoch": "1634913358.296547000", "evidence": [ { "frame_number": 6483, "timestamp_epoch": "1634913352.280647000", "display_filter": "frame.number == 6483", "udp_stream": 195 }, { "frame_number": 6485, "timestamp_epoch": "1634913352.280857000", "display_filter": "frame.number == 6485", "udp_stream": 195 }, { "frame_number": 6538, "timestamp_epoch": "1634913358.296122000", "display_filter": "frame.number == 6538", "udp_stream": 205 }, { "frame_number": 6540, "timestamp_epoch": "1634913358.296547000", "display_filter": "frame.number == 6540", "udp_stream": 205 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9a838627a0ce59c81ccd16c2", "type": "domain", "value": "zuczbdyvfzio.localdomain", "roles": [ "dns-query" ], "is_private": null, "first_seen_epoch": "1634913352.281289000", "last_seen_epoch": "1634913358.297365000", "evidence": [ { "frame_number": 6489, "timestamp_epoch": "1634913352.281289000", "display_filter": "frame.number == 6489", "udp_stream": 194 }, { "frame_number": 6490, "timestamp_epoch": "1634913352.384410000", "display_filter": "frame.number == 6490", "udp_stream": 194 }, { "frame_number": 6541, "timestamp_epoch": "1634913358.297022000", "display_filter": "frame.number == 6541", "udp_stream": 206 }, { "frame_number": 6543, "timestamp_epoch": "1634913358.297365000", "display_filter": "frame.number == 6543", "udp_stream": 206 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e66692c86b9c9745fcd54a2c", "type": "ipv4", "value": "0.0.0.0", "roles": [ "network-endpoint" ], "is_private": true, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-94a58fcf30dc566136b00c66", "type": "ipv4", "value": "10.10.22.1", "roles": [ "network-endpoint" ], "is_private": true, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-d9a4ecc5f5f641ae6ae77792", "type": "ipv4", "value": "10.10.22.156", "roles": [ "dns-answer", "network-endpoint" ], "is_private": true, "first_seen_epoch": "1634914016.822158000", "last_seen_epoch": "1634918511.971977000", "evidence": [ { "frame_number": 17864, "timestamp_epoch": "1634914016.822158000", "display_filter": "frame.number == 17864", "udp_stream": 325 }, { "frame_number": 17865, "timestamp_epoch": "1634914016.823164000", "display_filter": "frame.number == 17865", "udp_stream": 325 }, { "frame_number": 24795, "timestamp_epoch": "1634914911.844792000", "display_filter": "frame.number == 24795", "udp_stream": 493 }, { "frame_number": 24796, "timestamp_epoch": "1634914911.845809000", "display_filter": "frame.number == 24796", "udp_stream": 493 }, { "frame_number": 56016, "timestamp_epoch": "1634915811.899276000", "display_filter": "frame.number == 56016", "udp_stream": 692 }, { "frame_number": 56020, "timestamp_epoch": "1634915811.900450000", "display_filter": "frame.number == 56020", "udp_stream": 692 }, { "frame_number": 66231, "timestamp_epoch": "1634916711.901387000", "display_filter": "frame.number == 66231", "udp_stream": 847 }, { "frame_number": 66232, "timestamp_epoch": "1634916711.902427000", "display_filter": "frame.number == 66232", "udp_stream": 847 }, { "frame_number": 76368, "timestamp_epoch": "1634917611.952688000", "display_filter": "frame.number == 76368", "udp_stream": 997 }, { "frame_number": 76369, "timestamp_epoch": "1634917611.953658000", "display_filter": "frame.number == 76369", "udp_stream": 997 }, { "frame_number": 83834, "timestamp_epoch": "1634918511.970888000", "display_filter": "frame.number == 83834", "udp_stream": 1074 }, { "frame_number": 83836, "timestamp_epoch": "1634918511.971977000", "display_filter": "frame.number == 83836", "udp_stream": 1074 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fc21948e1929d15184f87e39", "type": "ipv4", "value": "10.10.22.157", "roles": [ "dns-answer", "network-endpoint" ], "is_private": true, "first_seen_epoch": "1634913956.151353000", "last_seen_epoch": "1634918451.280595000", "evidence": [ { "frame_number": 17594, "timestamp_epoch": "1634913956.151353000", "display_filter": "frame.number == 17594", "udp_stream": 314 }, { "frame_number": 17595, "timestamp_epoch": "1634913956.152393000", "display_filter": "frame.number == 17595", "udp_stream": 314 }, { "frame_number": 24590, "timestamp_epoch": "1634914851.167979000", "display_filter": "frame.number == 24590", "udp_stream": 483 }, { "frame_number": 24591, "timestamp_epoch": "1634914851.168976000", "display_filter": "frame.number == 24591", "udp_stream": 483 }, { "frame_number": 55654, "timestamp_epoch": "1634915751.211365000", "display_filter": "frame.number == 55654", "udp_stream": 688 }, { "frame_number": 55655, "timestamp_epoch": "1634915751.212115000", "display_filter": "frame.number == 55655", "udp_stream": 688 }, { "frame_number": 65622, "timestamp_epoch": "1634916651.227721000", "display_filter": "frame.number == 65622", "udp_stream": 833 }, { "frame_number": 65623, "timestamp_epoch": "1634916651.228384000", "display_filter": "frame.number == 65623", "udp_stream": 833 }, { "frame_number": 75256, "timestamp_epoch": "1634917551.267075000", "display_filter": "frame.number == 75256", "udp_stream": 985 }, { "frame_number": 75257, "timestamp_epoch": "1634917551.267916000", "display_filter": "frame.number == 75257", "udp_stream": 985 }, { "frame_number": 83310, "timestamp_epoch": "1634918451.279871000", "display_filter": "frame.number == 83310", "udp_stream": 1065 }, { "frame_number": 83311, "timestamp_epoch": "1634918451.280595000", "display_filter": "frame.number == 83311", "udp_stream": 1065 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-10314c492dbb50397eb5fa47", "type": "ipv4", "value": "10.10.22.158", "roles": [ "dns-answer", "network-endpoint" ], "is_private": true, "first_seen_epoch": "1634913148.528960000", "last_seen_epoch": "1634918543.667247000", "evidence": [ { "frame_number": 2313, "timestamp_epoch": "1634913148.528960000", "display_filter": "frame.number == 2313", "udp_stream": 101 }, { "frame_number": 2314, "timestamp_epoch": "1634913148.530213000", "display_filter": "frame.number == 2314", "udp_stream": 101 }, { "frame_number": 17946, "timestamp_epoch": "1634914043.534134000", "display_filter": "frame.number == 17946", "udp_stream": 332 }, { "frame_number": 17947, "timestamp_epoch": "1634914043.535101000", "display_filter": "frame.number == 17947", "udp_stream": 332 }, { "frame_number": 25092, "timestamp_epoch": "1634914943.551261000", "display_filter": "frame.number == 25092", "udp_stream": 498 }, { "frame_number": 25093, "timestamp_epoch": "1634914943.552065000", "display_filter": "frame.number == 25093", "udp_stream": 498 }, { "frame_number": 56349, "timestamp_epoch": "1634915843.580566000", "display_filter": "frame.number == 56349", "udp_stream": 700 }, { "frame_number": 56351, "timestamp_epoch": "1634915843.581725000", "display_filter": "frame.number == 56351", "udp_stream": 700 }, { "frame_number": 66386, "timestamp_epoch": "1634916743.599382000", "display_filter": "frame.number == 66386", "udp_stream": 856 }, { "frame_number": 66389, "timestamp_epoch": "1634916743.600644000", "display_filter": "frame.number == 66389", "udp_stream": 856 }, { "frame_number": 76626, "timestamp_epoch": "1634917643.640229000", "display_filter": "frame.number == 76626", "udp_stream": 1005 }, { "frame_number": 76627, "timestamp_epoch": "1634917643.641240000", "display_filter": "frame.number == 76627", "udp_stream": 1005 }, { "frame_number": 84068, "timestamp_epoch": "1634918543.666253000", "display_filter": "frame.number == 84068", "udp_stream": 1079 }, { "frame_number": 84072, "timestamp_epoch": "1634918543.667247000", "display_filter": "frame.number == 84072", "udp_stream": 1079 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6749c00175f2c14e7d03247e", "type": "ipv4", "value": "10.10.22.22", "roles": [ "dns-answer", "network-endpoint" ], "is_private": true, "first_seen_epoch": "1634913052.528989000", "last_seen_epoch": "1634918543.664706000", "evidence": [ { "frame_number": 16, "timestamp_epoch": "1634913052.528989000", "display_filter": "frame.number == 16", "udp_stream": 4 }, { "frame_number": 18, "timestamp_epoch": "1634913052.531190000", "display_filter": "frame.number == 18", "udp_stream": 5 }, { "frame_number": 45, "timestamp_epoch": "1634913053.907345000", "display_filter": "frame.number == 45", "udp_stream": 13 }, { "frame_number": 154, "timestamp_epoch": "1634913054.102768000", "display_filter": "frame.number == 154", "udp_stream": 17 }, { "frame_number": 172, "timestamp_epoch": "1634913054.224061000", "display_filter": "frame.number == 172", "udp_stream": 19 }, { "frame_number": 243, "timestamp_epoch": "1634913054.392241000", "display_filter": "frame.number == 243", "udp_stream": 21 }, { "frame_number": 341, "timestamp_epoch": "1634913055.075067000", "display_filter": "frame.number == 341", "udp_stream": 23 }, { "frame_number": 549, "timestamp_epoch": "1634913057.533706000", "display_filter": "frame.number == 549", "udp_stream": 24 }, { "frame_number": 792, "timestamp_epoch": "1634913113.335549000", "display_filter": "frame.number == 792", "udp_stream": 36 }, { "frame_number": 794, "timestamp_epoch": "1634913113.344886000", "display_filter": "frame.number == 794", "udp_stream": 37 }, { "frame_number": 831, "timestamp_epoch": "1634913114.717046000", "display_filter": "frame.number == 831", "udp_stream": 46 }, { "frame_number": 834, "timestamp_epoch": "1634913114.746216000", "display_filter": "frame.number == 834", "udp_stream": 47 }, { "frame_number": 1077, "timestamp_epoch": "1634913114.971588000", "display_filter": "frame.number == 1077", "udp_stream": 53 }, { "frame_number": 1143, "timestamp_epoch": "1634913115.125570000", "display_filter": "frame.number == 1143", "udp_stream": 55 }, { "frame_number": 1155, "timestamp_epoch": "1634913115.458770000", "display_filter": "frame.number == 1155", "udp_stream": 57 }, { "frame_number": 1159, "timestamp_epoch": "1634913115.519297000", "display_filter": "frame.number == 1159", "udp_stream": 58 }, { "frame_number": 1429, "timestamp_epoch": "1634913118.374783000", "display_filter": "frame.number == 1429", "udp_stream": 63 }, { "frame_number": 1686, "timestamp_epoch": "1634913143.961520000", "display_filter": "frame.number == 1686", "udp_stream": 76 }, { "frame_number": 1688, "timestamp_epoch": "1634913143.965839000", "display_filter": "frame.number == 1688", "udp_stream": 77 }, { "frame_number": 1728, "timestamp_epoch": "1634913145.615477000", "display_filter": "frame.number == 1728", "udp_stream": 86 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-07c836f0e6a4953dd0e17b69", "type": "ipv4", "value": "10.10.22.255", "roles": [ "network-endpoint" ], "is_private": true, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-15f3b0919e81cda2deb3ff7f", "type": "ipv4", "value": "103.129.255.250", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917480.997903000", "last_seen_epoch": "1634917480.997903000", "evidence": [ { "frame_number": 74770, "timestamp_epoch": "1634917480.997903000", "display_filter": "frame.number == 74770", "udp_stream": 969 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-af73cc6a5e7c476c73fa61c0", "type": "ipv4", "value": "103.129.255.251", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917480.997903000", "last_seen_epoch": "1634917480.997903000", "evidence": [ { "frame_number": 74770, "timestamp_epoch": "1634917480.997903000", "display_filter": "frame.number == 74770", "udp_stream": 969 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fff3f2cafa318b46ed73ba94", "type": "ipv4", "value": "103.143.8.71", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-e3cd24ecb1adf42e1002f30e", "type": "ipv4", "value": "104.16.10.88", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917379.487559000", "last_seen_epoch": "1634917379.488011000", "evidence": [ { "frame_number": 72776, "timestamp_epoch": "1634917379.487559000", "display_filter": "frame.number == 72776", "udp_stream": 956 }, { "frame_number": 72777, "timestamp_epoch": "1634917379.488011000", "display_filter": "frame.number == 72777", "udp_stream": 956 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-488758e2f2ec693068962a47", "type": "ipv4", "value": "104.17.201.57", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917379.487559000", "last_seen_epoch": "1634917379.488011000", "evidence": [ { "frame_number": 72776, "timestamp_epoch": "1634917379.487559000", "display_filter": "frame.number == 72776", "udp_stream": 956 }, { "frame_number": 72777, "timestamp_epoch": "1634917379.488011000", "display_filter": "frame.number == 72777", "udp_stream": 956 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8a07c5c80ef00e02867b21e2", "type": "ipv4", "value": "104.208.16.88", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913722.853539000", "last_seen_epoch": "1634913732.334475000", "evidence": [ { "frame_number": 11628, "timestamp_epoch": "1634913722.853539000", "display_filter": "frame.number == 11628", "udp_stream": 260 }, { "frame_number": 12075, "timestamp_epoch": "1634913732.334475000", "display_filter": "frame.number == 12075", "udp_stream": 263 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a12066e5108d85a667d4f808", "type": "ipv4", "value": "104.208.16.94", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917472.439528000", "last_seen_epoch": "1634917491.611280000", "evidence": [ { "frame_number": 74687, "timestamp_epoch": "1634917472.439528000", "display_filter": "frame.number == 74687", "udp_stream": 966 }, { "frame_number": 74992, "timestamp_epoch": "1634917491.611280000", "display_filter": "frame.number == 74992", "udp_stream": 973 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8b5b05817b91b2f5b568a73a", "type": "ipv4", "value": "104.21.32.95", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913346.586626000", "last_seen_epoch": "1634913346.586626000", "evidence": [ { "frame_number": 6325, "timestamp_epoch": "1634913346.586626000", "display_filter": "frame.number == 6325", "udp_stream": 191 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2843e4018ceaf34651eac2a2", "type": "ipv4", "value": "104.21.65.22", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913395.641241000", "last_seen_epoch": "1634913395.641241000", "evidence": [ { "frame_number": 6747, "timestamp_epoch": "1634913395.641241000", "display_filter": "frame.number == 6747", "udp_stream": 215 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-89291cf475c0fed8cbddcf87", "type": "ipv4", "value": "104.215.148.63", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913889.018084000", "last_seen_epoch": "1634913889.018084000", "evidence": [ { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-677f840412f218d29cbadf89", "type": "ipv4", "value": "104.46.162.226", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913662.072508000", "last_seen_epoch": "1634913671.018396000", "evidence": [ { "frame_number": 11176, "timestamp_epoch": "1634913662.072508000", "display_filter": "frame.number == 11176", "udp_stream": 238 }, { "frame_number": 11317, "timestamp_epoch": "1634913665.767347000", "display_filter": "frame.number == 11317", "udp_stream": 241 }, { "frame_number": 11409, "timestamp_epoch": "1634913671.018396000", "display_filter": "frame.number == 11409", "udp_stream": 243 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-228288834ec6d008bc6718c3", "type": "ipv4", "value": "104.94.77.31", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913305.970879000", "last_seen_epoch": "1634917533.012812000", "evidence": [ { "frame_number": 6127, "timestamp_epoch": "1634913305.970879000", "display_filter": "frame.number == 6127", "udp_stream": 184 }, { "frame_number": 68291, "timestamp_epoch": "1634916950.227634000", "display_filter": "frame.number == 68291", "udp_stream": 898 }, { "frame_number": 75139, "timestamp_epoch": "1634917533.012812000", "display_filter": "frame.number == 75139", "udp_stream": 979 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c4297f804f45af1ac77ff556", "type": "ipv4", "value": "107.161.180.34", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913641.321964000", "last_seen_epoch": "1634913641.321964000", "evidence": [ { "frame_number": 11093, "timestamp_epoch": "1634913641.321964000", "display_filter": "frame.number == 11093", "udp_stream": 234 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a2be3144ceedfdab358ba08c", "type": "ipv4", "value": "108.168.133.76", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915543.738770000", "last_seen_epoch": "1634915543.738770000", "evidence": [ { "frame_number": 51120, "timestamp_epoch": "1634915543.738770000", "display_filter": "frame.number == 51120", "udp_stream": 658 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a55e6f7c68b4598baa0b4f29", "type": "ipv4", "value": "111.223.52.28", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918422.878020000", "last_seen_epoch": "1634918422.878020000", "evidence": [ { "frame_number": 82998, "timestamp_epoch": "1634918422.878020000", "display_filter": "frame.number == 82998", "udp_stream": 1061 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-eb73a9cb24503436fefdec1a", "type": "ipv4", "value": "115.112.78.166", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916593.108750000", "last_seen_epoch": "1634916593.108750000", "evidence": [ { "frame_number": 65457, "timestamp_epoch": "1634916593.108750000", "display_filter": "frame.number == 65457", "udp_stream": 830 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5029ab4b4fa5024780420d85", "type": "ipv4", "value": "122.179.158.212", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-8ca832056a27ef8c87622650", "type": "ipv4", "value": "123.126.45.161", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915355.503845000", "last_seen_epoch": "1634917311.330942000", "evidence": [ { "frame_number": 44926, "timestamp_epoch": "1634915355.503845000", "display_filter": "frame.number == 44926", "udp_stream": 567 }, { "frame_number": 65857, "timestamp_epoch": "1634916671.628154000", "display_filter": "frame.number == 65857", "udp_stream": 839 }, { "frame_number": 69004, "timestamp_epoch": "1634917081.519715000", "display_filter": "frame.number == 69004", "udp_stream": 921 }, { "frame_number": 70276, "timestamp_epoch": "1634917228.307217000", "display_filter": "frame.number == 70276", "udp_stream": 939 }, { "frame_number": 71102, "timestamp_epoch": "1634917286.961286000", "display_filter": "frame.number == 71102", "udp_stream": 941 }, { "frame_number": 71389, "timestamp_epoch": "1634917311.330942000", "display_filter": "frame.number == 71389", "udp_stream": 943 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5516de06287c6cfb5afd8036", "type": "ipv4", "value": "123.58.177.213", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916654.032955000", "last_seen_epoch": "1634918556.203293000", "evidence": [ { "frame_number": 65649, "timestamp_epoch": "1634916654.032955000", "display_filter": "frame.number == 65649", "udp_stream": 834 }, { "frame_number": 84246, "timestamp_epoch": "1634918556.203293000", "display_filter": "frame.number == 84246", "udp_stream": 1086 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7eece89c72b002a386c04a51", "type": "ipv4", "value": "123.58.177.214", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916654.032955000", "last_seen_epoch": "1634918556.203293000", "evidence": [ { "frame_number": 65649, "timestamp_epoch": "1634916654.032955000", "display_filter": "frame.number == 65649", "udp_stream": 834 }, { "frame_number": 84246, "timestamp_epoch": "1634918556.203293000", "display_filter": "frame.number == 84246", "udp_stream": 1086 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-401f7f871c80fbdd253a3213", "type": "ipv4", "value": "123.58.177.220", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916654.032955000", "last_seen_epoch": "1634918556.203293000", "evidence": [ { "frame_number": 65649, "timestamp_epoch": "1634916654.032955000", "display_filter": "frame.number == 65649", "udp_stream": 834 }, { "frame_number": 84246, "timestamp_epoch": "1634918556.203293000", "display_filter": "frame.number == 84246", "udp_stream": 1086 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e90dd0e988c39f5100e5464a", "type": "ipv4", "value": "129.246.14.238", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913706.923733000", "last_seen_epoch": "1634914468.093909000", "evidence": [ { "frame_number": 11567, "timestamp_epoch": "1634913706.923733000", "display_filter": "frame.number == 11567", "udp_stream": 253 }, { "frame_number": 19684, "timestamp_epoch": "1634914070.054483000", "display_filter": "frame.number == 19684", "udp_stream": 333 }, { "frame_number": 19685, "timestamp_epoch": "1634914070.054621000", "display_filter": "frame.number == 19685", "udp_stream": 333 }, { "frame_number": 19686, "timestamp_epoch": "1634914070.383727000", "display_filter": "frame.number == 19686", "udp_stream": 334 }, { "frame_number": 22459, "timestamp_epoch": "1634914228.610736000", "display_filter": "frame.number == 22459", "udp_stream": 354 }, { "frame_number": 23256, "timestamp_epoch": "1634914468.093909000", "display_filter": "frame.number == 23256", "udp_stream": 404 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-938feea2d5732ac14fd8de9d", "type": "ipv4", "value": "13.107.136.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.070161000", "last_seen_epoch": "1634913244.070161000", "evidence": [ { "frame_number": 4588, "timestamp_epoch": "1634913244.070161000", "display_filter": "frame.number == 4588", "udp_stream": 160 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ff8a40c1cf02d6107e272fd5", "type": "ipv4", "value": "13.107.18.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.984101000", "last_seen_epoch": "1634913243.976966000", "evidence": [ { "frame_number": 2973, "timestamp_epoch": "1634913189.984101000", "display_filter": "frame.number == 2973", "udp_stream": 126 }, { "frame_number": 4483, "timestamp_epoch": "1634913243.976966000", "display_filter": "frame.number == 4483", "udp_stream": 156 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2d8f2af7bcb3f62d8cd86256", "type": "ipv4", "value": "13.107.21.200", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.645501000", "last_seen_epoch": "1634918060.763284000", "evidence": [ { "frame_number": 2928, "timestamp_epoch": "1634913189.645501000", "display_filter": "frame.number == 2928", "udp_stream": 119 }, { "frame_number": 3666, "timestamp_epoch": "1634913217.547326000", "display_filter": "frame.number == 3666", "udp_stream": 138 }, { "frame_number": 4439, "timestamp_epoch": "1634913243.673512000", "display_filter": "frame.number == 4439", "udp_stream": 153 }, { "frame_number": 5212, "timestamp_epoch": "1634913261.839505000", "display_filter": "frame.number == 5212", "udp_stream": 171 }, { "frame_number": 5573, "timestamp_epoch": "1634913292.333084000", "display_filter": "frame.number == 5573", "udp_stream": 179 }, { "frame_number": 16328, "timestamp_epoch": "1634913884.626038000", "display_filter": "frame.number == 16328", "udp_stream": 294 }, { "frame_number": 16355, "timestamp_epoch": "1634913885.075636000", "display_filter": "frame.number == 16355", "udp_stream": 296 }, { "frame_number": 58954, "timestamp_epoch": "1634916080.833762000", "display_filter": "frame.number == 58954", "udp_stream": 736 }, { "frame_number": 72061, "timestamp_epoch": "1634917374.725026000", "display_filter": "frame.number == 72061", "udp_stream": 955 }, { "frame_number": 79283, "timestamp_epoch": "1634918060.763284000", "display_filter": "frame.number == 79283", "udp_stream": 1030 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-307281da219d40cbf7d59524", "type": "ipv4", "value": "13.107.246.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.111711000", "last_seen_epoch": "1634913244.111711000", "evidence": [ { "frame_number": 4632, "timestamp_epoch": "1634913244.111711000", "display_filter": "frame.number == 4632", "udp_stream": 162 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6b13784baf224adf1b1dcd18", "type": "ipv4", "value": "13.107.4.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.898578000", "last_seen_epoch": "1634913189.898578000", "evidence": [ { "frame_number": 2957, "timestamp_epoch": "1634913189.898578000", "display_filter": "frame.number == 2957", "udp_stream": 121 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1e1c495b0413fd17e949d1ca", "type": "ipv4", "value": "13.107.4.50", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916950.388940000", "last_seen_epoch": "1634917551.564701000", "evidence": [ { "frame_number": 68305, "timestamp_epoch": "1634916950.388940000", "display_filter": "frame.number == 68305", "udp_stream": 899 }, { "frame_number": 68658, "timestamp_epoch": "1634917020.693186000", "display_filter": "frame.number == 68658", "udp_stream": 910 }, { "frame_number": 75150, "timestamp_epoch": "1634917533.142513000", "display_filter": "frame.number == 75150", "udp_stream": 980 }, { "frame_number": 75260, "timestamp_epoch": "1634917551.564701000", "display_filter": "frame.number == 75260", "udp_stream": 986 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6486f8916ae957836c50185e", "type": "ipv4", "value": "13.107.42.16", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913345.875498000", "last_seen_epoch": "1634913345.875498000", "evidence": [ { "frame_number": 6221, "timestamp_epoch": "1634913345.875498000", "display_filter": "frame.number == 6221", "udp_stream": 187 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8a64807e24c7104349f01a93", "type": "ipv4", "value": "13.107.42.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913243.976900000", "last_seen_epoch": "1634913243.976900000", "evidence": [ { "frame_number": 4482, "timestamp_epoch": "1634913243.976900000", "display_filter": "frame.number == 4482", "udp_stream": 157 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-365242fd5b28b012238deacc", "type": "ipv4", "value": "13.107.43.14", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.024012000", "last_seen_epoch": "1634913244.024012000", "evidence": [ { "frame_number": 4540, "timestamp_epoch": "1634913244.024012000", "display_filter": "frame.number == 4540", "udp_stream": 158 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-faa20e08f34e1d30b86bef24", "type": "ipv4", "value": "13.107.6.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913243.907353000", "last_seen_epoch": "1634913243.907353000", "evidence": [ { "frame_number": 4462, "timestamp_epoch": "1634913243.907353000", "display_filter": "frame.number == 4462", "udp_stream": 155 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-124db9a88e3325af2d1ee92f", "type": "ipv4", "value": "13.64.180.106", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913186.072160000", "last_seen_epoch": "1634913240.483552000", "evidence": [ { "frame_number": 2851, "timestamp_epoch": "1634913186.072160000", "display_filter": "frame.number == 2851", "udp_stream": 116 }, { "frame_number": 3576, "timestamp_epoch": "1634913212.561085000", "display_filter": "frame.number == 3576", "udp_stream": 135 }, { "frame_number": 4357, "timestamp_epoch": "1634913240.483552000", "display_filter": "frame.number == 4357", "udp_stream": 151 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2163fcf5d362abc0dc340523", "type": "ipv4", "value": "13.69.239.72", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913382.690456000", "last_seen_epoch": "1634913382.690456000", "evidence": [ { "frame_number": 6668, "timestamp_epoch": "1634913382.690456000", "display_filter": "frame.number == 6668", "udp_stream": 214 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b724e954251838d3aa58a672", "type": "ipv4", "value": "13.77.161.179", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913889.018084000", "last_seen_epoch": "1634913889.018084000", "evidence": [ { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d171896fcde9f34b43187b5f", "type": "ipv4", "value": "13.86.61.82", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913190.761920000", "last_seen_epoch": "1634913218.473549000", "evidence": [ { "frame_number": 3052, "timestamp_epoch": "1634913190.761920000", "display_filter": "frame.number == 3052", "udp_stream": 128 }, { "frame_number": 3668, "timestamp_epoch": "1634913218.473549000", "display_filter": "frame.number == 3668", "udp_stream": 139 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4b7637187e715da8efcd6adf", "type": "ipv4", "value": "13.89.178.27", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915757.416872000", "last_seen_epoch": "1634915757.416872000", "evidence": [ { "frame_number": 55722, "timestamp_epoch": "1634915757.416872000", "display_filter": "frame.number == 55722", "udp_stream": 689 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-708d7a1a80328e07db5b4194", "type": "ipv4", "value": "13.89.179.10", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913754.254531000", "last_seen_epoch": "1634913759.691266000", "evidence": [ { "frame_number": 13366, "timestamp_epoch": "1634913754.254531000", "display_filter": "frame.number == 13366", "udp_stream": 272 }, { "frame_number": 13769, "timestamp_epoch": "1634913759.691266000", "display_filter": "frame.number == 13769", "udp_stream": 274 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-489437f14976e037fe9f5cae", "type": "ipv4", "value": "13.89.179.9", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913212.913933000", "last_seen_epoch": "1634913212.913933000", "evidence": [ { "frame_number": 3598, "timestamp_epoch": "1634913212.913933000", "display_filter": "frame.number == 3598", "udp_stream": 136 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a6e9cda203a545ae3e3d9586", "type": "ipv4", "value": "130.61.64.122", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-88922ceb40596617de017222", "type": "ipv4", "value": "131.107.255.255", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913053.539379000", "last_seen_epoch": "1634918235.239591000", "evidence": [ { "frame_number": 37, "timestamp_epoch": "1634913053.539379000", "display_filter": "frame.number == 37", "udp_stream": 9 }, { "frame_number": 829, "timestamp_epoch": "1634913114.390652000", "display_filter": "frame.number == 829", "udp_stream": 45 }, { "frame_number": 1723, "timestamp_epoch": "1634913145.318048000", "display_filter": "frame.number == 1723", "udp_stream": 85 }, { "frame_number": 16244, "timestamp_epoch": "1634913855.075475000", "display_filter": "frame.number == 16244", "udp_stream": 289 }, { "frame_number": 17469, "timestamp_epoch": "1634913930.122659000", "display_filter": "frame.number == 17469", "udp_stream": 306 }, { "frame_number": 17791, "timestamp_epoch": "1634914005.091181000", "display_filter": "frame.number == 17791", "udp_stream": 321 }, { "frame_number": 19727, "timestamp_epoch": "1634914080.080250000", "display_filter": "frame.number == 19727", "udp_stream": 337 }, { "frame_number": 20660, "timestamp_epoch": "1634914125.091553000", "display_filter": "frame.number == 20660", "udp_stream": 342 }, { "frame_number": 22290, "timestamp_epoch": "1634914185.098419000", "display_filter": "frame.number == 22290", "udp_stream": 346 }, { "frame_number": 22624, "timestamp_epoch": "1634914275.140675000", "display_filter": "frame.number == 22624", "udp_stream": 365 }, { "frame_number": 22925, "timestamp_epoch": "1634914350.102554000", "display_filter": "frame.number == 22925", "udp_stream": 385 }, { "frame_number": 23091, "timestamp_epoch": "1634914410.104502000", "display_filter": "frame.number == 23091", "udp_stream": 393 }, { "frame_number": 23325, "timestamp_epoch": "1634914485.097975000", "display_filter": "frame.number == 23325", "udp_stream": 409 }, { "frame_number": 23752, "timestamp_epoch": "1634914560.107824000", "display_filter": "frame.number == 23752", "udp_stream": 426 }, { "frame_number": 23948, "timestamp_epoch": "1634914635.115197000", "display_filter": "frame.number == 23948", "udp_stream": 440 }, { "frame_number": 24140, "timestamp_epoch": "1634914695.104356000", "display_filter": "frame.number == 24140", "udp_stream": 451 }, { "frame_number": 24245, "timestamp_epoch": "1634914725.108946000", "display_filter": "frame.number == 24245", "udp_stream": 460 }, { "frame_number": 24379, "timestamp_epoch": "1634914773.172415000", "display_filter": "frame.number == 24379", "udp_stream": 466 }, { "frame_number": 24770, "timestamp_epoch": "1634914905.079895000", "display_filter": "frame.number == 24770", "udp_stream": 490 }, { "frame_number": 25957, "timestamp_epoch": "1634914950.088184000", "display_filter": "frame.number == 25957", "udp_stream": 503 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6b2231a24e978e420bf902cd", "type": "ipv4", "value": "131.253.33.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.957387000", "last_seen_epoch": "1634913189.957387000", "evidence": [ { "frame_number": 2971, "timestamp_epoch": "1634913189.957387000", "display_filter": "frame.number == 2971", "udp_stream": 125 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-093d8fa35292c3c04a81a32f", "type": "ipv4", "value": "140.82.49.12", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-b2b05f09d882881b8c456de4", "type": "ipv4", "value": "142.250.114.108", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.347911000", "last_seen_epoch": "1634915547.102831000", "evidence": [ { "frame_number": 44500, "timestamp_epoch": "1634915335.347911000", "display_filter": "frame.number == 44500", "udp_stream": 564 }, { "frame_number": 51452, "timestamp_epoch": "1634915547.102831000", "display_filter": "frame.number == 51452", "udp_stream": 661 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dccf622f0f0488ee34a26de2", "type": "ipv4", "value": "142.250.114.109", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915335.347911000", "last_seen_epoch": "1634915547.102831000", "evidence": [ { "frame_number": 44500, "timestamp_epoch": "1634915335.347911000", "display_filter": "frame.number == 44500", "udp_stream": 564 }, { "frame_number": 51452, "timestamp_epoch": "1634915547.102831000", "display_filter": "frame.number == 51452", "udp_stream": 661 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a89be12d09fc42e0ebf3b843", "type": "ipv4", "value": "142.250.114.28", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915301.536026000", "last_seen_epoch": "1634916241.962512000", "evidence": [ { "frame_number": 43089, "timestamp_epoch": "1634915301.536026000", "display_filter": "frame.number == 43089", "udp_stream": 552 }, { "frame_number": 60832, "timestamp_epoch": "1634916241.962512000", "display_filter": "frame.number == 60832", "udp_stream": 770 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-142039077a04e2be8c0bf1c0", "type": "ipv4", "value": "159.127.40.144", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918066.250031000", "last_seen_epoch": "1634918066.882943000", "evidence": [ { "frame_number": 80439, "timestamp_epoch": "1634918066.250031000", "display_filter": "frame.number == 80439", "udp_stream": 1033 }, { "frame_number": 80451, "timestamp_epoch": "1634918066.495120000", "display_filter": "frame.number == 80451", "udp_stream": 1034 }, { "frame_number": 80481, "timestamp_epoch": "1634918066.882943000", "display_filter": "frame.number == 80481", "udp_stream": 1035 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-29ad1ecc233f7db9beb7878a", "type": "ipv4", "value": "162.210.220.137", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-e6788eeb18165a7dc73aa203", "type": "ipv4", "value": "167.248.117.81", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-2e7d180bcd8f9eca68c91568", "type": "ipv4", "value": "168.196.133.84", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917014.998659000", "last_seen_epoch": "1634917014.998659000", "evidence": [ { "frame_number": 68538, "timestamp_epoch": "1634917014.998659000", "display_filter": "frame.number == 68538", "udp_stream": 909 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b1eb37e496fbce3715b0078c", "type": "ipv4", "value": "172.67.139.101", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913395.641241000", "last_seen_epoch": "1634913395.641241000", "evidence": [ { "frame_number": 6747, "timestamp_epoch": "1634913395.641241000", "display_filter": "frame.number == 6747", "udp_stream": 215 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-877d97e134832bec387863c9", "type": "ipv4", "value": "172.67.150.172", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913346.586626000", "last_seen_epoch": "1634913346.586626000", "evidence": [ { "frame_number": 6325, "timestamp_epoch": "1634913346.586626000", "display_filter": "frame.number == 6325", "udp_stream": 191 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8231ab43a66dbeb15e290150", "type": "ipv4", "value": "173.223.109.212", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913224.789705000", "last_seen_epoch": "1634913273.648646000", "evidence": [ { "frame_number": 3879, "timestamp_epoch": "1634913224.789705000", "display_filter": "frame.number == 3879", "udp_stream": 144 }, { "frame_number": 5251, "timestamp_epoch": "1634913264.335970000", "display_filter": "frame.number == 5251", "udp_stream": 172 }, { "frame_number": 5376, "timestamp_epoch": "1634913273.648646000", "display_filter": "frame.number == 5376", "udp_stream": 175 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-366801337be288969e09dc97", "type": "ipv4", "value": "173.249.53.15", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916461.695322000", "last_seen_epoch": "1634916461.695322000", "evidence": [ { "frame_number": 64421, "timestamp_epoch": "1634916461.695322000", "display_filter": "frame.number == 64421", "udp_stream": 823 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-67bae5da12f841f40024ab73", "type": "ipv4", "value": "173.255.233.87", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3c07d4f9a09440d60fdf6e9c", "type": "ipv4", "value": "178.23.190.8", "roles": [ "http-host", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913428.775164000", "last_seen_epoch": "1634913428.775164000", "evidence": [ { "frame_number": 9651, "timestamp_epoch": "1634913428.775164000", "display_filter": "frame.number == 9651", "tcp_stream": 257 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cca7a268e22ef54e07195479", "type": "ipv4", "value": "180.149.244.81", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917217.516688000", "last_seen_epoch": "1634917217.516688000", "evidence": [ { "frame_number": 69988, "timestamp_epoch": "1634917217.516688000", "display_filter": "frame.number == 69988", "udp_stream": 936 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fba4dd0db25262a411adc0a5", "type": "ipv4", "value": "183.61.185.83", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917054.536701000", "last_seen_epoch": "1634917054.536701000", "evidence": [ { "frame_number": 68863, "timestamp_epoch": "1634917054.536701000", "display_filter": "frame.number == 68863", "udp_stream": 915 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fca08fd145fc96e48a7967b6", "type": "ipv4", "value": "187.250.109.250", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-7b2d8057ac96ac6b5cb18c89", "type": "ipv4", "value": "189.210.115.207", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-58318b63f2312d78bee46926", "type": "ipv4", "value": "190.117.91.214", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-626243db63a082b4a1f04f5a", "type": "ipv4", "value": "190.14.37.244", "roles": [ "http-host", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913421.654401000", "last_seen_epoch": "1634913421.654401000", "evidence": [ { "frame_number": 7250, "timestamp_epoch": "1634913421.654401000", "display_filter": "frame.number == 7250", "tcp_stream": 254 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d18fd4d4cb24d9dfda5b27d2", "type": "ipv4", "value": "192.185.57.27", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916150.782954000", "last_seen_epoch": "1634916150.782954000", "evidence": [ { "frame_number": 59876, "timestamp_epoch": "1634916150.782954000", "display_filter": "frame.number == 59876", "udp_stream": 756 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9bb856f0a9b33f1f966214e2", "type": "ipv4", "value": "193.70.18.144", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915374.223619000", "last_seen_epoch": "1634918468.197715000", "evidence": [ { "frame_number": 45328, "timestamp_epoch": "1634915374.223619000", "display_filter": "frame.number == 45328", "udp_stream": 573 }, { "frame_number": 49394, "timestamp_epoch": "1634915492.456666000", "display_filter": "frame.number == 49394", "udp_stream": 640 }, { "frame_number": 50913, "timestamp_epoch": "1634915529.455777000", "display_filter": "frame.number == 50913", "udp_stream": 648 }, { "frame_number": 51821, "timestamp_epoch": "1634915579.753138000", "display_filter": "frame.number == 51821", "udp_stream": 673 }, { "frame_number": 54431, "timestamp_epoch": "1634915647.306081000", "display_filter": "frame.number == 54431", "udp_stream": 677 }, { "frame_number": 55850, "timestamp_epoch": "1634915788.989651000", "display_filter": "frame.number == 55850", "udp_stream": 690 }, { "frame_number": 56721, "timestamp_epoch": "1634915884.889335000", "display_filter": "frame.number == 56721", "udp_stream": 707 }, { "frame_number": 57939, "timestamp_epoch": "1634915984.768572000", "display_filter": "frame.number == 57939", "udp_stream": 718 }, { "frame_number": 58946, "timestamp_epoch": "1634916080.627397000", "display_filter": "frame.number == 58946", "udp_stream": 735 }, { "frame_number": 59513, "timestamp_epoch": "1634916117.969330000", "display_filter": "frame.number == 59513", "udp_stream": 744 }, { "frame_number": 60185, "timestamp_epoch": "1634916165.251220000", "display_filter": "frame.number == 60185", "udp_stream": 759 }, { "frame_number": 61174, "timestamp_epoch": "1634916296.118791000", "display_filter": "frame.number == 61174", "udp_stream": 777 }, { "frame_number": 61182, "timestamp_epoch": "1634916296.419248000", "display_filter": "frame.number == 61182", "udp_stream": 778 }, { "frame_number": 69209, "timestamp_epoch": "1634917109.702372000", "display_filter": "frame.number == 69209", "udp_stream": 925 }, { "frame_number": 69531, "timestamp_epoch": "1634917150.663411000", "display_filter": "frame.number == 69531", "udp_stream": 932 }, { "frame_number": 71458, "timestamp_epoch": "1634917329.864858000", "display_filter": "frame.number == 71458", "udp_stream": 944 }, { "frame_number": 72038, "timestamp_epoch": "1634917373.592036000", "display_filter": "frame.number == 72038", "udp_stream": 954 }, { "frame_number": 75112, "timestamp_epoch": "1634917531.441008000", "display_filter": "frame.number == 75112", "udp_stream": 978 }, { "frame_number": 75745, "timestamp_epoch": "1634917556.072346000", "display_filter": "frame.number == 75745", "udp_stream": 987 }, { "frame_number": 76829, "timestamp_epoch": "1634917715.511717000", "display_filter": "frame.number == 76829", "udp_stream": 1015 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3ca5160dffe1dd5fd6934e2d", "type": "ipv4", "value": "194.15.112.173", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-f8b58534591a420aa9370119", "type": "ipv4", "value": "194.36.191.35", "roles": [ "http-host", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913426.801894000", "last_seen_epoch": "1634913426.801894000", "evidence": [ { "frame_number": 8450, "timestamp_epoch": "1634913426.801894000", "display_filter": "frame.number == 8450", "tcp_stream": 256 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-079c9ca4bd459ff6f5caab8f", "type": "ipv4", "value": "197.221.10.57", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915616.071020000", "last_seen_epoch": "1634915616.071020000", "evidence": [ { "frame_number": 53956, "timestamp_epoch": "1634915616.071020000", "display_filter": "frame.number == 53956", "udp_stream": 674 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4e046cdb29037b23c26ca01c", "type": "ipv4", "value": "197.242.67.121", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915872.519220000", "last_seen_epoch": "1634915872.519220000", "evidence": [ { "frame_number": 56655, "timestamp_epoch": "1634915872.519220000", "display_filter": "frame.number == 56655", "udp_stream": 705 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-62c6af723996c1e4fb377a3f", "type": "ipv4", "value": "197.97.195.226", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916530.966581000", "last_seen_epoch": "1634918459.527553000", "evidence": [ { "frame_number": 65028, "timestamp_epoch": "1634916530.966581000", "display_filter": "frame.number == 65028", "udp_stream": 827 }, { "frame_number": 83363, "timestamp_epoch": "1634918459.527553000", "display_filter": "frame.number == 83363", "udp_stream": 1066 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7c12ec52f4e391581c383656", "type": "ipv4", "value": "198.136.61.225", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913576.014453000", "last_seen_epoch": "1634913576.014453000", "evidence": [ { "frame_number": 10932, "timestamp_epoch": "1634913576.014453000", "display_filter": "frame.number == 10932", "udp_stream": 231 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-337c93792f977303be2be92f", "type": "ipv4", "value": "198.50.182.64", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913608.680143000", "last_seen_epoch": "1634913608.680143000", "evidence": [ { "frame_number": 11038, "timestamp_epoch": "1634913608.680143000", "display_filter": "frame.number == 11038", "udp_stream": 232 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c4eb8aba6ab84a4744b4f156", "type": "ipv4", "value": "2.222.167.138", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-f31d061c6389ef52d29e6193", "type": "ipv4", "value": "20.140.56.70", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.151253000", "last_seen_epoch": "1634913244.151253000", "evidence": [ { "frame_number": 4651, "timestamp_epoch": "1634913244.151253000", "display_filter": "frame.number == 4651", "udp_stream": 164 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9ef28cf3e1795dbe42959b0d", "type": "ipv4", "value": "20.189.173.12", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913184.621165000", "last_seen_epoch": "1634913186.043617000", "evidence": [ { "frame_number": 2697, "timestamp_epoch": "1634913184.621165000", "display_filter": "frame.number == 2697", "udp_stream": 115 }, { "frame_number": 2849, "timestamp_epoch": "1634913186.043617000", "display_filter": "frame.number == 2849", "udp_stream": 117 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ba741fca701b9a7b02a54008", "type": "ipv4", "value": "20.189.173.7", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913064.812497000", "last_seen_epoch": "1634913064.812497000", "evidence": [ { "frame_number": 716, "timestamp_epoch": "1634913064.812497000", "display_filter": "frame.number == 716", "udp_stream": 31 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-77ab5007073d1e96c03a5986", "type": "ipv4", "value": "20.190.157.11", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a8f275cb783d9e8be2f25012", "type": "ipv4", "value": "20.190.4.251", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.901806000", "last_seen_epoch": "1634913244.901806000", "evidence": [ { "frame_number": 4817, "timestamp_epoch": "1634913244.901806000", "display_filter": "frame.number == 4817", "udp_stream": 165 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a2d959e3ca2c4f7226885e14", "type": "ipv4", "value": "20.42.4.116", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913189.665089000", "last_seen_epoch": "1634913189.665089000", "evidence": [ { "frame_number": 2929, "timestamp_epoch": "1634913189.665089000", "display_filter": "frame.number == 2929", "udp_stream": 120 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0332ed672462514208a91669", "type": "ipv4", "value": "20.44.10.123", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913125.914432000", "last_seen_epoch": "1634917649.092285000", "evidence": [ { "frame_number": 1608, "timestamp_epoch": "1634913125.914432000", "display_filter": "frame.number == 1608", "udp_stream": 69 }, { "frame_number": 7306, "timestamp_epoch": "1634913422.859470000", "display_filter": "frame.number == 7306", "udp_stream": 217 }, { "frame_number": 76411, "timestamp_epoch": "1634917618.132695000", "display_filter": "frame.number == 76411", "udp_stream": 999 }, { "frame_number": 76670, "timestamp_epoch": "1634917649.092285000", "display_filter": "frame.number == 76670", "udp_stream": 1007 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2819d886bbbb198f148a2a9a", "type": "ipv4", "value": "20.50.80.210", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915818.130774000", "last_seen_epoch": "1634915849.071661000", "evidence": [ { "frame_number": 56078, "timestamp_epoch": "1634915818.130774000", "display_filter": "frame.number == 56078", "udp_stream": 695 }, { "frame_number": 56389, "timestamp_epoch": "1634915849.071661000", "display_filter": "frame.number == 56389", "udp_stream": 701 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4472cefd9af484508c400c21", "type": "ipv4", "value": "20.69.137.228", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913191.727556000", "last_seen_epoch": "1634913245.635178000", "evidence": [ { "frame_number": 3185, "timestamp_epoch": "1634913191.727556000", "display_filter": "frame.number == 3185", "udp_stream": 130 }, { "frame_number": 3805, "timestamp_epoch": "1634913219.965690000", "display_filter": "frame.number == 3805", "udp_stream": 141 }, { "frame_number": 5112, "timestamp_epoch": "1634913245.635178000", "display_filter": "frame.number == 5112", "udp_stream": 170 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2333bf5372c2248be18c07fd", "type": "ipv4", "value": "20.83.81.162", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913661.723929000", "last_seen_epoch": "1634913753.568654000", "evidence": [ { "frame_number": 11164, "timestamp_epoch": "1634913661.723929000", "display_filter": "frame.number == 11164", "udp_stream": 237 }, { "frame_number": 11621, "timestamp_epoch": "1634913722.624343000", "display_filter": "frame.number == 11621", "udp_stream": 259 }, { "frame_number": 13322, "timestamp_epoch": "1634913753.568654000", "display_filter": "frame.number == 13322", "udp_stream": 271 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9554a9f2ad89e327f9a412a1", "type": "ipv4", "value": "201.111.144.72", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-a8b12a08314067c7b28e3764", "type": "ipv4", "value": "201.137.10.225", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-0a964f74a700632bf22aa82f", "type": "ipv4", "value": "204.79.197.200", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.645501000", "last_seen_epoch": "1634918060.763284000", "evidence": [ { "frame_number": 2928, "timestamp_epoch": "1634913189.645501000", "display_filter": "frame.number == 2928", "udp_stream": 119 }, { "frame_number": 3666, "timestamp_epoch": "1634913217.547326000", "display_filter": "frame.number == 3666", "udp_stream": 138 }, { "frame_number": 4439, "timestamp_epoch": "1634913243.673512000", "display_filter": "frame.number == 4439", "udp_stream": 153 }, { "frame_number": 5212, "timestamp_epoch": "1634913261.839505000", "display_filter": "frame.number == 5212", "udp_stream": 171 }, { "frame_number": 5573, "timestamp_epoch": "1634913292.333084000", "display_filter": "frame.number == 5573", "udp_stream": 179 }, { "frame_number": 16328, "timestamp_epoch": "1634913884.626038000", "display_filter": "frame.number == 16328", "udp_stream": 294 }, { "frame_number": 16355, "timestamp_epoch": "1634913885.075636000", "display_filter": "frame.number == 16355", "udp_stream": 296 }, { "frame_number": 58954, "timestamp_epoch": "1634916080.833762000", "display_filter": "frame.number == 58954", "udp_stream": 736 }, { "frame_number": 72061, "timestamp_epoch": "1634917374.725026000", "display_filter": "frame.number == 72061", "udp_stream": 955 }, { "frame_number": 79283, "timestamp_epoch": "1634918060.763284000", "display_filter": "frame.number == 79283", "udp_stream": 1030 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7f6ddb3e7520fd906a8f68ba", "type": "ipv4", "value": "204.79.197.203", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913187.444782000", "last_seen_epoch": "1634913241.440038000", "evidence": [ { "frame_number": 2902, "timestamp_epoch": "1634913187.444782000", "display_filter": "frame.number == 2902", "udp_stream": 118 }, { "frame_number": 3632, "timestamp_epoch": "1634913214.046853000", "display_filter": "frame.number == 3632", "udp_stream": 137 }, { "frame_number": 4400, "timestamp_epoch": "1634913241.440038000", "display_filter": "frame.number == 4400", "udp_stream": 152 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-18cccc9c81a27f97f1528a29", "type": "ipv4", "value": "204.79.197.219", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913345.985706000", "last_seen_epoch": "1634913345.985706000", "evidence": [ { "frame_number": 6224, "timestamp_epoch": "1634913345.985706000", "display_filter": "frame.number == 6224", "udp_stream": 189 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-682452e45c45a1090fc4860a", "type": "ipv4", "value": "204.79.197.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913244.108653000", "last_seen_epoch": "1634913244.108653000", "evidence": [ { "frame_number": 4631, "timestamp_epoch": "1634913244.108653000", "display_filter": "frame.number == 4631", "udp_stream": 161 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c0272e38e45075deee207b79", "type": "ipv4", "value": "207.246.112.221", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-bce61f1211b8f38ef1f51781", "type": "ipv4", "value": "208.180.40.68", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918076.969050000", "last_seen_epoch": "1634918076.969050000", "evidence": [ { "frame_number": 80688, "timestamp_epoch": "1634918076.969050000", "display_filter": "frame.number == 80688", "udp_stream": 1038 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-830f5ef1719b8796bc6dfcb5", "type": "ipv4", "value": "208.68.106.6", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915558.288115000", "last_seen_epoch": "1634915558.288115000", "evidence": [ { "frame_number": 51639, "timestamp_epoch": "1634915558.288115000", "display_filter": "frame.number == 51639", "udp_stream": 667 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e5ba8e79912a7ac8fdc3310d", "type": "ipv4", "value": "209.203.34.199", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916698.559572000", "last_seen_epoch": "1634916698.559572000", "evidence": [ { "frame_number": 66176, "timestamp_epoch": "1634916698.559572000", "display_filter": "frame.number == 66176", "udp_stream": 843 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-caff82ed38aa75f73a9ff09f", "type": "ipv4", "value": "209.210.95.228", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-1e209e5b45a2c988d32d8cc7", "type": "ipv4", "value": "217.11.242.15", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915643.830713000", "last_seen_epoch": "1634915643.830713000", "evidence": [ { "frame_number": 54361, "timestamp_epoch": "1634915643.830713000", "display_filter": "frame.number == 54361", "udp_stream": 676 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1c21b0738411863cbd525f64", "type": "ipv4", "value": "217.11.242.6", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915643.830713000", "last_seen_epoch": "1634915643.830713000", "evidence": [ { "frame_number": 54361, "timestamp_epoch": "1634915643.830713000", "display_filter": "frame.number == 54361", "udp_stream": 676 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dd30d86fc88c6e7a0b0bc6dc", "type": "ipv4", "value": "217.11.242.81", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915643.830713000", "last_seen_epoch": "1634915643.830713000", "evidence": [ { "frame_number": 54361, "timestamp_epoch": "1634915643.830713000", "display_filter": "frame.number == 54361", "udp_stream": 676 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5a905a7d051c4249008edb75", "type": "ipv4", "value": "217.116.0.228", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917190.196662000", "last_seen_epoch": "1634917190.196662000", "evidence": [ { "frame_number": 69726, "timestamp_epoch": "1634917190.196662000", "display_filter": "frame.number == 69726", "udp_stream": 933 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a795b0710465b2c8f2efe661", "type": "ipv4", "value": "221.176.66.188", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916483.852171000", "last_seen_epoch": "1634916483.852171000", "evidence": [ { "frame_number": 64698, "timestamp_epoch": "1634916483.852171000", "display_filter": "frame.number == 64698", "udp_stream": 825 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e62b248e1fa2588daef80b2a", "type": "ipv4", "value": "223.29.248.111", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918112.495866000", "last_seen_epoch": "1634918112.495866000", "evidence": [ { "frame_number": 80885, "timestamp_epoch": "1634918112.495866000", "display_filter": "frame.number == 80885", "udp_stream": 1043 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5a45f6c621980fb233988e0d", "type": "ipv4", "value": "224.0.0.22", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-dfbfc4e33404ffe49fe393df", "type": "ipv4", "value": "224.0.0.251", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-9418b98b5403880a95ada103", "type": "ipv4", "value": "224.0.0.252", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-bd8f6578cb555eb66de5e770", "type": "ipv4", "value": "23.111.114.52", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-d5d4d36da5d0e5011ea4e87e", "type": "ipv4", "value": "23.21.76.7", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5a415cdeef1ff5c835921f18", "type": "ipv4", "value": "23.222.241.43", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918065.853495000", "last_seen_epoch": "1634918065.853495000", "evidence": [ { "frame_number": 80414, "timestamp_epoch": "1634918065.853495000", "display_filter": "frame.number == 80414", "udp_stream": 1032 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-56c866fecc72aee8ac40299e", "type": "ipv4", "value": "23.222.241.55", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634918065.853495000", "last_seen_epoch": "1634918065.853495000", "evidence": [ { "frame_number": 80414, "timestamp_epoch": "1634918065.853495000", "display_filter": "frame.number == 80414", "udp_stream": 1032 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8cff057e114cf58f735c5931", "type": "ipv4", "value": "23.23.138.107", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915298.389799000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-73641f39c334b07b50a06cae", "type": "ipv4", "value": "23.23.229.175", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915486.826878000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c39b11068cf7dd0ddce58257", "type": "ipv4", "value": "23.47.169.181", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913890.481288000", "last_seen_epoch": "1634913890.481288000", "evidence": [ { "frame_number": 17308, "timestamp_epoch": "1634913890.481288000", "display_filter": "frame.number == 17308", "udp_stream": 298 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-42589f54707c55c8f871ddc5", "type": "ipv4", "value": "23.47.50.172", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913274.533129000", "last_seen_epoch": "1634913274.533129000", "evidence": [ { "frame_number": 5439, "timestamp_epoch": "1634913274.533129000", "display_filter": "frame.number == 5439", "udp_stream": 177 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d96e3726632af252de448e77", "type": "ipv4", "value": "23.47.50.180", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913274.533129000", "last_seen_epoch": "1634913274.533129000", "evidence": [ { "frame_number": 5439, "timestamp_epoch": "1634913274.533129000", "display_filter": "frame.number == 5439", "udp_stream": 177 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cc763faf8815cc9a3d2ed4cf", "type": "ipv4", "value": "23.47.52.13", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913243.877808000", "last_seen_epoch": "1634913243.877808000", "evidence": [ { "frame_number": 4460, "timestamp_epoch": "1634913243.877808000", "display_filter": "frame.number == 4460", "udp_stream": 154 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a5c4821c762d8dcd7997dd17", "type": "ipv4", "value": "23.47.52.19", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913243.877808000", "last_seen_epoch": "1634913243.877808000", "evidence": [ { "frame_number": 4460, "timestamp_epoch": "1634913243.877808000", "display_filter": "frame.number == 4460", "udp_stream": 154 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7977a0550eafec06a8b54d07", "type": "ipv4", "value": "239.255.255.250", "roles": [ "http-host", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913117.132050000", "last_seen_epoch": "1634918558.727872000", "evidence": [ { "frame_number": 1387, "timestamp_epoch": "1634913117.132050000", "display_filter": "frame.number == 1387" }, { "frame_number": 1388, "timestamp_epoch": "1634913117.150434000", "display_filter": "frame.number == 1388" }, { "frame_number": 1406, "timestamp_epoch": "1634913117.376079000", "display_filter": "frame.number == 1406" }, { "frame_number": 1407, "timestamp_epoch": "1634913117.424672000", "display_filter": "frame.number == 1407" }, { "frame_number": 1422, "timestamp_epoch": "1634913117.542247000", "display_filter": "frame.number == 1422" }, { "frame_number": 1508, "timestamp_epoch": "1634913120.141815000", "display_filter": "frame.number == 1508" }, { "frame_number": 1509, "timestamp_epoch": "1634913120.142125000", "display_filter": "frame.number == 1509" }, { "frame_number": 1512, "timestamp_epoch": "1634913120.424227000", "display_filter": "frame.number == 1512" }, { "frame_number": 1513, "timestamp_epoch": "1634913120.454306000", "display_filter": "frame.number == 1513" }, { "frame_number": 1514, "timestamp_epoch": "1634913120.533908000", "display_filter": "frame.number == 1514" }, { "frame_number": 1519, "timestamp_epoch": "1634913123.142501000", "display_filter": "frame.number == 1519" }, { "frame_number": 1520, "timestamp_epoch": "1634913123.142903000", "display_filter": "frame.number == 1520" }, { "frame_number": 1521, "timestamp_epoch": "1634913123.537260000", "display_filter": "frame.number == 1521" }, { "frame_number": 1636, "timestamp_epoch": "1634913126.538098000", "display_filter": "frame.number == 1636" }, { "frame_number": 1637, "timestamp_epoch": "1634913129.548547000", "display_filter": "frame.number == 1637" }, { "frame_number": 1646, "timestamp_epoch": "1634913132.548982000", "display_filter": "frame.number == 1646" }, { "frame_number": 6222, "timestamp_epoch": "1634913345.915901000", "display_filter": "frame.number == 6222" }, { "frame_number": 6374, "timestamp_epoch": "1634913346.920570000", "display_filter": "frame.number == 6374" }, { "frame_number": 6428, "timestamp_epoch": "1634913347.935448000", "display_filter": "frame.number == 6428" }, { "frame_number": 6444, "timestamp_epoch": "1634913348.938407000", "display_filter": "frame.number == 6444" } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8db651b87ca36edd6764d34d", "type": "ipv4", "value": "24.231.209.2", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-f2a35f351aee8298ab7e0ddd", "type": "ipv4", "value": "255.255.255.255", "roles": [ "dns-answer", "network-endpoint" ], "is_private": true, "first_seen_epoch": "1634913194.082079000", "last_seen_epoch": "1634913194.082079000", "evidence": [ { "frame_number": 3242, "timestamp_epoch": "1634913194.082079000", "display_filter": "frame.number == 3242", "udp_stream": 127 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a85cc5209b9f19f5d7e322b7", "type": "ipv4", "value": "26.85.198.164", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913707.255910000", "last_seen_epoch": "1634914468.391909000", "evidence": [ { "frame_number": 11571, "timestamp_epoch": "1634913707.255910000", "display_filter": "frame.number == 11571", "udp_stream": 255 }, { "frame_number": 19690, "timestamp_epoch": "1634914070.897720000", "display_filter": "frame.number == 19690", "udp_stream": 336 }, { "frame_number": 22463, "timestamp_epoch": "1634914228.968942000", "display_filter": "frame.number == 22463", "udp_stream": 356 }, { "frame_number": 23260, "timestamp_epoch": "1634914468.391909000", "display_filter": "frame.number == 23260", "udp_stream": 406 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f9606713dc97b29d46cf01f3", "type": "ipv4", "value": "31.193.50.122", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916001.176536000", "last_seen_epoch": "1634916001.176536000", "evidence": [ { "frame_number": 58164, "timestamp_epoch": "1634916001.176536000", "display_filter": "frame.number == 58164", "udp_stream": 721 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-94236bc4fa617ee0447b995e", "type": "ipv4", "value": "31.193.50.2", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916001.176536000", "last_seen_epoch": "1634916001.176536000", "evidence": [ { "frame_number": 58164, "timestamp_epoch": "1634916001.176536000", "display_filter": "frame.number == 58164", "udp_stream": 721 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c38d21debee6a86014809671", "type": "ipv4", "value": "34.117.59.81", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634914507.544364000", "last_seen_epoch": "1634914507.544364000", "evidence": [ { "frame_number": 23556, "timestamp_epoch": "1634914507.544364000", "display_filter": "frame.number == 23556", "udp_stream": 415 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a0475f2ead463dcfc53f3e65", "type": "ipv4", "value": "34.120.119.232", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918067.295588000", "last_seen_epoch": "1634918067.295588000", "evidence": [ { "frame_number": 80508, "timestamp_epoch": "1634918067.295588000", "display_filter": "frame.number == 80508", "udp_stream": 1036 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-880fe815ed3f144038283647", "type": "ipv4", "value": "34.149.19.242", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-232f4b3e9d1dca6ee66bd0b4", "type": "ipv4", "value": "34.193.71.224", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915790.948301000", "last_seen_epoch": "1634915790.948301000", "evidence": [ { "frame_number": 55894, "timestamp_epoch": "1634915790.948301000", "display_filter": "frame.number == 55894", "udp_stream": 691 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fd352f0b10bfcf40d73849d3", "type": "ipv4", "value": "35.190.80.1", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913347.646483000", "last_seen_epoch": "1634913347.646483000", "evidence": [ { "frame_number": 6395, "timestamp_epoch": "1634913347.646483000", "display_filter": "frame.number == 6395", "udp_stream": 193 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b232062d957abb261f43207d", "type": "ipv4", "value": "37.0.10.22", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913296.292206000", "last_seen_epoch": "1634918503.387693000", "evidence": [ { "frame_number": 5643, "timestamp_epoch": "1634913296.292206000", "display_filter": "frame.number == 5643", "udp_stream": 181 }, { "frame_number": 11083, "timestamp_epoch": "1634913637.017648000", "display_filter": "frame.number == 11083", "udp_stream": 233 }, { "frame_number": 11100, "timestamp_epoch": "1634913641.488218000", "display_filter": "frame.number == 11100", "udp_stream": 235 }, { "frame_number": 11156, "timestamp_epoch": "1634913658.948540000", "display_filter": "frame.number == 11156", "udp_stream": 236 }, { "frame_number": 11240, "timestamp_epoch": "1634913663.282614000", "display_filter": "frame.number == 11240", "udp_stream": 239 }, { "frame_number": 11342, "timestamp_epoch": "1634913667.660268000", "display_filter": "frame.number == 11342", "udp_stream": 242 }, { "frame_number": 11520, "timestamp_epoch": "1634913685.005902000", "display_filter": "frame.number == 11520", "udp_stream": 248 }, { "frame_number": 11536, "timestamp_epoch": "1634913689.413549000", "display_filter": "frame.number == 11536", "udp_stream": 251 }, { "frame_number": 11544, "timestamp_epoch": "1634913693.798224000", "display_filter": "frame.number == 11544", "udp_stream": 252 }, { "frame_number": 11601, "timestamp_epoch": "1634913714.329369000", "display_filter": "frame.number == 11601", "udp_stream": 257 }, { "frame_number": 11612, "timestamp_epoch": "1634913718.748556000", "display_filter": "frame.number == 11612", "udp_stream": 258 }, { "frame_number": 11734, "timestamp_epoch": "1634913724.136789000", "display_filter": "frame.number == 11734", "udp_stream": 261 }, { "frame_number": 12444, "timestamp_epoch": "1634913741.546153000", "display_filter": "frame.number == 12444", "udp_stream": 266 }, { "frame_number": 12724, "timestamp_epoch": "1634913745.965159000", "display_filter": "frame.number == 12724", "udp_stream": 267 }, { "frame_number": 13034, "timestamp_epoch": "1634913750.511809000", "display_filter": "frame.number == 13034", "udp_stream": 270 }, { "frame_number": 14007, "timestamp_epoch": "1634913767.972288000", "display_filter": "frame.number == 14007", "udp_stream": 275 }, { "frame_number": 14293, "timestamp_epoch": "1634913772.439196000", "display_filter": "frame.number == 14293", "udp_stream": 276 }, { "frame_number": 14421, "timestamp_epoch": "1634913776.842208000", "display_filter": "frame.number == 14421", "udp_stream": 277 }, { "frame_number": 15278, "timestamp_epoch": "1634913794.192362000", "display_filter": "frame.number == 15278", "udp_stream": 280 }, { "frame_number": 15373, "timestamp_epoch": "1634913798.580555000", "display_filter": "frame.number == 15373", "udp_stream": 281 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1c0996468a227fd7d6b2c9bc", "type": "ipv4", "value": "37.208.181.198", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-0d885eaec6b3bf84d4aa01a4", "type": "ipv4", "value": "37.252.0.102", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-259cfd1d5ad0728807fe2cdf", "type": "ipv4", "value": "39.40.37.70", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-c9473c6e5fa19d136033f07a", "type": "ipv4", "value": "40.112.72.205", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913889.018084000", "last_seen_epoch": "1634913889.018084000", "evidence": [ { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d6054415e36172fbd8379f8a", "type": "ipv4", "value": "40.113.200.201", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913889.018084000", "last_seen_epoch": "1634913889.018084000", "evidence": [ { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-603582d87105eec5e1ba1db0", "type": "ipv4", "value": "40.126.28.11", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-586f0b5b0c723d990f1c8a56", "type": "ipv4", "value": "40.126.28.12", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915357.751768000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cc60bf49c30c1f6cec97ab06", "type": "ipv4", "value": "40.126.28.13", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915357.751768000", "last_seen_epoch": "1634915359.721078000", "evidence": [ { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-17994d5cc0af1e270b4d42d0", "type": "ipv4", "value": "40.126.28.14", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915357.751768000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-84a01a668f66f6f8efcb4336", "type": "ipv4", "value": "40.126.28.18", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634913244.943476000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6be0f06b352ebb61b6b47296", "type": "ipv4", "value": "40.126.28.19", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-09fb1d6912400928bb39f675", "type": "ipv4", "value": "40.126.28.20", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634913244.943476000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-10edb9d56f1c84f40dcc1e39", "type": "ipv4", "value": "40.126.28.21", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9b711ad5f2de67ad8e45e219", "type": "ipv4", "value": "40.126.28.22", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2694c6641a52ad0c3ecd7e58", "type": "ipv4", "value": "40.126.28.23", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915359.721078000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c68cbc7b250250a112e70d8e", "type": "ipv4", "value": "40.126.29.10", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3132c49b020f1caf71b2b161", "type": "ipv4", "value": "40.126.29.11", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634914986.243518000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-07d21612f556c2c428e5baa1", "type": "ipv4", "value": "40.126.29.12", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634914986.243518000", "last_seen_epoch": "1634915040.620571000", "evidence": [ { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3b77b8bff271702a72a50bbf", "type": "ipv4", "value": "40.126.29.13", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634915205.487980000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1e4a8d8d03693876103bc1a1", "type": "ipv4", "value": "40.126.29.14", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634914986.243518000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-29127a0f0acf45f8b6e0689e", "type": "ipv4", "value": "40.126.29.15", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5d22434da08c9516122ff403", "type": "ipv4", "value": "40.126.29.5", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634915205.487980000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4bea79b6a7cb19fa2e84be09", "type": "ipv4", "value": "40.126.29.7", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-92fa72b7eb7b535769ddbb0c", "type": "ipv4", "value": "40.126.29.8", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8622a69c8adc37d846ec8a8f", "type": "ipv4", "value": "40.126.29.9", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913413.003824000", "last_seen_epoch": "1634917491.091952000", "evidence": [ { "frame_number": 7217, "timestamp_epoch": "1634913413.003824000", "display_filter": "frame.number == 7217", "udp_stream": 216 }, { "frame_number": 26151, "timestamp_epoch": "1634914986.243518000", "display_filter": "frame.number == 26151", "udp_stream": 505 }, { "frame_number": 29180, "timestamp_epoch": "1634915013.198041000", "display_filter": "frame.number == 29180", "udp_stream": 516 }, { "frame_number": 29343, "timestamp_epoch": "1634915040.620571000", "display_filter": "frame.number == 29343", "udp_stream": 518 }, { "frame_number": 30182, "timestamp_epoch": "1634915205.487980000", "display_filter": "frame.number == 30182", "udp_stream": 532 }, { "frame_number": 74946, "timestamp_epoch": "1634917491.091952000", "display_filter": "frame.number == 74946", "udp_stream": 972 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4e2a28b2cd42c05e2ac0aaa4", "type": "ipv4", "value": "40.126.7.32", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913190.962666000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 3070, "timestamp_epoch": "1634913190.962666000", "display_filter": "frame.number == 3070", "udp_stream": 129 }, { "frame_number": 3671, "timestamp_epoch": "1634913218.673067000", "display_filter": "frame.number == 3671", "udp_stream": 140 }, { "frame_number": 4819, "timestamp_epoch": "1634913244.943476000", "display_filter": "frame.number == 4819", "udp_stream": 166 }, { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a436be178193783df64434c3", "type": "ipv4", "value": "40.126.7.35", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915357.751768000", "last_seen_epoch": "1634915472.313170000", "evidence": [ { "frame_number": 45019, "timestamp_epoch": "1634915357.751768000", "display_filter": "frame.number == 45019", "udp_stream": 570 }, { "frame_number": 45133, "timestamp_epoch": "1634915359.721078000", "display_filter": "frame.number == 45133", "udp_stream": 572 }, { "frame_number": 48403, "timestamp_epoch": "1634915472.313170000", "display_filter": "frame.number == 48403", "udp_stream": 628 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a89b0991f21024cd2391345d", "type": "ipv4", "value": "40.76.4.15", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913889.018084000", "last_seen_epoch": "1634913889.018084000", "evidence": [ { "frame_number": 17274, "timestamp_epoch": "1634913889.018084000", "display_filter": "frame.number == 17274", "udp_stream": 297 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ea463aefdd708135f6df93fd", "type": "ipv4", "value": "40.90.64.59", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913293.357296000", "last_seen_epoch": "1634913293.357296000", "evidence": [ { "frame_number": 5605, "timestamp_epoch": "1634913293.357296000", "display_filter": "frame.number == 5605", "udp_stream": 180 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-39b870066657ecf9241c843f", "type": "ipv4", "value": "40.90.64.61", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913684.191184000", "last_seen_epoch": "1634913684.191184000", "evidence": [ { "frame_number": 11488, "timestamp_epoch": "1634913684.191184000", "display_filter": "frame.number == 11488", "udp_stream": 247 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c1c0a437d8bce872abe5da9b", "type": "ipv4", "value": "40.90.64.98", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913232.720993000", "last_seen_epoch": "1634913232.720993000", "evidence": [ { "frame_number": 4026, "timestamp_epoch": "1634913232.720993000", "display_filter": "frame.number == 4026", "udp_stream": 147 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-092e133012ebf422c8caad18", "type": "ipv4", "value": "40.97.120.130", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634918327.681047000", "last_seen_epoch": "1634918327.681047000", "evidence": [ { "frame_number": 82055, "timestamp_epoch": "1634918327.681047000", "display_filter": "frame.number == 82055", "udp_stream": 604 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2407f80b76186821ec4bf131", "type": "ipv4", "value": "40.97.120.146", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917221.491585000", "last_seen_epoch": "1634917828.661276000", "evidence": [ { "frame_number": 70034, "timestamp_epoch": "1634917221.491585000", "display_filter": "frame.number == 70034", "udp_stream": 937 }, { "frame_number": 78073, "timestamp_epoch": "1634917828.660346000", "display_filter": "frame.number == 78073", "udp_stream": 1018 }, { "frame_number": 78075, "timestamp_epoch": "1634917828.660958000", "display_filter": "frame.number == 78075", "udp_stream": 1018 }, { "frame_number": 78076, "timestamp_epoch": "1634917828.661276000", "display_filter": "frame.number == 78076", "udp_stream": 1018 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b4b87de7e4f9aca4ca986f3d", "type": "ipv4", "value": "40.97.120.178", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634918338.028376000", "last_seen_epoch": "1634918338.028376000", "evidence": [ { "frame_number": 82154, "timestamp_epoch": "1634918338.028376000", "display_filter": "frame.number == 82154", "udp_stream": 1054 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e410dd4ae6ac94a7dc14e0ee", "type": "ipv4", "value": "40.97.120.194", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917828.660346000", "last_seen_epoch": "1634918299.158717000", "evidence": [ { "frame_number": 78073, "timestamp_epoch": "1634917828.660346000", "display_filter": "frame.number == 78073", "udp_stream": 1018 }, { "frame_number": 78075, "timestamp_epoch": "1634917828.660958000", "display_filter": "frame.number == 78075", "udp_stream": 1018 }, { "frame_number": 78076, "timestamp_epoch": "1634917828.661276000", "display_filter": "frame.number == 78076", "udp_stream": 1018 }, { "frame_number": 81786, "timestamp_epoch": "1634918299.158717000", "display_filter": "frame.number == 81786", "udp_stream": 1053 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-21bd3ec260787987d77088b3", "type": "ipv4", "value": "40.97.120.210", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917455.719712000", "last_seen_epoch": "1634917455.719712000", "evidence": [ { "frame_number": 74444, "timestamp_epoch": "1634917455.719712000", "display_filter": "frame.number == 74444", "udp_stream": 962 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9c25439e2c6fba46646896a2", "type": "ipv4", "value": "40.97.120.226", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916147.532603000", "last_seen_epoch": "1634917330.593824000", "evidence": [ { "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "display_filter": "frame.number == 59769", "udp_stream": 753 }, { "frame_number": 65074, "timestamp_epoch": "1634916539.281605000", "display_filter": "frame.number == 65074", "udp_stream": 828 }, { "frame_number": 71478, "timestamp_epoch": "1634917330.593824000", "display_filter": "frame.number == 71478", "udp_stream": 945 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0fc906b86f075c9372fc5b0b", "type": "ipv4", "value": "40.97.120.242", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916776.538279000", "last_seen_epoch": "1634916776.538279000", "evidence": [ { "frame_number": 66581, "timestamp_epoch": "1634916776.538279000", "display_filter": "frame.number == 66581", "udp_stream": 867 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-022318915607a1c1736e57c3", "type": "ipv4", "value": "40.97.120.50", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634918357.613079000", "last_seen_epoch": "1634918357.613079000", "evidence": [ { "frame_number": 82399, "timestamp_epoch": "1634918357.613079000", "display_filter": "frame.number == 82399", "udp_stream": 1056 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4d13ec3c1b3e729735b208b8", "type": "ipv4", "value": "40.97.120.66", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915204.330340000", "last_seen_epoch": "1634918375.217778000", "evidence": [ { "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "display_filter": "frame.number == 30151", "udp_stream": 531 }, { "frame_number": 82536, "timestamp_epoch": "1634918375.217778000", "display_filter": "frame.number == 82536", "udp_stream": 1057 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c5a40ef0b8baa8f44d1d1a63", "type": "ipv4", "value": "40.97.121.18", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915685.543598000", "last_seen_epoch": "1634918338.028376000", "evidence": [ { "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "display_filter": "frame.number == 54922", "udp_stream": 679 }, { "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "display_filter": "frame.number == 58329", "udp_stream": 725 }, { "frame_number": 66581, "timestamp_epoch": "1634916776.538279000", "display_filter": "frame.number == 66581", "udp_stream": 867 }, { "frame_number": 82154, "timestamp_epoch": "1634918338.028376000", "display_filter": "frame.number == 82154", "udp_stream": 1054 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2ab1c7eab68ade4729892081", "type": "ipv4", "value": "40.97.121.2", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915655.894902000", "last_seen_epoch": "1634918382.817371000", "evidence": [ { "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "display_filter": "frame.number == 54596", "udp_stream": 678 }, { "frame_number": 73507, "timestamp_epoch": "1634917417.580238000", "display_filter": "frame.number == 73507", "udp_stream": 959 }, { "frame_number": 74444, "timestamp_epoch": "1634917455.719712000", "display_filter": "frame.number == 74444", "udp_stream": 962 }, { "frame_number": 82649, "timestamp_epoch": "1634918382.817371000", "display_filter": "frame.number == 82649", "udp_stream": 1058 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6793fb370bbb9415d44ede97", "type": "ipv4", "value": "40.97.121.34", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915685.543598000", "last_seen_epoch": "1634917417.580238000", "evidence": [ { "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "display_filter": "frame.number == 54922", "udp_stream": 679 }, { "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "display_filter": "frame.number == 58329", "udp_stream": 725 }, { "frame_number": 70034, "timestamp_epoch": "1634917221.491585000", "display_filter": "frame.number == 70034", "udp_stream": 937 }, { "frame_number": 73507, "timestamp_epoch": "1634917417.580238000", "display_filter": "frame.number == 73507", "udp_stream": 959 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-80beabc3e2320127ef4c0024", "type": "ipv4", "value": "40.97.199.114", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916015.150564000", "last_seen_epoch": "1634918375.217778000", "evidence": [ { "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "display_filter": "frame.number == 58329", "udp_stream": 725 }, { "frame_number": 81446, "timestamp_epoch": "1634918255.159839000", "display_filter": "frame.number == 81446", "udp_stream": 1051 }, { "frame_number": 82536, "timestamp_epoch": "1634918375.217778000", "display_filter": "frame.number == 82536", "udp_stream": 1057 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2b576839c74bd2e5bcf17fef", "type": "ipv4", "value": "40.97.212.18", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916147.532603000", "last_seen_epoch": "1634918299.158717000", "evidence": [ { "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "display_filter": "frame.number == 59769", "udp_stream": 753 }, { "frame_number": 65074, "timestamp_epoch": "1634916539.281605000", "display_filter": "frame.number == 65074", "udp_stream": 828 }, { "frame_number": 68499, "timestamp_epoch": "1634917013.187179000", "display_filter": "frame.number == 68499", "udp_stream": 908 }, { "frame_number": 81786, "timestamp_epoch": "1634918299.158717000", "display_filter": "frame.number == 81786", "udp_stream": 1053 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-78cc8d4f4c19aa10ad1609db", "type": "ipv4", "value": "40.97.212.2", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916776.538279000", "last_seen_epoch": "1634918586.460066000", "evidence": [ { "frame_number": 66581, "timestamp_epoch": "1634916776.538279000", "display_filter": "frame.number == 66581", "udp_stream": 867 }, { "frame_number": 84427, "timestamp_epoch": "1634918586.460066000", "display_filter": "frame.number == 84427", "udp_stream": 1087 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-794cfb45eaf54c4501b371db", "type": "ipv4", "value": "40.97.92.34", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917455.719712000", "last_seen_epoch": "1634917455.719712000", "evidence": [ { "frame_number": 74444, "timestamp_epoch": "1634917455.719712000", "display_filter": "frame.number == 74444", "udp_stream": 962 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d36dd0236bbdc26e0f7c86b1", "type": "ipv4", "value": "40.97.96.2", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915744.596617000", "last_seen_epoch": "1634917122.261173000", "evidence": [ { "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "display_filter": "frame.number == 55550", "udp_stream": 685 }, { "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "display_filter": "frame.number == 55551", "udp_stream": 685 }, { "frame_number": 69334, "timestamp_epoch": "1634917122.261173000", "display_filter": "frame.number == 69334", "udp_stream": 927 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5ab249379be2dfc45d85e616", "type": "ipv4", "value": "41.86.105.101", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917433.086568000", "last_seen_epoch": "1634917433.086568000", "evidence": [ { "frame_number": 73621, "timestamp_epoch": "1634917433.086568000", "display_filter": "frame.number == 73621", "udp_stream": 961 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-774d0bda0bfa2ce92ef27339", "type": "ipv4", "value": "45.153.241.142", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-bf6d3bd46afcf5c7f5f732ce", "type": "ipv4", "value": "45.33.53.153", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-adecb484f603b8d2d2c694e7", "type": "ipv4", "value": "45.46.53.140", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-0334847e728b72935bd8735c", "type": "ipv4", "value": "45.79.114.202", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b82e2f7fa4b7f1516dd979db", "type": "ipv4", "value": "45.79.170.99", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cafeaa3e7ec9bba93210e8c9", "type": "ipv4", "value": "45.79.71.155", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7079c31bd02aba2903b6ee17", "type": "ipv4", "value": "47.151.181.188", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-540c3b2fb92cf01d858999e3", "type": "ipv4", "value": "47.22.148.6", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-adea80b1c626e81944156236", "type": "ipv4", "value": "47.40.196.233", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-831addfc62877e2392594133", "type": "ipv4", "value": "50.16.216.118", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915332.122085000", "last_seen_epoch": "1634915375.023270000", "evidence": [ { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e045a9a92ecf197792ea3e5c", "type": "ipv4", "value": "50.16.235.219", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915486.826878000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-aa87b7ad5c377ae19bce3e22", "type": "ipv4", "value": "50.16.239.65", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915486.826878000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b083974f21be746dba3b9b08", "type": "ipv4", "value": "50.17.218.95", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3ba0a2364588c26d19c929d4", "type": "ipv4", "value": "50.17.226.156", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915375.023270000", "last_seen_epoch": "1634915486.826878000", "evidence": [ { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2f3017cadaf0f4af1904eaa0", "type": "ipv4", "value": "50.19.104.221", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915332.122085000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4c34cf101da40e40a0c2a89e", "type": "ipv4", "value": "50.19.250.64", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915332.122085000", "last_seen_epoch": "1634915375.023270000", "evidence": [ { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-694eb2669e6fb4dde2ce9720", "type": "ipv4", "value": "50.19.81.52", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915332.122085000", "last_seen_epoch": "1634915332.122085000", "evidence": [ { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-69d2030c79e0f691ae701d17", "type": "ipv4", "value": "50.19.92.180", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2b96ec45ca4075a64595e53a", "type": "ipv4", "value": "50.194.160.233", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-1d6993ef8744c324e888b7eb", "type": "ipv4", "value": "50.77.156.245", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918206.876873000", "last_seen_epoch": "1634918206.876873000", "evidence": [ { "frame_number": 81371, "timestamp_epoch": "1634918206.876873000", "display_filter": "frame.number == 81371", "udp_stream": 1049 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-26783ee02aef0adc1aad672b", "type": "ipv4", "value": "51.132.193.105", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913230.665301000", "last_seen_epoch": "1634913240.500255000", "evidence": [ { "frame_number": 3943, "timestamp_epoch": "1634913230.665301000", "display_filter": "frame.number == 3943", "udp_stream": 146 }, { "frame_number": 4359, "timestamp_epoch": "1634913240.500255000", "display_filter": "frame.number == 4359", "udp_stream": 150 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-303f877dbe99118913b1c3e3", "type": "ipv4", "value": "51.158.108.203", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-8430863918d077de0a5b8795", "type": "ipv4", "value": "52.109.2.1", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915197.737111000", "last_seen_epoch": "1634915197.737111000", "evidence": [ { "frame_number": 30061, "timestamp_epoch": "1634915197.737111000", "display_filter": "frame.number == 30061", "udp_stream": 530 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6393a326ec7c3561c60da1b9", "type": "ipv4", "value": "52.109.76.31", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915197.555154000", "last_seen_epoch": "1634915197.555154000", "evidence": [ { "frame_number": 30057, "timestamp_epoch": "1634915197.555154000", "display_filter": "frame.number == 30057", "udp_stream": 529 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5617f5d2d7582cc76e8cab31", "type": "ipv4", "value": "52.109.76.32", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913116.834876000", "last_seen_epoch": "1634913207.158388000", "evidence": [ { "frame_number": 1378, "timestamp_epoch": "1634913116.834876000", "display_filter": "frame.number == 1378", "udp_stream": 60 }, { "frame_number": 2562, "timestamp_epoch": "1634913176.519727000", "display_filter": "frame.number == 2562", "udp_stream": 112 }, { "frame_number": 3337, "timestamp_epoch": "1634913207.158388000", "display_filter": "frame.number == 3337", "udp_stream": 133 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-bb559151d093a58eb5caec87", "type": "ipv4", "value": "52.109.8.20", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913479.015566000", "last_seen_epoch": "1634913479.015566000", "evidence": [ { "frame_number": 10817, "timestamp_epoch": "1634913479.015566000", "display_filter": "frame.number == 10817", "udp_stream": 226 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-fda3a4347b282dd633e60b6b", "type": "ipv4", "value": "52.113.196.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913189.936660000", "last_seen_epoch": "1634913244.055822000", "evidence": [ { "frame_number": 2964, "timestamp_epoch": "1634913189.936660000", "display_filter": "frame.number == 2964", "udp_stream": 122 }, { "frame_number": 4568, "timestamp_epoch": "1634913244.055822000", "display_filter": "frame.number == 4568", "udp_stream": 163 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-150ba1e8ee0746a9ad3ded71", "type": "ipv4", "value": "52.152.108.96", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913667.882261000", "last_seen_epoch": "1634913756.716158000", "evidence": [ { "frame_number": 11350, "timestamp_epoch": "1634913667.882261000", "display_filter": "frame.number == 11350", "udp_stream": 240 }, { "frame_number": 11777, "timestamp_epoch": "1634913725.148011000", "display_filter": "frame.number == 11777", "udp_stream": 262 }, { "frame_number": 13633, "timestamp_epoch": "1634913756.716158000", "display_filter": "frame.number == 13633", "udp_stream": 273 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ffd253fb53806d0f285875b3", "type": "ipv4", "value": "52.178.17.3", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917557.392527000", "last_seen_epoch": "1634917557.392527000", "evidence": [ { "frame_number": 75924, "timestamp_epoch": "1634917557.392527000", "display_filter": "frame.number == 75924", "udp_stream": 988 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f36bb03e050b92e18c3fb91d", "type": "ipv4", "value": "52.182.143.210", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913160.525696000", "last_seen_epoch": "1634913160.525696000", "evidence": [ { "frame_number": 2484, "timestamp_epoch": "1634913160.525696000", "display_filter": "frame.number == 2484", "udp_stream": 109 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-75865453fefa64feade93e2c", "type": "ipv4", "value": "52.183.220.149", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915989.502323000", "last_seen_epoch": "1634917860.884313000", "evidence": [ { "frame_number": 58026, "timestamp_epoch": "1634915989.502323000", "display_filter": "frame.number == 58026", "udp_stream": 720 }, { "frame_number": 67560, "timestamp_epoch": "1634916794.330090000", "display_filter": "frame.number == 67560", "udp_stream": 876 }, { "frame_number": 68024, "timestamp_epoch": "1634916889.922590000", "display_filter": "frame.number == 68024", "udp_stream": 888 }, { "frame_number": 78238, "timestamp_epoch": "1634917860.884313000", "display_filter": "frame.number == 78238", "udp_stream": 1019 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4d4aee69466e5fc633050b63", "type": "ipv4", "value": "52.185.211.133", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913193.335410000", "last_seen_epoch": "1634916960.449014000", "evidence": [ { "frame_number": 3213, "timestamp_epoch": "1634913193.335410000", "display_filter": "frame.number == 3213", "udp_stream": 131 }, { "frame_number": 3265, "timestamp_epoch": "1634913202.399444000", "display_filter": "frame.number == 3265", "udp_stream": 132 }, { "frame_number": 3936, "timestamp_epoch": "1634913230.480668000", "display_filter": "frame.number == 3936", "udp_stream": 145 }, { "frame_number": 5546, "timestamp_epoch": "1634913288.266102000", "display_filter": "frame.number == 5546", "udp_stream": 178 }, { "frame_number": 6569, "timestamp_epoch": "1634913359.481300000", "display_filter": "frame.number == 6569", "udp_stream": 213 }, { "frame_number": 56966, "timestamp_epoch": "1634915893.822917000", "display_filter": "frame.number == 56966", "udp_stream": 708 }, { "frame_number": 58735, "timestamp_epoch": "1634916060.014151000", "display_filter": "frame.number == 58735", "udp_stream": 731 }, { "frame_number": 68335, "timestamp_epoch": "1634916960.449014000", "display_filter": "frame.number == 68335", "udp_stream": 901 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0770578e14bfd391d571effc", "type": "ipv4", "value": "52.232.226.150", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913346.409737000", "last_seen_epoch": "1634913346.409737000", "evidence": [ { "frame_number": 6282, "timestamp_epoch": "1634913346.409737000", "display_filter": "frame.number == 6282", "udp_stream": 190 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a854a6facc56057fbd689f82", "type": "ipv4", "value": "52.242.97.97", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913667.882261000", "last_seen_epoch": "1634913756.716158000", "evidence": [ { "frame_number": 11350, "timestamp_epoch": "1634913667.882261000", "display_filter": "frame.number == 11350", "udp_stream": 240 }, { "frame_number": 11777, "timestamp_epoch": "1634913725.148011000", "display_filter": "frame.number == 11777", "udp_stream": 262 }, { "frame_number": 13633, "timestamp_epoch": "1634913756.716158000", "display_filter": "frame.number == 13633", "udp_stream": 273 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-566c12a487396b0660fc7f9a", "type": "ipv4", "value": "52.96.10.242", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915971.491138000", "last_seen_epoch": "1634918357.613079000", "evidence": [ { "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "display_filter": "frame.number == 57800", "udp_stream": 715 }, { "frame_number": 70034, "timestamp_epoch": "1634917221.491585000", "display_filter": "frame.number == 70034", "udp_stream": 937 }, { "frame_number": 78501, "timestamp_epoch": "1634917954.975773000", "display_filter": "frame.number == 78501", "udp_stream": 1026 }, { "frame_number": 82399, "timestamp_epoch": "1634918357.613079000", "display_filter": "frame.number == 82399", "udp_stream": 1056 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0b9f441bd952eadd816bc52c", "type": "ipv4", "value": "52.96.103.18", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917417.580238000", "last_seen_epoch": "1634918357.613079000", "evidence": [ { "frame_number": 73507, "timestamp_epoch": "1634917417.580238000", "display_filter": "frame.number == 73507", "udp_stream": 959 }, { "frame_number": 78998, "timestamp_epoch": "1634918020.366852000", "display_filter": "frame.number == 78998", "udp_stream": 1027 }, { "frame_number": 82399, "timestamp_epoch": "1634918357.613079000", "display_filter": "frame.number == 82399", "udp_stream": 1056 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e23c28e713d490054ca254e4", "type": "ipv4", "value": "52.96.103.2", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917455.719712000", "last_seen_epoch": "1634917455.719712000", "evidence": [ { "frame_number": 74444, "timestamp_epoch": "1634917455.719712000", "display_filter": "frame.number == 74444", "udp_stream": 962 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1ec60ceb166aa2482ef502d5", "type": "ipv4", "value": "52.96.103.34", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916328.861958000", "last_seen_epoch": "1634918143.898692000", "evidence": [ { "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "display_filter": "frame.number == 61641", "udp_stream": 782 }, { "frame_number": 65074, "timestamp_epoch": "1634916539.281605000", "display_filter": "frame.number == 65074", "udp_stream": 828 }, { "frame_number": 67782, "timestamp_epoch": "1634916828.065732000", "display_filter": "frame.number == 67782", "udp_stream": 881 }, { "frame_number": 78998, "timestamp_epoch": "1634918020.366852000", "display_filter": "frame.number == 78998", "udp_stream": 1027 }, { "frame_number": 81067, "timestamp_epoch": "1634918143.898692000", "display_filter": "frame.number == 81067", "udp_stream": 1048 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9dba031f42f2544e8cb27b9b", "type": "ipv4", "value": "52.96.121.114", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915427.305975000", "last_seen_epoch": "1634918586.460066000", "evidence": [ { "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "display_filter": "frame.number == 46993", "udp_stream": 617 }, { "frame_number": 78339, "timestamp_epoch": "1634917928.099537000", "display_filter": "frame.number == 78339", "udp_stream": 1020 }, { "frame_number": 82536, "timestamp_epoch": "1634918375.217778000", "display_filter": "frame.number == 82536", "udp_stream": 1057 }, { "frame_number": 84427, "timestamp_epoch": "1634918586.460066000", "display_filter": "frame.number == 84427", "udp_stream": 1087 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6c9a9cae1b53dd94e55529ac", "type": "ipv4", "value": "52.96.121.130", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634918327.681047000", "last_seen_epoch": "1634918327.681047000", "evidence": [ { "frame_number": 82055, "timestamp_epoch": "1634918327.681047000", "display_filter": "frame.number == 82055", "udp_stream": 604 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dc195ceb6d233ab37c427f2b", "type": "ipv4", "value": "52.96.121.146", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916015.150564000", "last_seen_epoch": "1634918357.613079000", "evidence": [ { "frame_number": 58329, "timestamp_epoch": "1634916015.150564000", "display_filter": "frame.number == 58329", "udp_stream": 725 }, { "frame_number": 78501, "timestamp_epoch": "1634917954.975773000", "display_filter": "frame.number == 78501", "udp_stream": 1026 }, { "frame_number": 81067, "timestamp_epoch": "1634918143.898692000", "display_filter": "frame.number == 81067", "udp_stream": 1048 }, { "frame_number": 82399, "timestamp_epoch": "1634918357.613079000", "display_filter": "frame.number == 82399", "udp_stream": 1056 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a669cb44a22247c60f9fb177", "type": "ipv4", "value": "52.96.121.162", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916828.065732000", "last_seen_epoch": "1634918343.212380000", "evidence": [ { "frame_number": 67782, "timestamp_epoch": "1634916828.065732000", "display_filter": "frame.number == 67782", "udp_stream": 881 }, { "frame_number": 68499, "timestamp_epoch": "1634917013.187179000", "display_filter": "frame.number == 68499", "udp_stream": 908 }, { "frame_number": 73612, "timestamp_epoch": "1634917432.451328000", "display_filter": "frame.number == 73612", "udp_stream": 960 }, { "frame_number": 78998, "timestamp_epoch": "1634918020.366852000", "display_filter": "frame.number == 78998", "udp_stream": 1027 }, { "frame_number": 81446, "timestamp_epoch": "1634918255.159839000", "display_filter": "frame.number == 81446", "udp_stream": 1051 }, { "frame_number": 82250, "timestamp_epoch": "1634918343.212380000", "display_filter": "frame.number == 82250", "udp_stream": 1055 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b3d7aeeb9f9f8a619e5c9893", "type": "ipv4", "value": "52.96.121.178", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915655.894902000", "last_seen_epoch": "1634917828.661276000", "evidence": [ { "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "display_filter": "frame.number == 54596", "udp_stream": 678 }, { "frame_number": 78073, "timestamp_epoch": "1634917828.660346000", "display_filter": "frame.number == 78073", "udp_stream": 1018 }, { "frame_number": 78075, "timestamp_epoch": "1634917828.660958000", "display_filter": "frame.number == 78075", "udp_stream": 1018 }, { "frame_number": 78076, "timestamp_epoch": "1634917828.661276000", "display_filter": "frame.number == 78076", "udp_stream": 1018 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a714cde3484cfeb78c555138", "type": "ipv4", "value": "52.96.121.194", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915744.596617000", "last_seen_epoch": "1634918327.681047000", "evidence": [ { "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "display_filter": "frame.number == 55550", "udp_stream": 685 }, { "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "display_filter": "frame.number == 55551", "udp_stream": 685 }, { "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "display_filter": "frame.number == 61641", "udp_stream": 782 }, { "frame_number": 71478, "timestamp_epoch": "1634917330.593824000", "display_filter": "frame.number == 71478", "udp_stream": 945 }, { "frame_number": 73612, "timestamp_epoch": "1634917432.451328000", "display_filter": "frame.number == 73612", "udp_stream": 960 }, { "frame_number": 82055, "timestamp_epoch": "1634918327.681047000", "display_filter": "frame.number == 82055", "udp_stream": 604 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f456ff1e6bccf65554c5c77f", "type": "ipv4", "value": "52.96.121.210", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915427.305975000", "last_seen_epoch": "1634918299.158717000", "evidence": [ { "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "display_filter": "frame.number == 46993", "udp_stream": 617 }, { "frame_number": 69334, "timestamp_epoch": "1634917122.261173000", "display_filter": "frame.number == 69334", "udp_stream": 927 }, { "frame_number": 81786, "timestamp_epoch": "1634918299.158717000", "display_filter": "frame.number == 81786", "udp_stream": 1053 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c8c7ebea6241468006a22e14", "type": "ipv4", "value": "52.96.121.242", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916147.532603000", "last_seen_epoch": "1634917432.451328000", "evidence": [ { "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "display_filter": "frame.number == 59769", "udp_stream": 753 }, { "frame_number": 67782, "timestamp_epoch": "1634916828.065732000", "display_filter": "frame.number == 67782", "udp_stream": 881 }, { "frame_number": 73612, "timestamp_epoch": "1634917432.451328000", "display_filter": "frame.number == 73612", "udp_stream": 960 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-7991bc597ef5cfac8afc8701", "type": "ipv4", "value": "52.96.121.98", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916828.065732000", "last_seen_epoch": "1634917828.661276000", "evidence": [ { "frame_number": 67782, "timestamp_epoch": "1634916828.065732000", "display_filter": "frame.number == 67782", "udp_stream": 881 }, { "frame_number": 78073, "timestamp_epoch": "1634917828.660346000", "display_filter": "frame.number == 78073", "udp_stream": 1018 }, { "frame_number": 78075, "timestamp_epoch": "1634917828.660958000", "display_filter": "frame.number == 78075", "udp_stream": 1018 }, { "frame_number": 78076, "timestamp_epoch": "1634917828.661276000", "display_filter": "frame.number == 78076", "udp_stream": 1018 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9b717fae8e7526887494c111", "type": "ipv4", "value": "52.96.122.226", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917221.491585000", "last_seen_epoch": "1634918343.212380000", "evidence": [ { "frame_number": 70034, "timestamp_epoch": "1634917221.491585000", "display_filter": "frame.number == 70034", "udp_stream": 937 }, { "frame_number": 78501, "timestamp_epoch": "1634917954.975773000", "display_filter": "frame.number == 78501", "udp_stream": 1026 }, { "frame_number": 82250, "timestamp_epoch": "1634918343.212380000", "display_filter": "frame.number == 82250", "udp_stream": 1055 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-274bf0741b879a3707ac71d0", "type": "ipv4", "value": "52.96.122.242", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916147.532603000", "last_seen_epoch": "1634917417.580238000", "evidence": [ { "frame_number": 59769, "timestamp_epoch": "1634916147.532603000", "display_filter": "frame.number == 59769", "udp_stream": 753 }, { "frame_number": 64577, "timestamp_epoch": "1634916472.861320000", "display_filter": "frame.number == 64577", "udp_stream": 824 }, { "frame_number": 69334, "timestamp_epoch": "1634917122.261173000", "display_filter": "frame.number == 69334", "udp_stream": 927 }, { "frame_number": 73507, "timestamp_epoch": "1634917417.580238000", "display_filter": "frame.number == 73507", "udp_stream": 959 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0929577b8a4a66f733beb5f3", "type": "ipv4", "value": "52.96.122.98", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916472.861320000", "last_seen_epoch": "1634918586.460066000", "evidence": [ { "frame_number": 64577, "timestamp_epoch": "1634916472.861320000", "display_filter": "frame.number == 64577", "udp_stream": 824 }, { "frame_number": 81067, "timestamp_epoch": "1634918143.898692000", "display_filter": "frame.number == 81067", "udp_stream": 1048 }, { "frame_number": 84427, "timestamp_epoch": "1634918586.460066000", "display_filter": "frame.number == 84427", "udp_stream": 1087 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f333eee44768272edbf26cf2", "type": "ipv4", "value": "52.96.16.162", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916328.861958000", "last_seen_epoch": "1634917013.187179000", "evidence": [ { "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "display_filter": "frame.number == 61641", "udp_stream": 782 }, { "frame_number": 68499, "timestamp_epoch": "1634917013.187179000", "display_filter": "frame.number == 68499", "udp_stream": 908 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-93f29277d60d858431d7d279", "type": "ipv4", "value": "52.96.191.114", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915971.491138000", "last_seen_epoch": "1634918382.817371000", "evidence": [ { "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "display_filter": "frame.number == 57800", "udp_stream": 715 }, { "frame_number": 78501, "timestamp_epoch": "1634917954.975773000", "display_filter": "frame.number == 78501", "udp_stream": 1026 }, { "frame_number": 82649, "timestamp_epoch": "1634918382.817371000", "display_filter": "frame.number == 82649", "udp_stream": 1058 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e47e365ab41695a09f2575af", "type": "ipv4", "value": "52.96.191.98", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917122.261173000", "last_seen_epoch": "1634918338.028376000", "evidence": [ { "frame_number": 69334, "timestamp_epoch": "1634917122.261173000", "display_filter": "frame.number == 69334", "udp_stream": 927 }, { "frame_number": 82154, "timestamp_epoch": "1634918338.028376000", "display_filter": "frame.number == 82154", "udp_stream": 1054 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ce8f011a01cf031e7ffdfd9b", "type": "ipv4", "value": "52.96.22.178", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915655.894902000", "last_seen_epoch": "1634915655.894902000", "evidence": [ { "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "display_filter": "frame.number == 54596", "udp_stream": 678 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5ec474eecc0c712a72e7084f", "type": "ipv4", "value": "52.96.22.2", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916776.538279000", "last_seen_epoch": "1634918255.159839000", "evidence": [ { "frame_number": 66581, "timestamp_epoch": "1634916776.538279000", "display_filter": "frame.number == 66581", "udp_stream": 867 }, { "frame_number": 81446, "timestamp_epoch": "1634918255.159839000", "display_filter": "frame.number == 81446", "udp_stream": 1051 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-354e132f3d45ddef998b2113", "type": "ipv4", "value": "52.96.55.242", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915204.330340000", "last_seen_epoch": "1634918327.681047000", "evidence": [ { "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "display_filter": "frame.number == 30151", "udp_stream": 531 }, { "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "display_filter": "frame.number == 46993", "udp_stream": 617 }, { "frame_number": 54596, "timestamp_epoch": "1634915655.894902000", "display_filter": "frame.number == 54596", "udp_stream": 678 }, { "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "display_filter": "frame.number == 57800", "udp_stream": 715 }, { "frame_number": 78998, "timestamp_epoch": "1634918020.366852000", "display_filter": "frame.number == 78998", "udp_stream": 1027 }, { "frame_number": 82055, "timestamp_epoch": "1634918327.681047000", "display_filter": "frame.number == 82055", "udp_stream": 604 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-67fa52d1f41105d343e9a106", "type": "ipv4", "value": "52.96.57.18", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916472.861320000", "last_seen_epoch": "1634917928.099537000", "evidence": [ { "frame_number": 64577, "timestamp_epoch": "1634916472.861320000", "display_filter": "frame.number == 64577", "udp_stream": 824 }, { "frame_number": 78339, "timestamp_epoch": "1634917928.099537000", "display_filter": "frame.number == 78339", "udp_stream": 1020 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5a45055d2e1d5c2baa074858", "type": "ipv4", "value": "52.96.57.2", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917013.187179000", "last_seen_epoch": "1634918299.158717000", "evidence": [ { "frame_number": 68499, "timestamp_epoch": "1634917013.187179000", "display_filter": "frame.number == 68499", "udp_stream": 908 }, { "frame_number": 73612, "timestamp_epoch": "1634917432.451328000", "display_filter": "frame.number == 73612", "udp_stream": 960 }, { "frame_number": 78339, "timestamp_epoch": "1634917928.099537000", "display_filter": "frame.number == 78339", "udp_stream": 1020 }, { "frame_number": 81786, "timestamp_epoch": "1634918299.158717000", "display_filter": "frame.number == 81786", "udp_stream": 1053 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ea84258cd1f7b05c5e140110", "type": "ipv4", "value": "52.96.57.34", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915971.491138000", "last_seen_epoch": "1634918255.159839000", "evidence": [ { "frame_number": 57800, "timestamp_epoch": "1634915971.491138000", "display_filter": "frame.number == 57800", "udp_stream": 715 }, { "frame_number": 71478, "timestamp_epoch": "1634917330.593824000", "display_filter": "frame.number == 71478", "udp_stream": 945 }, { "frame_number": 81446, "timestamp_epoch": "1634918255.159839000", "display_filter": "frame.number == 81446", "udp_stream": 1051 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3fb90dfac34c437f6940f82c", "type": "ipv4", "value": "52.96.57.50", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915685.543598000", "last_seen_epoch": "1634915685.543598000", "evidence": [ { "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "display_filter": "frame.number == 54922", "udp_stream": 679 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5fb9f4438143a6f764f0d19a", "type": "ipv4", "value": "52.96.57.66", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915744.596617000", "last_seen_epoch": "1634916472.861320000", "evidence": [ { "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "display_filter": "frame.number == 55550", "udp_stream": 685 }, { "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "display_filter": "frame.number == 55551", "udp_stream": 685 }, { "frame_number": 64577, "timestamp_epoch": "1634916472.861320000", "display_filter": "frame.number == 64577", "udp_stream": 824 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f3bfafce661b9829bce1e59d", "type": "ipv4", "value": "52.96.57.82", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915204.330340000", "last_seen_epoch": "1634918143.898692000", "evidence": [ { "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "display_filter": "frame.number == 30151", "udp_stream": 531 }, { "frame_number": 61641, "timestamp_epoch": "1634916328.861958000", "display_filter": "frame.number == 61641", "udp_stream": 782 }, { "frame_number": 65074, "timestamp_epoch": "1634916539.281605000", "display_filter": "frame.number == 65074", "udp_stream": 828 }, { "frame_number": 81067, "timestamp_epoch": "1634918143.898692000", "display_filter": "frame.number == 81067", "udp_stream": 1048 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a5b1f8e34ce4af72fb4b7968", "type": "ipv4", "value": "52.96.57.98", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915685.543598000", "last_seen_epoch": "1634915685.543598000", "evidence": [ { "frame_number": 54922, "timestamp_epoch": "1634915685.543598000", "display_filter": "frame.number == 54922", "udp_stream": 679 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dce07deca3828b2c0a3436bb", "type": "ipv4", "value": "52.96.8.130", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915427.305975000", "last_seen_epoch": "1634918586.460066000", "evidence": [ { "frame_number": 46993, "timestamp_epoch": "1634915427.305975000", "display_filter": "frame.number == 46993", "udp_stream": 617 }, { "frame_number": 55550, "timestamp_epoch": "1634915744.596617000", "display_filter": "frame.number == 55550", "udp_stream": 685 }, { "frame_number": 55551, "timestamp_epoch": "1634915744.596738000", "display_filter": "frame.number == 55551", "udp_stream": 685 }, { "frame_number": 71478, "timestamp_epoch": "1634917330.593824000", "display_filter": "frame.number == 71478", "udp_stream": 945 }, { "frame_number": 84427, "timestamp_epoch": "1634918586.460066000", "display_filter": "frame.number == 84427", "udp_stream": 1087 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3a718a85bc3b4c5e0dd1b795", "type": "ipv4", "value": "52.96.90.18", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915204.330340000", "last_seen_epoch": "1634918382.817371000", "evidence": [ { "frame_number": 30151, "timestamp_epoch": "1634915204.330340000", "display_filter": "frame.number == 30151", "udp_stream": 531 }, { "frame_number": 82154, "timestamp_epoch": "1634918338.028376000", "display_filter": "frame.number == 82154", "udp_stream": 1054 }, { "frame_number": 82250, "timestamp_epoch": "1634918343.212380000", "display_filter": "frame.number == 82250", "udp_stream": 1055 }, { "frame_number": 82649, "timestamp_epoch": "1634918382.817371000", "display_filter": "frame.number == 82649", "udp_stream": 1058 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9db8f4e557f2e2861d44c562", "type": "ipv4", "value": "52.96.91.66", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917928.099537000", "last_seen_epoch": "1634918382.817371000", "evidence": [ { "frame_number": 78339, "timestamp_epoch": "1634917928.099537000", "display_filter": "frame.number == 78339", "udp_stream": 1020 }, { "frame_number": 82250, "timestamp_epoch": "1634918343.212380000", "display_filter": "frame.number == 82250", "udp_stream": 1055 }, { "frame_number": 82536, "timestamp_epoch": "1634918375.217778000", "display_filter": "frame.number == 82536", "udp_stream": 1057 }, { "frame_number": 82649, "timestamp_epoch": "1634918382.817371000", "display_filter": "frame.number == 82649", "udp_stream": 1058 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0d8d4fcc7eb201aff5db03aa", "type": "ipv4", "value": "54.243.250.193", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915375.023270000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a86fba4a3e00f428717c4a49", "type": "ipv4", "value": "54.243.253.71", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915486.826878000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e3de658c9631ec57bd7f1b20", "type": "ipv4", "value": "54.243.29.214", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915298.389799000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 42929, "timestamp_epoch": "1634915298.389799000", "display_filter": "frame.number == 42929", "udp_stream": 550 }, { "frame_number": 49037, "timestamp_epoch": "1634915486.826878000", "display_filter": "frame.number == 49037", "udp_stream": 637 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f5de105f81bd101b71eb2a33", "type": "ipv4", "value": "54.243.41.12", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915332.122085000", "last_seen_epoch": "1634915375.023270000", "evidence": [ { "frame_number": 44312, "timestamp_epoch": "1634915332.122085000", "display_filter": "frame.number == 44312", "udp_stream": 562 }, { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-081371c501d8ae7fc73a665e", "type": "ipv4", "value": "54.243.51.135", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915375.023270000", "last_seen_epoch": "1634915543.523047000", "evidence": [ { "frame_number": 45363, "timestamp_epoch": "1634915375.023270000", "display_filter": "frame.number == 45363", "udp_stream": 575 }, { "frame_number": 51085, "timestamp_epoch": "1634915543.523047000", "display_filter": "frame.number == 51085", "udp_stream": 657 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e2786577bc13af47844ea578", "type": "ipv4", "value": "60.241.142.83", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913708.406113000", "last_seen_epoch": "1634914471.872828000", "evidence": [ { "frame_number": 11573, "timestamp_epoch": "1634913708.406113000", "display_filter": "frame.number == 11573", "udp_stream": 256 }, { "frame_number": 23269, "timestamp_epoch": "1634914471.872828000", "display_filter": "frame.number == 23269", "udp_stream": 407 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-248e93b437ad7c9d568c90b5", "type": "ipv4", "value": "62.103.147.201", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918548.529465000", "last_seen_epoch": "1634918548.529465000", "evidence": [ { "frame_number": 84140, "timestamp_epoch": "1634918548.529465000", "display_filter": "frame.number == 84140", "udp_stream": 1083 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b1a7e276acffe5490e9acfa6", "type": "ipv4", "value": "62.149.128.200", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917035.160241000", "last_seen_epoch": "1634917225.232090000", "evidence": [ { "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "display_filter": "frame.number == 68714", "udp_stream": 913 }, { "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "display_filter": "frame.number == 70193", "udp_stream": 938 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-392ce912d07915787217550c", "type": "ipv4", "value": "62.149.128.201", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917035.160241000", "last_seen_epoch": "1634917225.232090000", "evidence": [ { "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "display_filter": "frame.number == 68714", "udp_stream": 913 }, { "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "display_filter": "frame.number == 70193", "udp_stream": 938 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f5ef7101d763d08e46acfd2d", "type": "ipv4", "value": "62.149.128.202", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917035.160241000", "last_seen_epoch": "1634917225.232090000", "evidence": [ { "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "display_filter": "frame.number == 68714", "udp_stream": 913 }, { "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "display_filter": "frame.number == 70193", "udp_stream": 938 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6d164e8090f3eeae15dc6168", "type": "ipv4", "value": "62.149.128.203", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917035.160241000", "last_seen_epoch": "1634917225.232090000", "evidence": [ { "frame_number": 68714, "timestamp_epoch": "1634917035.160241000", "display_filter": "frame.number == 68714", "udp_stream": 913 }, { "frame_number": 70193, "timestamp_epoch": "1634917225.232090000", "display_filter": "frame.number == 70193", "udp_stream": 938 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0e66b6e21043674ff75e5cc4", "type": "ipv4", "value": "64.136.44.45", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917209.673251000", "last_seen_epoch": "1634918522.646651000", "evidence": [ { "frame_number": 69886, "timestamp_epoch": "1634917209.673251000", "display_filter": "frame.number == 69886", "udp_stream": 935 }, { "frame_number": 83958, "timestamp_epoch": "1634918522.646651000", "display_filter": "frame.number == 83958", "udp_stream": 1075 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ef5f9f1cd164d033a310ba21", "type": "ipv4", "value": "64.136.44.50", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634917335.545942000", "last_seen_epoch": "1634917335.545942000", "evidence": [ { "frame_number": 71705, "timestamp_epoch": "1634917335.545942000", "display_filter": "frame.number == 71705", "udp_stream": 948 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-dd3bffe48ffdd59e58a65463", "type": "ipv4", "value": "64.136.52.45", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917209.673251000", "last_seen_epoch": "1634918522.646651000", "evidence": [ { "frame_number": 69886, "timestamp_epoch": "1634917209.673251000", "display_filter": "frame.number == 69886", "udp_stream": 935 }, { "frame_number": 83958, "timestamp_epoch": "1634918522.646651000", "display_filter": "frame.number == 83958", "udp_stream": 1075 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2a9aa2ef3e045d467eab9385", "type": "ipv4", "value": "64.136.52.50", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917335.545942000", "last_seen_epoch": "1634917335.545942000", "evidence": [ { "frame_number": 71705, "timestamp_epoch": "1634917335.545942000", "display_filter": "frame.number == 71705", "udp_stream": 948 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-22021faeef2a1a5ec7d2ecb8", "type": "ipv4", "value": "64.29.151.102", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915301.574987000", "last_seen_epoch": "1634915546.430128000", "evidence": [ { "frame_number": 43096, "timestamp_epoch": "1634915301.574987000", "display_filter": "frame.number == 43096", "udp_stream": 553 }, { "frame_number": 51415, "timestamp_epoch": "1634915546.430128000", "display_filter": "frame.number == 51415", "udp_stream": 660 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e0d9a9743e8151631aeaade1", "type": "ipv4", "value": "64.87.23.16", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916905.566833000", "last_seen_epoch": "1634916905.566833000", "evidence": [ { "frame_number": 68098, "timestamp_epoch": "1634916905.566833000", "display_filter": "frame.number == 68098", "udp_stream": 892 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-50c99693cb1071b57b61baea", "type": "ipv4", "value": "64.98.36.176", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918051.168288000", "last_seen_epoch": "1634918051.168288000", "evidence": [ { "frame_number": 79143, "timestamp_epoch": "1634918051.168288000", "display_filter": "frame.number == 79143", "udp_stream": 1028 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6c1f7f7b7c8035451c31f7d9", "type": "ipv4", "value": "65.111.191.196", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915825.621000000", "last_seen_epoch": "1634915825.621000000", "evidence": [ { "frame_number": 56147, "timestamp_epoch": "1634915825.621000000", "display_filter": "frame.number == 56147", "udp_stream": 696 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1047d6fb7c4e5fbd7c070fdd", "type": "ipv4", "value": "65.254.248.195", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915629.326249000", "last_seen_epoch": "1634915629.326249000", "evidence": [ { "frame_number": 54181, "timestamp_epoch": "1634915629.326249000", "display_filter": "frame.number == 54181", "udp_stream": 675 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1e998f19f5226b9774db7725", "type": "ipv4", "value": "66.163.170.35", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f605062025cc562a63ba25f4", "type": "ipv4", "value": "66.218.88.149", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-084505c166f5f919999e58e8", "type": "ipv4", "value": "66.218.88.150", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-735e8e7dac1116db7110541c", "type": "ipv4", "value": "66.218.88.152", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-0c025be719e7a1f1170e17fc", "type": "ipv4", "value": "66.218.88.154", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9130c49e7394c8348a9baf63", "type": "ipv4", "value": "66.218.88.155", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-26ec5684bd7b95d780442ebc", "type": "ipv4", "value": "66.218.88.157", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6195d0bb81316b904bf6b411", "type": "ipv4", "value": "66.218.88.158", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634915490.920891000", "last_seen_epoch": "1634915490.920891000", "evidence": [ { "frame_number": 49369, "timestamp_epoch": "1634915490.920891000", "display_filter": "frame.number == 49369", "udp_stream": 639 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ebce5852a88d7cc530795d98", "type": "ipv4", "value": "66.228.43.14", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915335.282631000", "last_seen_epoch": "1634915548.774740000", "evidence": [ { "frame_number": 44496, "timestamp_epoch": "1634915335.282631000", "display_filter": "frame.number == 44496", "udp_stream": 563 }, { "frame_number": 51515, "timestamp_epoch": "1634915548.774740000", "display_filter": "frame.number == 51515", "udp_stream": 664 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c17f90ce897cf9065151a093", "type": "ipv4", "value": "66.96.147.96", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916507.707543000", "last_seen_epoch": "1634916507.707543000", "evidence": [ { "frame_number": 64869, "timestamp_epoch": "1634916507.707543000", "display_filter": "frame.number == 64869", "udp_stream": 826 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-328a72414fa9eab75b4b58fe", "type": "ipv4", "value": "66.96.162.198", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917463.044740000", "last_seen_epoch": "1634917463.044740000", "evidence": [ { "frame_number": 74555, "timestamp_epoch": "1634917463.044740000", "display_filter": "frame.number == 74555", "udp_stream": 963 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-af58fb77cab6224c0108b6e0", "type": "ipv4", "value": "68.186.192.69", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-6f61b1da0e8dfa14fa5b0c70", "type": "ipv4", "value": "68.204.7.158", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-c00bf77cdd093e5656fb820e", "type": "ipv4", "value": "70.39.150.220", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915711.820815000", "last_seen_epoch": "1634917636.367594000", "evidence": [ { "frame_number": 55212, "timestamp_epoch": "1634915711.820815000", "display_filter": "frame.number == 55212", "udp_stream": 682 }, { "frame_number": 76498, "timestamp_epoch": "1634917636.367594000", "display_filter": "frame.number == 76498", "udp_stream": 1002 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c14e51bf7dd29ee1cde8e6ea", "type": "ipv4", "value": "72.21.81.200", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913243.956860000", "last_seen_epoch": "1634913243.956860000", "evidence": [ { "frame_number": 4478, "timestamp_epoch": "1634913243.956860000", "display_filter": "frame.number == 4478", "udp_stream": 159 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-82443d071bd7359ab8273a0a", "type": "ipv4", "value": "72.247.207.22", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634915266.693490000", "last_seen_epoch": "1634915266.693490000", "evidence": [ { "frame_number": 31731, "timestamp_epoch": "1634915266.693490000", "display_filter": "frame.number == 31731", "udp_stream": 546 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c3cb78f5c6c06933248ed585", "type": "ipv4", "value": "72.252.201.69", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-7d5ec7a1e1881ab08998964c", "type": "ipv4", "value": "73.230.205.91", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-23e3823a57ba52e7e559d353", "type": "ipv4", "value": "73.52.50.32", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-e0f793526485f8b8a441c93f", "type": "ipv4", "value": "73.77.87.137", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-a3349b172510c0e681622e80", "type": "ipv4", "value": "74.202.142.20", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917079.779900000", "last_seen_epoch": "1634917079.779900000", "evidence": [ { "frame_number": 68959, "timestamp_epoch": "1634917079.779900000", "display_filter": "frame.number == 68959", "udp_stream": 919 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2a4aea0c1a2bc24fe7a67603", "type": "ipv4", "value": "8.248.163.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913245.414159000", "last_seen_epoch": "1634913814.788359000", "evidence": [ { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 }, { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-01f74cfbcbf4b828bc2d1cdd", "type": "ipv4", "value": "8.249.123.254", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913245.414159000", "last_seen_epoch": "1634913273.879526000", "evidence": [ { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-d661b0573632678991aa2b80", "type": "ipv4", "value": "8.249.219.254", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913814.788359000", "last_seen_epoch": "1634913814.788359000", "evidence": [ { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c6bfc85e9ee92ca6da4e3afc", "type": "ipv4", "value": "8.249.239.254", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913814.788359000", "last_seen_epoch": "1634913814.788359000", "evidence": [ { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f814057779e37a680af7d0fa", "type": "ipv4", "value": "8.249.245.254", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913245.414159000", "last_seen_epoch": "1634913273.879526000", "evidence": [ { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b30998e37f7040fcb101c732", "type": "ipv4", "value": "8.253.131.120", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913245.414159000", "last_seen_epoch": "1634913273.879526000", "evidence": [ { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5b6f5f9f0bc9623651554dfc", "type": "ipv4", "value": "8.253.156.120", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913245.414159000", "last_seen_epoch": "1634913814.788359000", "evidence": [ { "frame_number": 4991, "timestamp_epoch": "1634913245.414159000", "display_filter": "frame.number == 4991", "udp_stream": 167 }, { "frame_number": 5389, "timestamp_epoch": "1634913273.879526000", "display_filter": "frame.number == 5389", "udp_stream": 176 }, { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5fe8f50b9172ecca97e57d0a", "type": "ipv4", "value": "8.253.45.214", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913814.788359000", "last_seen_epoch": "1634913814.788359000", "evidence": [ { "frame_number": 15950, "timestamp_epoch": "1634913814.788359000", "display_filter": "frame.number == 15950", "udp_stream": 283 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-9c78787548128683a484641d", "type": "ipv4", "value": "8.8.8.8", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-cd66ef0a011bc77e361fc34e", "type": "ipv4", "value": "80.6.192.58", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-f6442ca8141cebe550d934b0", "type": "ipv4", "value": "81.2.195.204", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634918396.035657000", "last_seen_epoch": "1634918396.035657000", "evidence": [ { "frame_number": 82781, "timestamp_epoch": "1634918396.035657000", "display_filter": "frame.number == 82781", "udp_stream": 1059 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-09db2cf186b5444249686f3a", "type": "ipv4", "value": "81.241.252.59", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-3a903a73177dad6ad512c29a", "type": "ipv4", "value": "81.31.145.212", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634916236.759885000", "last_seen_epoch": "1634916236.759885000", "evidence": [ { "frame_number": 60737, "timestamp_epoch": "1634916236.759885000", "display_filter": "frame.number == 60737", "udp_stream": 769 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e950acef55b53af6515eaf48", "type": "ipv4", "value": "81.31.145.216", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916236.759885000", "last_seen_epoch": "1634916236.759885000", "evidence": [ { "frame_number": 60737, "timestamp_epoch": "1634916236.759885000", "display_filter": "frame.number == 60737", "udp_stream": 769 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-044e18e685926ec48936d16b", "type": "ipv4", "value": "82.98.154.100", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916810.052780000", "last_seen_epoch": "1634918423.640951000", "evidence": [ { "frame_number": 67626, "timestamp_epoch": "1634916810.052780000", "display_filter": "frame.number == 67626", "udp_stream": 877 }, { "frame_number": 83021, "timestamp_epoch": "1634918423.640951000", "display_filter": "frame.number == 83021", "udp_stream": 1062 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f5344b0b4bd00b8496e0ac72", "type": "ipv4", "value": "83.223.99.191", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634913674.048051000", "last_seen_epoch": "1634913674.048051000", "evidence": [ { "frame_number": 11445, "timestamp_epoch": "1634913674.048051000", "display_filter": "frame.number == 11445", "udp_stream": 246 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-97f945003852d52535e0b003", "type": "ipv4", "value": "83.243.251.46", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-7478364a6dc32321ae9aa821", "type": "ipv4", "value": "85.13.132.2", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634916559.204440000", "last_seen_epoch": "1634916559.204440000", "evidence": [ { "frame_number": 65256, "timestamp_epoch": "1634916559.204440000", "display_filter": "frame.number == 65256", "udp_stream": 829 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-f7f21214e3e51a0509e95bfc", "type": "ipv4", "value": "86.8.177.143", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-032443e93dbfe936c15e15f2", "type": "ipv4", "value": "89.137.52.44", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-6b820f4992a3a0cadaaa6974", "type": "ipv4", "value": "9.241.189.20", "roles": [ "dns-answer" ], "is_private": false, "first_seen_epoch": "1634913707.082349000", "last_seen_epoch": "1634914468.243632000", "evidence": [ { "frame_number": 11569, "timestamp_epoch": "1634913707.082349000", "display_filter": "frame.number == 11569", "udp_stream": 254 }, { "frame_number": 19688, "timestamp_epoch": "1634914070.638520000", "display_filter": "frame.number == 19688", "udp_stream": 335 }, { "frame_number": 22461, "timestamp_epoch": "1634914228.793138000", "display_filter": "frame.number == 22461", "udp_stream": 355 }, { "frame_number": 23258, "timestamp_epoch": "1634914468.243632000", "display_filter": "frame.number == 23258", "udp_stream": 405 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1ac54f09f8fe006e597f824f", "type": "ipv4", "value": "94.143.155.83", "roles": [ "dns-answer", "network-endpoint" ], "is_private": false, "first_seen_epoch": "1634917264.766583000", "last_seen_epoch": "1634917264.766583000", "evidence": [ { "frame_number": 70857, "timestamp_epoch": "1634917264.766583000", "display_filter": "frame.number == 70857", "udp_stream": 940 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-548e22d4f5c8787b64317d90", "type": "ipv4", "value": "94.200.181.154", "roles": [ "network-endpoint" ], "is_private": false, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-a89f82d2cf375229aa34f0c0", "type": "ja3", "value": "28a2c9bd18a11de089ef85a160da29e4", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913117.006088000", "last_seen_epoch": "1634917860.929501000", "evidence": [ { "frame_number": 1384, "timestamp_epoch": "1634913117.006088000", "display_filter": "frame.number == 1384", "tcp_stream": 68 }, { "frame_number": 2567, "timestamp_epoch": "1634913176.687495000", "display_filter": "frame.number == 2567", "tcp_stream": 121 }, { "frame_number": 2738, "timestamp_epoch": "1634913184.692326000", "display_filter": "frame.number == 2738", "tcp_stream": 129 }, { "frame_number": 2855, "timestamp_epoch": "1634913186.156521000", "display_filter": "frame.number == 2855", "tcp_stream": 135 }, { "frame_number": 3064, "timestamp_epoch": "1634913190.909874000", "display_filter": "frame.number == 3064", "tcp_stream": 143 }, { "frame_number": 3093, "timestamp_epoch": "1634913191.072852000", "display_filter": "frame.number == 3093", "tcp_stream": 145 }, { "frame_number": 3217, "timestamp_epoch": "1634913193.385799000", "display_filter": "frame.number == 3217", "tcp_stream": 147 }, { "frame_number": 3287, "timestamp_epoch": "1634913202.730695000", "display_filter": "frame.number == 3287", "tcp_stream": 149 }, { "frame_number": 3341, "timestamp_epoch": "1634913207.335788000", "display_filter": "frame.number == 3341", "tcp_stream": 151 }, { "frame_number": 3604, "timestamp_epoch": "1634913213.031340000", "display_filter": "frame.number == 3604", "tcp_stream": 166 }, { "frame_number": 3681, "timestamp_epoch": "1634913218.797333000", "display_filter": "frame.number == 3681", "tcp_stream": 169 }, { "frame_number": 3821, "timestamp_epoch": "1634913221.611780000", "display_filter": "frame.number == 3821", "tcp_stream": 168 }, { "frame_number": 3956, "timestamp_epoch": "1634913230.824034000", "display_filter": "frame.number == 3956", "tcp_stream": 176 }, { "frame_number": 3964, "timestamp_epoch": "1634913230.935693000", "display_filter": "frame.number == 3964", "tcp_stream": 177 }, { "frame_number": 4036, "timestamp_epoch": "1634913232.813293000", "display_filter": "frame.number == 4036", "tcp_stream": 180 }, { "frame_number": 4368, "timestamp_epoch": "1634913240.693665000", "display_filter": "frame.number == 4368", "tcp_stream": 196 }, { "frame_number": 4828, "timestamp_epoch": "1634913245.011484000", "display_filter": "frame.number == 4828", "tcp_stream": 210 }, { "frame_number": 4832, "timestamp_epoch": "1634913245.029627000", "display_filter": "frame.number == 4832", "tcp_stream": 211 }, { "frame_number": 5550, "timestamp_epoch": "1634913288.311396000", "display_filter": "frame.number == 5550", "tcp_stream": 229 }, { "frame_number": 5609, "timestamp_epoch": "1634913293.441652000", "display_filter": "frame.number == 5609", "tcp_stream": 231 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6435674a49116af5591fcf30", "type": "ja3", "value": "29a54baac595d45c6a62225f7cde467b", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913346.593116000", "last_seen_epoch": "1634913346.593116000", "evidence": [ { "frame_number": 6326, "timestamp_epoch": "1634913346.593116000", "display_filter": "frame.number == 6326" } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-27330556dc2664ec71a332f1", "type": "ja3", "value": "37f463bf4616ecd445d4a1937da06e19", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913187.490745000", "last_seen_epoch": "1634918067.332687000", "evidence": [ { "frame_number": 2908, "timestamp_epoch": "1634913187.490745000", "display_filter": "frame.number == 2908", "tcp_stream": 137 }, { "frame_number": 3636, "timestamp_epoch": "1634913214.102834000", "display_filter": "frame.number == 3636", "tcp_stream": 167 }, { "frame_number": 4404, "timestamp_epoch": "1634913241.534477000", "display_filter": "frame.number == 4404", "tcp_stream": 197 }, { "frame_number": 7321, "timestamp_epoch": "1634913422.955558000", "display_filter": "frame.number == 7321", "tcp_stream": 255 }, { "frame_number": 10937, "timestamp_epoch": "1634913576.100868000", "display_filter": "frame.number == 10937", "tcp_stream": 261 }, { "frame_number": 10971, "timestamp_epoch": "1634913583.175376000", "display_filter": "frame.number == 10971", "tcp_stream": 262 }, { "frame_number": 10975, "timestamp_epoch": "1634913583.229531000", "display_filter": "frame.number == 10975", "tcp_stream": 263 }, { "frame_number": 11042, "timestamp_epoch": "1634913608.762943000", "display_filter": "frame.number == 11042", "tcp_stream": 264 }, { "frame_number": 11098, "timestamp_epoch": "1634913641.402723000", "display_filter": "frame.number == 11098", "tcp_stream": 266 }, { "frame_number": 11449, "timestamp_epoch": "1634913674.196253000", "display_filter": "frame.number == 11449", "tcp_stream": 280 }, { "frame_number": 16333, "timestamp_epoch": "1634913884.673915000", "display_filter": "frame.number == 16333", "tcp_stream": 345 }, { "frame_number": 16359, "timestamp_epoch": "1634913885.112277000", "display_filter": "frame.number == 16359", "tcp_stream": 346 }, { "frame_number": 17413, "timestamp_epoch": "1634913919.116053000", "display_filter": "frame.number == 17413", "tcp_stream": 360 }, { "frame_number": 17499, "timestamp_epoch": "1634913938.918134000", "display_filter": "frame.number == 17499", "tcp_stream": 368 }, { "frame_number": 17598, "timestamp_epoch": "1634913956.159803000", "display_filter": "frame.number == 17598", "tcp_stream": 375 }, { "frame_number": 17661, "timestamp_epoch": "1634913977.505485000", "display_filter": "frame.number == 17661", "tcp_stream": 381 }, { "frame_number": 17726, "timestamp_epoch": "1634913991.945984000", "display_filter": "frame.number == 17726", "tcp_stream": 387 }, { "frame_number": 17847, "timestamp_epoch": "1634914016.025401000", "display_filter": "frame.number == 17847", "tcp_stream": 394 }, { "frame_number": 17903, "timestamp_epoch": "1634914033.833405000", "display_filter": "frame.number == 17903", "tcp_stream": 396 }, { "frame_number": 17993, "timestamp_epoch": "1634914048.248941000", "display_filter": "frame.number == 17993", "tcp_stream": 399 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-25e12178c5a26ec9421df145", "type": "ja3", "value": "3b5074b1b5d032e5620f69f9f700ff0e", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913186.208956000", "last_seen_epoch": "1634913240.600539000", "evidence": [ { "frame_number": 2859, "timestamp_epoch": "1634913186.208956000", "display_filter": "frame.number == 2859", "tcp_stream": 136 }, { "frame_number": 3580, "timestamp_epoch": "1634913212.651868000", "display_filter": "frame.number == 3580", "tcp_stream": 165 }, { "frame_number": 4364, "timestamp_epoch": "1634913240.600539000", "display_filter": "frame.number == 4364", "tcp_stream": 195 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ffb38a5601c47a3e55390f4f", "type": "ja3", "value": "51c64c77e60f3980eea90869b68c58a8", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913708.624194000", "last_seen_epoch": "1634918490.053480000", "evidence": [ { "frame_number": 11577, "timestamp_epoch": "1634913708.624194000", "display_filter": "frame.number == 11577", "tcp_stream": 289 }, { "frame_number": 17973, "timestamp_epoch": "1634914046.554376000", "display_filter": "frame.number == 17973", "tcp_stream": 398 }, { "frame_number": 23278, "timestamp_epoch": "1634914472.073751000", "display_filter": "frame.number == 23278", "tcp_stream": 537 }, { "frame_number": 23301, "timestamp_epoch": "1634914479.354747000", "display_filter": "frame.number == 23301", "tcp_stream": 539 }, { "frame_number": 23337, "timestamp_epoch": "1634914487.663632000", "display_filter": "frame.number == 23337", "tcp_stream": 543 }, { "frame_number": 23583, "timestamp_epoch": "1634914508.249242000", "display_filter": "frame.number == 23583", "tcp_stream": 555 }, { "frame_number": 24503, "timestamp_epoch": "1634914814.002945000", "display_filter": "frame.number == 24503", "tcp_stream": 684 }, { "frame_number": 26007, "timestamp_epoch": "1634914982.699683000", "display_filter": "frame.number == 26007", "tcp_stream": 742 }, { "frame_number": 26206, "timestamp_epoch": "1634914997.442247000", "display_filter": "frame.number == 26206", "tcp_stream": 752 }, { "frame_number": 26383, "timestamp_epoch": "1634914999.151076000", "display_filter": "frame.number == 26383", "tcp_stream": 753 }, { "frame_number": 29056, "timestamp_epoch": "1634915006.132318000", "display_filter": "frame.number == 29056", "tcp_stream": 754 }, { "frame_number": 29436, "timestamp_epoch": "1634915118.024017000", "display_filter": "frame.number == 29436", "tcp_stream": 769 }, { "frame_number": 29459, "timestamp_epoch": "1634915137.454311000", "display_filter": "frame.number == 29459", "tcp_stream": 770 }, { "frame_number": 29948, "timestamp_epoch": "1634915146.526118000", "display_filter": "frame.number == 29948", "tcp_stream": 771 }, { "frame_number": 30115, "timestamp_epoch": "1634915201.676161000", "display_filter": "frame.number == 30115", "tcp_stream": 782 }, { "frame_number": 30136, "timestamp_epoch": "1634915202.336301000", "display_filter": "frame.number == 30136", "tcp_stream": 783 }, { "frame_number": 30263, "timestamp_epoch": "1634915207.224235000", "display_filter": "frame.number == 30263", "tcp_stream": 787 }, { "frame_number": 30288, "timestamp_epoch": "1634915208.978042000", "display_filter": "frame.number == 30288", "tcp_stream": 789 }, { "frame_number": 31460, "timestamp_epoch": "1634915261.837766000", "display_filter": "frame.number == 31460", "tcp_stream": 804 }, { "frame_number": 31699, "timestamp_epoch": "1634915263.539918000", "display_filter": "frame.number == 31699", "tcp_stream": 805 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-3a929961d41af439c128cc2c", "type": "ja3", "value": "6271f898ce5be7dd52b0fc260d0662b3", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913189.732047000", "last_seen_epoch": "1634915472.428457000", "evidence": [ { "frame_number": 2933, "timestamp_epoch": "1634913189.732047000", "display_filter": "frame.number == 2933", "tcp_stream": 138 }, { "frame_number": 2968, "timestamp_epoch": "1634913189.939818000", "display_filter": "frame.number == 2968", "tcp_stream": 139 }, { "frame_number": 2990, "timestamp_epoch": "1634913190.063908000", "display_filter": "frame.number == 2990", "tcp_stream": 140 }, { "frame_number": 2996, "timestamp_epoch": "1634913190.112726000", "display_filter": "frame.number == 2996", "tcp_stream": 141 }, { "frame_number": 3002, "timestamp_epoch": "1634913190.164263000", "display_filter": "frame.number == 3002", "tcp_stream": 142 }, { "frame_number": 3068, "timestamp_epoch": "1634913190.947146000", "display_filter": "frame.number == 3068", "tcp_stream": 144 }, { "frame_number": 3676, "timestamp_epoch": "1634913218.775235000", "display_filter": "frame.number == 3676", "tcp_stream": 170 }, { "frame_number": 3686, "timestamp_epoch": "1634913218.874677000", "display_filter": "frame.number == 3686", "tcp_stream": 171 }, { "frame_number": 3705, "timestamp_epoch": "1634913218.910484000", "display_filter": "frame.number == 3705", "tcp_stream": 172 }, { "frame_number": 3884, "timestamp_epoch": "1634913224.865279000", "display_filter": "frame.number == 3884", "tcp_stream": 174 }, { "frame_number": 4040, "timestamp_epoch": "1634913232.854657000", "display_filter": "frame.number == 4040", "tcp_stream": 181 }, { "frame_number": 4443, "timestamp_epoch": "1634913243.763110000", "display_filter": "frame.number == 4443", "tcp_stream": 198 }, { "frame_number": 4470, "timestamp_epoch": "1634913243.924546000", "display_filter": "frame.number == 4470", "tcp_stream": 199 }, { "frame_number": 4487, "timestamp_epoch": "1634913243.981064000", "display_filter": "frame.number == 4487", "tcp_stream": 200 }, { "frame_number": 4543, "timestamp_epoch": "1634913244.025703000", "display_filter": "frame.number == 4543", "tcp_stream": 202 }, { "frame_number": 4545, "timestamp_epoch": "1634913244.027393000", "display_filter": "frame.number == 4545", "tcp_stream": 201 }, { "frame_number": 4569, "timestamp_epoch": "1634913244.058059000", "display_filter": "frame.number == 4569", "tcp_stream": 203 }, { "frame_number": 4641, "timestamp_epoch": "1634913244.142343000", "display_filter": "frame.number == 4641", "tcp_stream": 206 }, { "frame_number": 4645, "timestamp_epoch": "1634913244.147981000", "display_filter": "frame.number == 4645", "tcp_stream": 205 }, { "frame_number": 4649, "timestamp_epoch": "1634913244.150529000", "display_filter": "frame.number == 4649", "tcp_stream": 204 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b305f4f27f7beb36c4268493", "type": "ja3", "value": "89be98bbd4f065fe510fca4893cf8d9b", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634916251.980614000", "last_seen_epoch": "1634916251.980614000", "evidence": [ { "frame_number": 60923, "timestamp_epoch": "1634916251.980614000", "display_filter": "frame.number == 60923", "tcp_stream": 1221 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2e5ea974eeb4071773652396", "type": "ja3", "value": "a0e9f5d64349fb13191bc781f81f42e1", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913064.905067000", "last_seen_epoch": "1634917472.533719000", "evidence": [ { "frame_number": 720, "timestamp_epoch": "1634913064.905067000", "display_filter": "frame.number == 720", "tcp_stream": 34 }, { "frame_number": 1612, "timestamp_epoch": "1634913126.000863000", "display_filter": "frame.number == 1612", "tcp_stream": 78 }, { "frame_number": 2488, "timestamp_epoch": "1634913160.604351000", "display_filter": "frame.number == 2488", "tcp_stream": 120 }, { "frame_number": 3189, "timestamp_epoch": "1634913191.842161000", "display_filter": "frame.number == 3189", "tcp_stream": 146 }, { "frame_number": 3270, "timestamp_epoch": "1634913202.473612000", "display_filter": "frame.number == 3270", "tcp_stream": 148 }, { "frame_number": 3312, "timestamp_epoch": "1634913203.512762000", "display_filter": "frame.number == 3312", "tcp_stream": 150 }, { "frame_number": 3848, "timestamp_epoch": "1634913223.123881000", "display_filter": "frame.number == 3848", "tcp_stream": 173 }, { "frame_number": 3940, "timestamp_epoch": "1634913230.587526000", "display_filter": "frame.number == 3940", "tcp_stream": 175 }, { "frame_number": 4104, "timestamp_epoch": "1634913234.629068000", "display_filter": "frame.number == 4104", "tcp_stream": 178 }, { "frame_number": 5119, "timestamp_epoch": "1634913245.729864000", "display_filter": "frame.number == 5119", "tcp_stream": 218 }, { "frame_number": 5153, "timestamp_epoch": "1634913246.350437000", "display_filter": "frame.number == 5153", "tcp_stream": 219 }, { "frame_number": 6710, "timestamp_epoch": "1634913385.195104000", "display_filter": "frame.number == 6710", "tcp_stream": 247 }, { "frame_number": 10716, "timestamp_epoch": "1634913445.874969000", "display_filter": "frame.number == 10716", "tcp_stream": 258 }, { "frame_number": 10785, "timestamp_epoch": "1634913476.914835000", "display_filter": "frame.number == 10785", "tcp_stream": 259 }, { "frame_number": 10821, "timestamp_epoch": "1634913479.081253000", "display_filter": "frame.number == 10821", "tcp_stream": 260 }, { "frame_number": 30065, "timestamp_epoch": "1634915197.755998000", "display_filter": "frame.number == 30065", "tcp_stream": 779 }, { "frame_number": 30069, "timestamp_epoch": "1634915197.830866000", "display_filter": "frame.number == 30069", "tcp_stream": 780 }, { "frame_number": 74691, "timestamp_epoch": "1634917472.533719000", "display_filter": "frame.number == 74691", "tcp_stream": 1487 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-72a5cb4f798222d33b125771", "type": "ja3", "value": "cd08e31494f9531f560d64c695473da9", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634913346.147147000", "last_seen_epoch": "1634913349.127511000", "evidence": [ { "frame_number": 6231, "timestamp_epoch": "1634913346.147147000", "display_filter": "frame.number == 6231", "tcp_stream": 239 }, { "frame_number": 6233, "timestamp_epoch": "1634913346.150945000", "display_filter": "frame.number == 6233", "tcp_stream": 240 }, { "frame_number": 6294, "timestamp_epoch": "1634913346.481890000", "display_filter": "frame.number == 6294", "tcp_stream": 242 }, { "frame_number": 6400, "timestamp_epoch": "1634913347.696545000", "display_filter": "frame.number == 6400", "tcp_stream": 243 }, { "frame_number": 6448, "timestamp_epoch": "1634913349.127511000", "display_filter": "frame.number == 6448", "tcp_stream": 244 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-b926224a2f0720cf73fa38de", "type": "ja3", "value": "df669e7ea913f1ac0c0cce9a201a2ec1", "roles": [ "tls-client-fingerprint" ], "is_private": null, "first_seen_epoch": "1634915298.770161000", "last_seen_epoch": "1634918588.125004000", "evidence": [ { "frame_number": 42947, "timestamp_epoch": "1634915298.770161000", "display_filter": "frame.number == 42947", "tcp_stream": 816 }, { "frame_number": 42968, "timestamp_epoch": "1634915298.943065000", "display_filter": "frame.number == 42968", "tcp_stream": 815 }, { "frame_number": 42970, "timestamp_epoch": "1634915298.943203000", "display_filter": "frame.number == 42970", "tcp_stream": 817 }, { "frame_number": 44329, "timestamp_epoch": "1634915332.518484000", "display_filter": "frame.number == 44329", "tcp_stream": 834 }, { "frame_number": 44351, "timestamp_epoch": "1634915332.695793000", "display_filter": "frame.number == 44351", "tcp_stream": 832 }, { "frame_number": 44353, "timestamp_epoch": "1634915332.695921000", "display_filter": "frame.number == 44353", "tcp_stream": 833 }, { "frame_number": 44637, "timestamp_epoch": "1634915347.404007000", "display_filter": "frame.number == 44637", "tcp_stream": 843 }, { "frame_number": 44658, "timestamp_epoch": "1634915347.753667000", "display_filter": "frame.number == 44658", "tcp_stream": 844 }, { "frame_number": 44660, "timestamp_epoch": "1634915347.753847000", "display_filter": "frame.number == 44660", "tcp_stream": 845 }, { "frame_number": 44662, "timestamp_epoch": "1634915347.754206000", "display_filter": "frame.number == 44662", "tcp_stream": 846 }, { "frame_number": 45166, "timestamp_epoch": "1634915360.499781000", "display_filter": "frame.number == 45166", "tcp_stream": 854 }, { "frame_number": 45403, "timestamp_epoch": "1634915375.511044000", "display_filter": "frame.number == 45403", "tcp_stream": 873 }, { "frame_number": 45405, "timestamp_epoch": "1634915375.511387000", "display_filter": "frame.number == 45405", "tcp_stream": 874 }, { "frame_number": 45449, "timestamp_epoch": "1634915375.686710000", "display_filter": "frame.number == 45449", "tcp_stream": 875 }, { "frame_number": 45451, "timestamp_epoch": "1634915375.686918000", "display_filter": "frame.number == 45451", "tcp_stream": 876 }, { "frame_number": 45519, "timestamp_epoch": "1634915376.311344000", "display_filter": "frame.number == 45519", "tcp_stream": 868 }, { "frame_number": 45520, "timestamp_epoch": "1634915376.311423000", "display_filter": "frame.number == 45520", "tcp_stream": 870 }, { "frame_number": 45554, "timestamp_epoch": "1634915376.683405000", "display_filter": "frame.number == 45554", "tcp_stream": 872 }, { "frame_number": 47027, "timestamp_epoch": "1634915428.590683000", "display_filter": "frame.number == 47027", "tcp_stream": 894 }, { "frame_number": 49063, "timestamp_epoch": "1634915487.245943000", "display_filter": "frame.number == 49063", "tcp_stream": 918 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8326a269670ee3c6f38d48b0", "type": "sha256", "value": "11f3d84aad7131fe124155c9edfceb594649e87de1ee03383f470442d6ed69a1", "roles": [ "exported-object" ], "is_private": null, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-4ef30c83c27da314b99d9d2f", "type": "sha256", "value": "17c18c10640debcfd5b5f61f07b12d7327809410c3a90f7cd69f21fb869554ea", "roles": [ "exported-object" ], "is_private": null, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-6f7144f3d89672a5ffd6eeb3", "type": "sha256", "value": "95928b331e9942e4709b41ec8b59eb6f9e068f53ef2eeb15009feafd4ff5138d", "roles": [ "exported-object" ], "is_private": null, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-624d07d1c28c2984b1b335d1", "type": "sha256", "value": "c8da41ae6e70a1997020d6c903d2627a3ee35383159cd04de53e73ff3f5acd82", "roles": [ "exported-object" ], "is_private": null, "first_seen_epoch": "", "last_seen_epoch": "", "evidence": [], "enrichment_state": "not_requested" }, { "observable_id": "observable-642d807574fb3111cea50383", "type": "url", "value": "http://178.23.190.8/44491.6090605324.dat", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913428.775164000", "last_seen_epoch": "1634913428.775164000", "evidence": [ { "frame_number": 9651, "timestamp_epoch": "1634913428.775164000", "display_filter": "frame.number == 9651", "tcp_stream": 257 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-12bac0b9b737f77f4f481406", "type": "url", "value": "http://190.14.37.244/44491.6090605324.dat", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913421.654401000", "last_seen_epoch": "1634913421.654401000", "evidence": [ { "frame_number": 7250, "timestamp_epoch": "1634913421.654401000", "display_filter": "frame.number == 7250", "tcp_stream": 254 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c17ca27286f82742b664dac9", "type": "url", "value": "http://194.36.191.35/44491.6090605324.dat", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913426.801894000", "last_seen_epoch": "1634913426.801894000", "evidence": [ { "frame_number": 8450, "timestamp_epoch": "1634913426.801894000", "display_filter": "frame.number == 8450", "tcp_stream": 256 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-1b1cd7ae9f6941d5c35d5b58", "type": "url", "value": "http://239.255.255.250:1900*", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913117.132050000", "last_seen_epoch": "1634918558.727872000", "evidence": [ { "frame_number": 1387, "timestamp_epoch": "1634913117.132050000", "display_filter": "frame.number == 1387" }, { "frame_number": 1388, "timestamp_epoch": "1634913117.150434000", "display_filter": "frame.number == 1388" }, { "frame_number": 1406, "timestamp_epoch": "1634913117.376079000", "display_filter": "frame.number == 1406" }, { "frame_number": 1407, "timestamp_epoch": "1634913117.424672000", "display_filter": "frame.number == 1407" }, { "frame_number": 1422, "timestamp_epoch": "1634913117.542247000", "display_filter": "frame.number == 1422" }, { "frame_number": 1508, "timestamp_epoch": "1634913120.141815000", "display_filter": "frame.number == 1508" }, { "frame_number": 1509, "timestamp_epoch": "1634913120.142125000", "display_filter": "frame.number == 1509" }, { "frame_number": 1512, "timestamp_epoch": "1634913120.424227000", "display_filter": "frame.number == 1512" }, { "frame_number": 1513, "timestamp_epoch": "1634913120.454306000", "display_filter": "frame.number == 1513" }, { "frame_number": 1514, "timestamp_epoch": "1634913120.533908000", "display_filter": "frame.number == 1514" }, { "frame_number": 1519, "timestamp_epoch": "1634913123.142501000", "display_filter": "frame.number == 1519" }, { "frame_number": 1520, "timestamp_epoch": "1634913123.142903000", "display_filter": "frame.number == 1520" }, { "frame_number": 1521, "timestamp_epoch": "1634913123.537260000", "display_filter": "frame.number == 1521" }, { "frame_number": 1636, "timestamp_epoch": "1634913126.538098000", "display_filter": "frame.number == 1636" }, { "frame_number": 1637, "timestamp_epoch": "1634913129.548547000", "display_filter": "frame.number == 1637" }, { "frame_number": 1646, "timestamp_epoch": "1634913132.548982000", "display_filter": "frame.number == 1646" }, { "frame_number": 6222, "timestamp_epoch": "1634913345.915901000", "display_filter": "frame.number == 6222" }, { "frame_number": 6374, "timestamp_epoch": "1634913346.920570000", "display_filter": "frame.number == 6374" }, { "frame_number": 6428, "timestamp_epoch": "1634913347.935448000", "display_filter": "frame.number == 6428" }, { "frame_number": 6444, "timestamp_epoch": "1634913348.938407000", "display_filter": "frame.number == 6444" } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-36c03dd77f887a1f3e205cea", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?29290d2fe073e937", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913245.625982000", "last_seen_epoch": "1634913245.625982000", "evidence": [ { "frame_number": 5109, "timestamp_epoch": "1634913245.625982000", "display_filter": "frame.number == 5109", "tcp_stream": 213 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-e1fc289c4a1017a8bdae6833", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?c6f9855cb9e658e6", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913814.849469000", "last_seen_epoch": "1634913814.849469000", "evidence": [ { "frame_number": 15954, "timestamp_epoch": "1634913814.849469000", "display_filter": "frame.number == 15954", "tcp_stream": 324 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5ed36347fbee20e6d6724270", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?069916a09ccd9a98", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913273.971119000", "last_seen_epoch": "1634913273.971119000", "evidence": [ { "frame_number": 5393, "timestamp_epoch": "1634913273.971119000", "display_filter": "frame.number == 5393", "tcp_stream": 227 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-cc123e624552ce5524ba8cb6", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?84945a395c830399", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913245.508732000", "last_seen_epoch": "1634913245.508732000", "evidence": [ { "frame_number": 5034, "timestamp_epoch": "1634913245.508732000", "display_filter": "frame.number == 5034", "tcp_stream": 213 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8faa7946d9f2c4ba7ad25d2a", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c073614b94536784", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913307.242763000", "last_seen_epoch": "1634913307.242763000", "evidence": [ { "frame_number": 6143, "timestamp_epoch": "1634913307.242763000", "display_filter": "frame.number == 6143", "tcp_stream": 238 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-5271f3dbb5d2ac19038eaa4b", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?88af6d736a9e15f4", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913307.325299000", "last_seen_epoch": "1634913307.325299000", "evidence": [ { "frame_number": 6146, "timestamp_epoch": "1634913307.325299000", "display_filter": "frame.number == 6146", "tcp_stream": 238 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-42f32141760f697942b37db7", "type": "url", "value": "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?f57f77bab08ee07e", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913245.711787000", "last_seen_epoch": "1634913245.711787000", "evidence": [ { "frame_number": 5115, "timestamp_epoch": "1634913245.711787000", "display_filter": "frame.number == 5115", "tcp_stream": 213 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-4a8271604594915627cc8aa5", "type": "url", "value": "http://sobolpand.top/034g100/index.php", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913395.707500000", "last_seen_epoch": "1634913395.707500000", "evidence": [ { "frame_number": 6751, "timestamp_epoch": "1634913395.707500000", "display_filter": "frame.number == 6751", "tcp_stream": 248 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-6e269737f1a584841f082e21", "type": "url", "value": "http://sobolpand.top/034g100/main.php", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913397.426689000", "last_seen_epoch": "1634913397.426689000", "evidence": [ { "frame_number": 6756, "timestamp_epoch": "1634913397.426689000", "display_filter": "frame.number == 6756", "tcp_stream": 248 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-a230dbc4d2ffd47ff8458a7b", "type": "url", "value": "http://www.kqzyfj.com/click-1225267-10537174-1463076242000?sid=552795f4335011ec81850e774cf9d6690INT", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634918066.335618000", "last_seen_epoch": "1634918066.335618000", "evidence": [ { "frame_number": 80443, "timestamp_epoch": "1634918066.335618000", "display_filter": "frame.number == 80443", "tcp_stream": 1583 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2eb0b57f4e997c7e1fdf760b", "type": "url", "value": "http://x1.c.lencr.org/", "roles": [ "http-request" ], "is_private": null, "first_seen_epoch": "1634913306.067606000", "last_seen_epoch": "1634917533.050761000", "evidence": [ { "frame_number": 6131, "timestamp_epoch": "1634913306.067606000", "display_filter": "frame.number == 6131", "tcp_stream": 237 }, { "frame_number": 68295, "timestamp_epoch": "1634916950.282522000", "display_filter": "frame.number == 68295", "tcp_stream": 1391 }, { "frame_number": 75143, "timestamp_epoch": "1634917533.050761000", "display_filter": "frame.number == 75143", "tcp_stream": 1505 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-2bf07585a490aa1cd03819fc", "type": "user_agent", "value": "Microsoft Edge/95.0.1020.30 Windows", "roles": [ "http-client" ], "is_private": null, "first_seen_epoch": "1634913345.915901000", "last_seen_epoch": "1634913348.938407000", "evidence": [ { "frame_number": 6222, "timestamp_epoch": "1634913345.915901000", "display_filter": "frame.number == 6222" }, { "frame_number": 6374, "timestamp_epoch": "1634913346.920570000", "display_filter": "frame.number == 6374" }, { "frame_number": 6428, "timestamp_epoch": "1634913347.935448000", "display_filter": "frame.number == 6428" }, { "frame_number": 6444, "timestamp_epoch": "1634913348.938407000", "display_filter": "frame.number == 6444" } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-c6e1f6075d698b9a92550d6e", "type": "user_agent", "value": "Microsoft-CryptoAPI/10.0", "roles": [ "http-client" ], "is_private": null, "first_seen_epoch": "1634913245.508732000", "last_seen_epoch": "1634917533.050761000", "evidence": [ { "frame_number": 5034, "timestamp_epoch": "1634913245.508732000", "display_filter": "frame.number == 5034", "tcp_stream": 213 }, { "frame_number": 5109, "timestamp_epoch": "1634913245.625982000", "display_filter": "frame.number == 5109", "tcp_stream": 213 }, { "frame_number": 5115, "timestamp_epoch": "1634913245.711787000", "display_filter": "frame.number == 5115", "tcp_stream": 213 }, { "frame_number": 5393, "timestamp_epoch": "1634913273.971119000", "display_filter": "frame.number == 5393", "tcp_stream": 227 }, { "frame_number": 6131, "timestamp_epoch": "1634913306.067606000", "display_filter": "frame.number == 6131", "tcp_stream": 237 }, { "frame_number": 6143, "timestamp_epoch": "1634913307.242763000", "display_filter": "frame.number == 6143", "tcp_stream": 238 }, { "frame_number": 6146, "timestamp_epoch": "1634913307.325299000", "display_filter": "frame.number == 6146", "tcp_stream": 238 }, { "frame_number": 15954, "timestamp_epoch": "1634913814.849469000", "display_filter": "frame.number == 15954", "tcp_stream": 324 }, { "frame_number": 68295, "timestamp_epoch": "1634916950.282522000", "display_filter": "frame.number == 68295", "tcp_stream": 1391 }, { "frame_number": 75143, "timestamp_epoch": "1634917533.050761000", "display_filter": "frame.number == 75143", "tcp_stream": 1505 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-8033118147219ee5556cebbc", "type": "user_agent", "value": "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)", "roles": [ "http-client" ], "is_private": null, "first_seen_epoch": "1634913421.654401000", "last_seen_epoch": "1634913428.775164000", "evidence": [ { "frame_number": 7250, "timestamp_epoch": "1634913421.654401000", "display_filter": "frame.number == 7250", "tcp_stream": 254 }, { "frame_number": 8450, "timestamp_epoch": "1634913426.801894000", "display_filter": "frame.number == 8450", "tcp_stream": 256 }, { "frame_number": 9651, "timestamp_epoch": "1634913428.775164000", "display_filter": "frame.number == 9651", "tcp_stream": 257 } ], "enrichment_state": "not_requested" }, { "observable_id": "observable-ff62a61f807b2d1f03f40a9f", "type": "user_agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Edg/85.0.564.67", "roles": [ "http-client" ], "is_private": null, "first_seen_epoch": "1634918066.335618000", "last_seen_epoch": "1634918066.335618000", "evidence": [ { "frame_number": 80443, "timestamp_epoch": "1634918066.335618000", "display_filter": "frame.number == 80443", "tcp_stream": 1583 } ], "enrichment_state": "not_requested" } ], "findings": [ { "finding_id": "finding-fe313fb4eb4f2c8c73a1f4f9", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 825, "timestamp_epoch": "1634913113.850586000", "display_filter": "frame.number == 825", "udp_stream": 43 }, { "frame_number": 1639, "timestamp_epoch": "1634913129.896164000", "display_filter": "frame.number == 1639", "udp_stream": 70 }, { "frame_number": 2954, "timestamp_epoch": "1634913189.897467000", "display_filter": "frame.number == 2954", "udp_stream": 123 }, { "frame_number": 15029, "timestamp_epoch": "1634913789.924426000", "display_filter": "frame.number == 15029", "udp_stream": 278 }, { "frame_number": 17432, "timestamp_epoch": "1634913920.085523000", "display_filter": "frame.number == 17432", "udp_stream": 302 }, { "frame_number": 17480, "timestamp_epoch": "1634913935.163297000", "display_filter": "frame.number == 17480", "udp_stream": 308 }, { "frame_number": 17756, "timestamp_epoch": "1634913995.164584000", "display_filter": "frame.number == 17756", "udp_stream": 319 }, { "frame_number": 17877, "timestamp_epoch": "1634914025.414938000", "display_filter": "frame.number == 17877", "udp_stream": 326 }, { "frame_number": 17929, "timestamp_epoch": "1634914040.416494000", "display_filter": "frame.number == 17929", "udp_stream": 328 }, { "frame_number": 20567, "timestamp_epoch": "1634914100.418112000", "display_filter": "frame.number == 20567", "udp_stream": 338 }, { "frame_number": 20642, "timestamp_epoch": "1634914120.770109000", "display_filter": "frame.number == 20642", "udp_stream": 340 }, { "frame_number": 20687, "timestamp_epoch": "1634914135.778712000", "display_filter": "frame.number == 20687", "udp_stream": 343 }, { "frame_number": 22341, "timestamp_epoch": "1634914195.797190000", "display_filter": "frame.number == 22341", "udp_stream": 347 }, { "frame_number": 22405, "timestamp_epoch": "1634914214.343673000", "display_filter": "frame.number == 22405", "udp_stream": 352 }, { "frame_number": 22488, "timestamp_epoch": "1634914229.359261000", "display_filter": "frame.number == 22488", "udp_stream": 357 }, { "frame_number": 22699, "timestamp_epoch": "1634914289.360718000", "display_filter": "frame.number == 22699", "udp_stream": 367 }, { "frame_number": 22828, "timestamp_epoch": "1634914329.874275000", "display_filter": "frame.number == 22828", "udp_stream": 374 }, { "frame_number": 22902, "timestamp_epoch": "1634914344.875954000", "display_filter": "frame.number == 22902", "udp_stream": 380 }, { "frame_number": 23074, "timestamp_epoch": "1634914404.879988000", "display_filter": "frame.number == 23074", "udp_stream": 390 }, { "frame_number": 23181, "timestamp_epoch": "1634914442.597449000", "display_filter": "frame.number == 23181", "udp_stream": 398 }, { "frame_number": 23224, "timestamp_epoch": "1634914457.599390000", "display_filter": "frame.number == 23224", "udp_stream": 400 }, { "frame_number": 23624, "timestamp_epoch": "1634914517.617138000", "display_filter": "frame.number == 23624", "udp_stream": 417 }, { "frame_number": 23725, "timestamp_epoch": "1634914550.884098000", "display_filter": "frame.number == 23725", "udp_stream": 424 }, { "frame_number": 23766, "timestamp_epoch": "1634914565.898876000", "display_filter": "frame.number == 23766", "udp_stream": 427 }, { "frame_number": 23922, "timestamp_epoch": "1634914625.900650000", "display_filter": "frame.number == 23922", "udp_stream": 437 }, { "frame_number": 24009, "timestamp_epoch": "1634914656.213481000", "display_filter": "frame.number == 24009", "udp_stream": 444 }, { "frame_number": 24039, "timestamp_epoch": "1634914671.229754000", "display_filter": "frame.number == 24039", "udp_stream": 446 }, { "frame_number": 24171, "timestamp_epoch": "1634914704.264229000", "display_filter": "frame.number == 24171", "udp_stream": 454 }, { "frame_number": 24215, "timestamp_epoch": "1634914719.262326000", "display_filter": "frame.number == 24215", "udp_stream": 457 }, { "frame_number": 24401, "timestamp_epoch": "1634914779.281281000", "display_filter": "frame.number == 24401", "udp_stream": 468 }, { "frame_number": 24419, "timestamp_epoch": "1634914784.233039000", "display_filter": "frame.number == 24419", "udp_stream": 471 }, { "frame_number": 24460, "timestamp_epoch": "1634914799.233036000", "display_filter": "frame.number == 24460", "udp_stream": 474 }, { "frame_number": 24630, "timestamp_epoch": "1634914859.224438000", "display_filter": "frame.number == 24630", "udp_stream": 484 }, { "frame_number": 24662, "timestamp_epoch": "1634914872.367876000", "display_filter": "frame.number == 24662", "udp_stream": 486 }, { "frame_number": 24714, "timestamp_epoch": "1634914887.359843000", "display_filter": "frame.number == 24714", "udp_stream": 488 }, { "frame_number": 25942, "timestamp_epoch": "1634914947.373433000", "display_filter": "frame.number == 25942", "udp_stream": 499 }, { "frame_number": 51487, "timestamp_epoch": "1634915547.391306000", "display_filter": "frame.number == 51487", "udp_stream": 662 }, { "frame_number": 59764, "timestamp_epoch": "1634916147.456162000", "display_filter": "frame.number == 59764", "udp_stream": 751 }, { "frame_number": 66440, "timestamp_epoch": "1634916747.482971000", "display_filter": "frame.number == 66440", "udp_stream": 860 }, { "frame_number": 71950, "timestamp_epoch": "1634917347.560843000", "display_filter": "frame.number == 71950", "udp_stream": 949 }, { "frame_number": 78478, "timestamp_epoch": "1634917947.653388000", "display_filter": "frame.number == 78478", "udp_stream": 1023 }, { "frame_number": 84127, "timestamp_epoch": "1634918547.690116000", "display_filter": "frame.number == 84127", "udp_stream": 1081 } ], "metrics": { "source": "10.10.22.156", "domain": "wpad.enemywatch.net", "response_count": 42 } }, { "finding_id": "finding-7e6e3a47e0cbb5f8868ae1c6", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 827, "timestamp_epoch": "1634913113.851046000", "display_filter": "frame.number == 827", "udp_stream": 44 }, { "frame_number": 1641, "timestamp_epoch": "1634913129.896996000", "display_filter": "frame.number == 1641", "udp_stream": 71 }, { "frame_number": 2956, "timestamp_epoch": "1634913189.898363000", "display_filter": "frame.number == 2956", "udp_stream": 124 }, { "frame_number": 15031, "timestamp_epoch": "1634913789.926143000", "display_filter": "frame.number == 15031", "udp_stream": 279 }, { "frame_number": 17435, "timestamp_epoch": "1634913920.155227000", "display_filter": "frame.number == 17435", "udp_stream": 303 }, { "frame_number": 17482, "timestamp_epoch": "1634913935.164180000", "display_filter": "frame.number == 17482", "udp_stream": 309 }, { "frame_number": 17758, "timestamp_epoch": "1634913995.165577000", "display_filter": "frame.number == 17758", "udp_stream": 160 }, { "frame_number": 17880, "timestamp_epoch": "1634914025.415749000", "display_filter": "frame.number == 17880", "udp_stream": 327 }, { "frame_number": 17931, "timestamp_epoch": "1634914040.417565000", "display_filter": "frame.number == 17931", "udp_stream": 329 }, { "frame_number": 20569, "timestamp_epoch": "1634914100.418985000", "display_filter": "frame.number == 20569", "udp_stream": 339 }, { "frame_number": 20645, "timestamp_epoch": "1634914120.771013000", "display_filter": "frame.number == 20645", "udp_stream": 341 }, { "frame_number": 20689, "timestamp_epoch": "1634914135.779841000", "display_filter": "frame.number == 20689", "udp_stream": 344 }, { "frame_number": 22343, "timestamp_epoch": "1634914195.798004000", "display_filter": "frame.number == 22343", "udp_stream": 348 }, { "frame_number": 22408, "timestamp_epoch": "1634914214.344439000", "display_filter": "frame.number == 22408", "udp_stream": 353 }, { "frame_number": 22490, "timestamp_epoch": "1634914229.360861000", "display_filter": "frame.number == 22490", "udp_stream": 358 }, { "frame_number": 22701, "timestamp_epoch": "1634914289.361806000", "display_filter": "frame.number == 22701", "udp_stream": 368 }, { "frame_number": 22831, "timestamp_epoch": "1634914329.874791000", "display_filter": "frame.number == 22831", "udp_stream": 375 }, { "frame_number": 22904, "timestamp_epoch": "1634914344.876688000", "display_filter": "frame.number == 22904", "udp_stream": 381 }, { "frame_number": 23076, "timestamp_epoch": "1634914404.881718000", "display_filter": "frame.number == 23076", "udp_stream": 391 }, { "frame_number": 23184, "timestamp_epoch": "1634914442.598088000", "display_filter": "frame.number == 23184", "udp_stream": 399 }, { "frame_number": 23226, "timestamp_epoch": "1634914457.600047000", "display_filter": "frame.number == 23226", "udp_stream": 401 }, { "frame_number": 23626, "timestamp_epoch": "1634914517.618070000", "display_filter": "frame.number == 23626", "udp_stream": 418 }, { "frame_number": 23727, "timestamp_epoch": "1634914550.885082000", "display_filter": "frame.number == 23727", "udp_stream": 425 }, { "frame_number": 23768, "timestamp_epoch": "1634914565.899945000", "display_filter": "frame.number == 23768", "udp_stream": 428 }, { "frame_number": 23924, "timestamp_epoch": "1634914625.901471000", "display_filter": "frame.number == 23924", "udp_stream": 438 }, { "frame_number": 24012, "timestamp_epoch": "1634914656.214597000", "display_filter": "frame.number == 24012", "udp_stream": 445 }, { "frame_number": 24041, "timestamp_epoch": "1634914671.230734000", "display_filter": "frame.number == 24041", "udp_stream": 447 }, { "frame_number": 24174, "timestamp_epoch": "1634914704.265783000", "display_filter": "frame.number == 24174", "udp_stream": 455 }, { "frame_number": 24217, "timestamp_epoch": "1634914719.263165000", "display_filter": "frame.number == 24217", "udp_stream": 458 }, { "frame_number": 24403, "timestamp_epoch": "1634914779.282226000", "display_filter": "frame.number == 24403", "udp_stream": 469 }, { "frame_number": 24421, "timestamp_epoch": "1634914784.234191000", "display_filter": "frame.number == 24421", "udp_stream": 472 }, { "frame_number": 24462, "timestamp_epoch": "1634914799.234105000", "display_filter": "frame.number == 24462", "udp_stream": 475 }, { "frame_number": 24632, "timestamp_epoch": "1634914859.280742000", "display_filter": "frame.number == 24632", "udp_stream": 485 }, { "frame_number": 24664, "timestamp_epoch": "1634914872.368608000", "display_filter": "frame.number == 24664", "udp_stream": 487 }, { "frame_number": 24716, "timestamp_epoch": "1634914887.360763000", "display_filter": "frame.number == 24716", "udp_stream": 489 }, { "frame_number": 25944, "timestamp_epoch": "1634914947.374424000", "display_filter": "frame.number == 25944", "udp_stream": 500 }, { "frame_number": 51489, "timestamp_epoch": "1634915547.394619000", "display_filter": "frame.number == 51489", "udp_stream": 663 }, { "frame_number": 59766, "timestamp_epoch": "1634916147.457337000", "display_filter": "frame.number == 59766", "udp_stream": 752 }, { "frame_number": 66442, "timestamp_epoch": "1634916747.483707000", "display_filter": "frame.number == 66442", "udp_stream": 861 }, { "frame_number": 71952, "timestamp_epoch": "1634917347.561640000", "display_filter": "frame.number == 71952", "udp_stream": 950 }, { "frame_number": 78480, "timestamp_epoch": "1634917947.654090000", "display_filter": "frame.number == 78480", "udp_stream": 1024 }, { "frame_number": 84129, "timestamp_epoch": "1634918547.690773000", "display_filter": "frame.number == 84129", "udp_stream": 1082 } ], "metrics": { "source": "10.10.22.156", "domain": "wpad.localdomain", "response_count": 42 } }, { "finding_id": "finding-2ff5dff90c1bb4aa4e9288b4", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 39, "timestamp_epoch": "1634913053.599183000", "display_filter": "frame.number == 39", "udp_stream": 10 }, { "frame_number": 752, "timestamp_epoch": "1634913070.790860000", "display_filter": "frame.number == 752", "udp_stream": 32 }, { "frame_number": 1643, "timestamp_epoch": "1634913130.805321000", "display_filter": "frame.number == 1643", "udp_stream": 72 }, { "frame_number": 11964, "timestamp_epoch": "1634913730.845643000", "display_filter": "frame.number == 11964", "udp_stream": 264 }, { "frame_number": 22840, "timestamp_epoch": "1634914330.908117000", "display_filter": "frame.number == 22840", "udp_stream": 376 }, { "frame_number": 24862, "timestamp_epoch": "1634914930.937051000", "display_filter": "frame.number == 24862", "udp_stream": 494 }, { "frame_number": 50933, "timestamp_epoch": "1634915531.001414000", "display_filter": "frame.number == 50933", "udp_stream": 649 }, { "frame_number": 59676, "timestamp_epoch": "1634916131.048404000", "display_filter": "frame.number == 59676", "udp_stream": 746 }, { "frame_number": 66339, "timestamp_epoch": "1634916731.075094000", "display_filter": "frame.number == 66339", "udp_stream": 851 }, { "frame_number": 71492, "timestamp_epoch": "1634917331.152513000", "display_filter": "frame.number == 71492", "udp_stream": 946 }, { "frame_number": 78404, "timestamp_epoch": "1634917931.214967000", "display_filter": "frame.number == 78404", "udp_stream": 1021 }, { "frame_number": 84052, "timestamp_epoch": "1634918531.253039000", "display_filter": "frame.number == 84052", "udp_stream": 1076 } ], "metrics": { "source": "10.10.22.157", "domain": "wpad.enemywatch.net", "response_count": 12 } }, { "finding_id": "finding-0abec936620387197a1c8ec9", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 41, "timestamp_epoch": "1634913053.600187000", "display_filter": "frame.number == 41", "udp_stream": 11 }, { "frame_number": 754, "timestamp_epoch": "1634913070.791562000", "display_filter": "frame.number == 754", "udp_stream": 33 }, { "frame_number": 1645, "timestamp_epoch": "1634913130.805902000", "display_filter": "frame.number == 1645", "udp_stream": 73 }, { "frame_number": 11966, "timestamp_epoch": "1634913730.846316000", "display_filter": "frame.number == 11966", "udp_stream": 265 }, { "frame_number": 22842, "timestamp_epoch": "1634914330.908691000", "display_filter": "frame.number == 22842", "udp_stream": 377 }, { "frame_number": 24864, "timestamp_epoch": "1634914930.937711000", "display_filter": "frame.number == 24864", "udp_stream": 495 }, { "frame_number": 50935, "timestamp_epoch": "1634915531.002113000", "display_filter": "frame.number == 50935", "udp_stream": 650 }, { "frame_number": 59678, "timestamp_epoch": "1634916131.103842000", "display_filter": "frame.number == 59678", "udp_stream": 747 }, { "frame_number": 66341, "timestamp_epoch": "1634916731.075832000", "display_filter": "frame.number == 66341", "udp_stream": 852 }, { "frame_number": 71495, "timestamp_epoch": "1634917331.202920000", "display_filter": "frame.number == 71495", "udp_stream": 947 }, { "frame_number": 78406, "timestamp_epoch": "1634917931.215639000", "display_filter": "frame.number == 78406", "udp_stream": 1022 }, { "frame_number": 84054, "timestamp_epoch": "1634918531.328141000", "display_filter": "frame.number == 84054", "udp_stream": 1077 } ], "metrics": { "source": "10.10.22.157", "domain": "wpad.localdomain", "response_count": 12 } }, { "finding_id": "finding-75bebaab99ac531b47499d85", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 1719, "timestamp_epoch": "1634913144.722420000", "display_filter": "frame.number == 1719", "udp_stream": 83 }, { "frame_number": 2522, "timestamp_epoch": "1634913161.020747000", "display_filter": "frame.number == 2522", "udp_stream": 110 }, { "frame_number": 3813, "timestamp_epoch": "1634913221.035309000", "display_filter": "frame.number == 3813", "udp_stream": 142 }, { "frame_number": 6217, "timestamp_epoch": "1634913345.771390000", "display_filter": "frame.number == 6217", "udp_stream": 185 }, { "frame_number": 6501, "timestamp_epoch": "1634913353.813711000", "display_filter": "frame.number == 6501", "udp_stream": 200 }, { "frame_number": 11440, "timestamp_epoch": "1634913673.841064000", "display_filter": "frame.number == 11440", "udp_stream": 244 }, { "frame_number": 11530, "timestamp_epoch": "1634913688.838516000", "display_filter": "frame.number == 11530", "udp_stream": 249 }, { "frame_number": 12935, "timestamp_epoch": "1634913748.853338000", "display_filter": "frame.number == 12935", "udp_stream": 268 }, { "frame_number": 22919, "timestamp_epoch": "1634914348.871719000", "display_filter": "frame.number == 22919", "udp_stream": 383 }, { "frame_number": 25951, "timestamp_epoch": "1634914948.901928000", "display_filter": "frame.number == 25951", "udp_stream": 501 }, { "frame_number": 51541, "timestamp_epoch": "1634915548.962889000", "display_filter": "frame.number == 51541", "udp_stream": 665 }, { "frame_number": 59826, "timestamp_epoch": "1634916149.027760000", "display_filter": "frame.number == 59826", "udp_stream": 754 }, { "frame_number": 66451, "timestamp_epoch": "1634916749.071493000", "display_filter": "frame.number == 66451", "udp_stream": 862 }, { "frame_number": 71969, "timestamp_epoch": "1634917349.148818000", "display_filter": "frame.number == 71969", "udp_stream": 951 }, { "frame_number": 78482, "timestamp_epoch": "1634917949.226193000", "display_filter": "frame.number == 78482", "udp_stream": 1025 }, { "frame_number": 84148, "timestamp_epoch": "1634918549.277947000", "display_filter": "frame.number == 84148", "udp_stream": 1084 } ], "metrics": { "source": "10.10.22.158", "domain": "wpad.enemywatch.net", "response_count": 16 } }, { "finding_id": "finding-a8a40ac1e77eb39085827c4e", "rule_id": "repeated-nxdomain", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Repeated unsuccessful DNS resolution", "explanation": "Repeated NXDOMAIN responses may indicate a dead domain, misconfiguration, retrying software, or malicious fallback. They do not establish a domain-generation algorithm.", "confidence": 0.5, "status": "candidate", "evidence": [ { "frame_number": 1721, "timestamp_epoch": "1634913144.722778000", "display_filter": "frame.number == 1721", "udp_stream": 84 }, { "frame_number": 2524, "timestamp_epoch": "1634913161.021420000", "display_filter": "frame.number == 2524", "udp_stream": 111 }, { "frame_number": 3815, "timestamp_epoch": "1634913221.035924000", "display_filter": "frame.number == 3815", "udp_stream": 143 }, { "frame_number": 6219, "timestamp_epoch": "1634913345.806553000", "display_filter": "frame.number == 6219", "udp_stream": 186 }, { "frame_number": 6503, "timestamp_epoch": "1634913353.814338000", "display_filter": "frame.number == 6503", "udp_stream": 201 }, { "frame_number": 11442, "timestamp_epoch": "1634913673.842037000", "display_filter": "frame.number == 11442", "udp_stream": 245 }, { "frame_number": 11532, "timestamp_epoch": "1634913688.839222000", "display_filter": "frame.number == 11532", "udp_stream": 250 }, { "frame_number": 12937, "timestamp_epoch": "1634913748.854012000", "display_filter": "frame.number == 12937", "udp_stream": 269 }, { "frame_number": 22921, "timestamp_epoch": "1634914348.872293000", "display_filter": "frame.number == 22921", "udp_stream": 384 }, { "frame_number": 25953, "timestamp_epoch": "1634914948.902740000", "display_filter": "frame.number == 25953", "udp_stream": 502 }, { "frame_number": 51543, "timestamp_epoch": "1634915548.963577000", "display_filter": "frame.number == 51543", "udp_stream": 666 }, { "frame_number": 59828, "timestamp_epoch": "1634916149.028590000", "display_filter": "frame.number == 59828", "udp_stream": 755 }, { "frame_number": 66453, "timestamp_epoch": "1634916749.072134000", "display_filter": "frame.number == 66453", "udp_stream": 863 }, { "frame_number": 71971, "timestamp_epoch": "1634917349.149599000", "display_filter": "frame.number == 71971", "udp_stream": 952 }, { "frame_number": 78484, "timestamp_epoch": "1634917949.226998000", "display_filter": "frame.number == 78484", "udp_stream": 863 }, { "frame_number": 84150, "timestamp_epoch": "1634918549.278737000", "display_filter": "frame.number == 84150", "udp_stream": 1085 } ], "metrics": { "source": "10.10.22.158", "domain": "wpad.localdomain", "response_count": 16 } }, { "finding_id": "finding-e8013e820af70780e24d35d0", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 999, "timestamp_epoch": "1634913114.921083000", "display_filter": "frame.number == 999", "tcp_stream": 46 }, { "frame_number": 1001, "timestamp_epoch": "1634913114.921628000", "display_filter": "frame.number == 1001", "tcp_stream": 46 }, { "frame_number": 1003, "timestamp_epoch": "1634913114.922192000", "display_filter": "frame.number == 1003", "tcp_stream": 46 }, { "frame_number": 1013, "timestamp_epoch": "1634913114.924663000", "display_filter": "frame.number == 1013", "tcp_stream": 46 }, { "frame_number": 1015, "timestamp_epoch": "1634913114.925328000", "display_filter": "frame.number == 1015", "tcp_stream": 46 }, { "frame_number": 1017, "timestamp_epoch": "1634913114.926157000", "display_filter": "frame.number == 1017", "tcp_stream": 46 }, { "frame_number": 1030, "timestamp_epoch": "1634913114.935406000", "display_filter": "frame.number == 1030", "tcp_stream": 53 }, { "frame_number": 1032, "timestamp_epoch": "1634913114.935762000", "display_filter": "frame.number == 1032", "tcp_stream": 53 }, { "frame_number": 1034, "timestamp_epoch": "1634913114.936127000", "display_filter": "frame.number == 1034", "tcp_stream": 53 }, { "frame_number": 1036, "timestamp_epoch": "1634913114.936426000", "display_filter": "frame.number == 1036", "tcp_stream": 53 }, { "frame_number": 1120, "timestamp_epoch": "1634913115.055683000", "display_filter": "frame.number == 1120", "tcp_stream": 57 }, { "frame_number": 1122, "timestamp_epoch": "1634913115.056140000", "display_filter": "frame.number == 1122", "tcp_stream": 57 }, { "frame_number": 1124, "timestamp_epoch": "1634913115.056842000", "display_filter": "frame.number == 1124", "tcp_stream": 57 }, { "frame_number": 1126, "timestamp_epoch": "1634913115.057553000", "display_filter": "frame.number == 1126", "tcp_stream": 57 }, { "frame_number": 1448, "timestamp_epoch": "1634913118.519956000", "display_filter": "frame.number == 1448", "tcp_stream": 70 }, { "frame_number": 1450, "timestamp_epoch": "1634913118.520775000", "display_filter": "frame.number == 1450", "tcp_stream": 70 }, { "frame_number": 1452, "timestamp_epoch": "1634913118.522497000", "display_filter": "frame.number == 1452", "tcp_stream": 70 }, { "frame_number": 1456, "timestamp_epoch": "1634913118.524022000", "display_filter": "frame.number == 1456", "tcp_stream": 70 }, { "frame_number": 1458, "timestamp_epoch": "1634913118.525173000", "display_filter": "frame.number == 1458", "tcp_stream": 70 }, { "frame_number": 1460, "timestamp_epoch": "1634913118.525749000", "display_filter": "frame.number == 1460", "tcp_stream": 70 }, { "frame_number": 4223, "timestamp_epoch": "1634913239.064236000", "display_filter": "frame.number == 4223", "tcp_stream": 183 }, { "frame_number": 4225, "timestamp_epoch": "1634913239.064690000", "display_filter": "frame.number == 4225", "tcp_stream": 183 }, { "frame_number": 4227, "timestamp_epoch": "1634913239.065185000", "display_filter": "frame.number == 4227", "tcp_stream": 183 }, { "frame_number": 4229, "timestamp_epoch": "1634913239.065618000", "display_filter": "frame.number == 4229", "tcp_stream": 183 }, { "frame_number": 5686, "timestamp_epoch": "1634913300.070960000", "display_filter": "frame.number == 5686", "tcp_stream": 234 }, { "frame_number": 5688, "timestamp_epoch": "1634913300.071629000", "display_filter": "frame.number == 5688", "tcp_stream": 234 }, { "frame_number": 5690, "timestamp_epoch": "1634913300.072217000", "display_filter": "frame.number == 5690", "tcp_stream": 234 }, { "frame_number": 5694, "timestamp_epoch": "1634913300.073778000", "display_filter": "frame.number == 5694", "tcp_stream": 234 }, { "frame_number": 5696, "timestamp_epoch": "1634913300.074293000", "display_filter": "frame.number == 5696", "tcp_stream": 234 }, { "frame_number": 5698, "timestamp_epoch": "1634913300.074948000", "display_filter": "frame.number == 5698", "tcp_stream": 234 }, { "frame_number": 7157, "timestamp_epoch": "1634913412.852396000", "display_filter": "frame.number == 7157", "tcp_stream": 250 }, { "frame_number": 7159, "timestamp_epoch": "1634913412.852881000", "display_filter": "frame.number == 7159", "tcp_stream": 250 }, { "frame_number": 7161, "timestamp_epoch": "1634913412.853417000", "display_filter": "frame.number == 7161", "tcp_stream": 250 }, { "frame_number": 7165, "timestamp_epoch": "1634913412.858261000", "display_filter": "frame.number == 7165", "tcp_stream": 250 }, { "frame_number": 7167, "timestamp_epoch": "1634913412.858713000", "display_filter": "frame.number == 7167", "tcp_stream": 250 }, { "frame_number": 7169, "timestamp_epoch": "1634913412.859241000", "display_filter": "frame.number == 7169", "tcp_stream": 250 }, { "frame_number": 29254, "timestamp_epoch": "1634915040.434513000", "display_filter": "frame.number == 29254", "tcp_stream": 763 }, { "frame_number": 29256, "timestamp_epoch": "1634915040.435017000", "display_filter": "frame.number == 29256", "tcp_stream": 763 }, { "frame_number": 29258, "timestamp_epoch": "1634915040.435432000", "display_filter": "frame.number == 29258", "tcp_stream": 763 }, { "frame_number": 29260, "timestamp_epoch": "1634915040.435814000", "display_filter": "frame.number == 29260", "tcp_stream": 763 }, { "frame_number": 29262, "timestamp_epoch": "1634915040.436251000", "display_filter": "frame.number == 29262", "tcp_stream": 763 }, { "frame_number": 29280, "timestamp_epoch": "1634915040.451299000", "display_filter": "frame.number == 29280", "tcp_stream": 765 }, { "frame_number": 29282, "timestamp_epoch": "1634915040.452022000", "display_filter": "frame.number == 29282", "tcp_stream": 765 }, { "frame_number": 29286, "timestamp_epoch": "1634915040.452617000", "display_filter": "frame.number == 29286", "tcp_stream": 765 }, { "frame_number": 29290, "timestamp_epoch": "1634915040.454554000", "display_filter": "frame.number == 29290", "tcp_stream": 765 }, { "frame_number": 29292, "timestamp_epoch": "1634915040.454951000", "display_filter": "frame.number == 29292", "tcp_stream": 765 }, { "frame_number": 29294, "timestamp_epoch": "1634915040.455474000", "display_filter": "frame.number == 29294", "tcp_stream": 765 }, { "frame_number": 48337, "timestamp_epoch": "1634915472.186645000", "display_filter": "frame.number == 48337", "tcp_stream": 909 }, { "frame_number": 48339, "timestamp_epoch": "1634915472.187321000", "display_filter": "frame.number == 48339", "tcp_stream": 909 }, { "frame_number": 48341, "timestamp_epoch": "1634915472.188030000", "display_filter": "frame.number == 48341", "tcp_stream": 909 }, { "frame_number": 48345, "timestamp_epoch": "1634915472.190234000", "display_filter": "frame.number == 48345", "tcp_stream": 909 }, { "frame_number": 48347, "timestamp_epoch": "1634915472.190779000", "display_filter": "frame.number == 48347", "tcp_stream": 909 }, { "frame_number": 48349, "timestamp_epoch": "1634915472.191359000", "display_filter": "frame.number == 48349", "tcp_stream": 909 }, { "frame_number": 62105, "timestamp_epoch": "1634916360.366828000", "display_filter": "frame.number == 62105", "tcp_stream": 1265 }, { "frame_number": 62107, "timestamp_epoch": "1634916360.367545000", "display_filter": "frame.number == 62107", "tcp_stream": 1265 }, { "frame_number": 62109, "timestamp_epoch": "1634916360.368192000", "display_filter": "frame.number == 62109", "tcp_stream": 1265 }, { "frame_number": 62113, "timestamp_epoch": "1634916360.369813000", "display_filter": "frame.number == 62113", "tcp_stream": 1265 }, { "frame_number": 62115, "timestamp_epoch": "1634916360.370332000", "display_filter": "frame.number == 62115", "tcp_stream": 1265 }, { "frame_number": 62117, "timestamp_epoch": "1634916360.370883000", "display_filter": "frame.number == 62117", "tcp_stream": 1265 } ], "metrics": { "source": "10.10.22.156", "destination": "10.10.22.22", "protocol": "drsuapi", "event_count": 59, "operation_numbers": [ "0", "1", "12", "13", "30" ] } }, { "finding_id": "finding-1c78d0c86dc22ff8dbc9f82c", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 804, "timestamp_epoch": "1634913113.472119000", "display_filter": "frame.number == 804", "tcp_stream": 37 }, { "frame_number": 965, "timestamp_epoch": "1634913114.914826000", "display_filter": "frame.number == 965", "tcp_stream": 37 }, { "frame_number": 994, "timestamp_epoch": "1634913114.920432000", "display_filter": "frame.number == 994", "tcp_stream": 37 }, { "frame_number": 1062, "timestamp_epoch": "1634913114.964831000", "display_filter": "frame.number == 1062", "tcp_stream": 55 }, { "frame_number": 1069, "timestamp_epoch": "1634913114.967383000", "display_filter": "frame.number == 1069", "tcp_stream": 55 }, { "frame_number": 1072, "timestamp_epoch": "1634913114.969303000", "display_filter": "frame.number == 1072", "tcp_stream": 55 }, { "frame_number": 1074, "timestamp_epoch": "1634913114.969846000", "display_filter": "frame.number == 1074", "tcp_stream": 55 }, { "frame_number": 1137, "timestamp_epoch": "1634913115.095837000", "display_filter": "frame.number == 1137", "tcp_stream": 55 }, { "frame_number": 1151, "timestamp_epoch": "1634913115.457790000", "display_filter": "frame.number == 1151", "tcp_stream": 55 }, { "frame_number": 1167, "timestamp_epoch": "1634913115.627062000", "display_filter": "frame.number == 1167", "tcp_stream": 55 }, { "frame_number": 1175, "timestamp_epoch": "1634913115.628605000", "display_filter": "frame.number == 1175", "tcp_stream": 55 }, { "frame_number": 1178, "timestamp_epoch": "1634913115.629342000", "display_filter": "frame.number == 1178", "tcp_stream": 55 }, { "frame_number": 1180, "timestamp_epoch": "1634913115.630418000", "display_filter": "frame.number == 1180", "tcp_stream": 55 }, { "frame_number": 1187, "timestamp_epoch": "1634913116.332697000", "display_filter": "frame.number == 1187", "tcp_stream": 63 }, { "frame_number": 1192, "timestamp_epoch": "1634913116.335888000", "display_filter": "frame.number == 1192", "tcp_stream": 63 }, { "frame_number": 1211, "timestamp_epoch": "1634913116.516648000", "display_filter": "frame.number == 1211", "tcp_stream": 63 }, { "frame_number": 1219, "timestamp_epoch": "1634913116.559484000", "display_filter": "frame.number == 1219", "tcp_stream": 65 }, { "frame_number": 1222, "timestamp_epoch": "1634913116.564207000", "display_filter": "frame.number == 1222", "tcp_stream": 65 }, { "frame_number": 1224, "timestamp_epoch": "1634913116.566356000", "display_filter": "frame.number == 1224", "tcp_stream": 65 }, { "frame_number": 1226, "timestamp_epoch": "1634913116.567720000", "display_filter": "frame.number == 1226", "tcp_stream": 63 }, { "frame_number": 1410, "timestamp_epoch": "1634913117.486633000", "display_filter": "frame.number == 1410", "tcp_stream": 65 }, { "frame_number": 1414, "timestamp_epoch": "1634913117.493705000", "display_filter": "frame.number == 1414", "tcp_stream": 63 }, { "frame_number": 1465, "timestamp_epoch": "1634913118.528340000", "display_filter": "frame.number == 1465", "tcp_stream": 71 }, { "frame_number": 1470, "timestamp_epoch": "1634913118.529289000", "display_filter": "frame.number == 1470", "tcp_stream": 71 }, { "frame_number": 1473, "timestamp_epoch": "1634913118.530231000", "display_filter": "frame.number == 1473", "tcp_stream": 71 }, { "frame_number": 1475, "timestamp_epoch": "1634913118.531727000", "display_filter": "frame.number == 1475", "tcp_stream": 71 }, { "frame_number": 1477, "timestamp_epoch": "1634913118.532327000", "display_filter": "frame.number == 1477", "tcp_stream": 71 }, { "frame_number": 1483, "timestamp_epoch": "1634913118.537038000", "display_filter": "frame.number == 1483", "tcp_stream": 72 }, { "frame_number": 1486, "timestamp_epoch": "1634913118.538808000", "display_filter": "frame.number == 1486", "tcp_stream": 72 }, { "frame_number": 1491, "timestamp_epoch": "1634913118.539698000", "display_filter": "frame.number == 1491", "tcp_stream": 72 }, { "frame_number": 1493, "timestamp_epoch": "1634913118.540226000", "display_filter": "frame.number == 1493", "tcp_stream": 72 }, { "frame_number": 1497, "timestamp_epoch": "1634913118.540617000", "display_filter": "frame.number == 1497", "tcp_stream": 71 }, { "frame_number": 1530, "timestamp_epoch": "1634913123.730206000", "display_filter": "frame.number == 1530", "tcp_stream": 73 }, { "frame_number": 1535, "timestamp_epoch": "1634913123.733110000", "display_filter": "frame.number == 1535", "tcp_stream": 73 }, { "frame_number": 1538, "timestamp_epoch": "1634913123.736712000", "display_filter": "frame.number == 1538", "tcp_stream": 73 }, { "frame_number": 1542, "timestamp_epoch": "1634913124.126522000", "display_filter": "frame.number == 1542", "tcp_stream": 73 }, { "frame_number": 1544, "timestamp_epoch": "1634913124.127428000", "display_filter": "frame.number == 1544", "tcp_stream": 73 }, { "frame_number": 1546, "timestamp_epoch": "1634913124.134455000", "display_filter": "frame.number == 1546", "tcp_stream": 73 }, { "frame_number": 1548, "timestamp_epoch": "1634913124.135382000", "display_filter": "frame.number == 1548", "tcp_stream": 73 }, { "frame_number": 1556, "timestamp_epoch": "1634913124.232331000", "display_filter": "frame.number == 1556", "tcp_stream": 74 }, { "frame_number": 1559, "timestamp_epoch": "1634913124.234232000", "display_filter": "frame.number == 1559", "tcp_stream": 74 }, { "frame_number": 1591, "timestamp_epoch": "1634913124.241152000", "display_filter": "frame.number == 1591", "tcp_stream": 74 }, { "frame_number": 1593, "timestamp_epoch": "1634913124.242098000", "display_filter": "frame.number == 1593", "tcp_stream": 74 }, { "frame_number": 1595, "timestamp_epoch": "1634913124.242736000", "display_filter": "frame.number == 1595", "tcp_stream": 73 }, { "frame_number": 4329, "timestamp_epoch": "1634913239.402534000", "display_filter": "frame.number == 4329", "tcp_stream": 193 }, { "frame_number": 4332, "timestamp_epoch": "1634913239.409691000", "display_filter": "frame.number == 4332", "tcp_stream": 193 }, { "frame_number": 4338, "timestamp_epoch": "1634913239.430496000", "display_filter": "frame.number == 4338", "tcp_stream": 194 }, { "frame_number": 4341, "timestamp_epoch": "1634913239.432229000", "display_filter": "frame.number == 4341", "tcp_stream": 194 }, { "frame_number": 4343, "timestamp_epoch": "1634913239.432663000", "display_filter": "frame.number == 4343", "tcp_stream": 194 }, { "frame_number": 4345, "timestamp_epoch": "1634913239.433280000", "display_filter": "frame.number == 4345", "tcp_stream": 193 }, { "frame_number": 4351, "timestamp_epoch": "1634913239.768650000", "display_filter": "frame.number == 4351", "tcp_stream": 194 }, { "frame_number": 4353, "timestamp_epoch": "1634913239.774672000", "display_filter": "frame.number == 4353", "tcp_stream": 193 }, { "frame_number": 5703, "timestamp_epoch": "1634913300.078910000", "display_filter": "frame.number == 5703", "tcp_stream": 235 }, { "frame_number": 5708, "timestamp_epoch": "1634913300.081216000", "display_filter": "frame.number == 5708", "tcp_stream": 235 }, { "frame_number": 5711, "timestamp_epoch": "1634913300.082854000", "display_filter": "frame.number == 5711", "tcp_stream": 235 }, { "frame_number": 5713, "timestamp_epoch": "1634913300.083555000", "display_filter": "frame.number == 5713", "tcp_stream": 235 }, { "frame_number": 5715, "timestamp_epoch": "1634913300.084086000", "display_filter": "frame.number == 5715", "tcp_stream": 235 }, { "frame_number": 5721, "timestamp_epoch": "1634913300.088553000", "display_filter": "frame.number == 5721", "tcp_stream": 236 }, { "frame_number": 5724, "timestamp_epoch": "1634913300.089814000", "display_filter": "frame.number == 5724", "tcp_stream": 236 }, { "frame_number": 5729, "timestamp_epoch": "1634913300.090591000", "display_filter": "frame.number == 5729", "tcp_stream": 236 }, { "frame_number": 5731, "timestamp_epoch": "1634913300.091151000", "display_filter": "frame.number == 5731", "tcp_stream": 236 }, { "frame_number": 5735, "timestamp_epoch": "1634913300.091474000", "display_filter": "frame.number == 5735", "tcp_stream": 235 }, { "frame_number": 7174, "timestamp_epoch": "1634913412.867478000", "display_filter": "frame.number == 7174", "tcp_stream": 251 }, { "frame_number": 7179, "timestamp_epoch": "1634913412.869539000", "display_filter": "frame.number == 7179", "tcp_stream": 251 }, { "frame_number": 7182, "timestamp_epoch": "1634913412.870855000", "display_filter": "frame.number == 7182", "tcp_stream": 251 }, { "frame_number": 7184, "timestamp_epoch": "1634913412.871373000", "display_filter": "frame.number == 7184", "tcp_stream": 251 }, { "frame_number": 7186, "timestamp_epoch": "1634913412.871882000", "display_filter": "frame.number == 7186", "tcp_stream": 251 }, { "frame_number": 7192, "timestamp_epoch": "1634913412.878781000", "display_filter": "frame.number == 7192", "tcp_stream": 252 }, { "frame_number": 7197, "timestamp_epoch": "1634913412.880397000", "display_filter": "frame.number == 7197", "tcp_stream": 252 }, { "frame_number": 7202, "timestamp_epoch": "1634913412.881123000", "display_filter": "frame.number == 7202", "tcp_stream": 252 }, { "frame_number": 7204, "timestamp_epoch": "1634913412.881770000", "display_filter": "frame.number == 7204", "tcp_stream": 252 }, { "frame_number": 7208, "timestamp_epoch": "1634913412.882540000", "display_filter": "frame.number == 7208", "tcp_stream": 251 }, { "frame_number": 29306, "timestamp_epoch": "1634915040.562287000", "display_filter": "frame.number == 29306", "tcp_stream": 766 }, { "frame_number": 29311, "timestamp_epoch": "1634915040.564548000", "display_filter": "frame.number == 29311", "tcp_stream": 766 }, { "frame_number": 29314, "timestamp_epoch": "1634915040.565729000", "display_filter": "frame.number == 29314", "tcp_stream": 766 }, { "frame_number": 29316, "timestamp_epoch": "1634915040.566324000", "display_filter": "frame.number == 29316", "tcp_stream": 766 }, { "frame_number": 29318, "timestamp_epoch": "1634915040.566769000", "display_filter": "frame.number == 29318", "tcp_stream": 766 }, { "frame_number": 29324, "timestamp_epoch": "1634915040.572515000", "display_filter": "frame.number == 29324", "tcp_stream": 767 }, { "frame_number": 29327, "timestamp_epoch": "1634915040.573861000", "display_filter": "frame.number == 29327", "tcp_stream": 767 }, { "frame_number": 29332, "timestamp_epoch": "1634915040.574486000", "display_filter": "frame.number == 29332", "tcp_stream": 767 }, { "frame_number": 29334, "timestamp_epoch": "1634915040.574917000", "display_filter": "frame.number == 29334", "tcp_stream": 767 }, { "frame_number": 29338, "timestamp_epoch": "1634915040.575385000", "display_filter": "frame.number == 29338", "tcp_stream": 766 }, { "frame_number": 48354, "timestamp_epoch": "1634915472.195327000", "display_filter": "frame.number == 48354", "tcp_stream": 910 }, { "frame_number": 48359, "timestamp_epoch": "1634915472.196979000", "display_filter": "frame.number == 48359", "tcp_stream": 910 }, { "frame_number": 48362, "timestamp_epoch": "1634915472.198357000", "display_filter": "frame.number == 48362", "tcp_stream": 910 }, { "frame_number": 48364, "timestamp_epoch": "1634915472.198972000", "display_filter": "frame.number == 48364", "tcp_stream": 910 }, { "frame_number": 48366, "timestamp_epoch": "1634915472.199539000", "display_filter": "frame.number == 48366", "tcp_stream": 910 }, { "frame_number": 48372, "timestamp_epoch": "1634915472.204135000", "display_filter": "frame.number == 48372", "tcp_stream": 911 }, { "frame_number": 48375, "timestamp_epoch": "1634915472.205378000", "display_filter": "frame.number == 48375", "tcp_stream": 911 }, { "frame_number": 48380, "timestamp_epoch": "1634915472.206180000", "display_filter": "frame.number == 48380", "tcp_stream": 911 }, { "frame_number": 48382, "timestamp_epoch": "1634915472.206790000", "display_filter": "frame.number == 48382", "tcp_stream": 911 }, { "frame_number": 48386, "timestamp_epoch": "1634915472.207492000", "display_filter": "frame.number == 48386", "tcp_stream": 910 }, { "frame_number": 62122, "timestamp_epoch": "1634916360.373444000", "display_filter": "frame.number == 62122", "tcp_stream": 1266 }, { "frame_number": 62127, "timestamp_epoch": "1634916360.374681000", "display_filter": "frame.number == 62127", "tcp_stream": 1266 }, { "frame_number": 62130, "timestamp_epoch": "1634916360.375856000", "display_filter": "frame.number == 62130", "tcp_stream": 1266 }, { "frame_number": 62132, "timestamp_epoch": "1634916360.376421000", "display_filter": "frame.number == 62132", "tcp_stream": 1266 }, { "frame_number": 62134, "timestamp_epoch": "1634916360.377005000", "display_filter": "frame.number == 62134", "tcp_stream": 1266 }, { "frame_number": 62140, "timestamp_epoch": "1634916360.380677000", "display_filter": "frame.number == 62140", "tcp_stream": 1267 }, { "frame_number": 62143, "timestamp_epoch": "1634916360.381939000", "display_filter": "frame.number == 62143", "tcp_stream": 1267 }, { "frame_number": 62148, "timestamp_epoch": "1634916360.382574000", "display_filter": "frame.number == 62148", "tcp_stream": 1267 } ], "metrics": { "source": "10.10.22.156", "destination": "10.10.22.22", "protocol": "ldap", "event_count": 102, "operation_numbers": [ "", "0", "2", "3" ] } }, { "finding_id": "finding-0238a7ca2229bad0f6d62053", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 4249, "timestamp_epoch": "1634913239.083080000", "display_filter": "frame.number == 4249", "tcp_stream": 187 }, { "frame_number": 4251, "timestamp_epoch": "1634913239.083680000", "display_filter": "frame.number == 4251", "tcp_stream": 187 }, { "frame_number": 4253, "timestamp_epoch": "1634913239.084963000", "display_filter": "frame.number == 4253", "tcp_stream": 187 }, { "frame_number": 4255, "timestamp_epoch": "1634913239.085566000", "display_filter": "frame.number == 4255", "tcp_stream": 187 }, { "frame_number": 4257, "timestamp_epoch": "1634913239.086347000", "display_filter": "frame.number == 4257", "tcp_stream": 187 }, { "frame_number": 4259, "timestamp_epoch": "1634913239.086855000", "display_filter": "frame.number == 4259", "tcp_stream": 187 }, { "frame_number": 4261, "timestamp_epoch": "1634913239.087672000", "display_filter": "frame.number == 4261", "tcp_stream": 187 }, { "frame_number": 4263, "timestamp_epoch": "1634913239.088314000", "display_filter": "frame.number == 4263", "tcp_stream": 187 }, { "frame_number": 4265, "timestamp_epoch": "1634913239.089905000", "display_filter": "frame.number == 4265", "tcp_stream": 187 }, { "frame_number": 4267, "timestamp_epoch": "1634913239.090589000", "display_filter": "frame.number == 4267", "tcp_stream": 187 }, { "frame_number": 4269, "timestamp_epoch": "1634913239.091915000", "display_filter": "frame.number == 4269", "tcp_stream": 187 }, { "frame_number": 4271, "timestamp_epoch": "1634913239.092435000", "display_filter": "frame.number == 4271", "tcp_stream": 187 }, { "frame_number": 4273, "timestamp_epoch": "1634913239.093342000", "display_filter": "frame.number == 4273", "tcp_stream": 187 }, { "frame_number": 4277, "timestamp_epoch": "1634913239.093845000", "display_filter": "frame.number == 4277", "tcp_stream": 187 }, { "frame_number": 4279, "timestamp_epoch": "1634913239.095806000", "display_filter": "frame.number == 4279", "tcp_stream": 187 } ], "metrics": { "source": "10.10.22.156", "destination": "10.10.22.22", "protocol": "samr", "event_count": 15, "operation_numbers": [ "1", "16", "17", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-70ba8618efa297ab380e5ee7", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 127, "timestamp_epoch": "1634913054.084018000", "display_filter": "frame.number == 127", "tcp_stream": 3 }, { "frame_number": 131, "timestamp_epoch": "1634913054.084736000", "display_filter": "frame.number == 131", "tcp_stream": 3 }, { "frame_number": 134, "timestamp_epoch": "1634913054.085176000", "display_filter": "frame.number == 134", "tcp_stream": 3 }, { "frame_number": 145, "timestamp_epoch": "1634913054.087853000", "display_filter": "frame.number == 145", "tcp_stream": 3 }, { "frame_number": 147, "timestamp_epoch": "1634913054.088446000", "display_filter": "frame.number == 147", "tcp_stream": 3 }, { "frame_number": 151, "timestamp_epoch": "1634913054.089677000", "display_filter": "frame.number == 151", "tcp_stream": 3 }, { "frame_number": 323, "timestamp_epoch": "1634913054.921877000", "display_filter": "frame.number == 323", "tcp_stream": 3 }, { "frame_number": 325, "timestamp_epoch": "1634913054.922433000", "display_filter": "frame.number == 325", "tcp_stream": 3 }, { "frame_number": 327, "timestamp_epoch": "1634913054.923029000", "display_filter": "frame.number == 327", "tcp_stream": 3 }, { "frame_number": 329, "timestamp_epoch": "1634913054.924134000", "display_filter": "frame.number == 329", "tcp_stream": 3 }, { "frame_number": 568, "timestamp_epoch": "1634913057.668444000", "display_filter": "frame.number == 568", "tcp_stream": 26 }, { "frame_number": 570, "timestamp_epoch": "1634913057.669175000", "display_filter": "frame.number == 570", "tcp_stream": 26 }, { "frame_number": 572, "timestamp_epoch": "1634913057.669667000", "display_filter": "frame.number == 572", "tcp_stream": 26 }, { "frame_number": 576, "timestamp_epoch": "1634913057.670928000", "display_filter": "frame.number == 576", "tcp_stream": 26 }, { "frame_number": 578, "timestamp_epoch": "1634913057.671434000", "display_filter": "frame.number == 578", "tcp_stream": 26 }, { "frame_number": 580, "timestamp_epoch": "1634913057.671927000", "display_filter": "frame.number == 580", "tcp_stream": 26 }, { "frame_number": 3444, "timestamp_epoch": "1634913211.572439000", "display_filter": "frame.number == 3444", "tcp_stream": 156 }, { "frame_number": 3446, "timestamp_epoch": "1634913211.572870000", "display_filter": "frame.number == 3446", "tcp_stream": 156 }, { "frame_number": 3448, "timestamp_epoch": "1634913211.573417000", "display_filter": "frame.number == 3448", "tcp_stream": 156 }, { "frame_number": 3450, "timestamp_epoch": "1634913211.573881000", "display_filter": "frame.number == 3450", "tcp_stream": 156 }, { "frame_number": 5320, "timestamp_epoch": "1634913272.477472000", "display_filter": "frame.number == 5320", "tcp_stream": 223 }, { "frame_number": 5322, "timestamp_epoch": "1634913272.478218000", "display_filter": "frame.number == 5322", "tcp_stream": 223 }, { "frame_number": 5324, "timestamp_epoch": "1634913272.478857000", "display_filter": "frame.number == 5324", "tcp_stream": 223 }, { "frame_number": 5328, "timestamp_epoch": "1634913272.480494000", "display_filter": "frame.number == 5328", "tcp_stream": 223 }, { "frame_number": 5330, "timestamp_epoch": "1634913272.480892000", "display_filter": "frame.number == 5330", "tcp_stream": 223 }, { "frame_number": 5332, "timestamp_epoch": "1634913272.481443000", "display_filter": "frame.number == 5332", "tcp_stream": 223 }, { "frame_number": 29090, "timestamp_epoch": "1634915012.970639000", "display_filter": "frame.number == 29090", "tcp_stream": 756 }, { "frame_number": 29095, "timestamp_epoch": "1634915012.974070000", "display_filter": "frame.number == 29095", "tcp_stream": 756 }, { "frame_number": 29097, "timestamp_epoch": "1634915012.975287000", "display_filter": "frame.number == 29097", "tcp_stream": 756 }, { "frame_number": 29099, "timestamp_epoch": "1634915012.979423000", "display_filter": "frame.number == 29099", "tcp_stream": 756 }, { "frame_number": 29101, "timestamp_epoch": "1634915012.982054000", "display_filter": "frame.number == 29101", "tcp_stream": 756 }, { "frame_number": 29118, "timestamp_epoch": "1634915012.991501000", "display_filter": "frame.number == 29118", "tcp_stream": 758 }, { "frame_number": 29120, "timestamp_epoch": "1634915012.992008000", "display_filter": "frame.number == 29120", "tcp_stream": 758 }, { "frame_number": 29122, "timestamp_epoch": "1634915012.992453000", "display_filter": "frame.number == 29122", "tcp_stream": 758 }, { "frame_number": 29126, "timestamp_epoch": "1634915012.996002000", "display_filter": "frame.number == 29126", "tcp_stream": 758 }, { "frame_number": 29128, "timestamp_epoch": "1634915012.996422000", "display_filter": "frame.number == 29128", "tcp_stream": 758 }, { "frame_number": 29130, "timestamp_epoch": "1634915012.996917000", "display_filter": "frame.number == 29130", "tcp_stream": 758 }, { "frame_number": 45075, "timestamp_epoch": "1634915359.667888000", "display_filter": "frame.number == 45075", "tcp_stream": 862 }, { "frame_number": 45077, "timestamp_epoch": "1634915359.668466000", "display_filter": "frame.number == 45077", "tcp_stream": 862 }, { "frame_number": 45079, "timestamp_epoch": "1634915359.669061000", "display_filter": "frame.number == 45079", "tcp_stream": 862 }, { "frame_number": 45083, "timestamp_epoch": "1634915359.671164000", "display_filter": "frame.number == 45083", "tcp_stream": 862 }, { "frame_number": 45085, "timestamp_epoch": "1634915359.671648000", "display_filter": "frame.number == 45085", "tcp_stream": 862 }, { "frame_number": 45087, "timestamp_epoch": "1634915359.672183000", "display_filter": "frame.number == 45087", "tcp_stream": 862 }, { "frame_number": 55100, "timestamp_epoch": "1634915700.850594000", "display_filter": "frame.number == 55100", "tcp_stream": 990 }, { "frame_number": 55102, "timestamp_epoch": "1634915700.851306000", "display_filter": "frame.number == 55102", "tcp_stream": 990 }, { "frame_number": 55104, "timestamp_epoch": "1634915700.851958000", "display_filter": "frame.number == 55104", "tcp_stream": 990 }, { "frame_number": 55108, "timestamp_epoch": "1634915700.853497000", "display_filter": "frame.number == 55108", "tcp_stream": 990 }, { "frame_number": 55110, "timestamp_epoch": "1634915700.853973000", "display_filter": "frame.number == 55110", "tcp_stream": 990 }, { "frame_number": 55112, "timestamp_epoch": "1634915700.854529000", "display_filter": "frame.number == 55112", "tcp_stream": 990 } ], "metrics": { "source": "10.10.22.157", "destination": "10.10.22.22", "protocol": "drsuapi", "event_count": 49, "operation_numbers": [ "0", "1", "12", "30" ] } }, { "finding_id": "finding-d64eb7d358d71721ed0e01e7", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 27, "timestamp_epoch": "1634913052.670921000", "display_filter": "frame.number == 27", "tcp_stream": 0 }, { "frame_number": 91, "timestamp_epoch": "1634913054.066859000", "display_filter": "frame.number == 91", "tcp_stream": 5 }, { "frame_number": 120, "timestamp_epoch": "1634913054.081960000", "display_filter": "frame.number == 120", "tcp_stream": 5 }, { "frame_number": 129, "timestamp_epoch": "1634913054.084345000", "display_filter": "frame.number == 129", "tcp_stream": 5 }, { "frame_number": 133, "timestamp_epoch": "1634913054.085147000", "display_filter": "frame.number == 133", "tcp_stream": 5 }, { "frame_number": 168, "timestamp_epoch": "1634913054.223262000", "display_filter": "frame.number == 168", "tcp_stream": 5 }, { "frame_number": 191, "timestamp_epoch": "1634913054.351302000", "display_filter": "frame.number == 191", "tcp_stream": 5 }, { "frame_number": 262, "timestamp_epoch": "1634913054.582704000", "display_filter": "frame.number == 262", "tcp_stream": 5 }, { "frame_number": 271, "timestamp_epoch": "1634913054.584445000", "display_filter": "frame.number == 271", "tcp_stream": 5 }, { "frame_number": 273, "timestamp_epoch": "1634913054.585135000", "display_filter": "frame.number == 273", "tcp_stream": 5 }, { "frame_number": 275, "timestamp_epoch": "1634913054.585572000", "display_filter": "frame.number == 275", "tcp_stream": 5 }, { "frame_number": 308, "timestamp_epoch": "1634913054.713809000", "display_filter": "frame.number == 308", "tcp_stream": 0 }, { "frame_number": 311, "timestamp_epoch": "1634913054.716993000", "display_filter": "frame.number == 311", "tcp_stream": 0 }, { "frame_number": 347, "timestamp_epoch": "1634913055.632160000", "display_filter": "frame.number == 347", "tcp_stream": 20 }, { "frame_number": 352, "timestamp_epoch": "1634913055.634492000", "display_filter": "frame.number == 352", "tcp_stream": 20 }, { "frame_number": 369, "timestamp_epoch": "1634913055.680652000", "display_filter": "frame.number == 369", "tcp_stream": 20 }, { "frame_number": 375, "timestamp_epoch": "1634913055.691325000", "display_filter": "frame.number == 375", "tcp_stream": 22 }, { "frame_number": 378, "timestamp_epoch": "1634913055.692919000", "display_filter": "frame.number == 378", "tcp_stream": 22 }, { "frame_number": 380, "timestamp_epoch": "1634913055.693669000", "display_filter": "frame.number == 380", "tcp_stream": 22 }, { "frame_number": 382, "timestamp_epoch": "1634913055.695343000", "display_filter": "frame.number == 382", "tcp_stream": 20 }, { "frame_number": 535, "timestamp_epoch": "1634913055.808845000", "display_filter": "frame.number == 535", "tcp_stream": 22 }, { "frame_number": 539, "timestamp_epoch": "1634913055.819684000", "display_filter": "frame.number == 539", "tcp_stream": 20 }, { "frame_number": 585, "timestamp_epoch": "1634913057.674583000", "display_filter": "frame.number == 585", "tcp_stream": 27 }, { "frame_number": 590, "timestamp_epoch": "1634913057.675607000", "display_filter": "frame.number == 590", "tcp_stream": 27 }, { "frame_number": 593, "timestamp_epoch": "1634913057.676658000", "display_filter": "frame.number == 593", "tcp_stream": 27 }, { "frame_number": 595, "timestamp_epoch": "1634913057.677216000", "display_filter": "frame.number == 595", "tcp_stream": 27 }, { "frame_number": 597, "timestamp_epoch": "1634913057.677540000", "display_filter": "frame.number == 597", "tcp_stream": 27 }, { "frame_number": 603, "timestamp_epoch": "1634913057.679882000", "display_filter": "frame.number == 603", "tcp_stream": 28 }, { "frame_number": 606, "timestamp_epoch": "1634913057.680832000", "display_filter": "frame.number == 606", "tcp_stream": 28 }, { "frame_number": 611, "timestamp_epoch": "1634913057.681429000", "display_filter": "frame.number == 611", "tcp_stream": 28 }, { "frame_number": 613, "timestamp_epoch": "1634913057.681706000", "display_filter": "frame.number == 613", "tcp_stream": 28 }, { "frame_number": 617, "timestamp_epoch": "1634913057.681996000", "display_filter": "frame.number == 617", "tcp_stream": 27 }, { "frame_number": 644, "timestamp_epoch": "1634913063.055459000", "display_filter": "frame.number == 644", "tcp_stream": 29 }, { "frame_number": 649, "timestamp_epoch": "1634913063.057256000", "display_filter": "frame.number == 649", "tcp_stream": 29 }, { "frame_number": 652, "timestamp_epoch": "1634913063.060362000", "display_filter": "frame.number == 652", "tcp_stream": 29 }, { "frame_number": 654, "timestamp_epoch": "1634913063.060892000", "display_filter": "frame.number == 654", "tcp_stream": 29 }, { "frame_number": 656, "timestamp_epoch": "1634913063.061369000", "display_filter": "frame.number == 656", "tcp_stream": 29 }, { "frame_number": 658, "timestamp_epoch": "1634913063.061889000", "display_filter": "frame.number == 658", "tcp_stream": 29 }, { "frame_number": 660, "timestamp_epoch": "1634913063.062484000", "display_filter": "frame.number == 660", "tcp_stream": 29 }, { "frame_number": 666, "timestamp_epoch": "1634913063.080613000", "display_filter": "frame.number == 666", "tcp_stream": 30 }, { "frame_number": 669, "timestamp_epoch": "1634913063.082465000", "display_filter": "frame.number == 669", "tcp_stream": 30 }, { "frame_number": 703, "timestamp_epoch": "1634913063.089281000", "display_filter": "frame.number == 703", "tcp_stream": 30 }, { "frame_number": 705, "timestamp_epoch": "1634913063.090427000", "display_filter": "frame.number == 705", "tcp_stream": 30 }, { "frame_number": 709, "timestamp_epoch": "1634913063.095392000", "display_filter": "frame.number == 709", "tcp_stream": 29 }, { "frame_number": 3545, "timestamp_epoch": "1634913211.915528000", "display_filter": "frame.number == 3545", "tcp_stream": 163 }, { "frame_number": 3548, "timestamp_epoch": "1634913211.922015000", "display_filter": "frame.number == 3548", "tcp_stream": 163 }, { "frame_number": 3554, "timestamp_epoch": "1634913211.927868000", "display_filter": "frame.number == 3554", "tcp_stream": 164 }, { "frame_number": 3557, "timestamp_epoch": "1634913211.929270000", "display_filter": "frame.number == 3557", "tcp_stream": 164 }, { "frame_number": 3559, "timestamp_epoch": "1634913211.929660000", "display_filter": "frame.number == 3559", "tcp_stream": 164 }, { "frame_number": 3561, "timestamp_epoch": "1634913211.930238000", "display_filter": "frame.number == 3561", "tcp_stream": 163 }, { "frame_number": 3566, "timestamp_epoch": "1634913212.254621000", "display_filter": "frame.number == 3566", "tcp_stream": 164 }, { "frame_number": 3570, "timestamp_epoch": "1634913212.260252000", "display_filter": "frame.number == 3570", "tcp_stream": 163 }, { "frame_number": 5337, "timestamp_epoch": "1634913272.484081000", "display_filter": "frame.number == 5337", "tcp_stream": 224 }, { "frame_number": 5342, "timestamp_epoch": "1634913272.485732000", "display_filter": "frame.number == 5342", "tcp_stream": 224 }, { "frame_number": 5345, "timestamp_epoch": "1634913272.487225000", "display_filter": "frame.number == 5345", "tcp_stream": 224 }, { "frame_number": 5347, "timestamp_epoch": "1634913272.487850000", "display_filter": "frame.number == 5347", "tcp_stream": 224 }, { "frame_number": 5349, "timestamp_epoch": "1634913272.488351000", "display_filter": "frame.number == 5349", "tcp_stream": 224 }, { "frame_number": 5355, "timestamp_epoch": "1634913272.492155000", "display_filter": "frame.number == 5355", "tcp_stream": 225 }, { "frame_number": 5358, "timestamp_epoch": "1634913272.493575000", "display_filter": "frame.number == 5358", "tcp_stream": 225 }, { "frame_number": 5363, "timestamp_epoch": "1634913272.494266000", "display_filter": "frame.number == 5363", "tcp_stream": 225 }, { "frame_number": 5365, "timestamp_epoch": "1634913272.494952000", "display_filter": "frame.number == 5365", "tcp_stream": 225 }, { "frame_number": 5368, "timestamp_epoch": "1634913272.495327000", "display_filter": "frame.number == 5368", "tcp_stream": 224 }, { "frame_number": 29143, "timestamp_epoch": "1634915013.108820000", "display_filter": "frame.number == 29143", "tcp_stream": 759 }, { "frame_number": 29148, "timestamp_epoch": "1634915013.110781000", "display_filter": "frame.number == 29148", "tcp_stream": 759 }, { "frame_number": 29151, "timestamp_epoch": "1634915013.111735000", "display_filter": "frame.number == 29151", "tcp_stream": 759 }, { "frame_number": 29153, "timestamp_epoch": "1634915013.112377000", "display_filter": "frame.number == 29153", "tcp_stream": 759 }, { "frame_number": 29155, "timestamp_epoch": "1634915013.112853000", "display_filter": "frame.number == 29155", "tcp_stream": 759 }, { "frame_number": 29161, "timestamp_epoch": "1634915013.116822000", "display_filter": "frame.number == 29161", "tcp_stream": 760 }, { "frame_number": 29164, "timestamp_epoch": "1634915013.117922000", "display_filter": "frame.number == 29164", "tcp_stream": 760 }, { "frame_number": 29169, "timestamp_epoch": "1634915013.118551000", "display_filter": "frame.number == 29169", "tcp_stream": 760 }, { "frame_number": 29171, "timestamp_epoch": "1634915013.118981000", "display_filter": "frame.number == 29171", "tcp_stream": 760 }, { "frame_number": 29175, "timestamp_epoch": "1634915013.119500000", "display_filter": "frame.number == 29175", "tcp_stream": 759 }, { "frame_number": 45092, "timestamp_epoch": "1634915359.675946000", "display_filter": "frame.number == 45092", "tcp_stream": 863 }, { "frame_number": 45097, "timestamp_epoch": "1634915359.677394000", "display_filter": "frame.number == 45097", "tcp_stream": 863 }, { "frame_number": 45100, "timestamp_epoch": "1634915359.678787000", "display_filter": "frame.number == 45100", "tcp_stream": 863 }, { "frame_number": 45102, "timestamp_epoch": "1634915359.679410000", "display_filter": "frame.number == 45102", "tcp_stream": 863 }, { "frame_number": 45104, "timestamp_epoch": "1634915359.679885000", "display_filter": "frame.number == 45104", "tcp_stream": 863 }, { "frame_number": 45110, "timestamp_epoch": "1634915359.684024000", "display_filter": "frame.number == 45110", "tcp_stream": 864 }, { "frame_number": 45113, "timestamp_epoch": "1634915359.685220000", "display_filter": "frame.number == 45113", "tcp_stream": 864 }, { "frame_number": 45118, "timestamp_epoch": "1634915359.685912000", "display_filter": "frame.number == 45118", "tcp_stream": 864 }, { "frame_number": 45120, "timestamp_epoch": "1634915359.686433000", "display_filter": "frame.number == 45120", "tcp_stream": 864 }, { "frame_number": 45124, "timestamp_epoch": "1634915359.686853000", "display_filter": "frame.number == 45124", "tcp_stream": 863 }, { "frame_number": 55117, "timestamp_epoch": "1634915700.856930000", "display_filter": "frame.number == 55117", "tcp_stream": 991 }, { "frame_number": 55122, "timestamp_epoch": "1634915700.858087000", "display_filter": "frame.number == 55122", "tcp_stream": 991 }, { "frame_number": 55125, "timestamp_epoch": "1634915700.859233000", "display_filter": "frame.number == 55125", "tcp_stream": 991 }, { "frame_number": 55127, "timestamp_epoch": "1634915700.859774000", "display_filter": "frame.number == 55127", "tcp_stream": 991 }, { "frame_number": 55129, "timestamp_epoch": "1634915700.860401000", "display_filter": "frame.number == 55129", "tcp_stream": 991 }, { "frame_number": 55135, "timestamp_epoch": "1634915700.864029000", "display_filter": "frame.number == 55135", "tcp_stream": 992 }, { "frame_number": 55138, "timestamp_epoch": "1634915700.865256000", "display_filter": "frame.number == 55138", "tcp_stream": 992 }, { "frame_number": 55143, "timestamp_epoch": "1634915700.865987000", "display_filter": "frame.number == 55143", "tcp_stream": 992 }, { "frame_number": 55145, "timestamp_epoch": "1634915700.866535000", "display_filter": "frame.number == 55145", "tcp_stream": 992 }, { "frame_number": 55149, "timestamp_epoch": "1634915700.866844000", "display_filter": "frame.number == 55149", "tcp_stream": 991 } ], "metrics": { "source": "10.10.22.157", "destination": "10.10.22.22", "protocol": "ldap", "event_count": 92, "operation_numbers": [ "", "0", "2", "3" ] } }, { "finding_id": "finding-0c69b9a710fe80d354f719f7", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 3468, "timestamp_epoch": "1634913211.594018000", "display_filter": "frame.number == 3468", "tcp_stream": 157 }, { "frame_number": 3470, "timestamp_epoch": "1634913211.594705000", "display_filter": "frame.number == 3470", "tcp_stream": 157 }, { "frame_number": 3472, "timestamp_epoch": "1634913211.595209000", "display_filter": "frame.number == 3472", "tcp_stream": 157 }, { "frame_number": 3474, "timestamp_epoch": "1634913211.595948000", "display_filter": "frame.number == 3474", "tcp_stream": 157 }, { "frame_number": 3476, "timestamp_epoch": "1634913211.596983000", "display_filter": "frame.number == 3476", "tcp_stream": 157 }, { "frame_number": 3478, "timestamp_epoch": "1634913211.597622000", "display_filter": "frame.number == 3478", "tcp_stream": 157 }, { "frame_number": 3480, "timestamp_epoch": "1634913211.598687000", "display_filter": "frame.number == 3480", "tcp_stream": 157 }, { "frame_number": 3482, "timestamp_epoch": "1634913211.599526000", "display_filter": "frame.number == 3482", "tcp_stream": 157 }, { "frame_number": 3484, "timestamp_epoch": "1634913211.600051000", "display_filter": "frame.number == 3484", "tcp_stream": 157 }, { "frame_number": 3486, "timestamp_epoch": "1634913211.600749000", "display_filter": "frame.number == 3486", "tcp_stream": 157 }, { "frame_number": 3488, "timestamp_epoch": "1634913211.601372000", "display_filter": "frame.number == 3488", "tcp_stream": 157 }, { "frame_number": 3490, "timestamp_epoch": "1634913211.602813000", "display_filter": "frame.number == 3490", "tcp_stream": 157 }, { "frame_number": 3492, "timestamp_epoch": "1634913211.605607000", "display_filter": "frame.number == 3492", "tcp_stream": 157 }, { "frame_number": 3494, "timestamp_epoch": "1634913211.606071000", "display_filter": "frame.number == 3494", "tcp_stream": 157 }, { "frame_number": 3496, "timestamp_epoch": "1634913211.606648000", "display_filter": "frame.number == 3496", "tcp_stream": 157 } ], "metrics": { "source": "10.10.22.157", "destination": "10.10.22.22", "protocol": "samr", "event_count": 15, "operation_numbers": [ "1", "16", "17", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-12e846d5d543dcccccf58dd9", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 1951, "timestamp_epoch": "1634913145.884937000", "display_filter": "frame.number == 1951", "tcp_stream": 93 }, { "frame_number": 1959, "timestamp_epoch": "1634913145.885966000", "display_filter": "frame.number == 1959", "tcp_stream": 93 }, { "frame_number": 1963, "timestamp_epoch": "1634913145.886407000", "display_filter": "frame.number == 1963", "tcp_stream": 93 }, { "frame_number": 1964, "timestamp_epoch": "1634913145.886550000", "display_filter": "frame.number == 1964", "tcp_stream": 86 }, { "frame_number": 1968, "timestamp_epoch": "1634913145.886979000", "display_filter": "frame.number == 1968", "tcp_stream": 86 }, { "frame_number": 1973, "timestamp_epoch": "1634913145.887731000", "display_filter": "frame.number == 1973", "tcp_stream": 86 }, { "frame_number": 1977, "timestamp_epoch": "1634913145.888303000", "display_filter": "frame.number == 1977", "tcp_stream": 86 }, { "frame_number": 1987, "timestamp_epoch": "1634913145.890289000", "display_filter": "frame.number == 1987", "tcp_stream": 93 }, { "frame_number": 1989, "timestamp_epoch": "1634913145.891203000", "display_filter": "frame.number == 1989", "tcp_stream": 93 }, { "frame_number": 1991, "timestamp_epoch": "1634913145.892049000", "display_filter": "frame.number == 1991", "tcp_stream": 93 }, { "frame_number": 2039, "timestamp_epoch": "1634913145.971877000", "display_filter": "frame.number == 2039", "tcp_stream": 101 }, { "frame_number": 2041, "timestamp_epoch": "1634913145.972435000", "display_filter": "frame.number == 2041", "tcp_stream": 101 }, { "frame_number": 2043, "timestamp_epoch": "1634913145.973199000", "display_filter": "frame.number == 2043", "tcp_stream": 101 }, { "frame_number": 2045, "timestamp_epoch": "1634913145.973688000", "display_filter": "frame.number == 2045", "tcp_stream": 101 }, { "frame_number": 2339, "timestamp_epoch": "1634913149.377451000", "display_filter": "frame.number == 2339", "tcp_stream": 113 }, { "frame_number": 2341, "timestamp_epoch": "1634913149.378030000", "display_filter": "frame.number == 2341", "tcp_stream": 113 }, { "frame_number": 2343, "timestamp_epoch": "1634913149.379052000", "display_filter": "frame.number == 2343", "tcp_stream": 113 }, { "frame_number": 2347, "timestamp_epoch": "1634913149.380709000", "display_filter": "frame.number == 2347", "tcp_stream": 113 }, { "frame_number": 2349, "timestamp_epoch": "1634913149.381301000", "display_filter": "frame.number == 2349", "tcp_stream": 113 }, { "frame_number": 2351, "timestamp_epoch": "1634913149.381705000", "display_filter": "frame.number == 2351", "tcp_stream": 113 }, { "frame_number": 2670, "timestamp_epoch": "1634913184.597167000", "display_filter": "frame.number == 2670", "tcp_stream": 93 }, { "frame_number": 2672, "timestamp_epoch": "1634913184.597928000", "display_filter": "frame.number == 2672", "tcp_stream": 93 }, { "frame_number": 2674, "timestamp_epoch": "1634913184.598446000", "display_filter": "frame.number == 2674", "tcp_stream": 93 }, { "frame_number": 2676, "timestamp_epoch": "1634913184.599283000", "display_filter": "frame.number == 2676", "tcp_stream": 93 }, { "frame_number": 5052, "timestamp_epoch": "1634913245.551905000", "display_filter": "frame.number == 5052", "tcp_stream": 215 }, { "frame_number": 5054, "timestamp_epoch": "1634913245.552668000", "display_filter": "frame.number == 5054", "tcp_stream": 215 }, { "frame_number": 5056, "timestamp_epoch": "1634913245.553271000", "display_filter": "frame.number == 5056", "tcp_stream": 215 }, { "frame_number": 5060, "timestamp_epoch": "1634913245.554901000", "display_filter": "frame.number == 5060", "tcp_stream": 215 }, { "frame_number": 5062, "timestamp_epoch": "1634913245.555415000", "display_filter": "frame.number == 5062", "tcp_stream": 215 }, { "frame_number": 5064, "timestamp_epoch": "1634913245.555988000", "display_filter": "frame.number == 5064", "tcp_stream": 215 }, { "frame_number": 26063, "timestamp_epoch": "1634914985.976706000", "display_filter": "frame.number == 26063", "tcp_stream": 746 }, { "frame_number": 26065, "timestamp_epoch": "1634914985.977191000", "display_filter": "frame.number == 26065", "tcp_stream": 746 }, { "frame_number": 26067, "timestamp_epoch": "1634914985.977698000", "display_filter": "frame.number == 26067", "tcp_stream": 746 }, { "frame_number": 26069, "timestamp_epoch": "1634914985.979046000", "display_filter": "frame.number == 26069", "tcp_stream": 746 }, { "frame_number": 26071, "timestamp_epoch": "1634914985.979397000", "display_filter": "frame.number == 26071", "tcp_stream": 746 }, { "frame_number": 26091, "timestamp_epoch": "1634914985.998788000", "display_filter": "frame.number == 26091", "tcp_stream": 748 }, { "frame_number": 26093, "timestamp_epoch": "1634914985.999315000", "display_filter": "frame.number == 26093", "tcp_stream": 748 }, { "frame_number": 26097, "timestamp_epoch": "1634914986.000194000", "display_filter": "frame.number == 26097", "tcp_stream": 748 }, { "frame_number": 26101, "timestamp_epoch": "1634914986.002228000", "display_filter": "frame.number == 26101", "tcp_stream": 748 }, { "frame_number": 26103, "timestamp_epoch": "1634914986.002603000", "display_filter": "frame.number == 26103", "tcp_stream": 748 }, { "frame_number": 26105, "timestamp_epoch": "1634914986.003084000", "display_filter": "frame.number == 26105", "tcp_stream": 748 }, { "frame_number": 44961, "timestamp_epoch": "1634915357.648080000", "display_filter": "frame.number == 44961", "tcp_stream": 857 }, { "frame_number": 44963, "timestamp_epoch": "1634915357.648718000", "display_filter": "frame.number == 44963", "tcp_stream": 857 }, { "frame_number": 44965, "timestamp_epoch": "1634915357.649430000", "display_filter": "frame.number == 44965", "tcp_stream": 857 }, { "frame_number": 44969, "timestamp_epoch": "1634915357.652016000", "display_filter": "frame.number == 44969", "tcp_stream": 857 }, { "frame_number": 44971, "timestamp_epoch": "1634915357.652566000", "display_filter": "frame.number == 44971", "tcp_stream": 857 }, { "frame_number": 44973, "timestamp_epoch": "1634915357.653210000", "display_filter": "frame.number == 44973", "tcp_stream": 857 }, { "frame_number": 59918, "timestamp_epoch": "1634916153.388006000", "display_filter": "frame.number == 59918", "tcp_stream": 1156 }, { "frame_number": 59920, "timestamp_epoch": "1634916153.388785000", "display_filter": "frame.number == 59920", "tcp_stream": 1156 }, { "frame_number": 59922, "timestamp_epoch": "1634916153.389426000", "display_filter": "frame.number == 59922", "tcp_stream": 1156 }, { "frame_number": 59926, "timestamp_epoch": "1634916153.391052000", "display_filter": "frame.number == 59926", "tcp_stream": 1156 }, { "frame_number": 59928, "timestamp_epoch": "1634916153.391617000", "display_filter": "frame.number == 59928", "tcp_stream": 1156 }, { "frame_number": 59930, "timestamp_epoch": "1634916153.392143000", "display_filter": "frame.number == 59930", "tcp_stream": 1156 } ], "metrics": { "source": "10.10.22.158", "destination": "10.10.22.22", "protocol": "drsuapi", "event_count": 53, "operation_numbers": [ "0", "1", "12", "13", "30" ] } }, { "finding_id": "finding-d8531db588d532f4ff3105ad", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 1696, "timestamp_epoch": "1634913144.099614000", "display_filter": "frame.number == 1696", "tcp_stream": 79 }, { "frame_number": 1776, "timestamp_epoch": "1634913145.845281000", "display_filter": "frame.number == 1776", "tcp_stream": 84 }, { "frame_number": 1907, "timestamp_epoch": "1634913145.880301000", "display_filter": "frame.number == 1907", "tcp_stream": 79 }, { "frame_number": 1938, "timestamp_epoch": "1634913145.883226000", "display_filter": "frame.number == 1938", "tcp_stream": 84 }, { "frame_number": 1960, "timestamp_epoch": "1634913145.886189000", "display_filter": "frame.number == 1960", "tcp_stream": 84 }, { "frame_number": 1969, "timestamp_epoch": "1634913145.887055000", "display_filter": "frame.number == 1969", "tcp_stream": 84 }, { "frame_number": 1980, "timestamp_epoch": "1634913145.888620000", "display_filter": "frame.number == 1980", "tcp_stream": 79 }, { "frame_number": 2057, "timestamp_epoch": "1634913146.035188000", "display_filter": "frame.number == 2057", "tcp_stream": 84 }, { "frame_number": 2073, "timestamp_epoch": "1634913146.159783000", "display_filter": "frame.number == 2073", "tcp_stream": 84 }, { "frame_number": 2086, "timestamp_epoch": "1634913146.347236000", "display_filter": "frame.number == 2086", "tcp_stream": 84 }, { "frame_number": 2094, "timestamp_epoch": "1634913146.349035000", "display_filter": "frame.number == 2094", "tcp_stream": 84 }, { "frame_number": 2097, "timestamp_epoch": "1634913146.349962000", "display_filter": "frame.number == 2097", "tcp_stream": 84 }, { "frame_number": 2099, "timestamp_epoch": "1634913146.350837000", "display_filter": "frame.number == 2099", "tcp_stream": 84 }, { "frame_number": 2112, "timestamp_epoch": "1634913147.179999000", "display_filter": "frame.number == 2112", "tcp_stream": 107 }, { "frame_number": 2117, "timestamp_epoch": "1634913147.183229000", "display_filter": "frame.number == 2117", "tcp_stream": 107 }, { "frame_number": 2134, "timestamp_epoch": "1634913147.409943000", "display_filter": "frame.number == 2134", "tcp_stream": 107 }, { "frame_number": 2140, "timestamp_epoch": "1634913147.420786000", "display_filter": "frame.number == 2140", "tcp_stream": 109 }, { "frame_number": 2143, "timestamp_epoch": "1634913147.422215000", "display_filter": "frame.number == 2143", "tcp_stream": 109 }, { "frame_number": 2145, "timestamp_epoch": "1634913147.422751000", "display_filter": "frame.number == 2145", "tcp_stream": 109 }, { "frame_number": 2147, "timestamp_epoch": "1634913147.423843000", "display_filter": "frame.number == 2147", "tcp_stream": 107 }, { "frame_number": 2300, "timestamp_epoch": "1634913147.711144000", "display_filter": "frame.number == 2300", "tcp_stream": 109 }, { "frame_number": 2304, "timestamp_epoch": "1634913147.737004000", "display_filter": "frame.number == 2304", "tcp_stream": 107 }, { "frame_number": 2356, "timestamp_epoch": "1634913149.399513000", "display_filter": "frame.number == 2356", "tcp_stream": 114 }, { "frame_number": 2361, "timestamp_epoch": "1634913149.400779000", "display_filter": "frame.number == 2361", "tcp_stream": 114 }, { "frame_number": 2364, "timestamp_epoch": "1634913149.402236000", "display_filter": "frame.number == 2364", "tcp_stream": 114 }, { "frame_number": 2366, "timestamp_epoch": "1634913149.403090000", "display_filter": "frame.number == 2366", "tcp_stream": 114 }, { "frame_number": 2368, "timestamp_epoch": "1634913149.403866000", "display_filter": "frame.number == 2368", "tcp_stream": 114 }, { "frame_number": 2374, "timestamp_epoch": "1634913149.410923000", "display_filter": "frame.number == 2374", "tcp_stream": 115 }, { "frame_number": 2377, "timestamp_epoch": "1634913149.412324000", "display_filter": "frame.number == 2377", "tcp_stream": 115 }, { "frame_number": 2382, "timestamp_epoch": "1634913149.413016000", "display_filter": "frame.number == 2382", "tcp_stream": 115 }, { "frame_number": 2384, "timestamp_epoch": "1634913149.414592000", "display_filter": "frame.number == 2384", "tcp_stream": 115 }, { "frame_number": 2388, "timestamp_epoch": "1634913149.414913000", "display_filter": "frame.number == 2388", "tcp_stream": 114 }, { "frame_number": 2414, "timestamp_epoch": "1634913154.532143000", "display_filter": "frame.number == 2414", "tcp_stream": 116 }, { "frame_number": 2419, "timestamp_epoch": "1634913154.534184000", "display_filter": "frame.number == 2419", "tcp_stream": 116 }, { "frame_number": 2423, "timestamp_epoch": "1634913154.546386000", "display_filter": "frame.number == 2423", "tcp_stream": 116 }, { "frame_number": 2425, "timestamp_epoch": "1634913154.546948000", "display_filter": "frame.number == 2425", "tcp_stream": 116 }, { "frame_number": 2427, "timestamp_epoch": "1634913154.547360000", "display_filter": "frame.number == 2427", "tcp_stream": 116 }, { "frame_number": 2429, "timestamp_epoch": "1634913154.547791000", "display_filter": "frame.number == 2429", "tcp_stream": 116 }, { "frame_number": 2431, "timestamp_epoch": "1634913154.548304000", "display_filter": "frame.number == 2431", "tcp_stream": 116 }, { "frame_number": 2463, "timestamp_epoch": "1634913154.574982000", "display_filter": "frame.number == 2463", "tcp_stream": 116 }, { "frame_number": 2799, "timestamp_epoch": "1634913184.961165000", "display_filter": "frame.number == 2799", "tcp_stream": 133 }, { "frame_number": 2802, "timestamp_epoch": "1634913184.966629000", "display_filter": "frame.number == 2802", "tcp_stream": 133 }, { "frame_number": 2808, "timestamp_epoch": "1634913184.972998000", "display_filter": "frame.number == 2808", "tcp_stream": 134 }, { "frame_number": 2811, "timestamp_epoch": "1634913184.974676000", "display_filter": "frame.number == 2811", "tcp_stream": 134 }, { "frame_number": 2813, "timestamp_epoch": "1634913184.975209000", "display_filter": "frame.number == 2813", "tcp_stream": 134 }, { "frame_number": 2815, "timestamp_epoch": "1634913184.975867000", "display_filter": "frame.number == 2815", "tcp_stream": 133 }, { "frame_number": 2832, "timestamp_epoch": "1634913185.296883000", "display_filter": "frame.number == 2832", "tcp_stream": 134 }, { "frame_number": 2841, "timestamp_epoch": "1634913185.486261000", "display_filter": "frame.number == 2841", "tcp_stream": 133 }, { "frame_number": 5069, "timestamp_epoch": "1634913245.558681000", "display_filter": "frame.number == 5069", "tcp_stream": 216 }, { "frame_number": 5074, "timestamp_epoch": "1634913245.559977000", "display_filter": "frame.number == 5074", "tcp_stream": 216 }, { "frame_number": 5077, "timestamp_epoch": "1634913245.561177000", "display_filter": "frame.number == 5077", "tcp_stream": 216 }, { "frame_number": 5079, "timestamp_epoch": "1634913245.561713000", "display_filter": "frame.number == 5079", "tcp_stream": 216 }, { "frame_number": 5081, "timestamp_epoch": "1634913245.562183000", "display_filter": "frame.number == 5081", "tcp_stream": 216 }, { "frame_number": 5087, "timestamp_epoch": "1634913245.565701000", "display_filter": "frame.number == 5087", "tcp_stream": 217 }, { "frame_number": 5090, "timestamp_epoch": "1634913245.567065000", "display_filter": "frame.number == 5090", "tcp_stream": 217 }, { "frame_number": 5095, "timestamp_epoch": "1634913245.567751000", "display_filter": "frame.number == 5095", "tcp_stream": 217 }, { "frame_number": 5097, "timestamp_epoch": "1634913245.568251000", "display_filter": "frame.number == 5097", "tcp_stream": 217 }, { "frame_number": 5101, "timestamp_epoch": "1634913245.568666000", "display_filter": "frame.number == 5101", "tcp_stream": 216 }, { "frame_number": 26116, "timestamp_epoch": "1634914986.117846000", "display_filter": "frame.number == 26116", "tcp_stream": 749 }, { "frame_number": 26121, "timestamp_epoch": "1634914986.119336000", "display_filter": "frame.number == 26121", "tcp_stream": 749 }, { "frame_number": 26124, "timestamp_epoch": "1634914986.120789000", "display_filter": "frame.number == 26124", "tcp_stream": 749 }, { "frame_number": 26126, "timestamp_epoch": "1634914986.121313000", "display_filter": "frame.number == 26126", "tcp_stream": 749 }, { "frame_number": 26128, "timestamp_epoch": "1634914986.121787000", "display_filter": "frame.number == 26128", "tcp_stream": 749 }, { "frame_number": 26134, "timestamp_epoch": "1634914986.126481000", "display_filter": "frame.number == 26134", "tcp_stream": 750 }, { "frame_number": 26137, "timestamp_epoch": "1634914986.127848000", "display_filter": "frame.number == 26137", "tcp_stream": 750 }, { "frame_number": 26142, "timestamp_epoch": "1634914986.128479000", "display_filter": "frame.number == 26142", "tcp_stream": 750 }, { "frame_number": 26144, "timestamp_epoch": "1634914986.129046000", "display_filter": "frame.number == 26144", "tcp_stream": 750 }, { "frame_number": 26146, "timestamp_epoch": "1634914986.129421000", "display_filter": "frame.number == 26146", "tcp_stream": 749 }, { "frame_number": 44978, "timestamp_epoch": "1634915357.656910000", "display_filter": "frame.number == 44978", "tcp_stream": 858 }, { "frame_number": 44983, "timestamp_epoch": "1634915357.658347000", "display_filter": "frame.number == 44983", "tcp_stream": 858 }, { "frame_number": 44986, "timestamp_epoch": "1634915357.659605000", "display_filter": "frame.number == 44986", "tcp_stream": 858 }, { "frame_number": 44988, "timestamp_epoch": "1634915357.660189000", "display_filter": "frame.number == 44988", "tcp_stream": 858 }, { "frame_number": 44990, "timestamp_epoch": "1634915357.660713000", "display_filter": "frame.number == 44990", "tcp_stream": 858 }, { "frame_number": 44996, "timestamp_epoch": "1634915357.665313000", "display_filter": "frame.number == 44996", "tcp_stream": 859 }, { "frame_number": 44999, "timestamp_epoch": "1634915357.666563000", "display_filter": "frame.number == 44999", "tcp_stream": 859 }, { "frame_number": 45004, "timestamp_epoch": "1634915357.667258000", "display_filter": "frame.number == 45004", "tcp_stream": 859 }, { "frame_number": 45006, "timestamp_epoch": "1634915357.667871000", "display_filter": "frame.number == 45006", "tcp_stream": 859 }, { "frame_number": 45010, "timestamp_epoch": "1634915357.668326000", "display_filter": "frame.number == 45010", "tcp_stream": 858 }, { "frame_number": 59935, "timestamp_epoch": "1634916153.394721000", "display_filter": "frame.number == 59935", "tcp_stream": 1157 }, { "frame_number": 59940, "timestamp_epoch": "1634916153.396019000", "display_filter": "frame.number == 59940", "tcp_stream": 1157 }, { "frame_number": 59943, "timestamp_epoch": "1634916153.397277000", "display_filter": "frame.number == 59943", "tcp_stream": 1157 }, { "frame_number": 59945, "timestamp_epoch": "1634916153.397897000", "display_filter": "frame.number == 59945", "tcp_stream": 1157 }, { "frame_number": 59947, "timestamp_epoch": "1634916153.398442000", "display_filter": "frame.number == 59947", "tcp_stream": 1157 }, { "frame_number": 59953, "timestamp_epoch": "1634916153.402217000", "display_filter": "frame.number == 59953", "tcp_stream": 1158 }, { "frame_number": 59956, "timestamp_epoch": "1634916153.403549000", "display_filter": "frame.number == 59956", "tcp_stream": 1158 }, { "frame_number": 59961, "timestamp_epoch": "1634916153.404179000", "display_filter": "frame.number == 59961", "tcp_stream": 1158 }, { "frame_number": 59963, "timestamp_epoch": "1634916153.404767000", "display_filter": "frame.number == 59963", "tcp_stream": 1158 }, { "frame_number": 59967, "timestamp_epoch": "1634916153.405139000", "display_filter": "frame.number == 59967", "tcp_stream": 1157 } ], "metrics": { "source": "10.10.22.158", "destination": "10.10.22.22", "protocol": "ldap", "event_count": 88, "operation_numbers": [ "", "0", "2", "3" ] } }, { "finding_id": "finding-5d8e3537282af3047f14e7ce", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 2699, "timestamp_epoch": "1634913184.621674000", "display_filter": "frame.number == 2699", "tcp_stream": 126 }, { "frame_number": 2701, "timestamp_epoch": "1634913184.622475000", "display_filter": "frame.number == 2701", "tcp_stream": 126 }, { "frame_number": 2703, "timestamp_epoch": "1634913184.623727000", "display_filter": "frame.number == 2703", "tcp_stream": 126 }, { "frame_number": 2705, "timestamp_epoch": "1634913184.624481000", "display_filter": "frame.number == 2705", "tcp_stream": 126 }, { "frame_number": 2708, "timestamp_epoch": "1634913184.625209000", "display_filter": "frame.number == 2708", "tcp_stream": 126 }, { "frame_number": 2710, "timestamp_epoch": "1634913184.626066000", "display_filter": "frame.number == 2710", "tcp_stream": 126 }, { "frame_number": 2712, "timestamp_epoch": "1634913184.628349000", "display_filter": "frame.number == 2712", "tcp_stream": 126 }, { "frame_number": 2714, "timestamp_epoch": "1634913184.629308000", "display_filter": "frame.number == 2714", "tcp_stream": 126 }, { "frame_number": 2716, "timestamp_epoch": "1634913184.630349000", "display_filter": "frame.number == 2716", "tcp_stream": 126 }, { "frame_number": 2718, "timestamp_epoch": "1634913184.630974000", "display_filter": "frame.number == 2718", "tcp_stream": 126 }, { "frame_number": 2720, "timestamp_epoch": "1634913184.633648000", "display_filter": "frame.number == 2720", "tcp_stream": 126 }, { "frame_number": 2722, "timestamp_epoch": "1634913184.634314000", "display_filter": "frame.number == 2722", "tcp_stream": 126 }, { "frame_number": 2726, "timestamp_epoch": "1634913184.640159000", "display_filter": "frame.number == 2726", "tcp_stream": 126 }, { "frame_number": 2728, "timestamp_epoch": "1634913184.640873000", "display_filter": "frame.number == 2728", "tcp_stream": 126 }, { "frame_number": 2730, "timestamp_epoch": "1634913184.641959000", "display_filter": "frame.number == 2730", "tcp_stream": 126 }, { "frame_number": 23457, "timestamp_epoch": "1634914507.247789000", "display_filter": "frame.number == 23457", "tcp_stream": 550 }, { "frame_number": 23459, "timestamp_epoch": "1634914507.248606000", "display_filter": "frame.number == 23459", "tcp_stream": 550 }, { "frame_number": 23461, "timestamp_epoch": "1634914507.249274000", "display_filter": "frame.number == 23461", "tcp_stream": 550 }, { "frame_number": 23463, "timestamp_epoch": "1634914507.249859000", "display_filter": "frame.number == 23463", "tcp_stream": 550 }, { "frame_number": 23465, "timestamp_epoch": "1634914507.250590000", "display_filter": "frame.number == 23465", "tcp_stream": 550 }, { "frame_number": 23467, "timestamp_epoch": "1634914507.252283000", "display_filter": "frame.number == 23467", "tcp_stream": 550 }, { "frame_number": 23469, "timestamp_epoch": "1634914507.253047000", "display_filter": "frame.number == 23469", "tcp_stream": 550 }, { "frame_number": 23471, "timestamp_epoch": "1634914507.254456000", "display_filter": "frame.number == 23471", "tcp_stream": 550 }, { "frame_number": 23473, "timestamp_epoch": "1634914507.254999000", "display_filter": "frame.number == 23473", "tcp_stream": 550 }, { "frame_number": 23475, "timestamp_epoch": "1634914507.255512000", "display_filter": "frame.number == 23475", "tcp_stream": 550 }, { "frame_number": 23487, "timestamp_epoch": "1634914507.261197000", "display_filter": "frame.number == 23487", "tcp_stream": 550 }, { "frame_number": 23489, "timestamp_epoch": "1634914507.261818000", "display_filter": "frame.number == 23489", "tcp_stream": 550 }, { "frame_number": 23491, "timestamp_epoch": "1634914507.262453000", "display_filter": "frame.number == 23491", "tcp_stream": 550 }, { "frame_number": 23493, "timestamp_epoch": "1634914507.263186000", "display_filter": "frame.number == 23493", "tcp_stream": 550 }, { "frame_number": 23495, "timestamp_epoch": "1634914507.263891000", "display_filter": "frame.number == 23495", "tcp_stream": 550 }, { "frame_number": 23497, "timestamp_epoch": "1634914507.264619000", "display_filter": "frame.number == 23497", "tcp_stream": 550 }, { "frame_number": 23499, "timestamp_epoch": "1634914507.265229000", "display_filter": "frame.number == 23499", "tcp_stream": 550 }, { "frame_number": 23501, "timestamp_epoch": "1634914507.265925000", "display_filter": "frame.number == 23501", "tcp_stream": 550 }, { "frame_number": 23503, "timestamp_epoch": "1634914507.266521000", "display_filter": "frame.number == 23503", "tcp_stream": 550 }, { "frame_number": 23505, "timestamp_epoch": "1634914507.267052000", "display_filter": "frame.number == 23505", "tcp_stream": 550 }, { "frame_number": 23507, "timestamp_epoch": "1634914507.267509000", "display_filter": "frame.number == 23507", "tcp_stream": 550 }, { "frame_number": 23538, "timestamp_epoch": "1634914507.432902000", "display_filter": "frame.number == 23538", "tcp_stream": 550 }, { "frame_number": 23540, "timestamp_epoch": "1634914507.433690000", "display_filter": "frame.number == 23540", "tcp_stream": 550 }, { "frame_number": 23542, "timestamp_epoch": "1634914507.434454000", "display_filter": "frame.number == 23542", "tcp_stream": 550 }, { "frame_number": 23544, "timestamp_epoch": "1634914507.435097000", "display_filter": "frame.number == 23544", "tcp_stream": 550 }, { "frame_number": 23546, "timestamp_epoch": "1634914507.435755000", "display_filter": "frame.number == 23546", "tcp_stream": 550 }, { "frame_number": 23548, "timestamp_epoch": "1634914507.436463000", "display_filter": "frame.number == 23548", "tcp_stream": 550 }, { "frame_number": 23550, "timestamp_epoch": "1634914507.437063000", "display_filter": "frame.number == 23550", "tcp_stream": 550 } ], "metrics": { "source": "10.10.22.158", "destination": "10.10.22.22", "protocol": "samr", "event_count": 43, "operation_numbers": [ "1", "16", "17", "18", "19", "20", "25", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-56efbcbd1fd55dee2ebde040", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 1000, "timestamp_epoch": "1634913114.921280000", "display_filter": "frame.number == 1000", "tcp_stream": 46 }, { "frame_number": 1002, "timestamp_epoch": "1634913114.921892000", "display_filter": "frame.number == 1002", "tcp_stream": 46 }, { "frame_number": 1004, "timestamp_epoch": "1634913114.922326000", "display_filter": "frame.number == 1004", "tcp_stream": 46 }, { "frame_number": 1014, "timestamp_epoch": "1634913114.924857000", "display_filter": "frame.number == 1014", "tcp_stream": 46 }, { "frame_number": 1016, "timestamp_epoch": "1634913114.925592000", "display_filter": "frame.number == 1016", "tcp_stream": 46 }, { "frame_number": 1018, "timestamp_epoch": "1634913114.926303000", "display_filter": "frame.number == 1018", "tcp_stream": 46 }, { "frame_number": 1031, "timestamp_epoch": "1634913114.935544000", "display_filter": "frame.number == 1031", "tcp_stream": 53 }, { "frame_number": 1033, "timestamp_epoch": "1634913114.936040000", "display_filter": "frame.number == 1033", "tcp_stream": 53 }, { "frame_number": 1035, "timestamp_epoch": "1634913114.936321000", "display_filter": "frame.number == 1035", "tcp_stream": 53 }, { "frame_number": 1037, "timestamp_epoch": "1634913114.936560000", "display_filter": "frame.number == 1037", "tcp_stream": 53 }, { "frame_number": 1121, "timestamp_epoch": "1634913115.055859000", "display_filter": "frame.number == 1121", "tcp_stream": 57 }, { "frame_number": 1123, "timestamp_epoch": "1634913115.056664000", "display_filter": "frame.number == 1123", "tcp_stream": 57 }, { "frame_number": 1125, "timestamp_epoch": "1634913115.057392000", "display_filter": "frame.number == 1125", "tcp_stream": 57 }, { "frame_number": 1127, "timestamp_epoch": "1634913115.057699000", "display_filter": "frame.number == 1127", "tcp_stream": 57 }, { "frame_number": 1449, "timestamp_epoch": "1634913118.520149000", "display_filter": "frame.number == 1449", "tcp_stream": 70 }, { "frame_number": 1451, "timestamp_epoch": "1634913118.520996000", "display_filter": "frame.number == 1451", "tcp_stream": 70 }, { "frame_number": 1453, "timestamp_epoch": "1634913118.522657000", "display_filter": "frame.number == 1453", "tcp_stream": 70 }, { "frame_number": 1457, "timestamp_epoch": "1634913118.524259000", "display_filter": "frame.number == 1457", "tcp_stream": 70 }, { "frame_number": 1459, "timestamp_epoch": "1634913118.525441000", "display_filter": "frame.number == 1459", "tcp_stream": 70 }, { "frame_number": 1461, "timestamp_epoch": "1634913118.525893000", "display_filter": "frame.number == 1461", "tcp_stream": 70 }, { "frame_number": 4224, "timestamp_epoch": "1634913239.064431000", "display_filter": "frame.number == 4224", "tcp_stream": 183 }, { "frame_number": 4226, "timestamp_epoch": "1634913239.065004000", "display_filter": "frame.number == 4226", "tcp_stream": 183 }, { "frame_number": 4228, "timestamp_epoch": "1634913239.065459000", "display_filter": "frame.number == 4228", "tcp_stream": 183 }, { "frame_number": 4230, "timestamp_epoch": "1634913239.065774000", "display_filter": "frame.number == 4230", "tcp_stream": 183 }, { "frame_number": 5687, "timestamp_epoch": "1634913300.071212000", "display_filter": "frame.number == 5687", "tcp_stream": 234 }, { "frame_number": 5689, "timestamp_epoch": "1634913300.071960000", "display_filter": "frame.number == 5689", "tcp_stream": 234 }, { "frame_number": 5691, "timestamp_epoch": "1634913300.072402000", "display_filter": "frame.number == 5691", "tcp_stream": 234 }, { "frame_number": 5695, "timestamp_epoch": "1634913300.074003000", "display_filter": "frame.number == 5695", "tcp_stream": 234 }, { "frame_number": 5697, "timestamp_epoch": "1634913300.074639000", "display_filter": "frame.number == 5697", "tcp_stream": 234 }, { "frame_number": 5699, "timestamp_epoch": "1634913300.075212000", "display_filter": "frame.number == 5699", "tcp_stream": 234 }, { "frame_number": 7158, "timestamp_epoch": "1634913412.852651000", "display_filter": "frame.number == 7158", "tcp_stream": 250 }, { "frame_number": 7160, "timestamp_epoch": "1634913412.853239000", "display_filter": "frame.number == 7160", "tcp_stream": 250 }, { "frame_number": 7162, "timestamp_epoch": "1634913412.853595000", "display_filter": "frame.number == 7162", "tcp_stream": 250 }, { "frame_number": 7166, "timestamp_epoch": "1634913412.858512000", "display_filter": "frame.number == 7166", "tcp_stream": 250 }, { "frame_number": 7168, "timestamp_epoch": "1634913412.859040000", "display_filter": "frame.number == 7168", "tcp_stream": 250 }, { "frame_number": 7170, "timestamp_epoch": "1634913412.859400000", "display_filter": "frame.number == 7170", "tcp_stream": 250 }, { "frame_number": 29255, "timestamp_epoch": "1634915040.434726000", "display_filter": "frame.number == 29255", "tcp_stream": 763 }, { "frame_number": 29257, "timestamp_epoch": "1634915040.435298000", "display_filter": "frame.number == 29257", "tcp_stream": 763 }, { "frame_number": 29259, "timestamp_epoch": "1634915040.435667000", "display_filter": "frame.number == 29259", "tcp_stream": 763 }, { "frame_number": 29261, "timestamp_epoch": "1634915040.436007000", "display_filter": "frame.number == 29261", "tcp_stream": 763 }, { "frame_number": 29263, "timestamp_epoch": "1634915040.436447000", "display_filter": "frame.number == 29263", "tcp_stream": 763 }, { "frame_number": 29281, "timestamp_epoch": "1634915040.451582000", "display_filter": "frame.number == 29281", "tcp_stream": 765 }, { "frame_number": 29285, "timestamp_epoch": "1634915040.452359000", "display_filter": "frame.number == 29285", "tcp_stream": 765 }, { "frame_number": 29287, "timestamp_epoch": "1634915040.452800000", "display_filter": "frame.number == 29287", "tcp_stream": 765 }, { "frame_number": 29291, "timestamp_epoch": "1634915040.454741000", "display_filter": "frame.number == 29291", "tcp_stream": 765 }, { "frame_number": 29293, "timestamp_epoch": "1634915040.455260000", "display_filter": "frame.number == 29293", "tcp_stream": 765 }, { "frame_number": 29295, "timestamp_epoch": "1634915040.455644000", "display_filter": "frame.number == 29295", "tcp_stream": 765 }, { "frame_number": 48338, "timestamp_epoch": "1634915472.186917000", "display_filter": "frame.number == 48338", "tcp_stream": 909 }, { "frame_number": 48340, "timestamp_epoch": "1634915472.187661000", "display_filter": "frame.number == 48340", "tcp_stream": 909 }, { "frame_number": 48342, "timestamp_epoch": "1634915472.188212000", "display_filter": "frame.number == 48342", "tcp_stream": 909 }, { "frame_number": 48346, "timestamp_epoch": "1634915472.190443000", "display_filter": "frame.number == 48346", "tcp_stream": 909 }, { "frame_number": 48348, "timestamp_epoch": "1634915472.191047000", "display_filter": "frame.number == 48348", "tcp_stream": 909 }, { "frame_number": 48350, "timestamp_epoch": "1634915472.191546000", "display_filter": "frame.number == 48350", "tcp_stream": 909 }, { "frame_number": 62106, "timestamp_epoch": "1634916360.367093000", "display_filter": "frame.number == 62106", "tcp_stream": 1265 }, { "frame_number": 62108, "timestamp_epoch": "1634916360.367886000", "display_filter": "frame.number == 62108", "tcp_stream": 1265 }, { "frame_number": 62110, "timestamp_epoch": "1634916360.368380000", "display_filter": "frame.number == 62110", "tcp_stream": 1265 }, { "frame_number": 62114, "timestamp_epoch": "1634916360.370024000", "display_filter": "frame.number == 62114", "tcp_stream": 1265 }, { "frame_number": 62116, "timestamp_epoch": "1634916360.370617000", "display_filter": "frame.number == 62116", "tcp_stream": 1265 }, { "frame_number": 62118, "timestamp_epoch": "1634916360.371063000", "display_filter": "frame.number == 62118", "tcp_stream": 1265 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.156", "protocol": "drsuapi", "event_count": 59, "operation_numbers": [ "0", "1", "12", "13", "30" ] } }, { "finding_id": "finding-a53538b4758975d3c5fc8281", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 806, "timestamp_epoch": "1634913113.472337000", "display_filter": "frame.number == 806", "tcp_stream": 37 }, { "frame_number": 968, "timestamp_epoch": "1634913114.915527000", "display_filter": "frame.number == 968", "tcp_stream": 37 }, { "frame_number": 1064, "timestamp_epoch": "1634913114.965120000", "display_filter": "frame.number == 1064", "tcp_stream": 55 }, { "frame_number": 1071, "timestamp_epoch": "1634913114.968094000", "display_filter": "frame.number == 1071", "tcp_stream": 55 }, { "frame_number": 1073, "timestamp_epoch": "1634913114.969450000", "display_filter": "frame.number == 1073", "tcp_stream": 55 }, { "frame_number": 1075, "timestamp_epoch": "1634913114.970067000", "display_filter": "frame.number == 1075", "tcp_stream": 55 }, { "frame_number": 1139, "timestamp_epoch": "1634913115.096164000", "display_filter": "frame.number == 1139", "tcp_stream": 55 }, { "frame_number": 1153, "timestamp_epoch": "1634913115.458113000", "display_filter": "frame.number == 1153", "tcp_stream": 55 }, { "frame_number": 1169, "timestamp_epoch": "1634913115.627419000", "display_filter": "frame.number == 1169", "tcp_stream": 55 }, { "frame_number": 1177, "timestamp_epoch": "1634913115.628826000", "display_filter": "frame.number == 1177", "tcp_stream": 55 }, { "frame_number": 1179, "timestamp_epoch": "1634913115.629502000", "display_filter": "frame.number == 1179", "tcp_stream": 55 }, { "frame_number": 1189, "timestamp_epoch": "1634913116.332984000", "display_filter": "frame.number == 1189", "tcp_stream": 63 }, { "frame_number": 1194, "timestamp_epoch": "1634913116.336673000", "display_filter": "frame.number == 1194", "tcp_stream": 63 }, { "frame_number": 1212, "timestamp_epoch": "1634913116.517099000", "display_filter": "frame.number == 1212", "tcp_stream": 63 }, { "frame_number": 1221, "timestamp_epoch": "1634913116.560239000", "display_filter": "frame.number == 1221", "tcp_stream": 65 }, { "frame_number": 1223, "timestamp_epoch": "1634913116.564405000", "display_filter": "frame.number == 1223", "tcp_stream": 65 }, { "frame_number": 1225, "timestamp_epoch": "1634913116.566558000", "display_filter": "frame.number == 1225", "tcp_stream": 65 }, { "frame_number": 1227, "timestamp_epoch": "1634913116.568081000", "display_filter": "frame.number == 1227", "tcp_stream": 63 }, { "frame_number": 1467, "timestamp_epoch": "1634913118.528665000", "display_filter": "frame.number == 1467", "tcp_stream": 71 }, { "frame_number": 1472, "timestamp_epoch": "1634913118.529887000", "display_filter": "frame.number == 1472", "tcp_stream": 71 }, { "frame_number": 1474, "timestamp_epoch": "1634913118.530417000", "display_filter": "frame.number == 1474", "tcp_stream": 71 }, { "frame_number": 1476, "timestamp_epoch": "1634913118.531892000", "display_filter": "frame.number == 1476", "tcp_stream": 71 }, { "frame_number": 1478, "timestamp_epoch": "1634913118.532479000", "display_filter": "frame.number == 1478", "tcp_stream": 71 }, { "frame_number": 1485, "timestamp_epoch": "1634913118.537755000", "display_filter": "frame.number == 1485", "tcp_stream": 72 }, { "frame_number": 1489, "timestamp_epoch": "1634913118.539054000", "display_filter": "frame.number == 1489", "tcp_stream": 72 }, { "frame_number": 1492, "timestamp_epoch": "1634913118.539946000", "display_filter": "frame.number == 1492", "tcp_stream": 72 }, { "frame_number": 1532, "timestamp_epoch": "1634913123.730594000", "display_filter": "frame.number == 1532", "tcp_stream": 73 }, { "frame_number": 1537, "timestamp_epoch": "1634913123.733914000", "display_filter": "frame.number == 1537", "tcp_stream": 73 }, { "frame_number": 1539, "timestamp_epoch": "1634913123.736975000", "display_filter": "frame.number == 1539", "tcp_stream": 73 }, { "frame_number": 1543, "timestamp_epoch": "1634913124.126813000", "display_filter": "frame.number == 1543", "tcp_stream": 73 }, { "frame_number": 1545, "timestamp_epoch": "1634913124.127633000", "display_filter": "frame.number == 1545", "tcp_stream": 73 }, { "frame_number": 1547, "timestamp_epoch": "1634913124.134785000", "display_filter": "frame.number == 1547", "tcp_stream": 73 }, { "frame_number": 1549, "timestamp_epoch": "1634913124.135575000", "display_filter": "frame.number == 1549", "tcp_stream": 73 }, { "frame_number": 1558, "timestamp_epoch": "1634913124.233540000", "display_filter": "frame.number == 1558", "tcp_stream": 74 }, { "frame_number": 1560, "timestamp_epoch": "1634913124.234469000", "display_filter": "frame.number == 1560", "tcp_stream": 74 }, { "frame_number": 1592, "timestamp_epoch": "1634913124.241524000", "display_filter": "frame.number == 1592", "tcp_stream": 74 }, { "frame_number": 4331, "timestamp_epoch": "1634913239.403407000", "display_filter": "frame.number == 4331", "tcp_stream": 193 }, { "frame_number": 4333, "timestamp_epoch": "1634913239.410118000", "display_filter": "frame.number == 4333", "tcp_stream": 193 }, { "frame_number": 4340, "timestamp_epoch": "1634913239.431701000", "display_filter": "frame.number == 4340", "tcp_stream": 194 }, { "frame_number": 4342, "timestamp_epoch": "1634913239.432464000", "display_filter": "frame.number == 4342", "tcp_stream": 194 }, { "frame_number": 4344, "timestamp_epoch": "1634913239.432909000", "display_filter": "frame.number == 4344", "tcp_stream": 194 }, { "frame_number": 4346, "timestamp_epoch": "1634913239.433653000", "display_filter": "frame.number == 4346", "tcp_stream": 193 }, { "frame_number": 5705, "timestamp_epoch": "1634913300.079277000", "display_filter": "frame.number == 5705", "tcp_stream": 235 }, { "frame_number": 5710, "timestamp_epoch": "1634913300.082247000", "display_filter": "frame.number == 5710", "tcp_stream": 235 }, { "frame_number": 5712, "timestamp_epoch": "1634913300.083102000", "display_filter": "frame.number == 5712", "tcp_stream": 235 }, { "frame_number": 5714, "timestamp_epoch": "1634913300.083788000", "display_filter": "frame.number == 5714", "tcp_stream": 235 }, { "frame_number": 5716, "timestamp_epoch": "1634913300.084303000", "display_filter": "frame.number == 5716", "tcp_stream": 235 }, { "frame_number": 5723, "timestamp_epoch": "1634913300.089369000", "display_filter": "frame.number == 5723", "tcp_stream": 236 }, { "frame_number": 5727, "timestamp_epoch": "1634913300.090115000", "display_filter": "frame.number == 5727", "tcp_stream": 236 }, { "frame_number": 5730, "timestamp_epoch": "1634913300.090838000", "display_filter": "frame.number == 5730", "tcp_stream": 236 }, { "frame_number": 7176, "timestamp_epoch": "1634913412.867826000", "display_filter": "frame.number == 7176", "tcp_stream": 251 }, { "frame_number": 7181, "timestamp_epoch": "1634913412.870438000", "display_filter": "frame.number == 7181", "tcp_stream": 251 }, { "frame_number": 7183, "timestamp_epoch": "1634913412.871127000", "display_filter": "frame.number == 7183", "tcp_stream": 251 }, { "frame_number": 7185, "timestamp_epoch": "1634913412.871596000", "display_filter": "frame.number == 7185", "tcp_stream": 251 }, { "frame_number": 7187, "timestamp_epoch": "1634913412.872124000", "display_filter": "frame.number == 7187", "tcp_stream": 251 }, { "frame_number": 7196, "timestamp_epoch": "1634913412.879738000", "display_filter": "frame.number == 7196", "tcp_stream": 252 }, { "frame_number": 7200, "timestamp_epoch": "1634913412.880717000", "display_filter": "frame.number == 7200", "tcp_stream": 252 }, { "frame_number": 7203, "timestamp_epoch": "1634913412.881439000", "display_filter": "frame.number == 7203", "tcp_stream": 252 }, { "frame_number": 29308, "timestamp_epoch": "1634915040.562558000", "display_filter": "frame.number == 29308", "tcp_stream": 766 }, { "frame_number": 29313, "timestamp_epoch": "1634915040.565244000", "display_filter": "frame.number == 29313", "tcp_stream": 766 }, { "frame_number": 29315, "timestamp_epoch": "1634915040.565981000", "display_filter": "frame.number == 29315", "tcp_stream": 766 }, { "frame_number": 29317, "timestamp_epoch": "1634915040.566512000", "display_filter": "frame.number == 29317", "tcp_stream": 766 }, { "frame_number": 29319, "timestamp_epoch": "1634915040.567079000", "display_filter": "frame.number == 29319", "tcp_stream": 766 }, { "frame_number": 29326, "timestamp_epoch": "1634915040.573345000", "display_filter": "frame.number == 29326", "tcp_stream": 767 }, { "frame_number": 29330, "timestamp_epoch": "1634915040.574080000", "display_filter": "frame.number == 29330", "tcp_stream": 767 }, { "frame_number": 29333, "timestamp_epoch": "1634915040.574655000", "display_filter": "frame.number == 29333", "tcp_stream": 767 }, { "frame_number": 48356, "timestamp_epoch": "1634915472.195635000", "display_filter": "frame.number == 48356", "tcp_stream": 910 }, { "frame_number": 48361, "timestamp_epoch": "1634915472.197846000", "display_filter": "frame.number == 48361", "tcp_stream": 910 }, { "frame_number": 48363, "timestamp_epoch": "1634915472.198627000", "display_filter": "frame.number == 48363", "tcp_stream": 910 }, { "frame_number": 48365, "timestamp_epoch": "1634915472.199192000", "display_filter": "frame.number == 48365", "tcp_stream": 910 }, { "frame_number": 48367, "timestamp_epoch": "1634915472.199765000", "display_filter": "frame.number == 48367", "tcp_stream": 910 }, { "frame_number": 48374, "timestamp_epoch": "1634915472.204857000", "display_filter": "frame.number == 48374", "tcp_stream": 911 }, { "frame_number": 48378, "timestamp_epoch": "1634915472.205681000", "display_filter": "frame.number == 48378", "tcp_stream": 911 }, { "frame_number": 48381, "timestamp_epoch": "1634915472.206437000", "display_filter": "frame.number == 48381", "tcp_stream": 911 }, { "frame_number": 62124, "timestamp_epoch": "1634916360.373782000", "display_filter": "frame.number == 62124", "tcp_stream": 1266 }, { "frame_number": 62129, "timestamp_epoch": "1634916360.375421000", "display_filter": "frame.number == 62129", "tcp_stream": 1266 }, { "frame_number": 62131, "timestamp_epoch": "1634916360.376123000", "display_filter": "frame.number == 62131", "tcp_stream": 1266 }, { "frame_number": 62133, "timestamp_epoch": "1634916360.376641000", "display_filter": "frame.number == 62133", "tcp_stream": 1266 }, { "frame_number": 62135, "timestamp_epoch": "1634916360.377284000", "display_filter": "frame.number == 62135", "tcp_stream": 1266 }, { "frame_number": 62142, "timestamp_epoch": "1634916360.381440000", "display_filter": "frame.number == 62142", "tcp_stream": 1267 }, { "frame_number": 62146, "timestamp_epoch": "1634916360.382233000", "display_filter": "frame.number == 62146", "tcp_stream": 1267 }, { "frame_number": 62149, "timestamp_epoch": "1634916360.382848000", "display_filter": "frame.number == 62149", "tcp_stream": 1267 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.156", "protocol": "ldap", "event_count": 82, "operation_numbers": [ "", "1", "4,19,19,19,5", "4,5", "5" ] } }, { "finding_id": "finding-7fd9ea33e0431e0676a05ca7", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 4250, "timestamp_epoch": "1634913239.083436000", "display_filter": "frame.number == 4250", "tcp_stream": 187 }, { "frame_number": 4252, "timestamp_epoch": "1634913239.083946000", "display_filter": "frame.number == 4252", "tcp_stream": 187 }, { "frame_number": 4254, "timestamp_epoch": "1634913239.085353000", "display_filter": "frame.number == 4254", "tcp_stream": 187 }, { "frame_number": 4256, "timestamp_epoch": "1634913239.085914000", "display_filter": "frame.number == 4256", "tcp_stream": 187 }, { "frame_number": 4258, "timestamp_epoch": "1634913239.086645000", "display_filter": "frame.number == 4258", "tcp_stream": 187 }, { "frame_number": 4260, "timestamp_epoch": "1634913239.087200000", "display_filter": "frame.number == 4260", "tcp_stream": 187 }, { "frame_number": 4262, "timestamp_epoch": "1634913239.088103000", "display_filter": "frame.number == 4262", "tcp_stream": 187 }, { "frame_number": 4264, "timestamp_epoch": "1634913239.088685000", "display_filter": "frame.number == 4264", "tcp_stream": 187 }, { "frame_number": 4266, "timestamp_epoch": "1634913239.090347000", "display_filter": "frame.number == 4266", "tcp_stream": 187 }, { "frame_number": 4268, "timestamp_epoch": "1634913239.090898000", "display_filter": "frame.number == 4268", "tcp_stream": 187 }, { "frame_number": 4270, "timestamp_epoch": "1634913239.092201000", "display_filter": "frame.number == 4270", "tcp_stream": 187 }, { "frame_number": 4272, "timestamp_epoch": "1634913239.092808000", "display_filter": "frame.number == 4272", "tcp_stream": 187 }, { "frame_number": 4275, "timestamp_epoch": "1634913239.093588000", "display_filter": "frame.number == 4275", "tcp_stream": 187 }, { "frame_number": 4278, "timestamp_epoch": "1634913239.094151000", "display_filter": "frame.number == 4278", "tcp_stream": 187 }, { "frame_number": 4280, "timestamp_epoch": "1634913239.096150000", "display_filter": "frame.number == 4280", "tcp_stream": 187 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.156", "protocol": "samr", "event_count": 15, "operation_numbers": [ "1", "16", "17", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-35271fc2b1fc6bb0ca24a944", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 128, "timestamp_epoch": "1634913054.084239000", "display_filter": "frame.number == 128", "tcp_stream": 3 }, { "frame_number": 132, "timestamp_epoch": "1634913054.085000000", "display_filter": "frame.number == 132", "tcp_stream": 3 }, { "frame_number": 135, "timestamp_epoch": "1634913054.085332000", "display_filter": "frame.number == 135", "tcp_stream": 3 }, { "frame_number": 146, "timestamp_epoch": "1634913054.087993000", "display_filter": "frame.number == 146", "tcp_stream": 3 }, { "frame_number": 150, "timestamp_epoch": "1634913054.088894000", "display_filter": "frame.number == 150", "tcp_stream": 3 }, { "frame_number": 152, "timestamp_epoch": "1634913054.089831000", "display_filter": "frame.number == 152", "tcp_stream": 3 }, { "frame_number": 324, "timestamp_epoch": "1634913054.922109000", "display_filter": "frame.number == 324", "tcp_stream": 3 }, { "frame_number": 326, "timestamp_epoch": "1634913054.922727000", "display_filter": "frame.number == 326", "tcp_stream": 3 }, { "frame_number": 328, "timestamp_epoch": "1634913054.923275000", "display_filter": "frame.number == 328", "tcp_stream": 3 }, { "frame_number": 330, "timestamp_epoch": "1634913054.924440000", "display_filter": "frame.number == 330", "tcp_stream": 3 }, { "frame_number": 569, "timestamp_epoch": "1634913057.668670000", "display_filter": "frame.number == 569", "tcp_stream": 26 }, { "frame_number": 571, "timestamp_epoch": "1634913057.669456000", "display_filter": "frame.number == 571", "tcp_stream": 26 }, { "frame_number": 573, "timestamp_epoch": "1634913057.669830000", "display_filter": "frame.number == 573", "tcp_stream": 26 }, { "frame_number": 577, "timestamp_epoch": "1634913057.671074000", "display_filter": "frame.number == 577", "tcp_stream": 26 }, { "frame_number": 579, "timestamp_epoch": "1634913057.671697000", "display_filter": "frame.number == 579", "tcp_stream": 26 }, { "frame_number": 581, "timestamp_epoch": "1634913057.672068000", "display_filter": "frame.number == 581", "tcp_stream": 26 }, { "frame_number": 3445, "timestamp_epoch": "1634913211.572602000", "display_filter": "frame.number == 3445", "tcp_stream": 156 }, { "frame_number": 3447, "timestamp_epoch": "1634913211.573090000", "display_filter": "frame.number == 3447", "tcp_stream": 156 }, { "frame_number": 3449, "timestamp_epoch": "1634913211.573589000", "display_filter": "frame.number == 3449", "tcp_stream": 156 }, { "frame_number": 3451, "timestamp_epoch": "1634913211.573973000", "display_filter": "frame.number == 3451", "tcp_stream": 156 }, { "frame_number": 5321, "timestamp_epoch": "1634913272.477765000", "display_filter": "frame.number == 5321", "tcp_stream": 223 }, { "frame_number": 5323, "timestamp_epoch": "1634913272.478579000", "display_filter": "frame.number == 5323", "tcp_stream": 223 }, { "frame_number": 5325, "timestamp_epoch": "1634913272.479009000", "display_filter": "frame.number == 5325", "tcp_stream": 223 }, { "frame_number": 5329, "timestamp_epoch": "1634913272.480681000", "display_filter": "frame.number == 5329", "tcp_stream": 223 }, { "frame_number": 5331, "timestamp_epoch": "1634913272.481225000", "display_filter": "frame.number == 5331", "tcp_stream": 223 }, { "frame_number": 5333, "timestamp_epoch": "1634913272.481582000", "display_filter": "frame.number == 5333", "tcp_stream": 223 }, { "frame_number": 29091, "timestamp_epoch": "1634915012.970980000", "display_filter": "frame.number == 29091", "tcp_stream": 756 }, { "frame_number": 29096, "timestamp_epoch": "1634915012.975106000", "display_filter": "frame.number == 29096", "tcp_stream": 756 }, { "frame_number": 29098, "timestamp_epoch": "1634915012.975994000", "display_filter": "frame.number == 29098", "tcp_stream": 756 }, { "frame_number": 29100, "timestamp_epoch": "1634915012.979798000", "display_filter": "frame.number == 29100", "tcp_stream": 756 }, { "frame_number": 29104, "timestamp_epoch": "1634915012.982562000", "display_filter": "frame.number == 29104", "tcp_stream": 756 }, { "frame_number": 29119, "timestamp_epoch": "1634915012.991767000", "display_filter": "frame.number == 29119", "tcp_stream": 758 }, { "frame_number": 29121, "timestamp_epoch": "1634915012.992293000", "display_filter": "frame.number == 29121", "tcp_stream": 758 }, { "frame_number": 29123, "timestamp_epoch": "1634915012.992578000", "display_filter": "frame.number == 29123", "tcp_stream": 758 }, { "frame_number": 29127, "timestamp_epoch": "1634915012.996201000", "display_filter": "frame.number == 29127", "tcp_stream": 758 }, { "frame_number": 29129, "timestamp_epoch": "1634915012.996720000", "display_filter": "frame.number == 29129", "tcp_stream": 758 }, { "frame_number": 29131, "timestamp_epoch": "1634915012.997101000", "display_filter": "frame.number == 29131", "tcp_stream": 758 }, { "frame_number": 45076, "timestamp_epoch": "1634915359.668177000", "display_filter": "frame.number == 45076", "tcp_stream": 862 }, { "frame_number": 45078, "timestamp_epoch": "1634915359.668819000", "display_filter": "frame.number == 45078", "tcp_stream": 862 }, { "frame_number": 45080, "timestamp_epoch": "1634915359.669214000", "display_filter": "frame.number == 45080", "tcp_stream": 862 }, { "frame_number": 45084, "timestamp_epoch": "1634915359.671409000", "display_filter": "frame.number == 45084", "tcp_stream": 862 }, { "frame_number": 45086, "timestamp_epoch": "1634915359.671944000", "display_filter": "frame.number == 45086", "tcp_stream": 862 }, { "frame_number": 45088, "timestamp_epoch": "1634915359.672337000", "display_filter": "frame.number == 45088", "tcp_stream": 862 }, { "frame_number": 55101, "timestamp_epoch": "1634915700.850851000", "display_filter": "frame.number == 55101", "tcp_stream": 990 }, { "frame_number": 55103, "timestamp_epoch": "1634915700.851652000", "display_filter": "frame.number == 55103", "tcp_stream": 990 }, { "frame_number": 55105, "timestamp_epoch": "1634915700.852105000", "display_filter": "frame.number == 55105", "tcp_stream": 990 }, { "frame_number": 55109, "timestamp_epoch": "1634915700.853715000", "display_filter": "frame.number == 55109", "tcp_stream": 990 }, { "frame_number": 55111, "timestamp_epoch": "1634915700.854241000", "display_filter": "frame.number == 55111", "tcp_stream": 990 }, { "frame_number": 55113, "timestamp_epoch": "1634915700.854707000", "display_filter": "frame.number == 55113", "tcp_stream": 990 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.157", "protocol": "drsuapi", "event_count": 49, "operation_numbers": [ "0", "1", "12", "30" ] } }, { "finding_id": "finding-98dab4e390f6fa0668358a33", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 29, "timestamp_epoch": "1634913052.671148000", "display_filter": "frame.number == 29", "tcp_stream": 0 }, { "frame_number": 93, "timestamp_epoch": "1634913054.067128000", "display_filter": "frame.number == 93", "tcp_stream": 5 }, { "frame_number": 124, "timestamp_epoch": "1634913054.082974000", "display_filter": "frame.number == 124", "tcp_stream": 5 }, { "frame_number": 130, "timestamp_epoch": "1634913054.084557000", "display_filter": "frame.number == 130", "tcp_stream": 5 }, { "frame_number": 136, "timestamp_epoch": "1634913054.085442000", "display_filter": "frame.number == 136", "tcp_stream": 5 }, { "frame_number": 170, "timestamp_epoch": "1634913054.223626000", "display_filter": "frame.number == 170", "tcp_stream": 5 }, { "frame_number": 193, "timestamp_epoch": "1634913054.351684000", "display_filter": "frame.number == 193", "tcp_stream": 5 }, { "frame_number": 264, "timestamp_epoch": "1634913054.583058000", "display_filter": "frame.number == 264", "tcp_stream": 5 }, { "frame_number": 272, "timestamp_epoch": "1634913054.584610000", "display_filter": "frame.number == 272", "tcp_stream": 5 }, { "frame_number": 274, "timestamp_epoch": "1634913054.585300000", "display_filter": "frame.number == 274", "tcp_stream": 5 }, { "frame_number": 310, "timestamp_epoch": "1634913054.714640000", "display_filter": "frame.number == 310", "tcp_stream": 0 }, { "frame_number": 349, "timestamp_epoch": "1634913055.632442000", "display_filter": "frame.number == 349", "tcp_stream": 20 }, { "frame_number": 354, "timestamp_epoch": "1634913055.635128000", "display_filter": "frame.number == 354", "tcp_stream": 20 }, { "frame_number": 370, "timestamp_epoch": "1634913055.680966000", "display_filter": "frame.number == 370", "tcp_stream": 20 }, { "frame_number": 377, "timestamp_epoch": "1634913055.692172000", "display_filter": "frame.number == 377", "tcp_stream": 22 }, { "frame_number": 379, "timestamp_epoch": "1634913055.693129000", "display_filter": "frame.number == 379", "tcp_stream": 22 }, { "frame_number": 381, "timestamp_epoch": "1634913055.693885000", "display_filter": "frame.number == 381", "tcp_stream": 22 }, { "frame_number": 383, "timestamp_epoch": "1634913055.695725000", "display_filter": "frame.number == 383", "tcp_stream": 20 }, { "frame_number": 587, "timestamp_epoch": "1634913057.674886000", "display_filter": "frame.number == 587", "tcp_stream": 27 }, { "frame_number": 592, "timestamp_epoch": "1634913057.676331000", "display_filter": "frame.number == 592", "tcp_stream": 27 }, { "frame_number": 594, "timestamp_epoch": "1634913057.676933000", "display_filter": "frame.number == 594", "tcp_stream": 27 }, { "frame_number": 596, "timestamp_epoch": "1634913057.677404000", "display_filter": "frame.number == 596", "tcp_stream": 27 }, { "frame_number": 598, "timestamp_epoch": "1634913057.677691000", "display_filter": "frame.number == 598", "tcp_stream": 27 }, { "frame_number": 605, "timestamp_epoch": "1634913057.680537000", "display_filter": "frame.number == 605", "tcp_stream": 28 }, { "frame_number": 609, "timestamp_epoch": "1634913057.681064000", "display_filter": "frame.number == 609", "tcp_stream": 28 }, { "frame_number": 612, "timestamp_epoch": "1634913057.681579000", "display_filter": "frame.number == 612", "tcp_stream": 28 }, { "frame_number": 646, "timestamp_epoch": "1634913063.055968000", "display_filter": "frame.number == 646", "tcp_stream": 29 }, { "frame_number": 651, "timestamp_epoch": "1634913063.058151000", "display_filter": "frame.number == 651", "tcp_stream": 29 }, { "frame_number": 653, "timestamp_epoch": "1634913063.060626000", "display_filter": "frame.number == 653", "tcp_stream": 29 }, { "frame_number": 655, "timestamp_epoch": "1634913063.061117000", "display_filter": "frame.number == 655", "tcp_stream": 29 }, { "frame_number": 657, "timestamp_epoch": "1634913063.061633000", "display_filter": "frame.number == 657", "tcp_stream": 29 }, { "frame_number": 659, "timestamp_epoch": "1634913063.062165000", "display_filter": "frame.number == 659", "tcp_stream": 29 }, { "frame_number": 661, "timestamp_epoch": "1634913063.062737000", "display_filter": "frame.number == 661", "tcp_stream": 29 }, { "frame_number": 668, "timestamp_epoch": "1634913063.081501000", "display_filter": "frame.number == 668", "tcp_stream": 30 }, { "frame_number": 670, "timestamp_epoch": "1634913063.082671000", "display_filter": "frame.number == 670", "tcp_stream": 30 }, { "frame_number": 704, "timestamp_epoch": "1634913063.089658000", "display_filter": "frame.number == 704", "tcp_stream": 30 }, { "frame_number": 3547, "timestamp_epoch": "1634913211.916395000", "display_filter": "frame.number == 3547", "tcp_stream": 163 }, { "frame_number": 3549, "timestamp_epoch": "1634913211.922376000", "display_filter": "frame.number == 3549", "tcp_stream": 163 }, { "frame_number": 3556, "timestamp_epoch": "1634913211.928846000", "display_filter": "frame.number == 3556", "tcp_stream": 164 }, { "frame_number": 3558, "timestamp_epoch": "1634913211.929484000", "display_filter": "frame.number == 3558", "tcp_stream": 164 }, { "frame_number": 3560, "timestamp_epoch": "1634913211.929878000", "display_filter": "frame.number == 3560", "tcp_stream": 164 }, { "frame_number": 3562, "timestamp_epoch": "1634913211.930603000", "display_filter": "frame.number == 3562", "tcp_stream": 163 }, { "frame_number": 5339, "timestamp_epoch": "1634913272.484393000", "display_filter": "frame.number == 5339", "tcp_stream": 224 }, { "frame_number": 5344, "timestamp_epoch": "1634913272.486629000", "display_filter": "frame.number == 5344", "tcp_stream": 224 }, { "frame_number": 5346, "timestamp_epoch": "1634913272.487518000", "display_filter": "frame.number == 5346", "tcp_stream": 224 }, { "frame_number": 5348, "timestamp_epoch": "1634913272.488043000", "display_filter": "frame.number == 5348", "tcp_stream": 224 }, { "frame_number": 5350, "timestamp_epoch": "1634913272.488596000", "display_filter": "frame.number == 5350", "tcp_stream": 224 }, { "frame_number": 5357, "timestamp_epoch": "1634913272.492997000", "display_filter": "frame.number == 5357", "tcp_stream": 225 }, { "frame_number": 5361, "timestamp_epoch": "1634913272.493853000", "display_filter": "frame.number == 5361", "tcp_stream": 225 }, { "frame_number": 5364, "timestamp_epoch": "1634913272.494557000", "display_filter": "frame.number == 5364", "tcp_stream": 225 }, { "frame_number": 29145, "timestamp_epoch": "1634915013.109110000", "display_filter": "frame.number == 29145", "tcp_stream": 759 }, { "frame_number": 29150, "timestamp_epoch": "1634915013.111398000", "display_filter": "frame.number == 29150", "tcp_stream": 759 }, { "frame_number": 29152, "timestamp_epoch": "1634915013.112019000", "display_filter": "frame.number == 29152", "tcp_stream": 759 }, { "frame_number": 29154, "timestamp_epoch": "1634915013.112541000", "display_filter": "frame.number == 29154", "tcp_stream": 759 }, { "frame_number": 29156, "timestamp_epoch": "1634915013.113011000", "display_filter": "frame.number == 29156", "tcp_stream": 759 }, { "frame_number": 29163, "timestamp_epoch": "1634915013.117501000", "display_filter": "frame.number == 29163", "tcp_stream": 760 }, { "frame_number": 29167, "timestamp_epoch": "1634915013.118180000", "display_filter": "frame.number == 29167", "tcp_stream": 760 }, { "frame_number": 29170, "timestamp_epoch": "1634915013.118706000", "display_filter": "frame.number == 29170", "tcp_stream": 760 }, { "frame_number": 45094, "timestamp_epoch": "1634915359.676278000", "display_filter": "frame.number == 45094", "tcp_stream": 863 }, { "frame_number": 45099, "timestamp_epoch": "1634915359.678157000", "display_filter": "frame.number == 45099", "tcp_stream": 863 }, { "frame_number": 45101, "timestamp_epoch": "1634915359.679135000", "display_filter": "frame.number == 45101", "tcp_stream": 863 }, { "frame_number": 45103, "timestamp_epoch": "1634915359.679634000", "display_filter": "frame.number == 45103", "tcp_stream": 863 }, { "frame_number": 45105, "timestamp_epoch": "1634915359.680110000", "display_filter": "frame.number == 45105", "tcp_stream": 863 }, { "frame_number": 45112, "timestamp_epoch": "1634915359.684779000", "display_filter": "frame.number == 45112", "tcp_stream": 864 }, { "frame_number": 45116, "timestamp_epoch": "1634915359.685530000", "display_filter": "frame.number == 45116", "tcp_stream": 864 }, { "frame_number": 45119, "timestamp_epoch": "1634915359.686159000", "display_filter": "frame.number == 45119", "tcp_stream": 864 }, { "frame_number": 55119, "timestamp_epoch": "1634915700.857238000", "display_filter": "frame.number == 55119", "tcp_stream": 991 }, { "frame_number": 55124, "timestamp_epoch": "1634915700.858794000", "display_filter": "frame.number == 55124", "tcp_stream": 991 }, { "frame_number": 55126, "timestamp_epoch": "1634915700.859510000", "display_filter": "frame.number == 55126", "tcp_stream": 991 }, { "frame_number": 55128, "timestamp_epoch": "1634915700.860103000", "display_filter": "frame.number == 55128", "tcp_stream": 991 }, { "frame_number": 55130, "timestamp_epoch": "1634915700.860629000", "display_filter": "frame.number == 55130", "tcp_stream": 991 }, { "frame_number": 55137, "timestamp_epoch": "1634915700.864788000", "display_filter": "frame.number == 55137", "tcp_stream": 992 }, { "frame_number": 55141, "timestamp_epoch": "1634915700.865587000", "display_filter": "frame.number == 55141", "tcp_stream": 992 }, { "frame_number": 55144, "timestamp_epoch": "1634915700.866246000", "display_filter": "frame.number == 55144", "tcp_stream": 992 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.157", "protocol": "ldap", "event_count": 74, "operation_numbers": [ "", "1", "4,19,19,19,5", "4,5", "5" ] } }, { "finding_id": "finding-f9e585b3cfff0e4244f76a46", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 3469, "timestamp_epoch": "1634913211.594418000", "display_filter": "frame.number == 3469", "tcp_stream": 157 }, { "frame_number": 3471, "timestamp_epoch": "1634913211.595010000", "display_filter": "frame.number == 3471", "tcp_stream": 157 }, { "frame_number": 3473, "timestamp_epoch": "1634913211.595531000", "display_filter": "frame.number == 3473", "tcp_stream": 157 }, { "frame_number": 3475, "timestamp_epoch": "1634913211.596471000", "display_filter": "frame.number == 3475", "tcp_stream": 157 }, { "frame_number": 3477, "timestamp_epoch": "1634913211.597346000", "display_filter": "frame.number == 3477", "tcp_stream": 157 }, { "frame_number": 3479, "timestamp_epoch": "1634913211.598045000", "display_filter": "frame.number == 3479", "tcp_stream": 157 }, { "frame_number": 3481, "timestamp_epoch": "1634913211.599136000", "display_filter": "frame.number == 3481", "tcp_stream": 157 }, { "frame_number": 3483, "timestamp_epoch": "1634913211.599905000", "display_filter": "frame.number == 3483", "tcp_stream": 157 }, { "frame_number": 3485, "timestamp_epoch": "1634913211.600415000", "display_filter": "frame.number == 3485", "tcp_stream": 157 }, { "frame_number": 3487, "timestamp_epoch": "1634913211.601102000", "display_filter": "frame.number == 3487", "tcp_stream": 157 }, { "frame_number": 3489, "timestamp_epoch": "1634913211.601660000", "display_filter": "frame.number == 3489", "tcp_stream": 157 }, { "frame_number": 3491, "timestamp_epoch": "1634913211.603062000", "display_filter": "frame.number == 3491", "tcp_stream": 157 }, { "frame_number": 3493, "timestamp_epoch": "1634913211.605881000", "display_filter": "frame.number == 3493", "tcp_stream": 157 }, { "frame_number": 3495, "timestamp_epoch": "1634913211.606408000", "display_filter": "frame.number == 3495", "tcp_stream": 157 }, { "frame_number": 3497, "timestamp_epoch": "1634913211.607068000", "display_filter": "frame.number == 3497", "tcp_stream": 157 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.157", "protocol": "samr", "event_count": 15, "operation_numbers": [ "1", "16", "17", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-b43fdaa9a7871e5e0055890c", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 1954, "timestamp_epoch": "1634913145.885247000", "display_filter": "frame.number == 1954", "tcp_stream": 93 }, { "frame_number": 1961, "timestamp_epoch": "1634913145.886204000", "display_filter": "frame.number == 1961", "tcp_stream": 93 }, { "frame_number": 1965, "timestamp_epoch": "1634913145.886672000", "display_filter": "frame.number == 1965", "tcp_stream": 93 }, { "frame_number": 1966, "timestamp_epoch": "1634913145.886730000", "display_filter": "frame.number == 1966", "tcp_stream": 86 }, { "frame_number": 1972, "timestamp_epoch": "1634913145.887379000", "display_filter": "frame.number == 1972", "tcp_stream": 86 }, { "frame_number": 1974, "timestamp_epoch": "1634913145.887959000", "display_filter": "frame.number == 1974", "tcp_stream": 86 }, { "frame_number": 1979, "timestamp_epoch": "1634913145.888442000", "display_filter": "frame.number == 1979", "tcp_stream": 86 }, { "frame_number": 1988, "timestamp_epoch": "1634913145.890430000", "display_filter": "frame.number == 1988", "tcp_stream": 93 }, { "frame_number": 1990, "timestamp_epoch": "1634913145.891495000", "display_filter": "frame.number == 1990", "tcp_stream": 93 }, { "frame_number": 1992, "timestamp_epoch": "1634913145.892153000", "display_filter": "frame.number == 1992", "tcp_stream": 93 }, { "frame_number": 2040, "timestamp_epoch": "1634913145.972093000", "display_filter": "frame.number == 2040", "tcp_stream": 101 }, { "frame_number": 2042, "timestamp_epoch": "1634913145.972877000", "display_filter": "frame.number == 2042", "tcp_stream": 101 }, { "frame_number": 2044, "timestamp_epoch": "1634913145.973549000", "display_filter": "frame.number == 2044", "tcp_stream": 101 }, { "frame_number": 2046, "timestamp_epoch": "1634913145.973827000", "display_filter": "frame.number == 2046", "tcp_stream": 101 }, { "frame_number": 2340, "timestamp_epoch": "1634913149.377688000", "display_filter": "frame.number == 2340", "tcp_stream": 113 }, { "frame_number": 2342, "timestamp_epoch": "1634913149.378307000", "display_filter": "frame.number == 2342", "tcp_stream": 113 }, { "frame_number": 2344, "timestamp_epoch": "1634913149.379201000", "display_filter": "frame.number == 2344", "tcp_stream": 113 }, { "frame_number": 2348, "timestamp_epoch": "1634913149.380888000", "display_filter": "frame.number == 2348", "tcp_stream": 113 }, { "frame_number": 2350, "timestamp_epoch": "1634913149.381528000", "display_filter": "frame.number == 2350", "tcp_stream": 113 }, { "frame_number": 2352, "timestamp_epoch": "1634913149.381850000", "display_filter": "frame.number == 2352", "tcp_stream": 113 }, { "frame_number": 2671, "timestamp_epoch": "1634913184.597442000", "display_filter": "frame.number == 2671", "tcp_stream": 93 }, { "frame_number": 2673, "timestamp_epoch": "1634913184.598253000", "display_filter": "frame.number == 2673", "tcp_stream": 93 }, { "frame_number": 2675, "timestamp_epoch": "1634913184.598708000", "display_filter": "frame.number == 2675", "tcp_stream": 93 }, { "frame_number": 2677, "timestamp_epoch": "1634913184.599449000", "display_filter": "frame.number == 2677", "tcp_stream": 93 }, { "frame_number": 5053, "timestamp_epoch": "1634913245.552194000", "display_filter": "frame.number == 5053", "tcp_stream": 215 }, { "frame_number": 5055, "timestamp_epoch": "1634913245.552993000", "display_filter": "frame.number == 5055", "tcp_stream": 215 }, { "frame_number": 5057, "timestamp_epoch": "1634913245.553438000", "display_filter": "frame.number == 5057", "tcp_stream": 215 }, { "frame_number": 5061, "timestamp_epoch": "1634913245.555131000", "display_filter": "frame.number == 5061", "tcp_stream": 215 }, { "frame_number": 5063, "timestamp_epoch": "1634913245.555719000", "display_filter": "frame.number == 5063", "tcp_stream": 215 }, { "frame_number": 5065, "timestamp_epoch": "1634913245.556147000", "display_filter": "frame.number == 5065", "tcp_stream": 215 }, { "frame_number": 26064, "timestamp_epoch": "1634914985.976942000", "display_filter": "frame.number == 26064", "tcp_stream": 746 }, { "frame_number": 26066, "timestamp_epoch": "1634914985.977473000", "display_filter": "frame.number == 26066", "tcp_stream": 746 }, { "frame_number": 26068, "timestamp_epoch": "1634914985.978666000", "display_filter": "frame.number == 26068", "tcp_stream": 746 }, { "frame_number": 26070, "timestamp_epoch": "1634914985.979273000", "display_filter": "frame.number == 26070", "tcp_stream": 746 }, { "frame_number": 26072, "timestamp_epoch": "1634914985.979543000", "display_filter": "frame.number == 26072", "tcp_stream": 746 }, { "frame_number": 26092, "timestamp_epoch": "1634914985.999036000", "display_filter": "frame.number == 26092", "tcp_stream": 748 }, { "frame_number": 26096, "timestamp_epoch": "1634914985.999770000", "display_filter": "frame.number == 26096", "tcp_stream": 748 }, { "frame_number": 26098, "timestamp_epoch": "1634914986.000319000", "display_filter": "frame.number == 26098", "tcp_stream": 748 }, { "frame_number": 26102, "timestamp_epoch": "1634914986.002384000", "display_filter": "frame.number == 26102", "tcp_stream": 748 }, { "frame_number": 26104, "timestamp_epoch": "1634914986.002838000", "display_filter": "frame.number == 26104", "tcp_stream": 748 }, { "frame_number": 26106, "timestamp_epoch": "1634914986.003243000", "display_filter": "frame.number == 26106", "tcp_stream": 748 }, { "frame_number": 44962, "timestamp_epoch": "1634915357.648368000", "display_filter": "frame.number == 44962", "tcp_stream": 857 }, { "frame_number": 44964, "timestamp_epoch": "1634915357.649101000", "display_filter": "frame.number == 44964", "tcp_stream": 857 }, { "frame_number": 44966, "timestamp_epoch": "1634915357.649636000", "display_filter": "frame.number == 44966", "tcp_stream": 857 }, { "frame_number": 44970, "timestamp_epoch": "1634915357.652262000", "display_filter": "frame.number == 44970", "tcp_stream": 857 }, { "frame_number": 44972, "timestamp_epoch": "1634915357.652892000", "display_filter": "frame.number == 44972", "tcp_stream": 857 }, { "frame_number": 44974, "timestamp_epoch": "1634915357.653394000", "display_filter": "frame.number == 44974", "tcp_stream": 857 }, { "frame_number": 59919, "timestamp_epoch": "1634916153.388278000", "display_filter": "frame.number == 59919", "tcp_stream": 1156 }, { "frame_number": 59921, "timestamp_epoch": "1634916153.389134000", "display_filter": "frame.number == 59921", "tcp_stream": 1156 }, { "frame_number": 59923, "timestamp_epoch": "1634916153.389603000", "display_filter": "frame.number == 59923", "tcp_stream": 1156 }, { "frame_number": 59927, "timestamp_epoch": "1634916153.391303000", "display_filter": "frame.number == 59927", "tcp_stream": 1156 }, { "frame_number": 59929, "timestamp_epoch": "1634916153.391885000", "display_filter": "frame.number == 59929", "tcp_stream": 1156 }, { "frame_number": 59931, "timestamp_epoch": "1634916153.392336000", "display_filter": "frame.number == 59931", "tcp_stream": 1156 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.158", "protocol": "drsuapi", "event_count": 53, "operation_numbers": [ "0", "1", "12", "13", "30" ] } }, { "finding_id": "finding-c3b8102ca765ff62405d7567", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 1698, "timestamp_epoch": "1634913144.099936000", "display_filter": "frame.number == 1698", "tcp_stream": 79 }, { "frame_number": 1779, "timestamp_epoch": "1634913145.845746000", "display_filter": "frame.number == 1779", "tcp_stream": 84 }, { "frame_number": 1925, "timestamp_epoch": "1634913145.881932000", "display_filter": "frame.number == 1925", "tcp_stream": 79 }, { "frame_number": 1947, "timestamp_epoch": "1634913145.884085000", "display_filter": "frame.number == 1947", "tcp_stream": 84 }, { "frame_number": 1962, "timestamp_epoch": "1634913145.886405000", "display_filter": "frame.number == 1962", "tcp_stream": 84 }, { "frame_number": 1971, "timestamp_epoch": "1634913145.887320000", "display_filter": "frame.number == 1971", "tcp_stream": 84 }, { "frame_number": 2060, "timestamp_epoch": "1634913146.035616000", "display_filter": "frame.number == 2060", "tcp_stream": 84 }, { "frame_number": 2074, "timestamp_epoch": "1634913146.160001000", "display_filter": "frame.number == 2074", "tcp_stream": 84 }, { "frame_number": 2088, "timestamp_epoch": "1634913146.347551000", "display_filter": "frame.number == 2088", "tcp_stream": 84 }, { "frame_number": 2096, "timestamp_epoch": "1634913146.349491000", "display_filter": "frame.number == 2096", "tcp_stream": 84 }, { "frame_number": 2098, "timestamp_epoch": "1634913146.350163000", "display_filter": "frame.number == 2098", "tcp_stream": 84 }, { "frame_number": 2114, "timestamp_epoch": "1634913147.180284000", "display_filter": "frame.number == 2114", "tcp_stream": 107 }, { "frame_number": 2119, "timestamp_epoch": "1634913147.183906000", "display_filter": "frame.number == 2119", "tcp_stream": 107 }, { "frame_number": 2135, "timestamp_epoch": "1634913147.410332000", "display_filter": "frame.number == 2135", "tcp_stream": 107 }, { "frame_number": 2142, "timestamp_epoch": "1634913147.421577000", "display_filter": "frame.number == 2142", "tcp_stream": 109 }, { "frame_number": 2144, "timestamp_epoch": "1634913147.422426000", "display_filter": "frame.number == 2144", "tcp_stream": 109 }, { "frame_number": 2146, "timestamp_epoch": "1634913147.422969000", "display_filter": "frame.number == 2146", "tcp_stream": 109 }, { "frame_number": 2148, "timestamp_epoch": "1634913147.424204000", "display_filter": "frame.number == 2148", "tcp_stream": 107 }, { "frame_number": 2358, "timestamp_epoch": "1634913149.399936000", "display_filter": "frame.number == 2358", "tcp_stream": 114 }, { "frame_number": 2363, "timestamp_epoch": "1634913149.401647000", "display_filter": "frame.number == 2363", "tcp_stream": 114 }, { "frame_number": 2365, "timestamp_epoch": "1634913149.402732000", "display_filter": "frame.number == 2365", "tcp_stream": 114 }, { "frame_number": 2367, "timestamp_epoch": "1634913149.403300000", "display_filter": "frame.number == 2367", "tcp_stream": 114 }, { "frame_number": 2369, "timestamp_epoch": "1634913149.404031000", "display_filter": "frame.number == 2369", "tcp_stream": 114 }, { "frame_number": 2376, "timestamp_epoch": "1634913149.411898000", "display_filter": "frame.number == 2376", "tcp_stream": 115 }, { "frame_number": 2380, "timestamp_epoch": "1634913149.412748000", "display_filter": "frame.number == 2380", "tcp_stream": 115 }, { "frame_number": 2383, "timestamp_epoch": "1634913149.413357000", "display_filter": "frame.number == 2383", "tcp_stream": 115 }, { "frame_number": 2416, "timestamp_epoch": "1634913154.532511000", "display_filter": "frame.number == 2416", "tcp_stream": 116 }, { "frame_number": 2421, "timestamp_epoch": "1634913154.535212000", "display_filter": "frame.number == 2421", "tcp_stream": 116 }, { "frame_number": 2424, "timestamp_epoch": "1634913154.546643000", "display_filter": "frame.number == 2424", "tcp_stream": 116 }, { "frame_number": 2426, "timestamp_epoch": "1634913154.547164000", "display_filter": "frame.number == 2426", "tcp_stream": 116 }, { "frame_number": 2428, "timestamp_epoch": "1634913154.547599000", "display_filter": "frame.number == 2428", "tcp_stream": 116 }, { "frame_number": 2430, "timestamp_epoch": "1634913154.548055000", "display_filter": "frame.number == 2430", "tcp_stream": 116 }, { "frame_number": 2432, "timestamp_epoch": "1634913154.548509000", "display_filter": "frame.number == 2432", "tcp_stream": 116 }, { "frame_number": 2801, "timestamp_epoch": "1634913184.961996000", "display_filter": "frame.number == 2801", "tcp_stream": 133 }, { "frame_number": 2803, "timestamp_epoch": "1634913184.967094000", "display_filter": "frame.number == 2803", "tcp_stream": 133 }, { "frame_number": 2810, "timestamp_epoch": "1634913184.974053000", "display_filter": "frame.number == 2810", "tcp_stream": 134 }, { "frame_number": 2812, "timestamp_epoch": "1634913184.974912000", "display_filter": "frame.number == 2812", "tcp_stream": 134 }, { "frame_number": 2814, "timestamp_epoch": "1634913184.975475000", "display_filter": "frame.number == 2814", "tcp_stream": 134 }, { "frame_number": 2816, "timestamp_epoch": "1634913184.976318000", "display_filter": "frame.number == 2816", "tcp_stream": 133 }, { "frame_number": 5071, "timestamp_epoch": "1634913245.559023000", "display_filter": "frame.number == 5071", "tcp_stream": 216 }, { "frame_number": 5076, "timestamp_epoch": "1634913245.560736000", "display_filter": "frame.number == 5076", "tcp_stream": 216 }, { "frame_number": 5078, "timestamp_epoch": "1634913245.561423000", "display_filter": "frame.number == 5078", "tcp_stream": 216 }, { "frame_number": 5080, "timestamp_epoch": "1634913245.561918000", "display_filter": "frame.number == 5080", "tcp_stream": 216 }, { "frame_number": 5082, "timestamp_epoch": "1634913245.562421000", "display_filter": "frame.number == 5082", "tcp_stream": 216 }, { "frame_number": 5089, "timestamp_epoch": "1634913245.566568000", "display_filter": "frame.number == 5089", "tcp_stream": 217 }, { "frame_number": 5093, "timestamp_epoch": "1634913245.567365000", "display_filter": "frame.number == 5093", "tcp_stream": 217 }, { "frame_number": 5096, "timestamp_epoch": "1634913245.567984000", "display_filter": "frame.number == 5096", "tcp_stream": 217 }, { "frame_number": 26118, "timestamp_epoch": "1634914986.118182000", "display_filter": "frame.number == 26118", "tcp_stream": 749 }, { "frame_number": 26123, "timestamp_epoch": "1634914986.120044000", "display_filter": "frame.number == 26123", "tcp_stream": 749 }, { "frame_number": 26125, "timestamp_epoch": "1634914986.121010000", "display_filter": "frame.number == 26125", "tcp_stream": 749 }, { "frame_number": 26127, "timestamp_epoch": "1634914986.121507000", "display_filter": "frame.number == 26127", "tcp_stream": 749 }, { "frame_number": 26129, "timestamp_epoch": "1634914986.122048000", "display_filter": "frame.number == 26129", "tcp_stream": 749 }, { "frame_number": 26136, "timestamp_epoch": "1634914986.127271000", "display_filter": "frame.number == 26136", "tcp_stream": 750 }, { "frame_number": 26140, "timestamp_epoch": "1634914986.128094000", "display_filter": "frame.number == 26140", "tcp_stream": 750 }, { "frame_number": 26143, "timestamp_epoch": "1634914986.128672000", "display_filter": "frame.number == 26143", "tcp_stream": 750 }, { "frame_number": 44980, "timestamp_epoch": "1634915357.657244000", "display_filter": "frame.number == 44980", "tcp_stream": 858 }, { "frame_number": 44985, "timestamp_epoch": "1634915357.659095000", "display_filter": "frame.number == 44985", "tcp_stream": 858 }, { "frame_number": 44987, "timestamp_epoch": "1634915357.659863000", "display_filter": "frame.number == 44987", "tcp_stream": 858 }, { "frame_number": 44989, "timestamp_epoch": "1634915357.660451000", "display_filter": "frame.number == 44989", "tcp_stream": 858 }, { "frame_number": 44991, "timestamp_epoch": "1634915357.660942000", "display_filter": "frame.number == 44991", "tcp_stream": 858 }, { "frame_number": 44998, "timestamp_epoch": "1634915357.666066000", "display_filter": "frame.number == 44998", "tcp_stream": 859 }, { "frame_number": 45002, "timestamp_epoch": "1634915357.666907000", "display_filter": "frame.number == 45002", "tcp_stream": 859 }, { "frame_number": 45005, "timestamp_epoch": "1634915357.667565000", "display_filter": "frame.number == 45005", "tcp_stream": 859 }, { "frame_number": 59937, "timestamp_epoch": "1634916153.395074000", "display_filter": "frame.number == 59937", "tcp_stream": 1157 }, { "frame_number": 59942, "timestamp_epoch": "1634916153.396771000", "display_filter": "frame.number == 59942", "tcp_stream": 1157 }, { "frame_number": 59944, "timestamp_epoch": "1634916153.397562000", "display_filter": "frame.number == 59944", "tcp_stream": 1157 }, { "frame_number": 59946, "timestamp_epoch": "1634916153.398107000", "display_filter": "frame.number == 59946", "tcp_stream": 1157 }, { "frame_number": 59948, "timestamp_epoch": "1634916153.398691000", "display_filter": "frame.number == 59948", "tcp_stream": 1157 }, { "frame_number": 59955, "timestamp_epoch": "1634916153.403064000", "display_filter": "frame.number == 59955", "tcp_stream": 1158 }, { "frame_number": 59959, "timestamp_epoch": "1634916153.403852000", "display_filter": "frame.number == 59959", "tcp_stream": 1158 }, { "frame_number": 59962, "timestamp_epoch": "1634916153.404439000", "display_filter": "frame.number == 59962", "tcp_stream": 1158 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.158", "protocol": "ldap", "event_count": 71, "operation_numbers": [ "", "1", "4,19,19,19,5", "4,5", "5" ] } }, { "finding_id": "finding-61c1e5ca920c1f938250b779", "rule_id": "directory-service-activity", "rule_version": "pcap-rules-v3", "severity": "low", "title": "Directory-service protocol activity", "explanation": "Directory protocol operations were decoded. Normal Windows logon uses these protocols; activity alone does not establish discovery, credential theft, or DCSync.", "confidence": 0.95, "status": "candidate", "evidence": [ { "frame_number": 2700, "timestamp_epoch": "1634913184.622184000", "display_filter": "frame.number == 2700", "tcp_stream": 126 }, { "frame_number": 2702, "timestamp_epoch": "1634913184.622793000", "display_filter": "frame.number == 2702", "tcp_stream": 126 }, { "frame_number": 2704, "timestamp_epoch": "1634913184.624214000", "display_filter": "frame.number == 2704", "tcp_stream": 126 }, { "frame_number": 2706, "timestamp_epoch": "1634913184.624880000", "display_filter": "frame.number == 2706", "tcp_stream": 126 }, { "frame_number": 2709, "timestamp_epoch": "1634913184.625793000", "display_filter": "frame.number == 2709", "tcp_stream": 126 }, { "frame_number": 2711, "timestamp_epoch": "1634913184.626530000", "display_filter": "frame.number == 2711", "tcp_stream": 126 }, { "frame_number": 2713, "timestamp_epoch": "1634913184.629077000", "display_filter": "frame.number == 2713", "tcp_stream": 126 }, { "frame_number": 2715, "timestamp_epoch": "1634913184.629836000", "display_filter": "frame.number == 2715", "tcp_stream": 126 }, { "frame_number": 2717, "timestamp_epoch": "1634913184.630761000", "display_filter": "frame.number == 2717", "tcp_stream": 126 }, { "frame_number": 2719, "timestamp_epoch": "1634913184.631320000", "display_filter": "frame.number == 2719", "tcp_stream": 126 }, { "frame_number": 2721, "timestamp_epoch": "1634913184.634069000", "display_filter": "frame.number == 2721", "tcp_stream": 126 }, { "frame_number": 2723, "timestamp_epoch": "1634913184.634622000", "display_filter": "frame.number == 2723", "tcp_stream": 126 }, { "frame_number": 2727, "timestamp_epoch": "1634913184.640596000", "display_filter": "frame.number == 2727", "tcp_stream": 126 }, { "frame_number": 2729, "timestamp_epoch": "1634913184.641392000", "display_filter": "frame.number == 2729", "tcp_stream": 126 }, { "frame_number": 2731, "timestamp_epoch": "1634913184.642336000", "display_filter": "frame.number == 2731", "tcp_stream": 126 }, { "frame_number": 23458, "timestamp_epoch": "1634914507.248180000", "display_filter": "frame.number == 23458", "tcp_stream": 550 }, { "frame_number": 23460, "timestamp_epoch": "1634914507.248927000", "display_filter": "frame.number == 23460", "tcp_stream": 550 }, { "frame_number": 23462, "timestamp_epoch": "1634914507.249569000", "display_filter": "frame.number == 23462", "tcp_stream": 550 }, { "frame_number": 23464, "timestamp_epoch": "1634914507.250289000", "display_filter": "frame.number == 23464", "tcp_stream": 550 }, { "frame_number": 23466, "timestamp_epoch": "1634914507.250966000", "display_filter": "frame.number == 23466", "tcp_stream": 550 }, { "frame_number": 23468, "timestamp_epoch": "1634914507.252690000", "display_filter": "frame.number == 23468", "tcp_stream": 550 }, { "frame_number": 23470, "timestamp_epoch": "1634914507.254035000", "display_filter": "frame.number == 23470", "tcp_stream": 550 }, { "frame_number": 23472, "timestamp_epoch": "1634914507.254744000", "display_filter": "frame.number == 23472", "tcp_stream": 550 }, { "frame_number": 23474, "timestamp_epoch": "1634914507.255232000", "display_filter": "frame.number == 23474", "tcp_stream": 550 }, { "frame_number": 23476, "timestamp_epoch": "1634914507.255737000", "display_filter": "frame.number == 23476", "tcp_stream": 550 }, { "frame_number": 23488, "timestamp_epoch": "1634914507.261559000", "display_filter": "frame.number == 23488", "tcp_stream": 550 }, { "frame_number": 23490, "timestamp_epoch": "1634914507.262113000", "display_filter": "frame.number == 23490", "tcp_stream": 550 }, { "frame_number": 23492, "timestamp_epoch": "1634914507.262843000", "display_filter": "frame.number == 23492", "tcp_stream": 550 }, { "frame_number": 23494, "timestamp_epoch": "1634914507.263570000", "display_filter": "frame.number == 23494", "tcp_stream": 550 }, { "frame_number": 23496, "timestamp_epoch": "1634914507.264351000", "display_filter": "frame.number == 23496", "tcp_stream": 550 }, { "frame_number": 23498, "timestamp_epoch": "1634914507.264954000", "display_filter": "frame.number == 23498", "tcp_stream": 550 }, { "frame_number": 23500, "timestamp_epoch": "1634914507.265674000", "display_filter": "frame.number == 23500", "tcp_stream": 550 }, { "frame_number": 23502, "timestamp_epoch": "1634914507.266247000", "display_filter": "frame.number == 23502", "tcp_stream": 550 }, { "frame_number": 23504, "timestamp_epoch": "1634914507.266808000", "display_filter": "frame.number == 23504", "tcp_stream": 550 }, { "frame_number": 23506, "timestamp_epoch": "1634914507.267272000", "display_filter": "frame.number == 23506", "tcp_stream": 550 }, { "frame_number": 23508, "timestamp_epoch": "1634914507.267760000", "display_filter": "frame.number == 23508", "tcp_stream": 550 }, { "frame_number": 23539, "timestamp_epoch": "1634914507.433399000", "display_filter": "frame.number == 23539", "tcp_stream": 550 }, { "frame_number": 23541, "timestamp_epoch": "1634914507.434112000", "display_filter": "frame.number == 23541", "tcp_stream": 550 }, { "frame_number": 23543, "timestamp_epoch": "1634914507.434778000", "display_filter": "frame.number == 23543", "tcp_stream": 550 }, { "frame_number": 23545, "timestamp_epoch": "1634914507.435436000", "display_filter": "frame.number == 23545", "tcp_stream": 550 }, { "frame_number": 23547, "timestamp_epoch": "1634914507.436179000", "display_filter": "frame.number == 23547", "tcp_stream": 550 }, { "frame_number": 23549, "timestamp_epoch": "1634914507.436780000", "display_filter": "frame.number == 23549", "tcp_stream": 550 }, { "frame_number": 23551, "timestamp_epoch": "1634914507.437301000", "display_filter": "frame.number == 23551", "tcp_stream": 550 } ], "metrics": { "source": "10.10.22.22", "destination": "10.10.22.158", "protocol": "samr", "event_count": 43, "operation_numbers": [ "1", "16", "17", "18", "19", "20", "25", "3", "34", "36", "39", "5", "6", "64", "7" ] } }, { "finding_id": "finding-91d5d1512d50a5639fdf314a", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 5644, "tcp_stream": 232, "timestamp_epoch": "1634913296.323615", "display_filter": "tcp.stream == 232" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 336.595, "packets": 514, "wire_bytes": 376928 } }, { "finding_id": "finding-cb37c859dd88ca2b28065961", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 17795, "tcp_stream": 391, "timestamp_epoch": "1634914008.104086", "display_filter": "tcp.stream == 391" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 171.549, "packets": 72, "wire_bytes": 4376 } }, { "finding_id": "finding-a7dddf26a0330e1c346d8c35", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 24560, "tcp_stream": 691, "timestamp_epoch": "1634914834.452296", "display_filter": "tcp.stream == 691" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 330.753, "packets": 134, "wire_bytes": 8096 } }, { "finding_id": "finding-6120c4e7f6ec4e47993b5da0", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 42858, "tcp_stream": 810, "timestamp_epoch": "1634915276.907685", "display_filter": "tcp.stream == 810" } ], "metrics": { "source": "10.10.22.156", "destination": "23.111.114.52", "destination_port": 65400, "duration_seconds": 3322.704, "packets": 9622, "wire_bytes": 1586196 } }, { "finding_id": "finding-303595c47bae259613031e88", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 51877, "tcp_stream": 968, "timestamp_epoch": "1634915581.265992", "display_filter": "tcp.stream == 968" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 334.618, "packets": 136, "wire_bytes": 8216 } }, { "finding_id": "finding-a11bdd34b8499fe7086849e4", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 61387, "tcp_stream": 1254, "timestamp_epoch": "1634916305.874935", "display_filter": "tcp.stream == 1254" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 330.634, "packets": 134, "wire_bytes": 8096 } }, { "finding_id": "finding-5c3b43fdca4945be3516de85", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 67512, "tcp_stream": 1346, "timestamp_epoch": "1634916791.498014", "display_filter": "tcp.stream == 1346" } ], "metrics": { "source": "10.10.22.156", "destination": "45.153.241.142", "destination_port": 443, "duration_seconds": 699.347, "packets": 52, "wire_bytes": 3186 } }, { "finding_id": "finding-3426cee31955e110f7d57224", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 67513, "tcp_stream": 1347, "timestamp_epoch": "1634916791.526839", "display_filter": "tcp.stream == 1347" } ], "metrics": { "source": "10.10.22.156", "destination": "45.153.241.142", "destination_port": 443, "duration_seconds": 699.318, "packets": 54, "wire_bytes": 3306 } }, { "finding_id": "finding-5f9dede2af77370f489e5247", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 69549, "tcp_stream": 1450, "timestamp_epoch": "1634917151.222338", "display_filter": "tcp.stream == 1450" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 331.166, "packets": 132, "wire_bytes": 7976 } }, { "finding_id": "finding-8cb9c129bd6937c3a7eef36d", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 74529, "tcp_stream": 1485, "timestamp_epoch": "1634917460.73518", "display_filter": "tcp.stream == 1485" } ], "metrics": { "source": "10.10.22.156", "destination": "45.153.241.142", "destination_port": 443, "duration_seconds": 30.11, "packets": 19, "wire_bytes": 1120 } }, { "finding_id": "finding-4220077e4a1dbcaf29f61024", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 76852, "tcp_stream": 1559, "timestamp_epoch": "1634917716.942239", "display_filter": "tcp.stream == 1559" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 333.255, "packets": 132, "wire_bytes": 7976 } }, { "finding_id": "finding-359f33c8adbd328fb49f63c3", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 81050, "tcp_stream": 1607, "timestamp_epoch": "1634918141.451196", "display_filter": "tcp.stream == 1607" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 331.75, "packets": 134, "wire_bytes": 8096 } }, { "finding_id": "finding-512418f6412b894737398114", "rule_id": "unclassified-external-tcp", "rule_version": "pcap-rules-v3", "severity": "medium", "title": "Sustained external TCP conversation outside decoded application coverage", "explanation": "The flow exchanges traffic with a public endpoint but has no HTTP/TLS/identity event in this profile. Inspect the stream for a custom protocol or a missing handshake. This is a coverage/investigation lead, not a malware verdict.", "confidence": 0.7, "status": "candidate", "evidence": [ { "frame_number": 83774, "tcp_stream": 1645, "timestamp_epoch": "1634918507.685795", "display_filter": "tcp.stream == 1645" } ], "metrics": { "source": "10.10.22.157", "destination": "37.0.10.22", "destination_port": 1187, "duration_seconds": 91.986, "packets": 41, "wire_bytes": 2522 } } ], "attack_candidates": [], "actor_leads": [], "coverage": { "event_limits": { "dns": { "returned": 2061, "truncated": false }, "http_request": { "returned": 120, "truncated": false }, "http_response": { "returned": 16, "truncated": false }, "tls_client_hello": { "returned": 409, "truncated": false }, "dhcp": { "returned": 6, "truncated": false }, "identity": { "returned": 2199, "truncated": false }, "directory_service": { "returned": 977, "truncated": false }, "unclassified_tcp": { "returned": 6746, "truncated": false } }, "warnings": [], "encrypted_payload_visibility": "metadata-only", "name_resolution": false, "http_objects": { "exported_objects": 6, "hashed_objects": 6, "unique_hashes": 4, "returned_unique_hashes": 4, "detailed_objects": 4, "compact_hash_index": [], "compact_objects": 0, "omitted_unique_hashes": 0, "unhashed_objects": 0, "hashed_bytes": 3072260, "selection": "content-classified first, then size descending, SHA256 tie-break; deduplicated by full hash; overflow retains a compact hash index", "complete": true }, "complete_within_profile": true, "limitations": [ "Encrypted application contents are not decrypted", "Protocol decoding and heuristic findings do not establish malware family or attribution", "No endpoint execution, persistence, or credential-theft proof without corresponding evidence" ] }, "summary": "Decoded 84542 packets across 216 IP endpoints and 2746 transport flows. Observed 2061 DNS events, 120 HTTP requests, 409 TLS ClientHello events, and 4 exported HTTP object(s). Deterministic rules produced 37 finding(s): 0 high, 13 medium, and 24 low. Findings are evidence-bound candidates and require analyst review; encrypted payload contents remain unavailable.", "semantic_sha256": "e2a781b6839946af3b4581e8fbaa850bc68bbe393fce12f786178323e0ccd04d" }, "context": { "schema_version": "pcap-context-v1", "created_at": "2026-09-19T12:10:24.874416+00:00", "session_id": "2b5677d6-f466-4831-89aa-be3126dddaef", "source_semantic_sha256": "e2a781b6839946af3b4581e8fbaa850bc68bbe393fce12f786178323e0ccd04d", "mode": "local-only", "external_enrichment": { "status": "not-requested", "requests": 0, "reason": "Requires explicit provider consent and privacy review" }, "coverage": { "observables_total": 512, "observables_checked": 512, "observable_limit": 5000, "truncated": false, "matched_observables": 0, "no_exact_match": 512, "prior_cases_checked": 14, "prior_case_limit_reached": false }, "matches": [], "source_actor_links": [], "techniques": [], "cross_case_correlations": [ { "analysis_id": "96e0e828-93ae-49d5-8104-9f14cb584c3e", "session_id": "69fc74e8-a685-4c8b-bde3-5ee0bb1190f6", "source_sha256": "91e547acc39e8ef27d7ec549404157fe527e090bd5caf6fe189c2bae6d4a57ef", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "inbound.att.net" }, { "type": "domain", "value": "mail.otenet.gr" }, { "type": "domain", "value": "nexusrules.officeapps.live.com" }, { "type": "domain", "value": "ns0.ovh.net" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "settingsfd-geo.trafficmanager.net" }, { "type": "domain", "value": "smtp-com.netzero.net" }, { "type": "domain", "value": "smtp.forpsi.com" }, { "type": "domain", "value": "smtp.netzero.com" }, { "type": "domain", "value": "smtpa.forpsi.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "domain", "value": "www.microsoft.com" }, { "type": "ipv4", "value": "13.107.21.200" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "193.70.18.144" }, { "type": "ipv4", "value": "204.79.197.200" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "62.103.147.201" }, { "type": "ipv4", "value": "64.136.44.50" }, { "type": "ipv4", "value": "64.136.52.50" }, { "type": "ipv4", "value": "66.163.170.35" }, { "type": "ipv4", "value": "81.2.195.204" } ], "shared_count": 31, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "6e50c68f-5552-400c-9835-15867ddb022d", "session_id": "91100160-1a16-4165-bf1d-6b5876fb4e11", "source_sha256": "a86b11ee443ee59d95e4590bdf761235c5d240128d6d195233d065ab57777e8b", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "fe2cr.update.microsoft.com" }, { "type": "domain", "value": "fe3cr.delivery.mp.microsoft.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "self.events.data.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "settingsfd-geo.trafficmanager.net" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "wpad.localdomain" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.107.21.200" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.50.80.210" }, { "type": "ipv4", "value": "204.79.197.200" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "52.183.220.149" } ], "shared_count": 25, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "43bc93eb-d6db-4400-b983-b0dd404c8ca4", "session_id": "bfa8693a-227f-4f5d-8e70-aff8c425ac42", "source_sha256": "eefc7e61b50e7846f5a3282d7645539d7b2b4b85aa08a09d0b823896c9449d1f", "shared_observables": [ { "type": "domain", "value": "a-ring.msedge.net" }, { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "b-ring.msedge.net" }, { "type": "domain", "value": "c-ring.msedge.net" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "fe2cr.update.microsoft.com" }, { "type": "domain", "value": "fe3cr.delivery.mp.microsoft.com" }, { "type": "domain", "value": "fp-afd.azurefd.us" }, { "type": "domain", "value": "fp-as.azureedge.net" }, { "type": "domain", "value": "imap.gmail.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "nexusrules.officeapps.live.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "prod.nexusrules.live.com.akadns.net" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "self.events.data.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "wpad.localdomain" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.107.21.200" }, { "type": "ipv4", "value": "13.107.246.254" }, { "type": "ipv4", "value": "13.107.4.254" }, { "type": "ipv4", "value": "13.107.6.254" }, { "type": "ipv4", "value": "13.89.178.27" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "20.50.80.210" }, { "type": "ipv4", "value": "204.79.197.200" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "204.79.197.254" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.12" }, { "type": "ipv4", "value": "40.126.28.13" }, { "type": "ipv4", "value": "40.126.28.14" }, { "type": "ipv4", "value": "40.126.28.18" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.28.20" }, { "type": "ipv4", "value": "40.126.28.21" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.28.23" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.12" }, { "type": "ipv4", "value": "40.126.29.13" }, { "type": "ipv4", "value": "40.126.29.15" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.126.29.9" }, { "type": "ipv4", "value": "40.126.7.32" }, { "type": "ipv4", "value": "40.126.7.35" }, { "type": "ipv4", "value": "40.97.199.114" }, { "type": "ipv4", "value": "52.109.76.31" }, { "type": "ipv4", "value": "52.109.8.20" }, { "type": "ipv4", "value": "52.183.220.149" }, { "type": "ipv4", "value": "52.185.211.133" }, { "type": "ipv4", "value": "52.96.122.242" }, { "type": "ipv4", "value": "52.96.191.98" }, { "type": "ipv4", "value": "72.21.81.200" } ], "shared_count": 69, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "6df36b51-4b44-4660-b534-2fa89705e807", "session_id": "2571013a-e926-41d7-b13c-b180a0720a96", "source_sha256": "d9b67e18bca13cf6135874fd81d167403c7cb6b8a422679948db914e9959b90d", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "fp-vs-nocache.azureedge.net" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "nexusrules.officeapps.live.com" }, { "type": "domain", "value": "prod.nexusrules.live.com.akadns.net" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "spo-ring.msedge.net" }, { "type": "domain", "value": "t-ring.msedge.net" }, { "type": "domain", "value": "teams-ring.msedge.net" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "domain", "value": "x1.c.lencr.org" }, { "type": "ipv4", "value": "13.107.136.254" }, { "type": "ipv4", "value": "13.107.21.200" }, { "type": "ipv4", "value": "13.107.246.254" }, { "type": "ipv4", "value": "13.107.42.16" }, { "type": "ipv4", "value": "13.89.179.10" }, { "type": "ipv4", "value": "13.89.179.9" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.44.10.123" }, { "type": "ipv4", "value": "204.79.197.200" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "52.109.8.20" }, { "type": "ipv4", "value": "52.113.196.254" }, { "type": "ipv4", "value": "52.182.143.210" }, { "type": "ipv4", "value": "52.183.220.149" }, { "type": "ipv4", "value": "52.185.211.133" }, { "type": "ipv4", "value": "72.21.81.200" } ], "shared_count": 37, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "29aa3ef8-47c9-4c47-b4cc-1ff3e0708142", "session_id": "ce8cf5b8-2927-4b30-804c-2fedaec840f1", "source_sha256": "c48854c24223cf7b4e9880ea72a21a877e4138e4ce36df7b7656e5c6c4043f68", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.107.42.16" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.13" }, { "type": "ipv4", "value": "40.126.29.14" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.97.199.114" }, { "type": "ipv4", "value": "52.96.121.130" }, { "type": "ipv4", "value": "52.96.57.2" } ], "shared_count": 27, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "b79032a8-d69e-4ac1-bdd4-542473fa8e3b", "session_id": "a894fbbc-d0d5-4309-bd04-2eda8773adfa", "source_sha256": "e154de6895c5f0a9edd07b1279b33014507236dbb44a449790c255b87a327a3c", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "c-ring.msedge.net" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "fe2cr.update.microsoft.com" }, { "type": "domain", "value": "fe3cr.delivery.mp.microsoft.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.107.4.254" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "204.79.197.219" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.12" }, { "type": "ipv4", "value": "40.126.29.13" }, { "type": "ipv4", "value": "40.126.29.15" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.126.29.9" } ], "shared_count": 30, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "faf041c3-70e0-4a01-8780-10917e5e187c", "session_id": "df6c55a2-3630-4e95-82d0-0eebb41c3b51", "source_sha256": "8fee06d0b1686faab4364f5b7a741e736ad7e713d5ca9299ff9161a4b4d4862e", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "www.bing.com" }, { "type": "domain", "value": "x1.c.lencr.org" }, { "type": "ipv4", "value": "13.89.179.9" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.12" }, { "type": "ipv4", "value": "40.126.28.13" }, { "type": "ipv4", "value": "40.126.28.18" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.28.20" }, { "type": "ipv4", "value": "40.126.28.21" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.28.23" }, { "type": "ipv4", "value": "40.126.7.32" }, { "type": "ipv4", "value": "40.126.7.35" } ], "shared_count": 27, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "08324647-35af-4af2-8d82-4387eec03918", "session_id": "426471ed-5e63-4b7e-ac6c-d36e060a4739", "source_sha256": "a38267943a7bf3b0e445d7e51cb0a68b3dee797d67081bc9a033f73d079c0f50", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "fe3cr.delivery.mp.microsoft.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.14" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.29.9" }, { "type": "ipv4", "value": "40.126.7.32" } ], "shared_count": 22, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "616a90fa-f15e-4fcb-8d56-7b8e0eff5785", "session_id": "1ea146b9-1fb6-4be9-8adc-154756a8642c", "source_sha256": "21bb800849459709a7ceb5513573b2b20f090ffccd00eb89b9886feedd47a2df", "shared_observables": [ { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "104.208.16.94" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.28.20" }, { "type": "ipv4", "value": "40.126.28.21" }, { "type": "ipv4", "value": "40.126.28.23" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.14" }, { "type": "ipv4", "value": "40.126.7.35" } ], "shared_count": 16, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "459e119d-191f-49e8-85ea-c78f9de41826", "session_id": "45dead98-56f7-41bd-bcd0-62bcf13e9f9b", "source_sha256": "0ea6b597732a9ce6af9a7e3adff4512c9a91b4bce27184c8fdeb746f05cce170", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "fe2cr.update.microsoft.com" }, { "type": "domain", "value": "imap.gmail.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.22" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.28.23" } ], "shared_count": 22, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "7a2cfe72-f48d-4894-8a2d-8889cb3b11b2", "session_id": "d201ef05-c1ff-4b51-bfb6-594810367b62", "source_sha256": "3dc470f5490ec15b4024c513e87c67e0b17caeae2a2ce3d83541be24ef407e61", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "self.events.data.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.89.178.27" }, { "type": "ipv4", "value": "13.89.179.9" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.12" }, { "type": "ipv4", "value": "40.126.28.13" }, { "type": "ipv4", "value": "40.126.28.14" }, { "type": "ipv4", "value": "40.126.28.18" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.28.20" }, { "type": "ipv4", "value": "40.126.28.21" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.28.23" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.12" }, { "type": "ipv4", "value": "40.126.29.13" }, { "type": "ipv4", "value": "40.126.29.14" }, { "type": "ipv4", "value": "40.126.29.15" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.126.29.9" }, { "type": "ipv4", "value": "40.126.7.32" }, { "type": "ipv4", "value": "40.126.7.35" }, { "type": "ipv4", "value": "52.183.220.149" }, { "type": "ipv4", "value": "52.185.211.133" } ], "shared_count": 43, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "81373b30-6a59-49d1-89b0-bad73ed19eaa", "session_id": "28d700f9-1f64-46d0-ab25-5dd6123537fa", "source_sha256": "f755444d0b6eac847e07b73dea0774084b232d8577f536547a12f39b959d7833", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.15" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.126.29.9" } ], "shared_count": 24, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "38851ad7-b3a0-423d-ae89-3b7be4e4b908", "session_id": "d001b3fc-7e55-401a-8bb6-381e0c10fbda", "source_sha256": "33e274d7246f4eca8fbe7337c465c7ded077cd650d5d4d42481cad822c962741", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "k-ring.msedge.net" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "teams-ring.msedge.net" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "ipv4", "value": "13.107.18.254" }, { "type": "ipv4", "value": "13.107.42.16" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.28.12" }, { "type": "ipv4", "value": "40.126.28.14" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.12" }, { "type": "ipv4", "value": "40.126.29.13" }, { "type": "ipv4", "value": "40.126.29.14" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.9" }, { "type": "ipv4", "value": "52.113.196.254" } ], "shared_count": 34, "status": "shared-observation-not-common-campaign" }, { "analysis_id": "bfccc426-aa9b-4007-8558-a66d37ecb90c", "session_id": "bc2c808d-5171-4ed5-9832-5cbf7c3a8866", "source_sha256": "e59db1c07c6fdefafa0abdbca03248c341cdc36c09c34753204d3162802a3586", "shared_observables": [ { "type": "domain", "value": "api.msn.com" }, { "type": "domain", "value": "client.wns.windows.com" }, { "type": "domain", "value": "config.edge.skype.com" }, { "type": "domain", "value": "ctldl.windowsupdate.com" }, { "type": "domain", "value": "dns.msftncsi.com" }, { "type": "domain", "value": "edge.microsoft.com" }, { "type": "domain", "value": "fe2cr.update.microsoft.com" }, { "type": "domain", "value": "login.live.com" }, { "type": "domain", "value": "login.microsoftonline.com" }, { "type": "domain", "value": "odc.officeapps.live.com" }, { "type": "domain", "value": "pti.store.microsoft.com" }, { "type": "domain", "value": "settings-win.data.microsoft.com" }, { "type": "domain", "value": "v10.events.data.microsoft.com" }, { "type": "domain", "value": "v20.events.data.microsoft.com" }, { "type": "domain", "value": "wns.notify.trafficmanager.net" }, { "type": "domain", "value": "www.bing.com" }, { "type": "domain", "value": "www.microsoft.com" }, { "type": "ipv4", "value": "13.107.42.16" }, { "type": "ipv4", "value": "131.107.255.255" }, { "type": "ipv4", "value": "20.190.157.11" }, { "type": "ipv4", "value": "204.79.197.203" }, { "type": "ipv4", "value": "224.0.0.251" }, { "type": "ipv4", "value": "224.0.0.252" }, { "type": "ipv4", "value": "239.255.255.250" }, { "type": "ipv4", "value": "40.126.28.11" }, { "type": "ipv4", "value": "40.126.28.12" }, { "type": "ipv4", "value": "40.126.28.18" }, { "type": "ipv4", "value": "40.126.28.19" }, { "type": "ipv4", "value": "40.126.28.20" }, { "type": "ipv4", "value": "40.126.28.21" }, { "type": "ipv4", "value": "40.126.28.22" }, { "type": "ipv4", "value": "40.126.28.23" }, { "type": "ipv4", "value": "40.126.29.10" }, { "type": "ipv4", "value": "40.126.29.11" }, { "type": "ipv4", "value": "40.126.29.12" }, { "type": "ipv4", "value": "40.126.29.14" }, { "type": "ipv4", "value": "40.126.29.15" }, { "type": "ipv4", "value": "40.126.29.5" }, { "type": "ipv4", "value": "40.126.29.7" }, { "type": "ipv4", "value": "40.126.29.8" }, { "type": "ipv4", "value": "40.126.29.9" }, { "type": "ipv4", "value": "40.126.7.32" }, { "type": "ipv4", "value": "40.126.7.35" } ], "shared_count": 43, "status": "shared-observation-not-common-campaign" } ], "interpretation": "No match means unknown in this corpus. Local CTI may postdate the capture. Matches and shared infrastructure require review; no automatic promotion or attribution.", "snapshot_sha256": "5222f776b8c48e86a0c8622f8a6c5757c219009df704244b52c91467fdafc237" }, "techniques": [], "apt_matches": [] }